last executing test programs: 10.809390757s ago: executing program 1 (id=432): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = landlock_create_ruleset(&(0x7f00000000c0)={0xa019, 0x2, 0x3}, 0x18, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) dup3(r1, r0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) listen(0xffffffffffffffff, 0x5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x9a, 0x3, 0x9, 0x1}, {0x3ff, 0x5, 0x8, 0xb6d}, {0x0, 0x0, 0x76, 0x64b9}]}) socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x26, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @local}, 'N!N '}}}}, 0x0) 10.04617829s ago: executing program 2 (id=436): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYRES16=r0, @ANYBLOB="63e27922abbd52d17d52b6438892d9ea1786330fe3cb3952a75a0581c7a291e79bbd44c72caabed13106871c4edc2e9716bcc792890463eaed99ed65672bdc46372e672d5caaf351f38b2cf1e132464ba9bdfb686c3492e989ac328568a9ed5cebc2c18a91f7fa82347938a2c0e5e83a4c5dc4b1b0183a76f536c251ace92ab9ba39246179edd28d5d3116cd848625b6384e", @ANYRES32=0x0, @ANYRES32=0x0], 0x158}}, 0x0) r1 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) r2 = syz_open_dev$loop(&(0x7f0000000180), 0x10000, 0x6080) r3 = syz_open_dev$loop(&(0x7f00000001c0), 0x2, 0x80040) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000200)={r3, 0x6, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x12, 0x1, "a3a9a27324c5cd248def6edbd982a69304975e60351694d291f2a5c0ef5ee01321b998d9a8f84e1d2d4e7b363753616b39ae7d9063b2a04e1e6fa9324bc2d63f", "32af4e033356b922e9ea3f122d2a0fdf0abd857a0c9fd7c6397b694d161ea8248bc162665451b8456a7334a02c7f01fd3227025872078b9f3715c83d4c8a2fd9", "bbdf3c74622bea26684f1c71bff4e14d1f67cd80ca56ac5f85c6c193783dffb6", [0x8, 0x7f]}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'pimreg1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000800)={'syztnl1\x00', &(0x7f0000000600)={'gretap0\x00', r5, 0x7800, 0x8000, 0x5, 0xcb, {{0x69, 0x4, 0x1, 0x2e, 0x1a4, 0x64, 0x0, 0x3, 0x2f, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x21}, {[@generic={0x83, 0x10, "184d30c82ecdf3390cb314b93b3d"}, @timestamp_addr={0x44, 0x54, 0xf8, 0x1, 0x5, [{@multicast1, 0x8000}, {@empty, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@broadcast, 0x8}, {@remote, 0x240}, {@private=0xa010100, 0x4}, {@broadcast, 0x5}, {@empty, 0x1}, {@remote, 0x1}, {@rand_addr=0x64010101, 0x4}]}, @timestamp_prespec={0x44, 0x1c, 0x15, 0x3, 0x4, [{@multicast1, 0x6}, {@local, 0x6}, {@private=0xa010100, 0x9}]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x3c, 0x9b, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x47}, {@multicast1, 0xd9}, {@empty, 0x7fff}, {@rand_addr=0x64010102, 0x6}, {@private=0xa010101, 0x750}, {@broadcast, 0x1}, {@multicast1, 0x6}]}, @cipso={0x86, 0x1e, 0xffffffffffffffff, [{0x0, 0xb, "cfd1aa1e068e8f8566"}, {0x78fc31348bed2da3, 0xd, "884f25220a5e0015fc0159"}]}, @cipso={0x86, 0x39, 0x3, [{0x7, 0x11, "3166707ec52be75a9c831840038f29"}, {0x2, 0x11, "3da0c611ef504f44e231cf893a909e"}, {0x0, 0x11, "e6fe1d7e6e619fb1fd8ba46cf6ddf8"}]}, @timestamp_prespec={0x44, 0x34, 0x17, 0x3, 0xf, [{@private=0xfff, 0x1}, {@loopback, 0x1}, {@remote, 0x2}, {@empty, 0x1}, {@initdev={0xac, 0x1e, 0x8, 0x0}, 0x400}, {@loopback}]}, @timestamp_prespec={0x44, 0x3c, 0x6c, 0x3, 0xb, [{@dev={0xac, 0x14, 0x14, 0x38}, 0x10001}, {@multicast2, 0x9511}, {@local, 0x4c}, {@loopback, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xaf47}, {@multicast1, 0x3}]}, @lsrr={0x83, 0x7, 0x2a, [@initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) dup(r1) sendmsg$DEVLINK_CMD_PORT_SPLIT(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="9800000079a9ffa4ba1d1fcfd9f30ffea90ec6d24182979453793f6f019c1662bb287431dab8ca63", @ANYRES16=r6, @ANYBLOB="00012bbd7000ffdbdf2509000000080001007063690011000200303030303a30303a31302e300000000008000300020000000800090010000000080001007063690011000200303030303a30303a31302e300000000008000300020000000800090007000000080001007063690011000200303030303a30303a31302e300000000008000300010000000800090005000000"], 0x98}, 0x1, 0x0, 0x0, 0x4000001}, 0x20004000) 9.860143843s ago: executing program 2 (id=437): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000440), &(0x7f0000000080)}, 0x1c) r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000140)=0x1c, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={@local, @private2, @mcast1, 0x6, 0xc, 0x4, 0x400, 0x5, 0x0, r1}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x81, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e22, @rand_addr=0x64010100}, 0x1, 0x3, 0x3, 0xfffd}}, 0x26) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="0b273c1d13772f08", @ANYRES16=r6, @ANYBLOB="01002cbd7010040000000500000008000b000100000008000c00a80a000008000b00000000000600010007000000"], 0x34}}, 0x20) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902130001000000000904"], 0x0) r9 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0xae00) ioctl$I2C_RDWR(r9, 0x707, &(0x7f0000000280)={&(0x7f00000007c0)=[{0x3, 0x1, 0x57, &(0x7f00000002c0)="b855594ba5cbc04a562a0cd811ac823e607912395775f7492b363c535672c2ad5b4af9182206226b6c4d2c2b51b3af82f13d9149d5783baa741cca5fbc830a8832215aec5d394d92b569f7bf310208b7bcbc451efee795"}, {0x6, 0x3010, 0x0, 0x0}], 0x2}) recvmmsg(r7, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r10, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) write(0xffffffffffffffff, &(0x7f0000000080)='4', 0x1) 9.798588667s ago: executing program 1 (id=438): r0 = socket$packet(0x11, 0x3, 0x300) fgetxattr(r0, &(0x7f0000000080)=@known='trusted.overlay.opaque\x00', &(0x7f00000000c0)=""/184, 0xb8) syz_usb_connect(0x3, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/wireless\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x7c, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}}, 0x0) preadv(r1, &(0x7f0000000040)=[{&(0x7f00000008c0)=""/204, 0xcc}, {&(0x7f0000000240)=""/260, 0x104}], 0x2, 0xa2, 0x0) 9.033466642s ago: executing program 1 (id=445): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r4, 0x4068aea3, &(0x7f0000000040)) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000100)={0x1, 0x0, [{0x5, 0x4, 0x0, 0x0, @sint={0x0, 0x1}}]}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x40000084}]}) write$char_usb(r1, &(0x7f0000000bc0)="be", 0x1) creat(0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x20040600) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000600)="240000001a005f041cf9f4070008eeff800001020000000008d100227b428510b0257d83", 0x24) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') r8 = open_tree(r7, &(0x7f0000000300)='./cgroup\x00', 0x89801) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x89101) move_mount(r8, 0x0, r9, 0x0, 0x46) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000040)) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x58, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x8042) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) syz_usb_disconnect(r0) 8.181810249s ago: executing program 2 (id=447): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000080)='4', 0x1) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000140)={0x9, [0x3, 0x6, 0x2, 0x1, 0x2, 0xfff8, 0x8001, 0x0, 0x7]}, &(0x7f0000000180)=0x16) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clock_nanosleep(0x0, 0x1, &(0x7f0000000000), &(0x7f0000000040)) futex(&(0x7f0000000080)=0x1, 0x8b, 0x1, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100)=0x2, 0x2) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 7.004879802s ago: executing program 2 (id=453): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xb, &(0x7f0000000440)=ANY=[@ANYRESOCT], &(0x7f0000000000)='syzkaller\x00', 0x8, 0xffe, &(0x7f00000013c0)=""/4094, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000}, 0x94) (fail_nth: 13) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000280)={0x2, 0xa883, 0x1}) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1e5842, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x145542, 0x40) ftruncate(r3, 0x2007ffd) sendfile(r1, r2, 0x0, 0x1000a3) 5.627016373s ago: executing program 2 (id=459): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001680)) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002955a4f40f30c19e04ffb0102030109022d000180002002090494090274833180090507000000060800091162b367e12306af0905050310"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r4, &(0x7f0000000500)={'syz1\x00', {0x5, 0xfff7, 0x3, 0x7}, 0x50, [0x800006, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x0, 0x7f, 0x1, 0x4, 0x9, 0x1, 0x4, 0x7, 0x80000002, 0x1, 0x200008, 0x40, 0xa4d, 0x3ff, 0x5, 0x6, 0x10001, 0xffff, 0x0, 0x7, 0x6, 0x401, 0x100, 0x9, 0x4, 0x2, 0x0, 0x2, 0x4, 0x1, 0x4, 0x10, 0x6, 0x3, 0x9, 0x804d7e, 0xff, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x8, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1, 0x23], [0x8, 0x401, 0x9, 0x5, 0x8, 0x12, 0x7fc, 0xc, 0x0, 0x2729, 0xfd9, 0x3, 0x7, 0x5, 0x0, 0x24a, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x401, 0xb, 0x8001, 0x40, 0xa1, 0x10000, 0xffffffff, 0x5, 0x10004, 0x9e, 0x8, 0x7ff, 0x6, 0x7, 0x0, 0x6, 0xffff3f16, 0xa, 0x2, 0x9, 0xa, 0x5, 0xfffffeff, 0x100009, 0x7ff, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x48, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x200007, 0x8], [0xfffffffe, 0x1000, 0x1a9e1bfc, 0xfffffffc, 0x8, 0x9, 0x2, 0x5, 0x7aae, 0x80000000, 0x2, 0x6ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x400, 0x80000002, 0x8, 0xfffffff4, 0x97f82544, 0x8, 0xfffffffd, 0x0, 0x4, 0x5, 0x1, 0x9, 0xc90, 0xffffff3c, 0xd, 0x13, 0x4, 0xff, 0x140, 0x4, 0x2, 0x1000000c, 0x0, 0x2, 0x3, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0xffff, 0x8, 0x1, 0xffffff00, 0x100, 0x1fff80, 0x3, 0x0, 0x8, 0xdd, 0x1, 0x1400, 0xc3, 0x20ffff, 0x79c], [0x100009, 0x3a8e, 0xffff9a7f, 0x200, 0x6, 0x6, 0x6, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x21, 0x200, 0xa, 0x3, 0x2, 0x1ff, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x1, 0x3, 0x5, 0x80000001, 0xffff, 0xd, 0x44, 0xfffffffd, 0x3, 0x10001, 0x61, 0x10, 0x1000, 0x8, 0x100, 0x8, 0x20000000, 0x1000, 0x15, 0xb32a, 0xec000000, 0x8001, 0x1900, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xffffffff, 0x7, 0xfffffffe, 0x0, 0x8, 0x9371, 0x4f89, 0x7, 0xf, 0x2d1, 0x83, 0x6]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xb, 0x4d29891774812edf, r4, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, 0x0, &(0x7f0000000040)) syz_usb_control_io(r3, 0x0, &(0x7f0000000780)={0x44, &(0x7f00000004c0)=ANY=[@ANYBLOB="000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, &(0x7f0000000300)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r6, 0x5b02, 0x0) r7 = socket(0x2, 0x3, 0xff) sendto$inet(r7, 0x0, 0x14, 0xc0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x8}}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) alarm(0x9) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f00000000c0)=0x1) r8 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = eventfd(0x3) ioctl$KVM_IOEVENTFD(r9, 0x4040ae79, &(0x7f0000000000)={0x7c, 0x3000, 0x0, r10}) ioctl$KVM_IOEVENTFD(r9, 0x4040ae79, &(0x7f00000003c0)={0xb03, 0x3000, 0x2, r10}) close_range(r0, 0xffffffffffffffff, 0x0) syz_usb_connect$midi(0x4, 0x49, &(0x7f0000000140)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1235, 0x8014, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x37, 0x1, 0x1, 0xe, 0xa0, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x9, [@ms_header={0x7, 0x24, 0x1, 0x7, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x8, 0x7}], [{{0x9, 0x5, 0x9, 0x3, 0x20, 0x9d, 0x2, 0x9, {0xe, 0x25, 0x1, 0xa, "cd3e48a96abfeaaea188"}}}]}}}}}]}}, &(0x7f0000000d40)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x201, 0x9, 0x1, 0x9a, 0x8, 0xf5}, 0xc, &(0x7f0000000240)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0xa, 0x0, 0x1, 0x2d15}]}, 0x9, [{0xcb, &(0x7f0000000980)=@string={0xcb, 0x3, "c688487f7cc2cfe8c7e4f61825a506ede83126a961ade81993ed91a07d7474e51583bf7b2886bdc83226936e37d6f2b66e3aabd13d5d1b6af760f4fadecdda7072f7b99ac855df1a8d8fa89621ebce3b510d6f08a9ff3d6922ba33d4b9d9e6c125a498f60b6563a94497b35c3947979ccc4f52e68673fe3151f0f90f74b7ec797c5e82dbe49f9c6e428674544fb3fe983566b1004eb9657ac38512fc555d42ba21c0881f3fa6e7c9c9e6cdf93ee39b882e047f5f431ddaba62f6b08f9f95bc7bf42c17e490d4b653a3"}}, {0x98, &(0x7f0000000a80)=@string={0x98, 0x3, "37e8a2a7096f77ead1bbcf73487edba62b68b8743f347dd24b437b5ab2d674c8f0fcf41b8d9094065bc0ed8405e8c033ea5ec039369a6cbe5ab3379bfdc22f02f45798b4c99bdb8f175bc4be6f41d7c87618e4e634353be43eec257bdefe9cf4a25931004d22b2cf394dd2cf3a5e9cf74da7f45a179544b94a43b9798bd9637956422918fbbd03b0b5ce416e7537d39bc6d1730b51eb"}}, {0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="0703094045dbf5bd0be77922f876e8308fbdf5c65e3dba1007edc08e5d9ce00336b25821da454757dc86a5200e"]}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x436}}, {0x26, &(0x7f0000000bc0)=@string={0x26, 0x3, "8683c265ddc7593afa9d08b04d1311817a3c34039d3b3f514d37145ff7e7c4142b8566a3"}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x861}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x2c09}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x1009}}, {0x58, &(0x7f0000000cc0)=@string={0x58, 0x3, "dc5a59e0836eaabc202c017d0ae892f8fc91eab5762c4953fbffa59af30c4bf0208783d7c866c153ee2859f7ebe0b47c4ddd5e54324a027f43eaff4d24207be506397ea644d62b5c758e0f5f90ea1a0ce2faab3cf70d"}}]}) 5.494883111s ago: executing program 4 (id=461): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) r2 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000000)={0x0, 0x9, 0xa, 0x3}) mq_timedreceive(r2, 0x0, 0xfffffffffffffee3, 0x1, 0x0) mq_timedreceive(r2, &(0x7f0000000640)=""/155, 0x9b, 0x1000, 0x0) sendmsg$inet(r1, &(0x7f0000000b40)={&(0x7f0000000280)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@ip_tos_u8={{0xd, 0x0, 0x1, 0xa4}}, @ip_ttl={{0x10, 0x0, 0x2, 0x6}}], 0x20}, 0x10011) syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793f10d10501200002000000010902120001000000000904"], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r4, 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f0000006540)=[{{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000000540)="210ceaaa7c5088f75c72406625a55d3ed1ceddfab50cdd0de9392fbc9fc1d94354bc0970fdb123a0695e880cfa94afdbad8d9cbb178d2db3e729633fc5e5917a48ba3bd3f977cfc2ee7bf5f9f83d0c20aac9e89356017b4d4c860c3fdb91c35f26b275577656824617591270a0976c99e34ce09b9e7dd6bc2b24", 0x7a}, {&(0x7f0000000980)="cb4520331afb1be952aaabf9a2869cbfca781ca2b73b4adb2d7ec307d4d27e89dd45b8abd455ee374d6f3706450ceaa4fc97af91d13d7962fab102cad402459f777c6ede95cfc0e0c4485efe6b09980343b9287c493af2bf6ce06b34817938f65703824bc2d937633885067a8a8d3c2be340f1130f4db6b2c6fba39bf639e26fb17769caae3f0883b1497e8a8fa8ee76f5e16bf19d043066c4a50cd5aded01b8b88cead70a37e6c9d868054b1118f82f8b729c614146c8c7c5bbc27b30eb2bd3b2a9d321a62776fc8f65da8057", 0xcd}, {&(0x7f0000000a80)="2d412eadaa4d021a4b1cebd4ad193a689e68baa23e94efeb36adc677452792c6c00c22804ad43ed57021000bb7ace2a6d10f76072efc3a5fec0bbd64468618602c9d66a3562a1abd9a635e95c806c5a28dc763", 0x53}, {&(0x7f0000000b80)="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", 0x1000}, {&(0x7f0000001b80)="c3ed507acffa4c9c029163bce809d2e06b98dd3c236de4333cc892585bb9a30119f680851017637c75e7f9cb756b6e8f426ce5ba206ca05f93b449d01d5f7b02c92d7e7e3fea2a44048b7e56414cd19d79194d7425bcc1c988e5b97c86f508c8edd3db3db23d837913147acdd4a4d33fc733263fbc3f4fd707a6d7f77740d448a851004e6b5b7fba5d26acad4886b0a0225ee9", 0x93}, {&(0x7f0000001c40)="1334de1a338ce8e10ff3392dde53cfd897f8466eed0715e8885248d565f3f1fe2b90d27aa9acfe4e8953b2e4a267f47a0331b8a5c7bd11b2d6da56efeb0885902c4ae90b2b85371bdc0721b505e5634dece285f276952eda81f8ce58f975f767b5e134c2969f1a84a4980ff4e99e1bf003d139a2dbc7ed1e3c85e9c86fe7ad41379c3431ea6bc5e39a", 0x89}, {&(0x7f0000001d00)="7e2e69483f464822a53cfc095d1938c0f356cc48ba853b6edff5639c56363f350ac0435e2e2d6c400d55e068b280dc1c2d29ab7c6165bfb9961cb99a91e6426fa8ee711a8b2eb3aa2e520e62ac3907d0a92d5e30b20b7e8721e57ac149436d7a1f52b8241daffde880e43dccfac66b906083d08197645146522a062d4daed61f820120d2db007f6681e1fc1ecc0faaf59c00ce1716768b93101c45d4fb8588c8148899cae71c2d6f3b65d11546ea67492cb3b7eb84e2d668f4464e447bb7aee0213ae7df", 0xc4}, {&(0x7f0000001e00)="a965390fc1719b9657ddc4febed20067e30cbf9aa6ea1be2f2c3a2a74780a500625013d0190b8ff36c0639015812bc684bfe4099238085651827b39ca0340d62ffb023f3dd23e3c217c2358b04b51f802ca1a2f9bc99b220ff7b83982145937dfb121033636e09581f52f96adf4e01c9a43e650db3fb766d2c96fc23f81864f622767e258c7afd7f1fabcc5b554ec8f74603890bb264c5308756ba44c1ac28f377539651e9518baf52343fbe5984", 0xae}, {&(0x7f0000001ec0)="b99e44b9cec4f3ea0f9f6efac69cf0d09d9476d7cac7c82394a8bde19c63e639e307d704e7bae286334f3d5290298a0660e4c11813c2b9ae07d1c8e9a1efc20466b3a6a55eee", 0x46}], 0x9, &(0x7f0000001fc0)=[@rthdr_2292={{0x34, 0x29, 0x39, {0x3b, 0x4, 0x1, 0x94, 0x0, [@dev={0xfe, 0x80, '\x00', 0xf}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}]}}}, @rthdrdstopts={{0x8c, 0x29, 0x37, {0x2b, 0xe, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x5}, @generic={0x4, 0x61, "596dbd7395d3fbb3048acb622f080ff370fdd6755021ac43c8eb1d188d85e83fcfe44599c8fd258378e63a11f6c2d07c7ab4680a197472eb4e027a56149b2d94d8fb7efd42bd6de96eb188a3a56b2b844a38e43edd14433e5b944d95e18e3b61c0"}, @enc_lim={0x4, 0x1, 0x6}, @jumbo={0xc2, 0x4, 0x3}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}, @dontfrag={{0x10, 0x29, 0x3e, 0x3}}, @flowinfo={{0x10, 0x29, 0xb, 0x401}}], 0xe0}}, {{&(0x7f00000020c0)={0xa, 0x4e21, 0x7f, @local, 0x7}, 0x1c, &(0x7f0000002340)=[{&(0x7f0000002100)="1cd05f855686ed562e08bd0d36711205c34910500e158bf26a833eee8a8cb3917ff05e0fb1abebdba60a5b803dd801c0f6e6999fd843e9a47fa16bc97f9deb6719a79cf7295bad1c6a1aaebabe999a0631a0fb931b34c3326de72d5fa0657579c5b30c42ac7f7230f6a3a981fb05cf7e7f88ef06c15b0ee064a744d4069f498be638e76033567657536f27acb7968b088c1a6199c77ec794a9b06b7b9d768dfce355784e1e1eb55d776795965acdbc1cba6bf302dda7276b469f67", 