last executing test programs: 3m57.932568901s ago: executing program 1 (id=1113): r0 = socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x7e, @private1={0xfc, 0x1, '\x00', 0xfd}, @local, {[], {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x4, 0x100}, &(0x7f0000000080)=0x8) mmap(&(0x7f00006c5000/0x1000)=nil, 0x1000, 0xe, 0x11, r0, 0x6b128000) socket$rds(0x15, 0x5, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/keys\x00', 0x0, 0x0) pread64(r1, &(0x7f00000013c0)=""/224, 0xe0, 0x8d35) 3m57.747004161s ago: executing program 1 (id=1118): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000ac0)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000bc0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=ANY=[@ANYBLOB="60fe0f0054000500010000000000000007000000", @ANYRES32=r1, @ANYBLOB="20000100", @ANYRES32=r2, @ANYBLOB="01000000ef010101000000000000000000000000080000002800028005000300010000001c0002"], 0x60}}, 0x0) 3m57.510818378s ago: executing program 1 (id=1119): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x200000c0, 0xffffffff, 0x4000, 0xcb}, 0x10) unshare(0x24020400) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@ipv4_newroute={0x1c, 0x1a, 0x300, 0x70bd29, 0x0, {0x2, 0x20, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x2000}}, 0x1c}, 0x1, 0x0, 0x0, 0x850}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, 0x0, &(0x7f0000000340)=0x2) 3m57.269919763s ago: executing program 1 (id=1120): r0 = socket(0x10, 0x5, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004084}, 0x480c4) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x4}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x6, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x4, 0x206, 0x4}]}}]}}]}, 0x5c}}, 0x24040084) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4880) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r5, 0x1c, 0x0, @in6={0xa, 0x4e20, 0x9, @private1, 0x8}}}, 0x90) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x100000, 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x89901) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000680)='\x00', 0x89901) move_mount(r9, &(0x7f00000006c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x0) syz_mount_image$fuse(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x29002c, &(0x7f00000007c0)=ANY=[], 0x1, 0x0, 0x0) move_mount(r8, 0x0, 0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', 0x24) mount$fuse(0x0, &(0x7f0000000840)='./file0\x00', 0x0, 0x88000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', 0x89901) umount2(&(0x7f00000008c0)='./file0\x00', 0x2) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000a00)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000a80)="b7f2c1ee3aaea2bc0000def1260a0000000000870000000000000000000000e9cc623e4e76d354b0405479c3ab492d7dec3804b36d191392996c3d7942493da7ed4eb24469a98571c0009befe97a646bdb7e60201a5da5f89d7b6f6497cd1b7b85e7a9ec73d4aa8ef0cf93e2d111d4e637be2fb777e28006f975f6831313940f177dbba9bd6cb9", 0x30) mount$fuse(0x0, &(0x7f0000000900)='./file0\x00', &(0x7f0000000940), 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r6, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$P9_RLERRORu(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="110000000701000400753332000008000000000000001f8e766e1179810759f023bde34b335ad2339520f7ac2ffa7b16e3cff4634c1c9580d157fbf32a34a2c6b17213e1bb42b1f3c7865d021aaa7d0145140db67891fc42f13d5a5dd87f286460416ced65f8594859fcb42876ddadb007fb2acf2550b631c28d8cbace0a463c873d0ceb5069c319"], 0x11) 3m56.669039431s ago: executing program 1 (id=1123): syz_emit_ethernet(0x279, &(0x7f0000000d40)={@local, @multicast, @void, {@ipv6={0x86dd, @esp={0x1, 0x6, "3c890b", 0x243, 0x32, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, {[@hopopts={0x33, 0x5, '\x00', [@enc_lim={0x4, 0x1, 0x8}, @ra={0x5, 0x2, 0x2002}, @calipso={0x7, 0x20, {0x1, 0x6, 0x81, 0x4, [0x4, 0x8, 0x4]}}, @ra={0x5, 0x2, 0xa}]}, @dstopts={0x3c}, @routing={0x0, 0x2, 0x1, 0x7, 0x0, [@mcast1]}, @fragment={0x84, 0x0, 0x2, 0x1, 0x0, 0x10, 0x65}, @srh={0xff, 0xe, 0x4, 0x7, 0x7, 0x8, 0x3, [@dev={0xfe, 0x80, '\x00', 0xf}, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, @local, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @empty]}, @srh={0x1, 0x6, 0x4, 0x3, 0x1, 0x28, 0x2, [@private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}], {0x4d6, 0x0, @basic={0x0, 0x0, 0x9e, [@runt="60147452ce156be5f3cbdaf50e8fbe1a9c50c1e55bebfb4a6d", @ipv4=@icmp={{0x31, 0x4, 0x0, 0x5, 0x109, 0x68, 0x0, 0x8, 0x1, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x30}, {[@rr={0x7, 0x17, 0x11, [@broadcast, @multicast2, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}, @lsrr={0x83, 0x13, 0x22, [@remote, @rand_addr=0x64010100, @rand_addr=0x64010102, @local]}, @ssrr={0x89, 0xf, 0x94, [@local, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x53, 0xffffffffffffffff, [{0x5, 0xf, "5ba98c7c119e3a5897f81c944f"}, {0x2, 0x7, "d6e22e4c01"}, {0x6, 0x12, "2b410b39f6ef324f77d31838e6df5b9a"}, {0x1, 0xe, "b17ed030406fcb7540de7947"}, {0x7, 0xb, "30e7ea6895b715736d"}, {0x7, 0x8, "2e60e5f6b189"}, {0x3, 0x4, "a122"}]}, @timestamp_addr={0x44, 0xc, 0xd, 0x1, 0x2, [{@local, 0xffff}]}, @noop, @rr={0x7, 0x17, 0x51, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @broadcast, @empty]}]}}, @echo_reply={0x0, 0x0, 0x0, 0x65, 0x4, "f671767f3426381577c98095b94f4c747d600d97bc26710bfdefefd33f6938665c07c813994dc5cf815abbb187e1943e92bf79cb573f5178ef00239dd5"}}]}, "1d2828", 0x3}}}}}}, 0x0) 3m56.044974255s ago: executing program 1 (id=1128): r0 = socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x7e, @private1={0xfc, 0x1, '\x00', 0xfd}, @local, {[], {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x4, 0x100}, &(0x7f0000000080)=0x8) mmap(&(0x7f00006c5000/0x1000)=nil, 0x1000, 0xe, 0x11, r0, 0x6b128000) socket$rds(0x15, 0x5, 0x0) add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000013c0)=""/224, 0xe0, 0x8d35) 3m55.455944412s ago: executing program 32 (id=1128): r0 = socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x7e, @private1={0xfc, 0x1, '\x00', 0xfd}, @local, {[], {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x4, 0x100}, &(0x7f0000000080)=0x8) mmap(&(0x7f00006c5000/0x1000)=nil, 0x1000, 0xe, 0x11, r0, 0x6b128000) socket$rds(0x15, 0x5, 0x0) add_key(&(0x7f00000002c0)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) pread64(r1, &(0x7f00000013c0)=""/224, 0xe0, 0x8d35) 3m51.261724576s ago: executing program 3 (id=1143): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000080)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000100), 0x318, 0x0) recvmmsg(r0, &(0x7f0000000140), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r2 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) unshare(0x20060400) r3 = openat$kvm(0x0, &(0x7f00000001c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = eventfd(0x3) r6 = geteuid() quotactl$Q_SETINFO(0xffffffff80000602, 0x0, r6, &(0x7f0000000200)={0x3, 0x6, 0x0, 0x3}) r7 = gettid() syz_open_procfs(r7, &(0x7f0000000240)='stat\x00') ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000280)={0x5, 0x3000, 0x0, r5, 0x4}) r8 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) fcntl$setsig(r2, 0xa, 0x28) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000480)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@private2, @in=@private=0xa010100, 0x4e22, 0x0, 0x4e24, 0x5, 0xa, 0x20, 0x80}, {0x10, 0x1, 0x1000, 0x4, 0xe1, 0x5, 0xffffffffffffffff, 0x10001}, {0x6, 0x796f, 0x9, 0xd58}, 0x0, 0x0, 0x3, 0x1, 0x3, 0x2}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x34}, 0x4d5, 0x6c}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, 0x3501, 0x0, 0x1, 0xfe, 0x9, 0x9, 0x7}}, 0xe4) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) write$sysctl(r10, &(0x7f0000000440)='1\x00', 0x1) 3m48.418530104s ago: executing program 3 (id=1158): rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) (async) io_setup(0x401, &(0x7f00000001c0)=0x0) rseq(&(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x6, 0xba2, 0xf8a6}}, 0x20, 0x0, 0x0) (async) io_pgetevents(r0, 0x4, 0x4a6d730c7316a803, &(0x7f0000000240)=[{}, {}, {}, {}], &(0x7f0000000080)={0x0, 0x989680}, &(0x7f0000000000)={&(0x7f00000000c0), 0x8}) 3m48.104350683s ago: executing program 3 (id=1159): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001140)={0x14c, r1, 0x1, 0xffffffff, 0x8000000, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xac, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xa6, 0x4, "c96b32a13bab0749e5f84171184bf6129691c993f8d9b7f0c2446ab4464131d8571dcf0647b5310e011fcdafd90e313cdb354562d57b5ac52a10edd389672a21f8aa92ff7b38e944e167699f97e9f04f3bb327ad42b6f5e0cfe83777e800c8d0bcd7bbfc9cad1938dc49c50421865538226e9b0e5e98b6c3e571685a62a2f318a223220077fcc0243e5cfa51eaeaebfe0a4641cb44201de13dcb0a97c916520bba1c"}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5f}]}, @ETHTOOL_A_FEATURES_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}]}, 0x14c}}, 0x0) 3m47.989775284s ago: executing program 3 (id=1160): r0 = socket(0x10, 0x5, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004084}, 0x480c4) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x4}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x6, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x4, 0x206, 0x4}]}}]}}]}, 0x5c}}, 0x24040084) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4880) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r5, 0x1c, 0x0, @in6={0xa, 0x4e20, 0x9, @private1, 0x8}}}, 0x90) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000600)='./file0\x00', 0x0, 0x100000, 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00', 0x89901) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000680)='\x00', 0x89901) move_mount(r9, &(0x7f00000006c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x0) syz_mount_image$fuse(&(0x7f0000000740), &(0x7f0000000780)='./file0\x00', 0x29002c, &(0x7f00000007c0)=ANY=[], 0x1, 0x0, 0x0) move_mount(r8, 0x0, 0xffffffffffffff9c, &(0x7f0000000800)='./file0\x00', 0x24) mount$fuse(0x0, &(0x7f0000000840)='./file0\x00', 0x0, 0x88000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', 0x89901) umount2(&(0x7f00000008c0)='./file0\x00', 0x2) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000a00)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000a80)="b7f2c1ee3aaea2bc0000def1260a0000000000870000000000000000000000e9cc623e4e76d354b0405479c3ab492d7dec3804b36d191392996c3d7942493da7ed4eb24469a98571c0009befe97a646bdb7e60201a5da5f89d7b6f6497cd1b7b85e7a9ec73d4aa8ef0cf93e2d111d4e637be2fb777e28006f975f6831313940f177dbba9bd6cb9", 0x30) mount$fuse(0x0, &(0x7f0000000900)='./file0\x00', &(0x7f0000000940), 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r6, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$P9_RLERRORu(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="110000000701000400753332000008000000000000001f8e766e1179810759f023bde34b335ad2339520f7ac2ffa7b16e3cff4634c1c9580d157fbf32a34a2c6b17213e1bb42b1f3c7865d021aaa7d0145140db67891fc42f13d5a5dd87f286460416ced65f8594859fcb42876ddadb007fb2acf2550b631c28d8cbace0a463c873d0ceb5069c319"], 0x11) 3m46.933296234s ago: executing program 3 (id=1163): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000100)=[{0x0}], 0x1) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000180)=[{{&(0x7f00000001c0)={0x2, 0x4e26, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0xfffffffffffffe88}}], 0x1, 0x8014) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xffff}, {0x1, 0x2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x8000, 0x8f, 0x0, 0x3ff}, 0xe3, 0x1, 0x1, 0x7, 0xff7, 0xc, 0x1, 0x10, 0x7, 0x7, {0x6, 0xfff, 0x10, 0xffff, 0x69f, 0x8}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40004}, 0x0) socket$netlink(0x10, 0x3, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='freezer.state\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x8) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000840)='./file0\x00', &(0x7f0000000880), 0x210003, &(0x7f00000008c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f0000006c00)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) statx(0xffffffffffffff9c, &(0x7f0000002980)='./file0/file0/file0\x00', 0x2000, 0x7ff, 0x0) write$FUSE_INIT(r1, &(0x7f00000029c0)={0x50, 0x0, r2, {0x7, 0x2d, 0x4, 0x10000000, 0x7, 0x5, 0x400, 0xa, 0x0, 0x0, 0x1, 0x1000003}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000002a40)="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", 0x2000, &(0x7f0000004a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004ac0)={0x90, 0x0, 0x6, {0x3, 0x0, 0x7fffffff, 0x1fffffffffffd, 0x400, 0xc, {0x6, 0x9, 0x8, 0x1, 0x1, 0x4, 0x8, 0x123, 0xdab5, 0xa000, 0xfffffffe, r3, r4, 0x6, 0xffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r1, &(0x7f0000004b80)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000006bc0)={0x10, 0x0, r5}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 3m46.47220266s ago: executing program 3 (id=1164): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000f00000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000004085000000820000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x0, 0x10, 0x38, &(0x7f0000000340)="0000000000000080", &(0x7f0000000380)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r3 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@fallback=r3, r2, 0x1f, 0x2004}, 0x20) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x25dfdbfb, {0xa, 0x80, 0x80}, [@RTA_PRIORITY={0x8, 0x6, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 3m45.964147733s ago: executing program 33 (id=1164): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000f00000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000004085000000820000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x0, 0x10, 0x38, &(0x7f0000000340)="0000000000000080", &(0x7f0000000380)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r3 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@fallback=r3, r2, 0x1f, 0x2004}, 0x20) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x25dfdbfb, {0xa, 0x80, 0x80}, [@RTA_PRIORITY={0x8, 0x6, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 12.586260645s ago: executing program 2 (id=2393): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @loopback}, 0x10) syz_emit_ethernet(0x42, &(0x7f00000004c0)={@link_local={0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371"}}}}}, 0x0) 12.298122059s ago: executing program 2 (id=2395): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x2f, 0x5, 0x2, 0xb30, 0x19, @remote, @remote, 0x700, 0x7800, 0xa, 0x1}}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000a40)={{{@in=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@private2}}, &(0x7f0000000000)=0xe4) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@mcast1, @in=@multicast2, 0x4e23, 0x0, 0x4e23, 0xc0ad, 0xa, 0x20, 0x80, 0x67, r1, r2}, {0xc, 0x7, 0xdb, 0x7, 0x2, 0x3, 0x7, 0xd98}, {0x3, 0x9, 0x51, 0x3}, 0x68eb, 0x6e6bbd, 0x0, 0x0, 0x1, 0x3}, {{@in=@private=0xa010100, 0x4d0, 0xff}, 0x2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3504, 0x1, 0x0, 0x9, 0x82, 0xe, 0x5}}, 0xe4) syz_usb_connect$cdc_ncm(0x6, 0x88, &(0x7f0000000040)=ANY=[@ANYBLOB="12015002020000002505a1a44000010203010902760002010420040904"], 0x0) r3 = syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="03010000a1121710950b2a17f4f701020301090212000100000000f67151f3cb17518af3664da2d71daa21cfc2a0d6f4958cf782cb20fc74deac812a6c4f89b5149eaa86ec6afea0c76d511ab3e9f1c09ef0709a1c3819056608d76e8487dd8a486a8b80bc75097c44582a593fca8be4bfd8b158ae09d92b1bfcc9a99ac1d7eb99434d66c1c836d7a7f5c4d132708fed12260dae5c401845f73bdecbf91a13f646d3742cd78c9a8702c25881e3541bb16b5ef50e50d1b4e5b1e796af5a807df8c6d76bef654ae3"], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005977090000000000000000000001090212000100000000"], 0x0) syz_usb_disconnect(r3) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[], 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001e40)={&(0x7f0000000b40)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="47b0bde07c6a8dbd9192249b60b5ac06cce5311cb41cf957e6a9654b9abc01b71bed66881cf28741ff92e22e766ce169ac17cf2c82c1baf11e5404f3bb6102ed99e88edee1ec456c8cec2527d9edda163e9f3d7f6e720af62d6a3ad2689ddbec4edb82b9331b491a6b869bcd2fbb0d6f2cec70bc82f2f6690d19eebd318f32d08939bd1e02a7836bd3551421316851876e92ecdce2b06635802a34c9fa012d662ce24bcee23483464abfadc50d7c7d43442c7e9f47741932a3f374d700c2505cb7a86eca69c3f20ff495f807b95402ba8abf588a00"/222], 0x12d8}}, 0x10008000) socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x28f43000) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000240), 0x10106, 0x2, 0x0) r4 = syz_ublk_setup_io_uring(0x331e, &(0x7f0000000280)={0x0, 0xd628, 0x2, 0x3, 0x1bb}, &(0x7f0000000340), &(0x7f0000000380), &(0x7f0000000640)) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.cpu/test\x00', 0x777) r5 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x2, 0x0) write(r5, &(0x7f0000000700)='100000', 0x6) r6 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r6, &(0x7f0000000780)='1', 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r7, &(0x7f0000000800)='0', 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000840)) openat(r5, &(0x7f00000008c0)='./file0\x00', 0x44042, 0x11) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f0000000900)={0x0, 0x1, 0x2, 0x0, @vifc_lcl_ifindex, @local}, 0x10) syz_ublk_setup_io_uring(0x7384, &(0x7f0000000940)={0x0, 0x8557, 0x400, 0x2, 0x6, 0x0, r4}, 0x0, &(0x7f00000009c0), &(0x7f0000000a00)) 8.942341211s ago: executing program 6 (id=2407): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bridge_slave_1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) r2 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000044e22008d31324320dcb010c03010902120001040020000904"], 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x24, r4, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}]}, 0x24}, 0x1, 0x0, 0x0, 0x2004c840}, 0x840) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000380)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000023, 0x13, r6, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0xeaac6000) syz_usb_control_io(r2, &(0x7f0000000400)={0x18, &(0x7f0000000440)={0x20, 0x4, 0x7f, {0x7f, 0x9, "bbb1d4f6d9e052ae2f051d1ee654624376f57da2a9b98e666439e914d8d2e7e19bf1664869b8b4569931332141b6fd0fdcd9abcad032de073229a155983ec15ad037ef1f8a88e11c5552c90daa607c83687582c2e06aecc7dc6b859016f69b90054bd7fff123398a84a97027a7fa1d0c655c28098386b91b57c4fff637"}}, &(0x7f0000000500)={0x0, 0x3, 0x12, @string={0x12, 0x3, "0e02486f7b248c99023bb17f86d49bea"}}, &(0x7f0000000540)={0x0, 0xf, 0x95, {0x5, 0xf, 0x95, 0x5, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x1a, 0x0, 0xcb, 0x5, 0x4, 0x4}, @ssp_cap={0x24, 0x10, 0xa, 0xff, 0x6, 0x101, 0x0, 0x6, [0x5f18, 0x3f00, 0x30, 0x0, 0x1fb0, 0xf0]}, @ssp_cap={0xc, 0x10, 0xa, 0xa, 0x0, 0x100, 0xff00, 0xffff}, @generic={0x52, 0x10, 0x3, "ae47d2c32edafbd6eeb828334abb81c9cd7fa0d08b8c8854de3ae521a855f812e87affd30abb050f242212539b973300f8b98e6d26212939f93b76389a232152d84056adab13063341bf2a3f8ac531"}]}}, 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) r7 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r7, 0x40045402, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000bc0)={{0x1, 0x0, 0x8, 0x2, 0x2000}}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r8, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=ANY=[@ANYBLOB="2400000004214d872cf2fa080500000000006f000000000000000005000300060000000600024000000000"], 0x24}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r7, 0x40505412, &(0x7f0000000cc0)={0x7, 0x8f11, 0x200, 0x0, 0xf}) close(r7) mremap(&(0x7f00003f1000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) r9 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000d40)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000d80)=0x1c, 0xc0000) bind$inet6(r9, &(0x7f0000000dc0)={0xa, 0x4e22, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000e00)=0x1, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000e40), 0x141000, 0x0) 8.487333746s ago: executing program 4 (id=2411): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1400000010000100000000000e0000000200000a20000000000a01040000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000090000000060a01240000000000000000020000000900010073797a30000000000900020073797a300000000064000480600001800b0001007461726765740000500002800e00010049444c4554494d45520000"], 0x104}}, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r0, r0, 0x0, 0x20000005) connect(0xffffffffffffffff, &(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x65, @dev={0xfe, 0x80, '\x00', 0x9}, 0x1, 0x1}, 0x80) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) sched_getattr(0x0, 0x0, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4004) sendmsg$nl_xfrm(r2, 0x0, 0x987a3a9f32358a4c) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6_tcp(0xa, 0x1, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000bc0)={'syz1\x00', {0x5, 0x4, 0x0, 0x13fb}, 0x25, [0x10, 0x5, 0xb, 0x0, 0x5, 0x83, 0xd2, 0x80000000, 0x10001, 0x9, 0xde2, 0x6, 0xfffffffb, 0x10, 0x2, 0x0, 0x1ff, 0xc, 0x68a, 0x2, 0x1, 0x7fff, 0x5c5f, 0x4, 0x0, 0x9, 0x9, 0x3ff, 0xd9, 0x1, 0x1, 0x32, 0x7fff, 0x7f, 0x1, 0x81, 0x8fe, 0x5, 0x6, 0x1000, 0x7, 0xc51, 0x7, 0x3, 0xd, 0x5, 0x0, 0x1, 0x7f, 0x1, 0x2, 0x3, 0x0, 0x0, 0xffffffff, 0xe4, 0x6, 0xf9, 0xffffffff, 0x1000, 0x0, 0x5, 0x0, 0x5], [0x7, 0x0, 0x1b08000, 0xffffffff, 0xcc65, 0x5, 0x4, 0x602e, 0x9, 0x9, 0x9, 0x4, 0x2, 0xcc, 0xfff, 0x9, 0x200, 0x800, 0x8, 0x5, 0x6, 0x4, 0x5, 0x3, 0x8, 0x3, 0x80, 0x3, 0xffff, 0x0, 0x6, 0x7fff, 0x8, 0x21, 0x800, 0x0, 0xfb23, 0x0, 0x40, 0x5, 0x3, 0x5, 0x7, 0x8000, 0x9, 0x5, 0x7b5, 0x4, 0x2, 0x10, 0x0, 0x69a0, 0x8b3, 0x8, 0x100, 0xfffffffb, 0x80000001, 0x4, 0x8, 0x6693, 0x5, 0xae, 0x52, 0x9], [0x69, 0x7, 0x0, 0xfffffff9, 0x4, 0xa957, 0x6, 0x3, 0xc0, 0x2, 0x322c, 0x2, 0x9, 