last executing test programs: 11.60819775s ago: executing program 1 (id=1519): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$inet_udp(0x2, 0x2, 0x0) timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0x5e}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r4, 0x0, 0x0, 0x20004041, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x2663}, 0x20000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r6) r7 = socket$kcm(0x10, 0x2, 0x4) syz_emit_ethernet(0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6087fb8900100000fe880000000000000001fe80000000000000000000000000000000010000000000000401000101"], 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) sendmmsg$inet(r2, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000640)=@get={0x1, &(0x7f0000000680)=""/68, 0x401}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002900), r8) sendmsg$TIPC_NL_NET_SET(r8, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000002940)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="23002bbd7000fcdbdf250f0000001400078008000200000000900a69826fb2297734"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x90) 10.220422773s ago: executing program 1 (id=1525): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) symlink(&(0x7f0000000080)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x28, 0x7fffffff, 0x269a064, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffec}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) fsync(r0) syz_fuse_handle_req(r0, &(0x7f0000006200)="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", 0x2000, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x90, 0x0, 0x100000005, {0x1, 0x3, 0x34, 0x8, 0x8, 0xffff672b, {0x2, 0x7, 0x101, 0xfffd, 0xfffffffffdffffff, 0x8, 0x7, 0xce90cbb, 0xffffff4d, 0x1000, 0x0, r2, 0xee01, 0x7fff, 0xfff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0x0, 0x0, 0xffffffff}]}, 0x10) r4 = socket$inet6(0xa, 0x3, 0x88) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_BEGIN_FF_ERASE(r5, 0xc00c55ca, &(0x7f0000000000)={0x5, 0x55020859, 0xfffffff7}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="b7000000ff000000bfa300000000000007030000f8ffffff620af0fff8ffffff71a4f0ff000000002d040200000000001d400200000028004604000001ed000062030000000000001d440000000000007a0a00fe00ffffffc3030000f1000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0465f2f994114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840b08000000f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e82623951743283070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a00a5b4f7e9ad0500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={0x0, 0x0, 0x10}, 0x18) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000000002010400000000000000000a0000000400018004000380440002802c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffac1414aa0c0002800500010086000000bcf835ba9edb0600034000030000"], 0x60}, 0x1, 0x0, 0x0, 0x40480c0}, 0x4) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000180)=0x4, 0x1ff, 0xe) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e20, 0x2, @empty, 0xc}, 0x1c) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44004) r8 = syz_open_dev$vim2m(0x0, 0x1, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r8, 0xc02c564a, &(0x7f0000000340)={0xf4, 0x30324c4a, 0x2, @stepwise={0x2, 0x8, 0x2bdc4a4, 0x2, 0x42, 0x81}}) r9 = socket$key(0xf, 0x3, 0x2) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYRES64=r6, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/350], 0x194}, 0x1, 0x0, 0x0, 0x40001}, 0x4054) sendmsg$key(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000007912a800000000005d0a0000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) 9.265329712s ago: executing program 1 (id=1528): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000127bd7000ffdbdf25550000000c16a2b22159f1ae09efc90099000a00000007000000"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r4, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r4, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000013000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="0000000000000000100003"], 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_io_uring_setup(0x7c33, &(0x7f00000006c0)={0x0, 0x0, 0x40, 0x1, 0x25c}, &(0x7f0000000140), 0x0, 0x0) syz_clone(0x40021080, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004bec0220a20603008cb4010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$uac1(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$sierra_net(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f00000007c0)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB="001160bb539e5c84cc6df04f04000400e92288bf70bf49d8bb346f3499e14919b764c84c67e29ec3f60332c04512fadd68b54feddb254e50e1edd804daf0af5b31a9c97c525c43c591fe68ce5bd7613458e940b19a2762d5fc93ffbd21f099a7bb6c320320443d075c8cc17fc0f405d55c7c8df785454bcce6d421c5c5d1b6bf5e848df9539f4132a0020418d046463ee58bcbc701683e21e9064d853858b43c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r7, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xe10, 0x870, 0x1, 0x1, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xd1, 0xc, 0x30, {0x8, 0xfffffff7}, 0xd0, 0x9}}) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) socket$inet_sctp(0x2, 0x1, 0x84) 6.097525682s ago: executing program 1 (id=1544): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024917720042322023f77010203010902120001000010000904"], 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000080)={&(0x7f00000000c0)=[{0x5, 0x1811, 0x0, 0x0}], 0x1}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xd0}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x5, 0x8, 0xd9, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, 0x0) r4 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x1}) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000000180)) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f00000003c0)={0x60, 0x0, &(0x7f0000c32000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, 0x0, 0x0, 0x9, 0x12, 0x40, 0x0, 0x3f}) r6 = syz_io_uring_setup(0x6372, &(0x7f0000000340)={0x0, 0x5cae, 0x20000, 0x3, 0x18c}, 0x0, 0x0, &(0x7f0000000140)) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(r6, &(0x7f0000000800)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xa000080}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xc4, r7, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xf59c}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7f}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4c6e}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x10001}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x401}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000800}, 0x4040840) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r8, 0x6, 0x0) getdents(0xffffffffffffffff, 0xffffffffffffffff, 0x7a) r9 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r9, 0xc0045520, &(0x7f0000000040)=0xfffffffc) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r10 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_exec(r10, &(0x7f0000000480)=ANY=[@ANYBLOB="737461636b203aae86ad47aa0d9495e6d80f7bde2d18ffb36cf152aed2d408fb58e305fc8e2f2f7d91f81b621cc4214d4a27e1614fbee0beac8f4a045070b770212d46d4a2df096b791f2a4ba218e12cb76aa24945b70a7c9dd5edeac52b5a876f73cfbe66371a72f11f3d9544d6b59b4a5541dcef5cbf11ffff37dfd147c8a3e5098a207be806ea7167101f8c1b5c8fe41e170fd0c775dbc5be0b6d3ab625ab702e5b1dc15f9c4b3d09be812f340e681e0694f5badf640da3fdfc2f929b4c2beb9a592c577287b6021bfeec24146c7f95608bb60a736207a09d9f47e89c4044eadde57cdefd15f25b822d2eaf2205df0d6b71b63ee0b63cb598f26509af36983578f6f4198a0843cc1b1bd780015007ab9709cc6211e3b5c685b972b5c5e95f054a7a9fe149282f679c8466b9734e3850ec98419dd0c887715902f9e7802842085bc606f30c2654869e9e3701fd0fc69137fe165592689465eebd5cafad7c29de2adadec42a818d8ee389ca1fe33a1ef23617c89116a3a458b56612e4c36c43a9150d5331adbb0beb01a062b1f1349fc2ecea76cb7c40cdfe378185f3099b1d71414d0fda5a47f8593260cc0bd723a4cca81435f041321635f91bcb15aac48883a9617fb4e58c19b18cf3a7e1299a07f45325fcd05a7c30f47e77073dcc584f7e0516cb74c55a0a2a30dc9f3163868f7c233ad1fff87a3c2a30f1312c3ad0fb71cc6433e9bd7c3209de0cba9552f5c7c04f24eccf206bdb745564539dd62d655a33d40a507660668c30"], 0x564) 5.482445232s ago: executing program 3 (id=1546): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b83", 0x9e}, {0x0}, {&(0x7f00000005c0)="f2b314c96d50", 0x6}], 0x3}}], 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000001040)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8d0}, 0x4040800) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x340}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x400, @empty, 0x7}, 0x1c, 0x0}}], 0x2, 0x408b0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xeeef0000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0x8000000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0x2000, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"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"}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.646503749s ago: executing program 2 (id=1549): r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, 0x0, 0x2102) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000300)=0x10003) shutdown(r1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@rand_addr=0x64010102, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e20, 0x0, 0x4e22, 0xc, 0x2, 0x0, 0x0, 0x89, 0x0, 0xee01}, {0x2e6, 0x0, 0x1ff, 0x0, 0x0, 0x2, 0x0, 0x800000000}, {0x1, 0x0, 0x0, 0x1ffffffffe}, 0x20}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x3, 0x0, 0x0, 0xfffffc01, 0x4001, 0x6}}, 0xe8) listen(r2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x4, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f00000002c0)={0x40002001}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000180), 0x4) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000000040)={0x1, 0x4, 0x919}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000000)={0x8, 'ip6tnl0\x00', {'xfrm0\x00'}, 0x3}) syz_usb_connect$uac2(0x3, 0x98, &(0x7f0000000080)=ANY=[@ANYBLOB="12010003000000401e0400304000010203010902c6000301003003080b00020109200609040000000101200009240102000626000311240803010001000000000000006b00000c24030402030103"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) 4.395302793s ago: executing program 3 (id=1550): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) r1 = socket(0x2b, 0x0, 0x7ffffffd) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000200)=@ethtool_cmd={0x18, 0x3, 0x800006, 0x1, 0x9, 0x5, 0x2, 0x0, 0x0, 0x0, 0x7fff, 0x800, 0x74, 0xfb, 0x7, 0x7, [0x400, 0x1]}}) r2 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, 0x0) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000007c0)=[{0x0}, {0x0}], 0x2, &(0x7f0000000880)=""/24, 0x18}, 0x10341) renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000a40)='./file0\x00', 0x2) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = syz_usb_connect(0x2, 0x4a, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffee6}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r5 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r5, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040)=[@mss, @sack_perm, @window={0x3, 0x7}, @sack_perm, @sack_perm, @window, @timestamp], 0x7) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaa9900000000000008004500003800000000000190780a010101ac1414aa0305907803000600450000000000000000890000ffffffffe00000021a3f02eb38ad1bf6"], 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 3.825667407s ago: executing program 2 (id=1552): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) symlink(&(0x7f0000000080)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x28, 0x7fffffff, 0x269a064, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffec}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) fsync(r0) syz_fuse_handle_req(r0, &(0x7f0000006200)="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", 0x2000, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x90, 0x0, 0x100000005, {0x1, 0x3, 0x34, 0x8, 0x8, 0xffff672b, {0x2, 0x7, 0x101, 0xfffd, 0xfffffffffdffffff, 0x8, 0x7, 0xce90cbb, 0xffffff4d, 0x1000, 0x0, r2, 0xee01, 0x7fff, 0xfff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0x0, 0x0, 0xffffffff}]}, 0x10) r4 = socket$inet6(0xa, 0x3, 0x88) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_BEGIN_FF_ERASE(r5, 0xc00c55ca, &(0x7f0000000000)={0x5, 0x55020859, 0xfffffff7}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="b7000000ff000000bfa300000000000007030000f8ffffff620af0fff8ffffff71a4f0ff000000002d040200000000001d400200000040004604000001ed000062030000000000001d440000000000007a0a00fe00ffffffc3030000f1000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0465f2f994114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840b08000000f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e82623951743283070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a00a5b4f7e9ad0500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={0x0, 0x0, 0x10}, 0x18) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000000002010400000000000000000a0000000400018004000380440002802c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffac1414aa0c0002800500010086000000bcf835ba9edb0600034000030000"], 0x60}, 0x1, 0x0, 0x0, 0x40480c0}, 0x4) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000180)=0x4, 0x1ff, 0xe) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e20, 0x2, @empty, 0xc}, 0x1c) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44004) r8 = syz_open_dev$vim2m(0x0, 0x1, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r8, 0xc02c564a, &(0x7f0000000340)={0xf4, 0x30324c4a, 0x2, @stepwise={0x2, 0x8, 0x2bdc4a4, 0x2, 0x42, 0x81}}) r9 = socket$key(0xf, 0x3, 0x2) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYRES64=r6, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffe000000100000000320062062c556a000064010100000000000000000000000000feffffffffffffff0000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff00000000000000000000000000000000080000000000000000084000000000000080000000000000000400000000000000000000200000000000000000000000074be748000000006ee0d268646143cc828266984b580002007863686163686132302d73696d640000000000000000000000e8827749fa4c9d6be1807813d8ea00000000000000000000000000000000000000000000000000000000000000000000000000000080000000e0fad3f10cd3a506627800000000074f4c001400686d61a8767368613235362900000000000000f1ffffffffffffff00"/350], 0x194}, 0x1, 0x0, 0x0, 0x40001}, 0x4054) sendmsg$key(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000007912a800000000005d0a0000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) 3.782780629s ago: executing program 0 (id=1553): r0 = memfd_create(&(0x7f0000000000)='\x01\xfd\xae.+\xa6\x8c\x02\xea\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\r\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xc4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb<3\xaf\xcb\x8cP\xef\x84\x91\x87\x8b\xb5Z\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\xebR\xc0\xc6\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f?\x00\x00\x00\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xd5\x01\x1b\xd1\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x1b\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa4\x85G\'+\xcc\xbf\r\xa9\x10Klb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fE\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93y\x9d\xc4K mC\x97\x1c\x91\xd7\xf3\x13)`\xfb\xbf\xd3\xcc\x8d\x0e\x1f\x80\x0f\xcag\xd5J\xd7\x99\x02B\xd9\xdb;\xbd\x05\xc8\x9a\xe9(\xb7\xd1\xce\xba\xf8\xc0\x1fPc\x8d\xfceY\xf8j9\xc4\v\xb5\x82\xbaI,\xf5\xbd\a\a\xa2\x83\x99]/@\xbc(*v%\xa1\xd9\xfb\v\xdc\xed\xa3\x93\x16\x0e\xa8\x96\x10\xfc\xae\xc6X@f\x17\xf4\xb78\xa6\n\xaa\xe5m5\x9d\x14\xd7\x91Q\xb5\x11\x88\x89i\x94,]\x91\x13\xa6~O\xcdV\xf36,\x8a\xc9P\xbd\xf6\x16\x99_\x01\x0f0/\xe1Yi\x00=nz\x1d\xbd\xb0\x85W\xeaU\xea\x03)!\xf2\xfa\x04\xecf\xad\xb5\x94\x97\xbb\xae7\xbf\vQpi\xf3x\x80\xf0\xd3B\x17\xbc\xf2H\xeej\xc4\xdd\xb31\xdc\xb3\x19\x12<\xf7\xca\x12\x86\x15kZ\xb4t\x87;\xfb\x97\xc6\xb4\xf5\xa6\x9b-|EW$\x0e\xb2\xef\xebW/\xff`)M\xe3\x99\xe5\xe2M\x8dxD\xbf!\b\xf4o-\xab\xe0\x1eN\xdb\x94x\xe9:\x92#\x80\x91\xc0\x04\xfd}\xd6\xd6\x0f4/\x13\xf2q\xbc&\xd0p\xe6\xe6\x01V\xf3Lc\xfd\"\xa5V\xce\x9b\xd9\xd3\xc2(Q+\xd0\x00\x00\x00\x00\xf9\x17\n\x9bHw\xfb1\x8e\xa0^\xe0\xbd\xfa\xb8\x9f\xb3~\xab\x1c\x85\x85\x91\xa6\xba\xc9\x81\xaa\xfc<\x18\xf0\xb7\xe0\x95,F\x94\x89\x13\xc1\xad\xaeU\x8bb\xbbc\xa1\xb7a5\xf2\"\xb0\xfb\x1c7ZH\x96\xc66\xd5\xe6r\x19\xb4\xd0\x80\'`\x8a\xe9.\a\xa6g\x13\xe5\t\x11', 0x6) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xe, 0x12, r0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000480)=[@in6={0xa, 0x4e21, 0x7fff, @empty, 0x8}, @in6={0xa, 0x4e21, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}], 0x1d) 3.603635352s ago: executing program 0 (id=1555): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x34, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980"}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000070000000900010073797a300000000054000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000c080003"], 0xd8}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffb, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x6, 0xd21, 0x101, 0x6, 0x5, 0xbd, 0x100, 0x4}}}}]}, 0x58}}, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000001c0)={0xfffffffd, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r7, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f0000000140)={0x16f, @tick=0x7, 0x0, {0x0, 0x7}}) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xb, 0x6}, {}, {0x8, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5, 0x51, 0x81}, @TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040010}, 0x1c090) 3.32344571s ago: executing program 0 (id=1556): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28000000010701010000000010000000010000091400078008000140000000e7070002"], 0x28}, 0x1, 0x0, 0x0, 0x804c}, 0xc080) r1 = io_uring_setup(0x1159, &(0x7f0000000440)={0x0, 0x2dd6, 0x40, 0x3, 0x318}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000640)=[{0x0, 0x12}], 0x178) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) r2 = gettid() tkill(r2, 0x16) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x34, &(0x7f0000000180)={[0xb]}, 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r4, &(0x7f0000004cc0)=[{{&(0x7f0000000480)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8e}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000c40)="ea", 0x1}], 0x1}}], 0x1, 0x40) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}, 0x0, 0x1, 0x3bf8580d, 0x0, 0xb3550aa4ba878396, 0x2}, 0x9c) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="70ffffff1000010000000000000000000000000a24000000060a010200e4ffffffffffff0100000608000a400000000308000a400000000134000000180a01010000000000000000070000000c00054000000000000000050000054000000000000000020900010073797a3000000000000005400000000000000001140000001100010000000000000000000000000a"], 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x40000d4) r5 = socket$netlink(0x10, 0x3, 0x12) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x31, &(0x7f0000000440)=0x8, 0x4) setsockopt$inet6_int(r7, 0x29, 0x33, &(0x7f0000000040)=0xf2b, 0x4) getsockopt$inet6_buf(r7, 0x29, 0x6, &(0x7f0000001500)=""/3, &(0x7f00000000c0)=0xfec2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r5, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000002653be82a668f26255b1b91a03a149c0d966d0efaf06b635e20aafb1634982666591e74442e85eb36d03bfcbcdce4938f6876796f0c845c8ee6f06", @ANYRES16=r6, @ANYBLOB="200025bd7000fddbdf2536000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0xc004) 3.111314826s ago: executing program 0 (id=1557): r0 = socket$pppl2tp(0x18, 0x1, 0x1) capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000280)={0x3, 0xf, 0x81, 0x6, 0x7, 0x3}) ioctl$SIOCSIFMTU(r0, 0x89fd, &(0x7f0000000040)={'bond0\x00', 0x3}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$sysfs(0xffffff9c, &(0x7f0000000600)='/sys/power/pm_print_times', 0x42242, 0x73) pwritev(r3, &(0x7f0000000400)=[{&(0x7f0000000040)='9', 0x1}], 0x1, 0xffffff01, 0xa) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000640)={0x0, {}, 0x0, {}, 0x3, 0x0, 0x1d, 0x1, "b53017c2594e51459405620c9ad432277e38da64b1f7cd78e8339536f44c848bebf0c69aadfc4a966ff620d245f9098d4a0a053af9adf8ad52887e9d74d804ef", "3076fa9f6c93b8950d4224869f7fd083b75accd7d026e5cc5d86811c3be0ea76", [0x101, 0x3]}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) connect$qrtr(r3, &(0x7f0000000700)={0x2a, 0x3}, 0xc) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a60800000f00510066b87a000f02d86161300f300fc79d53bf0000c4b961edc30101220f01c3", 0x64}], 0x1, 0x0, 0x0, 0x0) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0002, 0x0) write$vga_arbiter(r8, &(0x7f0000000240)=@target={'target ', {'PCI:', '0', ':', '8', ':', '1f', '.', '1'}}, 0x14) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x3, &(0x7f0000000300)=@framed={{0x18, 0x8, 0x0, 0x0, 0x8}, [], {0x95, 0x0, 0x0, 0x4000}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x2, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000a00)={{0x12, 0x1, 0x201, 0x5b, 0xbe, 0x35, 0x20, 0x19d2, 0x1088, 0x6b53, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x27, 0xf, 0x60, 0x0, "", [{{0x9, 0x4, 0x85, 0xf, 0x0, 0xff, 0xff, 0xff, 0xc}}]}}]}}, &(0x7f0000001200)={0xa, &(0x7f0000001100)={0xa, 0x6, 0x200, 0x7, 0x1, 0xa, 0x20, 0x2}, 0x13, &(0x7f0000001140)={0x5, 0xf, 0x13, 0x2, [@wireless={0xb, 0x10, 0x1, 0x4, 0x47, 0x6, 0x3, 0x3c, 0x1c}, @ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f00000011c0)=@lang_id={0x4, 0x3, 0x402}}]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2.796835456s ago: executing program 2 (id=1558): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20}, 0x0}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000080)="441f080100000000ff0000005b1957034b596f21d3816491ee54bec6fe", 0x1d) getsockopt$inet_opts(r3, 0x0, 0x4, 0x0, &(0x7f0000000100)) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44801}, 0x840) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) syz_emit_ethernet(0x3a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004500002c0000000000119078000000000000000000"], 