0xbb}, {&(0x7f00000021c0)="7bbfc6fb", 0x4}, {&(0x7f0000002200)="a2e5054e04d09efc6590b0e47268f74d4604811885a4898d8433da18c9ba1cc38c407cbc2d1aec9c01a876444892c4e3a9e3a019a1b078b013b27c57ebee4f9530d8aa4d016da7d7761e37b3343456a7cc0513e3a9053c2de13d6e5b11110796129e97a4ce496f75e147f7532b18518704423cc5f8960ad37118bf1a7b97fde591e12d5d4d655fb48e3c5a62df438dc7c7f024f335e176de524157e8ce03e2cdff3c9a3754a210e5d3b4b2cc55dd96480d6434480966623003d798682178b20a270eb586c296803c9e3658c38c1bf0e4499344", 0xd3}, {&(0x7f0000002300)="3e459ef550039fd0147bfccde1", 0xd}], 0x4, &(0x7f0000002380)=[@rthdr={{0x24, 0x29, 0x39, {0x0, 0x2, 0x0, 0x1, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}]}}}, @dontfrag={{0x10, 0x29, 0x3e, 0xa4}}, @dstopts={{0x1c, 0x29, 0x37, {0x29, 0x1, '\x00', [@ra={0x5, 0x2, 0x2}, @ra={0x5, 0x2, 0x3}]}}}, @dstopts_2292={{0x154, 0x29, 0x4, {0x29, 0x28, '\x00', [@hao={0xc9, 0x10, @empty}, @calipso={0x7, 0x10, {0x3, 0x2, 0x0, 0x1, [0x6]}}, @generic={0x6, 0xe8, "d87ed67779151faebb6d819ceb097392f5015c5cf485e5ab85ebba5d924781ca37350767d3aa20c73a7cf55109f7a7fca419113200716bcf9454044af69a13af23f4bb74e4e58957c4e5eab5aca06c8a6f812be72497f84580c749582ac2649a13b41e1f2cb04317e7f05804a1f81e12f759f1a61e76422d9d986534a22b658e4234e80b3fa38aa33a31c4cd7e01c050f6f4cb8d56f28c151d27064f005f84454c9165fe5f04f2cbd7dfa426f0ff33ec493f2f3ac9e1bdfc9965c2e9de9edc1b67163836012af1978cadbf02e5df997f6fbacd5b300987647ace4ae668abb1fae4c03204479df993"}, @calipso={0x7, 0x30, {0x2, 0xa, 0xfc, 0x4, [0x100, 0x3, 0x7, 0x37, 0x8001]}}]}}}, @hoplimit={{0x10, 0x29, 0x34, 0x6d1}}, @hopopts_2292={{0x54, 0x29, 0x36, {0x2e, 0x7, '\x00', [@calipso={0x7, 0x30, {0x3, 0xa, 0x4, 0x6, [0xffffffffffff5680, 0x4, 0xc2d1, 0x240, 0xff80000000000000]}}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1]}}}, @rthdr={{0x94, 0x29, 0x39, {0xe6, 0x10, 0xc5bb0e9f2743e034, 0x7, 0x0, [@rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @mcast2, @empty, @local, @private2={0xfc, 0x2, '\x00', 0x1}]}}}], 0x29c}}, {{&(0x7f0000002640)={0xa, 0x4e24, 0x400, @loopback, 0x10001}, 0x1c, &(0x7f0000005400)=[{&(0x7f0000002680)="7bd01e18378df4f3e100eb85da668e6bf1a2d04e188e3ebc352528cb4a8140678c219a644527235e91a4a77d6f541dc68ac302b0270d73839b95447704893c55", 0x40}, {&(0x7f00000026c0)="d2cb2a3dbfefe454cd2e1a3650f169b0d70919287bb3f12b2a266444c013e430761f1bc1bdccf58d8688aed075bb89c8b366f1985ea46c22e5b37bf73d0b130023ea156e607cc4a13f80091db8b48639f524a90d1f8f26f0e6a18c3ef440641845cf908f56713775307e0eea354319a7ec134d4b152ee50316a420fdce3dc3bb77fc91440e2950426d809babe9f927edef7667abbeafa5cd36c8f007e0377a0d122f8553736ba0e04ef955948c2d7343ff099d7fb69f6e270cbf45c0d401d208edb3ac2b94de00002a5ce20a765863c1761dd8861206d959dc2cf8ddd1988e3b3582bbbaa44b775911d68924cb0bc7535f32c429e3ae8898730bc646aadca8eb0800276cf7c8e727aa75638e2f21b21ed6f8bb2971ab38248407f7fbf34d8acf72c0e8b705961a076460288e3657a092f07805fa5a3d3bb05be1b8b857d93557129ace9c4958882c55eafb18f0d0e88e26c2d9f0d7b87d10081775c696206865c08331745a417aefd3bbc61845e533264473cf49d9f701375f4d96eeee3ff750d434ab646e5c62c009c105e522b04ed95716cc8c83dd3a8dfa8e6d12df97459543fd922bbf29388a6304280b65e808b6d85bc20eb26bc5a775230feaf2c599eaa541aa396fb85ab65385a8d6ffa4be7107ea400c44a04419c82b2514f7e75288202a348b86c72a704a72a160c389a673cbeee3763690defccabfd95fd329211a443d7bd92889905fb99ce68298eb80026e712f6c5943d524dd03a9a409003fcb5563edaf0b7197befeeb9663ed961dd9e701ffa4ec2abee651e5a0901a58f104d8179c638cffe4b920afff7f421bdce57e1f0d5238df9dff30de2750f32e01ba5950ff99dfbc0d4a3f224dc5b8ffd1406fd9abac274c6ca4153700862c2a16a94660358d15cf8587bf0e1d0baa7708aab6c5cc0908da7f487385b842f135b072c36d842c09487e790e03ac25c765d03bbaed0bb1bbe6191f2cef421d4cc9004e8668eb1980eae0f625840e442e0b6c85fef38dc06755bc705a74837613c360366d982f4f3595e3b29a64d60e0d1fd441ff87d6f23b2c9560383b7981983d96b9a2504156e2d6702df51f53668d466c2023e1bd317996b19d1ffe5cbb846af36eb61b9cc34a5944ff80bf0d20fd6cc1b6e82ee9ffb5e5cb73eaf7c867fb7cd1535ba3bba3ef6483d0bcdb0a6b9be1ab50369c418012149757c4e6f6a95bea07e5e6a68c041b1f074775946c5672a54dd7b3147a714517e09152371e401343ce44015891b1424253d1043ec537ddccbc06224b5b90ca517fe06878c675e5dfcf1b44856116629007d4336f9da812d9c3d7349d5d5be58659869183ca424630cb91beeb6166f335d5eddbf308880280ef45c155b2c41081214043bb73fc84255c40b9a958fb1cca16c632605aa527629cb84c3925b32c6f22dd410776b6a653b4183e91b3961b74b6f8646146de6aa1f36f15655ff3c2a77de651040a462b26301262cd1b2cead44c0422c7d55b6043dcfa59f727e0648f730d2ba5d304084ff5e2e11cba70c7df5516e68b588bf1a2ef9c423e1af234ce604d8f963add94bcfbef8eb1766909a37451f4ab698e94dced75571512e648f144e54a1f397657b170a23aa0c486e3dcd5df7ce89a0bd7311cb64501fc7edb0128a4b6a5cee08fcfd0941dbfafe88fae0a9f8f68f70891c1c54e3b51d899f6ff9037b35ac091d713941d2834363c18f2d198a9de49824217703b6a6a9789b260d9eb25db7934b2182935a5f7e2c7939509e14e61c71d748cd0120586b360d59b13894beaa24bdad7d56025d1662efbabe930e0ed2d3e1c778e6e054a436e7c3593e3e7a77e93a86aef79d8007edfdea29da36b5f49395298ac2f06ef8e8382a645a679a53ee91fc0794a9388465d7647410d7102b4e123dc90f46ab70ff59c5c3f8e515f0df1c8885c92ed8395fcc8a4fb556de3fdc72301dd1ed14be3efffbb4093505166edf9884aa490f4d95d408cf0c5a5573f37e3196859d124a0796bae4fc0d7454f9687a884785901a5ece25fd1e580c0116ac13b2007305e3fc2fd2606cf85861153f398a7abf4c756f4b9fd4706cc20b1323624ea4832a2a57b54f88423cfc71f5cc5105c7293fb1bdacb0531de29ea1357006e1e4c810187ad191376725915d6acfc43a71498679c16f1dd7046f9e993b5259eaf09fd832d4bb554327ab3ab2f746ee7084c5967b036a452226fd6ef2f801397afb1cf8ac58f61ffe3e15fde5bcd5faed866d95eeaab4d986d7706d34a654bbb78c684b93b73cd98248215e8b85a34d8f5cf851d4e2a6a5354a4ef983e7792bcf771f74c7758a4468b4c5a782a28ee54133fecec78cec44bbf635b25adc631d582a39bb8d53decb3991c6b795c4786d8fb49768b946759c0c4354c2fd040397744c7b773f3d9ba43ad617cba9da626bd2aafb9a6c749657177fb7aef14a62fe10effc107ae9ee5fee39126069609e4a7c725e9f62888572ad8010b6ad2f68de1c7a1738f79f7dcf3aae883f8cba227d1023c0c31ea165c24b206da511e676ec191e26671009216821423a1b97a6ac9b9bbd73e34c0453e86eddb59fd2e728cdf2272b7f1f062967d3d474b5024e1993dcd55a8b25258246ae1324226fbd05a2fc1deec8cbfc0476022b862a91e253d201c9e98eae7371fb6c8056f4226d4d1c247fb19c88cca5ffe373c4b6d2be6e28235cf72762c55fb42eaf6aca3b17cc19a83192e7b6ffb7409f239099a0ecc86ab1f162ce2154b842dc10a1e1f5a802417cc6501858131c4994f1595592198c99509314a4d6fbc7eb6981a457982c1a704dcfcfa9c96c704a605c84ce0dc0d2e79859ff39a64ee2bd6c388e9653d79224c01994989709437a7eaaf465b00599e125a20a2187c5c56add92aa895628cdd47d8339b4bf3e73d63f3388ceba41100156d86aabd66ba905d89e14453ecb18fb402ee79e4af153ec2aabda27859f383e851b56ed3cbbb68c85c67325ea8244fb8894e572f5f6b6c9adc3a4719d2f81302445a4588a3b09db7a61ba1f55e43c3ec2a1922c5369d8c51317cb19fb695bcd90fa162c9ff301d826d0e2c7aee3e7e9134055937058d55de2349d50770102a9a005c781926bd93e181f90c54ff5a87ff71a3cf6756e2e3a9b0d6f3d67a8f591ae752834fafeb85183d3eaed4d1b454c007017ec2a514020903f3926fa27015bb43c8e8736a5a13c40a61edf9a70ee2b11d2057c8d850a2c4f22e0146adc3521e957724def1c955fcdd36df169c39d0e3d9119396f2369f030f55e5463b894908f691da63945959b55e6d27a091d4f20f142e8e585b4bb873efafe7db5cd05857d9ebe5a26d073f16c3b627756fe7d54a89c545e8caa8af12b0e05ffd00cff652f4967f4146bc8f1ea0b68c658140baa5e4aacb461bb933b2db48d51b6028fd7fc3684de20a7424792c8a7adf114275de4cc693522c96ae5ac9b85e505b877b4be6ddb7ab9029f736106670d0d8ca40ec78ede937d96d1db69ae3a32a793d7ba49e098eb79f7599acaf20191aab4c52a015001b0f1a0fe9bc5589acd9bbb3378a907a77ab18a056ec00af9644ec630b99d57243586fdf6406fd13fbfcc52eb902c749026d135c7e63cf104e5bc6d2db1e8397fda60fb563a412739000af65cfda15245e035270ed381e55ce6707e38d2504f12e702a99ff5f7daa4e04adbf4e77ae08c9f34787227bfbd91524557f1d59f023755537a4ae2ac5091127ce0efa2f6a2cdec1442055883d5975c28ade16ce8690e17328831f83562da131778256282c8f673200ab16bc94209bc1ccefdc006e3d4dfdf74836ce37cf02d4d2942ac794bb995e0e945e0ac2fc160675ab40059a3e0d1717fcc4d371578042c9eccc8446be758ce87725c4d23cd8026e3d2aa6bdc0cfc4552cc6ca2960c0d0af6726614278ca1a3f379157ca82039a1839456b90eab17c386e7e7a36d5b7075516fd0cf54d8b6a1603c1e5ff0967fb574d2e2aa597b1584ff7062f3ac2e7c8eb20edc27106e6ac9295cea0e3c04762b40426d7db93e70318557af02bb0c471d81d9ed0eeed6598cb3e5d0ac06ba4f51290716b9806d0a143e94b14aafc1fc3e8a79db3d11501661f8ca18c61a420ae619ff1d440fec2d0f8e42465dd229fb14bd4e60d6060f476cc81387df17ecd330569916b56bbe8c37db81f066b7bfbf8922547b5eb53e0ba04375efa845e4471bba8dfb48cdaa36406bda70fea22f917d56bfe359b1a7f53d4a71b658afdbd02838491b12f120491451b2a010da857382a6cbdee0f0ba3d93879a5f354a33fd21325467228d5cbf6b0ee915b0f29d25f2293852c48489642a630a58fe1a6a68fd1950276f9df8465d833b95bc8a234e138d3f1cc34344f51cee9a3b64f53dd93153dc102c28c1600bc7c5224298f990316eb8fb752523e00a36e427aa0c2f5b0d4e4b673423245d47830445a1dbc676923cb9338b59a73e3fec24c1b25f858e695c3c6214acebb111c8231b3fff2a4cf14317906f99f021541e51c42baac8aa794d8f9ebff8ed11f0fcce1b5283f827bf353e13f7320ae2f4a9f341bdf81a05077af7f37d960a8175eb362240496861380b6d849e16b9ce8845c45e46860e483f5ec3a84c57d8ea7d6f32a72922b2f3484daacbe419744043d5cd7be21a86a2428066c2c2b5c089b226f48ddc3577712663eecdb2ec234d98b0ff854572530480a6299206a5560ad3e6a0416e761e9707b9e1a49346f6b6cdcfdf88c98a1a4a31f6379af8d04f8a47d95b3cc1610248cfb3b9f037b8da655374ed31da62d2ab13c5b571fa103ce776e21e9785057c94ac7d2f0acc1ce9d5cd73915446485b7bfb751f638d067f3c3da04f186de0cc1430682863727307b4ea6eb231473475559d43a09559ae0a21b6abbd648f37f1d62c532a9e8d864279c5d6dd6a120cc35940c64bf7a4543c1f21896b4de18fe4489f71563504cdac7c8a4003fc4c82444e8b3718a1848a33b94cca8c2230708112f57dcf99ae4b9f35a290f711bf0605f349e1546037a295bc1bd5c62433a1ca1fc4a6fbc587f0c160dd28169cc3b07c933bb45f279b6d1263b96321ee376513d06b40898353be9a9345459d08e14a4646df40d504a5b3900b18707fe0534f0d9ce0fdd5188bb30de311d2388077056e237b141aec7d846845744c9a9e246798c4c45c2889f67374674a713b1ca1ff6e79ae0ca49ea8b4533758f9195dee79967f092a91e2b6c1fb8c2ac7ebb41dabb9fd681c78548c33d3137caf90f4da30d4a6b4563f25ba7d8e04589ac35760ae82ff2467ba6eb1b1e389fcca1c8f45e8836585f9f9d7515b927bfb465b2d9d770e5da4dbe36ad1e08ece34ad5b33eb66df459192d7883b74bb87c7ae9ea7ccf91b0a50851c7f829b5d803270ac5995b72db52888055b9232859a661f17842c5da6c18acc9a795b8282475c035a56d63c11b49e9938fd3e452baab98dc1787445bd433f2ee8c5db2c99180277fcc63ba43d9e848a0cc91e29f3e3e0e5fc51fae9e1402d57c097ce4c3cc00a065004c5fe76949759e1ddc8a0c1f0f663d1d000877c197afdfe2f2f5c7e485dfab2a982b09666339fb137d5af7b21072881d2d7f8b3d86530b58ab2f65c435575f4bd152fe489b1220ca00d66a9368859d16b57acdbf86c79c83935f76504f67722486ced333f7c5372867bab87a10d9e2e62c7a1648eeaa56d86ddc087c02c4a6ec91e598b4eb5dd3f55dde995693cf6dea27850bc6c894238212645a6622385131defbedf375d8b13aa05d50", 0x1000}, {&(0x7f00000036c0)="feace6669007e8b648fa9bfde41a723d16d090410964642d0f19f47080f0c875fff96e92a8a9ceba74acd8771fe787545aff1e8f558b2c10ec897117a624bb8f989bbcc3197877fe8ea446bb3d61fb9b71a3ff3c4f9a5f7291d48889fbd09f820a323b53281a248f6717d3aeb047b542", 0x70}, {&(0x7f0000003740)="51457d769f47141edc9ffc39dfb03a3f3c90765a7089456eb75ba93a17718e511d595a4d63a49313dc0d96e258e067bb283435fadcc0e8a3465ac1d7322e805c2f061a05494f3cebcba5ebf763183d447cb56e13c10e22b3aded2d0aa16fc1cdc6e106da97c981458d94ca28817fe8c74d856f36b3e21cb99b0fd1218cdeba8d35cf770c2c867f2aeb45a0f0cf6ec73cc62be03a", 0x94}, {&(0x7f0000004240)="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", 0x1000}, {&(0x7f0000005240)="838a95a780bfd31cb3c0380efb421809671d70ec3e02d40251d610f61c02feac65d235f5cebd0acef4330e406c25cce7844a1de68b79f3cb4f15591426cfa281c3e4e9bf8bfbac4c6fe2f4e07db25a3248328c0eacf4138e838853f887b577618df4871861c72abaeafac8da904e8a8f35017debcf04def314f8c0065c27d6d0f370a36a7b7eac6374dc75", 0x8b}, {&(0x7f0000005300)="88db0996783b29c612e5f1a01d710cfcd04fc695dbd91c83fa57721aa92f8afa3af261a95070574e409dcd410d9ad1c13ff09d5ede", 0x35}, {&(0x7f0000005340)="a38c4296900c923b9aca5c426e785e339a0c0346989115687241dc356d0ac560956e9618535a0e4fd473bdbd4c2efc0e88dc1aff68bd19f628c79d679b95a1c1c1fb155f08a710405c9f2c6518ab6331e96068a135c72bc691ca85aebe699d7fc3b6dd3fda9a4c069508ba08333a5ed2cc23b9147d1698a57391f73352b611eb03170c49f7", 0x85}], 0x8}}, {{&(0x7f0000005440)={0xa, 0x4e21, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, 0x1c, &(0x7f0000005700)=[{&(0x7f0000005480)="96d04ead07203c19b5f92d6cdf244e75840363604aa1726c899903e76fbc61a15fe49a0d4ed9", 0x26}, {&(0x7f00000054c0)="d962c15347f293e57a3f8df0c5b2fdbc34a05525f2ae79d090a15bb611a9e843f1ee5208c504784c264e458ebeba6809ce47ec27bc3910451d657bc91c0382", 0x3f}, {&(0x7f0000005500)="1574d41558b0c8aa40b16b91acf3b40d3f4dceb7473fab11", 0x18}, {&(0x7f0000005540)="f914171cf9ed215bac38250ed1119efb9cf371d39b7f49324571dfe56b3045a06c9c50c848f6b706c6505caaf12629da8c19f420429c889e958ece7494a6bbfcdd88f1f9b216a458d0a42367482919e92b8c275b1cd548180454475674327cc45d05e4748038faa856a496563dce2ed3f397b516362af24c6e8e00b402aee26f258a3211d2fd07312d0d4399cefb12d95632e77203fb6012328fe2aad04be595be59f8038ccf36851676c72e861bd132c3b1a43a86ae31353cd31198d572", 0xbe}, {&(0x7f0000005600)}, {&(0x7f0000005640)="482ed8ae45a701850802e9ab99c24a0a1ca83d038dde099bb1dd7b8f3ca6370eac3a011f7d3f6d6cf3366f39bf6efe8a677b895049e96fe651864947e3ccd6b9c7f231eeec28533c7b60a7b39ad3319b17515f3c04dcc22049c372484b0d4ac014394d8b40df43a0245ccea37e81bed66bd4394e97d2e29845bc826b48057828bb4f9fce3726a337e6d682f169e74e528f21acbcab2ab2733cbce7d736598835e3f9ef4880c16e3e7f3bcfe45ff2a6a535", 0xb1}], 0x6}}, {{0x0, 0x0, &(0x7f0000005c40)=[{&(0x7f0000005740)="b3ddfb93ec9ffae6009792938135bac645cd34912d8f28b2d589db470bc75a4a2ed7b51b0d9091ba3e27b475904928871e624319e7746be406a3db807cef830ad9cf7ac0671a14b37912e4b23baebdb6132626731761bfa567a34bf0d5db7750330f2226c44ebb7777fbcd8c7912e26dfcfb7eeefcc53f3bf61cf662c0dc24077a420f6153fe48604cbbc37ce32f63ae73414bfc45a001760eece4e068bcb8f4973272519cddc51fee1f1764b551031066d7822db055db91ac3bf5869c85fca91cee78d1268b3cd7ebdfa94fa6489b8cd8f62714183b", 0xd6}, {&(0x7f0000005840)="091e571576d1b51804947c058103483fb17c59f4d1398384dbb783caa82c24b52d2b34b95fa7d96fc5dc3c80b0bbef9ced8214a90ea9a5fddcb788ade0bf3d83883628224fa94e6d00ca111a1e89dac879e1abeb2f2fa27348c0e0a835ecad8f873fb8c9d8a09c", 0x67}, {&(0x7f00000058c0)="a11ecce9eb1c004c32241346c0d907a26d581d304bdd6c5e52413b62bf64f6964bfe497392a3", 0x26}, {&(0x7f0000005900)="fd1874464b45e97859acc1bf73d70eff1b5bbdb2b9e1903c47f5c9cb0b2da10cd9880aaa234b74d212f839ce0f7df0004ff4c8392049649dbdef5249a4e79b2a876941c1f780dd0b13e7e8e1c82b22a542beecb4eee167bed3e86487ccae5b72c609f2f0df8b2737402415a3527530f338152eed12213e0be0", 0x79}, {&(0x7f0000005980)}, {&(0x7f00000059c0)="0a7f69b34c15bfb82f4f371d1b999fed8035b7f18247f72303911569405d02b86b14fd00cb353d695abe3e8726c4d63b1ae78ba6ee617f48ff8e26087b8c22576d4fc6869025eff234f9697018fc75368dd59da26c5e5a1ff73a316acfa67ecfbf7a371620d8897e8694c4711e68695afd30d9eaf99ed59b8e0d520330e37000e087fb02a88d9888c3db26fc481b7eb7e0415862a31d0061f609ea6600e6274d9f4943e2db14fcfa78b1b3dacf6fe6ad1dfc5c93e37a9d0cdced27abb3e0f4302bae0caadb6046bd7bff7d94baedf0d77006feba74d019a7a25ace5e5fdc95b89bb7252be8af6cd0648413245aa4c2101b4fea116c32ee", 0xf7}, {&(0x7f0000005ac0)="8885615e16f114239cc3a22f5e1e84ace265036e5d795fc6385e4a7e8810540c15560b3ab003a2d138c85859ca24d4586ca6157c5388", 0x36}, {&(0x7f0000005b00)="a61cbaad0f8fe6fa1573066e25e2628318", 0x11}, {&(0x7f0000005b40)="93613a48ac7084aa7a6de4207b9f95ba6cf7b5fdb1b0c978ce2b5e0f21274715deeaa066551ffdd1b3881f221086e5b4c5fe374fb40e0ceb7e030cda7ee7d5555d486fcc9086b919982230314a6fa957aaa2e26401c5c2fc29a21071fad6ebdee1092bf597f68726e01778e9e09c753b9e18449a9ef6d0bc19d131421d6ceb1c0b64f91d73881f3f46", 0x89}, {&(0x7f0000005c00)="cc0fd1f692bcc5720f3829c169d5887b", 0x10}], 0xa, &(0x7f0000005cc0)=[@dontfrag={{0x10, 0x29, 0x3e, 0x749}}, @flowinfo={{0x10, 0x29, 0xb, 0x7fff}}, @tclass={{0x10, 0x29, 0x43, 0x1}}, @hoplimit={{0x10, 0x29, 0x34, 0x3}}, @hoplimit_2292={{0x10}}, @rthdr_2292={{0x84, 0x29, 0x39, {0x16, 0xe, 0x2, 0x68, 0x0, [@remote, @empty, @mcast2, @loopback, @remote, @private2, @mcast2]}}}], 0xd4}}, {{&(0x7f0000005dc0)={0xa, 0x4e24, 0xe, @mcast1, 0x1}, 0x1c, &(0x7f00000061c0)=[{&(0x7f0000005e00)="68e837615df790702aa0249474502fca240a7bb5fad6976d915e4de9bc2ed3184a4fb7f904e35091691e6b1870ff09a7b322b53cc7851fee46c34f0f833dbe7678e44805658fb2c8e0671e54eb6f77471ca91086e7e9b7c16f5f9b8ba30c537cfe3bf889ff40b3dd59310bd51b3a96c53d7556e65b4f8f09b825f4c133dcb6b906602aba4aaa1b3cbb4286ab18b7fd4e56f9201fce6d6ab959a75aba6e", 0x9d}, {&(0x7f0000005ec0)="2bb6e1a2aa2dea1e62061bb09beab51b74f9848ade17d950ece2c4b95aca341d4e163663cc46373e0fd3c484af271e2337890f7bc54db4c6352ba90ffb5908b819fbc3798e00847dca6f72feeef29a54d3b4eff80d6b8da79c2309250e0be1179835d4f3153a704f3474945d1cd83a5cfc7fda4b84f9bb329f89bfa84056b633398284db7c3235e2ec1a6fa2f6d185de52fb535acb3caca8ea33434071dca61f2307ab0a2dd82c3ba8f3d2def57e53317de60a2a67e8a731ae6a", 0xba}, {&(0x7f0000005f80)="341be8ccc7237d6b086556572acb9341a1bd0346760924e80e62da256f0ff5758290b6c20f28df057d6015ef6ceaf3f88290c5c5f2de2ec62429031110a0cf1ae54784086f914350ffb7d962b152fd9cd2e5877c27e084b21b28c00a40e825db9081aba29ad99c02c8f775c62780dcfdf4692aee0b2f07940f63a4292cde297dcc9aa74377cf81e3d619c3982cbe65", 0x8f}, {&(0x7f0000006040)="40e2db64990209458a388301724d0a806c8bbe4ac3ee82437271ddcc217f5bea11a0dd05be976fcfa508db3694d18c2fcf3c4c961b556fcfa01e33859b1b3f83c11f420a85a5842c8aad49ae92deebc8a416af5099bb8a2963e2abbd3bfd2ed119e3fbcdfa6910dab1", 0x69}, {&(0x7f00000060c0)="2293f01bbc1ab4476722f758d2d2d2fe6fcfbffe3ff2477d1d540276f6b4a41387c114ba0853fe700e0738a0ccf990887ff57e2943d8774bf065256ba6d83e7b6e30b7f909aa0df744bd78ec0a6a30658c3e922d642d19f6792c07c12738fe3cf609f04fe3c275b1dfc465f981f11615045f7256bf20f98034eb91d1b09abae9b3b9b4ad708b19c579b2b04b1ee6afd8f7e07b1bf1a163969eee4d8f736bf2e62c49972794f6c37d0fc7ec28a79154339c5d0226f4650f4928dac8d22f54359626ecb3793927d641d105cfaddf79cd5fe5bbefb067584cc75b", 0xd9}], 0x5}}, {{&(0x7f0000006200)={0xa, 0x4e20, 0x7, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x3}, 