0xc3, 0x2, 0x0, 0x26, 0x1, 0x4, 0x7, 0x400, 0x10000, 0x7, 0x0, 0xb, 0x8, 0x4, 0xfffffffe, 0x0, 0xdd, 0x4, 0x7fff, 0x249a, 0x58b4, 0x0, 0x9, 0xc, 0xfffffff9, 0x3, 0xfffff801, 0x82, 0x6, 0x4, 0xfa0, 0x9, 0x1, 0xfffffffb, 0xffffffff, 0xc57, 0x6d, 0x8, 0x1, 0x0, 0x2, 0xa, 0xfffffff9, 0x5, 0x8, 0x8, 0x9, 0x7, 0x0, 0x101, 0xfffffffd], [0x4f, 0xca4, 0x82c, 0x2, 0x5, 0x9, 0x5, 0x4, 0xc, 0x2, 0x8, 0x484e, 0x81, 0x0, 0x6, 0x0, 0x8, 0x9, 0x1, 0x6, 0x1, 0x5, 0x95f, 0x97, 0x8b9, 0xffff6b6a, 0x227, 0x6, 0xfff, 0x5, 0x1, 0xffff7fff, 0x2, 0x80008, 0x6, 0x8, 0x10, 0x1, 0x1, 0x9, 0xa8e, 0x3, 0x8001, 0x1, 0x0, 0x7, 0x401, 0x2c37d4c4, 0x0, 0x4d, 0xf, 0xa, 0x7ff, 0xffffffff, 0xffff4b40, 0x3, 0x2, 0x1, 0x900, 0x6, 0x7, 0xfff, 0xa]}, 0x45c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r3}, 0x38) 8.357381123s ago: executing program 5 (id=2412): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0x6) r1 = gettid() r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80800) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000200)={{0x2, 0x1, 0xfffffffa, 0x0, 0xd}}) read(r2, &(0x7f0000000280)=""/95, 0x5f) timer_create(0x0, &(0x7f0000000300)={0x0, 0x100021, 0x800000000004, @tid=r1}, &(0x7f0000000340)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'lo\x00'}) sendmsg$nl_route_sched(r3, 0x0, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000400)={0x0, 0x7, 0x0, [0x7fffffffffffffff, 0x9d48, 0x4, 0x8001, 0xe3], [0xff73, 0xcdb, 0x4, 0x80000001, 0x8000000, 0x3, 0x8, 0x5, 0x0, 0x101, 0x3, 0x4, 0x4, 0x9, 0xc, 0xffffffff, 0x3, 0xfffffffffffffff8, 0x5, 0x1, 0x7fffffff, 0x7, 0x3, 0x1, 0x7, 0xfffffffffffffffb, 0x783520a8, 0x8, 0x8, 0x40, 0x4, 0x8, 0x3, 0x0, 0xaf, 0xaf, 0x4, 0x101, 0x1ff, 0x8, 0x1, 0x4, 0x6, 0x8, 0xfff, 0x2, 0x1000, 0x6, 0x51ea, 0x40, 0x82, 0x9, 0x7, 0xbf9, 0xb35e, 0xfffffffffffffff8, 0x3, 0x4, 0x6, 0x9, 0x80000000, 0x6, 0x6, 0xfffffffffffffffc, 0x0, 0x5, 0x2, 0x7, 0x40, 0xb, 0x5, 0x9, 0x7, 0x6, 0x5, 0x2, 0x8000, 0x25, 0x5, 0x0, 0x400000005, 0x9, 0x1, 0x5, 0x10, 0x2, 0xff, 0x0, 0x0, 0x3, 0x8, 0x7, 0x8, 0x4, 0x8, 0x10001, 0x81, 0x1, 0x40, 0x10000, 0xd6dc, 0x3, 0x5, 0x1, 0x1, 0x4, 0x7, 0x4, 0x4, 0x5, 0xff, 0x4, 0x1000, 0x9, 0x92d5, 0x8000000000000000, 0x3, 0x8, 0x2, 0xffffffffffff0000, 0x3]}) add_key$user(&(0x7f0000000840), &(0x7f0000000880)={'syz', 0x0}, &(0x7f00000008c0)="f5a33db62dd4147d6c3aa6d3629518a34e4616959e2a6c55bf09f11af3a4a02015dc75fcf14abbd1b094f408ef014873bc538077c5c359a7344d9e444ba1385a638daec457777beea3ab2aeab64b0f6839467f47a75d82cc11a4a46d61aee06fd881ebb12e95c1d9e246dd9c8e6418db1e842284e9528387", 0x78, 0xfffffffffffffffe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)) r5 = syz_io_uring_setup(0x29d7, &(0x7f0000000980)={0x0, 0x8550, 0xc00, 0x1, 0xf}, &(0x7f0000000a00)=0x0, &(0x7f0000000a40)=0x0, &(0x7f0000000a80)=0x0) syz_usb_connect(0x0, 0x371, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000ac0)=@IORING_OP_WAITID={0x32, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}}) io_uring_enter(r5, 0x1, 0x1, 0x61, 0x0, 0x0) 7.303060307s ago: executing program 4 (id=2414): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x2, 0x1, 0x1, 0x1000000, 0x8}) 7.297237355s ago: executing program 2 (id=2415): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000001380)=@in4={0x21, 0x3e, 0x2, 0x0, {0x2, 0x4e23, @private=0xa010101}}, 0x46) 7.236677684s ago: executing program 5 (id=2416): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @loopback}, 0x10) syz_emit_ethernet(0x44, &(0x7f00000004c0)={@link_local={0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x36, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b"}}}}}, 0x0) 7.151341551s ago: executing program 4 (id=2417): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_clone(0x20000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, 0x0, 0x40) openat$vim2m(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000003c0), 0x2, 0x822b01) write$char_usb(r1, &(0x7f0000000400)="e2", 0x12d8) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) r2 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000980)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x0, 0x1000000}, 0x1c}}, 0x0) syz_pidfd_open(0x0, 0x0) r3 = syz_ublk_setup_io_uring(0x782b, 0x0, &(0x7f0000000800), 0x0, 0x0) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x3291, 0x1000, 0x2, 0x158, 0x0, r3}, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0, 0x0) syz_ublk_add_dev(r4, r5, r6, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x30000047}, 0x4000004) syz_usb_connect(0x5, 0x53, &(0x7f0000000000)=ANY=[@ANYBLOB="120110038e3ac6209406010013780102030109024100020e061003090439d8011adaa8080905090000"], &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) fsopen(0x0, 0x1) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="100028bd7000ffdbdf250f0000000c009900050000001a000000040016"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) 7.074182074s ago: executing program 2 (id=2418): syz_emit_ethernet(0x11, &(0x7f0000000100)={@multicast, @local, @void, {@llc={0x4, {@llc={0x8e, 0xff, "bb"}}}}}, 0x0) (async) syz_usb_connect(0x5, 0x24, &(0x7f0000001440)={{0x12, 0x1, 0x200, 0x10, 0x97, 0x22, 0x20, 0x5ac, 0x120a, 0x7b2d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x9a, 0x20, 0x2e}}]}}, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) (async, rerun: 64) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x3, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x2000003e}, 0x0) (async, rerun: 64) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000600)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe6e3, 0x1000, 0x0, 0x20e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd1f0, 0x1000, 0x2, 0x19e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcc0, 0x41, 0x1, 0x2ac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x52e8, 0x400, 0x3, 0x30c}}], 0x4, &(0x7f0000000140)={0x2e, 0x8fc87e2c80dc2f21, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x1ff}, 0x0, 0x0, '\x00', {0x1, 0xfea, 0x0, 0x0}}, &(0x7f0000001900)) (async, rerun: 64) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r1, 0x28, 0x1, &(0x7f0000002c00)=""/4110, &(0x7f0000003c40)=0x100e) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2002) (async) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async, rerun: 64) r3 = syz_create_resource$futex(&(0x7f0000000200)=0x1) (async, rerun: 64) r4 = syz_create_resource$futex(&(0x7f0000000240)=0xffffffff) futex(r3, 0xb, 0x1, 0x0, r4, 0x1) futex(r3, 0xc, 0x1, 0x0, r4, 0x1) (async) write$cgroup_subtree(r2, &(0x7f0000000380)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) write$ppp(r2, &(0x7f0000002000)="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", 0xbfb) (async) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1400000003010103000000599224c0"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20000880) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 6.877514332s ago: executing program 5 (id=2419): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x2, 0x1, 0x1, 0x0, 0x8}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) syz_emit_ethernet(0x52, &(0x7f00000001c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x1c, 0x2c, 0x0, @remote, @local, {[], {{0x600, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"35f5af14bfb8304d"}}}}}}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) set_mempolicy(0x5, &(0x7f0000000400)=0x4000000ff9, 0xf) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c00000000000701fefffffffeffffff017c0000040042800c00018006000600800a00000800028004001480"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000500)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@gettfilter={0x34, 0x2e, 0x10, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xf}, {0xa, 0xf}, {0xfff2, 0x5}}, [{0x8, 0xb, 0x8}, {0x8, 0xb, 0xb8b7}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x85) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000640)={'syzkaller0\x00', @multicast}) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x22, 0x4, 0x4, 0x2, 0x0, 0x1, 0xc7c}, 0x50) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000700), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000800), 0x100, 0x0) close(r9) r10 = socket$unix(0x1, 0x5, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000840)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56441, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xb}, {0xffff, 0xffff}, {0xb, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0xfff, 0x7, 0x7, 0x5, 0xfffffdff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0xfffd, 0x5, 0x96, 0xfff, 0xc}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2400c045}, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8922, &(0x7f0000000980)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f00000000c0)=0x1) syz_open_dev$vim2m(&(0x7f0000000140), 0x800, 0x2) 6.653876451s ago: executing program 0 (id=2420): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/softnet_stat\x00') read(r0, 0x0, 0x0) pread64(r0, &(0x7f0000001380)=""/220, 0xdc, 0x4009) read$FUSE(r0, &(0x7f0000001480)={0x2020}, 0xffffffffffffff9f) 6.437581331s ago: executing program 0 (id=2421): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000000000086d0423c600000000000109022400010000a00209040004020300840009210000400122180009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect(r1, &(0x7f0000000080)=@nfc_llcp={0x27, 0x0, 0xffffffffffffffff, 0x4, 0xff, 0xe9, "64e26d8fa98fbd2ede0e805d7143be6b0b9cb26e4ca0d7840d0d0fe24921b75f39f5a0ea66820f82797948263464b4d85f6cec87b6a92961616df9b058ff78", 0x3}, 0x80) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000440), 0x0, 0x0) r2 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @auto=[0x35, 0x65, 0x62, 0x39, 0x0, 0xb, 0x34, 0x60, 0x34, 0x36, 0x33, 0x36, 0x65, 0x37, 0x52, 0x34]}, &(0x7f0000000180)={0x0, "8e5d3fdb76760e57d0fbc1403e79a7c516e0704734f39b09b11659e2ec91a746bf0431b25b3e74f70e17739e2505250be892faa71237632ac3e4d09ee97f763f", 0x39}, 0x48, 0xfffffffffffffffb) keyctl$read(0xb, r2, 0x0, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000200), 0x77, 0x101301) unshare(0x6020400) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 6.022095512s ago: executing program 5 (id=2422): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x3, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @multicast}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x100, 0x0) close(r9) r10 = socket$unix(0x1, 0x5, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000680)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r13, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xc, 0xa, 0x0, 0x5}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000007c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x800, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r14, {0x0, 0xb}, {0xffff, 0xffff}, {0xc, 0xfffc}}}, 0x24}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8922, &(0x7f0000000900)={'syzkaller0\x00', @random="2b0100004ec6"}) 5.986969913s ago: executing program 6 (id=2423): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000001780)={0x0, @in={{0x2, 0x4e20, @multicast1}}, 0x7f, 0x2, 0x214, 0x1, 0xf, 0x7, 0x4}, 0x9c) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000340), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000380)=0x1800, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r3) sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={0x38, r4, 0x1, 0x0, 0x20000, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0xfffffd9c, 0x2, 0x93}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x140}]}]}, 0x38}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000007c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000500)={0x274, r4, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x80, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xec2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5a}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}, @TIPC_NLA_NODE={0xdc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xcf, 0x3, "ab8364e69871503cc886670aac952ec7be4d7b1c3c36b314097c9cc3f83fe7cc4cca996c9a7e38294013804a75d785eacc6dd02224dca28f385ab11e5c3f1499ef1ca944597fbf37ccb9e6808313163f3da0563b9a1a9e39289902c8d511303304231d4d32810da393f6a09abbab4d576a5c0e19bbff333381579b57dec91af39cc533c804c38fd5291645ae46b0e6eeb9d9725ea222998c73f79566f553d802a74a7acf09fac4ed68fe4ded5346d07eaa80e4e1c5682a09dea84f3172e237c641090a761940cff24e15dc"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xc}]}, @TIPC_NLA_MEDIA={0xa0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1db8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x274}, 0x1, 0x0, 0x0, 0x40000}, 0x4094) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netstat\x00') getsockopt$inet6_udp_int(r6, 0x11, 0x65, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc0100, 0x0) ioctl$TUNSETDEBUG(r7, 0x400454c9, 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0xe, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="18"], 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$TUNSETOFFLOAD(r7, 0x400454d0, 0x6) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)={0x34, r5, 0x205, 0x0, 0x2, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x1}]}, 0x34}}, 0x4000) 5.514881808s ago: executing program 6 (id=2424): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2481, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x2}) r2 = socket$key(0xf, 0x3, 0x2) unshare(0x22020600) ioctl$FIONCLEX(r2, 0x5450) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @multicast}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r6, @ANYBLOB="800202000a000200577f0000aabb000020000e80"], 0x48}}, 0x0) r7 = syz_ublk_setup_io_uring(0x37b7, &(0x7f0000000200)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000340)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000003c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000400)=0x0) fcntl$getflags(r4, 0x1) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = dup(r12) syz_ublk_setup_queues(r13, r11, &(0x7f0000000440)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f00000004c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000740)={0x2e, 0x54, 0x0, r13, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00222200000096010006010083000000002a90a027b3ff82e854988b147043022effffb3dcf96b"], 0x0}, 0x0) 4.75449361s ago: executing program 4 (id=2425): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) inotify_add_watch(r1, &(0x7f0000000080)='./file0\x00', 0x11000004) fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) gettimeofday(0xfffffffffffffffe, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000140)={0x0, 0x1, 0x73f8, 0x5}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000840)='GPL\x00'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r2, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0}}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 4.342116628s ago: executing program 0 (id=2426): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1_to_team\x00', 0x10) r2 = socket(0x10, 0x80002, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) capset(&(0x7f00000016c0)={0x20071026}, &(0x7f0000001700)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) setrlimit(0x40000000000008, &(0x7f0000001740)) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000001780)={0x200000000000001, 0x3}, 0x8) sendto$inet6(r3, 0x0, 0x0, 0xc880, &(0x7f00000017c0)={0xa, 0x4e20, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000001800)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000001880)='\x00', 0x1}], 0x1}}], 0x2, 0x404c484) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) r4 = openat$null(0xffffff9c, &(0x7f0000001580), 0x50080, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000001540), r4) recvmmsg$unix(r2, &(0x7f00000004c0)=[{{0x0, 0x3f, &(0x7f0000000500)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) sendto$inet(r1, 0x0, 0x0, 0x804, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x2}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x9}]}}]}, 0x48}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001680)=ANY=[@ANYBLOB="3c0000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b0008000b40000000a900"/36], 0x3c}}, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {r5}}, './file0\x00'}) setsockopt$inet_udp_encap(r9, 0x11, 0x64, &(0x7f00000003c0)=0x2, 0x4) r10 = syz_open_dev$vbi(&(0x7f00000002c0), 0x2, 0x2) ioctl$VIDIOC_G_EDID(r10, 0xc0285628, &(0x7f0000000300)={0x300, 0x1, 0x24, '\x00', &(0x7f0000000340)=0x40}) syz_usb_connect(0x0, 0x2d, &(0x7f00000015c0)=ANY=[@ANYBLOB="120100005bd30a20f0031d58a3200122030109021b0002000000000904250000ff0120000904"], 0x0) setsockopt$inet_int(r1, 0x0, 0x12, &(0x7f0000000080)=0x9, 0x4) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x20, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100), &(0x7f0000000180)=0x22) 3.54839461s ago: executing program 2 (id=2427): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1400000010000100000000000e0000000200000a20000000000a01040000000000000000020000000900010073797a30000000002c000000030a01040000000000000000020000000900010073797a30000000000900030073797a300000000090000000060a01240000000000000000020000000900010073797a30000000000900020073797a300000000064000480600001800b0001007461726765740000500002800e00010049444c4554494d45520000"], 0x104}}, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r0, r0, 0x0, 0x20000005) connect(0xffffffffffffffff, &(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x65, @dev={0xfe, 0x80, '\x00', 0x9}, 0x1, 0x1}, 0x80) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) sched_getattr(0x0, 0x0, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4004) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c830}, 0x987a3a9f32358a4c) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) socket$inet6_tcp(0xa, 0x1, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000bc0)={'syz1\x00', {0x5, 0x4, 0x0, 0x13fb}, 0x25, [0x10, 0x5, 0xb, 0x0, 0x5, 0x83, 0xd2, 0x80000000, 0x10001, 0x9, 0xde2, 0x6, 0xfffffffb, 0x10, 0x2, 0x0, 0x1ff, 0xc, 0x68a, 0x2, 0x1, 0x7fff, 0x5c5f, 0x4, 0x0, 0x9, 0x9, 0x3ff, 0xd9, 0x1, 0x1, 0x32, 0x7fff, 0x7f, 0x1, 0x81, 0x8fe, 0x5, 0x6, 0x1000, 0x7, 0xc51, 0x7, 0x3, 0xd, 0x5, 0x0, 0x1, 0x7f, 0x1, 0x2, 0x3, 0x0, 0x0, 0xffffffff, 0xe4, 0x6, 0xf9, 0xffffffff, 0x1000, 0x0, 0x5, 0x0, 0x5], [0x7, 0x0, 0x1b08000, 0xffffffff, 0xcc65, 0x5, 0x4, 0x602e, 0x9, 0x9, 0x9, 0x4, 0x2, 0xcc, 0xfff, 0x9, 0x200, 0x800, 0x8, 0x5, 0x6, 0x4, 0x5, 0x3, 0x8, 0x3, 0x80, 0x3, 0xffff, 0x0, 0x6, 0x7fff, 0x8, 0x21, 0x800, 0x0, 0xfb23, 0x0, 0x40, 0x5, 0x3, 0x5, 0x7, 0x8000, 0x9, 0x5, 0x7b5, 0x4, 0x2, 0x10, 0x0, 0x69a0, 0x8b3, 0x8, 0x100, 0xfffffffb, 0x80000001, 0x4, 0x8, 0x6693, 0x5, 0xae, 0x52, 0x9], [0x69, 0x7, 0x0, 0xfffffff9, 0x4, 0xa957, 0x6, 0x3, 0xc0, 0x2, 0x322c, 0x2, 0x9, 0xc3, 0x2, 0x0, 0x26, 0x1, 0x4, 0x7, 0x400, 0x10000, 0x7, 0x0, 0xb, 0x8, 0x4, 0xfffffffe, 0x0, 0xdd, 0x4, 0x7fff, 0x249a, 0x58b4, 0x0, 0x9, 0xc, 0xfffffff9, 0x3, 0xfffff801, 0x82, 0x6, 0x4, 0xfa0, 0x9, 0x1, 0xfffffffb, 0xffffffff, 0xc57, 0x6d, 0x8, 0x1, 0x0, 0x2, 0xa, 0xfffffff9, 0x5, 0x8, 0x8, 0x9, 0x7, 0x0, 0x101, 0xfffffffd], [0x4f, 0xca4, 0x82c, 0x2, 0x5, 0x9, 0x5, 0x4, 0xc, 0x2, 0x8, 0x484e, 0x81, 0x0, 0x6, 0x0, 0x8, 0x9, 0x1, 0x6, 0x1, 0x5, 0x95f, 0x97, 0x8b9, 0xffff6b6a, 0x227, 0x6, 0xfff, 0x5, 0x1, 0xffff7fff, 0x2, 0x80008, 0x6, 0x8, 0x10, 0x1, 0x1, 0x9, 0xa8e, 0x3, 0x8001, 0x1, 0x0, 0x7, 0x401, 0x2c37d4c4, 0x0, 0x4d, 0xf, 0xa, 0x7ff, 0xffffffff, 0xffff4b40, 0x3, 0x2, 0x1, 0x900, 0x6, 0x7, 0xfff, 0xa]}, 0x45c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r3}, 0x38) 3.145418298s ago: executing program 4 (id=2428): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0x6) r1 = gettid() r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80800) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000200)={{0x2, 0x1, 0xfffffffa, 0x0, 0xd}}) read(r2, &(0x7f0000000280)=""/95, 0x5f) timer_create(0x0, &(0x7f0000000300)={0x0, 0x100021, 0x800000000004, @tid=r1}, &(0x7f0000000340)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'lo\x00'}) sendmsg$nl_route_sched(r3, 0x0, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000400)={0x0, 0x7, 0x0, [0x7fffffffffffffff, 0x9d48, 0x4, 0x8001, 0xe3], [0xff73, 0xcdb, 0x4, 0x80000001, 0x8000000, 0x3, 0x8, 0x5, 0x0, 0x101, 0x3, 0x4, 0x4, 0x9, 0xc, 0xffffffff, 0x3, 0xfffffffffffffff8, 0x5, 0x1, 0x7fffffff, 0x7, 0x3, 0x1, 0x7, 0xfffffffffffffffb, 0x783520a8, 0x8, 0x8, 0x40, 0x4, 0x8, 0x3, 0x0, 0xaf, 0xaf, 0x4, 0x101, 0x1ff, 0x8, 0x1, 0x4, 0x6, 0x8, 0xfff, 0x2, 0x1000, 0x6, 0x51ea, 0x40, 0x82, 0x9, 0x7, 0xbf9, 0xb35e, 0xfffffffffffffff8, 0x3, 0x4, 0x6, 0x9, 0x80000000, 0x6, 0x6, 0xfffffffffffffffc, 0x0, 0x5, 0x2, 0x7, 0x40, 0xb, 0x5, 0x9, 0x7, 0x6, 0x5, 0x2, 0x8000, 0x25, 0x5, 0x0, 0x400000005, 0x9, 0x1, 0x5, 0x10, 0x2, 0xff, 0x0, 0x0, 0x3, 0x8, 0x7, 0x8, 0x4, 0x8, 0x10001, 0x81, 0x1, 0x40, 0x10000, 0xd6dc, 0x3, 0x5, 0x1, 0x1, 0x4, 0x7, 0x4, 0x4, 0x5, 0xff, 0x4, 0x1000, 0x9, 0x92d5, 0x8000000000000000, 0x3, 0x8, 0x2, 0xffffffffffff0000, 0x3]}) add_key$user(&(0x7f0000000840), &(0x7f0000000880)={'syz', 0x0}, &(0x7f00000008c0)="f5a33db62dd4147d6c3aa6d3629518a34e4616959e2a6c55bf09f11af3a4a02015dc75fcf14abbd1b094f408ef014873bc538077c5c359a7344d9e444ba1385a638daec457777beea3ab2aeab64b0f6839467f47a75d82cc11a4a46d61aee06fd881ebb12e95c1d9e246dd9c8e6418db1e842284e9528387", 0x78, 0xfffffffffffffffe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)) r5 = syz_io_uring_setup(0x29d7, &(0x7f0000000980)={0x0, 0x8550, 0xc00, 0x1, 0xf}, &(0x7f0000000a00)=0x0, &(0x7f0000000a40)=0x0, &(0x7f0000000a80)=0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000ac0)=@IORING_OP_WAITID={0x32, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}}) io_uring_enter(r5, 0x1, 0x1, 0x61, 0x0, 0x0) 2.541980373s ago: executing program 5 (id=2429): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @loopback}, 0x10) syz_emit_ethernet(0x44, &(0x7f00000004c0)={@link_local={0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x36, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b"}}}}}, 0x0) 2.457139852s ago: executing program 4 (id=2430): r0 = openat$vim2m(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x40280, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl(r3, 0x4048aecb, &(0x7f0000000580)="070000000000000001000000ffffffff40894088") ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x5, 0x1, 0x100, "e2bb1c390f33a0b311d90652665a7a08ff0a408f528729dcc929f7532994700a", 0x32344d59}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) eventfd2(0xffffff7f, 0x1) fanotify_mark(0xffffffffffffffff, 0x1, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000e3ddef20501da1604fa1010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f0000000600)={0x1c, &(0x7f0000000640)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f0000000680)={0x1c, &(0x7f00000006c0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$printer(r4, 0x0, &(0x7f0000000700)={0x34, &(0x7f0000000740)={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000780)={0x44, &(0x7f00000007c0)={0x0, 0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000880)={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x40, 0xf, 0x2, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = memfd_create(&(0x7f0000000200)='\x103q}2\x9a\xce\xaf^\xd5\xfd\xa9\r\xac7A+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99\x18\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\xd5\xec\x10\xd7\x01M\x7f\xb7\x17@)\x8fG&\xcb\xe3\xc2\x80\xc3MD\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1f\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\tRJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd99C\x9fF\x9c[M=\xa0^\xa8\xed)\xe8Z\xe8\x9b&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xc9\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xe7\x9d\x9a\x8a\x86>\f\xa8b\xa5B5)\x80m\xff\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xb6\x1c+\xf7gT\x9a\x02\x99\xc2\x00\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6\x05\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84X\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\x19\x06U)j!