0x0) 2.436709876s ago: executing program 2 (id=1560): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@map=r0, 0xffffffffffffffff, 0x2c}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f0000000040)={{0x7, 0x1}, 0x100, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) r6 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r6, 0x0, 0x0, 0x44, &(0x7f00000001c0)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000022780)=@newlink={0x40, 0x10, 0x49920d862a92143b, 0x100000, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r3}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x8004}, 0x24000800) 2.324795527s ago: executing program 3 (id=1561): set_mempolicy(0x4005, 0x0, 0x4) r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfc) 1.858646003s ago: executing program 2 (id=1563): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000e00)={@random="e90c610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0xe000, 0x2, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000e40)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x8e}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x7, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0x9}}}}}}}, 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r3, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000240)={0x48, 0x7, r3, 0x0, 0x10000, 0x0, 0x8, 0x2ea473, 0x2eb80c}) r4 = openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r3, 0x0, 0x0, 0x0, 0x1, 0xd6fe2, 0x2fc247}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000200)={0x28, 0x4, r2, 0x0, &(0x7f0000381000/0x2000)=nil, 0x2000, 0xffffffff00000001}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x8880) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) io_uring_setup(0x3c93, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) mprotect(&(0x7f000004f000/0x800000)=nil, 0x800000, 0x0) 1.80137376s ago: executing program 3 (id=1564): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0xa, 0x2) (async) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'dummy0\x00', &(0x7f0000000040)=@ethtool_gfeatures}) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'dummy0\x00', &(0x7f0000000040)=@ethtool_gfeatures}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8910, &(0x7f0000000280)={'vlan0\x00', @ifru_mtu=0x4}) r1 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000840)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)=""/141, 0x8d}], 0x5) (async) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000840)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000340)=""/141, 0x8d}], 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0}, 0x94) io_uring_register$IORING_REGISTER_FILES(r1, 0x1e, &(0x7f0000000000)=[r1], 0x1) (async) io_uring_register$IORING_REGISTER_FILES(r1, 0x1e, &(0x7f0000000000)=[r1], 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'bond0\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000180)={'veth1_to_batadv\x00', @random="688465812e9a"}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'gretap0\x00'}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x69, 0x69, 0x2, [@type_tag={0x4, 0x0, 0x0, 0x12, 0x1}, @const={0x2, 0x0, 0x0, 0xa, 0x5}, @enum={0x0, 0x4, 0x0, 0x6, 0x4, [{0x4, 0x7}, {0x7, 0x8}, {0x10, 0x80000000}, {0xa, 0x1234}]}, @datasec={0x7, 0x2, 0x0, 0xf, 0x1, [{0x1, 0x7, 0x7}, {0x5, 0x2, 0xfffff000}], 'N'}]}}, 0x0, 0x86, 0x0, 0x1, 0x1ff, 0x10000}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x69, 0x69, 0x2, [@type_tag={0x4, 0x0, 0x0, 0x12, 0x1}, @const={0x2, 0x0, 0x0, 0xa, 0x5}, @enum={0x0, 0x4, 0x0, 0x6, 0x4, [{0x4, 0x7}, {0x7, 0x8}, {0x10, 0x80000000}, {0xa, 0x1234}]}, @datasec={0x7, 0x2, 0x0, 0xf, 0x1, [{0x1, 0x7, 0x7}, {0x5, 0x2, 0xfffff000}], 'N'}]}}, 0x0, 0x86, 0x0, 0x1, 0x1ff, 0x10000}, 0x28) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_usb_connect(0x2, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000d972a440b72040155ab7010203010902120001000000000904800000ff"], 0x0) (async) r6 = syz_usb_connect(0x2, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000d972a440b72040155ab7010203010902120001000000000904800000ff"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f00000009c0)={0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="00ad03"], 0x0, 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r7}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r4, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x1) (async) sendmsg$can_bcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r4, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x1) sendmsg$can_bcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r8 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r9, &(0x7f0000000d80)={&(0x7f0000000540)={0xa, 0x4e22, 0x3ff, @private1, 0x1}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1400000000000000290000003e000000010000000000000011000000000000002900000004"], 0x30}, 0x20044084) write$FUSE_NOTIFY_STORE(r8, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRES8=r7], 0xe) (async) write$FUSE_NOTIFY_STORE(r8, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRES8=r7], 0xe) 1.391290324s ago: executing program 4 (id=1566): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) getgroups(0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000540)={'dummy0\x00', &(0x7f0000000580)=@ethtool_stats={0x1d, 0x6, [0x5, 0x7, 0x800, 0x80, 0x7, 0x1ff]}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0x1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'wg0\x00', 0x0}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000015c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x9, [@func={0xe, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x2, 0x2}]}, @volatile={0x10, 0x0, 0x0, 0x9, 0x4}]}, {0x0, [0x2e, 0x0, 0x2e, 0x2e, 0x5e, 0x2e, 0x5f]}}, &(0x7f00000005c0)=""/4096, 0x4d, 0x1000, 0x1, 0xc49c}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001740)={0xffffffffffffffff, 0x20, &(0x7f0000001700)={&(0x7f0000001680), 0x0, 0x0, &(0x7f00000016c0)=""/9, 0x9}}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000001780)={r0, 0xd80e, 0x9, 0x2}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000017c0)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) r8 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001800)={0x1b, 0x0, 0x0, 0xfff, 0x0, r0, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001880)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000018c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x50) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x5}, 0x50) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000019c0)=@bloom_filter={0x1e, 0x9, 0x5, 0x7, 0x40, 0x1, 0xa8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0xf, 0x24, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x8}, [@tail_call, @call={0x85, 0x0, 0x0, 0x16}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ldst={0x1, 0x1, 0x1, 0x7, 0x7, 0x18, 0x1}, @tail_call, @generic={0x7, 0x1, 0x2, 0x4, 0xfffffffa}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000380)='syzkaller\x00', 0x1, 0x0, 0xfffffffffffffffe, 0x41000, 0x4, '\x00', r3, @cgroup_device=0x6, r4, 0x8, &(0x7f0000001600)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000001640)={0x3, 0x1, 0x8, 0x10001}, 0x10, r5, r6, 0x6, &(0x7f0000001a40)=[0xffffffffffffffff, r7, 0x1, r8, r9, r10, r11, r12, r13], &(0x7f0000001a80)=[{0x3, 0x3, 0xc}, {0x0, 0x4, 0x1, 0x8}, {0x4, 0x4, 0x3, 0x3}, {0x3, 0x1, 0x7, 0xa}, {0x3, 0x5, 0xc, 0x5}, {0x2, 0x2, 0x2, 0x8}], 0x10, 0x3}, 0x94) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x7b5, 0x312, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0x40, 0xc0, "", [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x1, 0x0, 0xc, {0x9, 0x21, 0x2, 0x5, 0x1, {0x22, 0x65e}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x7, 0x4, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x7, 0x7}}]}}}]}}]}}, &(0x7f0000000140)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x1, 0x8, 0x1, 0x40, 0x5}, 0x4d, &(0x7f00000000c0)=ANY=[@ANYBLOB="050f4d00050710020829050020100a0585b00000000f0000f0000000f8c00000003f0000000000000000ff001410040442a50e9e00ca2f259efff733056ba8e40a100300010005ff010003100b"]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) getgroups(0x0, 0x0) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000540)={'dummy0\x00', &(0x7f0000000580)=@ethtool_stats={0x1d, 0x6, [0x5, 0x7, 0x800, 0x80, 0x7, 0x1ff]}}) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0x1}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'wg0\x00'}) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000015c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x9, [@func={0xe, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x2, 0x2}]}, @volatile={0x10, 0x0, 0x0, 0x9, 0x4}]}, {0x0, [0x2e, 0x0, 0x2e, 0x2e, 0x5e, 0x2e, 0x5f]}}, &(0x7f00000005c0)=""/4096, 0x4d, 0x1000, 0x1, 0xc49c}, 0x28) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001740)={0xffffffffffffffff, 0x20, &(0x7f0000001700)={&(0x7f0000001680), 0x0, 0x0, &(0x7f00000016c0)=""/9, 0x9}}, 0x10) (async) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000001780)={r0, 0xd80e, 0x9, 0x2}) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000017c0)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) (async) ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001800)={0x1b, 0x0, 0x0, 0xfff, 0x0, r0, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x50) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001880), 0x4) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000018c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x50) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x5}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f00000019c0)=@bloom_filter={0x1e, 0x9, 0x5, 0x7, 0x40, 0x1, 0xa8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x0, 0x1}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0xf, 0x24, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x8}, [@tail_call, @call={0x85, 0x0, 0x0, 0x16}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ldst={0x1, 0x1, 0x1, 0x7, 0x7, 0x18, 0x1}, @tail_call, @generic={0x7, 0x1, 0x2, 0x4, 0xfffffffa}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000380)='syzkaller\x00', 0x1, 0x0, 0xfffffffffffffffe, 0x41000, 0x4, '\x00', r3, @cgroup_device=0x6, r4, 0x8, &(0x7f0000001600)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000001640)={0x3, 0x1, 0x8, 0x10001}, 0x10, r5, r6, 0x6, &(0x7f0000001a40)=[0xffffffffffffffff, r7, 0x1, r8, r9, r10, r11, r12, r13], &(0x7f0000001a80)=[{0x3, 0x3, 0xc}, {0x0, 0x4, 0x1, 0x8}, {0x4, 0x4, 0x3, 0x3}, {0x3, 0x1, 0x7, 0xa}, {0x3, 0x5, 0xc, 0x5}, {0x2, 0x2, 0x2, 0x8}], 0x10, 0x3}, 0x94) (async) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x7b5, 0x312, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0x40, 0xc0, "", [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x1, 0x0, 0xc, {0x9, 0x21, 0x2, 0x5, 0x1, {0x22, 0x65e}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x7, 0x4, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x7, 0x7}}]}}}]}}]}}, &(0x7f0000000140)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x1, 0x8, 0x1, 0x40, 0x5}, 0x4d, &(0x7f00000000c0)=ANY=[@ANYBLOB="050f4d00050710020829050020100a0585b00000000f0000f0000000f8c00000003f0000000000000000ff001410040442a50e9e00ca2f259efff733056ba8e40a100300010005ff010003100b"]}) (async) 1.272877674s ago: executing program 0 (id=1567): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x0, 0xfffffffc, 0xf9, 0x8000, 0x0, "7a58beca390000fffffdfd00000000000200"}) 981.584265ms ago: executing program 1 (id=1568): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) symlink(&(0x7f0000000080)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x28, 0x7fffffff, 0x269a064, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffec}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) fsync(r0) syz_fuse_handle_req(r0, &(0x7f0000006200)="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", 0x2000, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x90, 0x0, 0x100000005, {0x1, 0x3, 0x34, 0x8, 0x8, 0xffff672b, {0x2, 0x7, 0x101, 0xfffd, 0xfffffffffdffffff, 0x8, 0x7, 0xce90cbb, 0xffffff4d, 0x1000, 0x0, r2, 0xee01, 0x7fff, 0xfff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0x0, 0x0, 0xffffffff}]}, 0x10) r4 = socket$inet6(0xa, 0x3, 0x88) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_BEGIN_FF_ERASE(r5, 0xc00c55ca, &(0x7f0000000000)={0x5, 0x55020859, 0xfffffff7}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd64}, 0x48) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={0x0, 0x0, 0x10}, 0x18) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="600000000002010400000000000000000a0000000400018004000380440002802c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffac1414aa0c0002800500010086000000bcf835ba9edb0600034000030000"], 0x60}, 0x1, 0x0, 0x0, 0x40480c0}, 0x4) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000000180)=0x4, 0x1ff, 0xe) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e20, 0x2, @empty, 0xc}, 0x1c) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44004) r8 = syz_open_dev$vim2m(0x0, 0x1, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r8, 0xc02c564a, &(0x7f0000000340)={0xf4, 0x30324c4a, 0x2, @stepwise={0x2, 0x8, 0x2bdc4a4, 0x2, 0x42, 0x81}}) r9 = socket$key(0xf, 0x3, 0x2) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYRES64=r6, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/350], 0x194}, 0x1, 0x0, 0x0, 0x40001}, 0x4054) sendmsg$key(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000000007912a800000000005d0a0000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) 805.800812ms ago: executing program 0 (id=1569): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$inet_udp(0x2, 0x2, 0x0) timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0x5e}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r4, 0x0, 0x0, 0x20004041, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2663}, 0x20040811) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r5) r6 = socket$kcm(0x10, 0x2, 0x4) syz_emit_ethernet(0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6087fb8900100000fe880000000000000001fe80000000000000000000000000000000010000000000000401000101"], 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) sendmmsg$inet(r2, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000640)=@get={0x1, &(0x7f0000000200)=""/84, 0x401}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002900), r7) sendmsg$TIPC_NL_NET_SET(r7, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000002940)={0x28, r8, 0x23, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x90) 685.079456ms ago: executing program 4 (id=1570): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'wg1\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f00000000c0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, r4, 0x439, 0xfffffffe, 0x20000, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20040090}, 0x4004000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480240001800b000100736f636b65740000140002800800dd400000000308000140000000021c0001800a0001f11bfa1a2d25555a000c00028008000440000000100900010073797a30000000000900020073797a3200"], 0x98}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd1d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x54, 0x2, [@TCA_FLOWER_ACT={0x50, 0x3, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x7, 0x8, 0x6, 0x5f3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x8848}, 0x4080) 618.873598ms ago: executing program 4 (id=1571): tkill(0x0, 0x39) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000040)=0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0xc26a07002e95e55b, &(0x7f0000000100)={{}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x8000000000000000}}], [{@pcr={'pcr', 0x3d, 0x3b}}, {@obj_type={'obj_type', 0x3d, '/dev/ttyprintk\x00'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@hash}, {@uid_eq={'uid', 0x3d, 0xee01}}]}}, 0x1, 0x0, &(0x7f0000000200)="e44a63f4ca89d8c720") getdents(r3, &(0x7f0000000240)=""/254, 0xfe) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000340)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000380)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000400)={&(0x7f00000003c0)=[0x0, 0x0], 0x2, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000004c0)={0x0, r5, r6, 0x0, 0x0, 0x2, &(0x7f0000000480)=[0x0, 0x0]}) ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, &(0x7f0000000500)) wait4(r1, 0x0, 0x40000000, &(0x7f0000000540)) renameat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', r3, &(0x7f0000000640)='./file0\x00') openat$ptmx(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x0) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000006c0), 0x1e3c43, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f0000000700)={{0x47, 0x7}, {0x8, 0x6c6}, 0x7fff, 0x1}) ioctl$DRM_IOCTL_MODE_GETENCODER(r4, 0xc01464a6, &(0x7f0000000740)) ioctl$PTP_SYS_OFFSET(r7, 0x43403d05, &(0x7f0000000780)={0xd}) pipe2(&(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84880) ioctl$DVB_DEMUX_DMX_STOP(r9, 0x6f2a) ioctl$FS_IOC_GETVERSION(r9, 0x80087601, &(0x7f0000000b00)) ioctl$XFS_IOC_FD_TO_HANDLE(r9, 0xc038586a, &(0x7f0000000c40)={r2, &(0x7f0000000b40)='*+\x00', 0x400, &(0x7f0000000b80)={@_ha_fsid={[0xfffffff0, 0x752f621a]}, {0x1, 0x2, 0x200, 0xffff}}, 0x0, &(0x7f0000000bc0), &(0x7f0000000c00)=0x1}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r10, 0xc018937a, &(0x7f0000000c80)={{0x1, 0x1, 0x18, r7, {0x10000}}, './file0\x00'}) r12 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000cc0)='./binderfs/custom0\x00', 0x802, 0x0) cachestat(r12, &(0x7f0000000d00)={0xff, 0x3ff}, &(0x7f0000000d40), 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r8, 0x84, 0x7, &(0x7f0000000d80), &(0x7f0000000dc0)=0x4) getsockname$qrtr(r11, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000e80), r11) getsockopt$IP6T_SO_GET_REVISION_TARGET(r8, 0x29, 0x45, &(0x7f0000000ec0)={'ah\x00'}, &(0x7f0000000f00)=0x1e) socket$packet(0x11, 0x3, 0x300) 533.359156ms ago: executing program 4 (id=1572): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@ipv6_newroute={0x2c, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_EXPIRES={0x8}, @RTA_PRIORITY={0x8, 0x6, 0x1743}]}, 0x2c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000ec0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2008}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x802) io_uring_enter(r2, 0x61df, 0x8c13, 0x2f, &(0x7f0000000040)={[0x7]}, 0x8) 405.147133ms ago: executing program 4 (id=1573): timer_create(0x3, 0x0, &(0x7f0000000540)) timer_settime(0x0, 0x1, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = fsopen(&(0x7f0000000180)='befs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) timer_create(0x2, 0x0, &(0x7f0000001400)=0x0) timer_settime(r1, 0x0, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, 0x0) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0xa28ef6894fdb3d83}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0xee981d6de6acd517}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x40000) unshare(0x64000600) 284.281015ms ago: executing program 3 (id=1574): set_mempolicy(0x4005, 0x0, 0x4) r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="fc0040001c000704ab5b2509b86803000aab087a0400000001481193210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) 194.424856ms ago: executing program 2 (id=1575): socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x1001d, 0x2, @thr={&(0x7f0000000500)="2014628459ee780ab239e6ccb9913e8d667bfcd95734033c793a49a21c94486a74579ee970920c80ae49bf87866a5536e7fff5df23afb25c1e98215fc6847a7e98ecd4de5eed378a6fee936864837f01800000000000002bfcbd52663d4ddf3e465caa7919ba1b5eafc95b753f06fca229cd99b60d4fb8500ddcd21e5ce1756cf49d24c09ab8fa1a66230573d0ef790588e53936dcd1540316ee16000b6493ba3b442c028ee3e1e86f50e66c2efb8daa9ebc5e716c70af732dcd01cc9bf7fe687a5f55e9a835f3da05214811b43d37403cbd4ccb28d07f8692132255de0e1a040d1c1be65bda4a2253", &(0x7f0000000440)="d7e8bb93526a50f5b1dfe9a0af1ce3dad1719ef913b1fe4d739aca64cac980a7ff66c880fbdb9b7a438fabea53a25d90d16127ac9901c6bce80af7c51cbc4bfaa82d8c6167b5a796b9872b5b41e46e254ce3ad76aa6358ca22617aeeedddb6f0fa6b60f1c13aeee431a17f68e9db45b89c65af163ba3fd1d630d4b1077614edcc5590c7d8d71b2d9500742e97d5f7d2e2fb8ba81e621e26e8cd697ad5acbf7a0d77d413bdb2449"}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f00000001c0)={{0x77359400}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) readv(r1, &(0x7f00000018c0)=[{&(0x7f0000001900)=""/4096, 0x1000}], 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_API_VERSION(r4, 0xae00, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}) write$tun(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000000042f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r5, r6, 0x0, 0x2000fb) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000300)=0x3) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x609002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYRESOCT=r4, @ANYRESOCT=r6], 0x18}, 0x1, 0x0, 0x0, 0x4008000}, 0xc000) fcntl$getflags(r7, 0x1) ioctl$KDSETKEYCODE(r7, 0x4b4d, &(0x7f0000000040)={0x1, 0x5}) socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r7, &(0x7f0000000140)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x24) 45.350924ms ago: executing program 3 (id=1576): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, &(0x7f0000000080)="360f7883b81e2626660fc7350ff4650666b95c0300000f32f4656df30f09650f01cfc4f8400f0d35", 0x28}], 0x1, 0x2, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fce000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000580)=@vmx={0x0, 0x0, 0x2080, {0x0, 0xdddd1000, {}, 0x1}, {'\x00', "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008bc584c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f6f38740000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a4900"}}) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x20402) (async) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x20402) ioctl$int_in(r3, 