0x1c, &(0x7f0000006480)=[{&(0x7f0000006240)="5905a75e044931c686ecd0cb46de46694fb7efe334d9600e2678e7f5facd4d183bf500cc61dd2af85b917a3fc685f337c27723f9508ae4621124470a5847f30d03a7583b4bb4e18aff3cd0f95c9c9e4d4a838279c89161139aaa1d71ec84e977efb4385e2c64aa9b7464aff5c0597bf92c51976182915d185103917e97c7f4965acc9999ee27401ef1010c8b86ef2818ce48d886b24ba6c11c85ae", 0x9b}, {&(0x7f0000006300)="7972626a478b9ddcb35d2f867ff2dc28ff246132a6e79da526f224bdf083fe2e1fa4bbd647302befad33e779790f2ddeaec88f3fac4cf1d23d9957d512941a56dd684456ded5e06873d7", 0x4a}, {&(0x7f0000006380)="ddb25697f3de28cdaa3182cdce31892e17ee5d63da77217bbea2cbb33a7afb9395a705e5ca5aa3c996e047bba3a3520d502731efe64755768652047f69ea5c0db8822a9c8964d110553b307e492be12c967e4946127accfdc87e7d1592abbfb625f620ec09bc544014c67417c336bc78ce272db58149187deb8aa343459d73ccb0610840032b371c5a5685367c6d73d37eb5bf996e41a96fec63f88812bd658a539352cf4794cadaa1d28ef339af7981010ab03300901a393dac1df27fff98f3df993053248059ae04048ae61d8d9512bd850a8c2c3d57acd3ee5fcd5ff061b4f9734e11e1196db60c9625719e49fd7dd882839dcec2", 0xf6}], 0x3, &(0x7f00000064c0)=[@rthdr={{0x34, 0x29, 0x39, {0x0, 0x4, 0x2, 0x3, 0x0, [@mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}, @hoplimit_2292={{0x10, 0x29, 0x8, 0x200}}, @tclass={{0x10, 0x29, 0x43, 0x2}}], 0x54}}], 0x7, 0x4004000) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="c0000000", @ANYRES16=0x0, @ANYBLOB="00022bbd7000fedbdf251d00000018000300", @ANYRES32=0x0, @ANYBLOB="0c00990000000000190000000c00990007000000560000000c009900030000003f0000000c00238005001e000100000004002380080001007c00000008000100070000000c009900110d0000430000000c009900050000007c0000000c00238006000a00040000003c0023800500130001000000060018000200000008001c00060000000500060055000000060016000400000005001300010000000500050001000000"], 0xc0}, 0x1, 0x0, 0x0, 0x800}, 0x2004c840) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000480), r4) sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000000940)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x881) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000300)={'sit0\x00', 0x0, 0x7800, 0x8, 0x4, 0x400, {{0x10, 0x4, 0x1, 0x2, 0x40, 0x66, 0x0, 0x10, 0x29, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@rr={0x7, 0xb, 0x6e, [@loopback, @multicast2]}, @generic={0x16, 0xa, "97e20b78b88c5a7a"}, @timestamp_prespec={0x44, 0x14, 0x73, 0x3, 0x5, [{@rand_addr=0x64010102, 0x2}, {@loopback, 0x100}]}]}}}}}) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2018201}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00032bbd7000ffdbdf250000000008400100", @ANYRES32=r6, @ANYBLOB="0600060002000000"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40000) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x9, 0x7fff0000}]}) r8 = fanotify_init(0x200, 0x0) fanotify_mark(r8, 0x401, 0x12, r7, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f00000001c0)={0x0, @rc={0x1f, @none, 0x7}, @l2={0x1f, 0x0, @any, 0x1, 0x3}, @nfc={0x27, r9, 0x1}, 0x7, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)='rose0\x00', 0x8, 0xfffffff9, 0x6}) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000180)=@nfc={0x27, r9, 0x1}, 0x80, &(0x7f00000002c0)=[{0x0}, {&(0x7f00000000c0)="273c0006000000000000", 0xa}], 0x2}, 0x4000) 3.270314434s ago: executing program 3 (id=465): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) openat$sndseq(0xffffff9c, 0x0, 0x111340) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@getchain={0x2c, 0x66, 0x400, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x10, 0xa}, {0xfff2, 0x1}, {0x5, 0x8}}, [{0x8, 0xb, 0x9}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001380)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x4}, {}, {0xd, 0x8}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x0, 0x6, 0x4, 0x101, 0x4, 0xe, 0x7, 0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x4000) r3 = socket$kcm(0x29, 0x5, 0x0) sendmmsg$inet(r3, &(0x7f0000001800)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x56}}], 0x2, 0x20008081) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') lseek(r4, 0x1000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0xff03, 0x110c230102) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r7 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, r11, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x1000, 0x0, 0x1f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x400000, 0x8280, 0x1, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x51, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) r13 = syz_io_uring_setup(0x35d3, &(0x7f0000000400)={0x0, 0x5962, 0x10000, 0x1, 0x52}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r14, r15, r16, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x8, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x0, 0x1, {0x2, 0x0, 0x0, '\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}, 0x1}}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r12, 0x40189429, &(0x7f0000000300)={0x0, 0x9, 0xe}) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000000f06010300000000000000000700000305000100070000008d72c3232741bf98dee3766da5cafb796d45b5a8643f"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x8004) io_uring_enter(r13, 0x2000, 0xfffffffd, 0x9, 0x0, 0x20) 3.08710201s ago: executing program 3 (id=466): r0 = socket$key(0xf, 0x3, 0x2) gettid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x1, @thr={&(0x7f0000000100)="4cb9a4b86b6da78928c47b04d889bbd943e52c1a211ca9ff70d4d1b4a21e847e25e885349750e2c9f0f699741953b54255f6ba4e2b10cdf42957bd35b12542f6d99ba7eda8be4ed069d270d4dde76e2bd80929607930de5d8a7fe43da096b845", &(0x7f0000000180)="a45d6e0d8561895a888bf5410886c82b224486c369e4660eddbeecf4dfdc566a6aee260a1b04603f5a96dc54e6857322b76d6bb83a9749789b22018661e9e921f46576e2766d47"}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') preadv(r4, &(0x7f0000000240)=[{&(0x7f0000000580)=""/4084, 0xff4}], 0x1, 0x3ab3, 0x0) timer_settime(r1, 0x1, &(0x7f0000000040)={{r2, r3+60000000}, {0x0, 0x989680}}, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/nfs', 0x0, 0x0) openat$cgroup_ro(r5, &(0x7f0000002140)='rdma.current\x00', 0x275a, 0x0) connect$netlink(r5, &(0x7f0000000000)=@unspec, 0xc) recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) 2.760725975s ago: executing program 1 (id=467): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0xfffffffffffffff8, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x7}, 0x8) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0xb, &(0x7f0000000240)=0x3ff, 0x4) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000009c0)=@delchain={0x1ed0, 0x65, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xe, 0x9}, {0xffff, 0xc}, {0x1, 0xffff}}, [@TCA_CHAIN={0x8, 0xb, 0x3}, @filter_kind_options=@f_matchall={{0xd}, {0x1e8c, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff3, 0xe}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x8}, @TCA_MATCHALL_ACT={0x1e70, 0x2, [@m_connmark={0xcc, 0x12, 0x0, 0x0, {{0xd}, {0x4}, {0x9c, 0x6, "90d5f23b1c91397913cb5e58fa49f1f3453f22129ed8f8447afdce8d52a8931e798b3f5a5cdaf37b28873c8c83157a63848172f0ca2e9de01579a2ff00058b85dddfe7d25e5597dbdf3720dd57df3ed623e44cef36c9cada34eb6c8080f98e0ce2d4ad86062f51963014805b2a882fea1dc83624019d58df2a74b4f2744d8976095c2b89d50cd2bd0c7d41526dea64f6ff416ffd7f488dd9"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_pedit={0x1da0, 0xc, 0x0, 0x0, {{0xa}, {0x1cec, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe68, 0x4, {{{0x2, 0x3, 0x6, 0x6e7, 0x2}, 0x10, 0x6, [{0x1, 0x4, 0x72c5, 0x401, 0x0, 0x2b1}, {0x3, 0xfffffffd, 0xffffff13, 0x3, 0x8001, 0x2de}, {0x2, 0x7, 0x5, 0x1ff, 0x7b, 0x8}]}, [{0x8, 0xb122, 0x0, 0x6, 0xfffff000, 0x5}, {0xd61b, 0x1000, 0x7, 0x9, 0x0, 0x8}, {0x6, 0x4, 0x140, 0x8, 0x0, 0x80000000}, {0x7ff, 0xf, 0x81, 0x2, 0xffff, 0x2}, {0x4, 0x0, 0x8001, 0x1000, 0xbb4d, 0xcf}, {0x5, 0x800, 0x941, 0x8, 0x6, 0x10000}, {0x6, 0x4, 0x5, 0x2, 0x80000001, 0x3}, {0xc4f, 0x7, 0x7fff, 0x1, 0x4, 0x80000000}, {0x8221, 0x40, 0x401, 0x7, 0x80, 0x101}, {0xf, 0x9, 0x3ff, 0x7d0, 0x7, 0x7}, {0x1, 0x4, 0x4, 0x90, 0xa, 0x2}, {0x9, 0xd, 0x4, 0x0, 0x0, 0x4}, {0x7, 0xb, 0xbc, 0x2, 0x1ff, 0x1}, {0x8298, 0x75, 0x2, 0x4, 0x6058, 0x56f}, {0x5, 0x400, 0x8, 0x81c, 0xbb2, 0x8}, {0x7, 0xe0000, 0x7, 0xcc, 0x4, 0x6}, {0x6, 0x6, 0x80, 0x0, 0x400, 0x58}, {0x1000, 0x7, 0x2, 0x7, 0xfff, 0x1}, {0x7, 0x9, 0x7, 0x5, 0x48, 0x9}, {0x9, 0xaee, 0xffffff6a, 0x8, 0x6, 0x80000001}, {0x1, 0x200, 0x0, 0x4, 0x6, 0xe9}, {0x1, 0x5, 0x2fae, 0x7, 0x7ff, 0x4}, {0x4, 0x32, 0xfffffffb, 0x1, 0x5, 0x6}, {0x2, 0x5, 0xfffffff7, 0x2, 0x400, 0xf}, {0x9, 0xffff, 0x8, 0x1, 0x2, 0x9}, {0x1, 0xdfb, 0x4, 0x0, 0x5, 0xb91d}, {0x3, 0x0, 0x3, 0x5, 0xb, 0x1}, {0xb4, 0x7, 0xa, 0x3, 0x0, 0x4}, {0x8, 0xffffffff, 0x3, 0x0, 0x5, 0x49b}, {0xfffffffe, 0x5, 0x37, 0x1ff, 0x10001, 0x6}, {0x8, 0x7, 0x9, 0x5, 0xfffff1c5, 0xffffffff}, {0x7, 0xff, 0xb, 0x4, 0xfff, 0x300}, {0x6, 0xc, 0xd9, 0xffff, 0xafeb, 0x4}, {0x7fffffff, 0x0, 0x8, 0x4, 0x4, 0x7f}, {0x42, 0x31, 0xfffffffd, 0x0, 0x6, 0x3}, {0x2, 0x1, 0x4, 0x10000, 0xbc5f, 0x8}, {0x40, 0x2, 0x9, 0x1ff, 0x7f, 0x1}, {0x2, 0x9, 0x5, 0x1, 0x9, 0xa8f}, {0x5, 0x5, 0x1778, 0x41, 0x2, 0x8}, {0x7, 0x28, 0x7, 0xded4, 0xa, 0x6}, {0x61, 0xcf4, 0x2, 0x1, 0x4}, {0xdf, 0x7, 0x0, 0xdd40, 0xd692, 0x5}, {0xfffffc56, 0x7, 0x4, 0x6, 0x1ff, 0x5}, {0x7, 0xfc, 0x1, 0x3, 0x3, 0x1d8d63b2}, {0x0, 0xfffffffb, 0x0, 0x94, 0x401, 0x7f}, {0x2, 0x100, 0x57, 0x4, 0x7, 0x8}, {0x8, 0x6a40, 0x89, 0x2, 0x3, 0x2d}, {0x53a, 0x7, 0x4, 0xd, 0x972c, 0x7}, {0x10000, 0x0, 0x6, 0x5, 0x0, 0xffffffcf}, {0x0, 0x1, 0x2400000, 0x1, 0x5, 0xe}, {0x7, 0x5, 0x3, 0xfff, 0x9, 0x9}, {0x8, 0x9, 0x0, 0x401, 0x4, 0x8}, {0x9, 0x5, 0x5, 0x6, 0x469, 0x7}, {0x2, 0x4, 0x6aff, 0x7f, 0x7, 0x9}, {0x10, 0x401, 0x5, 0x7, 0x3, 0x8}, {0x0, 0x0, 0x7fff, 0x8, 0x1, 0x6}, {0x1, 0x40, 0x0, 0x4, 0x9, 0x1b}, {0x8, 0x3, 0x6, 0xcfd, 0x8, 0x1351}, {0x5, 0x8, 0xc24, 0x100, 0x1, 0x50000000}, {0xffff, 0x2, 0x200, 0x82f4, 0x1000, 0x3}, {0x3, 0x9, 0x1, 0x2, 0x8000, 0x8}, {0x6, 0xd5, 0x9c20, 0x7, 0x800, 0x45}, {0x3, 0xd2, 0x7f, 0x5, 0x1, 0x9}, {0x6, 0xe0000, 0x7f, 0x6, 0x10001, 0x9}, {0x6, 0x4, 0x4, 0xd, 0x80, 0x34}, {0x1, 0xffffff85, 0xa433, 0x4, 0x4, 0x2}, {0x6, 0xb63, 0x7fffffff, 0x8, 0x8, 0x8}, {0x2, 0x2, 0x5, 0x81d, 0x8, 0x56}, {0x5, 0x8, 0x250, 0x8, 0xc7, 0x100}, {0x9, 0x800, 0x2, 0x7c33, 0x2, 0x9}, {0x9, 0x9, 0xffff, 0x80000000, 0x6, 0x4}, {0xa, 0x77c, 0x8, 0x8, 0x7, 0x169c}, {0x5, 0x4dc40f5d, 0x8, 0x0, 0xc4, 0x81}, {0x8, 0xf, 0xaaab, 0x363a, 0xffffff62, 0xc9}, {0x2, 0x1, 0x5, 0x1, 0x6, 0x6682}, {0x5, 0x4, 0x0, 0x70, 0x0, 0x1}, {0x363d, 0x1, 0x1, 0x1b8, 0x7ff}, {0x0, 0x4, 0x4, 0x4, 0xe2, 0x3}, {0x5, 0x2c42ff85, 0x8, 0xfffffbff, 0x84ec, 0x81}, {0xff, 0x1cf, 0xff, 0xfa87, 0x4, 0x1}, {0x3, 0x54, 0x0, 0x14000, 0xc, 0xffffffff}, {0x0, 0x2, 0xffffffff, 0x4, 0x7fff, 0x9f}, {0x3, 0x0, 0x8, 0x2, 0x3, 0x3}, {0x8, 0x1, 0x9, 0x8, 0x8000, 0x7f}, {0x7, 0x5, 0xfffffffe, 0x10000, 0x1, 0x8}, {0x4, 0x7fff, 0x80000000, 0x8, 0x2, 0xec}, {0xfff, 0x9, 0xffff, 0x2, 0x81}, {0x2, 0x81, 0x9, 0x4, 0x907d, 0x380}, {0x8, 0x7, 0x1, 0x7fffffff, 0x4394455b}, {0x2, 0x200, 0x9, 0x9, 0x4010000, 0x240000}, {0x6, 0x81, 0xff, 0xfffffe00, 0x0, 0x7}, {0x9, 0x6, 0x2, 0x4, 0x0, 0x7}, {0x0, 0x10001, 0x9, 0x1ff, 0x9, 0x9}, {0x9, 0x3, 0x2, 0x7, 0x5, 0xff}, {0x7, 0x2, 0x6c, 0x9, 0xffffffff, 0xe}, {0x8, 0xff, 0xfffffff9, 0x15, 0x2, 0xd03}, {0x5, 0x9577, 0x1, 0x5, 0x9, 0x2}, {0x9, 0x7, 0xf9, 0x1, 0x10001, 0x2}, {0x1, 0x7, 0x1, 0xfd6, 0x5, 0x2}, {0x9, 0x7, 0x10, 0x0, 0x2, 0x800}, {0x4, 0x2, 0x2711, 0x13, 0x80, 0xcb}, {0xa8, 0x1, 0x7, 0x2, 0x4, 0x10001}, {0xcb, 0x2, 0xc0, 0x7, 0xfffffffc, 0x960}, {0x9, 0x1, 0x2, 0x519e, 0xffff, 0x2}, {0x7, 0xed2d, 0x9, 0x9, 0x5, 0x3}, {0x643, 0x0, 0x8123, 0x3, 0x9, 0x9}, {0x6, 0x40, 0x0, 0x8, 0x200, 0x3}, {0x5, 0x40, 0x3, 0xc, 0x4, 0x1ff}, {0x3, 0x1ff, 0x669, 0xf, 0x0, 0x8}, {0x7, 0x0, 0x7, 0x6, 0x1, 0x80}, {0x5fec, 0x5, 0x6, 0x6, 0x4, 0x401}, {0xcac, 0x800, 0x4, 0x3e1000, 0x5, 0x80}, {0x2, 0x1, 0x5, 0x7, 0x6, 0x80000001}, {0x10000, 0x2, 0x3546bb9f, 0x8, 0x80, 0x1}, {0x3, 0x1, 0x1, 0x3, 0x7, 0x4}, {0x845, 0x5000000, 0x8, 0x5, 0xb, 0x3ff}, {0x8, 0x845, 0x0, 0x7, 0x2, 0x81}, {0x1, 0x2, 0x1, 0x5, 0x10, 0x6}, {0x8000, 0xeb3, 0x80, 0x80000000, 0x9, 0x9}, {0x3, 0x7, 0x7, 0x73, 0x6, 0x9}, {0x2, 0x6, 0x6, 0x6, 0x1, 0x5}, {0x1, 0xfffffffe, 0xd, 0x6, 0x1, 0x3}, {0x5, 0xe75d, 0xfff, 0xb9bc, 0x9, 0x11}, {0xed09, 0x6, 0x4, 0x3, 0x0, 0x2}, {0x4, 0xa0, 0x0, 0x6, 0xffffffff, 0x5}, {0x2, 0x1, 0x9, 0x9, 0x1, 0x4}, {0xfff, 0x0, 0xfffffffe, 0x4395, 0x4, 0x4}, {0x88fe093a, 0x7, 0x9, 0x8, 0x89, 0x6}], [{0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x6, 0x1}, {0x1}, {0x2}, {0x5}, {}, {0x4, 0x1}, {0x3}, {0x2}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {0x1}, {0x2}, {0x5}, {0x4}, {0x2, 0x1}, {0x3}, {0x5}, {0x5, 0x1}, {0x4}, {0x2}, {0x1}, {0x1}, {0x3}, {0x7, 0x1}, {}, {0x3}, {0x1, 0x1}, {0x4, 0x26dc9412a7c44c1}, {}, {}, {0x3, 0x1}, {0x6}, {0x5, 0x1}, {0x2}, {0x5}, {0x2}, {0x5, 0x1}, {0x3, 0x1eb3d966d0663062}, {0x3}, {0x2, 0x1}, {0x4}, {0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x3}, {0x2}, {0x1}, {0x3, 0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x1}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x5}, {0x3, 0x2}, {0x5}, {0x5}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x2}, {0x3}, {0x4}, {0x3}, {0x1}, {0x4}, {0x4, 0x1}, {0x4}, {0x2}, {0x4}, {0x5}, {0x1, 0x1}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x3}, {0x0, 0x1}, {0x5}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x3, 0x1}, {0x5}, {0x2, 0x1}, {0x4, 0x1}, {0x5}], 0x1}}, @TCA_PEDIT_PARMS={0xe80, 0x2, {{{0x2, 0x7, 0x8, 0x8, 0x2000000}, 0x75, 0x7, [{0x8000, 0x7, 0x4, 0x6, 0x8, 0x7}, {0x1, 0x7, 0x7ff, 0x0, 0xb, 0x8260}, {0x10000, 0x0, 0x782c, 0x5, 0x2, 0x8}, {0x2, 0x6, 0xe47, 0x9, 0x2, 0x1}]}, [{0x5, 0x8, 0x3ff, 0x8, 0x7, 0xf}, {0x9, 0x6, 0x6, 0x5, 0x8, 0x80}, {0x3, 0x3, 0xb, 0x8, 0x2, 0x9}, {0xe, 0x7dd4, 0x9, 0x800, 0x1, 0x4e43e793}, {0xa, 0x101, 0x8000000, 0x7, 0xc351, 0x1}, {0x4, 0x0, 0xff, 0x8, 0x7e3, 0x9}, {0x4, 0x5, 0x7f, 0x80000000, 0xfc9, 0x8}, {0x9, 0x2, 0x1000, 0x1, 0x2, 0x5}, {0x4, 0x7, 0x7, 0x10001, 0x7f, 0x5}, {0x7, 0x0, 0x0, 0x2, 0x8, 0x5}, {0x4, 0x9, 0x8, 0x7, 0x5, 0x5}, {0x6, 0x8, 0x5d01, 0x48000000, 0x5}, {0x4, 0x1, 0x80000001, 0x20, 0xffffffff, 0x1}, {0xfffffffb, 0xffffffff, 0xfffffff8, 0x4, 0x8, 0x6}, {0x6, 0x4, 0x2, 0x803314ec, 0x7, 0x9}, {0x3, 0x9, 0x5, 0x9, 0x686b, 0xfffffff8}, {0x7fffffff, 0x8, 0x7, 0x100, 0x9, 0x8}, {0x4, 0x4, 0x0, 0x5, 0x10000, 0x1c00}, {0xe, 0xfffffff9, 0x1, 0x9, 0x5, 0x10}, {0x2000, 0x8, 0x4, 0x7ff, 0xc0000000, 0xf}, {0x9, 0x5, 0x2, 0x10001, 0x4, 0x9}, {0x4, 0x80, 0x2, 0x5, 0x9, 0x100}, {0x5, 0x7, 0x401, 0x2, 0x8, 0x7}, {0xd64, 0x725, 0x0, 0x9, 0x9, 0x100}, {0x4, 0x3, 0xff, 0xf, 0x5, 0x2}, {0x0, 0x2dcb, 0x4, 0x41a, 0xf, 0xc}, {0x1, 0x1, 0x1000, 0x5, 0x80, 0xef53}, {0x3, 0x60000000, 0x9, 0x400, 0x401, 0x1}, {0x3, 0x9, 0x9, 0x9, 0xa55, 0x2}, {0x21, 0xc17, 0x0, 0x80, 0xff, 0x6964}, {0xa4, 0x9f63, 0x5, 0x8001, 0x0, 0x1}, {0x5, 0x5, 0x9, 0x1, 0x8001, 0x8}, {0x5, 0xafad, 0x9, 0x9, 0x79a, 0x7fff}, {0xd3, 0x9, 0x4, 0x4, 0x2b4, 0x1}, {0x5, 0xae3, 0xfffff002, 0x7f, 0x764f, 0x8}, {0x2, 0x6, 0x1, 0xff000000, 0x5, 0x8}, {0x3, 0xf5, 0x3, 0x2, 0x1ff, 0x5}, {0x5, 0x8, 0xb, 0x80, 0x60, 0x2}, {0x1ff, 0x800, 0x40, 0x7, 0x9f8, 0x1}, {0x8, 0x8001, 0xfffffff9, 0x6, 0x7fffffff, 0x7b6b}, {0xa, 0x2a, 0x5a55, 0x9, 0x9}, {0x55, 0x2, 0x99, 0x1f2, 0x9, 0x4}, {0x2, 0x8, 0x589eab57, 0x10000, 0x80000001, 0x1}, {0x7, 0x8472, 0x4, 0x3, 0x919, 0x5}, {0x6, 0x8, 0x5, 0x2, 0x5}, {0xe392, 0x1, 0x80000001, 0x3, 0x7f, 0x8}, {0xfffffffd, 0x9, 0x26, 0x6, 0x4, 0x1}, {0x6, 0x7, 0x76e0, 0x3, 0x0, 0x9}, {0x3054, 0x1, 0x100, 0x0, 0xe06, 0x9}, {0x4, 0x7, 0x6, 0x100, 0x26, 0x3}, {0x4, 0x3, 0x80000, 0x2, 0xe7df, 0x8}, {0xa1e0, 0x1, 0x4, 0xffff, 0x8, 0x3}, {0x1ff, 0xa6, 0x9, 0x6, 0xffffce8b, 0x6}, {0x99, 0x7, 0xe4000000, 0x1, 0x10000, 0x4}, {0x400, 0x0, 0x2, 0x9, 0xffffffff, 0x7ff}, {0x4f34, 0x2, 0x4, 0x1, 0x6, 0x500}, {0xfffff000, 0x5, 0xffff, 0x1, 0x101, 0xdbd}, {0x2, 0x6, 0x2, 0x3, 0x1, 0x9}, {0x7f, 0x8, 0xfff, 0x100, 0x6, 0xf}, {0x6, 0x0, 0x3, 0x8001, 0x6, 0x4}, {0xa, 0xc, 0x40, 0x10, 0x3, 0x7}, {0x7, 0x10, 0xc90f, 0x8, 0x2, 0xe1a}, {0x81, 0x7, 0x8000, 0xffff, 0x0, 0x10001}, {0xb, 0x7, 0xff, 0x6, 0x2, 0x1}, {0x8, 0x1, 0x7fffffff, 0x4, 0x2, 0x7fffffff}, {0x3, 0xff, 0x7, 0x5, 0x634a, 0x9}, {0x3, 0x1, 0x3, 0xa, 0x9, 0x2}, {0x0, 0x7, 0x83, 0x800, 0x3}, {0xf9b7, 0x9, 0x8a60, 0x3, 0x1}, {0x2, 0x6, 0x5, 0x2, 0xffff6cec, 0x6}, {0x0, 0x80000000, 0x2, 0x2, 0x10000, 0x8}, {0x8, 0x35e5, 0x4, 0x7, 0x7c1c300a, 0x1}, {0x4, 0x9, 0x7e8, 0x1, 0xfffffff0, 0x7ff}, {0xfffffff7, 0x1, 0x1, 0x8, 0x7, 0x8000}, {0xe000, 0x8, 0x0, 0x7, 0x100, 0x10}, {0x9, 0x9, 0xff30, 0x2, 0x5, 0x2}, {0x8, 0xffffffff, 0x177, 0x401, 0x400, 0x2}, {0x80000000, 0x0, 0x80000000, 0x6, 0x7, 0x80000000}, {0x7f, 0x0, 0x2, 0x81, 0x1000, 0x7}, {0x6, 0x1000, 0x1, 0x4359, 0x2, 0x2}, {0x4, 0x6, 0x1, 0xffff, 0x7, 0x8}, {0xf5b, 0x10, 0xf, 0x80000001, 0x4, 0xfffffff4}, {0x8, 0x6, 0x6, 0x5, 0x9, 0xffffff60}, {0x8, 0x10, 0x8, 0x0, 0xe, 0x9}, {0x1, 0x800, 0x8000, 0x800, 0xa, 0x6}, {0x400, 0x3, 0x0, 0x8, 0x8, 0x8}, {0x81, 0x2, 0x1, 0x0, 0x9, 0x4}, {0x0, 0xd, 0x81, 0xc2, 0x1, 0xa}, {0xc51, 0xd88, 0x7, 0x4965, 0x1, 0x6b7}, {0xfffffffd, 0x5, 0x10000, 0x4, 0xb, 0x200}, {0x5, 0x8, 0x1, 0x5, 0x6, 0x2}, {0x80000001, 0x8a59, 0x9f, 0x1a4, 0x200, 0x7}, {0x100, 0x3, 0x1, 0x9, 0x7fff, 0x8}, {0x401, 0x1000009, 0x0, 0x5, 0x4, 0x2}, {0xcfa, 0x6, 0x9, 0x4, 0x3, 0xfff}, {0x7, 0x2, 0x3ff, 0xa31, 0x7, 0x9}, {0x86da, 0x7, 0xcd2, 0x7fffffff, 0x8, 0xfffffffa}, {0x7e, 0xa, 0xb, 0x0, 0x5, 0x1}, {0x7, 0xffff, 0x5, 0x7, 0x101, 0x2}, {0xfffffffe, 0x6, 0x2, 0x134d, 0x2, 0xfffffffa}, {0x3, 0x10001, 0xfffffff8, 0x4, 0x4, 0x80000001}, {0xfff, 0xfffffffe, 0x1000, 0x64, 0x8000, 0xfffffe00}, {0x0, 0x2, 0x0, 0x1, 0x8, 0x5}, {0xffffffff, 0x2, 0x8, 0x7f, 0xfffffff8, 0x3}, {0x9, 0x3, 0xfffffe01, 0xc, 0xffff8001, 0x8}, {0x8, 0xe83, 0x6, 0x1ff, 0x9, 0x30}, {0x0, 0x1, 0x7f, 0x0, 0x4, 0xc86a}, {0x1, 0x2, 0x1, 