\x91\'\x98\xd2kFN\xfa\x80)O\xb9(!n\x9d\x13\x15\xf1\x1a\xb8y\x14l\xd1\x00\x00\x00\x00\x00\x00E\xfc', 0x4) ioctl$FS_IOC_RESVSP(r5, 0x402c5828, &(0x7f0000000500)={0x0, 0x0, 0x1, 0xa43a6d}) prctl$PR_MCE_KILL(0x48, 0x0, 0x0) rseq(&(0x7f00000001c0), 0x20, 0x20000000, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x9, 0x10, 0x0, 0x70bd25, 0x25dfdbff, [@sadb_sa={0x2, 0x1, 0x4d4, 0x0, 0x4, 0x20, 0x2, 0x40000000}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x8, @mcast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xa, 0x1, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x9, @empty, 0x6}}]}, 0x80}, 0x1, 0x7}, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x4000000) r7 = syz_clone(0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r7, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 2.337267563s ago: executing program 0 (id=2431): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x13) syz_open_dev$vim2m(&(0x7f0000000000), 0x80, 0x2) r0 = syz_open_dev$video4linux(&(0x7f0000000100), 0x10005, 0x161742) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000140)={0x1, 0x0, {0x0, 0x0, 0x101c, 0x0, 0x0, 0x6, 0x0, 0x1}}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r2, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)='%+9llu \x00'}, 0x1c) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000004c0)={&(0x7f00000001c0)="4b5e3a8884d2900665fcfb3f7bc8d58549b3a0f4ca3dabd6f379760dab5b72db218757424e2deea06f9b", &(0x7f0000000200)=""/117, &(0x7f0000000280)="e752eeb387af7101433fad811c577f0d9a884b4df40440a79a8271c190df8262aac312759a0023066e38ca26", &(0x7f00000002c0)="07b01c1010e1cee3968788d517b4d546f1415ea1f28df31912c066628e0b48415e696d0dac8a9dc50a880cf0e3db35ba86644f042c1ec7575fa6cee2c877f87a221f71d680aa4c32a143d20582f3498b5dee0ccfcbfd3cdfb842e44b2900c78a6ce8f16487d595f8a340e2cb9945060bd6f5ffbe52a09a66702467f6289075fd", 0x200, r3}, 0x38) socket$unix(0x1, 0x1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="8008001b00"/20], 0x2c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r6 = syz_usb_connect$uac3(0x2, 0x0, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x120) write(r7, &(0x7f0000000600)='0', 0x1) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r5, 0x3) bind$inet(r4, &(0x7f0000000640)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000680)={0x42, 0xfffffffc, 0x1}, 0x10) madvise(&(0x7f00003a4000/0x2000)=nil, 0x2000, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00003a1000/0x18000)=nil, &(0x7f00000006c0)=[@text32={0x20, &(0x7f0000000700)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0500000004000000e27f00"/20, @ANYRES32, @ANYBLOB="00000039c2df36ad3e2ac31ee2423400000000000000671a817030ab9308eb07eee100000100000000000000d0f9a6649bb9b7cdcd62abe5eeb4063c1879179217bbbb259a24155b4fdbf953b5d1745e40738d2acce72954ca366efa9621705adbfaf497e12fa2c5ac603987df3fc82107333360788526036b664be6f6269ba569e6933a1548c1070d1821bca8eb5791f80cc8af14a9f8", @ANYRES32=r6, @ANYRES32, @ANYRES64=r5], 0x48) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000800)=ANY=[], 0x20) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000840), 0x208e24b) 2.305793676s ago: executing program 2 (id=2432): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x401, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2400, 0x4100}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x3c}}, 0x4000000) openat$kvm(0xffffff9c, &(0x7f0000000340), 0x0, 0x0) syz_usb_connect$uac2(0x0, 0x80, &(0x7f0000003700)=ANY=[@ANYBLOB="1201100300000040532b310040000102030109026e0003010d0067080b0002010020ff09040000000101200009240100800c0e000005240b04000904010000010220000904010101010220000905010920000308fb082501010305f9ff090402000001022000090400010101"], &(0x7f00000037c0)={0x0, 0x0, 0x0, 0x0}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="230000000880000002000000ffff000005"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x8, r1}, 0x38) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00') socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000c80)='./file0\x00', 0x800, 0x14) getdents(r2, &(0x7f0000000040)=""/46, 0xfec0) 2.228744753s ago: executing program 5 (id=2433): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bridge_slave_1\x00'}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) r2 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000044e22008d31324320dcb010c03010902120001040020000904"], 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x24, r4, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}]}, 0x24}, 0x1, 0x0, 0x0, 0x2004c840}, 0x840) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000380)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000023, 0x13, r6, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0xeaac6000) syz_usb_control_io(r2, &(0x7f0000000400)={0x18, &(0x7f0000000440)={0x20, 0x4, 0x7f, {0x7f, 0x9, "bbb1d4f6d9e052ae2f051d1ee654624376f57da2a9b98e666439e914d8d2e7e19bf1664869b8b4569931332141b6fd0fdcd9abcad032de073229a155983ec15ad037ef1f8a88e11c5552c90daa607c83687582c2e06aecc7dc6b859016f69b90054bd7fff123398a84a97027a7fa1d0c655c28098386b91b57c4fff637"}}, &(0x7f0000000500)={0x0, 0x3, 0x12, @string={0x12, 0x3, "0e02486f7b248c99023bb17f86d49bea"}}, &(0x7f0000000540)={0x0, 0xf, 0x95, {0x5, 0xf, 0x95, 0x5, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x1a, 0x0, 0xcb, 0x5, 0x4, 0x4}, @ssp_cap={0x24, 0x10, 0xa, 0xff, 0x6, 0x101, 0x0, 0x6, [0x5f18, 0x3f00, 0x30, 0x0, 0x1fb0, 0xf0]}, @ssp_cap={0xc, 0x10, 0xa, 0xa, 0x0, 0x100, 0xff00, 0xffff}, @generic={0x52, 0x10, 0x3, "ae47d2c32edafbd6eeb828334abb81c9cd7fa0d08b8c8854de3ae521a855f812e87affd30abb050f242212539b973300f8b98e6d26212939f93b76389a232152d84056adab13063341bf2a3f8ac531"}]}}, 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) r7 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r7, 0x40045402, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000bc0)={{0x1, 0x0, 0x8, 0x2, 0x2000}}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r8, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=ANY=[@ANYBLOB="2400000004214d872cf2fa080500000000006f000000000000000005000300060000000600024000000000"], 0x24}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r7, 0x40505412, &(0x7f0000000cc0)={0x7, 0x8f11, 0x200, 0x0, 0xf}) close(r7) mremap(&(0x7f00003f1000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) r9 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000d40)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000d80)=0x1c, 0xc0000) bind$inet6(r9, &(0x7f0000000dc0)={0xa, 0x4e22, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000e00)=0x1, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000e40), 0x141000, 0x0) 2.084809122s ago: executing program 6 (id=2434): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/softnet_stat\x00') read(r0, &(0x7f0000000340)=""/4110, 0x100e) pread64(r0, 0x0, 0x0, 0x4009) read$FUSE(r0, &(0x7f0000001480)={0x2020}, 0xffffffffffffff9f) 1.791755882s ago: executing program 6 (id=2435): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/softnet_stat\x00') read(r0, 0x0, 0x0) pread64(r0, &(0x7f0000001380)=""/220, 0xdc, 0x4009) read$FUSE(r0, &(0x7f0000001480)={0x2020}, 0xffffffffffffff9f) 1.7873154s ago: executing program 0 (id=2445): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/softnet_stat\x00') read(r0, &(0x7f0000000340)=""/4110, 0x100e) pread64(r0, 0x0, 0x0, 0x4009) read$FUSE(r0, &(0x7f0000001480)={0x2020}, 0xffffffffffffff9f) 1.507566978s ago: executing program 0 (id=2436): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0xda, 0x0, 0x78b}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x800, 0x4, 0x81, 0x3, 0x1, 0x0, 0x1, 0x100000012, 0x0, 0x0, 0x40000000000, 0x7, 0x4, 0x2, 0x100000000001], 0x6000, 0x4bb40}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 8) 0s ago: executing program 6 (id=2437): socket$inet6_sctp(0xa, 0x801, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect$lan78xx(0x6, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000700), 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$NFT_BATCH(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310007000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000740)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) r2 = memfd_create(&(0x7f0000000a00)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8c\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\xe8\x9c\a\xe4j+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\xac?\x89K\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x3) close(0x3) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000940)={r2, 0x1, 0xfffff000, 0x2000}) (fail_nth: 1) syz_io_uring_setup(0x1cfd, &(0x7f0000000880)={0x0, 0x8bcb, 0x4, 0x2, 0x304}, &(0x7f0000000cc0)=0x0, &(0x7f0000000d00)=0x0, &(0x7f0000000d40)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000d80)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000180)=""/68, 0x0, 0x60000}) syz_mount_image$fuse(&(0x7f0000000240), &(0x7f0000000400)='./file0\x00', 0xa0004d, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0xee00, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="0002"], 0x1, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f00000002c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000340)) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000380)=0x1) ioctl$XFS_IOC_GETVERSION(r6, 0x4008af13, &(0x7f00000003c0)) lseek(r0, 0xfffffaa7, 0x2) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000800)={{0x1, 0x1, 0x18, r6, {0x3d}}, './file0\x00'}) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000840)={'veth1_to_bridge\x00', @broadcast}) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @auto=[0x62, 0x30, 0x36, 0x36, 0x39, 0x63, 0x65, 0x32, 0x2d87420dc3a22eb, 0x64, 0x31, 0x30, 0x1c, 0x61, 0x34, 0xd]}, &(0x7f0000000080)={0x0, "f8dfd06bf051b11c4a2640e6e7ac30bf9365c422c40f115d9008f7cc21b80690ef9ed6cbabcd78fbdc90121e6304072af521b01a900f88e76016774edbfb00af", 0x32}, 0x48, 0xfffffffffffffffe) kernel console output (not intermixed with test programs): 3-1: Manufacturer: syz [ 481.532333][ T5672] usb 3-1: SerialNumber: syz [ 481.553700][ T5672] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 481.587701][ T5671] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 481.613723][T12495] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(10) [ 481.613741][T12495] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 481.613931][T12495] vhci_hcd vhci_hcd.0: Device attached [ 481.672433][T12501] ptrace attach of "ci-upstream-kasan-gce-386/syz-executor exec"[9332] was attempted by "ci-upstream-kasan-gce-386/syz-executor exec"[12501] [ 481.697590][ T5687] usb 33-1: new low-speed USB device number 3 using vhci_hcd [ 481.739069][ T5671] usb 5-1: Using ep0 maxpacket: 8 [ 481.744775][ T5671] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 481.747239][ T5671] usb 5-1: config 1 interface 0 altsetting 187 bulk endpoint 0x82 has invalid maxpacket 64 [ 481.747269][ T5671] usb 5-1: config 1 interface 0 altsetting 187 bulk endpoint 0x3 has invalid maxpacket 64 [ 481.749404][ T5671] usb 5-1: config 1 interface 0 altsetting 187 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 481.749437][ T5671] usb 5-1: config 1 interface 0 has no altsetting 0 [ 481.768321][ T5671] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.768349][ T5671] usb 5-1: Product: à  [ 481.768363][ T5671] usb 5-1: Manufacturer: 涄ꓺ绞볘8絣ຬ꥟ꄷƯ鳅ඔ锘껴㿱壨땞å›é¢¨å†©é•ç¢’ﺸ㆑鹓肸抨ì†ã†¸é‰´âŒªâ””䚊ᯎ渳뇹屖è½ä¸ë¥“⅓⿪쨢췺悲핮춵é´è»ˆå³¤è¾à®†è²›ã”­íƒƒæ®Õ­æ˜œâƒ¼ã°·ä‹¯å¢¯á§á¾¤èªžá ·å““蜡è™ãµ«áˆ²æ¡½è‘砕ώꨡଃ䩎⹫⇆⯡ [ 481.768391][ T5671] usb 5-1: SerialNumber: syz [ 481.804170][T12488] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 481.804331][T12488] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 482.022020][ T5671] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 482.047560][ T5671] usb 5-1: USB disconnect, device number 85 [ 482.125562][ T5672] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 482.125589][ T5672] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 482.278433][T12497] vhci_hcd: connection closed [ 482.278633][ T1015] vhci_hcd vhci_hcd.0: stop threads [ 482.278652][ T1015] vhci_hcd vhci_hcd.0: release socket [ 482.281398][ T1015] vhci_hcd vhci_hcd.0: disconnect device [ 482.281593][T12493] vhci_hcd: connection reset by peer [ 482.282022][ T1015] vhci_hcd vhci_hcd.0: stop threads [ 482.282037][ T1015] vhci_hcd vhci_hcd.0: release socket [ 482.282085][ T1015] vhci_hcd vhci_hcd.0: disconnect device [ 482.823603][T12520] __nla_validate_parse: 15 callbacks suppressed [ 482.823619][T12520] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2159'. [ 482.847046][T12520] tap0: tun_chr_ioctl cmd 1074025680 [ 482.997432][ T5701] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 483.001224][ T5686] usb 3-1: USB disconnect, device number 88 [ 483.061521][ T9] usb 6-1: USB disconnect, device number 48 [ 483.157737][ T5701] usb 5-1: Using ep0 maxpacket: 32 [ 483.159928][ T5701] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 483.161288][ T5701] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 483.161319][ T5701] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 483.163100][T12526] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2160'. [ 483.163119][T12526] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2160'. [ 483.164054][ T5701] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 483.164087][ T5701] usb 5-1: Product: syz [ 483.164101][ T5701] usb 5-1: Manufacturer: syz [ 483.164116][ T5701] usb 5-1: SerialNumber: syz [ 483.165453][T12526] netlink: 'syz.5.2160': attribute type 15 has an invalid length. [ 483.165472][T12526] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2160'. [ 483.180891][T12526] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2160'. [ 483.284699][ T5701] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input109 [ 483.377946][ T5708] usb 1-1: new full-speed USB device number 80 using dummy_hcd [ 483.488500][T12535] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2165'. [ 483.507972][T12535] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2165'. [ 483.507997][T12535] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2165'. [ 483.534666][ T5708] usb 1-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 483.553243][ T5708] usb 1-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 483.553271][ T5708] usb 1-1: Product: syz [ 483.553287][ T5708] usb 1-1: Manufacturer: syz [ 483.553301][ T5708] usb 1-1: SerialNumber: syz [ 483.598951][ T5708] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 483.619830][T12516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.620138][T12516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.695100][ T5672] usb 5-1: USB disconnect, device number 86 [ 483.712596][ T5672] appletouch 5-1:1.0: input: appletouch disconnected [ 484.136466][ T5708] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 484.136519][ T5708] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 484.874564][T12568] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2177'. [ 484.887433][ T5701] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 484.888677][T12568] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2177'. [ 485.047952][ T5701] usb 6-1: Using ep0 maxpacket: 8 [ 485.050858][ T5701] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 485.053906][ T5701] usb 6-1: config 1 interface 0 altsetting 187 bulk endpoint 0x82 has invalid maxpacket 64 [ 485.053938][ T5701] usb 6-1: config 1 interface 0 altsetting 187 bulk endpoint 0x3 has invalid maxpacket 64 [ 485.053961][ T5701] usb 6-1: config 1 interface 0 altsetting 187 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 485.054212][ T5701] usb 6-1: config 1 interface 0 has no altsetting 0 [ 485.106373][ T5701] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.106391][ T5701] usb 6-1: Product: à  [ 485.106399][ T5701] usb 6-1: Manufacturer: 涄ꓺ绞볘8絣ຬ꥟ꄷƯ鳅ඔ锘껴㿱壨땞å›é¢¨å†©é•ç¢’ﺸ㆑鹓肸抨ì†ã†¸é‰´âŒªâ””䚊ᯎ渳뇹屖è½ä¸ë¥“⅓⿪쨢췺悲핮춵é´è»ˆå³¤è¾à®†è²›ã”­íƒƒæ®Õ­æ˜œâƒ¼ã°·ä‹¯å¢¯á§á¾¤èªžá ·å““蜡è™ãµ«áˆ²æ¡½è‘砕ώꨡଃ䩎⹫⇆⯡ [ 485.106414][ T5701] usb 6-1: SerialNumber: syz [ 485.160242][T12545] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 485.160362][T12545] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 485.185177][ T5708] usb 1-1: USB disconnect, device number 80 [ 485.388814][ T5701] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 485.413995][ T5701] usb 6-1: USB disconnect, device number 49 [ 486.123736][ T30] kauditd_printk_skb: 989 callbacks suppressed [ 486.123757][ T30] audit: type=1800 audit(1792784973.286:4410): pid=12581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2182" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=-22 [ 486.787540][ T5701] usb 7-1: new low-speed USB device number 44 using dummy_hcd [ 486.838125][ T9] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 486.848123][ T5687] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 486.949086][ T5701] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 486.950225][ T5701] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 486.950246][ T5701] usb 7-1: config 0 has no interface number 0 [ 486.950268][ T5701] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 486.950283][ T5701] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 486.950311][ T5701] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.955181][ T5701] usb 7-1: config 0 descriptor?? [ 486.955884][T12589] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 487.018565][ T192] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 487.037365][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 487.037414][ T9] usb 3-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 487.044273][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 487.044359][ T9] usb 3-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 487.046630][ T5701] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 487.104247][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.104273][ T9] usb 3-1: Product: syz [ 487.104288][ T9] usb 3-1: Manufacturer: syz [ 487.104303][ T9] usb 3-1: SerialNumber: syz [ 487.181100][ T192] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 487.185639][ T192] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.185656][ T192] usb 5-1: Product: syz [ 487.185664][ T192] usb 5-1: Manufacturer: syz [ 487.185672][ T192] usb 5-1: SerialNumber: syz [ 487.267393][ T5701] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 487.531962][T12596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.532304][T12596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.564998][ T9] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 487.588560][T12596] random: crng reseeded on system resumption [ 487.603592][ T9] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 487.709766][ T5733] usb 5-1: USB disconnect, device number 87 [ 487.746337][ T5708] usb 7-1: USB disconnect, device number 44 [ 487.852303][ T9] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 487.872684][ T9] usb 3-1: USB disconnect, device number 89 [ 487.926838][T10583] udevd[10583]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 488.270253][T12608] __nla_validate_parse: 2 callbacks suppressed [ 488.270269][T12608] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2192'. [ 488.293170][ T5687] usb 6-1: new full-speed USB device number 50 using dummy_hcd [ 488.303391][ T5701] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 488.303563][ T5701] ath9k_htc: Failed to initialize the device [ 488.303907][ T5733] usb 5-1: ath9k_htc: USB layer deinitialized [ 488.307493][ T192] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 