0x5452, &(0x7f0000000200)=0x4) write$evdev(r3, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) (async) write$evdev(r3, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000000)=0x200000000) ioctl$MON_IOCQ_URB_LEN(r3, 0x9201) ioctl$KVM_RUN(r2, 0xae80, 0x0) 44.342494ms ago: executing program 4 (id=1577): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[@ANYBLOB="58010000100013070000000000000000fc020000000000000000000000000001fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141417000000000000000000000000000004d533000000e000000100000000000000000000000003000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000220000000000000000000000000000000200000000000000000000005c001400636d616328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000003509fe8fd57fd44aa5074c50bc700e530c001c00", @ANYRES32=0x0, @ANYBLOB="06"], 0x158}}, 0x0) 0s ago: executing program 1 (id=1578): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) io_uring_setup(0xaae, &(0x7f0000000080)={0x0, 0xffffeffa, 0x800, 0x3, 0x2}) (async) r4 = io_uring_setup(0xaae, &(0x7f0000000080)={0x0, 0xffffeffa, 0x800, 0x3, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0xa}, 0x20) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x8, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xb, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xd, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r10 = socket$unix(0x1, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r11 = socket$inet_udp(0x2, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) (async) r12 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r12, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r11, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmmsg(r12, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) close(0x3) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r13, {0x4}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r13, {0x4}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00003fb000)="f7", 0x1}], 0x1, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) kernel console output (not intermixed with test programs): 0x2b6/0x3950 [ 318.362325][ T9595] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 318.362358][ T9595] ? __pfx_rtnl_newlink+0x10/0x10 [ 318.362377][ T9595] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 318.362401][ T9595] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 318.362421][ T9595] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 318.362440][ T9595] ? ref_tracker_free+0x693/0x840 [ 318.362465][ T9595] ? __pfx_ref_tracker_free+0x10/0x10 [ 318.362486][ T9595] ? __asan_memcpy+0x40/0x70 [ 318.362506][ T9595] ? __skb_clone+0x63/0x7a0 [ 318.362536][ T9595] netlink_rcv_skb+0x232/0x4b0 [ 318.362561][ T9595] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 318.362583][ T9595] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 318.362617][ T9595] ? netlink_deliver_tap+0x2e/0x1b0 [ 318.362638][ T9595] ? netlink_deliver_tap+0x2e/0x1b0 [ 318.362665][ T9595] netlink_unicast+0x75c/0x8e0 [ 318.362695][ T9595] netlink_sendmsg+0x813/0xb40 [ 318.362726][ T9595] ? __pfx_netlink_sendmsg+0x10/0x10 [ 318.362753][ T9595] ? aa_sock_msg_perm+0xf1/0x1b0 [ 318.362777][ T9595] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 318.362803][ T9595] ____sys_sendmsg+0x972/0x9f0 [ 318.362834][ T9595] ? __might_fault+0xaf/0x130 [ 318.362867][ T9595] ? __pfx_____sys_sendmsg+0x10/0x10 [ 318.362905][ T9595] ? import_iovec+0x73/0xa0 [ 318.362938][ T9595] ___sys_sendmsg+0x2a5/0x360 [ 318.362966][ T9595] ? __lock_acquire+0x6b5/0x2cf0 [ 318.362994][ T9595] ? __pfx____sys_sendmsg+0x10/0x10 [ 318.363063][ T9595] ? __fget_files+0x2a/0x420 [ 318.363087][ T9595] ? __fget_files+0x3a0/0x420 [ 318.363124][ T9595] __x64_sys_sendmsg+0x1bd/0x2a0 [ 318.363157][ T9595] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 318.363204][ T9595] ? __pfx_ksys_write+0x10/0x10 [ 318.363243][ T9595] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.363266][ T9595] do_syscall_64+0x15f/0xf80 [ 318.363298][ T9595] ? clear_bhb_loop+0x40/0x90 [ 318.363324][ T9595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.363345][ T9595] RIP: 0033:0x7f9544f9cdd9 [ 318.363365][ T9595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 318.363383][ T9595] RSP: 002b:00007f9545ea0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 318.363405][ T9595] RAX: ffffffffffffffda RBX: 00007f9545215fa0 RCX: 00007f9544f9cdd9 [ 318.363420][ T9595] RDX: 0000000020040040 RSI: 0000200000000200 RDI: 0000000000000003 [ 318.363434][ T9595] RBP: 00007f9545ea0090 R08: 0000000000000000 R09: 0000000000000000 [ 318.363446][ T9595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.363458][ T9595] R13: 00007f9545216038 R14: 00007f9545215fa0 R15: 00007f954533fa48 [ 318.363492][ T9595] [ 318.844676][ T9595] debugfs: out of free dentries, can not create file 'netdev@ffff8880762c4658' [ 319.262912][ T5755] hid-thrustmaster 0003:044F:B65D.0013: unknown main item tag 0x0 [ 319.270978][ T5755] hid-thrustmaster 0003:044F:B65D.0013: unknown main item tag 0x0 [ 319.278916][ T5755] hid-thrustmaster 0003:044F:B65D.0013: unknown main item tag 0x0 [ 319.286854][ T5755] hid-thrustmaster 0003:044F:B65D.0013: unknown main item tag 0x0 [ 319.294721][ T5755] hid-thrustmaster 0003:044F:B65D.0013: unknown main item tag 0x0 [ 319.306038][ T5755] hid-thrustmaster 0003:044F:B65D.0013: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.1-1/input0 [ 319.318488][ T5755] hid-thrustmaster 0003:044F:B65D.0013: Unexpected non-int endpoint [ 319.402669][ T9599] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 319.448775][ C0] hid-thrustmaster 0003:044F:B65D.0013: URB to get model id failed with error -71 [ 319.452586][ T5729] usb 2-1: USB disconnect, device number 64 [ 319.467754][ T808] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 319.603826][ T9600] fido_id[9600]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 319.634522][ T9605] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1076'. [ 319.645936][ T808] usb 3-1: Using ep0 maxpacket: 32 [ 319.654655][ T808] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 319.665523][ T808] usb 3-1: config 0 has no interface number 0 [ 319.674762][ T808] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 319.685407][ T808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.694665][ T808] usb 3-1: Product: syz [ 319.702305][ T808] usb 3-1: Manufacturer: syz [ 319.707270][ T808] usb 3-1: SerialNumber: syz [ 319.716456][ T808] usb 3-1: config 0 descriptor?? [ 319.728777][ T808] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 319.748451][ T808] usb 3-1: selecting invalid altsetting 1 [ 319.754559][ T808] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 319.762855][ T9] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 319.782544][ T808] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 319.805085][ T808] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 319.823621][ T808] usb 3-1: media controller created [ 319.851391][ T808] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 319.939329][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 319.950577][ T9] usb 4-1: config 0 has no interfaces? [ 319.967513][ T9] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 319.999503][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.039230][ T9] usb 4-1: config 0 descriptor?? [ 320.111160][ T9613] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1080'. [ 320.135245][ T9613] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1080'. [ 320.175022][ T9613] 1{X功: entered promiscuous mode [ 320.193573][ T808] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 320.203655][ T9613] 1{X功: left promiscuous mode [ 320.209062][ T808] zl10353_read_register: readreg error (reg=127, ret==-32) [ 320.272946][ T808] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 320.283769][ T9] usb 4-1: USB disconnect, device number 70 [ 320.345372][ T9619] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:466 [ 320.405020][ T808] usb 3-1: USB disconnect, device number 43 [ 320.474108][ T9617] kvm: kvm [9616]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 320.484127][ T9617] kvm: kvm [9616]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 320.966090][ T5729] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 321.061437][ T9641] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1089'. [ 321.076650][ T9641] openvswitch: netlink: Flow key attr not present in new flow. [ 321.160220][ T5729] usb 1-1: Using ep0 maxpacket: 8 [ 321.184815][ T5729] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=99.03 [ 321.210874][ T5729] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.244503][ T5729] usb 1-1: Product: syz [ 321.264437][ T5729] usb 1-1: Manufacturer: syz [ 321.281531][ T5729] usb 1-1: SerialNumber: syz [ 321.301946][ T5729] usb 1-1: config 0 descriptor?? [ 321.328149][ T5729] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state. [ 321.353572][ T9641] "syz.2.1089" (9641) uses obsolete ecb(arc4) skcipher [ 321.368933][ T5729] dvb-usb: bulk message failed: -22 (2/0) [ 321.389286][ T5729] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 321.441360][ T5729] dvbdev: DVB: registering new adapter (TerraTec/qanu USB2.0 Highspeed DVB-T Receiver) [ 321.479358][ T5729] usb 1-1: media controller created [ 321.545016][ T5729] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 321.582041][ T9651] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1085'. [ 321.603634][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 321.620216][ T9651] team0: Port device team_slave_0 removed [ 321.628381][ T5729] dvb-usb: no frontend was attached by 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' [ 321.660615][ T5729] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input28 [ 321.690588][ T5729] dvb-usb: schedule remote query interval to 50 msecs. [ 321.702997][ T5729] dvb-usb: bulk message failed: -22 (2/0) [ 321.716138][ T5729] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver successfully initialized and connected. [ 321.759115][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 321.807498][ T5729] dvb-usb: error while querying for an remote control event. [ 321.886845][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 321.901163][ T5729] dvb-usb: error while querying for an remote control event. [ 321.979767][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 321.986402][ T5729] dvb-usb: error while querying for an remote control event. [ 322.055792][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 322.075790][ T5729] dvb-usb: error while querying for an remote control event. [ 322.135790][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 322.148279][ T5729] dvb-usb: error while querying for an remote control event. [ 322.216999][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 322.227283][ T5729] dvb-usb: error while querying for an remote control event. [ 322.306088][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 322.342215][ T5729] dvb-usb: error while querying for an remote control event. [ 322.426205][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 322.440603][ T5729] dvb-usb: error while querying for an remote control event. [ 322.516097][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 322.535849][ T5729] dvb-usb: error while querying for an remote control event. [ 322.580702][ T9672] netlink: 'syz.2.1095': attribute type 4 has an invalid length. [ 322.608399][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 322.621711][ T5729] dvb-usb: error while querying for an remote control event. [ 322.656014][ T9670] netlink: 'syz.2.1095': attribute type 17 has an invalid length. [ 322.714802][ T809] dvb-usb: bulk message failed: -22 (1/0) [ 322.726537][ T809] dvb-usb: error while querying for an remote control event. [ 322.795825][ T809] dvb-usb: bulk message failed: -22 (1/0) [ 322.808390][ T809] dvb-usb: error while querying for an remote control event. [ 322.885794][ T809] dvb-usb: bulk message failed: -22 (1/0) [ 322.895163][ T809] dvb-usb: error while querying for an remote control event. [ 322.966070][ T809] dvb-usb: bulk message failed: -22 (1/0) [ 322.981459][ T809] dvb-usb: error while querying for an remote control event. [ 323.075932][ T809] dvb-usb: bulk message failed: -22 (1/0) [ 323.098049][ T809] dvb-usb: error while querying for an remote control event. [ 323.165828][ T809] dvb-usb: bulk message failed: -22 (1/0) [ 323.178048][ T809] dvb-usb: error while querying for an remote control event. [ 323.245825][ T809] dvb-usb: bulk message failed: -22 (1/0) [ 323.256710][ T809] dvb-usb: error while querying for an remote control event. [ 323.258558][ T9] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 323.275888][ T808] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 323.326019][ T809] dvb-usb: bulk message failed: -22 (1/0) [ 323.334701][ T809] dvb-usb: error while querying for an remote control event. [ 323.408238][ T809] dvb-usb: bulk message failed: -22 (1/0) [ 323.420133][ T809] dvb-usb: error while querying for an remote control event. [ 323.459041][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 323.470243][ T808] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.486862][ T809] dvb-usb: bulk message failed: -22 (1/0) [ 323.496249][ T808] usb 3-1: config 0 has no interfaces? [ 323.502079][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 323.509624][ T809] dvb-usb: error while querying for an remote control event. [ 323.513047][ T808] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 323.533397][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 323.546318][ T808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.557267][ T9] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 323.572308][ T808] usb 3-1: config 0 descriptor?? [ 323.578990][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.602932][ T9] usb 2-1: Product: syz [ 323.611666][ T9] usb 2-1: Manufacturer: syz [ 323.618342][ T9] usb 2-1: SerialNumber: syz [ 323.636685][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 323.644729][ T9] usb 2-1: config 0 descriptor?? [ 323.661656][ T5729] dvb-usb: error while querying for an remote control event. [ 323.735862][ T5729] dvb-usb: bulk message failed: -22 (1/0) [ 323.751462][ T5729] dvb-usb: error while querying for an remote control event. [ 323.795016][ T5729] usb 1-1: USB disconnect, device number 55 [ 323.825313][ T808] usb 3-1: USB disconnect, device number 44 [ 323.879986][ T9] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 323.979984][ T5729] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Re successfully deinitialized and disconnected. [ 323.991582][ T9679] loop5: detected capacity change from 0 to 7 [ 324.114975][ T808] usb 2-1: USB disconnect, device number 65 [ 324.459919][ T9679] Dev loop5: unable to read RDB block 7 [ 324.497134][ T9679] loop5: unable to read partition table [ 324.526259][ T9679] loop5: partition table beyond EOD, truncated [ 324.553995][ T9679] loop_reread_partitions: partition scan of loop5 (僕濉檳鼚久*嫼 滊%醌4FLQk輮5) failed (rc=-5) [ 324.570900][ T9684] loop2: detected capacity change from 0 to 7 [ 324.607464][ T9684] loop2: p1 [ 324.618600][ T9684] loop2: partition table partially beyond EOD, truncated [ 324.648803][ T9684] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 324.839061][ T5700] udevd[5700]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 324.991686][ T9696] bridge_slave_1: left promiscuous mode [ 324.997723][ T9696] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.015313][ T9696] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 325.036438][ T808] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 325.156212][ T5729] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 325.206718][ T808] usb 2-1: Using ep0 maxpacket: 32 [ 325.214060][ T808] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 325.230597][ T808] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 325.241228][ T808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.249724][ T808] usb 2-1: Product: syz [ 325.254150][ T808] usb 2-1: Manufacturer: syz [ 325.259546][ T808] usb 2-1: SerialNumber: syz [ 325.315830][ T5729] usb 1-1: Using ep0 maxpacket: 8 [ 325.324611][ T5729] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 325.336929][ T5729] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 325.355787][ T5729] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 325.355828][ T9] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 325.369272][ T5729] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 325.396909][ T5729] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 325.424444][ T5729] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 325.441754][ T5729] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.493091][ T9688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.524551][ T9688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.552598][ T808] usb 2-1: BAAD HEADPHONE p_chmask mismatch [ 325.559230][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 325.585127][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 325.612908][ T9] usb 4-1: string descriptor 0 read error: -22 [ 325.629841][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40 [ 325.660520][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.670964][ T9692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.697503][ T9692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.745488][ T808] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 325.773940][ T808] usb 2-1: USB disconnect, device number 66 [ 325.832582][ T5700] udevd[5700]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 325.920403][ T9] usb 4-1: 1:1 : bogus bTerminalLink 5 [ 325.936463][ T9692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.946636][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 325.966491][ T9] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 325.976401][ T9692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.990705][ T5729] usb 1-1: usb_control_msg returned -71 [ 326.001742][ T9] usb 4-1: 1:1 : bogus bTerminalLink 5 [ 326.010176][ T5729] usbtmc 1-1:16.0: can't read capabilities [ 326.016697][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 326.032163][ T9] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 326.112356][ T9] usb 4-1: 1:1 : bogus bTerminalLink 5 [ 326.119809][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 326.131337][ T5729] usb 1-1: USB disconnect, device number 56 [ 326.267442][ T9] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 326.284501][ T9] usb 4-1: USB disconnect, device number 71 [ 326.370258][ T9712] netlink: 'syz.1.1111': attribute type 30 has an invalid length. [ 326.447203][ T9714] kvm: user requested TSC rate below hardware speed [ 326.479771][ T9714] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 326.532394][ T9720] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1114'. [ 326.557499][ T9720] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1114'. [ 326.577646][ T9720] 0{X功: renamed from 31{X功 [ 326.590257][ T9720] 0{X功: left promiscuous mode [ 326.607226][ T9720] 0{X功: entered allmulticast mode [ 326.619474][ T9720] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 326.806899][ T9] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 326.995544][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 327.029438][ T9] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 327.046021][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.084351][ T9733] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1117'. [ 327.093519][ T9] usb 2-1: Product: syz [ 327.093543][ T9] usb 2-1: Manufacturer: syz [ 327.093560][ T9] usb 2-1: SerialNumber: syz [ 327.355408][ T9722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.399203][ T9722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.450151][ T9] usb 2-1: USB disconnect, device number 67 [ 327.721699][ T9746] netlink: 'syz.0.1122': attribute type 4 has an invalid length. [ 327.744464][ T9746] netlink: 'syz.0.1122': attribute type 17 has an invalid length. [ 327.887083][ T5729] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 327.961414][ T9757] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1126'. [ 328.042572][ T9757] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 328.065565][ T5729] usb 3-1: Using ep0 maxpacket: 16 [ 328.082726][ T5729] usb 3-1: too many configurations: 17, using maximum allowed: 8 [ 328.118888][ T9748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.133556][ T9748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.167463][ T9762] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1127'. [ 328.183303][ T9762] 1{X功: entered promiscuous mode [ 328.189714][ T9762] 1{X功: left allmulticast mode [ 328.223341][ T9762] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1127'. [ 328.255015][ T9762] 0{X功: renamed from 31{X功 [ 328.275054][ T9762] 0{X功: left promiscuous mode [ 328.281397][ T9762] 0{X功: entered allmulticast mode [ 328.303651][ T9762] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 328.351971][ T9748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.379305][ T9748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.402893][ T9748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.419982][ T9748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.044526][ T9774] netlink: 'syz.4.1131': attribute type 2 has an invalid length. [ 329.089789][ T9774] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1131'. [ 329.126619][ T9774] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 329.151074][ T9776] kvm: user requested TSC rate below hardware speed [ 329.196300][ T9776] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 329.726790][ T9790] xt_hashlimit: size too large, truncated to 1048576 [ 330.000293][ T9798] fuse: Bad value for 'fd' [ 330.086569][ T9] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 330.257927][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 330.268873][ T9] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 330.284793][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 