0x40e, 0x8, 0x6}, {0x3ff, 0x3, 0xfffffffb, 0x9, 0x1, 0xfffffffb}, {0x8, 0xcd, 0xf28, 0x401, 0x5, 0x100}, {0x9, 0x7, 0x9, 0x7f, 0x4, 0xa}, {0xfffffffc, 0x52d, 0x7f, 0x0, 0xfffffffc}, {0x4, 0x7, 0x1ff, 0x8, 0x9cc, 0x976}, {0x200, 0x1, 0xffffff34, 0x0, 0x5, 0x3}, {0x3cee, 0x4, 0xc89, 0xfffffffa, 0x10001, 0x29}, {0x6, 0x400, 0x8, 0x7ff, 0x8000, 0xffff}, {0x15d, 0x3, 0x4, 0x6, 0x19b, 0xf9d}, {0x2, 0x1, 0xfffffe01, 0x1000, 0x6, 0x7fff}, {0x9d, 0x1000, 0x83b3, 0xfffffffa, 0x7, 0x8000}, {0x6, 0x0, 0x2, 0x8, 0x3, 0x1}, {0x8, 0x1, 0x3ff, 0x200, 0xff, 0x90}, {0xe, 0x80000000, 0x3, 0x3890000, 0xb3bd, 0x8}, {0xc0, 0x3, 0x9, 0x9, 0x8, 0x6}, {0x0, 0x4, 0x6, 0x9, 0x8, 0x2}, {0xffff37ee, 0x2b4, 0x3, 0x4, 0x2, 0x7ff}, {0x3, 0xffffffff, 0x0, 0x14, 0x79, 0x6}, {0x40, 0x5, 0xaf6, 0xda, 0x9, 0x3}, {0x3, 0x1, 0xfe, 0xcc, 0x8, 0x7}], [{0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2}, {0x3}, {0x4}, {0x2}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x353fdc7ea0a5bddc}, {0x4}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x1}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x6}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3}, {0x1}, {0x3, 0x1}, {}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {0x1}, {0x2}, {0x2}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x5}, {0x3}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x2}, {0x1}, {0x1}, {0x3, 0x1}, {0x1}, {0x4}, {0x6e1c3aa66a9561b7}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x3}, {0x7}, {0x2}, {0x1, 0x1}, {0x1}, {0x30b048410d22b51a}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x2be5b4c1be2e5c88}, {0x1, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x6fe833510bb4c854}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x4}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x2}, {0x2, 0x1}, {0x2}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x5}, {0x5, 0x1}], 0x1}}]}, {0x89, 0x6, "c3f5fcb6578857279d9133a076b10b489671914bd919f378142daa66c48d5d160ed7ff05dc9165fa65824267a44dfef706974f0ba959d7df2edc25139203ea5d3bef0bcbd3992c1d8e5faaebac942668c63c7f4460d9878db2516688ec4b7c428c395145dba880f99d14e915f521f20d148511949bf925a32b4e8b5cd2c6494118399ac35f"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x5}]}}, @TCA_CHAIN={0x8, 0xb, 0xfffff000}]}, 0x1ed0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x8, &(0x7f0000000800)=ANY=[@ANYRESOCT=r3, @ANYBLOB="2b9d0478db07ef987a5373f29640851bebf02ea75a6e9073ee2cdc907558c41f263210c9f3dc589786a629aa36c98a149062eedf58380e7dae95d8f906614138fc4ed27985bbdc380fea1336f7cfb12e200d0e480702b9aaa9146400114b4c33b47fb353fd451e33d05679f59710733af3407d6f0982848016bcb6", @ANYBLOB="56d28ded7f70569aa0dbb2898da807965c6178d0f237cb066482653b6b2b5b273b4d24277c93dfde8f5d6deb2295dd578af6c79f12b3ea146c3e6857539027cd3dc014b7d6478e0788c3454d7b185629376a9eb078ca6170f194d8c222f06f0fad670c23433f8ee7fa30ed7eb22ee1848aaa565c9ad59f270a42b38d0e6c1acaa915b348d2e93af8d10b513d823b9b2f2a11e05e7880994cabf78b1f976422ca40ffcee45feba43caf7b90028292498142f0c92e6d5225b465597c4284e8ab2891b356fed9e487cde2ea31c214aee730fbc759d6aaab6d7341f45f0b7cd65a5406d2ca005817bdc6e9867d9389e5", @ANYRES64=r0, @ANYRES16=r1, @ANYRESOCT=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xdffffffe}, 0x94) r5 = semget$private(0x0, 0x4, 0x60e) semctl$SETALL(r5, 0x0, 0x11, &(0x7f00000001c0)=[0x5191, 0xd, 0x200, 0xf89]) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000180)={0x400000000000000, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="020f000007000000000000000000000005ebfd37680000000a000004000000000000000000000000000000000000000000000000000000006ff1c3f9a8b3864e39d7b25923ff3e09c4de758187d2a0d6d553ac2cd43399d5d8e7"], 0x38}}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) r9 = socket$netlink(0x10, 0x3, 0x4) writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) sendmsg$key(r7, &(0x7f0000002a00)={0x0, 0x0, &(0x7f00000029c0)={&(0x7f0000002940)=ANY=[@ANYBLOB="020a0709072100002bbd7000fddbdf2505001a08ac1414bb000000000000000000000000fe80000000000000000000000000000c260014ca"], 0x38}}, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) syz_io_uring_setup(0x78cd, 0x0, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0, 0x0) syz_io_uring_submit(r10, r11, 0x0, 0x0) r12 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r12, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) setsockopt$sock_int(r12, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r12, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r12, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 2.45645438s ago: executing program 1 (id=468): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000080)=0x80000003) r3 = dup2(r2, r2) read$FUSE(r3, &(0x7f00000063c0)={0x2020}, 0x2020) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595d, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000480)={0x1e8, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x1bc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x458}, @ETHTOOL_A_BITSET_BITS={0x1ac, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x15c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '\xf7}a\xf7\x16\x9d%,\xf9'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x113, 0x2, 'veth0_to_bond\x00\xb7\x00\xac\xa4\x84\x99\xca\x8c\x7f\x9d\xb5\xbb\xfc\xd4\xe388\xbcK\xbeT\xd3\xdaMJ\xa0\xe1 \x92aZ\x1b-\xabO\xe3\xa0\xab\xb4>\x9f\xf8(\x91&\xcci\xe6A\x83\xf7\xa7\x00k\xb4\xa0\x9c\xdb\xb5k\xd7\xae^\"\xec\xdf\xb6\xc7\x94\x91\x03\x82\xa0\x13\x1c!G\x89}H\xd5\r\xdc\x04?\xfe#a\xed\t\x9d!Y\xc1\xb3#T\x88\xe2S\xa8\xb3\xd9\xf9\xcdS\xadZ{JBi\xa8\xa2Q{\xc6vB\x9c\x87\xd5\x03\xef\xd8\x84\x1dD\xaaR\nIE\xa7y \xcd0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r4, 0x84, 0x16, 0x0, &(0x7f0000000180)=0x600) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r8, 0xc008ae88, &(0x7f0000000200)={0x1, 0x0, [{0x40000022}]}) r9 = socket$inet_udp(0x2, 0x2, 0x0) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read(r10, &(0x7f0000000140)=""/78, 0x4e) ioctl$TCSETAW(r10, 0x5407, &(0x7f0000000100)={0xa, 0x7, 0x3, 0xe0, 0x19, "000000001600"}) ioctl$TIOCMSET(r10, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x42002, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x18, 0x14, 0x1, 0x4, 0x0, {0x2, 0x18, 0x10, 0x0, r11}}, 0x18}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="4805000015", 0x5}], 0x1) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x200000000622c, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000340)={@random="5bb65d3f2511", @local, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0xe, 0x2c, 0x65, 0x0, 0x3, 0x11, 0x0, @empty=0x18, @multicast1}, {0x4e20, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xf, 0x1}}}}}}, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) 2.168601874s ago: executing program 3 (id=470): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0xe1000d00) r1 = inotify_init1(0x800) inotify_add_watch(r1, &(0x7f0000000040)='.\x00', 0xc0000484) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000400)='.\x00', 0xa4000021) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'xfrm0\x00', 0x2}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0x7}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r7 = syz_open_dev$video4linux(&(0x7f0000000180), 0x7, 0x20000) ioctl$VIDIOC_SUBDEV_G_SELECTION(r7, 0xc040563d, &(0x7f0000000300)={0x0, 0x0, 0x2, 0x0, {0x8, 0x0, 0x9, 0x109a}}) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r3}, 0x8) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x20, &(0x7f0000000480)={&(0x7f0000000280)=""/83, 0x53, 0x0, &(0x7f0000000400)=""/109, 0x6d}}, 0x10) r11 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r11, 0x0, 0x30, &(0x7f0000000200)="17000000020001000003d68c5ee17688a2003208020300ecff3f02004816c23b4f664336c026b6adb8245bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba00084002", 0x1fffc) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007baaf8ff00000000b5090800000000007baaf0ff00000000bf8700000000000007070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7050000080000004600000076000000bf98000000000000be08f0ff000000008500000007000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0xb, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r12, 0xffffffffffffffff, 0x31, 0x0, @void}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newtfilter={0x34, 0x2c, 0x100, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x10}, {0x0, 0x1}, {0xffff}}, [@TCA_CHAIN={0x8, 0xb, 0xc}, @TCA_CHAIN={0x8, 0xb, 0x897}]}, 0x34}, 0x1, 0x0, 0x0, 0x40085}, 0x4010001) r13 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_UNREGISTER(r13, 0x8010aa01, &(0x7f0000000140)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) 1.940320185s ago: executing program 3 (id=471): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000780)={r1, 0x500}, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], 0x0, 0x0) 1.844361893s ago: executing program 3 (id=472): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8d}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x80, 0x6, 0xc}) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/fs/nfs', 0x0, 0x3a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) close(0x3) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e23, @local}]}, &(0x7f0000000140)=0x10) connect$pppl2tp(r7, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r6, 0x21, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_KEY(r9, &(0x7f0000000180)={0x0, 0xff26, &(0x7f0000000140)={&(0x7f0000000500)={0x28, r5, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_TYPE={0x0, 0x37, 0x2}]}, 0x28}}, 0x48000) getdents64(r4, &(0x7f0000000180)=""/206, 0xce) mknodat$null(r4, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, 0x103) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000000280)={@l2={0x1f, 0x2, @none, 0x1, 0x2}, {&(0x7f0000000040)=""/64, 0x40}, &(0x7f0000000080), 0x4b}, 0xa0) r10 = fcntl$getown(r9, 0x9) syz_open_procfs$pagemap(r10, &(0x7f0000000100)) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmmsg$inet6(r0, &(0x7f0000004540)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e24, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x5}, 0x1c, &(0x7f0000002c40)=[{&(0x7f0000000240)="d946299a", 0x4}], 0x1}}], 0x2, 0x20040010) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x14) 1.700915476s ago: executing program 0 (id=473): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0xf4db158ec847dc81, 0x70bd2a, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x17}, [@FRA_GENERIC_POLICY=@FRA_FWMARK={0x8, 0xa, 0x10000}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x639, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x40008c0) (fail_nth: 14) 1.593078624s ago: executing program 2 (id=474): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000018105704da0700000000000109022400010000ba0009040000090300000009210000000122220009058103"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x14, 0xa, 0x1, 0xc, [{@dev={0xac, 0x14, 0x14, 0x19}}, {@empty, 0x4d2}]}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xfffe}}}}}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022220000009523b3"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45}, 0x48) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/config', 0x0, 0x0) fchown(r1, 0x0, 0xffffffffffffffff) syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x14e040) 1.464121485s ago: executing program 0 (id=475): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x2ad, 0x0, 0xfffffffd, 0x9}, 0x10) write(r0, &(0x7f00000000c0)="1800000016005f0214fffffffffffff8070000002d000000", 0x18) r1 = syz_open_dev$swradio(&(0x7f0000000300), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000340)={0x3, 0x0, 0x2019, 0x8, 0x2, 0x1, 0x2, 0x1}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$drirender128(0xffffff9c, &(0x7f0000000100), 0x101400, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x6, 0x6, 0x8}) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000280)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f00000002c0)={r4, 0x80000}) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c000000020401010000000000000000080000000500040000000000f8ff010073797a30580636027eb3d56fbe798492f0eb000000000500010007000000050005000a0000000c000780080012400000ffff16000300686173683a122a0fa41a843e9d32884aca6e65742c70"], 0x5c}}, 0x0) 1.302542717s ago: executing program 4 (id=476): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) openat$sndseq(0xffffff9c, 0x0, 0x111340) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@getchain={0x2c, 0x66, 0x400, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x10, 0xa}, {0xfff2, 0x1}, {0x5, 0x8}}, [{0x8, 0xb, 0x9}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001380)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x4}, {}, {0xd, 0x8}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x0, 0x6, 0x4, 0x101, 0x4, 0xe, 0x7, 0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x4000) r3 = socket$kcm(0x29, 0x5, 0x0) sendmmsg$inet(r3, &(0x7f0000001800)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x56}}], 0x2, 0x20008081) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') lseek(r4, 0x1000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0xff03, 0x110c230102) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r7 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, r11, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x1000, 0x0, 0x1f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x400000, 0x8280, 0x1, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x51, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) r13 = syz_io_uring_setup(0x35d3, &(0x7f0000000400)={0x0, 0x5962, 0x10000, 0x1, 0x52}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r14, r15, r16, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x8, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x0, 0x1, {0x2, 0x0, 0x0, '\x00', &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}, 0x1}}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r12, 0x40189429, &(0x7f0000000300)={0x0, 0x9, 0xe}) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000000f06010300000000000000000700000305000100070000008d72c3232741bf98dee3766da5cafb796d45b5a8643f"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x8004) io_uring_enter(r13, 0x2000, 0xfffffffd, 0x9, 0x0, 0x20) 1.241089014s ago: executing program 0 (id=477): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x2, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x14, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in=@rand_addr=0x64010102, @in6=@empty, @in6=@remote, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.063949792s ago: executing program 0 (id=478): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20"], 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x810) r4 = socket$nl_generic(0x10, 0x3, 0x10) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000340)=[{0x20, 0xc, 0x77, 0xfffff010}, {0x28, 0x0, 0x0, 0xfffff024}, {0x6, 0x0, 0x0, 0x2}]}, 0x8) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D'], 0x44}}, 0x28000) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4002}, [@call={0x85, 0x0, 0x0, 0x11}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffff7}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x5c, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x80000000, 0x0, 'queue0\x00', 0x132a}) socket$nl_netfilter(0x10, 0x3, 0xc) write$sndseq(r3, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x48, 0x2, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0xc, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8, 0x3, 0x1, 0x0, 0x1}]}}, @CTA_LABELS={0x14, 0x16, 0x1, 0x0, [0x3, 0x32, 0x5, 0x80000000]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x9}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) close_range(r2, 0xffffffffffffffff, 0x400000000000000) sendto$inet6(r0, &(0x7f0000001b00)="a6", 0x1, 0x4000005, &(0x7f0000000140)={0xa, 0x4001, 0xfffc, @dev={0xfe, 0x80, '\x00', 0x1f}, 0xfffffffd}, 0x1c) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0xeb) read$char_usb(r6, &(0x7f00000000c0)=""/112, 0x70) 1.016126864s ago: executing program 4 (id=479): r0 = openat$drirender128(0xffffff9c, &(0x7f0000000040), 0x20801, 0x0) ioctl$DRM_IOCTL_PANTHOR_VM_CREATE(r0, 0xc0106441, &(0x7f0000000080)={0x0, 0x0, 0x6}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) openat$vicodec0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c000000100001040000000000dcb0b93d000000", @ANYRES32=r4, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000500070000000500", @ANYRES8=r2], 0x7c}}, 0x0) (fail_nth: 6) sendmsg$nl_route(r1, 0x0, 0x0) 972.996624ms ago: executing program 0 (id=480): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x2, 0x0) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x10009, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000002c0)={0x5}) fcntl$getown(r0, 0x9) 852.331032ms ago: executing program 4 (id=481): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(r1, 0x3, &(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480540001800a0001006d617463680000004400028008000240000000002c0003000a000000010000004d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad0a0001006c696d69740000000900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x8010}, 0x404c040) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$TIPC_NODE_RECVQ_DEPTH(r3, 0x10f, 0x83, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000002700)={{0x2, 0x4e21, @multicast1}, {0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0xa, {0x2, 0x4e22, @multicast1}, 'syzkaller0\x00'}) 756.775514ms ago: executing program 1 (id=482): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) socket(0x10, 0x3, 0x0) r3 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000010c0)={0xfffd, 0x478, 0x1ff, 0xce}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000001040)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0xc) getsockopt$bt_hci(r3, 0x84, 0x82, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006) sendmsg$nl_route_sched(r3, 0x0, 0x20040085) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000540)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x30}}]}, &(0x7f0000000380)=0xffffffffffffff33) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000000)={r7, 0x1000, 0x6ffd, 0x6}, 0x10) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140)) timer_delete(0x0) r8 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r9 = fsopen(&(0x7f0000000400)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000040)='source', &(0x7f0000000b40)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>\xbcc\x84\xfe\xb3hOB\xdc4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8bZ\xec\x16\x9e[\xfe\x0f\x15\x81\x9cWC\xd2\x1f\xf0\xf2M24\xc3\x14B\xa7\x05\xd6(/&{\x9fl\x90\xbcM\xa4d\xa5\x8c\xcej\x1czTj\xa1G\xc1\xc4P\x88\"\xb5\xda6d\x04+\xd9\x0fw*FB\xa7\x8d\xfb\x15\rw\xf6c\x8a\xc2\xbeZ\xb2\xe8q\xde\xbe^\x91\x81\x16\x95b\xbad\x90.