488.419869][T12608] tap0: tun_chr_ioctl cmd 1074025680 [ 488.449623][T12612] af_packet: tpacket_rcv: packet too big, clamped from 120 to 4294967272. macoff=96 [ 488.468047][ T5687] usb 6-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 488.478597][ T192] usb 1-1: Using ep0 maxpacket: 8 [ 488.479830][ T192] usb 1-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 488.480668][ T5687] usb 6-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 488.480693][ T5687] usb 6-1: Product: syz [ 488.480708][ T5687] usb 6-1: Manufacturer: syz [ 488.480722][ T5687] usb 6-1: SerialNumber: syz [ 488.482632][ T192] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 488.482661][ T192] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 488.482679][ T192] usb 1-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 488.482705][ T192] usb 1-1: config 0 interface 0 has no altsetting 0 [ 488.482736][ T192] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.517024][ T192] usb 1-1: config 0 descriptor?? [ 488.522490][ T5687] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 488.617801][ C0] ip6_tunnel: K xmit: Local address not yet configured! [ 488.717423][ T5733] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 488.867556][ T5733] usb 5-1: Using ep0 maxpacket: 16 [ 488.868294][ T5733] usb 5-1: New USB device found, idVendor=05d1, idProduct=2002, bcdDevice= 5.00 [ 488.870879][ T5733] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 488.870904][ T5733] usb 5-1: Product: syz [ 488.870917][ T5733] usb 5-1: SerialNumber: syz [ 488.873722][ T5733] usb 5-1: config 0 descriptor?? [ 488.876610][ T5733] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 488.894092][ T5733] usb 5-1: Detected FT2232C/D [ 488.976100][ T192] input: HID 046d:c623 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:046D:C623.0016/input/input110 [ 489.079343][ T192] logitech 0003:046D:C623.0016: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 046d:c623] on usb-dummy_hcd.0-1/input0 [ 489.257691][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 489.284117][ T30] audit: type=1326 audit(1792784976.446:4411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12603 comm="syz.0.2189" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb4f1c code=0x0 [ 489.437593][ T5672] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 489.494050][ T5687] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 489.494095][ T5687] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 489.597447][ T5672] usb 3-1: Using ep0 maxpacket: 32 [ 489.598446][ T5672] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 489.600131][ T5672] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 489.600152][ T5672] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 489.647969][ T5672] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 489.647997][ T5672] usb 3-1: Product: syz [ 489.648254][ T5672] usb 3-1: Manufacturer: syz [ 489.648270][ T5672] usb 3-1: SerialNumber: syz [ 489.693201][ T5672] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input111 [ 489.898768][ T5672] usb 1-1: USB disconnect, device number 81 [ 489.949639][T12631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.950070][T12631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.222305][ T5671] usb 3-1: USB disconnect, device number 90 [ 490.257056][ T5671] appletouch 3-1:1.0: input: appletouch disconnected [ 490.840270][ T10] usb 6-1: USB disconnect, device number 50 [ 490.860922][ T5671] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 491.007508][ T5671] usb 7-1: Using ep0 maxpacket: 8 [ 491.008426][ T5671] usb 7-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 491.010561][ T5671] usb 7-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 491.010593][ T5671] usb 7-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 491.010617][ T5671] usb 7-1: config 0 interface 0 has no altsetting 0 [ 491.010649][ T5671] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.054259][ T5671] usb 7-1: config 0 descriptor?? [ 491.296828][ T5671] usbhid 7-1:0.0: can't add hid device: -71 [ 491.296954][ T5671] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 491.319519][ T5671] usb 7-1: USB disconnect, device number 45 [ 491.346487][T12655] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2205'. [ 491.355501][T12655] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2205'. [ 491.355531][T12655] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2205'. [ 491.397899][ T10] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 491.558911][ T10] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 491.565645][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.565663][ T10] usb 1-1: Product: syz [ 491.565673][ T10] usb 1-1: Manufacturer: syz [ 491.565686][ T10] usb 1-1: SerialNumber: syz [ 491.622629][ T5687] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 491.696498][ T5733] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 491.704627][ T5733] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 491.724742][ T5733] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 491.739598][ T5733] usb 5-1: USB disconnect, device number 88 [ 491.761652][ T5733] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 491.781645][ T5733] ftdi_sio 5-1:0.0: device disconnected [ 491.932791][T12650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.946464][T12650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.980390][T12650] random: crng reseeded on system resumption [ 492.118552][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 492.148534][ T10] usb 1-1: USB disconnect, device number 82 [ 492.171510][T12665] FAULT_INJECTION: forcing a failure. [ 492.171510][T12665] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 492.171547][T12665] CPU: 0 UID: 0 PID: 12665 Comm: syz.2.2209 Tainted: G L syzkaller #0 PREEMPT(full) [ 492.171576][T12665] Tainted: [L]=SOFTLOCKUP [ 492.171584][T12665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 492.171598][T12665] Call Trace: [ 492.171606][T12665] [ 492.171615][T12665] dump_stack_lvl+0xe8/0x150 [ 492.171650][T12665] should_fail_ex+0x410/0x560 [ 492.171683][T12665] _copy_from_user+0x2d/0xb0 [ 492.171711][T12665] get_compat_msghdr+0xb3/0x4c0 [ 492.171735][T12665] ? __pfx_get_compat_msghdr+0x10/0x10 [ 492.171769][T12665] ___sys_sendmsg+0x201/0x360 [ 492.171795][T12665] ? __lock_acquire+0x747/0x2de0 [ 492.171823][T12665] ? __pfx____sys_sendmsg+0x10/0x10 [ 492.171849][T12665] ? get_pid_task+0x20/0x1f0 [ 492.171870][T12665] ? get_pid_task+0x20/0x1f0 [ 492.171887][T12665] ? get_pid_task+0x20/0x1f0 [ 492.171945][T12665] ? __fget_files+0x3a2/0x420 [ 492.171966][T12665] ? __fget_files+0x2a/0x420 [ 492.171995][T12665] __sys_sendmsg+0x177/0x240 [ 492.172025][T12665] ? __pfx___sys_sendmsg+0x10/0x10 [ 492.172063][T12665] ? __might_fault+0xaf/0x130 [ 492.172089][T12665] __do_fast_syscall_32+0x28b/0x6c0 [ 492.172118][T12665] ? do_fast_syscall_32+0x33/0x70 [ 492.172143][T12665] ? asm_int80_emulation+0x1a/0x20 [ 492.172159][T12665] ? do_int80_emulation+0x299/0x500 [ 492.172183][T12665] ? trace_irq_disable+0x3b/0x140 [ 492.172207][T12665] do_fast_syscall_32+0x33/0x70 [ 492.172233][T12665] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 492.172255][T12665] RIP: 0023:0xf747ef1c [ 492.172273][T12665] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 492.172290][T12665] RSP: 002b:00000000f549650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 492.172313][T12665] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000840 [ 492.172326][T12665] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 492.172337][T12665] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 492.172349][T12665] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 492.172361][T12665] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 492.172388][T12665] [ 492.262900][ T5733] usb 5-1: new full-speed USB device number 89 using dummy_hcd [ 492.438110][ T5733] usb 5-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 492.441842][ T5733] usb 5-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 492.441868][ T5733] usb 5-1: Product: syz [ 492.441883][ T5733] usb 5-1: Manufacturer: syz [ 492.441897][ T5733] usb 5-1: SerialNumber: syz [ 492.504150][ T5733] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 492.699002][ T5687] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 492.699186][ T5687] ath9k_htc: Failed to initialize the device [ 492.699609][ T10] usb 1-1: ath9k_htc: USB layer deinitialized [ 492.839088][ T5708] usb 3-1: new low-speed USB device number 91 using dummy_hcd [ 492.989542][ T5708] usb 3-1: Invalid ep0 maxpacket: 16 [ 493.038705][ T192] usb 7-1: new full-speed USB device number 46 using dummy_hcd [ 493.118902][ T5708] usb 3-1: new low-speed USB device number 92 using dummy_hcd [ 493.150750][ T5733] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 493.150796][ T5733] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 493.198671][ T192] usb 7-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 493.202626][ T192] usb 7-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 493.202657][ T192] usb 7-1: Product: syz [ 493.202672][ T192] usb 7-1: Manufacturer: syz [ 493.202687][ T192] usb 7-1: SerialNumber: syz [ 493.227104][ T192] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 493.267724][ T5708] usb 3-1: Invalid ep0 maxpacket: 16 [ 493.268030][ T5708] usb usb3-port1: attempt power cycle [ 493.372320][T12681] trusted_key: encrypted_key: master key parameter 'šcÍaƒ~53…Õ€ÆáE@|æ°ÿ¡Qrô™)Ï’qÐT"òªàJ{RH(*‹Õ D)‰%ßO±' is invalid [ 493.609028][ T5708] usb 3-1: new low-speed USB device number 93 using dummy_hcd [ 493.630208][ T5708] usb 3-1: Invalid ep0 maxpacket: 16 [ 493.758091][ T5708] usb 3-1: new low-speed USB device number 94 using dummy_hcd [ 493.779235][ T5708] usb 3-1: Invalid ep0 maxpacket: 16 [ 493.779591][ T5708] usb usb3-port1: unable to enumerate USB device [ 494.105420][ T192] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 494.105449][ T192] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 494.621298][ T5733] usb 5-1: USB disconnect, device number 89 [ 494.704427][ T30] audit: type=1326 audit(1792784981.866:4412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12694 comm="syz.4.2217" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf748ef1c code=0x0 [ 494.912827][ T9397] IPVS: starting estimator thread 0... [ 494.936850][T12708] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2222'. [ 494.948715][T12708] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2222'. [ 494.948733][T12708] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2222'. [ 494.997539][T12707] IPVS: using max 29 ests per chain, 69600 per kthread [ 495.047933][ T192] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 495.119371][ T5733] usb 7-1: USB disconnect, device number 46 [ 495.168073][ T10] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 495.218522][ T192] usb 6-1: Using ep0 maxpacket: 16 [ 495.219781][ T192] usb 6-1: New USB device found, idVendor=05d1, idProduct=2002, bcdDevice= 5.00 [ 495.224634][ T192] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 495.224661][ T192] usb 6-1: Product: syz [ 495.224676][ T192] usb 6-1: SerialNumber: syz [ 495.266739][ T192] usb 6-1: config 0 descriptor?? [ 495.282012][ T192] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 495.286651][ T192] usb 6-1: Detected FT2232C/D [ 495.347794][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 495.349287][ T10] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 495.350867][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 495.350911][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 495.350927][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 495.350955][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 495.350967][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 495.353282][ T10] usb 5-1: New USB device strings: Mfr=191, Product=249, SerialNumber=0 [ 495.353297][ T10] usb 5-1: Product: syz [ 495.353305][ T10] usb 5-1: Manufacturer: syz [ 495.372828][ T10] usb 5-1: config 0 descriptor?? [ 496.029364][ T5687] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 496.064895][T12719] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2224'. [ 496.169792][T12719] tap0: tun_chr_ioctl cmd 1074025680 [ 496.199525][ T5687] usb 7-1: unable to get BOS descriptor or descriptor too short [ 496.199571][ T5687] usb 7-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 496.205265][ T5687] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 496.205379][ T5687] usb 7-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 496.252493][ T5687] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.252511][ T5687] usb 7-1: Product: syz [ 496.252524][ T5687] usb 7-1: Manufacturer: syz [ 496.252568][ T5687] usb 7-1: SerialNumber: syz [ 496.659783][ T5687] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 496.696119][ T5687] snd-usb-audio 7-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 496.950156][ T5687] snd-usb-audio 7-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 496.970675][ T5687] usb 7-1: USB disconnect, device number 47 [ 497.054137][ T6333] udevd[6333]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 497.233754][ T30] audit: type=1800 audit(1792784984.396:4413): pid=12725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2225" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=-22 [ 497.977760][ T5733] usb 1-1: new low-speed USB device number 83 using dummy_hcd [ 498.057870][ T10] rc_core: IR keymap rc-hauppauge not found [ 498.057883][ T10] Registered IR keymap rc-empty [ 498.058165][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 498.079830][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 498.098961][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 498.132296][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input112 [ 498.162875][ T5733] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 498.166579][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 498.184374][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 498.200219][ T5733] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 498.200247][ T5733] usb 1-1: config 0 has no interface number 0 [ 498.200297][ T5733] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 498.200323][ T5733] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 498.200364][ T5733] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.218456][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 498.221445][ T5733] usb 1-1: config 0 descriptor?? [ 498.262857][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 498.277914][T12732] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 498.278874][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 498.304127][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 498.327492][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 498.328386][ T5733] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 498.355167][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 498.369878][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 498.387514][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 498.409248][ T10] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 498.409272][ T10] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 498.419146][ T5708] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 498.442962][ T10] usb 5-1: USB disconnect, device number 90 [ 498.630354][ T5708] usb 7-1: Using ep0 maxpacket: 32 [ 498.633885][ T5708] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 498.638296][ T5708] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 498.638345][ T5708] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 498.638371][ T5708] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 498.638396][ T5708] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 498.668014][ T5733] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 498.687338][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 498.724439][ T5708] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.724476][ T5708] usb 7-1: Product: syz [ 498.724485][ T5708] usb 7-1: Manufacturer: syz [ 498.724493][ T5708] usb 7-1: SerialNumber: syz [ 498.807094][ C1] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 498.838604][ T5733] usb 3-1: Using ep0 maxpacket: 8 [ 498.839663][ T5733] usb 3-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 498.844144][ T5733] usb 3-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 498.844178][ T5733] usb 3-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 498.844201][ T5733] usb 3-1: config 0 interface 0 has no altsetting 0 [ 498.844231][ T5733] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.902969][ T5733] usb 3-1: config 0 descriptor?? [ 499.060037][ T5708] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/input/input113 [ 499.238722][ T5708] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 499.238743][ T5708] (id 0x00) [ 499.321286][ T5672] usb 1-1: USB disconnect, device number 83 [ 499.418963][ T5708] rc_core: IR keymap rc-imon-pad not found [ 499.418983][ T5708] Registered IR keymap rc-empty [ 499.419064][ T5708] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 499.419106][ T5708] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 499.463981][ T5708] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0 [ 499.486473][ T5708] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0/input114 [ 499.540993][ T5708] imon 7-1:155.0: iMON device (15c2:ffdc, intf0) on usb<7:48> initialized [ 499.650119][ T5733] usbhid 3-1:0.0: can't add hid device: -71 [ 499.650222][ T5733] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 499.691697][ T5733] usb 3-1: USB disconnect, device number 95 [ 499.775348][ T192] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 499.775724][ T192] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 499.801469][ T192] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 499.817851][ T192] usb 6-1: USB disconnect, device number 51 [ 499.825747][ T192] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 499.826834][ T192] ftdi_sio 6-1:0.0: device disconnected [ 499.864436][T12728] imon:vfd_write: invalid payload size [ 500.165976][ T5733] usb 7-1: USB disconnect, device number 48 [ 500.325011][T12751] ÿ: renamed from dummy0 (while UP) [ 500.345764][T12752] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2231'. [ 500.374092][T12752] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2231'. [ 500.374116][T12752] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2231'. [ 500.396031][ T192] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 500.550671][ T192] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 500.570687][ T192] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.570715][ T192] usb 1-1: Product: syz [ 500.570729][ T192] usb 1-1: Manufacturer: syz [ 500.570744][ T192] usb 1-1: SerialNumber: syz [ 500.888608][T12758] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2235'. [ 500.888753][T12758] FAULT_INJECTION: forcing a failure. [ 500.888753][T12758] name failslab, interval 1, probability 0, space 0, times 0 [ 500.888782][T12758] CPU: 0 UID: 0 PID: 12758 Comm: syz.6.2235 Tainted: G L syzkaller #0 PREEMPT(full) [ 500.888807][T12758] Tainted: [L]=SOFTLOCKUP [ 500.888815][T12758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 500.888828][T12758] Call Trace: [ 500.888839][T12758] [ 500.888848][T12758] dump_stack_lvl+0xe8/0x150 [ 500.888881][T12758] should_fail_ex+0x410/0x560 [ 500.888908][T12758] should_failslab+0xa8/0x100 [ 500.888934][T12758] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 500.888958][T12758] ? __d_alloc+0x37/0x820 [ 500.888975][T12758] ? __d_alloc+0x37/0x820 [ 500.888999][T12758] __d_alloc+0x37/0x820 [ 500.889023][T12758] d_alloc+0x4b/0x190 [ 500.889042][T12758] ? lookup_one_qstr_excl+0xc4/0x360 [ 500.889066][T12758] lookup_one_qstr_excl+0xd8/0x360 [ 500.889086][T12758] ? lookup_noperm_common+0x245/0x430 [ 500.889107][T12758] start_dirop+0x5c/0x90 [ 500.889125][T12758] simple_start_creating+0xcc/0x110 [ 500.889147][T12758] ? __pfx_simple_start_creating+0x10/0x10 [ 500.889168][T12758] ? do_raw_spin_unlock+0xf5/0x200 [ 500.889192][T12758] ? mntput+0x65/0xc0 [ 500.889220][T12758] debugfs_start_creating+0xca/0x1b0 [ 500.889246][T12758] __debugfs_create_file+0x6f/0x400 [ 500.889273][T12758] debugfs_create_file_full+0x3f/0x60 [ 500.889299][T12758] ref_tracker_dir_debugfs+0x197/0x360 [ 500.889323][T12758] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 500.889375][T12758] ? __kvmalloc_node_noprof+0x52a/0x820 [ 500.889399][T12758] ? __kvmalloc_node_noprof+0x340/0x820 [ 500.889424][T12758] ? __raw_spin_lock_init+0x45/0x100 [ 500.889450][T12758] alloc_netdev_mqs+0x275/0x1240 [ 500.889474][T12758] ? __pfx_snprintf+0x10/0x10 [ 500.889491][T12758] ? __pfx_macvtap_setup+0x10/0x10 [ 500.889517][T12758] rtnl_create_link+0x321/0xd70 [ 500.889539][T12758] rtnl_newlink_create+0x258/0x7b0 [ 500.889568][T12758] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 500.889593][T12758] ? __pfx___mutex_lock+0x10/0x10 [ 500.889624][T12758] ? ns_capable+0x84/0xe0 [ 500.889648][T12758] rtnl_newlink+0x167a/0x1c30 [ 500.889682][T12758] ? __pfx_rtnl_newlink+0x10/0x10 [ 500.889701][T12758] ? __netlink_deliver_tap+0x4f1/0x6e0 [ 500.889718][T12758] ? netlink_deliver_tap+0x19c/0x1b0 [ 500.889733][T12758] ? netlink_unicast+0x8c1/0xa80 [ 500.889755][T12758] ? netlink_sendmsg+0x7f0/0xb20 [ 500.889771][T12758] ? sock_sendmsg_nosec+0x14e/0x190 [ 500.889795][T12758] ? ____sys_sendmsg+0x54e/0x850 [ 500.889814][T12758] ? ___sys_sendmsg+0x2a5/0x360 [ 500.889834][T12758] ? __sys_sendmsg+0x177/0x240 [ 500.889853][T12758] ? __do_fast_syscall_32+0x28b/0x6c0 [ 500.889875][T12758] ? do_fast_syscall_32+0x33/0x70 [ 500.889897][T12758] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 