330.294273][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.304260][ T9] usb 1-1: Product: syz [ 330.310184][ T9] usb 1-1: Manufacturer: syz [ 330.316526][ T9] usb 1-1: SerialNumber: syz [ 330.435914][ T5630] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 330.542035][ T9] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 330.592670][ T5630] usb 2-1: unable to get BOS descriptor or descriptor too short [ 330.612699][ T5630] usb 2-1: not running at top speed; connect to a high speed hub [ 330.633315][ T5630] usb 2-1: config 4 has an invalid interface number: 147 but max is 0 [ 330.656392][ T5630] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 330.682443][ T5630] usb 2-1: config 4 has no interface number 0 [ 330.705501][ T5630] usb 2-1: Dual-Role OTG device on HNP port [ 330.712656][ T5630] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 330.735010][ T5630] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=38 [ 330.743578][ T9] usb 1-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 330.754647][ T5630] usb 2-1: Product: syz [ 330.762522][ T9] usb 1-1: found format II with max.bitrate = 4, frame size=7372 [ 330.768792][ T5630] usb 2-1: Manufacturer: syz [ 330.792752][ T5630] usb 2-1: SerialNumber: syz [ 330.832359][ T9809] netlink: 'syz.4.1143': attribute type 16 has an invalid length. [ 330.840671][ T9809] netlink: 'syz.4.1143': attribute type 17 has an invalid length. [ 330.850055][ T9809] netlink: 'syz.4.1143': attribute type 27 has an invalid length. [ 330.988086][ T9812] netlink: 'syz.2.1140': attribute type 12 has an invalid length. [ 331.173218][ T9795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.206522][ T9795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.262320][ T9795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.296603][ T9795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.339669][ T9820] FAULT_INJECTION: forcing a failure. [ 331.339669][ T9820] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 331.359387][ T9820] CPU: 0 UID: 0 PID: 9820 Comm: syz.3.1145 Tainted: G L syzkaller #0 PREEMPT(full) [ 331.359422][ T9820] Tainted: [L]=SOFTLOCKUP [ 331.359434][ T9820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 331.359446][ T9820] Call Trace: [ 331.359454][ T9820] [ 331.359463][ T9820] dump_stack_lvl+0xe8/0x150 [ 331.359491][ T9820] should_fail_ex+0x412/0x560 [ 331.359523][ T9820] _copy_from_user+0x2d/0xb0 [ 331.359554][ T9820] udmabuf_ioctl+0xfa/0x300 [ 331.359584][ T9820] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 331.359624][ T9820] ? __fget_files+0x2a/0x420 [ 331.359648][ T9820] ? __fget_files+0x3a0/0x420 [ 331.359671][ T9820] ? __fget_files+0x2a/0x420 [ 331.359704][ T9820] ? bpf_lsm_file_ioctl+0x9/0x20 [ 331.359737][ T9820] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 331.359760][ T9820] __se_sys_ioctl+0xfc/0x170 [ 331.359790][ T9820] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.359812][ T9820] do_syscall_64+0x15f/0xf80 [ 331.359840][ T9820] ? trace_irq_disable+0x3b/0x140 [ 331.359871][ T9820] ? clear_bhb_loop+0x40/0x90 [ 331.359896][ T9820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.359916][ T9820] RIP: 0033:0x7f9544f9cdd9 [ 331.359934][ T9820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 331.359960][ T9820] RSP: 002b:00007f9545ea0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 331.359982][ T9820] RAX: ffffffffffffffda RBX: 00007f9545215fa0 RCX: 00007f9544f9cdd9 [ 331.359998][ T9820] RDX: 0000200000000000 RSI: 0000000040187542 RDI: 0000000000000003 [ 331.360022][ T9820] RBP: 00007f9545ea0090 R08: 0000000000000000 R09: 0000000000000000 [ 331.360036][ T9820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 331.360048][ T9820] R13: 00007f9545216038 R14: 00007f9545215fa0 R15: 00007f954533fa48 [ 331.360080][ T9820] [ 331.364572][ T5630] uvcvideo 2-1:4.147: Found UVC 0.02 device syz (04f2:b746) [ 331.395669][ T9795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.531323][ T5630] uvcvideo 2-1:4.147: No valid video chain found. [ 331.580084][ T9795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.662606][ T5630] usb 2-1: USB disconnect, device number 68 [ 331.788984][ T9827] binder: 9824:9827 ioctl c018620c 2000000001c0 returned -1 [ 331.841487][ T9795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.868502][ T9795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.012508][ T9] usb 1-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 332.048128][ T5730] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 332.096576][ T9] usb 1-1: USB disconnect, device number 57 [ 332.170998][ T5700] udevd[5700]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 332.219010][ T5730] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 332.231932][ T5730] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 332.244404][ T5730] usb 4-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 332.254240][ T5730] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.263525][ T5730] usb 4-1: Product: syz [ 332.270437][ T5730] usb 4-1: Manufacturer: syz [ 332.275176][ T5730] usb 4-1: SerialNumber: syz [ 332.564558][ T9846] loop5: detected capacity change from 0 to 7 [ 332.574995][ T9846] Dev loop5: unable to read RDB block 7 [ 332.580889][ T9846] loop5: unable to read partition table [ 332.587637][ T9846] loop5: partition table beyond EOD, truncated [ 332.595128][ T9846] loop_reread_partitions: partition scan of loop5 (x鼦熝鄸 ) failed (rc=-5) [ 332.612452][ T9847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.633597][ T9847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.818643][ T24] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 332.876355][ T24] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 333.176988][ T5729] usb 3-1: string descriptor 0 read error: -32 [ 333.188441][ T5729] usb 3-1: New USB device found, idVendor=04e8, idProduct=a101, bcdDevice= 4.48 [ 333.212039][ T5729] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.234594][ T5729] r8152-cfgselector 3-1: Unknown version 0x0000 [ 333.247269][ T5729] r8152-cfgselector 3-1: rejected 8 configurations due to insufficient available bus power [ 333.275769][ T5729] r8152-cfgselector 3-1: no configuration chosen from 8 choices [ 333.686250][ T5729] usb 2-1: new low-speed USB device number 69 using dummy_hcd [ 333.771957][ T9860] FAULT_INJECTION: forcing a failure. [ 333.771957][ T9860] name failslab, interval 1, probability 0, space 0, times 0 [ 333.785406][ T9860] CPU: 1 UID: 0 PID: 9860 Comm: syz.0.1159 Tainted: G L syzkaller #0 PREEMPT(full) [ 333.785438][ T9860] Tainted: [L]=SOFTLOCKUP [ 333.785446][ T9860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 333.785458][ T9860] Call Trace: [ 333.785467][ T9860] [ 333.785475][ T9860] dump_stack_lvl+0xe8/0x150 [ 333.785505][ T9860] should_fail_ex+0x412/0x560 [ 333.785537][ T9860] should_failslab+0xa8/0x100 [ 333.785571][ T9860] __kmalloc_cache_noprof+0x88/0x660 [ 333.785601][ T9860] ? udmabuf_create+0xd1/0xfd0 [ 333.785625][ T9860] ? __lock_acquire+0x6b5/0x2cf0 [ 333.785652][ T9860] udmabuf_create+0xd1/0xfd0 [ 333.785683][ T9860] ? tomoyo_path_number_perm+0x219/0x630 [ 333.785708][ T9860] ? tomoyo_path_number_perm+0x219/0x630 [ 333.785736][ T9860] ? do_vfs_ioctl+0x1166/0x1530 [ 333.785789][ T9860] ? __might_fault+0xaf/0x130 [ 333.785822][ T9860] ? __might_fault+0xaf/0x130 [ 333.785847][ T9860] ? __pfx_udmabuf_create+0x10/0x10 [ 333.785889][ T9860] udmabuf_ioctl+0x1f3/0x300 [ 333.785915][ T9860] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 333.785946][ T9860] ? __fget_files+0x2a/0x420 [ 333.785971][ T9860] ? __fget_files+0x2a/0x420 [ 333.785998][ T9860] ? bpf_lsm_file_ioctl+0x9/0x20 [ 333.786029][ T9860] ? __pfx_udmabuf_ioctl+0x10/0x10 [ 333.786052][ T9860] __se_sys_ioctl+0xfc/0x170 [ 333.786082][ T9860] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.786105][ T9860] do_syscall_64+0x15f/0xf80 [ 333.786131][ T9860] ? trace_irq_disable+0x3b/0x140 [ 333.786162][ T9860] ? clear_bhb_loop+0x40/0x90 [ 333.786188][ T9860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.786209][ T9860] RIP: 0033:0x7f060bd9cdd9 [ 333.786228][ T9860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 333.786245][ T9860] RSP: 002b:00007f060cc45028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 333.786267][ T9860] RAX: ffffffffffffffda RBX: 00007f060c015fa0 RCX: 00007f060bd9cdd9 [ 333.786282][ T9860] RDX: 0000200000000000 RSI: 0000000040187542 RDI: 0000000000000003 [ 333.786295][ T9860] RBP: 00007f060cc45090 R08: 0000000000000000 R09: 0000000000000000 [ 333.786308][ T9860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.786320][ T9860] R13: 00007f060c016038 R14: 00007f060c015fa0 R15: 00007f060c13fa48 [ 333.786352][ T9860] [ 334.063682][ T5729] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 334.075374][ T5729] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 334.086870][ T5729] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 334.099787][ T5729] usb 2-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 334.108940][ T5729] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.120214][ T5729] usb 2-1: config 0 descriptor?? [ 334.129797][ T9858] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 334.411754][ T9869] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.438987][ T9869] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 334.549080][ T5729] gt683r_led 0003:1770:FF00.0015: unknown main item tag 0x1 [ 334.558412][ T5729] gt683r_led 0003:1770:FF00.0015: collection stack underflow [ 334.565989][ T5729] gt683r_led 0003:1770:FF00.0015: item 0 0 0 12 parsing failed [ 334.574471][ T5729] gt683r_led 0003:1770:FF00.0015: hid parsing failed [ 334.587609][ T5729] gt683r_led 0003:1770:FF00.0015: probe with driver gt683r_led failed with error -22 [ 334.616190][ T24] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 334.758699][ T808] usb 2-1: USB disconnect, device number 69 [ 334.766694][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 334.789215][ T24] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 334.822314][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.829824][ T5730] usb 4-1: USB disconnect, device number 72 [ 334.857887][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 334.885780][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 334.921440][ T24] usb 1-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 334.943736][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.976798][ T24] usb 1-1: config 0 descriptor?? [ 335.016600][ T9878] loop5: detected capacity change from 0 to 7 [ 335.027484][ T9878] Dev loop5: unable to read RDB block 7 [ 335.034799][ T9878] loop5: unable to read partition table [ 335.041101][ T9878] loop5: partition table beyond EOD, truncated [ 335.054881][ T9878] loop_reread_partitions: partition scan of loop5 (x鼦熝鄸 ) failed (rc=-5) [ 335.177732][ T9883] fuse: Bad value for 'fd' [ 335.440883][ T24] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5013.0016/input/input29 [ 335.601999][ T24] input: HID 0458:5013 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5013.0016/input/input30 [ 335.688358][ T9897] loop9: detected capacity change from 0 to 7 [ 335.705194][ T9897] Dev loop9: unable to read RDB block 7 [ 335.714322][ T24] kye 0003:0458:5013.0016: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.0-1/input0 [ 335.764542][ T9897] loop9: AHDI p1 p2 p3 [ 335.795823][ T9897] loop9: partition table partially beyond EOD, truncated [ 335.816336][ T9897] loop9: p1 start 1920169572 is beyond EOD, truncated [ 335.830033][ T9897] loop9: p2 start 1851744889 is beyond EOD, truncated [ 336.016119][ T9867] cifs: Unknown parameter 'fd' [ 336.026159][ T9904] netlink: 'syz.4.1175': attribute type 4 has an invalid length. [ 336.042437][ T9903] lo: Caught tx_queue_len zero misconfig [ 336.112979][ T9905] netlink: 'syz.4.1175': attribute type 17 has an invalid length. [ 336.152957][ T9903] 8021q: VLANs not supported on lo [ 336.264078][ T24] usb 1-1: USB disconnect, device number 58 [ 336.394130][ T9918] loop5: detected capacity change from 0 to 7 [ 336.406756][ T9918] Dev loop5: unable to read RDB block 7 [ 336.412356][ T9918] loop5: unable to read partition table [ 336.426980][ T9918] loop5: partition table beyond EOD, truncated [ 336.447020][ T9920] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 336.464708][ T9918] loop_reread_partitions: partition scan of loop5 (x鼦熝鄸 ) failed (rc=-5) [ 336.487814][ T9916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.534215][ T9916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.560633][ T9919] veth0_to_bond: Caught tx_queue_len zero misconfig [ 337.373414][ T9943] netlink: 'syz.4.1186': attribute type 3 has an invalid length. [ 337.781051][ T9945] netlink: 'syz.3.1188': attribute type 4 has an invalid length. [ 337.796306][ T9945] netlink: 'syz.3.1188': attribute type 17 has an invalid length. [ 338.162495][ T9955] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 338.307121][ T5730] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 338.370931][ T9963] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1193'. [ 338.387121][ T9963] tipc: Invalid UDP bearer configuration [ 338.387169][ T9963] tipc: Enabling of bearer rejected, failed to enable media [ 338.478429][ T5730] usb 4-1: config 0 interface 0 has no altsetting 0 [ 338.485866][ T5730] usb 4-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00 [ 338.501533][ T5730] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.546116][ T5730] usb 4-1: config 0 descriptor?? [ 338.973508][ T9952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.992751][ T9952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.026247][ T9952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.041628][ T808] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 339.071335][ T9952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.146278][ T5730] usbhid 4-1:0.0: can't add hid device: -71 [ 339.177508][ T5730] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 339.236038][ T808] usb 1-1: Using ep0 maxpacket: 16 [ 339.249233][ T5730] usb 4-1: USB disconnect, device number 73 [ 339.269007][ T808] usb 1-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 339.311903][ T808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.353319][ T808] usb 1-1: Product: syz [ 339.367138][ T808] usb 1-1: Manufacturer: syz [ 339.378871][ T808] usb 1-1: SerialNumber: syz [ 339.425500][ T808] usb 1-1: config 0 descriptor?? [ 339.439088][ T808] gspca_main: spca508-2.14.0 probing 041e:4018 [ 339.638530][ T808] gspca_spca508: reg_read err -32 [ 339.664025][ T808] gspca_spca508: reg_read err -32 [ 339.675657][ T808] gspca_spca508: reg_read err -32 [ 339.890596][ T808] gspca_spca508: reg_read err -32 [ 339.902008][ T9967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.959818][ T9967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.078355][ T808] gspca_spca508: reg write: error -71 [ 340.108784][ T808] spca508 1-1:0.0: probe with driver spca508 failed with error -71 [ 340.222266][ T808] usb 1-1: USB disconnect, device number 59 [ 340.426076][ T24] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 340.446200][ T9988] loop9: detected capacity change from 0 to 7 [ 340.458684][ T9988] Dev loop9: unable to read RDB block 7 [ 340.477955][ T9988] loop9: AHDI p1 p2 p3 [ 340.490352][ T9988] loop9: partition table partially beyond EOD, truncated [ 340.517812][ T9988] loop9: p1 start 1920169572 is beyond EOD, truncated [ 340.548851][ T9988] loop9: p2 start 1851744889 is beyond EOD, truncated [ 340.670764][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 340.708702][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 340.751797][ T24] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 340.777824][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 340.817411][ T24] usb 4-1: SerialNumber: syz [ 340.857402][ T9996] kvm: user requested TSC rate below hardware speed [ 340.903279][ T9996] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 341.271155][ T24] usb 4-1: 0:2 : does not exist [ 341.292907][ T24] usb 4-1: unit 5: unexpected type 0x0a [ 341.450672][ T24] usb 4-1: USB disconnect, device number 74 [ 341.580453][ T5700] udevd[5700]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 342.005837][ T24] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 342.076419][T10010] netlink: 'syz.0.1208': attribute type 1 has an invalid length. [ 342.176325][ T24] usb 2-1: device descriptor read/64, error -71 [ 342.189991][T10010] 8021q: adding VLAN 0 to HW filter on device bond2 [ 342.219494][T10019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.254787][T10019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.436403][ T24] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 342.576094][ T24] usb 2-1: device descriptor read/64, error -71 [ 342.665857][ T5729] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 342.708504][ T24] usb usb2-port1: attempt power cycle [ 342.716318][T10031] binder: 10030:10031 ioctl c0306201 200000000480 returned -14 [ 342.827831][ T5729] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 342.861964][ T5729] usb 1-1: New USB device found, idVendor=0830, idProduct=0001, bcdDevice= 0.00 [ 342.890933][ T5729] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.957806][ T5729] usb 1-1: config 0 descriptor?? [ 342.985196][T10037] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1216'. [ 342.986263][ T5729] usb 1-1: active config #0 != 1 ?? [ 343.004288][T10037] 0{X功: entered promiscuous mode [ 343.011889][T10037] 0{X功: left allmulticast mode [ 343.040788][T10038] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1216'. [ 343.058957][T10038] 1{X功: renamed from 30{X功 [ 343.070804][T10038] 1{X功: left promiscuous mode [ 343.079389][T10038] 1{X功: entered allmulticast mode [ 343.086194][ T24] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 343.097947][T10038] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 343.136843][ T24] usb 2-1: device descriptor read/8, error -71 [ 343.185307][ T30] audit: type=1800 audit(1778384402.834:1044): pid=10036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1215" name="/" dev="fuse" ino=1 res=0 errno=0 [ 343.271000][T10024] openvswitch: netlink: Multiple metadata blocks provided [ 343.376177][ T24] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 343.407305][ T24] usb 2-1: device descriptor read/8, error -71 [ 343.440074][ T5729] usb 1-1: USB disconnect, device number 60 [ 343.526244][ T24] usb usb2-port1: unable to enumerate USB device [ 344.015890][ T5729] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 344.121276][T10073] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 344.129187][T10073] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 344.167753][ T5729] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 344.178833][ T5729] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 344.189779][ T5729] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.207595][T10078] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1227'. [ 344.225328][ T5729] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 344.233775][T10078] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1227'. [ 344.246069][T10078] 1{X功: renamed from 30{X功 [ 344.253026][T10078] 1{X功: left promiscuous mode [ 344.258798][T10078] 1{X功: entered allmulticast mode [ 344.266609][T10078] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 344.478329][T10087] sctp: [Deprecated]: syz.0.1230 (pid 10087) Use of struct sctp_assoc_value in delayed_ack socket option. [ 344.478329][T10087] Use struct sctp_sack_info instead [ 344.496766][T10087] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1230'. [ 344.587030][T10096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1232'. [ 344.611045][T10096] input: syz1 as /devices/virtual/input/input31 [ 344.895984][T10110] netlink: 'syz.1.1236': attribute type 4 has an invalid length. [ 344.932431][T10110] netlink: 'syz.1.1236': attribute type 17 has an invalid length. [ 345.259848][ T5729] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 345.273649][ T5729] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 345.807906][ T5729] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -110 [ 345.828752][ T5729] stv0680 4-1:4.0: last error: 0, command = 0x0 [ 346.038149][T10127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.072584][T10127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.197643][T10129] ima: Can not allocate md5 (reason: -2) [ 346.204842][ T30] audit: type=1800 audit(1778384405.854:1045): pid=10129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1239" name="/" dev="fuse" ino=1 res=0 errno=0 [ 346.236425][ T5729] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 346.295905][ T5630] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 346.383978][ T24] usb 4-1: USB disconnect, device number 75 [ 346.399036][ T5729] usb 2-1: no configurations [ 346.415553][ T5729] usb 2-1: can't read configurations, error -22 [ 346.457131][ T5630] usb 1-1: Using ep0 maxpacket: 16 [ 346.475142][ T5630] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 346.488701][ T5630] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.503345][ T5630] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.515204][ T5630] usb 1-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 346.530287][ T5630] usb 1-1: config 7 interface 0 has no altsetting 0 [ 346.538833][ T5630] usb 1-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 346.548109][ T5630] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.565864][ T5729] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 346.726304][ T5729] usb 2-1: no configurations [ 346.731470][ T5729] usb 2-1: can't read configurations, error -22 [ 346.738875][ T5729] usb usb2-port1: attempt power cycle [ 346.775912][ T24] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 346.936123][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 346.949577][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 346.976825][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 347.003056][ T24] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 