\x10\xc5e\xa7\xac\x9dQfTi\xdfB\x9b\xc7\x9c\xd7yN2\x83.F\x866\xc6/\xf8d<\x0eA\xf8s\x8b\xc5\x1b\xb9\f\x82', 0x0) r10 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r8) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000780)={r10, 0x500}, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], 0x0, 0x0) pwritev(r4, &(0x7f00000012c0), 0x0, 0x0, 0x80000) fsopen(&(0x7f0000000100)='ceph\x00', 0x0) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="057fe9037e00193275"], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x24000084) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r12, 0xae60) 750.925986ms ago: executing program 0 (id=483): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = memfd_create(&(0x7f0000000280)='-E\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2va}knh\x02\x00)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xdde)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN.%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x6) r2 = socket(0x10, 0x80002, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e140000001a00ffffba16a0aa1c091dbfa1090000", 0x38}], 0x1}, 0x0) r3 = dup(r1) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e22}, 0x6e) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000400)={0x6, 0x1060, 0x1, 0x5, 0xf, 0x4fa8}) bind$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f00000004c0)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0xf, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0001400200000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r7, 0x84, 0x14, &(0x7f00000001c0)="020000000980ffff", 0x8) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000000)={0x8001, 0x80000, r7}) write$P9_RSTAT(r8, &(0x7f0000000440)=ANY=[@ANYBLOB="4b0000007d010000004400400000800000200400000004000000000000c1000000000000000065000000070000000000000005002f2b2c257b0100000500aaaaaaaaaa06005e2d5b2c3a2ba63f5bce3e207e92a2cd7a92b2a9ada9"], 0x4b) listen(r6, 0x1) syz_emit_ethernet(0x56, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60000100002006fffe8000000000000000000000000000bbfe8000000000000000000000000000aa12344e22", @ANYRES32=0x10002000, @ANYRES32=0x0, @ANYBLOB="b6ec100090780000fe06e2d4c3d9020480000000"], 0x0) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r8) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x3000) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f0000000240)={0x60, r9, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xffff}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xb8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4004}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xf4}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x40) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a310000000024000000030a5a87f58be9ffffff00000a0000070900010073797a31000000000900030073797a32000000ffffa5175a864e690cdfcffe000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x2000c881}, 0x40d4) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4001}]}], {0x14}}, 0x60}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'LOG\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x88}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x21}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4000850}, 0x4050) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240001000000000904000002214c6a0009050702000000da00090589"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60000100001406fffe8000000000000000000200000000bbfe800000000000000000000000000012344e22742d600ff040f58952c63f23", @ANYRES32=0x10002001, @ANYRES32=0x41424344, @ANYBLOB="5010100090780000"], 0x0) 564.532086ms ago: executing program 4 (id=484): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mremap(&(0x7f0000a66000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000056000/0x2000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = fsopen(&(0x7f0000000100)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r3 = socket(0x10, 0xa, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000012005783"], 0x24}}, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @empty}}, 0xe4b, 0x8, 0x8000, 0x1, 0x10, 0x1, 0xe}, 0x9c) socket$rds(0x15, 0x5, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYRESOCT=r3, @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000b6594645fb6682997e13cf213559e2a9debb4868"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000580), 0x2000cc0, r5}, 0x38) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000480)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001a", 0x23}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 0s ago: executing program 3 (id=485): syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) r0 = openat$vim2m(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0xc04c561a, &(0x7f0000000000)=0x3) kernel console output (not intermixed with test programs): interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 159.214492][ T6789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.483750][ T6907] loop5: detected capacity change from 0 to 7 [ 159.508724][ T6789] hsr_slave_0: entered promiscuous mode [ 159.527597][ T6789] hsr_slave_1: entered promiscuous mode [ 159.535295][ T6789] debugfs: 'hsr0' already exists in 'hsr' [ 159.535592][ T6789] Cannot create hsr debugfs directory [ 159.591596][ T6907] Dev loop5: unable to read RDB block 7 [ 159.591656][ T6907] loop5: unable to read partition table [ 159.591882][ T6907] loop5: partition table beyond EOD, truncated [ 159.591913][ T6907] loop_reread_partitions: partition scan of loop5 (þ被xüŸâ·û) failed (rc=-5) [ 159.826650][ T6892] netlink: 4 bytes leftover after parsing attributes in process `syz.3.269'. [ 160.488836][ T5616] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 160.600013][ T5279] 8021q: adding VLAN 0 to HW filter on device eth2 [ 160.613559][ T6930] random: crng reseeded on system resumption [ 160.641943][ T5616] usb 3-1: Using ep0 maxpacket: 32 [ 160.642882][ T5616] usb 3-1: New USB device found, idVendor=09e8, idProduct=0021, bcdDevice= 0.40 [ 160.647727][ T5616] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 132, changing to 7 [ 160.664508][ T5616] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.664536][ T5616] usb 3-1: Product: syz [ 160.664549][ T5616] usb 3-1: Manufacturer: syz [ 160.664563][ T5616] usb 3-1: SerialNumber: syz [ 160.728628][ T5621] Bluetooth: hci1: command tx timeout [ 161.005034][ T5616] usb 3-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 161.005121][ T5616] usb 3-1: MIDIStreaming interface descriptor not found [ 161.282929][ T5616] usb 3-1: USB disconnect, device number 19 [ 161.296288][ T5827] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 161.456463][ T5629] udevd[5629]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 161.474688][ T5827] usb 4-1: Using ep0 maxpacket: 32 [ 161.482155][ T5827] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 161.493137][ T5827] usb 4-1: config index 0 descriptor too short (expected 19, got 18) [ 161.509336][ T5827] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.509381][ T5827] usb 4-1: Product: syz [ 161.509429][ T5827] usb 4-1: Manufacturer: syz [ 161.509448][ T5827] usb 4-1: SerialNumber: syz [ 161.539723][ T5827] usb 4-1: config 0 descriptor?? [ 161.559515][ T5827] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 161.568071][ T5827] dvb-usb: bulk message failed: -22 (2/0) [ 161.597558][ T5827] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 161.608169][ T5827] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 161.616507][ T5827] usb 4-1: media controller created [ 161.653236][ T5827] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 161.696089][ T5827] usb 4-1: selecting invalid altsetting 7 [ 161.702239][ T5827] cxusb: set interface failed [ 161.702292][ T5827] dvb-usb: bulk message failed: -22 (1/0) [ 161.754628][ T5827] DVB: Unable to find symbol lgdt330x_attach() [ 161.754668][ T5827] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 161.777378][ T6789] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 161.791532][ T6934] cxusb: i2c rd: len=87 is too big! [ 161.791532][ T6934] [ 161.813457][ T6789] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 161.822105][ T6789] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 161.875108][ T6789] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 161.882784][ T6789] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 161.925884][ T6789] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 161.927210][ T6789] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 162.004103][ T6789] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 162.088780][ T5827] rc_core: IR keymap rc-dvico-portable not found [ 162.088958][ T5827] Registered IR keymap rc-empty [ 162.103831][ T5827] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 162.117910][ T5827] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input19 [ 162.132177][ T5827] dvb-usb: schedule remote query interval to 100 msecs. [ 162.140724][ T5827] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 162.250670][ T5827] dvb-usb: bulk message failed: -22 (1/0) [ 162.256426][ T6953] set match dimension is over the limit! [ 162.342903][ T6967] netlink: 4 bytes leftover after parsing attributes in process `syz.2.279'. [ 162.368773][ T5827] dvb-usb: bulk message failed: -22 (1/0) [ 162.490921][ T5827] dvb-usb: bulk message failed: -22 (1/0) [ 162.510943][ T6789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.552632][ T6789] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.609945][ T5827] dvb-usb: bulk message failed: -22 (1/0) [ 162.617369][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.617508][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.640328][ T5616] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 162.674068][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.674204][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.719584][ T5827] dvb-usb: bulk message failed: -22 (1/0) [ 162.807099][ T5616] usb 3-1: Using ep0 maxpacket: 8 [ 162.814382][ T5616] usb 3-1: unable to get BOS descriptor or descriptor too short [ 162.814454][ T5616] usb 3-1: New USB device found, idVendor=05ac, idProduct=1240, bcdDevice= 0.3c [ 162.820211][ T5616] usb 3-1: config 0 has no interfaces? [ 162.829682][ T5616] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.829710][ T5616] usb 3-1: Product: syz [ 162.829723][ T5616] usb 3-1: Manufacturer: syz [ 162.829735][ T5616] usb 3-1: SerialNumber: syz [ 162.842800][ T5616] apple-mfi-fastcharge 3-1: config 0 descriptor?? [ 162.866713][ T5827] dvb-usb: bulk message failed: -22 (1/0) [ 162.968695][ T5827] dvb-usb: bulk message failed: -22 (1/0) [ 163.023150][ T5827] usb 4-1: USB disconnect, device number 15 [ 163.059051][ T6976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.282'. [ 163.071465][ T6789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.185679][ T44] apple-mfi-fastcharge 3-1: USB disconnect, device number 20 [ 163.231195][ T5827] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 163.310541][ T6789] veth0_vlan: entered promiscuous mode [ 163.335058][ T6789] veth1_vlan: entered promiscuous mode [ 163.417981][ T6789] veth0_macvtap: entered promiscuous mode [ 163.446462][ T6789] veth1_macvtap: entered promiscuous mode [ 163.513544][ T6789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.566730][ T6789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.639108][ T50] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.639180][ T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.639213][ T50] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.639243][ T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.027576][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.027629][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.066063][ T30] kauditd_printk_skb: 201 callbacks suppressed [ 164.066141][ T30] audit: type=1326 audit(1788384027.226:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7003 comm="syz.2.288" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 164.069548][ T30] audit: type=1326 audit(1788384027.226:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7003 comm="syz.2.288" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 164.071604][ T30] audit: type=1326 audit(1788384027.236:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7003 comm="syz.2.288" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 164.072225][ T30] audit: type=1326 audit(1788384027.236:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7003 comm="syz.2.288" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 164.072422][ T30] audit: type=1326 audit(1788384027.236:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7003 comm="syz.2.288" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=469 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 164.072649][ T30] audit: type=1326 audit(1788384027.236:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7003 comm="syz.2.288" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 164.074485][ T30] audit: type=1326 audit(1788384027.236:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7003 comm="syz.2.288" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 164.075218][ T30] audit: type=1326 audit(1788384027.236:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7003 comm="syz.2.288" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=372 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 164.131592][ T763] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.131616][ T763] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.201386][ T44] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 164.350549][ T44] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 164.350629][ T44] usb 5-1: too many configurations: 211, using maximum allowed: 8 [ 164.351877][ T44] usb 5-1: config index 0 descriptor too short (expected 71, got 45) [ 164.356867][ T44] usb 5-1: config index 1 descriptor too short (expected 71, got 45) [ 164.363456][ T44] usb 5-1: config index 2 descriptor too short (expected 71, got 45) [ 164.366742][ T44] usb 5-1: config index 3 descriptor too short (expected 71, got 45) [ 164.377173][ T44] usb 5-1: config index 4 descriptor too short (expected 71, got 45) [ 164.382008][ T44] usb 5-1: config index 5 descriptor too short (expected 71, got 45) [ 164.383272][ T44] usb 5-1: config index 6 descriptor too short (expected 71, got 45) [ 164.394444][ T44] usb 5-1: config index 7 descriptor too short (expected 71, got 45) [ 164.399938][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.399965][ T44] usb 5-1: Product: syz [ 164.399979][ T44] usb 5-1: Manufacturer: syz [ 164.399991][ T44] usb 5-1: SerialNumber: syz [ 164.438921][ T7000] netlink: 'syz.3.286': attribute type 4 has an invalid length. [ 164.621732][ T7010] bridge_slave_0: left allmulticast mode [ 164.623916][ T7010] bridge_slave_0: left promiscuous mode [ 164.624208][ T7010] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.691993][ T7010] bridge_slave_1: left allmulticast mode [ 164.692061][ T7010] bridge_slave_1: left promiscuous mode [ 164.698307][ T7010] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.738343][ T7010] bond0: (slave bond_slave_0): Releasing backup interface [ 164.780852][ T7010] bond0: (slave bond_slave_1): Releasing backup interface [ 164.806553][ T7010] team0: Port device team_slave_0 removed [ 164.825610][ T7010] team0: Port device team_slave_1 removed [ 164.827554][ T7010] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.827577][ T7010] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.852647][ T7010] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.852736][ T7010] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.870881][ T7010] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 164.937565][ T7015] syzkaller1: entered promiscuous mode [ 164.937620][ T7015] syzkaller1: entered allmulticast mode [ 164.981341][ T5616] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 165.070662][ T44] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 165.070820][ T44] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 165.131409][ T5616] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 165.166955][ T5616] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.167024][ T5616] usb 2-1: Product: syz [ 165.167059][ T5616] usb 2-1: Manufacturer: syz [ 165.167099][ T5616] usb 2-1: SerialNumber: syz [ 165.181052][ T5616] usb 2-1: config 0 descriptor?? [ 165.748791][ T5801] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 165.833214][ T5616] usb 2-1: Firmware version (0.0) predates our first public release. [ 165.833255][ T5616] usb 2-1: Please update to version 