500.889948][T12758] ? kasan_quarantine_put+0xbb/0x1f0 [ 500.889969][T12758] ? lockdep_hardirqs_on+0x7b/0x110 [ 500.889993][T12758] ? nlmon_xmit+0xb0/0x100 [ 500.890014][T12758] ? kmem_cache_free+0x182/0x650 [ 500.890043][T12758] ? __lock_acquire+0x747/0x2de0 [ 500.890067][T12758] ? __pfx_hook_capable+0x10/0x10 [ 500.890090][T12758] ? __pfx_hook_capable+0x10/0x10 [ 500.890140][T12758] ? __pfx_rtnl_newlink+0x10/0x10 [ 500.890163][T12758] rtnetlink_rcv_msg+0x802/0xc00 [ 500.890192][T12758] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 500.890217][T12758] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 500.890242][T12758] ? __copy_skb_header+0xa3/0x4a0 [ 500.890266][T12758] netlink_rcv_skb+0x226/0x4a0 [ 500.890278][T12758] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 500.890292][T12758] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 500.890317][T12758] netlink_unicast+0x8ef/0xa80 [ 500.890348][T12758] netlink_sendmsg+0x7f0/0xb20 [ 500.890363][T12758] ? __pfx_netlink_sendmsg+0x10/0x10 [ 500.890376][T12758] ? aa_sock_msg_perm+0x144/0x210 [ 500.890392][T12758] ? apparmor_socket_sendmsg+0x98/0x360 [ 500.890404][T12758] ? __pfx_netlink_sendmsg+0x10/0x10 [ 500.890415][T12758] sock_sendmsg_nosec+0x14e/0x190 [ 500.890433][T12758] ____sys_sendmsg+0x54e/0x850 [ 500.890450][T12758] ? __pfx_____sys_sendmsg+0x10/0x10 [ 500.890473][T12758] ___sys_sendmsg+0x2a5/0x360 [ 500.890485][T12758] ? __lock_acquire+0x747/0x2de0 [ 500.890500][T12758] ? __pfx____sys_sendmsg+0x10/0x10 [ 500.890513][T12758] ? get_pid_task+0x20/0x1f0 [ 500.890524][T12758] ? get_pid_task+0x20/0x1f0 [ 500.890533][T12758] ? get_pid_task+0x20/0x1f0 [ 500.890561][T12758] ? __fget_files+0x3a2/0x420 [ 500.890572][T12758] ? __fget_files+0x2a/0x420 [ 500.890589][T12758] __sys_sendmsg+0x177/0x240 [ 500.890603][T12758] ? __pfx___sys_sendmsg+0x10/0x10 [ 500.890624][T12758] ? __might_fault+0xaf/0x130 [ 500.890639][T12758] __do_fast_syscall_32+0x28b/0x6c0 [ 500.890654][T12758] ? do_fast_syscall_32+0x33/0x70 [ 500.890667][T12758] ? asm_int80_emulation+0x1a/0x20 [ 500.890677][T12758] ? do_int80_emulation+0x299/0x500 [ 500.890691][T12758] ? trace_irq_disable+0x3b/0x140 [ 500.890706][T12758] do_fast_syscall_32+0x33/0x70 [ 500.890721][T12758] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 500.890734][T12758] RIP: 0023:0xf7f03f1c [ 500.890745][T12758] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 500.890754][T12758] RSP: 002b:00000000f53b650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 500.890767][T12758] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000080 [ 500.890775][T12758] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 500.890781][T12758] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 500.890788][T12758] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 500.890794][T12758] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 500.890811][T12758] [ 501.092921][ T192] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 501.092983][ T192] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 501.434774][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.434833][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.665622][T12763] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2246'. [ 501.858932][ T5733] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 502.010048][ T5733] usb 7-1: unable to get BOS descriptor or descriptor too short [ 502.010083][ T5733] usb 7-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 502.011242][ T5733] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 502.011313][ T5733] usb 7-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 502.013100][ T5733] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.013116][ T5733] usb 7-1: Product: syz [ 502.013129][ T5733] usb 7-1: Manufacturer: syz [ 502.013145][ T5733] usb 7-1: SerialNumber: syz [ 502.397095][ T5733] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 502.430905][ T5733] snd-usb-audio 7-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 502.521096][ T5733] snd-usb-audio 7-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 502.526905][ T5733] usb 7-1: USB disconnect, device number 49 [ 502.584570][ T5630] udevd[5630]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 502.627545][ T5672] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 502.630094][T12779] tipc: Enabling of bearer rejected, already enabled [ 502.673227][ T192] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000404. ret = -EPROTO [ 502.673286][ T192] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 502.673974][ T192] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 502.683525][ T192] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 502.689952][ T5671] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 502.694586][ T192] usb 1-1: USB disconnect, device number 84 [ 502.778115][ T5672] usb 3-1: Using ep0 maxpacket: 16 [ 502.778924][ T5672] usb 3-1: New USB device found, idVendor=05d1, idProduct=2002, bcdDevice= 5.00 [ 502.782578][ T5672] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 502.782603][ T5672] usb 3-1: Product: syz [ 502.782617][ T5672] usb 3-1: SerialNumber: syz [ 502.786016][ T5672] usb 3-1: config 0 descriptor?? [ 502.829614][ T5672] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 502.840272][ T5672] usb 3-1: Detected FT2232C/D [ 502.862465][ T5671] usb 6-1: unable to get BOS descriptor or descriptor too short [ 502.862541][ T5671] usb 6-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 502.863810][ T5671] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 502.863888][ T5671] usb 6-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 502.885066][ T5671] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.885085][ T5671] usb 6-1: Product: syz [ 502.885094][ T5671] usb 6-1: Manufacturer: syz [ 502.885101][ T5671] usb 6-1: SerialNumber: syz [ 503.237563][ T5708] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 503.387889][ T5708] usb 5-1: Using ep0 maxpacket: 8 [ 503.388830][ T5708] usb 5-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 503.390727][ T5708] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 503.390758][ T5708] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 503.390992][ T5708] usb 5-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 503.391051][ T5708] usb 5-1: config 0 interface 0 has no altsetting 0 [ 503.391186][ T5708] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.395769][ T5708] usb 5-1: config 0 descriptor?? [ 503.473881][T12795] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2250'. [ 503.905884][ T5708] input: HID 046d:c623 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:046D:C623.0017/input/input115 [ 504.006708][ T5708] logitech 0003:046D:C623.0017: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 046d:c623] on usb-dummy_hcd.4-1/input0 [ 504.139962][ T30] audit: type=1326 audit(1792784991.306:4414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12784 comm="syz.4.2245" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf748ef1c code=0x0 [ 504.473358][T12808] kAFS: unable to lookup cell 'mS²jË¡8' [ 504.741846][ T5708] usb 5-1: USB disconnect, device number 91 [ 505.208598][T12813] tipc: Cannot configure node identity twice [ 505.352557][T12822] tipc: Enabling of bearer rejected, already enabled [ 505.454143][T12829] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2259'. [ 505.454742][T12829] FAULT_INJECTION: forcing a failure. [ 505.454742][T12829] name failslab, interval 1, probability 0, space 0, times 0 [ 505.454776][T12829] CPU: 1 UID: 0 PID: 12829 Comm: syz.0.2259 Tainted: G L syzkaller #0 PREEMPT(full) [ 505.454796][T12829] Tainted: [L]=SOFTLOCKUP [ 505.454801][T12829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 505.454808][T12829] Call Trace: [ 505.454815][T12829] [ 505.454821][T12829] dump_stack_lvl+0xe8/0x150 [ 505.454842][T12829] should_fail_ex+0x410/0x560 [ 505.454859][T12829] ? __alloc_skb+0x1db/0x7a0 [ 505.454873][T12829] should_failslab+0xa8/0x100 [ 505.454890][T12829] ? __alloc_skb+0x1db/0x7a0 [ 505.454901][T12829] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 505.454915][T12829] ? __alloc_skb+0x18d/0x7a0 [ 505.454927][T12829] ? __alloc_skb+0x1db/0x7a0 [ 505.454942][T12829] __alloc_skb+0x1db/0x7a0 [ 505.454956][T12829] rtmsg_ifa+0xf8/0x1f0 [ 505.454975][T12829] inet_rtm_newaddr+0x14b4/0x19f0 [ 505.454989][T12829] ? __pfx_hook_capable+0x10/0x10 [ 505.455008][T12829] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 505.455059][T12829] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 505.455070][T12829] rtnetlink_rcv_msg+0x802/0xc00 [ 505.455087][T12829] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 505.455100][T12829] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 505.455114][T12829] ? __copy_skb_header+0xa3/0x4a0 [ 505.455134][T12829] netlink_rcv_skb+0x226/0x4a0 [ 505.455146][T12829] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 505.455161][T12829] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 505.455178][T12829] ? netlink_deliver_tap+0x2e/0x1b0 [ 505.455189][T12829] ? netlink_deliver_tap+0x2e/0x1b0 [ 505.455203][T12829] netlink_unicast+0x8ef/0xa80 [ 505.455227][T12829] netlink_sendmsg+0x7f0/0xb20 [ 505.455242][T12829] ? __pfx_netlink_sendmsg+0x10/0x10 [ 505.455255][T12829] ? aa_sock_msg_perm+0x144/0x210 [ 505.455271][T12829] ? apparmor_socket_sendmsg+0x98/0x360 [ 505.455283][T12829] ? __pfx_netlink_sendmsg+0x10/0x10 [ 505.455293][T12829] sock_sendmsg_nosec+0x14e/0x190 [ 505.455312][T12829] __sys_sendto+0x408/0x5a0 [ 505.455327][T12829] ? __pfx___sys_sendto+0x10/0x10 [ 505.455358][T12829] __ia32_sys_sendto+0xdd/0x100 [ 505.455373][T12829] __do_fast_syscall_32+0x28b/0x6c0 [ 505.455388][T12829] ? do_fast_syscall_32+0x33/0x70 [ 505.455402][T12829] ? asm_int80_emulation+0x1a/0x20 [ 505.455412][T12829] ? do_int80_emulation+0x299/0x500 [ 505.455426][T12829] ? trace_irq_disable+0x3b/0x140 [ 505.455441][T12829] do_fast_syscall_32+0x33/0x70 [ 505.455455][T12829] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 505.455468][T12829] RIP: 0023:0xf7fb4f1c [ 505.455480][T12829] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 505.455489][T12829] RSP: 002b:00000000f546650c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 505.455501][T12829] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 505.455509][T12829] RDX: 0000000000010a73 RSI: 0000000000000800 RDI: 0000000000000000 [ 505.455516][T12829] RBP: 000000005a5de35b R08: 0000000000000000 R09: 0000000000000000 [ 505.455525][T12829] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 505.455532][T12829] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 505.455548][T12829] [ 505.488098][T12828] netlink: 'syz.6.2258': attribute type 21 has an invalid length. [ 505.747111][T12832] create_pit_timer: 66 callbacks suppressed [ 505.747133][T12832] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 505.794439][T12832] kvm: pic: non byte read [ 505.794703][T12832] kvm: pic: level sensitive irq not supported [ 505.794779][T12832] kvm: pic: non byte read [ 505.794981][T12832] kvm: pic: level sensitive irq not supported [ 505.795036][T12832] kvm: pic: non byte read [ 505.797874][T12832] kvm: pic: level sensitive irq not supported [ 505.797932][T12832] kvm: pic: non byte read [ 505.798103][T12832] kvm: pic: level sensitive irq not supported [ 505.798172][T12832] kvm: pic: non byte read [ 505.798504][T12832] kvm: pic: level sensitive irq not supported [ 505.798577][T12832] kvm: pic: non byte read [ 505.798728][T12832] kvm: pic: level sensitive irq not supported [ 505.798797][T12832] kvm: pic: non byte read [ 505.902937][ T5671] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 505.920328][ T5671] snd-usb-audio 6-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 506.049204][ T5671] snd-usb-audio 6-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 506.065165][ T5671] usb 6-1: USB disconnect, device number 52 [ 506.158947][T10583] udevd[10583]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 506.228118][T12840] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 506.232851][T12840] FAULT_INJECTION: forcing a failure. [ 506.232851][T12840] name failslab, interval 1, probability 0, space 0, times 0 [ 506.232888][T12840] CPU: 0 UID: 0 PID: 12840 Comm: syz.6.2263 Tainted: G L syzkaller #0 PREEMPT(full) [ 506.232916][T12840] Tainted: [L]=SOFTLOCKUP [ 506.232924][T12840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 506.232938][T12840] Call Trace: [ 506.232947][T12840] [ 506.232966][T12840] dump_stack_lvl+0xe8/0x150 [ 506.233001][T12840] should_fail_ex+0x410/0x560 [ 506.233033][T12840] should_failslab+0xa8/0x100 [ 506.233066][T12840] __kmalloc_noprof+0xf9/0x710 [ 506.233091][T12840] ? rcu_is_watching+0x16/0xb0 [ 506.233119][T12840] ? tomoyo_realpath_from_path+0xef/0x640 [ 506.233144][T12840] ? tomoyo_realpath_from_path+0xef/0x640 [ 506.233177][T12840] tomoyo_realpath_from_path+0xef/0x640 [ 506.233212][T12840] ? tomoyo_path_number_perm+0x219/0x5f0 [ 506.233235][T12840] tomoyo_path_number_perm+0x246/0x5f0 [ 506.233259][T12840] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 506.233278][T12840] ? __lock_acquire+0x747/0x2de0 [ 506.233341][T12840] ? __fget_files+0x2a/0x420 [ 506.233367][T12840] ? __fget_files+0x2a/0x420 [ 506.233387][T12840] ? __fget_files+0x3a2/0x420 [ 506.233408][T12840] ? __fget_files+0x2a/0x420 [ 506.233434][T12840] security_file_ioctl_compat+0xc3/0x2a0 [ 506.233468][T12840] __ia32_compat_sys_ioctl+0x139/0x950 [ 506.233500][T12840] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 506.233529][T12840] ? __fget_files+0x3a2/0x420 [ 506.233550][T12840] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 506.233584][T12840] ? lock_acquire+0x115/0x350 [ 506.233620][T12840] ? __might_fault+0xaf/0x130 [ 506.233646][T12840] __do_fast_syscall_32+0x28b/0x6c0 [ 506.233676][T12840] ? do_fast_syscall_32+0x33/0x70 [ 506.233703][T12840] ? asm_int80_emulation+0x1a/0x20 [ 506.233722][T12840] ? do_int80_emulation+0x299/0x500 [ 506.233748][T12840] ? trace_irq_disable+0x3b/0x140 [ 506.233777][T12840] do_fast_syscall_32+0x33/0x70 [ 506.233805][T12840] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 506.233830][T12840] RIP: 0023:0xf7f03f1c [ 506.233849][T12840] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 506.233866][T12840] RSP: 002b:00000000f53b650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 506.233889][T12840] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80 [ 506.233908][T12840] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 506.233921][T12840] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 506.233933][T12840] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 506.233946][T12840] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 506.233983][T12840] [ 506.236365][T12840] ERROR: Out of memory at tomoyo_realpath_from_path. [ 506.246679][T12840] kvm: pic: non byte read [ 506.246889][T12840] kvm: pic: level sensitive irq not supported [ 506.246943][T12840] kvm: pic: non byte read [ 506.247107][T12840] kvm: pic: level sensitive irq not supported [ 506.247157][T12840] kvm: pic: non byte read [ 506.268300][T12840] kvm: pic: level sensitive irq not supported [ 506.269700][T12840] kvm: pic: level sensitive irq not supported [ 506.315795][ T5672] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 506.344339][T12843] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 506.355977][ T5672] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 506.492443][ T5672] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 506.533764][ T5671] usb 6-1: new full-speed USB device number 53 using dummy_hcd [ 506.552706][T12850] fuse: Bad value for 'fd' [ 506.628504][ T5672] usb 3-1: USB disconnect, device number 96 [ 506.635956][ T5672] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 506.636473][ T5672] ftdi_sio 3-1:0.0: device disconnected [ 506.712599][ T5671] usb 6-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 506.738785][ T5671] usb 6-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 506.738815][ T5671] usb 6-1: Product: syz [ 506.738829][ T5671] usb 6-1: Manufacturer: syz [ 506.738842][ T5671] usb 6-1: SerialNumber: syz [ 506.777241][ T5671] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 506.836859][T12861] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2271'. [ 506.866617][T12860] tipc: Enabling of bearer rejected, already enabled [ 507.479039][ T5671] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 507.479067][ T5671] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 507.511326][T12882] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2279'. [ 507.514277][T12882] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2279'. [ 507.514301][T12882] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2279'. [ 507.558651][ T10] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 507.568943][ T5733] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 507.717401][ T5733] usb 3-1: Using ep0 maxpacket: 8 [ 507.717846][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 507.718224][ T5733] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 507.718456][ T10] usb 1-1: New USB device found, idVendor=05d1, idProduct=2002, bcdDevice= 5.00 [ 507.724545][ T10] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 507.724562][ T10] usb 1-1: Product: syz [ 507.724571][ T10] usb 1-1: SerialNumber: syz [ 507.725781][ T5733] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.725814][ T5733] usb 3-1: Product: syz [ 507.725829][ T5733] usb 3-1: Manufacturer: syz [ 507.725843][ T5733] usb 3-1: SerialNumber: syz [ 507.732451][ T10] usb 1-1: config 0 descriptor?? [ 507.746187][ T10] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 507.752977][ T10] usb 1-1: Detected FT2232C/D [ 507.816349][ T5733] usb 3-1: config 0 descriptor?? [ 507.825491][ T5733] gspca_main: se401-2.14.0 probing 047d:5003 [ 508.010978][T12887] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2281'. [ 508.099441][T12887] tap0: tun_chr_ioctl cmd 1074025680 [ 508.423859][T12894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.424581][T12894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.705440][T12896] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2282'. [ 508.831297][ T5671] usb 6-1: USB disconnect, device number 53 [ 508.932254][T12899] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2283'. [ 508.939753][T12899] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2283'. [ 508.939775][T12899] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2283'. [ 509.098009][ T5733] gspca_se401: write req failed req 0x57 val 0x00 error -110 [ 509.098131][ T5733] se401 3-1:0.0: probe with driver se401 failed with error -110 [ 510.395617][ T5687] usb 3-1: USB disconnect, device number 97 [ 510.407554][ T5733] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 510.567659][ T5733] usb 5-1: Using ep0 maxpacket: 16 [ 510.574582][ T5733] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 510.587648][ T5733] usb 5-1: config 0 has an invalid descriptor of length 246, skipping remainder of the config [ 510.587674][ T5733] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 510.612480][ T5733] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.612509][ T5733] usb 5-1: Product: syz [ 510.612537][ T5733] usb 5-1: Manufacturer: syz [ 510.612553][ T5733] usb 5-1: SerialNumber: syz [ 510.627650][ T5733] usb 5-1: config 0 descriptor?? [ 510.851222][T12918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.851601][T12918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.878978][ T5733] usb 5-1: USB disconnect, device number 92 [ 511.036859][ T10] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 511.045662][ T10] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 511.116143][ T10] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 511.146098][ T10] usb 1-1: USB disconnect, device number 85 [ 511.164397][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 511.164957][ T10] ftdi_sio 1-1:0.0: device disconnected [ 511.232837][T12935] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2296'. [ 511.317535][ T5733] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 511.463428][T12940] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2297'. [ 511.478512][ T5733] usb 5-1: Using ep0 maxpacket: 16 [ 511.479217][ T5733] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 511.481969][ T5733] usb 5-1: config 0 has an invalid descriptor of length 246, skipping remainder of the config [ 511.481995][ T5733] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 511.484236][ T5733] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.484262][ T5733] usb 5-1: Product: syz [ 511.484286][ T5733] usb 5-1: Manufacturer: syz [ 511.484301][ T5733] usb 5-1: SerialNumber: syz [ 511.502309][ T5733] usb 5-1: config 0 descriptor?? [ 511.837580][ T10] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 511.987470][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 511.993113][ T10] usb 7-1: unable to get BOS descriptor or descriptor too short [ 511.993145][ T10] usb 7-1: New USB device found, idVendor=fc08, idProduct=0101, bcdDevice= 0.40 [ 511.996538][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.996565][ T10] usb 7-1: Product: syz [ 511.996576][ T10] usb 7-1: Manufacturer: syz [ 511.996608][ T10] usb 7-1: SerialNumber: syz [ 512.053102][T12918] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 512.074820][T12918] dvmrp0: entered allmulticast mode [ 512.099425][T12918] syz.4.2290: vmalloc error: size 16384, failed to allocate pages, mode:0x400cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 512.099513][T12918] CPU: 0 UID: 0 PID: 12918 Comm: syz.4.2290 Tainted: G L syzkaller #0 PREEMPT(full) [ 512.099543][T12918] Tainted: [L]=SOFTLOCKUP [ 512.099552][T12918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 