347.022427][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.037259][ T24] usb 4-1: Product: syz [ 347.045822][ T24] usb 4-1: Manufacturer: syz [ 347.054681][ T24] usb 4-1: SerialNumber: syz [ 347.068297][ T24] usb 4-1: config 0 descriptor?? [ 347.075883][ T5729] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 347.093696][ T24] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 347.117074][ T24] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 347.130649][ T5729] usb 2-1: no configurations [ 347.143581][ T5729] usb 2-1: can't read configurations, error -22 [ 347.285874][ T5729] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 347.337464][ T5729] usb 2-1: no configurations [ 347.345549][ T5729] usb 2-1: can't read configurations, error -22 [ 347.362981][T10141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.385603][ T5729] usb usb2-port1: unable to enumerate USB device [ 347.398069][T10141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.476087][T10141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.532439][T10141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.564267][ T5630] hid (null): report_id 32512 is invalid [ 347.576345][ T5630] hid (null): unknown global tag 0xc [ 347.590707][ T5630] hid (null): invalid report_count 518845905 [ 347.607668][ T5630] hid (null): global environment stack underflow [ 347.622844][ T5630] hid (null): invalid report_count -1268420390 [ 347.634924][ T5630] hid (null): global environment stack underflow [ 347.648747][ T5630] hid (null): unknown global tag 0xe [ 347.668161][ T5630] hid (null): unknown global tag 0xe [ 347.677474][ T5630] hid (null): global environment stack underflow [ 347.719865][ T5630] input: HID 0458:5010 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:7.0/0003:0458:5010.0017/input/input32 [ 347.937478][ T5630] kye 0003:0458:5010.0017: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.0-1/input0 [ 348.056728][ T24] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 348.077590][ T24] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 348.112921][ T24] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 348.157946][ T24] em28xx 4-1:0.0: No AC97 audio processor [ 348.233758][ T24] usb 4-1: USB disconnect, device number 76 [ 348.279432][ T24] em28xx 4-1:0.0: Disconnecting em28xx [ 348.401286][ T24] em28xx 4-1:0.0: Freeing device [ 348.653571][T10154] netlink: 'syz.2.1245': attribute type 10 has an invalid length. [ 348.694965][T10154] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 348.725158][T10154] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 348.748153][T10154] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 348.765634][T10154] team0: Port device netdevsim1 added [ 348.786316][ T24] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 348.922500][T10158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.942754][T10158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.000303][ T24] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 349.057887][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.079889][ T24] usb 4-1: Product: syz [ 349.088959][ T24] usb 4-1: Manufacturer: syz [ 349.104268][ T24] usb 4-1: SerialNumber: syz [ 349.382140][T10169] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1251'. [ 349.397619][ T808] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 349.464150][T10169] fuse: Bad value for 'fd' [ 349.475510][T10169] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1251'. [ 349.551451][ T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 349.565825][ T808] usb 2-1: Using ep0 maxpacket: 32 [ 349.591040][ T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 349.611280][ T808] usb 2-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=52.85 [ 349.647242][ T808] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 349.667572][ T808] usb 2-1: Manufacturer: syz [ 349.688679][ T808] usb 2-1: config 0 descriptor?? [ 349.781118][ T808] usb_8dev 2-1:0.0 can0: sending command message failed [ 349.805838][ T808] usb_8dev 2-1:0.0 can0: can't get firmware version [ 349.839555][T10147] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1243'. [ 349.909862][ T808] usb_8dev 2-1:0.0: probe with driver usb_8dev failed with error -22 [ 349.935972][T10164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1249'. [ 349.976264][T10177] netlink: 'syz.4.1254': attribute type 4 has an invalid length. [ 350.089252][ T808] usb 2-1: USB disconnect, device number 78 [ 350.240419][ T5730] usb 1-1: USB disconnect, device number 61 [ 350.292809][T10147] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1243'. [ 350.334309][T10147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.375001][T10147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.768556][T10205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 350.876401][T10207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 351.037224][T10207] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1262'. [ 351.077350][T10207] openvswitch: netlink: Flow key attr not present in new flow. [ 351.162848][T10197] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 351.219012][T10197] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 351.640329][ T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPROTO [ 351.677575][ T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 351.726995][ T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 351.779222][ T24] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 351.829299][ T24] usb 4-1: USB disconnect, device number 77 [ 352.018291][T10197] team0: left allmulticast mode [ 352.034242][T10197] team_slave_0: left allmulticast mode [ 352.053024][T10197] team_slave_1: left allmulticast mode [ 352.067873][T10197] vlan0: left allmulticast mode [ 352.080259][T10197] veth0_vlan: left allmulticast mode [ 352.109438][T10197] netdevsim netdevsim2 netdevsim1: left allmulticast mode [ 352.125281][T10197] team0: left promiscuous mode [ 352.136519][T10197] team_slave_0: left promiscuous mode [ 352.149846][T10197] team_slave_1: left promiscuous mode [ 352.163726][T10197] vlan0: left promiscuous mode [ 352.225822][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.277302][ T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.325017][ T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.365198][ T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.523410][T10227] FAULT_INJECTION: forcing a failure. [ 352.523410][T10227] name failslab, interval 1, probability 0, space 0, times 0 [ 352.560206][T10227] CPU: 1 UID: 0 PID: 10227 Comm: syz.1.1268 Tainted: G L syzkaller #0 PREEMPT(full) [ 352.560240][T10227] Tainted: [L]=SOFTLOCKUP [ 352.560247][T10227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 352.560260][T10227] Call Trace: [ 352.560268][T10227] [ 352.560276][T10227] dump_stack_lvl+0xe8/0x150 [ 352.560304][T10227] should_fail_ex+0x412/0x560 [ 352.560335][T10227] should_failslab+0xa8/0x100 [ 352.560369][T10227] __kmalloc_noprof+0xe8/0x760 [ 352.560397][T10227] ? tomoyo_encode+0x28b/0x550 [ 352.560431][T10227] tomoyo_encode+0x28b/0x550 [ 352.560464][T10227] tomoyo_realpath_from_path+0x58d/0x5d0 [ 352.560504][T10227] ? tomoyo_path_number_perm+0x219/0x630 [ 352.560529][T10227] tomoyo_path_number_perm+0x246/0x630 [ 352.560556][T10227] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 352.560580][T10227] ? __lock_acquire+0x6b5/0x2cf0 [ 352.560627][T10227] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 352.560678][T10227] ? __fget_files+0x2a/0x420 [ 352.560708][T10227] ? __fget_files+0x2a/0x420 [ 352.560730][T10227] ? __fget_files+0x3a0/0x420 [ 352.560752][T10227] ? __fget_files+0x2a/0x420 [ 352.560781][T10227] security_file_ioctl+0xc3/0x2a0 [ 352.560807][T10227] __se_sys_ioctl+0x47/0x170 [ 352.560838][T10227] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.560861][T10227] do_syscall_64+0x15f/0xf80 [ 352.560889][T10227] ? trace_irq_disable+0x3b/0x140 [ 352.560919][T10227] ? clear_bhb_loop+0x40/0x90 [ 352.560945][T10227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.560966][T10227] RIP: 0033:0x7f77fc19cdd9 [ 352.560985][T10227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 352.561002][T10227] RSP: 002b:00007f77fa3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 352.561023][T10227] RAX: ffffffffffffffda RBX: 00007f77fc415fa0 RCX: 00007f77fc19cdd9 [ 352.561037][T10227] RDX: 0000200000000140 RSI: 00000000c0845657 RDI: 0000000000000003 [ 352.561051][T10227] RBP: 00007f77fa3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 352.561063][T10227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 352.561075][T10227] R13: 00007f77fc416038 R14: 00007f77fc415fa0 R15: 00007f77fc53fa48 [ 352.561109][T10227] [ 352.561130][T10227] ERROR: Out of memory at tomoyo_realpath_from_path. [ 353.095883][ T809] usb 4-1: new full-speed USB device number 78 using dummy_hcd [ 353.205795][ T24] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 353.253054][ T809] usb 4-1: config 5 has an invalid interface number: 123 but max is 0 [ 353.263661][ T809] usb 4-1: config 5 has no interface number 0 [ 353.284448][ T809] usb 4-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 353.310680][ T809] usb 4-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 353.332037][ T809] usb 4-1: config 5 interface 123 has no altsetting 0 [ 353.339101][ T24] usb 2-1: device descriptor read/64, error -71 [ 353.362241][ T809] usb 4-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 353.380407][ T809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.404784][ T809] usb 4-1: Product: syz [ 353.415154][ T809] usb 4-1: Manufacturer: syz [ 353.426118][ T809] usb 4-1: SerialNumber: syz [ 353.596244][ T24] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 353.654185][T10241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.692941][T10241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.735865][ T24] usb 2-1: device descriptor read/64, error -71 [ 353.855158][ T809] ni6501 4-1:5.123: driver 'ni6501' failed to auto-configure device. [ 353.865492][ T24] usb usb2-port1: attempt power cycle [ 353.911972][ T809] usb 4-1: USB disconnect, device number 78 [ 354.203958][T10253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.228449][ T24] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 354.249336][T10253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.266635][ T24] usb 2-1: device descriptor read/8, error -71 [ 354.305849][ T809] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 354.466237][ T809] usb 4-1: Using ep0 maxpacket: 32 [ 354.481088][ T809] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 354.496667][ T809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.515798][ T24] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 354.536602][ T809] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 354.556791][ T24] usb 2-1: device descriptor read/8, error -71 [ 354.666320][ T24] usb usb2-port1: unable to enumerate USB device [ 355.750691][T10250] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1274'. [ 355.818853][T10250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.839402][T10250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.905285][ T809] gspca_nw80x: reg_w err -71 [ 355.923403][ T809] nw80x 4-1:3.0: probe with driver nw80x failed with error -71 [ 355.955661][ T809] usb 4-1: USB disconnect, device number 79 [ 356.265800][T10220] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 356.445804][T10220] usb 1-1: Using ep0 maxpacket: 8 [ 356.462720][T10220] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 356.489623][T10220] usb 1-1: can't read configurations, error -61 [ 356.635883][T10220] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 356.864179][T10220] usb 1-1: Using ep0 maxpacket: 8 [ 356.934662][T10220] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 356.954055][T10220] usb 1-1: can't read configurations, error -61 [ 356.970420][T10220] usb usb1-port1: attempt power cycle [ 357.126107][ T5701] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 357.286790][ T5701] usb 4-1: no configurations [ 357.299261][ T5701] usb 4-1: can't read configurations, error -22 [ 357.335876][T10220] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 357.367460][T10220] usb 1-1: Using ep0 maxpacket: 8 [ 357.386916][T10220] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 357.405266][T10220] usb 1-1: can't read configurations, error -61 [ 357.456760][ T5701] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 357.555813][T10220] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 357.588967][T10220] usb 1-1: Using ep0 maxpacket: 8 [ 357.601667][T10220] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 357.618472][T10220] usb 1-1: can't read configurations, error -61 [ 357.641747][ T5701] usb 4-1: no configurations [ 357.649798][T10220] usb usb1-port1: unable to enumerate USB device [ 357.659382][ T5701] usb 4-1: can't read configurations, error -22 [ 357.679933][ T5701] usb usb4-port1: attempt power cycle [ 357.840653][T10301] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 357.847228][T10301] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 357.860692][T10301] vhci_hcd vhci_hcd.0: Device attached [ 357.877798][T10302] vhci_hcd: connection closed [ 357.877956][ T7620] vhci_hcd vhci_hcd.2: stop threads [ 357.890150][ T7620] vhci_hcd vhci_hcd.2: release socket [ 357.900170][ T7620] vhci_hcd vhci_hcd.2: disconnect device [ 358.045921][ T5701] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 358.070555][ T5701] usb 4-1: no configurations [ 358.075255][ T5701] usb 4-1: can't read configurations, error -22 [ 358.206110][ T5701] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 358.237589][ T5701] usb 4-1: no configurations [ 358.242407][ T5701] usb 4-1: can't read configurations, error -22 [ 358.249789][ T5701] usb usb4-port1: unable to enumerate USB device [ 358.470736][T10314] netlink: 'syz.2.1294': attribute type 1 has an invalid length. [ 358.498525][T10314] bond1: entered promiscuous mode [ 358.504292][T10314] 8021q: adding VLAN 0 to HW filter on device bond1 [ 358.524817][T10313] veth3: entered promiscuous mode [ 358.530021][T10313] veth3: entered allmulticast mode [ 358.543360][T10313] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 358.553896][T10315] macsec1: entered promiscuous mode [ 358.553917][T10315] batadv0: entered promiscuous mode [ 358.554077][T10315] macsec1: entered allmulticast mode [ 358.554088][T10315] batadv0: entered allmulticast mode [ 358.558406][T10315] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 358.559385][T10315] batadv0: left allmulticast mode [ 358.559402][T10315] batadv0: left promiscuous mode [ 358.740863][ T30] audit: type=1326 audit(1778384418.394:1046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10320 comm="syz.2.1296" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c679cdd9 code=0x7ffc0000 [ 358.768635][ T30] audit: type=1326 audit(1778384418.394:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10320 comm="syz.2.1296" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c679cdd9 code=0x7ffc0000 [ 358.793267][ T30] audit: type=1326 audit(1778384418.394:1047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10320 comm="syz.2.1296" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c679cdd9 code=0x7ffc0000 [ 358.817954][ T30] audit: type=1326 audit(1778384418.414:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10320 comm="syz.2.1296" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c679cdd9 code=0x7ffc0000 [ 358.842447][ T30] audit: type=1326 audit(1778384418.424:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10320 comm="syz.2.1296" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c679cdd9 code=0x7ffc0000 [ 358.892564][ T30] audit: type=1326 audit(1778384418.424:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10320 comm="syz.2.1296" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c679cdd9 code=0x7ffc0000 [ 358.945657][ T30] audit: type=1326 audit(1778384418.424:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10320 comm="syz.2.1296" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7f75c679cdd9 code=0x7ffc0000 [ 358.987689][T10325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.996348][ T30] audit: type=1326 audit(1778384418.424:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10320 comm="syz.2.1296" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c679cdd9 code=0x7ffc0000 [ 359.021943][T10325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.045866][ T30] audit: type=1326 audit(1778384418.424:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10320 comm="syz.2.1296" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f75c679cdd9 code=0x7ffc0000 [ 359.102465][ T30] audit: type=1326 audit(1778384418.424:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10320 comm="syz.2.1296" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c679cdd9 code=0x7ffc0000 [ 359.185573][T10334] sctp: [Deprecated]: syz.4.1300 (pid 10334) Use of int in max_burst socket option. [ 359.185573][T10334] Use struct sctp_assoc_value instead [ 359.201567][T10334] trusted_key: encrypted_key: insufficient parameters specified [ 359.296968][T10220] usb 2-1: new full-speed USB device number 83 using dummy_hcd [ 359.468369][T10220] usb 2-1: unable to get BOS descriptor or descriptor too short [ 359.476875][T10220] usb 2-1: not running at top speed; connect to a high speed hub [ 359.486261][T10220] usb 2-1: config 5 has 1 interface, different from the descriptor's value: 2 [ 359.495298][T10220] usb 2-1: config 5 interface 0 has no altsetting 1 [ 359.506970][T10220] usb 2-1: New USB device found, idVendor=0582, idProduct=0074, bcdDevice=2a.70 [ 359.518313][T10220] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.526885][T10220] usb 2-1: Product: syz [ 359.531154][T10220] usb 2-1: Manufacturer: syz [ 359.536269][T10220] usb 2-1: SerialNumber: syz [ 359.729046][T10346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.744447][T10346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.762595][T10346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.778735][T10346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.817750][T10346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.848523][T10346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.905051][T10352] fuse: Bad value for 'fd' [ 360.026967][T10220] usb 2-1: USB disconnect, device number 83 [ 360.079151][ T5700] udevd[5700]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:5.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 360.107107][T10354] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.257240][T10362] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1308'. [ 360.278964][T10354] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 360.288951][T10363] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1308'. [ 360.356130][T10220] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 360.521236][T10354] dummy0: left allmulticast mode [ 360.530674][T10354] team0: left allmulticast mode [ 360.535582][T10354] team_slave_0: left allmulticast mode [ 360.542348][T10354] team_slave_1: left allmulticast mode [ 360.549892][T10354] team0: left promiscuous mode [ 360.554802][T10354] team_slave_0: left promiscuous mode [ 360.562884][T10354] team_slave_1: left promiscuous mode [ 360.570423][T10220] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 360.582018][T10220] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.591314][T10220] usb 2-1: Product: syz [ 360.595558][T10220] usb 2-1: Manufacturer: syz [ 360.600984][T10220] usb 2-1: SerialNumber: syz [ 360.621772][ T7621] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.645271][ T7621] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.666507][ T7621] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.696123][ T7621] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.839824][T10381] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 361.057067][T10220] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 361.078159][T10220] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 361.185986][ T5701] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 361.345913][ T5701] usb 4-1: Using ep0 maxpacket: 8 [ 361.355121][ T5701] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 361.372689][ T5701] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 361.387681][ T5701] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.406139][ T5701] usb 4-1: config 0 descriptor?? [ 361.423743][ T5701] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 361.890874][T10397] libceph: resolve '0..' (ret=-3): failed [ 362.092333][ T5701] gspca_vc032x: reg_r err -71 [ 362.105444][ T5701] vc032x 4-1:0.0: probe with driver vc032x failed with error -71 [ 362.120026][ T5701] usb 4-1: USB disconnect, device number 84 [ 362.304582][T10220] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 362.729840][T10220] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 362.762743][T10220] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 362.796329][T10220] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 362.833531][T10220] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 362.860105][T10220] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 362.917811][T10220] usb 2-1: USB disconnect, device number 84 [ 363.145825][T10411] input: syz0 as /devices/virtual/input/input33 [ 363.550282][T10424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.576545][T10424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.605985][T10424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.627362][T10424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.653306][T10424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.679992][T10424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.512550][T10446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.531151][T10446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.557523][ T809] usb 2-1: new full-speed USB device number 85 using dummy_hcd [ 364.561348][T10446] kvm: kvm [10445]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 