0.2 or newer [ 165.834981][ T5616] usb 2-1: Firmware: build ú×í–ÅF«ÇøÒKRw·2 -vû9} [ 165.898670][ T5801] usb 3-1: Using ep0 maxpacket: 8 [ 165.900279][ T5801] usb 3-1: New USB device found, idVendor=07c9, idProduct=000f, bcdDevice=e1.a3 [ 165.901668][ T5801] usb 3-1: config 5 has an invalid interface number: 149 but max is 0 [ 165.901691][ T5801] usb 3-1: config 5 has no interface number 0 [ 165.901725][ T5801] usb 3-1: config 5 interface 149 has no altsetting 0 [ 165.904313][ T5801] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.904334][ T5801] usb 3-1: Product: syz [ 165.904348][ T5801] usb 3-1: Manufacturer: syz [ 165.904394][ T5801] usb 3-1: SerialNumber: syz [ 166.064777][ T5616] usb 2-1: USB disconnect, device number 17 [ 166.180248][ T44] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPROTO [ 166.180362][ T44] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 166.193174][ T44] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 166.223206][ T44] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 166.246382][ T44] usb 5-1: USB disconnect, device number 13 [ 166.720455][ T44] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 166.870013][ T44] usb 4-1: Using ep0 maxpacket: 32 [ 166.871531][ T44] usb 4-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice=9a.c8 [ 166.877107][ T44] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 166.877132][ T44] usb 4-1: config 4 has 1 interface, different from the descriptor's value: 3 [ 166.886352][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.886387][ T44] usb 4-1: Product: syz [ 166.886400][ T44] usb 4-1: Manufacturer: syz [ 166.886440][ T44] usb 4-1: SerialNumber: syz [ 167.119178][ T7047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.131233][ T7047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.496652][ T5801] ax88179_178a 3-1:5.149: probe with driver ax88179_178a failed with error -22 [ 167.524493][ T44] usb 4-1: USB disconnect, device number 16 [ 167.536185][ T5801] usb 3-1: USB disconnect, device number 21 [ 167.701614][ T42] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 167.719631][ T7062] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 168.015263][ T7079] batman_adv: batadv0: Removing interface: dummy0 [ 168.030438][ T7079] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 168.470655][ T7089] netlink: 'syz.0.306': attribute type 29 has an invalid length. [ 168.484788][ T7089] netlink: 'syz.0.306': attribute type 29 has an invalid length. [ 168.589407][ T44] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 168.690845][ T7097] random: crng reseeded on system resumption [ 168.740545][ T44] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 168.741550][ T44] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 168.741574][ T44] usb 5-1: config 1 has no interface number 0 [ 168.743641][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.743663][ T44] usb 5-1: Product: syz [ 168.743676][ T44] usb 5-1: Manufacturer: syz [ 168.743689][ T44] usb 5-1: SerialNumber: syz [ 168.758961][ T5801] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 168.764201][ T44] usb 5-1: 3:1 : does not exist [ 168.764223][ T44] usb 5-1: 3:2 : does not exist [ 168.908889][ T5801] usb 2-1: Using ep0 maxpacket: 8 [ 168.909658][ T5801] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 168.912362][ T5801] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 168.912412][ T5801] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 168.912433][ T5801] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 168.912455][ T5801] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 168.912476][ T5801] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 168.912514][ T5801] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.940243][ T5803] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 168.964460][ T5827] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 168.995902][ T44] usb 5-1: USB disconnect, device number 14 [ 169.122775][ T5803] usb 3-1: Using ep0 maxpacket: 16 [ 169.123575][ T5803] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 169.130549][ T5803] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.130576][ T5803] usb 3-1: config 0 has no interfaces? [ 169.130605][ T5803] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.145160][ T5803] usb 3-1: config 0 descriptor?? [ 169.153099][ T5801] usb 2-1: usb_control_msg returned -32 [ 169.153153][ T5801] usbtmc 2-1:16.0: can't read capabilities [ 169.189796][ T5827] usb 1-1: unable to get BOS descriptor or descriptor too short [ 169.199115][ T5827] usb 1-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 169.212008][ T5827] usb 1-1: config 1 has an invalid descriptor of length 197, skipping remainder of the config [ 169.222830][ T5827] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 169.235171][ T5827] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.243609][ T5827] usb 1-1: Product: syz [ 169.248127][ T5827] usb 1-1: Manufacturer: syz [ 169.248149][ T5827] usb 1-1: SerialNumber: syz [ 169.359782][ T5828] usb 3-1: USB disconnect, device number 22 [ 169.546083][ T7110] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 169.597072][ T7095] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 169.815178][ T5827] usb 1-1: invalid UAC_HEADER (v1) [ 169.881340][ T5827] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 169.893887][ T5827] usb 1-1: USB disconnect, device number 18 [ 169.976924][ T5620] udevd[5620]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 170.191074][ T5827] usb 2-1: USB disconnect, device number 18 [ 170.240953][ T5828] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 170.399444][ T5828] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 170.410666][ T5828] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 170.419374][ T5828] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 170.419434][ T5828] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 170.419460][ T5828] usb 5-1: config 220 has no interface number 2 [ 170.419534][ T5828] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 170.419568][ T5828] usb 5-1: config 220 interface 0 has no altsetting 0 [ 170.419592][ T5828] usb 5-1: config 220 interface 76 has no altsetting 0 [ 170.419614][ T5828] usb 5-1: config 220 interface 1 has no altsetting 0 [ 170.488050][ T5828] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.488101][ T5828] usb 5-1: Product: syz [ 170.488134][ T5828] usb 5-1: Manufacturer: syz [ 170.488153][ T5828] usb 5-1: SerialNumber: syz [ 170.739970][ T5828] usb 5-1: selecting invalid altsetting 0 [ 170.740433][ T5828] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 170.740485][ T5828] uvcvideo 5-1:220.0: No valid video chain found. [ 170.780274][ T5828] usb 5-1: selecting invalid altsetting 0 [ 170.786199][ T5828] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 170.802856][ T5828] usb 5-1: USB disconnect, device number 15 [ 170.959040][ T5827] hid_parser_main: 1 callbacks suppressed [ 170.966633][ T5827] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 170.985690][ T5827] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 171.036972][ T7135] FAULT_INJECTION: forcing a failure. [ 171.036972][ T7135] name failslab, interval 1, probability 0, space 0, times 0 [ 171.054255][ T7135] CPU: 1 UID: 0 PID: 7135 Comm: syz.3.319 Not tainted syzkaller #0 PREEMPT(full) [ 171.054286][ T7135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 171.054297][ T7135] Call Trace: [ 171.054308][ T7135] [ 171.054317][ T7135] dump_stack_lvl+0xe8/0x150 [ 171.054350][ T7135] should_fail_ex+0x410/0x560 [ 171.054384][ T7135] should_failslab+0xa8/0x100 [ 171.054408][ T7135] __kmalloc_noprof+0xfe/0x720 [ 171.054435][ T7135] ? tomoyo_encode+0x2ad/0x570 [ 171.054453][ T7135] ? tomoyo_encode+0x2ad/0x570 [ 171.054480][ T7135] tomoyo_encode+0x2ad/0x570 [ 171.054507][ T7135] tomoyo_realpath_from_path+0x5fa/0x640 [ 171.054538][ T7135] ? tomoyo_path_number_perm+0x219/0x5f0 [ 171.054565][ T7135] tomoyo_path_number_perm+0x246/0x5f0 [ 171.054594][ T7135] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 171.054625][ T7135] ? kasan_save_track+0x4f/0x80 [ 171.054641][ T7135] ? kasan_save_track+0x3e/0x80 [ 171.054657][ T7135] ? kasan_save_free_info+0x40/0x50 [ 171.054679][ T7135] ? __kasan_slab_free+0x5c/0x80 [ 171.054696][ T7135] ? kmem_cache_free+0x182/0x650 [ 171.054746][ T7135] ? __pfx_current_check_access_path+0x10/0x10 [ 171.054785][ T7135] tomoyo_path_mknod+0x14a/0x1a0 [ 171.054807][ T7135] ? kasan_quarantine_put+0xbb/0x1f0 [ 171.054835][ T7135] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 171.054860][ T7135] ? start_creating_path+0xce/0x150 [ 171.054894][ T7135] security_path_mknod+0x176/0x370 [ 171.054919][ T7135] unix_bind+0x43e/0x1270 [ 171.054949][ T7135] ? tomoyo_socket_bind_permission+0x1ae/0x290 [ 171.054977][ T7135] ? __pfx_unix_bind+0x10/0x10 [ 171.055001][ T7135] ? bpf_lsm_socket_bind+0x9/0x20 [ 171.055026][ T7135] __sys_bind+0x2e3/0x410 [ 171.055055][ T7135] ? __pfx___sys_bind+0x10/0x10 [ 171.055101][ T7135] __ia32_sys_bind+0x7a/0x90 [ 171.055127][ T7135] __do_fast_syscall_32+0x27a/0x6a0 [ 171.055147][ T7135] ? do_fast_syscall_32+0x33/0x70 [ 171.055163][ T7135] ? asm_int80_emulation+0x1a/0x20 [ 171.055182][ T7135] ? do_int80_emulation+0x299/0x500 [ 171.055267][ T7135] ? trace_irq_disable+0x3b/0x140 [ 171.055289][ T7135] do_fast_syscall_32+0x33/0x70 [ 171.055307][ T7135] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 171.055328][ T7135] RIP: 0023:0xf7f960ec [ 171.055346][ T7135] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 171.055361][ T7135] RSP: 002b:00000000f545650c EFLAGS: 00000206 ORIG_RAX: 0000000000000169 [ 171.055383][ T7135] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000000 [ 171.055396][ T7135] RDX: 000000000000006e RSI: 0000000000000000 RDI: 0000000000000000 [ 171.055408][ T7135] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 171.055419][ T7135] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 171.055429][ T7135] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 171.055462][ T7135] [ 171.055588][ T7135] ERROR: Out of memory at tomoyo_realpath_from_path. [ 171.168690][ T44] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 171.320108][ T44] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 171.326703][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.326731][ T44] usb 2-1: Product: syz [ 171.326753][ T44] usb 2-1: Manufacturer: syz [ 171.326766][ T44] usb 2-1: SerialNumber: syz [ 171.342959][ T44] usb 2-1: config 0 descriptor?? [ 171.364061][ T44] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 171.798759][ T5801] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 171.878694][ T5827] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 171.929248][ T5801] usb 3-1: device descriptor read/64, error -71 [ 172.058624][ T5827] usb 5-1: Using ep0 maxpacket: 8 [ 172.064713][ T5827] usb 5-1: New USB device found, idVendor=413c, idProduct=81b1, bcdDevice=f1.8b [ 172.066649][ T5827] usb 5-1: config 9 has an invalid interface number: 82 but max is 0 [ 172.066674][ T5827] usb 5-1: config 9 has no interface number 0 [ 172.066700][ T5827] usb 5-1: config 9 interface 82 has no altsetting 0 [ 172.070174][ T5827] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.070196][ T5827] usb 5-1: Product: syz [ 172.070209][ T5827] usb 5-1: Manufacturer: é• [ 172.070222][ T5827] usb 5-1: SerialNumber: syz [ 172.085251][ T44] gspca_stk1135: reg_w 0x0 err -110 [ 172.086296][ T44] gspca_stk1135: serial bus timeout: status=0x00 [ 172.086311][ T44] gspca_stk1135: Sensor write failed [ 172.086340][ T44] gspca_stk1135: serial bus timeout: status=0x00 [ 172.086349][ T44] gspca_stk1135: Sensor write failed [ 172.086374][ T44] gspca_stk1135: serial bus timeout: status=0x00 [ 172.086384][ T44] gspca_stk1135: Sensor read failed [ 172.086410][ T44] gspca_stk1135: serial bus timeout: status=0x00 [ 172.086420][ T44] gspca_stk1135: Sensor read failed [ 172.086427][ T44] gspca_stk1135: Detected sensor type unknown (0x0) [ 172.086459][ T44] gspca_stk1135: serial bus timeout: status=0x00 [ 172.086469][ T44] gspca_stk1135: Sensor read failed [ 172.086495][ T44] gspca_stk1135: serial bus timeout: status=0x00 [ 172.086504][ T44] gspca_stk1135: Sensor read failed [ 172.086531][ T44] gspca_stk1135: serial bus timeout: status=0x00 [ 172.086541][ T44] gspca_stk1135: Sensor write failed [ 172.086565][ T44] gspca_stk1135: serial bus timeout: status=0x00 [ 172.086575][ T44] gspca_stk1135: Sensor write failed [ 172.086657][ T44] stk1135 2-1:0.0: probe with driver stk1135 failed with error -110 [ 172.243047][ T5801] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 172.267376][ T7164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.267965][ T7164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.276845][ T7164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.289916][ T7164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.331515][ T5827] usb 5-1: USB disconnect, device number 16 [ 172.378665][ T5801] usb 3-1: device descriptor read/64, error -71 [ 172.491301][ T5801] usb usb3-port1: attempt power cycle [ 172.519604][ T7169] netlink: 'syz.3.327': attribute type 4 has an invalid length. [ 172.841241][ T5801] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 172.869888][ T5801] usb 3-1: device descriptor read/8, error -71 [ 173.108995][ T5801] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 173.150129][ T5801] usb 3-1: device descriptor read/8, error -71 [ 173.242735][ T7189] syzkaller0: entered promiscuous mode [ 173.258946][ T5801] usb usb3-port1: unable to enumerate USB device [ 173.338676][ T5827] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 173.500493][ T5827] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 173.501857][ T5827] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.511212][ T5827] usb 4-1: config 0 descriptor?? [ 173.912292][ T5825] usb 2-1: USB disconnect, device number 19 [ 173.982463][ T5827] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 174.307585][ T7205] netlink: 'syz.1.338': attribute type 4 has an invalid length. [ 174.378787][ T5801] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 174.521498][ T5827] [drm:udl_init] *ERROR* Selecting channel failed [ 174.528648][ T5801] usb 1-1: Using ep0 maxpacket: 32 [ 174.546815][ T5801] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 174.565136][ T5801] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 174.575202][ T5801] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 174.587439][ T5801] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 174.587478][ T5801] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 174.587505][ T5801] usb 1-1: config 0 interface 0 has no altsetting 0 [ 174.628959][ T5801] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 174.629009][ T5801] usb 1-1: Product: syz [ 174.629048][ T5801] usb 1-1: Manufacturer: syz [ 174.629067][ T5801] usb 1-1: SerialNumber: syz [ 174.676115][ T5801] usb 1-1: config 0 descriptor?? [ 174.697324][ T5801] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 174.721750][ T5801] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 174.774395][ T5827] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1 [ 174.774467][ T5827] [drm] Initialized udl on minor 1 [ 174.832102][ T5827] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 174.881524][ T5827] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 174.937130][ T5827] usb 4-1: USB disconnect, device number 17 [ 175.097012][ T7208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.339'. [ 175.141027][ T7208] batman_adv: batadv0: Adding interface: dummy0 [ 175.141065][ T7208] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 175.141329][ T7208] batman_adv: batadv0: Interface activated: dummy0 [ 175.173054][ T7208] Set syz1 is full, maxelem 2 reached [ 175.235233][ T30] audit: type=1326 audit(1788384038.396:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7223 comm="syz.4.341" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 175.260406][ T30] audit: type=1326 audit(1788384038.396:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7223 comm="syz.4.341" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 175.260461][ T30] audit: type=1326 audit(1788384038.396:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7223 comm="syz.4.341" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 175.260537][ T30] audit: type=1326 audit(1788384038.396:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7223 comm="syz.4.341" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 175.260581][ T30] audit: type=1326 audit(1788384038.396:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7223 comm="syz.4.341" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 175.260625][ T30] audit: type=1326 audit(1788384038.396:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7223 comm="syz.4.341" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 175.260713][ T30] audit: type=1326 audit(1788384038.396:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7223 comm="syz.4.341" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 175.260756][ T30] audit: type=1326 audit(1788384038.396:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7223 comm="syz.4.341" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 175.260829][ T30] audit: type=1326 audit(1788384038.396:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7223 comm="syz.4.341" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 175.260873][ T30] audit: type=1326 audit(1788384038.396:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7223 comm="syz.4.341" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 175.406097][ T990] usb 1-1: USB disconnect, device number 19 [ 175.449023][ T990] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 175.748681][ T5801] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 175.898640][ T5801] usb 2-1: Using ep0 maxpacket: 32 [ 175.899533][ T5801] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 175.901186][ T5801] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 175.901232][ T5801] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 175.901287][ T5801] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 175.901319][ T5801] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 175.901359][ T5801] usb 2-1: config 0 interface 0 has no altsetting 0 [ 175.905927][ T5801] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 175.905952][ T5801] usb 2-1: Product: syz [ 175.905965][ T5801] usb 2-1: Manufacturer: syz [ 175.905978][ T5801] usb 2-1: SerialNumber: syz [ 175.916033][ T5801] usb 2-1: config 0 descriptor?? [ 175.933008][ T5801] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 175.981721][ T5801] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 176.204053][ T5352] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 176.234485][ T7228] netlink: 4 bytes leftover after parsing attributes in process `syz.4.341'. [ 176.358624][ T5352] usb 3-1: Using ep0 maxpacket: 32 [ 176.364337][ T5352] usb 3-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=6a.32 [ 176.374062][ T5352] usb 3-1: config 0 has an invalid interface number: 86 but max is 0 [ 176.374131][ T5352] usb 3-1: config 0 has no interface number 0 [ 176.374177][ T5352] usb 3-1: config 0 interface 86 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 176.374203][ T5352] usb 3-1: config 0 interface 86 altsetting 16 endpoint 0x82 has invalid wMaxPacketSize 0 [ 176.374225][ T5352] usb 3-1: config 0 interface 86 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 0 [ 176.374279][ T5352] usb 3-1: config 0 interface 86 has no altsetting 0 [ 176.384020][ T5352] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.384048][ T5352] usb 3-1: Product: syz [ 176.384089][ T5352] usb 3-1: Manufacturer: syz [ 176.384114][ T5352] usb 3-1: SerialNumber: syz [ 176.397814][ T5352] usb 3-1: config 0 descriptor?? [ 176.401564][ T7245] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 176.533902][ T7233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.342'. [ 176.603404][ T7233] batman_adv: batadv0: Adding interface: dummy0 [ 176.603458][ T7233] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 176.606579][ T7233] batman_adv: batadv0: Interface activated: dummy0 [ 176.704430][ T7233] Set syz1 is full, maxelem 2 reached [ 176.979194][ T5803] usb 2-1: USB disconnect, device number 20 [ 176.979260][ C1] ldusb 2-1:0.0: usb_submit_urb failed (-19) [ 176.992073][ T5803] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 177.350196][ T990] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 177.530817][ T990] usb 1-1: Using ep0 maxpacket: 8 [ 177.549949][ T990] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 177.562767][ T990] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 177.562841][ T990] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 177.562886][ T990] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 177.562916][ T990] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 177.562945][ T990] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 177.562990][ T990] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.771767][ T5825] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 177.876106][ T990] usb 1-1: usb_control_msg returned -32 [ 177.876179][ T990] usbtmc 1-1:16.0: can't read capabilities [ 177.948609][ T5825] usb 5-1: Using ep0 maxpacket: 32 [ 177.954657][ T5825] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 177.966884][ T5825] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.978469][ T5825] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.978577][ T5825] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.001168][ T5825] usb 5-1: config 0 descriptor?? [ 178.015822][ T5825] hub 5-1:0.0: USB hub found [ 178.208722][ T7267] syzkaller0: entered promiscuous mode [ 178.208812][ T7267] syzkaller0: entered allmulticast mode [ 178.229880][ T5825] hub 5-1:0.0: 1 port detected [ 178.466726][ T5825] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 178.505425][ T5825] usbhid 5-1:0.0: can't add hid device: -71 [ 178.505560][ T5825] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 178.549487][ T5825] usb 5-1: USB disconnect, device number 17 [ 178.956139][ T5352] ljca 3-1:0.86: submit rx urb failed: -90 [ 178.956224][ T5352] ljca 3-1:0.86: probe with driver ljca failed with error -90 [ 178.973392][ T5352] usb 3-1: USB disconnect, device number 27 [ 178.987884][ T7276] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 179.044779][ T7270] netlink: 'syz.3.353': attribute type 4 has an invalid length. [ 179.539983][ T5352] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 179.688691][ T5352] usb 3-1: Using ep0 maxpacket: 32 [ 179.691469][ T5352] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 179.693457][ T5352] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 179.693495][ T5352] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 179.693534][ T5352] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 179.693558][ T5352] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 179.693591][ T5352] usb 3-1: config 0 interface 0 has no altsetting 0 [ 179.696101][ T5352] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 179.696126][ T5352] usb 3-1: Product: syz [ 179.696140][ T5352] usb 3-1: Manufacturer: syz [ 179.696153][ T5352] usb 3-1: SerialNumber: syz [ 179.711752][ T5352] usb 3-1: config 0 descriptor?? [ 179.724432][ T5352] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 179.742543][ T5352] ldusb 3-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 179.781207][ T44] usb 1-1: USB disconnect, device number 20 [ 180.070547][ T7286] netlink: 8 bytes leftover after parsing attributes in process `syz.2.357'. [ 180.074570][ T7286] Set syz1 is full, maxelem 2 reached [ 180.277432][ T44] usb 3-1: USB disconnect, device number 28 [ 180.289842][ T44] ldusb 3-1:0.0: LD USB Device #1 now disconnected [ 180.769561][ T7314] loop8: detected capacity change from 0 to 7 [ 180.795432][ T44] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 180.927214][ T7314] Dev loop8: unable to read RDB block 7 [ 180.938846][ T44] usb 5-1: Using ep0 maxpacket: 32 [ 180.940665][ T44] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 180.943589][ T44] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 180.943627][ T44] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 180.943661][ T44] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 180.943686][ T44] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 180.943717][ T44] usb 5-1: config 0 interface 0 has no altsetting 0 [ 180.945920][ T44] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 180.945943][ T44] usb 5-1: Product: syz [ 180.945956][ T44] usb 5-1: Manufacturer: syz [ 180.945969][ T44] usb 5-1: SerialNumber: syz [ 180.950363][ T44] usb 5-1: config 0 descriptor?? [ 180.956626][ T44] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 180.959699][ T7314] loop8: unable to read partition table [ 180.962954][ T44] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 181.068181][ T7314] loop8: partition table beyond EOD, truncated [ 181.077297][ T7314] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 181.165568][ T7322] FAULT_INJECTION: forcing a failure. [ 181.165568][ T7322] name failslab, interval 1, probability 0, space 0, times 0 [ 181.165629][ T7322] CPU: 1 UID: 0 PID: 7322 Comm: syz.0.375 Not tainted syzkaller #0 PREEMPT(full) [ 181.165663][ T7322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 181.165675][ T7322] Call Trace: [ 181.165683][ T7322] [ 181.165691][ T7322] dump_stack_lvl+0xe8/0x150 [ 181.165720][ T7322] should_fail_ex+0x410/0x560 [ 181.165752][ T7322] should_failslab+0xa8/0x100 [ 181.165775][ T7322] __kmalloc_cache_noprof+0xa3/0x600 [ 181.165803][ T7322] ? ieee80211_set_qos_map+0x5c/0x1d0 [ 181.165825][ T7322] ? ieee80211_set_qos_map+0x5c/0x1d0 [ 181.165853][ T7322] ieee80211_set_qos_map+0x5c/0x1d0 [ 181.165878][ T7322] nl80211_set_qos_map+0x4a7/0x6a0 [ 181.165904][ T7322] genl_family_rcv_msg_doit+0x233/0x340 [ 181.165938][ T7322] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 181.165972][ T7322] ? bpf_lsm_capable+0x9/0x20 [ 181.165995][ T7322] ? security_capable+0x7e/0x2c0 [ 181.166021][ T7322] genl_rcv_msg+0x614/0x7a0 [ 181.166057][ T7322] ? __pfx_genl_rcv_msg+0x10/0x10 [ 181.166081][ T7322] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 181.166098][ T7322] ? __pfx_nl80211_set_qos_map+0x10/0x10 [ 181.166115][ T7322] ? __pfx_nl80211_post_doit+0x10/0x10 [ 181.166135][ T7322] ? __pfx_ref_tracker_free+0x10/0x10 [ 181.166164][ T7322] netlink_rcv_skb+0x226/0x4a0 [ 181.166187][ T7322] ? __pfx_genl_rcv_msg+0x10/0x10 [ 181.166214][ T7322] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 181.166251][ T7322] ? down_read+0x2be/0x330 [ 181.166273][ T7322] genl_rcv+0x28/0x40 [ 181.166297][ T7322] netlink_unicast+0x7bd/0x940 [ 181.166327][ T7322] netlink_sendmsg+0x813/0xb40 [ 181.166359][ T7322] ? __pfx_netlink_sendmsg+0x10/0x10 [ 181.166389][ T7322] ? apparmor_socket_sendmsg+0x98/0x360 [ 181.166417][ T7322] ? __pfx_netlink_sendmsg+0x10/0x10 [ 181.166438][ T7322] sock_sendmsg_nosec+0x13a/0x180 [ 181.166465][ T7322] ____sys_sendmsg+0x54e/0x850 [ 181.166490][ T7322] ? __pfx_____sys_sendmsg+0x10/0x10 [ 181.166526][ T7322] ___sys_sendmsg+0x2a5/0x360 [ 181.166544][ T7322] ? __lock_acquire+0x6df/0x2e50 [ 181.166567][ T7322] ? __pfx____sys_sendmsg+0x10/0x10 [ 181.166586][ T7322] ? get_pid_task+0x20/0x1f0 [ 181.166603][ T7322] ? get_pid_task+0x20/0x1f0 [ 181.166619][ T7322] ? get_pid_task+0x20/0x1f0 [ 181.166685][ T7322] ? __fget_files+0x2a/0x420 [ 181.166708][ T7322] ? __fget_files+0x3a2/0x420 [ 181.166741][ T7322] __sys_sendmsg+0x177/0x240 [ 181.166763][ T7322] ? __pfx___sys_sendmsg+0x10/0x10 [ 181.166802][ T7322] __do_fast_syscall_32+0x27a/0x6a0 [ 181.166820][ T7322] ? do_fast_syscall_32+0x33/0x70 [ 181.166837][ T7322] ? asm_int80_emulation+0x1a/0x20 [ 181.166855][ T7322] ? do_int80_emulation+0x299/0x500 [ 181.166879][ T7322] ? trace_irq_disable+0x3b/0x140 [ 181.166902][ T7322] do_fast_syscall_32+0x33/0x70 [ 181.166920][ T7322] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 181.166942][ T7322] RIP: 0023:0xf70bf0ec [ 181.166960][ T7322] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 181.166976][ T7322] RSP: 002b:00000000f54ad50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 181.166997][ T7322] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 181.167010][ T7322] RDX: 0000000000008000 RSI: 0000000000000000 RDI: 0000000000000000 [ 181.167022][ T7322] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 181.167032][ T7322] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 181.167044][ T7322] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 181.167072][ T7322] [ 181.604176][ T7323] netlink: 8 bytes leftover after parsing attributes in process `syz.4.362'. [ 181.638228][ T7323] Set syz1 is full, maxelem 2 reached [ 182.387722][ T7331] netlink: 'syz.0.370': attribute type 4 has an invalid length. [ 182.634426][ T7348] netlink: 'syz.1.373': attribute type 11 has an invalid length. [ 183.348685][ T990] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 183.518683][ T990] usb 2-1: Using ep0 maxpacket: 32 [ 183.525867][ T990] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 183.545180][ T990] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 183.545254][ T990] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 183.545312][ T990] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 183.545342][ T990] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 183.545374][ T990] usb 2-1: config 0 interface 0 has no altsetting 0 [ 183.565158][ T7361] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 183.609122][ T990] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 183.618166][ T990] usb 2-1: Product: syz [ 183.623579][ T990] usb 2-1: Manufacturer: syz [ 183.629569][ T990] usb 2-1: SerialNumber: syz [ 183.638908][ T990] usb 2-1: config 0 descriptor?? [ 183.659161][ T990] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 183.672380][ T990] ldusb 2-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 183.971619][ T7367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.376'. [ 183.994222][ T7367] Set syz1 is full, maxelem 2 reached [ 184.308784][ T44] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 184.462974][ T44] usb 4-1: unable to get BOS descriptor or descriptor too short [ 184.479326][ T44] usb 4-1: not running at top speed; connect to a high speed hub [ 184.479381][ T44] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice= e.3d [ 184.497441][ T44] usb 4-1: config 1 has an invalid interface number: 93 but max is 0 [ 184.497526][ T44] usb 4-1: config 1 has no interface number 0 [ 184.497569][ T44] usb 4-1: config 1 interface 93 altsetting 185 endpoint 0x2 has invalid wMaxPacketSize 0 [ 184.497591][ T44] usb 4-1: config 1 interface 93 has no altsetting 0 [ 184.541377][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.541452][ T44] usb 4-1: Product: syz [ 184.541467][ T44] usb 4-1: Manufacturer: syz [ 184.541479][ T44] usb 4-1: SerialNumber: syz [ 184.772557][ T7372] loop2: detected capacity change from 0 to 7 [ 184.788037][ T7372] Dev loop2: unable to read RDB block 7 [ 184.794271][ T7372] loop2: AHDI p1 p2 p3 [ 184.794326][ T7372] loop2: partition table partially beyond EOD, truncated [ 184.795927][ T7372] loop2: p1 start 1601398130 is beyond EOD, truncated [ 184.795952][ T7372] loop2: p2 start 1702059890 is beyond EOD, truncated [ 184.855401][ T44] peak_usb 4-1:1.93 can0: unable to request usb[type=0 value=1] err=-71 [ 184.863992][ T44] peak_usb 4-1:1.93: unable to read PCAN-USB Pro firmware info (err -71) [ 184.920832][ T44] peak_usb 4-1:1.93: probe with driver peak_usb failed with error -71 [ 184.936957][ T44] usb 4-1: USB disconnect, device number 18 [ 185.244215][ T7382] sctp: [Deprecated]: syz.2.385 (pid 7382) Use of int in max_burst socket option deprecated. [ 185.244215][ T7382] Use struct sctp_assoc_value instead [ 185.578604][ T5352] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 185.643058][ T7387] netlink: 'syz.3.388': attribute type 4 has an invalid length. [ 185.728646][ T5352] usb 1-1: Using ep0 maxpacket: 32 [ 185.735713][ T5352] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 185.748704][ T5352] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 185.748794][ T5352] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 185.748857][ T5352] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 185.748918][ T5352] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 185.748950][ T5352] usb 1-1: config 0 interface 0 has no altsetting 0 [ 185.804151][ T5352] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 185.804238][ T5352] usb 1-1: Product: syz [ 185.804271][ T5352] usb 1-1: Manufacturer: syz [ 185.804291][ T5352] usb 1-1: SerialNumber: syz [ 185.832115][ T5352] usb 1-1: config 0 descriptor?? [ 185.847890][ T5352] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 186.077888][ T5825] usb 2-1: USB disconnect, device number 21 [ 186.089722][ T5352] ldusb 1-1:0.0: LD USB Device #2 now attached to major 180 minor 2 [ 186.281397][ T7399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.386'. [ 186.311255][ T7399] batman_adv: batadv0: Interface deactivated: dummy0 [ 186.311307][ T7399] batman_adv: batadv0: Removing interface: dummy0 [ 186.331067][ T30] kauditd_printk_skb: 194 callbacks suppressed [ 186.337411][ T30] audit: type=1326 audit(1788384049.496:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7400 comm="syz.3.389" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f960ec code=0x7ffc0000 [ 186.362043][ T30] audit: type=1326 audit(1788384049.496:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7400 comm="syz.3.389" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f960ec code=0x7ffc0000 [ 186.376231][ T7399] Set syz1 is full, maxelem 2 reached [ 186.380527][ T30] audit: type=1326 audit(1788384049.496:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7400 comm="syz.3.389" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f960ec code=0x7ffc0000 [ 186.380573][ T30] audit: type=1326 audit(1788384049.496:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7400 comm="syz.3.389" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f960ec code=0x7ffc0000 [ 186.380611][ T30] audit: type=1326 audit(1788384049.496:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7400 comm="syz.3.389" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf7f960ec code=0x7ffc0000 [ 186.380650][ T30] audit: type=1326 audit(1788384049.496:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7400 comm="syz.3.389" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf71975ab code=0x7ffc0000 [ 186.380687][ T30] audit: type=1326 audit(1788384049.496:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7400 comm="syz.3.389" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf71975ab code=0x7ffc0000 [ 186.380725][ T30] audit: type=1326 audit(1788384049.496:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7400 comm="syz.3.389" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=102 compat=1 ip=0xf71975ab code=0x7ffc0000 [ 186.380762][ T30] audit: type=1326 audit(1788384049.496:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7400 comm="syz.3.389" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf71975ab code=0x7ffc0000 [ 186.380799][ T30] audit: type=1326 audit(1788384049.516:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7400 