512.099565][T12918] Call Trace: [ 512.099573][T12918] [ 512.099582][T12918] dump_stack_lvl+0xe8/0x150 [ 512.099609][T12918] warn_alloc+0x24d/0x270 [ 512.099627][T12918] ? __pfx_warn_alloc+0x10/0x10 [ 512.099644][T12918] ? alloc_pages_mpol+0x256/0x390 [ 512.099668][T12918] __vmalloc_node_range_noprof+0x11a9/0x1540 [ 512.099716][T12918] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 512.099738][T12918] ? io_ring_ctx_alloc+0x1ad/0xb80 [ 512.099759][T12918] ? rcu_is_watching+0x16/0xb0 [ 512.099785][T12918] ? io_ring_ctx_alloc+0x1ad/0xb80 [ 512.099795][T12918] ? rcu_is_watching+0x16/0xb0 [ 512.099811][T12918] ? io_ring_ctx_alloc+0x1ad/0xb80 [ 512.099821][T12918] __kvmalloc_node_noprof+0x59c/0x820 [ 512.099837][T12918] ? io_ring_ctx_alloc+0x1ad/0xb80 [ 512.099848][T12918] ? __kmalloc_cache_noprof+0x31c/0x600 [ 512.099863][T12918] ? io_ring_ctx_alloc+0x1ad/0xb80 [ 512.099877][T12918] io_ring_ctx_alloc+0x1ad/0xb80 [ 512.099889][T12918] ? io_prepare_config+0x8c8/0xc70 [ 512.099904][T12918] io_uring_create+0x50/0x980 [ 512.099917][T12918] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 512.099932][T12918] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 512.099959][T12918] ? __might_fault+0xaf/0x130 [ 512.099973][T12918] __do_fast_syscall_32+0x28b/0x6c0 [ 512.099989][T12918] ? do_fast_syscall_32+0x33/0x70 [ 512.100004][T12918] ? irqentry_exit+0x10f/0x9b0 [ 512.100019][T12918] do_fast_syscall_32+0x33/0x70 [ 512.100035][T12918] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 512.100050][T12918] RIP: 0023:0xf748ef1c [ 512.100061][T12918] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 512.100071][T12918] RSP: 002b:00000000f54a64bc EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 512.100082][T12918] RAX: ffffffffffffffda RBX: 0000000000007384 RCX: 0000000080000940 [ 512.100090][T12918] RDX: 00000000f72111d7 RSI: 0000000000000001 RDI: 00000000f54a653c [ 512.100098][T12918] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 512.100104][T12918] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 512.100111][T12918] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 512.100128][T12918] [ 512.100150][T12918] Mem-Info: [ 512.100156][T12918] active_anon:11857 inactive_anon:26 isolated_anon:0 [ 512.100156][T12918] active_file:2135 inactive_file:55268 isolated_file:0 [ 512.100156][T12918] unevictable:0 dirty:757 writeback:0 [ 512.100156][T12918] slab_reclaimable:12844 slab_unreclaimable:105732 [ 512.100156][T12918] mapped:34676 shmem:6490 pagetables:1449 [ 512.100156][T12918] sec_pagetables:0 bounce:0 [ 512.100156][T12918] kernel_misc_reclaimable:0 [ 512.100156][T12918] free:1272549 free_pcp:9585 free_cma:0 [ 512.100186][T12918] Node 0 active_anon:47428kB inactive_anon:104kB active_file:8540kB inactive_file:220844kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:138676kB dirty:3028kB writeback:0kB shmem:25960kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13532kB pagetables:5636kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 512.100216][T12918] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:228kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 512.100244][T12918] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 512.100290][T12918] lowmem_reserve[]: 0 2466 2466 2466 2466 [ 512.100311][T12918] Node 0 DMA32 free:1146540kB boost:0kB min:33980kB low:42472kB high:50964kB reserved_highatomic:0kB free_highatomic:0kB active_anon:47428kB inactive_anon:104kB active_file:8540kB inactive_file:220844kB unevictable:0kB writepending:3028kB zspages:280kB present:3129332kB managed:2526008kB mlocked:0kB bounce:0kB free_pcp:33740kB local_pcp:17336kB free_cma:0kB [ 512.100342][T12918] lowmem_reserve[]: 0 0 0 0 0 [ 512.100361][T12918] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 512.100389][T12918] lowmem_reserve[]: 0 0 0 0 0 [ 512.100407][T12918] Node 1 Normal free:3928296kB boost:0kB min:55920kB low:69900kB high:83880kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:228kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:4600kB local_pcp:4096kB free_cma:0kB [ 512.100461][T12918] lowmem_reserve[]: 0 0 0 0 0 [ 512.100487][T12918] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 512.100572][T12918] Node 0 DMA32: 631*4kB (UE) 261*8kB (UM) 555*16kB (UM) 248*32kB (UME) 249*64kB (UME) 121*128kB (UME) 84*256kB (UM) 60*512kB (UME) 19*1024kB (UM) 9*2048kB (UM) 245*4096kB (UM) = 1146484kB [ 512.100709][T12918] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 512.100761][T12918] Node 1 Normal: 9*4kB (UM) 15*8kB (UM) 10*16kB (UM) 5*32kB (UM) 5*64kB (UM) 2*128kB (UM) 1*256kB (M) 2*512kB (UM) 2*1024kB (UM) 2*2048kB (M) 957*4096kB (UM) = 3928348kB [ 512.100855][T12918] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 512.100864][T12918] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 512.100872][T12918] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 512.100881][T12918] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 512.100889][T12918] 63909 total pagecache pages [ 512.100894][T12918] 20 pages in swap cache [ 512.100898][T12918] Free swap = 124844kB [ 512.100902][T12918] Total swap = 124996kB [ 512.100907][T12918] 2097051 pages RAM [ 512.100911][T12918] 0 pages HighMem/MovableOnly [ 512.100915][T12918] 433933 pages reserved [ 512.100919][T12918] 0 pages cma reserved [ 512.154905][ T9] usb 5-1: USB disconnect, device number 93 [ 512.337696][ T5687] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 512.366518][T12957] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2304'. [ 512.491011][ T5687] usb 1-1: unable to get BOS descriptor or descriptor too short [ 512.491063][ T5687] usb 1-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 512.492663][ T5687] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 512.492749][ T5687] usb 1-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 512.495743][ T5687] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.495767][ T5687] usb 1-1: Product: syz [ 512.495782][ T5687] usb 1-1: Manufacturer: syz [ 512.495795][ T5687] usb 1-1: SerialNumber: syz [ 513.044129][T12969] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2307'. [ 513.044147][T12969] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2307'. [ 513.100515][T12970] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2308'. [ 513.100539][T12970] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2308'. [ 513.507546][ T5708] usb 3-1: new full-speed USB device number 99 using dummy_hcd [ 513.668837][ T5708] usb 3-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 513.674661][ T5708] usb 3-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 513.674690][ T5708] usb 3-1: Product: syz [ 513.674704][ T5708] usb 3-1: Manufacturer: syz [ 513.674719][ T5708] usb 3-1: SerialNumber: syz [ 513.721099][ T5708] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 514.435974][ T5708] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 514.436023][ T5708] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 514.546689][ T10] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 514.546799][ T10] usb 7-1: MIDIStreaming interface descriptor not found [ 514.611580][T12986] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2314'. [ 514.704550][ T10] usb 7-1: USB disconnect, device number 50 [ 514.876374][T12994] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2317'. [ 514.893969][T12994] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2317'. [ 514.920635][ T6333] udevd[6333]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 515.157851][ T10] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 515.234957][ T5687] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 515.255794][ T5687] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 515.309972][ T10] usb 7-1: New USB device found, idVendor=0a12, idProduct=0001, bcdDevice= 0.00 [ 515.310842][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 515.310857][ T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 515.314225][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.314241][ T10] usb 7-1: Product: syz [ 515.314249][ T10] usb 7-1: Manufacturer: syz [ 515.314257][ T10] usb 7-1: SerialNumber: syz [ 515.530980][ T9] usb 3-1: USB disconnect, device number 99 [ 515.596066][ C0] Bluetooth: hci5: corrupted ACL packet [ 515.670706][ T5687] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 515.674780][ T5687] usb 1-1: USB disconnect, device number 86 [ 515.752560][ T5788] udevd[5788]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 516.160295][ T5687] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 516.317596][ T5687] usb 1-1: Using ep0 maxpacket: 8 [ 516.318261][ T5687] usb 1-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 516.323175][ T5687] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 516.323195][ T5687] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 516.323207][ T5687] usb 1-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 516.323222][ T5687] usb 1-1: config 0 interface 0 has no altsetting 0 [ 516.323243][ T5687] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.344399][ T5687] usb 1-1: config 0 descriptor?? [ 516.776454][ T5622] Bluetooth: hci5: CSR: Local version failed (-71) [ 516.786058][ T5733] usb 7-1: USB disconnect, device number 51 [ 516.807494][ T9] usb 5-1: new full-speed USB device number 94 using dummy_hcd [ 516.840869][ T5687] input: HID 046d:c623 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:046D:C623.0018/input/input116 [ 516.966666][ T5687] logitech 0003:046D:C623.0018: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 046d:c623] on usb-dummy_hcd.0-1/input0 [ 516.982532][ T9] usb 5-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 517.001916][ T9] usb 5-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 517.001946][ T9] usb 5-1: Product: syz [ 517.001961][ T9] usb 5-1: Manufacturer: syz [ 517.001976][ T9] usb 5-1: SerialNumber: syz [ 517.041916][ T9] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 517.086985][ T30] audit: type=1326 audit(1792785004.246:4415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13005 comm="syz.0.2322" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fb4f1c code=0x0 [ 517.115387][T13015] FAULT_INJECTION: forcing a failure. [ 517.115387][T13015] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 517.115414][T13015] CPU: 0 UID: 0 PID: 13015 Comm: syz.2.2326 Tainted: G L syzkaller #0 PREEMPT(full) [ 517.115430][T13015] Tainted: [L]=SOFTLOCKUP [ 517.115435][T13015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 517.115442][T13015] Call Trace: [ 517.115447][T13015] [ 517.115453][T13015] dump_stack_lvl+0xe8/0x150 [ 517.115473][T13015] should_fail_ex+0x410/0x560 [ 517.115490][T13015] _copy_from_user+0x2d/0xb0 [ 517.115506][T13015] get_compat_msghdr+0xb3/0x4c0 [ 517.115519][T13015] ? __pfx_get_compat_msghdr+0x10/0x10 [ 517.115537][T13015] ___sys_sendmsg+0x201/0x360 [ 517.115551][T13015] ? __lock_acquire+0x747/0x2de0 [ 517.115566][T13015] ? __pfx____sys_sendmsg+0x10/0x10 [ 517.115580][T13015] ? get_pid_task+0x20/0x1f0 [ 517.115591][T13015] ? get_pid_task+0x20/0x1f0 [ 517.115599][T13015] ? get_pid_task+0x20/0x1f0 [ 517.115625][T13015] ? __fget_files+0x3a2/0x420 [ 517.115637][T13015] ? __fget_files+0x2a/0x420 [ 517.115653][T13015] __sys_sendmsg+0x177/0x240 [ 517.115668][T13015] ? __pfx___sys_sendmsg+0x10/0x10 [ 517.115687][T13015] ? __might_fault+0xaf/0x130 [ 517.115702][T13015] __do_fast_syscall_32+0x28b/0x6c0 [ 517.115717][T13015] ? do_fast_syscall_32+0x33/0x70 [ 517.115731][T13015] ? asm_int80_emulation+0x1a/0x20 [ 517.115742][T13015] ? do_int80_emulation+0x299/0x500 [ 517.115755][T13015] ? trace_irq_disable+0x3b/0x140 [ 517.115774][T13015] do_fast_syscall_32+0x33/0x70 [ 517.115788][T13015] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 517.115801][T13015] RIP: 0023:0xf747ef1c [ 517.115812][T13015] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 517.115822][T13015] RSP: 002b:00000000f549650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 517.115834][T13015] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000840 [ 517.115842][T13015] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 517.115849][T13015] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 517.115855][T13015] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 517.115861][T13015] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 517.115877][T13015] [ 517.488974][T13018] __nla_validate_parse: 3 callbacks suppressed [ 517.488989][T13018] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2327'. [ 517.488998][T13018] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2327'. [ 517.807409][ T9] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 517.807436][ T9] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 518.097922][ T9] usb 1-1: reset high-speed USB device number 87 using dummy_hcd [ 518.237794][ T5733] usb 3-1: new full-speed USB device number 100 using dummy_hcd [ 518.388151][ T5733] usb 3-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 518.391055][ T5733] usb 3-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 518.391089][ T5733] usb 3-1: Product: syz [ 518.391104][ T5733] usb 3-1: Manufacturer: syz [ 518.391118][ T5733] usb 3-1: SerialNumber: syz [ 518.400091][ T5733] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 518.731886][ T5687] usb 5-1: USB disconnect, device number 94 [ 518.926380][ T5733] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 518.926433][ T5733] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 519.033745][T13044] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2333'. [ 519.200132][T13053] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2338'. [ 519.202125][T13053] netlink: 'syz.4.2338': attribute type 1 has an invalid length. [ 519.357748][ T5733] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 519.740004][ T5701] usb 1-1: USB disconnect, device number 87 [ 519.948138][ T5687] usb 3-1: USB disconnect, device number 100 [ 519.954641][T13067] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2339'. [ 519.954663][T13067] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2339'. [ 519.983357][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 520.417417][ T5733] usb 7-1: device descriptor read/64, error -71 [ 520.497837][ T5687] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 520.647386][ T5687] usb 5-1: Using ep0 maxpacket: 8 [ 520.648183][ T5687] usb 5-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 520.649295][ T5687] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 520.649318][ T5687] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 520.649331][ T5687] usb 5-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 520.649344][ T5687] usb 5-1: config 0 interface 0 has no altsetting 0 [ 520.649363][ T5687] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.654337][ T5687] usb 5-1: config 0 descriptor?? [ 520.657614][ T5733] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 520.807927][ T5733] usb 7-1: Using ep0 maxpacket: 16 [ 520.808802][ T5733] usb 7-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 520.832251][ T5733] usb 7-1: config 0 has an invalid descriptor of length 246, skipping remainder of the config [ 520.832286][ T5733] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 520.855064][ T5733] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.855091][ T5733] usb 7-1: Product: syz [ 520.855105][ T5733] usb 7-1: Manufacturer: syz [ 520.855119][ T5733] usb 7-1: SerialNumber: syz [ 520.882285][ T5733] usb 7-1: config 0 descriptor?? [ 521.105408][T13066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 521.105683][T13066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 521.113207][ T5687] input: HID 046d:c623 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:046D:C623.0019/input/input117 [ 521.116692][ T9] usb 7-1: USB disconnect, device number 53 [ 521.233215][ T5687] logitech 0003:046D:C623.0019: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 046d:c623] on usb-dummy_hcd.4-1/input0 [ 521.325566][ T30] audit: type=1326 audit(1792785008.486:4416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13072 comm="syz.4.2344" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf748ef1c code=0x0 [ 521.587556][ T5708] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 521.607440][ T5733] usb 3-1: new full-speed USB device number 101 using dummy_hcd [ 521.637432][ T5687] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 521.747535][ T5708] usb 7-1: Using ep0 maxpacket: 16 [ 521.749864][ T5708] usb 7-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 521.750824][ T5708] usb 7-1: config 0 has an invalid descriptor of length 246, skipping remainder of the config [ 521.750848][ T5708] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 521.752748][ T5708] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.752771][ T5708] usb 7-1: Product: syz [ 521.752786][ T5708] usb 7-1: Manufacturer: syz [ 521.752800][ T5708] usb 7-1: SerialNumber: syz [ 521.755534][ T5708] usb 7-1: config 0 descriptor?? [ 521.757414][ T9] usb 1-1: new low-speed USB device number 88 using dummy_hcd [ 521.778465][ T5733] usb 3-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 521.782399][ T5733] usb 3-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 521.782425][ T5733] usb 3-1: Product: syz [ 521.782439][ T5733] usb 3-1: Manufacturer: syz [ 521.782453][ T5733] usb 3-1: SerialNumber: syz [ 521.791626][ T5733] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 521.871765][ T5687] usb 6-1: unable to get BOS descriptor or descriptor too short [ 521.871816][ T5687] usb 6-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 521.872698][ T5687] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 521.872766][ T5687] usb 6-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 521.874550][ T5687] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.874573][ T5687] usb 6-1: Product: syz [ 521.874588][ T5687] usb 6-1: Manufacturer: syz [ 521.874603][ T5687] usb 6-1: SerialNumber: syz [ 521.941840][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 521.943250][ T9] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 521.943309][ T9] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 16, setting to 0 [ 521.943347][ T9] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 0 [ 522.224237][T13066] dvmrp0: entered allmulticast mode [ 522.242069][ T192] usb 7-1: USB disconnect, device number 54 [ 522.343071][ T5701] usb 5-1: reset high-speed USB device number 95 using dummy_hcd [ 522.384510][ T5733] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 522.384553][ T5733] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 523.147565][ T5733] usb 7-1: new low-speed USB device number 55 using dummy_hcd [ 523.277463][ T5733] usb 7-1: device descriptor read/64, error -71 [ 523.352644][ T5672] usb 3-1: USB disconnect, device number 101 [ 523.527518][ T5733] usb 7-1: new low-speed USB device number 56 using dummy_hcd [ 523.667619][ T5733] usb 7-1: device descriptor read/64, error -71 [ 523.777942][ T5733] usb usb7-port1: attempt power cycle [ 524.029216][ T10] usb 5-1: USB disconnect, device number 95 [ 524.117498][ T5733] usb 7-1: new low-speed USB device number 57 using dummy_hcd [ 524.151629][ T5733] usb 7-1: device descriptor read/8, error -71 [ 524.334614][ T5687] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 524.352252][ T5687] snd-usb-audio 6-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 524.379723][T13121] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2361'. [ 524.379797][T13121] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2361'. [ 524.407402][ T5733] usb 7-1: new low-speed USB device number 58 using dummy_hcd [ 524.428449][ T5733] usb 7-1: device descriptor read/8, error -71 [ 524.535955][T13125] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2360'. [ 524.535980][T13125] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2360'. [ 524.539874][ T5733] usb usb7-port1: unable to enumerate USB device [ 524.580944][ T9] usb 1-1: string descriptor 0 read error: -71 [ 524.581095][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.607181][ T9] usb 1-1: can't set config #1, error -71 [ 524.625319][ T9] usb 1-1: USB disconnect, device number 88 [ 524.639268][ T5687] snd-usb-audio 6-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 524.646064][ T5687] usb 6-1: USB disconnect, device number 55 [ 524.740959][T10583] udevd[10583]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 524.897455][ T992] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 525.048076][ T992] usb 5-1: Using ep0 maxpacket: 8 [ 525.049374][ T992] usb 5-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 525.051164][ T992] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 525.051183][ T992] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 525.051196][ T992] usb 5-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 525.051209][ T992] usb 5-1: config 0 interface 0 has no altsetting 0 [ 525.051229][ T992] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.077489][ T9] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 525.128757][ T992] usb 5-1: config 0 descriptor?? [ 525.229691][ T9] usb 1-1: New USB device found, idVendor=0a12, idProduct=0001, bcdDevice= 0.00 [ 525.231581][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 525.231607][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 525.235028][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.235043][ T9] usb 1-1: Product: syz [ 525.235052][ T9] usb 1-1: Manufacturer: syz [ 525.235066][ T9] usb 1-1: SerialNumber: syz [ 525.530495][ C1] Bluetooth: hci5: corrupted ACL packet [ 525.570742][ T992] input: HID 046d:c623 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:046D:C623.001A/input/input118 [ 525.647825][ T992] logitech 