364.578826][T10446] kvm: kvm [10445]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 364.628633][T10450] sg_read: process 834 (syz.0.1332) changed security contexts after opening file descriptor, this is not allowed. [ 364.732781][ T809] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 364.732821][ T809] usb 2-1: can't read configurations, error -61 [ 364.812452][T10453] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1333'. [ 364.866026][ T809] usb 2-1: new full-speed USB device number 86 using dummy_hcd [ 364.884766][T10455] fuse: Bad value for 'fd' [ 365.028594][ T809] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 365.044192][ T809] usb 2-1: can't read configurations, error -61 [ 365.055032][ T809] usb usb2-port1: attempt power cycle [ 365.291423][T10471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1339'. [ 365.396158][ T809] usb 2-1: new full-speed USB device number 87 using dummy_hcd [ 365.429035][ T809] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 365.438006][ T809] usb 2-1: can't read configurations, error -61 [ 365.473602][T10478] loop9: detected capacity change from 0 to 7 [ 365.487091][T10478] Dev loop9: unable to read RDB block 7 [ 365.503135][T10478] loop9: AHDI p1 p2 p3 [ 365.508903][T10478] loop9: partition table partially beyond EOD, truncated [ 365.528897][T10478] loop9: p1 start 1920169572 is beyond EOD, truncated [ 365.549304][T10478] loop9: p2 start 1851744889 is beyond EOD, truncated [ 365.567617][ T809] usb 2-1: new full-speed USB device number 88 using dummy_hcd [ 365.621833][ T809] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 365.660168][ T809] usb 2-1: can't read configurations, error -61 [ 365.685545][ T809] usb usb2-port1: unable to enumerate USB device [ 365.843065][T10488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.856894][T10488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.248259][T10508] netlink: 'syz.3.1352': attribute type 4 has an invalid length. [ 366.260199][T10508] netlink: 'syz.3.1352': attribute type 17 has an invalid length. [ 366.864633][T10533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.904514][T10533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.120651][T10542] fuse: Bad value for 'fd' [ 367.416160][ T24] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 367.503413][T10549] netlink: 'syz.1.1363': attribute type 4 has an invalid length. [ 367.522779][T10549] netlink: 'syz.1.1363': attribute type 17 has an invalid length. [ 367.576904][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 367.604354][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.637704][ T24] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 367.674567][ T24] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 367.694516][ T24] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 367.719280][ T24] usb 1-1: Product: syz [ 367.728949][ T24] usb 1-1: Manufacturer: syz [ 367.746679][ T24] usb 1-1: SerialNumber: syz [ 367.753645][T10552] kvm: user requested TSC rate below hardware speed [ 367.787270][ T24] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input34 [ 368.010991][T10542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.041970][T10542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.096187][T10220] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 368.265879][T10220] usb 2-1: Using ep0 maxpacket: 32 [ 368.281662][T10220] usb 2-1: unable to get BOS descriptor or descriptor too short [ 368.305017][T10220] usb 2-1: config 128 has an invalid interface number: 127 but max is 3 [ 368.339576][T10220] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 368.384933][T10220] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 368.416211][T10220] usb 2-1: config 128 has no interface number 0 [ 368.431456][T10220] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024 [ 368.459657][T10220] usb 2-1: config 128 interface 127 has no altsetting 0 [ 368.479681][T10220] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 368.494845][T10220] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.519636][T10220] usb 2-1: Product: syz [ 368.530655][T10220] usb 2-1: Manufacturer: syz [ 368.543456][T10220] usb 2-1: SerialNumber: syz [ 368.578382][T10557] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 368.606228][T10578] syzkaller0: entered promiscuous mode [ 368.624139][T10578] syzkaller0: entered allmulticast mode [ 368.922653][ T24] usb 1-1: USB disconnect, device number 66 [ 369.010466][ T24] appletouch 1-1:1.0: input: appletouch disconnected [ 369.101212][T10220] usb 2-1: USB disconnect, device number 89 [ 369.172173][ T5700] udevd[5700]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 369.631070][T10602] kvm: user requested TSC rate below hardware speed [ 369.646190][T10602] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 369.669681][T10606] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1376'. [ 369.760657][T10606] 1{X功: entered promiscuous mode [ 369.769493][T10606] 1{X功: left allmulticast mode [ 369.786062][ T809] usb 4-1: new full-speed USB device number 85 using dummy_hcd [ 369.799701][T10615] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1376'. [ 369.834002][T10615] 0{X功: renamed from 31{X功 [ 369.864595][T10615] 0{X功: left promiscuous mode [ 369.885295][T10615] 0{X功: entered allmulticast mode [ 369.931007][T10615] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 369.936070][ T809] usb 4-1: device descriptor read/64, error -71 [ 370.081987][T10619] kAFS: unable to lookup cell '' [ 370.192856][T10621] vivid-000: disconnect [ 370.207090][ T809] usb 4-1: new full-speed USB device number 86 using dummy_hcd [ 370.355860][ T809] usb 4-1: device descriptor read/64, error -71 [ 370.476772][ T809] usb usb4-port1: attempt power cycle [ 370.826315][ T809] usb 4-1: new full-speed USB device number 87 using dummy_hcd [ 370.857430][ T809] usb 4-1: device descriptor read/8, error -71 [ 370.993449][T10620] vivid-000: reconnect [ 371.107110][ T809] usb 4-1: new full-speed USB device number 88 using dummy_hcd [ 371.147680][ T809] usb 4-1: device descriptor read/8, error -71 [ 371.290280][T10633] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1384'. [ 371.313681][ T809] usb usb4-port1: unable to enumerate USB device [ 371.791767][ T809] usb 2-1: new full-speed USB device number 90 using dummy_hcd [ 371.983488][ T809] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 372.002898][ T809] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 372.019931][ T809] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 372.037033][ T809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.209534][T10648] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1388'. [ 372.247555][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 372.247600][ T30] audit: type=1326 audit(1778384431.904:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10649 comm="syz.2.1389" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c679cdd9 code=0x7ffc0000 [ 372.285239][ T30] audit: type=1326 audit(1778384431.934:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10649 comm="syz.2.1389" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75c679cdd9 code=0x7ffc0000 [ 372.311447][ T809] usb 2-1: usb_control_msg returned -32 [ 372.317347][ T809] usbtmc 2-1:16.0: can't read capabilities [ 372.324109][ T30] audit: type=1326 audit(1778384431.934:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10649 comm="syz.2.1389" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f75c679cdd9 code=0x7ffc0000 [ 372.362397][T10648] team_slave_0 (unregistering): left allmulticast mode [ 372.401279][T10648] team0: Port device team_slave_0 removed [ 372.462199][T10655] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1390'. [ 372.473773][T10655] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1390'. [ 372.569757][ T5693] usb 2-1: USB disconnect, device number 90 [ 372.624861][T10658] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1391'. [ 372.648618][T10658] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1391'. [ 372.658768][T10658] 1{X功: renamed from 30{X功 [ 372.670581][T10658] 1{X功: left promiscuous mode [ 372.678869][T10658] 1{X功: entered allmulticast mode [ 372.689641][T10658] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 372.746643][T10661] kvm: user requested TSC rate below hardware speed [ 372.782309][T10661] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 372.808828][T10665] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 373.199266][T10673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.225911][ T809] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 373.227041][T10673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.385912][ T809] usb 4-1: Using ep0 maxpacket: 8 [ 373.405649][ T809] usb 4-1: config 2 has an invalid interface number: 101 but max is 0 [ 373.426562][ T809] usb 4-1: config 2 has no interface number 0 [ 373.446862][ T809] usb 4-1: config 2 interface 101 altsetting 0 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 373.480999][ T809] usb 4-1: New USB device found, idVendor=13d3, idProduct=3350, bcdDevice=b6.63 [ 373.502591][ T809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.520134][ T809] usb 4-1: Product: syz [ 373.527828][ T809] usb 4-1: Manufacturer: syz [ 373.538529][ T809] usb 4-1: SerialNumber: syz [ 373.784772][ T809] usb 4-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 373.834122][ T809] usb 4-1: USB disconnect, device number 89 [ 374.038841][T10691] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1402'. [ 374.048966][T10689] FAULT_INJECTION: forcing a failure. [ 374.048966][T10689] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 374.074969][T10691] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1402'. [ 374.104037][T10689] CPU: 1 UID: 0 PID: 10689 Comm: syz.2.1401 Tainted: G L syzkaller #0 PREEMPT(full) [ 374.104069][T10689] Tainted: [L]=SOFTLOCKUP [ 374.104077][T10689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 374.104090][T10689] Call Trace: [ 374.104099][T10689] [ 374.104107][T10689] dump_stack_lvl+0xe8/0x150 [ 374.104137][T10689] should_fail_ex+0x412/0x560 [ 374.104170][T10689] prepare_alloc_pages+0x22a/0x650 [ 374.104209][T10689] __alloc_frozen_pages_noprof+0x12f/0x380 [ 374.104247][T10689] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 374.104282][T10689] ? __pfx_policy_nodemask+0x10/0x10 [ 374.104312][T10689] ? __folio_batch_add_and_move+0x11a/0xc50 [ 374.104341][T10689] ? lock_acquire+0x106/0x350 [ 374.104372][T10689] alloc_pages_mpol+0x235/0x490 [ 374.104410][T10689] folio_alloc_mpol_noprof+0x39/0x160 [ 374.104445][T10689] vma_alloc_folio_noprof+0xe1/0x1e0 [ 374.104481][T10689] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 374.104526][T10689] do_wp_page+0x118a/0x4cc0 [ 374.104556][T10689] ? __pte_offset_map+0x29/0x240 [ 374.104591][T10689] ? __pfx_do_wp_page+0x10/0x10 [ 374.104612][T10689] ? do_raw_spin_lock+0x12b/0x2f0 [ 374.104645][T10689] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 374.104687][T10689] handle_mm_fault+0x151d/0x3170 [ 374.104736][T10689] ? handle_mm_fault+0xee/0x3170 [ 374.104779][T10689] ? __pfx_handle_mm_fault+0x10/0x10 [ 374.104810][T10689] ? follow_page_pte+0xbb7/0xe50 [ 374.104844][T10689] ? __pfx_follow_page_pte+0x10/0x10 [ 374.104882][T10689] __get_user_pages+0x1683/0x2720 [ 374.104941][T10689] __gup_longterm_locked+0xdcf/0x1630 [ 374.104979][T10689] ? sanity_check_pinned_pages+0x7af/0x870 [ 374.105012][T10689] gup_fast_fallback+0x1d84/0x20d0 [ 374.105070][T10689] ? __pfx_gup_fast_fallback+0x10/0x10 [ 374.105092][T10689] ? ____sys_recvmsg+0x1e6/0x4a0 [ 374.105120][T10689] ? __x64_sys_recvmsg+0x1ba/0x2a0 [ 374.105147][T10689] ? do_syscall_64+0x15f/0xf80 [ 374.105174][T10689] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.105201][T10689] ? pin_user_pages_fast+0x4d/0xb0 [ 374.105226][T10689] iov_iter_extract_pages+0x37b/0x5f0 [ 374.105266][T10689] extract_iter_to_sg+0xefb/0x25d0 [ 374.105311][T10689] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 374.105336][T10689] ? rcu_is_watching+0x15/0xb0 [ 374.105363][T10689] ? trace_kmalloc+0x2a/0xf0 [ 374.105400][T10689] ? __kmalloc_noprof+0x1b8/0x760 [ 374.105433][T10689] ? __asan_memset+0x22/0x50 [ 374.105462][T10689] af_alg_get_rsgl+0x4b6/0x8e0 [ 374.105509][T10689] skcipher_recvmsg+0x392/0x1140 [ 374.105559][T10689] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 374.105588][T10689] ? __lock_acquire+0x6b5/0x2cf0 [ 374.105611][T10689] ? aa_sock_msg_perm+0xf1/0x1b0 [ 374.105641][T10689] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 374.105668][T10689] ? security_socket_recvmsg+0x7e/0x2c0 [ 374.105700][T10689] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 374.105740][T10689] sock_recvmsg+0x172/0x1b0 [ 374.105768][T10689] ____sys_recvmsg+0x1e6/0x4a0 [ 374.105809][T10689] ? __pfx_____sys_recvmsg+0x10/0x10 [ 374.105856][T10689] ? import_iovec+0x73/0xa0 [ 374.105889][T10689] ___sys_recvmsg+0x215/0x590 [ 374.105918][T10689] ? get_pid_task+0x20/0x1f0 [ 374.105951][T10689] ? __pfx____sys_recvmsg+0x10/0x10 [ 374.105986][T10689] ? __fget_files+0x2a/0x420 [ 374.106031][T10689] ? __fget_files+0x3a0/0x420 [ 374.106067][T10689] __x64_sys_recvmsg+0x1ba/0x2a0 [ 374.106101][T10689] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 374.106143][T10689] ? __pfx_ksys_write+0x10/0x10 [ 374.106182][T10689] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.106206][T10689] do_syscall_64+0x15f/0xf80 [ 374.106235][T10689] ? trace_irq_disable+0x3b/0x140 [ 374.106268][T10689] ? clear_bhb_loop+0x40/0x90 [ 374.106295][T10689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.106317][T10689] RIP: 0033:0x7f75c679cdd9 [ 374.106347][T10689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 374.106366][T10689] RSP: 002b:00007f75c766d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 374.106389][T10689] RAX: ffffffffffffffda RBX: 00007f75c6a15fa0 RCX: 00007f75c679cdd9 [ 374.106404][T10689] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 374.106417][T10689] RBP: 00007f75c766d090 R08: 0000000000000000 R09: 0000000000000000 [ 374.106430][T10689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 374.106442][T10689] R13: 00007f75c6a16038 R14: 00007f75c6a15fa0 R15: 00007f75c6b3fa48 [ 374.106474][T10689] [ 374.741160][T10702] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1404'. [ 374.790730][T10702] 0{X功: entered promiscuous mode [ 374.809318][T10702] 0{X功: left allmulticast mode [ 374.986160][ T5701] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 375.019123][T10712] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1404'. [ 375.059774][T10712] 1{X功: renamed from 30{X功 [ 375.092044][T10712] 1{X功: left promiscuous mode [ 375.132772][T10712] 1{X功: entered allmulticast mode [ 375.154129][T10712] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 375.186421][ T5701] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 375.204069][ T5701] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.229037][ T5701] usb 4-1: Product: syz [ 375.242675][ T5701] usb 4-1: Manufacturer: syz [ 375.256057][ T5701] usb 4-1: SerialNumber: syz [ 375.283013][ T5701] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 375.303407][ T5693] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 375.706091][ T5729] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 375.838259][ T5701] usb 4-1: USB disconnect, device number 90 [ 375.880934][ T5729] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 375.905205][ T5729] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.915039][ T5729] usb 2-1: Product: syz [ 375.927339][ T5729] usb 2-1: Manufacturer: syz [ 375.932831][ T5729] usb 2-1: SerialNumber: syz [ 375.953192][ T5729] usb 2-1: config 0 descriptor?? [ 375.977298][ T5729] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 376.062045][T10737] fuse: Bad value for 'fd' [ 376.301719][T10742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.315342][T10742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.375844][ T5693] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 376.388753][ T5693] ath9k_htc: Failed to initialize the device [ 376.404712][ T5701] usb 4-1: ath9k_htc: USB layer deinitialized [ 376.429321][T10746] loop8: detected capacity change from 0 to 8 [ 376.440596][T10746] Dev loop8: unable to read RDB block 8 [ 376.455388][T10746] loop8: unable to read partition table [ 376.470578][T10746] loop8: partition table beyond EOD, truncated [ 376.488642][T10746] loop_reread_partitions: partition scan of loop8 (x黕>燕 ) failed (rc=-5) [ 376.717291][ T5701] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 376.770325][T10751] loop5: detected capacity change from 0 to 7 [ 376.784226][T10751] Dev loop5: unable to read RDB block 7 [ 376.795982][T10751] loop5: unable to read partition table [ 376.804208][T10751] loop5: partition table beyond EOD, truncated [ 376.810891][T10751] loop_reread_partitions: partition scan of loop5 (x鼦熝鄸 ) failed (rc=-5) [ 376.876655][ T5701] usb 4-1: Using ep0 maxpacket: 8 [ 376.895554][ T5701] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 376.936699][ T5701] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 376.965768][ T5701] usb 4-1: Product: syz [ 376.980127][ T5701] usb 4-1: Manufacturer: syz [ 376.992418][ T5701] usb 4-1: SerialNumber: syz [ 377.005231][ T5701] usb 4-1: config 0 descriptor?? [ 377.018706][T10754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.054340][T10754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.240790][ T5701] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 377.260511][ T5701] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 377.317404][ T5701] usb 4-1: USB disconnect, device number 91 [ 377.816104][ T5729] gspca_sunplus: reg_w_riv err -110 [ 377.832489][ T5729] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 377.922928][T10770] __nla_validate_parse: 3 callbacks suppressed [ 377.922950][T10770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1427'. [ 377.953256][T10770] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1427'. [ 378.240692][T10777] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1430'. [ 378.531288][T10786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.533379][ T30] audit: type=1326 audit(1778384438.184:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10719 comm="syz.1.1411" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77fc19cdd9 code=0x7fc00000 [ 378.544108][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.573473][T10786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.581403][ T5701] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 378.592254][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.662525][ T5729] usb 2-1: USB disconnect, device number 91 [ 378.760534][ T5701] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 378.816138][ T5701] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.841935][ T5701] usb 4-1: Product: syz [ 378.870594][ T5701] usb 4-1: Manufacturer: syz [ 378.888311][ T5701] usb 4-1: SerialNumber: syz [ 379.186575][ T5693] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 379.281566][T10805] trusted_key: encrypted_key: key user:syz not found [ 379.321733][ T5701] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 379.368338][ T5701] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 379.379271][ T5693] usb 2-1: Using ep0 maxpacket: 32 [ 379.394341][ T5693] usb 2-1: config 39 has an invalid interface number: 133 but max is 0 [ 379.407202][ T5693] usb 2-1: config 39 has no interface number 0 [ 379.419520][ T5693] usb 2-1: config 39 interface 133 has no altsetting 0 [ 379.435913][ T5693] usb 2-1: New USB device found, idVendor=19d2, idProduct=1088, bcdDevice=6b.53 [ 379.447370][ T5693] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.469005][ T5693] usb 2-1: Product: syz [ 379.480559][ T5693] usb 2-1: Manufacturer: syz [ 379.487849][ T5693] usb 2-1: SerialNumber: syz [ 379.552550][T10808] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1439'. [ 379.574598][T10808] 0{X功: entered promiscuous mode [ 379.588696][T10808] 0{X功: left allmulticast mode [ 379.634857][T10808] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1439'. [ 379.676809][T10808] 1{X功: renamed from 30{X功 [ 379.713142][T10808] 1{X功: left promiscuous mode [ 379.725156][T10794] kvm: kvm [10793]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 379.746728][T10808] 1{X功: entered allmulticast mode [ 379.759815][T10794] kvm: kvm [10793]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 379.788727][T10808] A link change request failed with some changes committed already. Interface 31{X功 may have been left with an inconsistent configuration, please check. [ 379.882053][ T5693] option 2-1:39.133: GSM modem (1-port) converter detected [ 379.920540][ T5693] usb 2-1: USB disconnect, device number 92 [ 379.949167][ T5693] option 2-1:39.133: device disconnected [ 380.158006][T10812] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1440'. [ 380.510251][T10821] fuse: Bad value for 'fd' [ 381.517956][ T5701] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPROTO [ 381.558179][ T5701] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 381.623558][ T5701] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 381.693668][ T5701] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 381.763051][ T5701] usb 4-1: USB disconnect, device number 92 [ 382.135947][ T5701] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 382.186021][T10860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.204340][T10860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.295853][ T5701] usb 4-1: Using ep0 maxpacket: 16 [ 382.303386][ T5701] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.315413][ T5701] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 382.326990][ T5701] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 382.361014][ T5701] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 382.391736][ T5701] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.422139][ T5701] usb 4-1: config 0 descriptor?? [ 382.858287][ T5701] appleir 0003:05AC:8241.0018: unknown main item tag 0x0 [ 382.875518][ T5701] appleir 0003:05AC:8241.0018: unknown main item tag 0x0 [ 382.895468][ T5701] appleir 0003:05AC:8241.0018: unknown main item tag 0x0 [ 382.905271][ T5701] appleir 0003:05AC:8241.0018: unknown main item tag 0x0 [ 382.923581][ T5701] appleir 0003:05AC:8241.0018: unknown main item tag 0x0 [ 382.966837][ T5701] appleir 0003:05AC:8241.0018: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.3-1/input0 [ 383.079548][T10888] netlink: 'syz.1.1461': attribute type 8 has an invalid length. [ 383.105766][T10887] netlink: 'syz.1.1461': attribute type 8 has an invalid length. [ 383.163501][ T5701] usb 4-1: USB disconnect, device number 93 [ 383.168581][T10888] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1461'. [ 383.188427][T10887] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1461'. [ 383.848142][T10898] warning: `syz.2.1465' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 383.951638][T10898] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1465'. [ 384.045773][ T5701] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 384.206781][ T5701] usb 2-1: Using ep0 maxpacket: 32 [ 384.220377][ T5701] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 384.236427][ T10] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 384.244373][ T5701] usb 2-1: config 0 has no interface number 0 [ 384.258472][ T5701] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 384.269370][ T5701] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.277711][ T5701] usb 2-1: Product: syz [ 384.283355][ T5701] usb 2-1: Manufacturer: syz [ 384.288981][ T5701] usb 2-1: SerialNumber: syz [ 384.301363][ T5701] usb 2-1: config 0 descriptor?? [ 384.338991][ T5701] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 384.349138][ T5701] usb 2-1: selecting invalid altsetting 1 [ 384.357035][ T5701] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 384.368274][ T5701] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 384.379882][ T5701] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 384.391858][ T5701] usb 2-1: media controller created [ 384.397734][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 384.410330][ T10] usb 4-1: config 39 has an invalid interface number: 133 but max is 0 [ 384.425262][ T10] usb 4-1: config 39 has no interface number 0 [ 384.439579][ T5701] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 384.448295][ T10] usb 4-1: config 39 interface 133 has no altsetting 0 [ 384.461713][ T10] usb 4-1: New USB device found, idVendor=19d2, idProduct=1088, bcdDevice=6b.53 [ 384.485717][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.497756][ T10] usb 4-1: Product: syz [ 384.502402][ T10] usb 4-1: Manufacturer: syz [ 384.509133][ T10] usb 4-1: SerialNumber: syz [ 384.613369][ T5701] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 384.651154][ T5701] zl10353_read_register: readreg error (reg=127, ret==-32) [ 384.669151][ T5701] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 384.745557][T10899] kvm: kvm [10896]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 384.768601][ T5701] usb 2-1: USB disconnect, device number 93 [ 384.786624][T10899] kvm: kvm [10896]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 384.937921][ T10] option 4-1:39.133: GSM modem (1-port) converter detected [ 384.970006][ T10] usb 4-1: USB disconnect, device number 94 [ 384.992754][ T10] option 4-1:39.133: device disconnected [ 385.079529][T10906] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1468'. [ 385.102347][T10906] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1468'. [ 385.122350][T10906] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 385.152014][T10906] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 385.249034][ T30] audit: type=1326 audit(1778384444.904:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10908 comm="syz.0.1467" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f060bd9cdd9 code=0x7ffc0000 [ 385.285290][ T30] audit: type=1326 audit(1778384444.904:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10908 comm="syz.0.1467" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f060bd9cdd9 code=0x7ffc0000 [ 385.311272][ T30] audit: type=1326 audit(1778384444.934:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10908 comm="syz.0.1467" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f060bd9cdd9 code=0x7ffc0000 [ 385.339633][ T30] audit: type=1326 audit(1778384444.934:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10908 comm="syz.0.1467" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f060bd9cdd9 code=0x7ffc0000 [ 385.371945][ T30] audit: type=1326 audit(1778384444.934:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10908 comm="syz.0.1467" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f060bd9cdd9 code=0x7ffc0000 [ 385.399496][ T30] audit: type=1326 audit(1778384444.964:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10908 comm="syz.0.1467" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f060bd9cdd9 code=0x7ffc0000 [ 385.427423][ T30] audit: type=1326 audit(1778384444.964:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10908 comm="syz.0.1467" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f060bd9cdd9 code=0x7ffc0000 [ 385.454360][ T30] audit: type=1326 audit(1778384444.964:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10908 comm="syz.0.1467" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f060bd9cdd9 code=0x7ffc0000 [ 385.482369][ T30] audit: type=1326 audit(1778384444.994:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10908 comm="syz.0.1467" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f060bd9cdd9 code=0x7ffc0000 [ 385.513805][ T30] audit: type=1326 audit(1778384444.994:1089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10908 comm="syz.0.1467" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f060bd9cdd9 code=0x7ffc0000 [ 385.751608][T10920] binder: 10913:10920 ioctl c018620c 200000000240 returned -22 [ 385.772103][T10916] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3979591798 (509387750144 ns) > initial count (364801339648 ns). Using initial count to start timer. [ 386.350057][T10936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1476'. [ 386.378551][T10936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1476'. [ 386.621119][T10945] netlink: 'syz.1.1479': attribute type 12 has an invalid length. [ 386.663126][T10946] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1477'. [ 386.842079][T10948] netlink: 'syz.3.1477': attribute type 21 has an invalid length. [ 386.869454][T10948] loop6: detected capacity change from 0 to 524288000 [ 387.046651][T10951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.125527][T10951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.985920][ T10] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 388.146979][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 388.175859][ T10] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 388.195982][ T10] usb 2-1: config 0 has no interface number 0 [ 388.209841][ T10] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 388.222395][T10956] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 388.243248][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.272034][ T10] usb 2-1: Product: syz [ 388.292577][ T10] usb 2-1: Manufacturer: syz [ 388.328732][ T10] usb 2-1: SerialNumber: syz [ 388.382356][ T10] usb 2-1: config 0 descriptor?? [ 388.430410][ T10] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 388.496875][ T10] usb 2-1: selecting invalid altsetting 1 [ 388.521515][ T10] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 388.559438][ T10] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 388.582798][ T10] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 388.594192][ T10] usb 2-1: media controller created [ 388.717950][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 388.877184][ T10] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 388.897648][ T10] zl10353_read_register: readreg error (reg=127, ret==-32) [ 388.924965][ T10] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 389.140515][ T10] usb 2-1: USB disconnect, device number 94 [ 389.233035][T10980] netlink: 'syz.4.1490': attribute type 12 has an invalid length. [ 391.046167][ T10] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 391.226016][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 391.245406][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 391.277154][ T10] usb 4-1: config 6 has an invalid interface number: 150 but max is 0 [ 391.305529][ T10] usb 4-1: config 6 has no interface number 0 [ 391.328196][ T10] usb 4-1: config 6 interface 150 altsetting 6 endpoint 0x6 has an invalid bInterval 240, changing to 11 [ 391.363684][ T10] usb 4-1: config 6 interface 150 has no altsetting 0 [ 391.403186][ T10] usb 4-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=7d.6f [ 391.443501][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.473617][ T10] usb 4-1: Product: syz [ 391.489546][ T10] usb 4-1: Manufacturer: syz [ 391.512313][ T10] usb 4-1: SerialNumber: syz [ 391.798011][ T10] usb 4-1: USB disconnect, device number 95 [ 392.149325][T11060] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1509'. [ 392.162159][T11060] openvswitch: netlink: Flow key attr not present in new flow. [ 392.174708][T11060] "syz.1.1509" (11060) uses obsolete ecb(arc4) skcipher [ 392.307184][T11051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.331814][T11051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.419127][T11066] tipc: Enabling of bearer rejected, already enabled [ 392.430771][T11066] wg2: entered promiscuous mode [ 392.435846][T11066] wg2: entered allmulticast mode [ 392.444006][T11066] mac80211_hwsim hwsim4 syzkaller0: Caught tx_queue_len zero misconfig [ 392.454216][T11066] tipc: Resetting bearer [ 393.029172][ T10] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 393.195814][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 393.216967][ T10] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 393.235445][ T10] usb 1-1: config 0 has no interface number 0 [ 393.245787][T11088] sch_fq: defrate 16 ignored. [ 393.250466][ T10] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 393.268889][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.278474][T11088] fuse: Bad value for 'fd' [ 393.287379][ T10] usb 1-1: Product: syz [ 393.296412][ T10] usb 1-1: Manufacturer: syz [ 393.301529][T11088] netlink: 200032 bytes leftover after parsing attributes in process `syz.4.1516'. [ 393.305905][ T10] usb 1-1: SerialNumber: syz [ 393.338024][ T10] usb 1-1: config 0 descriptor?? [ 393.359420][ T10] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 393.380195][ T10] usb 1-1: selecting invalid altsetting 1 [ 393.392721][ T10] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 393.436033][ T10] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 393.449481][ T10] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 393.492511][ T10] usb 1-1: media controller created [ 393.544614][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 393.633954][T11103] FAULT_INJECTION: forcing a failure. [ 393.633954][T11103] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 393.654723][T11103] CPU: 0 UID: 0 PID: 11103 Comm: syz.3.1520 Tainted: G L syzkaller #0 PREEMPT(full) [ 393.654759][T11103] Tainted: [L]=SOFTLOCKUP [ 393.654767][T11103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 393.654780][T11103] Call Trace: [ 393.654789][T11103] [ 393.654799][T11103] dump_stack_lvl+0xe8/0x150 [ 393.654834][T11103] should_fail_ex+0x412/0x560 [ 393.654868][T11103] prepare_alloc_pages+0x22a/0x650 [ 393.654909][T11103] __alloc_frozen_pages_noprof+0x12f/0x380 [ 393.654947][T11103] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 393.654985][T11103] ? __pfx_policy_nodemask+0x10/0x10 [ 393.655016][T11103] ? __folio_batch_add_and_move+0x11a/0xc50 [ 393.655046][T11103] ? lock_acquire+0x106/0x350 [ 393.655078][T11103] alloc_pages_mpol+0x235/0x490 [ 393.655117][T11103] folio_alloc_mpol_noprof+0x39/0x160 [ 393.655152][T11103] vma_alloc_folio_noprof+0xe1/0x1e0 [ 393.655189][T11103] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 393.655234][T11103] do_wp_page+0x118a/0x4cc0 [ 393.655266][T11103] ? __pte_offset_map+0x29/0x240 [ 393.655303][T11103] ? __pfx_do_wp_page+0x10/0x10 [ 393.655324][T11103] ? do_raw_spin_lock+0x12b/0x2f0 [ 393.655358][T11103] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 393.655399][T11103] handle_mm_fault+0x151d/0x3170 [ 393.655441][T11103] ? handle_mm_fault+0xee/0x3170 [ 393.655475][T11103] ? __pfx_handle_mm_fault+0x10/0x10 [ 393.655502][T11103] ? follow_page_pte+0xbb7/0xe50 [ 393.655544][T11103] ? __pfx_follow_page_pte+0x10/0x10 [ 393.655582][T11103] __get_user_pages+0x1683/0x2720 [ 393.655641][T11103] __gup_longterm_locked+0xdcf/0x1630 [ 393.655677][T11103] ? sanity_check_pinned_pages+0x7af/0x870 [ 393.655709][T11103] gup_fast_fallback+0x1d84/0x20d0 [ 393.655765][T11103] ? __pfx_gup_fast_fallback+0x10/0x10 [ 393.655786][T11103] ? ____sys_recvmsg+0x1e6/0x4a0 [ 393.655816][T11103] ? __x64_sys_recvmsg+0x1ba/0x2a0 [ 393.655844][T11103] ? do_syscall_64+0x15f/0xf80 [ 393.655871][T11103] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.655897][T11103] ? pin_user_pages_fast+0x4d/0xb0 [ 393.655924][T11103] iov_iter_extract_pages+0x37b/0x5f0 [ 393.655963][T11103] extract_iter_to_sg+0xefb/0x25d0 [ 393.656004][T11103] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 393.656026][T11103] ? rcu_is_watching+0x15/0xb0 [ 393.656049][T11103] ? trace_kmalloc+0x2a/0xf0 [ 393.656080][T11103] ? __kmalloc_noprof+0x1b8/0x760 [ 393.656111][T11103] ? __asan_memset+0x22/0x50 [ 393.656136][T11103] af_alg_get_rsgl+0x4b6/0x8e0 [ 393.656177][T11103] skcipher_recvmsg+0x392/0x1140 [ 393.656221][T11103] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 393.656245][T11103] ? __lock_acquire+0x6b5/0x2cf0 [ 393.656265][T11103] ? aa_sock_msg_perm+0xf1/0x1b0 [ 393.656291][T11103] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 393.656316][T11103] ? security_socket_recvmsg+0x7e/0x2c0 [ 393.656344][T11103] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 393.656371][T11103] sock_recvmsg+0x172/0x1b0 [ 393.656394][T11103] ____sys_recvmsg+0x1e6/0x4a0 [ 393.656438][T11103] ? __pfx_____sys_recvmsg+0x10/0x10 [ 393.656480][T11103] ? import_iovec+0x73/0xa0 [ 393.656509][T11103] ___sys_recvmsg+0x215/0x590 [ 393.656539][T11103] ? get_pid_task+0x20/0x1f0 [ 393.656567][T11103] ? __pfx____sys_recvmsg+0x10/0x10 [ 393.656599][T11103] ? __fget_files+0x2a/0x420 [ 393.656643][T11103] ? __fget_files+0x3a0/0x420 [ 393.656691][T11103] __x64_sys_recvmsg+0x1ba/0x2a0 [ 393.656725][T11103] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 393.656769][T11103] ? __pfx_ksys_write+0x10/0x10 [ 393.656809][T11103] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.656833][T11103] do_syscall_64+0x15f/0xf80 [ 393.656862][T11103] ? trace_irq_disable+0x3b/0x140 [ 393.656894][T11103] ? clear_bhb_loop+0x40/0x90 [ 393.656922][T11103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.656943][T11103] RIP: 0033:0x7f9544f9cdd9 [ 393.656965][T11103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 393.656984][T11103] RSP: 002b:00007f9545ea0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 393.657007][T11103] RAX: ffffffffffffffda RBX: 00007f9545215fa0 RCX: 00007f9544f9cdd9 [ 393.657023][T11103] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 393.657037][T11103] RBP: 00007f9545ea0090 R08: 0000000000000000 R09: 0000000000000000 [ 393.657050][T11103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 393.657063][T11103] R13: 00007f9545216038 R14: 00007f9545215fa0 R15: 00007f954533fa48 [ 393.657099][T11103] [ 394.075982][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 394.122991][T11105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1519'. [ 394.142620][T11105] tipc: Cannot configure node identity twice [ 394.397387][ T10] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 394.404413][ T10] zl10353_read_register: readreg error (reg=127, ret==-32) [ 394.552739][T11114] netlink: 'syz.3.1521': attribute type 12 has an invalid length. [ 394.635555][ T10] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 394.711846][ T10] usb 1-1: USB disconnect, device number 67 [ 394.859719][T11119] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 394.866305][T11119] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 394.916071][T11119] vhci_hcd vhci_hcd.0: Device attached [ 395.058977][T11143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1525'. [ 395.076213][T11143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1525'. [ 395.165934][ T5693] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 395.173676][ T5701] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 395.334989][T11136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.343744][ T5701] usb 4-1: Using ep0 maxpacket: 32 [ 395.353343][ T5701] usb 4-1: config 39 has an invalid interface number: 133 but max is 0 [ 395.366646][ T5701] usb 4-1: config 39 has no interface number 0 [ 395.378008][ T5701] usb 4-1: config 39 interface 133 has no altsetting 0 [ 395.385631][T11136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.399405][ T5701] usb 4-1: New USB device found, idVendor=19d2, idProduct=1088, bcdDevice=6b.53 [ 395.412354][ T5701] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.426170][ T5701] usb 4-1: Product: syz [ 395.433596][ T5701] usb 4-1: Manufacturer: syz [ 395.449007][ T5701] usb 4-1: SerialNumber: syz [ 395.696453][ T5701] option 4-1:39.133: GSM modem (1-port) converter detected [ 395.739267][ T5701] usb 4-1: USB disconnect, device number 96 [ 395.761199][ T5701] option 4-1:39.133: device disconnected [ 395.982007][T11180] netlink: 'syz.0.1530': attribute type 11 has an invalid length. [ 396.000725][T11180] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1530'. [ 396.276621][ T5701] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 396.468663][ T5701] usb 2-1: Using ep0 maxpacket: 32 [ 396.488159][ T5701] usb 2-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 396.518232][ T5701] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.528781][ T5701] usb 2-1: Product: syz [ 396.533958][ T5701] usb 2-1: Manufacturer: syz [ 396.540418][ T5701] usb 2-1: SerialNumber: syz [ 396.569829][ T5701] usb 2-1: config 0 descriptor?? [ 396.614435][ T5701] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 396.624283][T11214] input: syz1 as /devices/virtual/input/input36 [ 396.753441][T11224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.768561][T11224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.661169][T11251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1538'. [ 397.686445][T11251] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1538'. [ 397.697933][T11131] vhci_hcd: connection reset by peer [ 397.709041][T10097] vhci_hcd vhci_hcd.4: stop threads [ 397.728122][T10097] vhci_hcd vhci_hcd.4: release socket [ 397.744545][T10097] vhci_hcd vhci_hcd.4: disconnect device [ 397.750645][ T5729] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 397.907964][ T5729] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 397.928706][ T5729] usb 4-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 397.955913][ T5729] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 397.981660][ T5729] usb 4-1: config 220 interface 0 has no altsetting 0 [ 398.000615][ T5729] usb 4-1: config 220 interface 1 has no altsetting 0 [ 398.014389][ T5729] usb 4-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=6c.b9 [ 398.045556][ T5729] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.057954][ T5729] usb 4-1: Product: syz [ 398.067176][ T5729] usb 4-1: Manufacturer: syz [ 398.081742][ T5701] gspca_topro: Sensor soi763a [ 398.084895][ T5729] usb 4-1: SerialNumber: syz [ 398.320830][T11245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.368105][T11245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.418756][ T5729] usb 4-1: selecting invalid altsetting 0 [ 398.460333][ T5729] uvcvideo 4-1:220.0: probe with driver uvcvideo failed with error -22 [ 398.488794][ T5729] usb 4-1: selecting invalid altsetting 0 [ 398.497986][ T5729] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 398.519337][ T5729] usb 4-1: USB disconnect, device number 97 [ 399.310392][T11292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.374157][T11292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.406651][ T5701] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 399.603123][ T5701] usb 1-1: Using ep0 maxpacket: 32 [ 399.618758][ T5701] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 399.641364][ T5701] usb 1-1: config 0 has no interface number 0 [ 399.669117][ T5701] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 399.699313][ T5701] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.748264][ T5701] usb 1-1: Product: syz [ 399.762435][ T5701] usb 1-1: Manufacturer: syz [ 399.777738][ T5701] usb 1-1: SerialNumber: syz [ 399.806324][ T5701] usb 1-1: config 0 descriptor?? [ 399.828874][ T5701] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 399.891691][ T5701] usb 1-1: selecting invalid altsetting 1 [ 399.911386][ T5701] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 399.989120][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 399.989136][ T30] audit: type=1400 audit(1778384459.634:1091): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 400.213866][T11314] binder: 11313:11314 ioctl 80047210 200000000140 returned -22 [ 400.336207][ T5693] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 400.370759][T11319] binder: 11313:11319 ioctl 80047210 200000000140 returned -22 [ 400.390464][ T5701] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 400.428664][ T5701] usb 1-1: media controller created [ 400.489373][ T5701] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 400.598517][ T5701] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 400.605908][ T5701] zl10353_read_register: readreg error (reg=127, ret==-32) [ 400.621166][ T5701] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 400.655614][T11324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.692038][T11324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.759218][ T5701] usb 1-1: USB disconnect, device number 68 [ 401.646122][T11350] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1552'. [ 401.669392][T11350] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1552'. [ 401.911677][T11362] netlink: 'syz.0.1556': attribute type 2 has an invalid length. [ 402.461276][ T5729] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 402.501316][ T809] usb 2-1: USB disconnect, device number 95 [ 402.656225][ T5729] usb 1-1: Using ep0 maxpacket: 32 [ 402.689459][ T5729] usb 1-1: config 39 has an invalid interface number: 133 but max is 0 [ 402.734671][ T5729] usb 1-1: config 39 has no interface number 0 [ 402.764889][ T5729] usb 1-1: config 39 interface 133 has no altsetting 0 [ 402.798404][ T5729] usb 1-1: New USB device found, idVendor=19d2, idProduct=1088, bcdDevice=6b.53 [ 402.815830][ T5729] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.859848][ T5729] usb 1-1: Product: syz [ 402.872812][ T5729] usb 1-1: Manufacturer: syz [ 402.894774][ T5729] usb 1-1: SerialNumber: syz [ 402.944164][T11386] team0: Device gtp0 is of different type [ 403.133957][ T5729] option 1-1:39.133: GSM modem (1-port) converter detected [ 403.184353][ T5729] usb 1-1: USB disconnect, device number 69 [ 403.225921][ T5729] option 1-1:39.133: device disconnected [ 403.483939][T11416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.556523][T11416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.697245][ T5693] usb 4-1: new full-speed USB device number 98 using dummy_hcd [ 403.878022][ T5693] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 403.894686][ T5693] usb 4-1: config 0 has no interface number 0 [ 403.915019][ T5693] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 403.953602][ T5693] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.979465][ T5693] usb 4-1: Product: syz [ 403.992446][ T5693] usb 4-1: Manufacturer: syz [ 404.001561][ T5693] usb 4-1: SerialNumber: syz [ 404.019533][ T5693] usb 4-1: config 0 descriptor?? [ 404.057661][T11412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.102715][T11412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.246476][ T5693] usb 4-1: Firmware version (0.0) predates our first public release. [ 404.261707][ T5693] usb 4-1: Please update to version 0.2 or newer [ 404.324819][T11450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1568'. [ 404.335508][T11450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1568'. [ 404.359013][ T5693] usb 4-1: USB disconnect, device number 98 [ 405.310256][T11508] [ 405.312648][T11508] ===================================================== [ 405.319609][T11508] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 405.327114][T11508] syzkaller #0 Tainted: G L [ 405.333119][T11508] ----------------------------------------------------- [ 405.340167][T11508] syz.3.1576/11508 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 405.347923][T11508] ffff888078250d38 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 405.356683][T11508] [ 405.356683][T11508] and this task is already holding: [ 405.364083][T11508] ffff88802c8d6028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 405.373878][T11508] which would create a new lock dependency: [ 405.379789][T11508] (&client->buffer_lock){....}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 405.387909][T11508] [ 405.387909][T11508] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 405.397375][T11508] (&dev->event_lock#2){..-.}-{3:3} [ 405.397413][T11508] [ 405.397413][T11508] ... which became SOFTIRQ-irq-safe at: [ 405.410332][T11508] lock_acquire+0x106/0x350 [ 405.414950][T11508] _raw_spin_lock_irqsave+0x40/0x60 [ 405.420266][T11508] input_event+0x71/0xc0 [ 405.424639][T11508] atp_complete_geyser_3_4+0xf0c/0x1d90 [ 405.430292][T11508] __usb_hcd_giveback_urb+0x376/0x540 [ 405.435863][T11508] dummy_timer+0xbc0/0x4650 [ 405.440479][T11508] __hrtimer_run_queues+0x3c0/0xa20 [ 405.445815][T11508] hrtimer_run_softirq+0x17a/0x240 [ 405.451045][T11508] handle_softirqs+0x22a/0x840 [ 405.455909][T11508] __irq_exit_rcu+0xca/0x220 [ 405.460691][T11508] irq_exit_rcu+0x9/0x30 [ 405.465041][T11508] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 405.470787][T11508] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 405.476879][T11508] _raw_spin_unlock_irqrestore+0x47/0x80 [ 405.482615][T11508] dummy_urb_enqueue+0x58a/0x780 [ 405.487751][T11508] usb_hcd_submit_urb+0x328/0x1b70 [ 405.492976][T11508] atp_open+0x60/0x90 [ 405.497059][T11508] input_open_device+0x1f8/0x3b0 [ 405.502104][T11508] mousedev_open_device+0xcc/0x150 [ 405.507322][T11508] mousedev_open+0x2ef/0x4a0 [ 405.512019][T11508] chrdev_open+0x4cd/0x5e0 [ 405.516540][T11508] do_dentry_open+0x785/0x14e0 [ 405.521405][T11508] vfs_open+0x3b/0x340 [ 405.525575][T11508] path_openat+0x2e08/0x3860 [ 405.530271][T11508] do_file_open+0x23e/0x4a0 [ 405.534880][T11508] do_sys_openat2+0x113/0x200 [ 405.539665][T11508] __x64_sys_openat+0x138/0x170 [ 405.544623][T11508] do_syscall_64+0x15f/0xf80 [ 405.549336][T11508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.555339][T11508] [ 405.555339][T11508] to a SOFTIRQ-irq-unsafe lock: [ 405.562452][T11508] (tasklist_lock){.+.+}-{3:3} [ 405.562479][T11508] [ 405.562479][T11508] ... which became SOFTIRQ-irq-unsafe at: [ 405.575157][T11508] ... [ 405.575168][T11508] lock_acquire+0x106/0x350 [ 405.582427][T11508] _raw_read_lock+0x36/0x50 [ 405.587043][T11508] __do_wait+0xde/0x740 [ 405.591313][T11508] do_wait+0x1e7/0x510 [ 405.595491][T11508] kernel_wait+0xd6/0x1c0 [ 405.599927][T11508] call_usermodehelper_exec_work+0xbe/0x230 [ 405.605926][T11508] process_scheduled_works+0xb5d/0x1860 [ 405.611578][T11508] worker_thread+0xa53/0xfc0 [ 405.616272][T11508] kthread+0x388/0x470 [ 405.620447][T11508] ret_from_fork+0x514/0xb70 [ 405.625142][T11508] ret_from_fork_asm+0x1a/0x30 [ 405.630011][T11508] [ 405.630011][T11508] other info that might help us debug this: [ 405.630011][T11508] [ 405.640249][T11508] Chain exists of: [ 405.640249][T11508] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 405.640249][T11508] [ 405.654021][T11508] Possible interrupt unsafe locking scenario: [ 405.654021][T11508] [ 405.662441][T11508] CPU0 CPU1 [ 405.667904][T11508] ---- ---- [ 405.673366][T11508] lock(tasklist_lock); [ 405.677633][T11508] local_irq_disable(); [ 405.684402][T11508] lock(&dev->event_lock#2); [ 405.691619][T11508] lock(&client->buffer_lock); [ 405.699012][T11508] [ 405.702486][T11508] lock(&dev->event_lock#2); [ 405.707405][T11508] [ 405.707405][T11508] *** DEADLOCK *** [ 405.707405][T11508] [ 405.715574][T11508] 7 locks held by syz.3.1576/11508: [ 405.720810][T11508] #0: ffff88802caaa110 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1ae/0x4c0 [ 405.729986][T11508] #1: ffff88801ff28230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa4/0x330 [ 405.740118][T11508] #2: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb5/0x330 [ 405.749822][T11508] #3: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 405.759427][T11508] #4: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 405.768596][T11508] #5: ffff88802c8d6028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 405.778815][T11508] #6: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 405.787894][T11508] [ 405.787894][T11508] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 405.798316][T11508] -> (&dev->event_lock#2){..-.}-{3:3} { [ 405.803999][T11508] IN-SOFTIRQ-W at: [ 405.808087][T11508] lock_acquire+0x106/0x350 [ 405.814462][T11508] _raw_spin_lock_irqsave+0x40/0x60 [ 405.821699][T11508] input_event+0x71/0xc0 [ 405.827794][T11508] atp_complete_geyser_3_4+0xf0c/0x1d90 [ 405.835363][T11508] __usb_hcd_giveback_urb+0x376/0x540 [ 405.842586][T11508] dummy_timer+0xbc0/0x4650 [ 405.849027][T11508] __hrtimer_run_queues+0x3c0/0xa20 [ 405.856072][T11508] hrtimer_run_softirq+0x17a/0x240 [ 405.863033][T11508] handle_softirqs+0x22a/0x840 [ 405.869637][T11508] __irq_exit_rcu+0xca/0x220 [ 405.876068][T11508] irq_exit_rcu+0x9/0x30 [ 405.882152][T11508] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 405.889627][T11508] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 405.897643][T11508] _raw_spin_unlock_irqrestore+0x47/0x80 [ 405.905142][T11508] dummy_urb_enqueue+0x58a/0x780 [ 405.911949][T11508] usb_hcd_submit_urb+0x328/0x1b70 [ 405.918907][T11508] atp_open+0x60/0x90 [ 405.924736][T11508] input_open_device+0x1f8/0x3b0 [ 405.931518][T11508] mousedev_open_device+0xcc/0x150 [ 405.938479][T11508] mousedev_open+0x2ef/0x4a0 [ 405.944921][T11508] chrdev_open+0x4cd/0x5e0 [ 405.951199][T11508] do_dentry_open+0x785/0x14e0 [ 405.957805][T11508] vfs_open+0x3b/0x340 [ 405.963727][T11508] path_openat+0x2e08/0x3860 [ 405.970252][T11508] do_file_open+0x23e/0x4a0 [ 405.976601][T11508] do_sys_openat2+0x113/0x200 [ 405.983120][T11508] __x64_sys_openat+0x138/0x170 [ 405.989810][T11508] do_syscall_64+0x15f/0xf80 [ 405.996247][T11508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.003979][T11508] INITIAL USE at: [ 406.008000][T11508] lock_acquire+0x106/0x350 [ 406.014258][T11508] _raw_spin_lock_irqsave+0x40/0x60 [ 406.021212][T11508] input_inject_event+0xa4/0x330 [ 406.027917][T11508] kbd_led_trigger_activate+0xbc/0x100 [ 406.035132][T11508] led_trigger_set+0x535/0x960 [ 406.041652][T11508] led_trigger_set_default+0x260/0x2a0 [ 406.048858][T11508] led_classdev_register_ext+0x787/0x9c0 [ 406.056250][T11508] input_leds_connect+0x517/0x790 [ 406.063043][T11508] input_register_device+0xce0/0x1140 [ 406.070174][T11508] atkbd_connect+0x71e/0xa10 [ 406.076521][T11508] serio_driver_probe+0x82/0xb0 [ 406.083136][T11508] really_probe+0x267/0xaf0 [ 406.089405][T11508] __driver_probe_device+0x1ef/0x380 [ 406.096450][T11508] driver_probe_device+0x4f/0x240 [ 406.103259][T11508] __driver_attach+0x34c/0x640 [ 406.109776][T11508] bus_for_each_dev+0x23b/0x2c0 [ 406.116391][T11508] serio_handle_event+0x1af/0xf80 [ 406.123176][T11508] process_scheduled_works+0xb5d/0x1860 [ 406.130471][T11508] worker_thread+0xa53/0xfc0 [ 406.136821][T11508] kthread+0x388/0x470 [ 406.142651][T11508] ret_from_fork+0x514/0xb70 [ 406.148996][T11508] ret_from_fork_asm+0x1a/0x30 [ 406.155519][T11508] } [ 406.158127][T11508] ... key at: [] input_allocate_device.__key.7+0x0/0x20 [ 406.167271][T11508] -> (&client->buffer_lock){....}-{3:3} { [ 406.173038][T11508] INITIAL USE at: [ 406.176952][T11508] lock_acquire+0x106/0x350 [ 406.183034][T11508] _raw_spin_lock+0x2e/0x40 [ 406.189124][T11508] evdev_pass_values+0xb9/0xbd0 [ 406.195636][T11508] evdev_events+0x1e6/0x340 [ 406.201728][T11508] input_pass_values+0x288/0x890 [ 406.208254][T11508] input_event_dispose+0x330/0x6b0 [ 406.214960][T11508] input_inject_event+0x1dc/0x330 [ 406.221654][T11508] evdev_write+0x325/0x4c0 [ 406.227650][T11508] vfs_write+0x29a/0xb90 [ 406.233478][T11508] ksys_write+0x150/0x270 [ 406.239394][T11508] do_syscall_64+0x15f/0xf80 [ 406.245568][T11508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.253041][T11508] } [ 406.255553][T11508] ... key at: [] evdev_open.__key.27+0x0/0x20 [ 406.263725][T11508] ... acquired at: [ 406.267540][T11508] _raw_spin_lock+0x2e/0x40 [ 406.272246][T11508] evdev_pass_values+0xb9/0xbd0 [ 406.277281][T11508] evdev_events+0x1e6/0x340 [ 406.281992][T11508] input_pass_values+0x288/0x890 [ 406.287128][T11508] input_event_dispose+0x330/0x6b0 [ 406.292432][T11508] input_inject_event+0x1dc/0x330 [ 406.297647][T11508] evdev_write+0x325/0x4c0 [ 406.302254][T11508] vfs_write+0x29a/0xb90 [ 406.306689][T11508] ksys_write+0x150/0x270 [ 406.311211][T11508] do_syscall_64+0x15f/0xf80 [ 406.315994][T11508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.322162][T11508] [ 406.324505][T11508] [ 406.324505][T11508] the dependencies between the lock to be acquired [ 406.324514][T11508] and SOFTIRQ-irq-unsafe lock: [ 406.338058][T11508] -> (tasklist_lock){.+.+}-{3:3} { [ 406.343388][T11508] HARDIRQ-ON-R at: [ 406.347562][T11508] lock_acquire+0x106/0x350 [ 406.354083][T11508] _raw_read_lock+0x36/0x50 [ 406.360602][T11508] __do_wait+0xde/0x740 [ 406.366775][T11508] do_wait+0x1e7/0x510 [ 406.372950][T11508] kernel_wait+0xd6/0x1c0 [ 406.379388][T11508] call_usermodehelper_exec_work+0xbe/0x230 [ 406.387299][T11508] process_scheduled_works+0xb5d/0x1860 [ 406.394947][T11508] worker_thread+0xa53/0xfc0 [ 406.401579][T11508] kthread+0x388/0x470 [ 406.407663][T11508] ret_from_fork+0x514/0xb70 [ 406.414268][T11508] ret_from_fork_asm+0x1a/0x30 [ 406.421050][T11508] SOFTIRQ-ON-R at: [ 406.425222][T11508] lock_acquire+0x106/0x350 [ 406.431740][T11508] _raw_read_lock+0x36/0x50 [ 406.438263][T11508] __do_wait+0xde/0x740 [ 406.444434][T11508] do_wait+0x1e7/0x510 [ 406.450526][T11508] kernel_wait+0xd6/0x1c0 [ 406.456892][T11508] call_usermodehelper_exec_work+0xbe/0x230 [ 406.464802][T11508] process_scheduled_works+0xb5d/0x1860 [ 406.472470][T11508] worker_thread+0xa53/0xfc0 [ 406.479085][T11508] kthread+0x388/0x470 [ 406.485175][T11508] ret_from_fork+0x514/0xb70 [ 406.491871][T11508] ret_from_fork_asm+0x1a/0x30 [ 406.498662][T11508] INITIAL USE at: [ 406.502752][T11508] lock_acquire+0x106/0x350 [ 406.509198][T11508] _raw_write_lock_irq+0x3d/0x50 [ 406.516331][T11508] copy_process+0x2b4c/0x4440 [ 406.522939][T11508] kernel_clone+0x284/0x8f0 [ 406.529381][T11508] user_mode_thread+0x110/0x180 [ 406.536164][T11508] rest_init+0x23/0x300 [ 406.542244][T11508] start_kernel+0x38a/0x3e0 [ 406.548682][T11508] x86_64_start_reservations+0x24/0x30 [ 406.556077][T11508] x86_64_start_kernel+0x143/0x1c0 [ 406.563294][T11508] common_startup_64+0x13e/0x147 [ 406.570174][T11508] INITIAL READ USE at: [ 406.574694][T11508] lock_acquire+0x106/0x350 [ 406.581560][T11508] _raw_read_lock+0x36/0x50 [ 406.588513][T11508] __do_wait+0xde/0x740 [ 406.595040][T11508] do_wait+0x1e7/0x510 [ 406.601470][T11508] kernel_wait+0xd6/0x1c0 [ 406.608169][T11508] call_usermodehelper_exec_work+0xbe/0x230 [ 406.616422][T11508] process_scheduled_works+0xb5d/0x1860 [ 406.624378][T11508] worker_thread+0xa53/0xfc0 [ 406.631329][T11508] kthread+0x388/0x470 [ 406.637763][T11508] ret_from_fork+0x514/0xb70 [ 406.644717][T11508] ret_from_fork_asm+0x1a/0x30 [ 406.651849][T11508] } [ 406.654537][T11508] ... key at: [] tasklist_lock+0x18/0x40 [ 406.662456][T11508] ... acquired at: [ 406.666459][T11508] _raw_read_lock+0x36/0x50 [ 406.671189][T11508] send_sigurg+0x12b/0x420 [ 406.675812][T11508] sk_send_sigurg+0x6c/0x2e0 [ 406.680602][T11508] queue_oob+0x42c/0x4f0 [ 406.685034][T11508] unix_stream_sendmsg+0xcb1/0xe80 [ 406.690337][T11508] ____sys_sendmsg+0x972/0x9f0 [ 406.695302][T11508] ___sys_sendmsg+0x2a5/0x360 [ 406.700188][T11508] __x64_sys_sendmsg+0x1bd/0x2a0 [ 406.705336][T11508] do_syscall_64+0x15f/0xf80 [ 406.710125][T11508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.716212][T11508] [ 406.718552][T11508] -> (&f_owner->lock){....}-{3:3} { [ 406.723880][T11508] INITIAL USE at: [ 406.727885][T11508] lock_acquire+0x106/0x350 [ 406.734160][T11508] _raw_write_lock_irq+0x3d/0x50 [ 406.740861][T11508] __f_setown+0x67/0x370 [ 406.746868][T11508] generic_setlease+0xacf/0xfd0 [ 406.753482][T11508] do_fcntl_add_lease+0x35e/0x470 [ 406.760269][T11508] fcntl_setlease+0x123/0x180 [ 406.766705][T11508] do_fcntl+0x8b3/0x1a20 [ 406.772707][T11508] __se_sys_fcntl+0xc8/0x150 [ 406.779065][T11508] do_syscall_64+0x15f/0xf80 [ 406.785423][T11508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.793074][T11508] INITIAL READ USE at: [ 406.797513][T11508] lock_acquire+0x106/0x350 [ 406.804222][T11508] _raw_read_lock_irqsave+0x48/0x60 [ 406.811636][T11508] send_sigio+0x38/0x370 [ 406.818086][T11508] dnotify_handle_event+0x169/0x440 [ 406.825487][T11508] fsnotify+0x1831/0x1ae0 [ 406.832020][T11508] path_openat+0x15c2/0x3860 [ 406.838810][T11508] do_file_open+0x23e/0x4a0 [ 406.845508][T11508] do_sys_openat2+0x113/0x200 [ 406.852387][T11508] __x64_sys_openat+0x138/0x170 [ 406.859451][T11508] do_syscall_64+0x15f/0xf80 [ 406.866253][T11508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.874338][T11508] } [ 406.876939][T11508] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 406.885904][T11508] ... acquired at: [ 406.889805][T11508] _raw_read_lock_irqsave+0x48/0x60 [ 406.895203][T11508] send_sigio+0x38/0x370 [ 406.899644][T11508] kill_fasync+0x24d/0x4d0 [ 406.904257][T11508] lease_break_callback+0x26/0x30 [ 406.909649][T11508] __break_lease+0x81f/0x1ea0 [ 406.914525][T11508] do_dentry_open+0x1010/0x14e0 [ 406.919587][T11508] vfs_open+0x3b/0x340 [ 406.923863][T11508] path_openat+0x2e08/0x3860 [ 406.928654][T11508] do_file_open+0x23e/0x4a0 [ 406.933356][T11508] do_sys_openat2+0x113/0x200 [ 406.938226][T11508] __x64_sys_openat+0x138/0x170 [ 406.943272][T11508] do_syscall_64+0x15f/0xf80 [ 406.948062][T11508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.954144][T11508] [ 406.956477][T11508] -> (&new->fa_lock){....}-{3:3} { [ 406.961625][T11508] INITIAL USE at: [ 406.965530][T11508] lock_acquire+0x106/0x350 [ 406.971614][T11508] _raw_write_lock_irq+0x3d/0x50 [ 406.978140][T11508] fasync_remove_entry+0xf1/0x1c0 [ 406.984754][T11508] lease_modify+0x4f7/0x6c0 [ 406.990845][T11508] locks_remove_file+0x5f0/0xf70 [ 406.997375][T11508] __fput+0x3ae/0xa60 [ 407.002937][T11508] task_work_run+0x1d9/0x270 [ 407.009116][T11508] exit_to_user_mode_loop+0xf3/0x4d0 [ 407.015999][T11508] do_syscall_64+0x33e/0xf80 [ 407.022192][T11508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.029679][T11508] INITIAL READ USE at: [ 407.034024][T11508] lock_acquire+0x106/0x350 [ 407.040546][T11508] _raw_read_lock_irqsave+0x48/0x60 [ 407.047854][T11508] kill_fasync+0x199/0x4d0 [ 407.054291][T11508] lease_break_callback+0x26/0x30 [ 407.061335][T11508] __break_lease+0x81f/0x1ea0 [ 407.068038][T11508] do_dentry_open+0x1010/0x14e0 [ 407.074906][T11508] vfs_open+0x3b/0x340 [ 407.080990][T11508] path_openat+0x2e08/0x3860 [ 407.087606][T11508] do_file_open+0x23e/0x4a0 [ 407.094128][T11508] do_sys_openat2+0x113/0x200 [ 407.100820][T11508] __x64_sys_openat+0x138/0x170 [ 407.107688][T11508] do_syscall_64+0x15f/0xf80 [ 407.114301][T11508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.122209][T11508] } [ 407.124723][T11508] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 407.133419][T11508] ... acquired at: [ 407.137241][T11508] _raw_read_lock_irqsave+0x48/0x60 [ 407.142634][T11508] kill_fasync+0x199/0x4d0 [ 407.147259][T11508] evdev_pass_values+0x627/0xbd0 [ 407.152389][T11508] evdev_events+0x1e6/0x340 [ 407.157087][T11508] input_pass_values+0x288/0x890 [ 407.162219][T11508] input_event_dispose+0x330/0x6b0 [ 407.167530][T11508] input_inject_event+0x1dc/0x330 [ 407.172751][T11508] evdev_write+0x325/0x4c0 [ 407.177352][T11508] vfs_write+0x29a/0xb90 [ 407.181789][T11508] ksys_write+0x150/0x270 [ 407.186316][T11508] do_syscall_64+0x15f/0xf80 [ 407.191107][T11508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.197191][T11508] [ 407.199531][T11508] [ 407.199531][T11508] stack backtrace: [ 407.205434][T11508] CPU: 1 UID: 0 PID: 11508 Comm: syz.3.1576 Tainted: G L syzkaller #0 PREEMPT(full) [ 407.205458][T11508] Tainted: [L]=SOFTLOCKUP [ 407.205465][T11508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 407.205476][T11508] Call Trace: [ 407.205485][T11508] [ 407.205493][T11508] dump_stack_lvl+0xe8/0x150 [ 407.205512][T11508] __lock_acquire+0x2a94/0x2cf0 [ 407.205539][T11508] ? kill_fasync+0x199/0x4d0 [ 407.205562][T11508] lock_acquire+0x106/0x350 [ 407.205578][T11508] ? kill_fasync+0x199/0x4d0 [ 407.205603][T11508] ? do_raw_spin_lock+0x12b/0x2f0 [ 407.205628][T11508] _raw_read_lock_irqsave+0x48/0x60 [ 407.205652][T11508] ? kill_fasync+0x199/0x4d0 [ 407.205677][T11508] kill_fasync+0x199/0x4d0 [ 407.205700][T11508] ? kill_fasync+0x53/0x4d0 [ 407.205723][T11508] evdev_pass_values+0x627/0xbd0 [ 407.205741][T11508] ? evdev_pass_values+0x651/0xbd0 [ 407.205759][T11508] evdev_events+0x1e6/0x340 [ 407.205783][T11508] ? evdev_events+0x79/0x340 [ 407.205807][T11508] ? input_pass_values+0x8d/0x890 [ 407.205830][T11508] input_pass_values+0x288/0x890 [ 407.205856][T11508] ? input_handle_event+0x70c/0xf30 [ 407.205877][T11508] input_event_dispose+0x330/0x6b0 [ 407.205899][T11508] input_inject_event+0x1dc/0x330 [ 407.205919][T11508] ? input_inject_event+0xb5/0x330 [ 407.205939][T11508] evdev_write+0x325/0x4c0 [ 407.205954][T11508] ? __lock_acquire+0x6b5/0x2cf0 [ 407.205972][T11508] ? __pfx_evdev_write+0x10/0x10 [ 407.205987][T11508] ? bpf_lsm_file_permission+0x9/0x20 [ 407.206011][T11508] ? security_file_permission+0x75/0x260 [ 407.206029][T11508] ? rw_verify_area+0x255/0x4d0 [ 407.206051][T11508] ? __pfx_evdev_write+0x10/0x10 [ 407.206066][T11508] vfs_write+0x29a/0xb90 [ 407.206092][T11508] ? __pfx_vfs_write+0x10/0x10 [ 407.206115][T11508] ? __fget_files+0x2a/0x420 [ 407.206136][T11508] ? __fget_files+0x2a/0x420 [ 407.206154][T11508] ? __fget_files+0x3a0/0x420 [ 407.206172][T11508] ? __fget_files+0x2a/0x420 [ 407.206194][T11508] ksys_write+0x150/0x270 [ 407.206218][T11508] ? __pfx_ksys_write+0x10/0x10 [ 407.206249][T11508] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.206266][T11508] do_syscall_64+0x15f/0xf80 [ 407.206289][T11508] ? trace_irq_disable+0x3b/0x140 [ 407.206313][T11508] ? clear_bhb_loop+0x40/0x90 [ 407.206332][T11508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.206349][T11508] RIP: 0033:0x7f9544f9cdd9 [ 407.206365][T11508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 407.206379][T11508] RSP: 002b:00007f9545e5e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 407.206397][T11508] RAX: ffffffffffffffda RBX: 00007f9545216180 RCX: 00007f9544f9cdd9 [ 407.206410][T11508] RDX: 0000000000000037 RSI: 0000200000000040 RDI: 0000000000000007 [ 407.206421][T11508] RBP: 00007f9545032d69 R08: 0000000000000000 R09: 0000000000000000 [ 407.206432][T11508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 407.206442][T11508] R13: 00007f9545216218 R14: 00007f9545216180 R15: 00007f954533fa48 [ 407.206460][T11508] [ 407.210277][T11504] syzkaller1: entered allmulticast mode