0003:046D:C623.001A: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 046d:c623] on usb-dummy_hcd.4-1/input0 [ 525.779163][ T30] audit: type=1326 audit(1792785012.946:4417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13128 comm="syz.4.2364" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf748ef1c code=0x0 [ 526.389414][ T992] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 526.451912][T13148] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2371'. [ 526.483343][T13148] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2371'. [ 526.540568][ T992] usb 7-1: unable to get BOS descriptor or descriptor too short [ 526.540621][ T992] usb 7-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 526.542813][ T992] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 526.542878][ T992] usb 7-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 526.546662][ T992] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.546687][ T992] usb 7-1: Product: syz [ 526.546722][ T992] usb 7-1: Manufacturer: syz [ 526.546737][ T992] usb 7-1: SerialNumber: syz [ 526.741531][ T5733] usb 5-1: reset high-speed USB device number 96 using dummy_hcd [ 526.853231][T13156] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2373'. [ 526.853256][T13156] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2373'. [ 526.925426][ T992] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 526.957185][ T992] snd-usb-audio 7-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 527.077035][ T992] snd-usb-audio 7-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 527.094054][ T992] usb 7-1: USB disconnect, device number 59 [ 527.116151][ T4941] Bluetooth: hci5: CSR: Local version failed (-71) [ 527.127925][ T10] usb 1-1: USB disconnect, device number 89 [ 527.195091][ T5788] udevd[5788]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 527.317561][ T5671] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 527.786335][T13162] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2376'. [ 528.219640][ T992] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 528.368985][ T992] usb 7-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 528.370866][ T992] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.376734][ T992] usb 7-1: config 0 descriptor?? [ 528.413867][ T992] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 528.461973][ T5672] usb 5-1: USB disconnect, device number 96 [ 528.497976][T11083] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 528.607758][ T5671] usb 6-1: new full-speed USB device number 57 using dummy_hcd [ 528.657617][T11083] usb 1-1: Using ep0 maxpacket: 32 [ 528.661569][T11083] usb 1-1: unable to get BOS descriptor or descriptor too short [ 528.661600][T11083] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 528.663021][T11083] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 528.663040][T11083] usb 1-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 528.663050][T11083] usb 1-1: config 14 has 1 interface, different from the descriptor's value: 2 [ 528.663061][T11083] usb 1-1: config 14 has no interface number 0 [ 528.663083][T11083] usb 1-1: config 14 interface 57 altsetting 216 endpoint 0x9 has invalid wMaxPacketSize 0 [ 528.663113][T11083] usb 1-1: config 14 interface 57 has no altsetting 0 [ 528.666190][T11083] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.666222][T11083] usb 1-1: Product: syz [ 528.666230][T11083] usb 1-1: Manufacturer: syz [ 528.666239][T11083] usb 1-1: SerialNumber: syz [ 528.788306][ T5671] usb 6-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 528.792736][ T5671] usb 6-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 528.792754][ T5671] usb 6-1: Product: syz [ 528.792763][ T5671] usb 6-1: Manufacturer: syz [ 528.792771][ T5671] usb 6-1: SerialNumber: syz [ 528.807435][ T5708] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 528.843207][ T5671] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 528.897763][ T5672] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 528.990875][ T5708] usb 3-1: Using ep0 maxpacket: 8 [ 528.997246][T11083] legousbtower 1-1:14.57: interrupt endpoints not found [ 529.011149][ T5708] usb 3-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 529.015382][ T5708] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 529.015414][ T5708] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 529.015461][ T5708] usb 3-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 529.015486][ T5708] usb 3-1: config 0 interface 0 has no altsetting 0 [ 529.015521][ T5708] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.050967][T11083] usb 1-1: USB disconnect, device number 90 [ 529.091165][ T5708] usb 3-1: config 0 descriptor?? [ 529.114884][ T5672] usb 5-1: unable to get BOS descriptor or descriptor too short [ 529.114926][ T5672] usb 5-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 529.116076][ T5672] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 529.116156][ T5672] usb 5-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 529.161621][ T5672] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.161649][ T5672] usb 5-1: Product: syz [ 529.161664][ T5672] usb 5-1: Manufacturer: syz [ 529.161678][ T5672] usb 5-1: SerialNumber: syz [ 529.345848][T13166] syzkaller0: entered promiscuous mode [ 529.345864][T13166] syzkaller0: entered allmulticast mode [ 529.365696][T13166] tipc: Enabled bearer , priority 0 [ 529.391308][T13166] tipc: Resetting bearer [ 529.404901][T13165] tipc: Resetting bearer [ 529.489282][T13165] tipc: Disabling bearer [ 529.494347][ T5672] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 529.525755][ T5672] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 529.561389][ T5708] input: HID 046d:c623 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:046D:C623.001B/input/input119 [ 529.640410][ T992] gspca_stv06xx: I2C: Read error writing address: -71 [ 529.660574][ T992] usb 7-1: USB disconnect, device number 60 [ 529.707893][ T5671] vp7045: USB control message 'in' went wrong. [ 529.707909][ T5671] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 529.707947][ T5671] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 529.714173][ T5708] logitech 0003:046D:C623.001B: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 046d:c623] on usb-dummy_hcd.2-1/input0 [ 529.795328][ T5672] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 529.810012][ T5672] usb 5-1: USB disconnect, device number 97 [ 529.906924][ T5630] udevd[5630]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 530.388221][ T5672] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 530.441094][T13203] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2392'. [ 530.472418][ T9] usb 3-1: USB disconnect, device number 103 [ 530.562140][ T5672] usb 1-1: unable to get BOS descriptor or descriptor too short [ 530.562175][ T5672] usb 1-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 530.563238][ T5672] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 530.563311][ T5672] usb 1-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 530.608840][ T5672] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.608858][ T5672] usb 1-1: Product: syz [ 530.608866][ T5672] usb 1-1: Manufacturer: syz [ 530.608874][ T5672] usb 1-1: SerialNumber: syz [ 530.662176][ T992] usb 6-1: USB disconnect, device number 57 [ 530.878603][ T5687] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 530.922637][ T5672] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 530.943335][ T5672] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 531.028328][ T5687] usb 5-1: Using ep0 maxpacket: 32 [ 531.030218][ T5687] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 531.031603][ T5687] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 531.031645][ T5687] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 531.031671][ T5687] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 531.031696][ T5687] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 531.101905][ T5687] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.101933][ T5687] usb 5-1: Product: syz [ 531.101947][ T5687] usb 5-1: Manufacturer: syz [ 531.101962][ T5687] usb 5-1: SerialNumber: syz [ 531.132598][ T5672] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 531.135535][ T5672] usb 1-1: USB disconnect, device number 91 [ 531.190163][T13217] netlink: 124 bytes leftover after parsing attributes in process `syz.6.2397'. [ 531.195903][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 531.231235][ T9] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 531.255665][T10583] udevd[10583]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 531.280534][ T5687] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input120 [ 531.377725][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 531.377852][ T5687] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 531.377867][ T5687] (id 0x00) [ 531.378451][ T9] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 531.385071][ T9] usb 3-1: config 0 has an invalid descriptor of length 246, skipping remainder of the config [ 531.385098][ T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 531.388321][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.388347][ T9] usb 3-1: Product: syz [ 531.388361][ T9] usb 3-1: Manufacturer: syz [ 531.388376][ T9] usb 3-1: SerialNumber: syz [ 531.465116][ T9] usb 3-1: config 0 descriptor?? [ 531.547516][ T5687] rc_core: IR keymap rc-imon-pad not found [ 531.547537][ T5687] Registered IR keymap rc-empty [ 531.547612][ T5687] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 531.547632][ T5687] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 531.593216][ T10] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 531.595833][ T5687] imon:send_packet: packet tx failed (-71) [ 531.612477][ T5687] imon 5-1:155.0: remote input dev register failed [ 531.612632][ T5687] imon 5-1:155.0: imon_init_intf0: rc device setup failed [ 531.691974][T13211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.692467][T13211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.696821][ T5687] imon 5-1:155.0: unable to initialize intf0, err 0 [ 531.696844][ T5687] imon:imon_probe: failed to initialize context! [ 531.696857][ T5687] imon 5-1:155.0: unable to register, err -19 [ 531.737733][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 531.740793][ T10] usb 7-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 531.757318][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 531.771622][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.771649][ T10] usb 7-1: Product: syz [ 531.771664][ T10] usb 7-1: Manufacturer: syz [ 531.771679][ T10] usb 7-1: SerialNumber: syz [ 531.776879][ T5687] usb 5-1: USB disconnect, device number 98 [ 531.814269][ T10] usb 7-1: config 0 descriptor?? [ 531.845311][ T10] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 531.853892][ T9] usb 3-1: USB disconnect, device number 104 [ 532.297492][ T9] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 532.348082][ T10] gspca_ov534_9: reg_w failed -110 [ 532.418516][ T5687] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 532.450127][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 532.451013][ T9] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 532.452569][ T9] usb 3-1: config 0 has an invalid descriptor of length 246, skipping remainder of the config [ 532.452594][ T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 532.455578][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.455602][ T9] usb 3-1: Product: syz [ 532.455616][ T9] usb 3-1: Manufacturer: syz [ 532.455630][ T9] usb 3-1: SerialNumber: syz [ 532.516260][ T9] usb 3-1: config 0 descriptor?? [ 532.567597][ T5687] usb 6-1: Using ep0 maxpacket: 32 [ 532.576057][ T5687] usb 6-1: unable to get BOS descriptor or descriptor too short [ 532.576089][ T5687] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 532.602437][ T5687] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 532.602466][ T5687] usb 6-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 532.602484][ T5687] usb 6-1: config 14 has 1 interface, different from the descriptor's value: 2 [ 532.602504][ T5687] usb 6-1: config 14 has no interface number 0 [ 532.602543][ T5687] usb 6-1: config 14 interface 57 altsetting 216 endpoint 0x9 has invalid wMaxPacketSize 0 [ 532.602566][ T5687] usb 6-1: config 14 interface 57 has no altsetting 0 [ 532.671358][ T5687] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.671375][ T5687] usb 6-1: Product: syz [ 532.671383][ T5687] usb 6-1: Manufacturer: syz [ 532.671391][ T5687] usb 6-1: SerialNumber: syz [ 532.684197][ T5672] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 532.747604][ T10] gspca_ov534_9: Unknown sensor 0000 [ 532.747683][ T10] ov534_9 7-1:0.0: probe with driver ov534_9 failed with error -22 [ 532.874349][ T5672] usb 1-1: unable to get BOS descriptor or descriptor too short [ 532.874414][ T5672] usb 1-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 532.895147][ T5672] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 532.895208][ T5672] usb 1-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 532.928754][ T5672] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.928781][ T5672] usb 1-1: Product: syz [ 532.928796][ T5672] usb 1-1: Manufacturer: syz [ 532.928811][ T5672] usb 1-1: SerialNumber: syz [ 533.033733][ T5687] legousbtower 6-1:14.57: interrupt endpoints not found [ 533.055455][ T5687] usb 6-1: USB disconnect, device number 58 [ 533.217404][ T992] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 533.241793][ T5672] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 533.268499][ T5672] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 533.377703][ T992] usb 5-1: Using ep0 maxpacket: 8 [ 533.378468][ T992] usb 5-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 533.379476][ T992] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 533.379505][ T992] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 533.379517][ T992] usb 5-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 533.379531][ T992] usb 5-1: config 0 interface 0 has no altsetting 0 [ 533.379550][ T992] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.385308][ T992] usb 5-1: config 0 descriptor?? [ 533.477783][ T5672] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 533.480868][ T5672] usb 1-1: USB disconnect, device number 92 [ 533.575662][ T6333] udevd[6333]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 533.850540][ T992] input: HID 046d:c623 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:046D:C623.001C/input/input122 [ 533.925815][ T992] logitech 0003:046D:C623.001C: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 046d:c623] on usb-dummy_hcd.4-1/input0 [ 534.069550][ T10] usb 7-1: USB disconnect, device number 61 [ 534.185556][T13241] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2406'. [ 534.498819][T13211] dvmrp0: entered allmulticast mode [ 534.578657][ T10] usb 7-1: new full-speed USB device number 62 using dummy_hcd [ 534.578681][ T992] usb 5-1: USB disconnect, device number 99 [ 534.733283][ T10] usb 7-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 534.766072][ T10] usb 7-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 534.766103][ T10] usb 7-1: Product: syz [ 534.766118][ T10] usb 7-1: Manufacturer: syz [ 534.766133][ T10] usb 7-1: SerialNumber: syz [ 534.824747][ T10] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 534.866899][ T5687] usb 3-1: USB disconnect, device number 105 [ 535.641250][ T10] vp7045: USB control message 'in' went wrong. [ 535.641269][ T10] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 535.641296][ T10] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 536.377630][ T5687] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 536.490301][T13286] syzkaller0: entered promiscuous mode [ 536.490331][T13286] syzkaller0: entered allmulticast mode [ 536.526329][T13286] tipc: Enabled bearer , priority 0 [ 536.554642][T13286] tipc: Resetting bearer [ 536.580574][T13284] tipc: Resetting bearer [ 536.717806][ T5708] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 536.722117][T13284] tipc: Disabling bearer [ 536.796835][ T5701] usb 7-1: USB disconnect, device number 62 [ 536.867521][ T5708] usb 5-1: Using ep0 maxpacket: 32 [ 536.888350][ T5708] usb 5-1: unable to get BOS descriptor or descriptor too short [ 536.888402][ T5708] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 536.894281][ T5708] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 536.894310][ T5708] usb 5-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 536.894329][ T5708] usb 5-1: config 14 has 1 interface, different from the descriptor's value: 2 [ 536.894350][ T5708] usb 5-1: config 14 has no interface number 0 [ 536.894391][ T5708] usb 5-1: config 14 interface 57 altsetting 216 endpoint 0x9 has invalid wMaxPacketSize 0 [ 536.894413][ T5708] usb 5-1: config 14 interface 57 has no altsetting 0 [ 536.982139][ T5708] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.982161][ T5708] usb 5-1: Product: syz [ 536.982170][ T5708] usb 5-1: Manufacturer: syz [ 536.982178][ T5708] usb 5-1: SerialNumber: syz [ 537.037678][ T992] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 537.187469][ T992] usb 1-1: Using ep0 maxpacket: 8 [ 537.191116][ T992] usb 1-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 537.193841][ T992] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 537.193873][ T992] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 537.193919][ T992] usb 1-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 537.193945][ T992] usb 1-1: config 0 interface 0 has no altsetting 0 [ 537.193979][ T992] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.224827][ T992] usb 1-1: config 0 descriptor?? [ 537.341476][ T5708] legousbtower 5-1:14.57: interrupt endpoints not found [ 537.367910][ T5708] usb 5-1: USB disconnect, device number 100 [ 537.390409][T13299] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2423'. [ 537.697510][ T5701] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 537.759257][ T992] input: HID 046d:c623 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:046D:C623.001D/input/input123 [ 537.843814][ T992] logitech 0003:046D:C623.001D: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 046d:c623] on usb-dummy_hcd.0-1/input0 [ 537.866193][ T5701] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 537.877744][ T5701] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.882667][ T5701] usb 6-1: config 0 descriptor?? [ 537.917368][ T5708] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 537.921103][ T5701] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 538.083291][ T5708] usb 7-1: Using ep0 maxpacket: 16 [ 538.093564][ T5708] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 538.110000][ T5708] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 538.110032][ T5708] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 538.110053][ T5708] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 538.110078][ T5708] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.161637][ T5708] usb 7-1: config 0 descriptor?? [ 538.680945][ T9] usb 1-1: USB disconnect, device number 93 [ 538.816258][T13307] syzkaller0: entered promiscuous mode [ 538.816283][T13307] syzkaller0: entered allmulticast mode [ 538.899842][T13307] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2424'. [ 539.055604][ T5708] microsoft 0003:045E:07DA.001E: ignoring exceeding usage max [ 539.070635][ T5708] microsoft 0003:045E:07DA.001E: unsupported Resolution Multiplier 0 [ 539.135793][T13301] syzkaller0: entered promiscuous mode [ 539.135827][T13301] syzkaller0: entered allmulticast mode [ 539.212067][T13301] tipc: Enabled bearer , priority 0 [ 539.285005][T13301] tipc: Resetting bearer [ 539.338986][T13300] tipc: Resetting bearer [ 539.533079][T13300] tipc: Disabling bearer [ 539.567470][ T9] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 539.620943][ T5701] gspca_stv06xx: I2C: Read error writing address: -71 [ 539.641163][ T5701] usb 6-1: USB disconnect, device number 60 [ 539.717412][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 539.718321][ T9] usb 1-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 539.719380][ T9] usb 1-1: config 0 has an invalid interface number: 37 but max is 1 [ 539.719415][ T9] usb 1-1: config 0 has no interface number 1 [ 539.723399][ T9] usb 1-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 539.723422][ T9] usb 1-1: Product: syz [ 539.723430][ T9] usb 1-1: Manufacturer: syz [ 539.723438][ T9] usb 1-1: SerialNumber: syz [ 539.799238][ T9] usb 1-1: config 0 descriptor?? [ 540.037042][ T9] usb 1-1: Could not set interface, error -71 [ 540.091159][ T9] usb 1-1: USB disconnect, device number 94 [ 540.977997][ T5708] microsoft 0003:045E:07DA.001E: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 541.019824][ T5708] usb 7-1: USB disconnect, device number 63 [ 541.228688][T13345] fido_id[13345]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 541.247509][ T9] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 541.368276][ T5687] usb 6-1: new full-speed USB device number 61 using dummy_hcd [ 541.417773][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 541.417823][ T9] usb 3-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 541.419576][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 541.419649][ T9] usb 3-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 541.472046][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.472073][ T9] usb 3-1: Product: syz [ 541.472089][ T9] usb 3-1: Manufacturer: syz [ 541.472105][ T9] usb 3-1: SerialNumber: syz [ 541.520047][ T5687] usb 6-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 541.544699][ T5687] usb 6-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 541.544744][ T5687] usb 6-1: Product: syz [ 541.544759][ T5687] usb 6-1: Manufacturer: syz [ 541.544774][ T5687] usb 6-1: SerialNumber: syz [ 541.618820][ T5687] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 541.625504][T13356] FAULT_INJECTION: forcing a failure. [ 541.625504][T13356] name fail_page_alloc, interval 1, probability 0, space 0, times 7 [ 541.625540][T13356] CPU: 1 UID: 0 PID: 13356 Comm: syz.0.2436 Tainted: G L syzkaller #0 PREEMPT(full) [ 541.625567][T13356] Tainted: [L]=SOFTLOCKUP [ 541.625575][T13356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 541.625585][T13356] Call Trace: [ 541.625594][T13356] [ 541.625603][T13356] dump_stack_lvl+0xe8/0x150 [ 541.625639][T13356] should_fail_ex+0x410/0x560 [ 541.625670][T13356] prepare_alloc_pages+0x21e/0x5f0 [ 541.625704][T13356] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 541.625736][T13356] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 541.625762][T13356] ? __alloc_frozen_pages_noprof+0x29e/0x5a0 [ 541.625802][T13356] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 541.625832][T13356] ? __pfx_policy_nodemask+0x10/0x10 [ 541.625867][T13356] __alloc_pages_noprof+0x10/0x100 [ 541.625895][T13356] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 541.625929][T13356] ? alloc_pages_noprof+0x140/0x2b0 [ 541.625961][T13356] __kasan_populate_vmalloc+0xb7/0x1c0 [ 541.625993][T13356] alloc_vmap_area+0xd10/0x1410 [ 541.626029][T13356] ? __pfx_alloc_vmap_area+0x10/0x10 [ 541.626048][T13356] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 541.626074][T13356] ? __kmalloc_cache_node_noprof+0x1f2/0x620 [ 541.626098][T13356] ? __get_vm_area_node+0x155/0x2f0 [ 541.626123][T13356] __get_vm_area_node+0x200/0x2f0 [ 541.626151][T13356] __vmalloc_node_range_noprof+0x343/0x1540 [ 541.626173][T13356] ? copy_process+0x7ea/0x44b0 [ 541.626201][T13356] ? percpu_ref_get_many+0x19/0x140 [ 541.626220][T13356] ? percpu_ref_get_many+0x19/0x140 [ 541.626243][T13356] ? __memcg_slab_post_alloc_hook+0x487/0xd90 [ 541.626278][T13356] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 541.626299][T13356] ? dup_task_struct+0x52/0xa00 [ 541.626317][T13356] ? trace_kmem_cache_alloc+0x29/0xe0 [ 541.626342][T13356] ? memcpy_and_pad+0x48/0x80 [ 541.626376][T13356] __vmalloc_node_noprof+0xc2/0x100 [ 541.626400][T13356] ? copy_process+0x7ea/0x44b0 [ 541.626422][T13356] ? copy_process+0x7ea/0x44b0 [ 541.626445][T13356] dup_task_struct+0x2c6/0xa00 [ 541.626473][T13356] copy_process+0x7ea/0x44b0 [ 541.626524][T13356] ? rcu_is_watching+0x16/0xb0 [ 541.626556][T13356] ? __pfx_copy_process+0x10/0x10 [ 541.626584][T13356] ? mutex_init_lockdep+0xdf/0x110 [ 541.626613][T13356] vhost_task_create+0x1f9/0x380 [ 541.626634][T13356] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 541.626657][T13356] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 541.626683][T13356] ? __pfx_vhost_task_create+0x10/0x10 [ 541.626702][T13356] ? register_lock_class+0x31/0x2e0 [ 541.626731][T13356] ? __pfx_vhost_task_fn+0x10/0x10 [ 541.626772][T13356] kvm_mmu_post_init_vm+0x147/0x2b0 [ 541.626814][T13356] kvm_arch_vcpu_ioctl_run+0x7c/0x19c0 [ 541.626844][T13356] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 541.626873][T13356] kvm_vcpu_ioctl+0xa61/0xfd0 [ 541.626901][T13356] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 541.626923][T13356] ? do_vfs_ioctl+0x116f/0x1530 [ 541.626952][T13356] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 541.627012][T13356] kvm_vcpu_compat_ioctl+0x204/0x390 [ 541.627034][T13356] ? __fget_files+0x2a/0x420 [ 541.627058][T13356] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 541.627080][T13356] ? __fget_files+0x2a/0x420 [ 541.627099][T13356] ? __fget_files+0x3a2/0x420 [ 541.627118][T13356] ? __fget_files+0x2a/0x420 [ 541.627140][T13356] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 541.627166][T13356] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 541.627196][T13356] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 541.627221][T13356] ? __fget_files+0x3a2/0x420 [ 541.627242][T13356] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 541.627272][T13356] ? lock_acquire+0x115/0x350 [ 541.627304][T13356] ? __might_fault+0xaf/0x130 [ 541.627328][T13356] __do_fast_syscall_32+0x28b/0x6c0 [ 541.627355][T13356] ? do_fast_syscall_32+0x33/0x70 [ 541.627378][T13356] ? asm_int80_emulation+0x1a/0x20 [ 541.627396][T13356] ? do_int80_emulation+0x299/0x500 [ 541.627421][T13356] ? trace_irq_disable+0x3b/0x140 [ 541.627448][T13356] do_fast_syscall_32+0x33/0x70 [ 541.627474][T13356] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 541.627497][T13356] RIP: 0023:0xf7fb4f1c [ 541.627515][T13356] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 541.627530][T13356] RSP: 002b:00000000f546650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 541.627550][T13356] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80 [ 541.627564][T13356] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 541.627576][T13356] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 541.627587][T13356] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 541.627598][T13356] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 541.627629][T13356] [ 541.703975][T13356] syz.0.2436: vmalloc error: size 32768, align 0x8000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 541.704043][T13356] CPU: 1 UID: 0 PID: 13356 Comm: syz.0.2436 Tainted: G L syzkaller #0 PREEMPT(full) [ 541.704071][T13356] Tainted: [L]=SOFTLOCKUP [ 541.704079][T13356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 541.704091][T13356] Call Trace: [ 541.704099][T13356] [ 541.704108][T13356] dump_stack_lvl+0xe8/0x150 [ 541.704136][T13356] warn_alloc+0x24d/0x270 [ 541.704151][T13356] ? lockdep_hardirqs_on+0x7b/0x110 [ 541.704167][T13356] ? __pfx_warn_alloc+0x10/0x10 [ 541.704180][T13356] ? kfree+0x1c5/0x650 [ 541.704209][T13356] ? __get_vm_area_node+0x219/0x2f0 [ 541.704241][T13356] __vmalloc_node_range_noprof+0x36b/0x1540 [ 541.704270][T13356] ? percpu_ref_get_many+0x19/0x140 [ 541.704286][T13356] ? percpu_ref_get_many+0x19/0x140 [ 541.704300][T13356] ? __memcg_slab_post_alloc_hook+0x487/0xd90 [ 541.704323][T13356] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 541.704340][T13356] ? dup_task_struct+0x52/0xa00 [ 541.704363][T13356] ? trace_kmem_cache_alloc+0x29/0xe0 [ 541.704387][T13356] ? memcpy_and_pad+0x48/0x80 [ 541.704423][T13356] __vmalloc_node_noprof+0xc2/0x100 [ 541.704438][T13356] ? copy_process+0x7ea/0x44b0 [ 541.704449][T13356] ? copy_process+0x7ea/0x44b0 [ 541.704463][T13356] dup_task_struct+0x2c6/0xa00 [ 541.704479][T13356] copy_process+0x7ea/0x44b0 [ 541.704530][T13356] ? rcu_is_watching+0x16/0xb0 [ 541.704561][T13356] ? __pfx_copy_process+0x10/0x10 [ 541.704586][T13356] ? mutex_init_lockdep+0xdf/0x110 [ 541.704604][T13356] vhost_task_create+0x1f9/0x380 [ 541.704618][T13356] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 541.704633][T13356] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 541.704660][T13356] ? __pfx_vhost_task_create+0x10/0x10 [ 541.704680][T13356] ? register_lock_class+0x31/0x2e0 [ 541.704726][T13356] ? __pfx_vhost_task_fn+0x10/0x10 [ 541.704749][T13356] kvm_mmu_post_init_vm+0x147/0x2b0 [ 541.704766][T13356] kvm_arch_vcpu_ioctl_run+0x7c/0x19c0 [ 541.704830][T13356] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 541.704860][T13356] kvm_vcpu_ioctl+0xa61/0xfd0 [ 541.704883][T13356] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 541.704894][T13356] ? do_vfs_ioctl+0x116f/0x1530 [ 541.704910][T13356] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 541.704954][T13356] kvm_vcpu_compat_ioctl+0x204/0x390 [ 541.704978][T13356] ? __fget_files+0x2a/0x420 [ 541.705002][T13356] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 541.705024][T13356] ? __fget_files+0x2a/0x420 [ 541.705036][T13356] ? __fget_files+0x3a2/0x420 [ 541.705046][T13356] ? __fget_files+0x2a/0x420 [ 541.705060][T13356] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 541.705074][T13356] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 541.705098][T13356] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 541.705124][T13356] ? __fget_files+0x3a2/0x420 [ 541.705150][T13356] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 541.705180][T13356] ? lock_acquire+0x115/0x350 [ 541.705200][T13356] ? __might_fault+0xaf/0x130 [ 541.705214][T13356] __do_fast_syscall_32+0x28b/0x6c0 [ 541.705229][T13356] ? do_fast_syscall_32+0x33/0x70 [ 541.705254][T13356] ? asm_int80_emulation+0x1a/0x20 [ 541.705274][T13356] ? do_int80_emulation+0x299/0x500 [ 541.705300][T13356] ? trace_irq_disable+0x3b/0x140 [ 541.705328][T13356] do_fast_syscall_32+0x33/0x70 [ 541.705343][T13356] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 541.705356][T13356] RIP: 0023:0xf7fb4f1c [ 541.705368][T13356] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 541.705377][T13356] RSP: 002b:00000000f546650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 541.705393][T13356] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80 [ 541.705407][T13356] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 541.705419][T13356] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 541.705431][T13356] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 541.705444][T13356] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 541.705476][T13356] [ 541.840386][T13356] Mem-Info: [ 541.840401][T13356] active_anon:24074 inactive_anon:25 isolated_anon:0 [ 541.840401][T13356] active_file:2135 inactive_file:55782 isolated_file:0 [ 541.840401][T13356] unevictable:0 dirty:637 writeback:0 [ 541.840401][T13356] slab_reclaimable:12256 slab_unreclaimable:106788 [ 541.840401][T13356] mapped:40777 shmem:18704 pagetables:1491 [ 541.840401][T13356] sec_pagetables:0 bounce:0 [ 541.840401][T13356] kernel_misc_reclaimable:0 [ 541.840401][T13356] free:1258896 free_pcp:11346 free_cma:0 [ 541.840462][T13356] Node 0 active_anon:96296kB inactive_anon:100kB active_file:8540kB inactive_file:222900kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:163080kB dirty:2544kB writeback:0kB shmem:74816kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13468kB pagetables:5804kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 541.840545][T13356] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:228kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 541.840603][T13356] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 541.840691][T13356] lowmem_reserve[]: 0 2466 2466 2466 2466 [ 541.840727][T13356] Node 0 DMA32 free:1088300kB boost:0kB min:33980kB low:42472kB high:50964kB reserved_highatomic:0kB free_highatomic:0kB active_anon:96296kB inactive_anon:100kB active_file:8540kB inactive_file:222900kB unevictable:0kB writepending:2544kB zspages:248kB present:3129332kB managed:2526008kB mlocked:0kB bounce:0kB free_pcp:43336kB local_pcp:26504kB free_cma:0kB [ 541.840857][T13356] lowmem_reserve[]: 0 0 0 0 0 [ 541.840891][T13356] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 541.840946][T13356] lowmem_reserve[]: 0 0 0 0 0 [ 541.841004][T13356] Node 1 Normal free:3931924kB boost:0kB min:55920kB low:69900kB high:83880kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:228kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:2048kB local_pcp:2048kB free_cma:0kB [ 541.850569][T13356] lowmem_reserve[]: 0 0 0 0 0 [ 541.850638][T13356] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 541.850818][T13356] Node 0 DMA32: 615*4kB (UME) 336*8kB (UME) 469*16kB (UME) 352*32kB (UME) 76*64kB (UM) 9*128kB (UME) 22*256kB (UM) 24*512kB (UM) 12*1024kB (UM) 12*2048kB (UM) 245*4096kB (UM) = 1088236kB [ 541.850999][T13356] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 541.851122][T13356] Node 1 Normal: 7*4kB (UM) 13*8kB (UM) 9*16kB (UM) 4*32kB (UM) 6*64kB (UM) 2*128kB (UM) 3*256kB (M) 2*512kB (UM) 1*1024kB (M) 4*2048kB (UM) 957*4096kB (UM) = 3931924kB [ 541.851324][T13356] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 541.851340][T13356] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 541.851355][T13356] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 541.851372][T13356] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 541.851387][T13356] 76637 total pagecache pages [ 541.851396][T13356] 20 pages in swap cache [ 541.851403][T13356] Free swap = 124848kB [ 541.851411][T13356] Total swap = 124996kB [ 541.851419][T13356] 2097051 pages RAM [ 541.927571][T13356] 0 pages HighMem/MovableOnly [ 541.927584][T13356] 433933 pages reserved [ 541.927592][T13356] 0 pages cma reserved [ 542.960593][ T9] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 543.041774][ T5687] vp7045: USB control message 'in' went wrong. [ 543.041792][ T5687] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 543.041830][ T5687] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 543.046270][ T9] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 543.088101][ T5701] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 543.139956][ C1] [ 543.142307][ C1] ============================= [ 543.147131][ C1] [ BUG: Invalid wait context ] [ 543.151964][ C1] syzkaller #0 Tainted: G L [ 543.158018][ C1] ----------------------------- [ 543.162839][ C1] syz-executor/5634 is trying to lock: [ 543.168276][ C1] ffff88807b9b5bb0 (&gpc->lock){....}-{3:3}, at: kvm_xen_set_evtchn_fast+0x1f4/0x9a0 [ 543.177820][ C1] other info that might help us debug this: [ 543.183691][ C1] context-{2:2} [ 543.187124][ C1] locks held by syz-executor/5634: 1, last CPU#1: [ 543.193520][ C1] #0: ffff88807b9b6110 (&kvm->srcu){.?.+}-{0:0}, at: kvm_xen_set_evtchn_fast+0x1bc/0x9a0 [ 543.203439][ C1] stack backtrace: [ 543.207151][ C1] CPU: 1 UID: 0 PID: 5634 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 543.218254][ C1] Tainted: [L]=SOFTLOCKUP [ 543.222561][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 543.232600][ C1] Call Trace: [ 543.235871][ C1] [ 543.238701][ C1] dump_stack_lvl+0xe8/0x150 [ 543.243284][ C1] __lock_acquire+0xf5b/0x2de0 [ 543.248059][ C1] ? __lock_acquire+0x747/0x2de0 [ 543.252990][ C1] lock_acquire+0x115/0x350 [ 543.257493][ C1] ? kvm_xen_set_evtchn_fast+0x1f4/0x9a0 [ 543.263175][ C1] ? xa_load+0x1db/0x210 [ 543.267453][ C1] _raw_read_lock_irqsave+0x48/0x60 [ 543.272651][ C1] ? kvm_xen_set_evtchn_fast+0x1f4/0x9a0 [ 543.278288][ C1] kvm_xen_set_evtchn_fast+0x1f4/0x9a0 [ 543.283741][ C1] ? kvm_xen_set_evtchn_fast+0x1bc/0x9a0 [ 543.289390][ C1] xen_timer_callback+0x109/0x220 [ 543.294406][ C1] ? __pfx_xen_timer_callback+0x10/0x10 [ 543.299937][ C1] __hrtimer_run_queues+0x371/0xa10 [ 543.305129][ C1] hrtimer_interrupt+0x4cd/0xaa0 [ 543.310264][ C1] __sysvec_apic_timer_interrupt+0x102/0x430 [ 543.316251][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 543.321885][ C1] [ 543.324822][ C1] [ 543.327748][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 543.333744][ C1] RIP: 0010:finish_task_switch+0x413/0xc60 [ 543.339556][ C1] Code: 04 00 00 41 c7 84 24 20 0e 00 00 00 00 00 00 e9 db 06 00 00 49 83 c4 48 4c 89 e7 e8 c7 01 64 0a e8 32 75 3a 00 fb 4c 8b 65 c8 <49> 8d bc 24 18 17 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 543.359161][ C1] RSP: 0018:ffffc90004657960 EFLAGS: 00000206 [ 543.365215][ C1] RAX: 000000000022832d RBX: ffff8880b853cc60 RCX: 8000000000000001 [ 543.373178][ C1] RDX: 0000000000000000 RSI: ffffffff8e4922e4 RDI: ffffffff8c6e0e80 [ 543.381145][ C1] RBP: ffffc900046579b0 R08: ffffffff917ccabf R09: 1ffffffff22f9957 [ 543.389105][ C1] R10: dffffc0000000000 R11: fffffbfff22f9958 R12: ffff888036745dc0 [ 543.397060][ C1] R13: ffff8880b853cc38 R14: dffffc0000000000 R15: 1ffff110170a798c [ 543.405038][ C1] __schedule+0x17e5/0x5820 [ 543.409534][ C1] ? __pfx___schedule+0x10/0x10 [ 543.414364][ C1] ? lock_acquire+0x115/0x350 [ 543.419029][ C1] ? schedule+0x90/0x2b0 [ 543.423256][ C1] schedule+0x164/0x2b0 [ 543.427436][ C1] do_nanosleep+0x22e/0x710 [ 543.431947][ C1] ? do_nanosleep+0x7e/0x710 [ 543.436534][ C1] ? __pfx_do_nanosleep+0x10/0x10 [ 543.441545][ C1] ? __asan_memset+0x22/0x50 [ 543.446132][ C1] ? __hrtimer_setup+0x1b7/0x260 [ 543.451053][ C1] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 543.456235][ C1] hrtimer_nanosleep+0x18f/0x3a0 [ 543.461218][ C1] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 543.466675][ C1] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 543.471870][ C1] __se_sys_clock_nanosleep_time32+0x35d/0x3b0 [ 543.478016][ C1] ? __pfx___se_sys_clock_nanosleep_time32+0x10/0x10 [ 543.484682][ C1] ? asm_int80_emulation+0x1a/0x20 [ 543.489792][ C1] do_int80_emulation+0x198/0x500 [ 543.494803][ C1] ? asm_int80_emulation+0x1a/0x20 [ 543.499897][ C1] ? clear_bhb_loop+0x70/0xc0 [ 543.504570][ C1] ? clear_bhb_loop+0x70/0xc0 [ 543.509239][ C1] asm_int80_emulation+0x1a/0x20 [ 543.514163][ C1] RIP: 0023:0xf71d77ab [ 543.518215][ C1] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 543.537803][ C1] RSP: 002b:00000000f75cfc4c EFLAGS: 00000246 ORIG_RAX: 000000000000010b [ 543.546221][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 543.554189][ C1] RDX: 00000000f75cfce4 RSI: 00000000f75cfcdc RDI: 0000000000000000 [ 543.562142][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 543.570098][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 543.578052][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 543.586011][ C1] [ 543.607369][ T5701] usb 5-1: Using ep0 maxpacket: 32 [ 543.608083][ T5701] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 543.610885][ T5701] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.610909][ T5701] usb 5-1: Product: syz [ 543.610923][ T5701] usb 5-1: Manufacturer: syz [ 543.610935][ T5701] usb 5-1: SerialNumber: syz [ 543.653375][ T5701] usb 5-1: config 0 descriptor?? [ 543.716288][ T9] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 543.728850][ T9] usb 3-1: USB disconnect, device number 107 [ 543.773696][T13362] FAULT_INJECTION: forcing a failure. [ 543.773696][T13362] name failslab, interval 1, probability 0, space 0, times 0 [ 543.773720][T13362] CPU: 0 UID: 0 PID: 13362 Comm: syz.6.2437 Tainted: G L syzkaller #0 PREEMPT(full) [ 543.773735][T13362] Tainted: [L]=SOFTLOCKUP [ 543.773741][T13362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 543.773749][T13362] Call Trace: [ 543.773753][T13362] [ 543.773758][T13362] dump_stack_lvl+0xe8/0x150 [ 543.773776][T13362] should_fail_ex+0x410/0x560 [ 543.773791][T13362] should_failslab+0xa8/0x100 [ 543.773807][T13362] __kmalloc_noprof+0xf9/0x710 [ 543.773820][T13362] ? rcu_is_watching+0x16/0xb0 [ 543.773835][T13362] ? tomoyo_realpath_from_path+0xef/0x640 [ 543.773847][T13362] ? tomoyo_realpath_from_path+0xef/0x640 [ 543.773860][T13362] tomoyo_realpath_from_path+0xef/0x640 [ 543.773874][T13362] ? tomoyo_path_number_perm+0x219/0x5f0 [ 543.773885][T13362] tomoyo_path_number_perm+0x246/0x5f0 [ 543.773895][T13362] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 543.773906][T13362] ? kstrtouint+0x6e/0xe0 [ 543.773918][T13362] ? get_pid_task+0x20/0x1f0 [ 543.773928][T13362] ? lock_release+0x4b/0x3c0 [ 543.773942][T13362] ? lock_release+0x4b/0x3c0 [ 543.773953][T13362] ? __fget_files+0x2a/0x420 [ 543.773963][T13362] ? __fget_files+0x3a2/0x420 [ 543.773973][T13362] ? __fget_files+0x2a/0x420 [ 543.773984][T13362] security_file_ioctl_compat+0xc3/0x2a0 [ 543.774001][T13362] __ia32_compat_sys_ioctl+0x139/0x950 [ 543.774015][T13362] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 543.774028][T13362] ? __fget_files+0x3a2/0x420 [ 543.774038][T13362] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 543.774054][T13362] ? rcu_is_watching+0x16/0xb0 [ 543.774067][T13362] ? lock_acquire+0x58/0x350 [ 543.774077][T13362] ? rcu_is_watching+0x16/0xb0 [ 543.774090][T13362] ? lock_release+0x4b/0x3c0 [ 543.774100][T13362] ? __might_fault+0xcb/0x130 [ 543.774111][T13362] __do_fast_syscall_32+0x28b/0x6c0 [ 543.774125][T13362] ? do_fast_syscall_32+0x33/0x70 [ 543.774138][T13362] ? asm_int80_emulation+0x1a/0x20 [ 543.774149][T13362] ? do_int80_emulation+0x299/0x500 [ 543.774169][T13362] do_fast_syscall_32+0x33/0x70 [ 543.774183][T13362] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 543.774196][T13362] RIP: 0023:0xf7f03f1c [ 543.774206][T13362] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 543.774215][T13362] RSP: 002b:00000000f53b650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 543.774228][T13362] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000040187542 [ 543.774235][T13362] RDX: 0000000080000940 RSI: 0000000000000000 RDI: 0000000000000000 [ 543.774242][T13362] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 543.774248][T13362] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 543.774254][T13362] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 543.774264][T13362] [ 543.882690][T13362] ERROR: Out of memory at tomoyo_realpath_from_path. [ 543.893858][ T5701] airspy 5-1:0.0: usb_control_msg() failed -71 request 09 [ 543.893884][ T5701] airspy 5-1:0.0: Could not detect board [ 543.893943][ T5701] airspy 5-1:0.0: probe with driver airspy failed with error -71 [ 543.895211][ T5701] usb 5-1: USB disconnect, device number 101 [ 544.104824][T10583] udevd[10583]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 544.124400][T13362] ======================================================= [ 544.124400][T13362] WARNING: The mand mount option has been deprecated and [ 544.124400][T13362] and is ignored by this kernel. Remove the mand [ 544.124400][T13362] option from the mount to silence this warning. [ 544.124400][T13362] ======================================================= [ 544.137226][T13362] fuse: Bad value for 'fd' [ 544.886291][ T5672] usb 6-1: USB disconnect, device number 61 [ 547.507444][ C0] ip6_tunnel: K xmit: Local address not yet configured! [ 552.617959][ C0] batman_adv: batadv0: Local translation table size (96) exceeds maximum packet size (-320); Ignoring new local tt entry: 02:04:00:bf:05:00