comm="syz.3.389" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f960ec code=0x7ffc0000 [ 186.419424][ T7403] FAULT_INJECTION: forcing a failure. [ 186.419424][ T7403] name failslab, interval 1, probability 0, space 0, times 0 [ 186.419459][ T7403] CPU: 0 UID: 0 PID: 7403 Comm: syz.1.390 Not tainted syzkaller #0 PREEMPT(full) [ 186.419480][ T7403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 186.419491][ T7403] Call Trace: [ 186.419498][ T7403] [ 186.419506][ T7403] dump_stack_lvl+0xe8/0x150 [ 186.419537][ T7403] should_fail_ex+0x410/0x560 [ 186.419569][ T7403] should_failslab+0xa8/0x100 [ 186.419593][ T7403] __kmalloc_noprof+0xfe/0x720 [ 186.419620][ T7403] ? tomoyo_encode+0x2ad/0x570 [ 186.419639][ T7403] ? tomoyo_encode+0x2ad/0x570 [ 186.419665][ T7403] tomoyo_encode+0x2ad/0x570 [ 186.419692][ T7403] tomoyo_realpath_from_path+0x5fa/0x640 [ 186.419725][ T7403] tomoyo_path_perm+0x283/0x560 [ 186.419750][ T7403] ? tomoyo_path_perm+0x251/0x560 [ 186.419776][ T7403] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 186.419828][ T7403] ? trace_contention_end+0x3d/0x140 [ 186.419861][ T7403] ? bdev_mark_dead+0x9f/0x170 [ 186.419884][ T7403] security_inode_getattr+0x12b/0x310 [ 186.419909][ T7403] vfs_getattr+0x23/0x70 [ 186.419932][ T7403] loop_assign_backing_file+0x27a/0x5c0 [ 186.419965][ T7403] ? __pfx_loop_assign_backing_file+0x10/0x10 [ 186.419987][ T7403] ? bd_prepare_to_claim+0x413/0x4a0 [ 186.420034][ T7403] ? __asan_memcpy+0x40/0x70 [ 186.420060][ T7403] ? loop_set_status_from_info+0x17b/0x240 [ 186.420086][ T7403] loop_configure+0x754/0xdc0 [ 186.420120][ T7403] ? __pfx_loop_configure+0x10/0x10 [ 186.420172][ T7403] lo_ioctl+0xae0/0x2010 [ 186.420195][ T7403] ? __lock_acquire+0x6df/0x2e50 [ 186.420214][ T7403] ? __pfx_mas_wr_store_entry+0x10/0x10 [ 186.420240][ T7403] ? __pfx_lo_ioctl+0x10/0x10 [ 186.420261][ T7403] ? __ia32_compat_sys_openat+0x131/0x160 [ 186.420295][ T7403] ? __lock_acquire+0x6df/0x2e50 [ 186.420323][ T7403] ? __lock_acquire+0x6df/0x2e50 [ 186.420353][ T7403] ? lock_acquire+0x115/0x350 [ 186.420384][ T7403] ? ktime_get+0x45/0x220 [ 186.420404][ T7403] ? ktime_get+0x45/0x220 [ 186.420421][ T7403] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 186.420440][ T7403] ? ktime_get+0x1f5/0x220 [ 186.420459][ T7403] ? lapic_next_event+0x11/0x20 [ 186.420477][ T7403] ? clockevents_program_event+0x491/0x630 [ 186.420503][ T7403] ? __pfx_clockevents_program_event+0x10/0x10 [ 186.420545][ T7403] ? rcu_is_watching+0x16/0xb0 [ 186.420566][ T7403] ? trace_sched_exit_tp+0x3a/0x130 [ 186.420590][ T7403] ? __schedule+0x17f1/0x58f0 [ 186.420624][ T7403] ? __lock_acquire+0x6df/0x2e50 [ 186.420644][ T7403] ? __lock_acquire+0x6df/0x2e50 [ 186.420672][ T7403] ? __lock_acquire+0x6df/0x2e50 [ 186.420699][ T7403] ? __lock_acquire+0x6df/0x2e50 [ 186.420724][ T7403] ? __lock_acquire+0x6df/0x2e50 [ 186.420744][ T7403] ? lock_acquire+0x115/0x350 [ 186.420771][ T7403] ? lock_acquire+0x115/0x350 [ 186.420796][ T7403] ? lock_acquire+0x115/0x350 [ 186.420823][ T7403] ? is_bpf_text_address+0x26/0x2b0 [ 186.420849][ T7403] ? is_bpf_text_address+0x292/0x2b0 [ 186.420869][ T7403] ? is_bpf_text_address+0x26/0x2b0 [ 186.420892][ T7403] ? kernel_text_address+0xa5/0xe0 [ 186.420913][ T7403] ? __kernel_text_address+0xd/0x30 [ 186.420932][ T7403] ? unwind_get_return_address+0x4d/0x90 [ 186.420952][ T7403] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 186.420986][ T7403] ? arch_stack_walk+0xfb/0x150 [ 186.421019][ T7403] ? stack_trace_save+0xa9/0x100 [ 186.421045][ T7403] ? __pfx_stack_trace_save+0x10/0x10 [ 186.421068][ T7403] ? kasan_save_track+0x4f/0x80 [ 186.421089][ T7403] ? stack_depot_save_flags+0x33/0x7f0 [ 186.421116][ T7403] ? __lock_acquire+0x6df/0x2e50 [ 186.421172][ T7403] ? blkdev_common_ioctl+0x14b7/0x3250 [ 186.421197][ T7403] lo_compat_ioctl+0x324/0x3f0 [ 186.421222][ T7403] ? __pfx_lo_compat_ioctl+0x10/0x10 [ 186.421244][ T7403] ? kasan_quarantine_put+0xbb/0x1f0 [ 186.421279][ T7403] ? tomoyo_path_number_perm+0x219/0x5f0 [ 186.421307][ T7403] ? tomoyo_path_number_perm+0x219/0x5f0 [ 186.421336][ T7403] ? do_vfs_ioctl+0x116f/0x1530 [ 186.421358][ T7403] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 186.421389][ T7403] ? hook_file_ioctl_compat+0x1f2/0x600 [ 186.421422][ T7403] ? __pfx_lo_compat_ioctl+0x10/0x10 [ 186.421445][ T7403] compat_blkdev_ioctl+0x5ea/0x7c0 [ 186.421465][ T7403] ? __fget_files+0x2a/0x420 [ 186.421492][ T7403] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 186.421512][ T7403] ? __fget_files+0x2a/0x420 [ 186.421538][ T7403] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 186.421565][ T7403] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 186.421588][ T7403] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 186.421608][ T7403] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 186.421635][ T7403] ? __fget_files+0x3a2/0x420 [ 186.421664][ T7403] ? fput+0xa0/0xd0 [ 186.421685][ T7403] ? ksys_write+0x242/0x270 [ 186.421721][ T7403] __do_fast_syscall_32+0x27a/0x6a0 [ 186.421740][ T7403] ? do_fast_syscall_32+0x33/0x70 [ 186.421757][ T7403] ? asm_int80_emulation+0x1a/0x20 [ 186.421774][ T7403] ? do_int80_emulation+0x299/0x500 [ 186.421799][ T7403] ? trace_irq_disable+0x3b/0x140 [ 186.421821][ T7403] do_fast_syscall_32+0x33/0x70 [ 186.421839][ T7403] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 186.421860][ T7403] RIP: 0023:0xf704f0ec [ 186.421878][ T7403] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 186.421894][ T7403] RSP: 002b:00000000f543d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 186.421915][ T7403] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000004c0a [ 186.421928][ T7403] RDX: 00000000800002c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 186.421939][ T7403] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 186.421950][ T7403] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 186.421969][ T7403] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 186.421998][ T7403] [ 186.434677][ T7403] ERROR: Out of memory at tomoyo_realpath_from_path. [ 186.435050][ T7403] loop2: detected capacity change from 0 to 7 [ 186.439733][ T7403] Dev loop2: unable to read RDB block 7 [ 186.439761][ T7403] loop2: AHDI p1 p2 p3 [ 186.439781][ T7403] loop2: partition table partially beyond EOD, truncated [ 186.468334][ T7403] loop2: p1 start 1601398130 is beyond EOD, truncated [ 186.468362][ T7403] loop2: p2 start 1702059890 is beyond EOD, truncated [ 186.593673][ T7310] ldusb 5-1:0.0: Couldn't submit HID_REQ_SET_REPORT -110 [ 186.632059][ T5825] ldusb 2-1:0.0: LD USB Device #1 now disconnected [ 186.654243][ T990] usb 1-1: USB disconnect, device number 21 [ 186.684542][ T990] ldusb 1-1:0.0: LD USB Device #2 now disconnected [ 186.909842][ T5825] usb 5-1: USB disconnect, device number 18 [ 186.950957][ T5825] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 187.471366][ T7426] netlink: 4 bytes leftover after parsing attributes in process `syz.0.397'. [ 187.479253][ T5825] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 187.629630][ T5825] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 187.632630][ T5825] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.632662][ T5825] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.632692][ T5825] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 187.632731][ T5825] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.636202][ T5825] usb 5-1: config 0 descriptor?? [ 188.081798][ T5825] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 188.081876][ T5825] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 188.081920][ T5825] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 188.081960][ T5825] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 188.081985][ T5825] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 188.082008][ T5825] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 188.082031][ T5825] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 188.082054][ T5825] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 188.082077][ T5825] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 188.107900][ T7430] netlink: 'syz.1.399': attribute type 4 has an invalid length. [ 188.151728][ T5825] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 188.659037][ T7440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.670441][ T7440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.569478][ T5827] usb 5-1: reset high-speed USB device number 19 using dummy_hcd [ 189.694943][ T7461] IPVS: set_ctl: invalid protocol: 189 172.20.20.17:19998 [ 189.728686][ T5827] usb 5-1: device descriptor read/64, error -32 [ 189.765786][ T7462] netlink: 12 bytes leftover after parsing attributes in process `syz.2.404'. [ 189.891858][ T7462] netlink: 'syz.2.404': attribute type 1 has an invalid length. [ 189.968665][ T5827] usb 5-1: reset high-speed USB device number 19 using dummy_hcd [ 190.099038][ T5827] usb 5-1: device descriptor read/64, error -32 [ 190.108770][ T5825] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 190.259597][ T5825] usb 1-1: Using ep0 maxpacket: 32 [ 190.260361][ T5825] usb 1-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 190.264488][ T5825] usb 1-1: config index 0 descriptor too short (expected 19, got 18) [ 190.271498][ T5825] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.271524][ T5825] usb 1-1: Product: syz [ 190.271537][ T5825] usb 1-1: Manufacturer: syz [ 190.271551][ T5825] usb 1-1: SerialNumber: syz [ 190.296557][ T5825] usb 1-1: config 0 descriptor?? [ 190.313151][ T5825] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 190.313200][ T5825] dvb-usb: bulk message failed: -22 (2/0) [ 190.344335][ T5827] usb 5-1: reset high-speed USB device number 19 using dummy_hcd [ 190.351034][ T5825] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 190.351840][ T5825] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 190.356621][ T5825] usb 1-1: media controller created [ 190.360193][ T5827] usb 5-1: device descriptor read/8, error -32 [ 190.425790][ T5825] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 190.539575][ T7438] cxusb: i2c rd: len=87 is too big! [ 190.539575][ T7438] [ 190.618433][ T5827] usb 5-1: reset high-speed USB device number 19 using dummy_hcd [ 190.644561][ T5825] usb 1-1: selecting invalid altsetting 7 [ 190.644594][ T5825] cxusb: set interface failed [ 190.644621][ T5825] dvb-usb: bulk message failed: -22 (1/0) [ 190.672202][ T5827] usb 5-1: device descriptor read/8, error -32 [ 190.764292][ T5825] DVB: Unable to find symbol lgdt330x_attach() [ 190.764364][ T5825] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 190.779869][ T5827] raw-gadget.0 gadget.4: failed to queue suspend event [ 190.837051][ T7418] raw-gadget.0 gadget.4: failed to queue disconnect event [ 190.852891][ T990] usb 5-1: USB disconnect, device number 19 [ 190.892192][ T44] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 191.001447][ T5825] rc_core: IR keymap rc-dvico-portable not found [ 191.002752][ T5825] Registered IR keymap rc-empty [ 191.005696][ T5825] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 191.020622][ T5825] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input21 [ 191.025889][ T5825] dvb-usb: schedule remote query interval to 100 msecs. [ 191.025914][ T5825] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 191.047182][ T5825] usb 1-1: USB disconnect, device number 22 [ 191.054085][ T44] usb 3-1: Using ep0 maxpacket: 32 [ 191.061264][ T44] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 191.079403][ T44] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 191.079468][ T44] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 191.079526][ T44] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 191.079557][ T44] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 191.079587][ T44] usb 3-1: config 0 interface 0 has no altsetting 0 [ 191.147860][ T44] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 191.156825][ T44] usb 3-1: Product: syz [ 191.161193][ T44] usb 3-1: Manufacturer: syz [ 191.165956][ T44] usb 3-1: SerialNumber: syz [ 191.176972][ T44] usb 3-1: config 0 descriptor?? [ 191.192240][ T44] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 191.204079][ T44] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 191.271117][ T5352] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 191.366425][ T5825] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 191.429115][ T5352] usb 4-1: Using ep0 maxpacket: 32 [ 191.438100][ T5352] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 191.458164][ T5352] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 191.458232][ T5352] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 191.458298][ T5352] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 191.458332][ T5352] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 191.458364][ T5352] usb 4-1: config 0 interface 0 has no altsetting 0 [ 191.516221][ T5352] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 191.516271][ T5352] usb 4-1: Product: syz [ 191.516306][ T5352] usb 4-1: Manufacturer: syz [ 191.516327][ T5352] usb 4-1: SerialNumber: syz [ 191.545729][ T5352] usb 4-1: config 0 descriptor?? [ 191.562611][ T7483] netlink: 'syz.0.412': attribute type 4 has an invalid length. [ 191.572382][ T5352] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 191.616083][ T5352] ldusb 4-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 191.757966][ T7489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.408'. [ 191.818248][ T7489] batman_adv: batadv0: Interface deactivated: dummy0 [ 191.818308][ T7489] batman_adv: batadv0: Removing interface: dummy0 [ 191.847486][ T7489] Set syz1 is full, maxelem 2 reached [ 192.041213][ T7490] netlink: 8 bytes leftover after parsing attributes in process `syz.3.405'. [ 192.061332][ T7490] batman_adv: batadv0: Interface deactivated: dummy0 [ 192.068568][ T7490] batman_adv: batadv0: Removing interface: dummy0 [ 192.087683][ T7490] Set syz1 is full, maxelem 2 reached [ 192.549468][ T5827] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 192.573161][ T7507] netlink: 4 bytes leftover after parsing attributes in process `syz.1.418'. [ 192.700954][ T5827] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 192.703588][ T5827] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.703621][ T5827] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.703641][ T5827] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 192.703681][ T5827] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.712134][ T5827] usb 5-1: config 0 descriptor?? [ 193.327879][ T7499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.331467][ T7499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.801174][ T7521] IPVS: set_ctl: invalid protocol: 189 172.20.20.17:19998 [ 193.959109][ T5352] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 194.022194][ T5827] plantronics 0003:047F:FFFF.0009: hiddev2,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 194.065763][ T5827] usb 5-1: USB disconnect, device number 20 [ 194.128648][ T5352] usb 2-1: Using ep0 maxpacket: 32 [ 194.134454][ T5352] usb 2-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 194.146214][ T5352] usb 2-1: config index 0 descriptor too short (expected 19, got 18) [ 194.157658][ T5352] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.166251][ T5352] usb 2-1: Product: syz [ 194.166307][ T5352] usb 2-1: Manufacturer: syz [ 194.166328][ T5352] usb 2-1: SerialNumber: syz [ 194.212029][ T5352] usb 2-1: config 0 descriptor?? [ 194.241803][ T5352] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 194.241871][ T5352] dvb-usb: bulk message failed: -22 (2/0) [ 194.275802][ T5352] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 194.296161][ T5352] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 194.305155][ T5352] usb 2-1: media controller created [ 194.324721][ T5825] usb 4-1: USB disconnect, device number 19 [ 194.343019][ T5825] ldusb 4-1:0.0: LD USB Device #1 now disconnected [ 194.361677][ T5352] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 194.399489][ T7526] fido_id[7526]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 194.421756][ T5352] usb 2-1: selecting invalid altsetting 7 [ 194.427620][ T5352] cxusb: set interface failed [ 194.432560][ T5352] dvb-usb: bulk message failed: -22 (1/0) [ 194.442506][ T7519] cxusb: i2c rd: len=87 is too big! [ 194.442506][ T7519] [ 194.571575][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.571659][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.620222][ T5352] DVB: Unable to find symbol lgdt330x_attach() [ 194.628956][ T5352] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 194.758589][ T5352] rc_core: IR keymap rc-dvico-portable not found [ 194.758627][ T5352] Registered IR keymap rc-empty [ 194.772055][ T5352] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 194.789783][ T5352] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input22 [ 194.809444][ T5352] dvb-usb: schedule remote query interval to 100 msecs. [ 194.817374][ T5352] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 194.832960][ T5352] usb 2-1: USB disconnect, device number 22 [ 194.914236][ T5352] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 194.920222][ T5825] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 195.068650][ T5825] usb 4-1: Using ep0 maxpacket: 8 [ 195.074790][ T5825] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 195.092620][ T5825] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.102895][ T5825] usb 4-1: Product: syz [ 195.107446][ T5825] usb 4-1: Manufacturer: syz [ 195.112266][ T5825] usb 4-1: SerialNumber: syz [ 195.131723][ T5825] usb 4-1: config 0 descriptor?? [ 195.143515][ T5825] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 195.155533][ T5825] pctv452e: pctv452e_power_ctrl: 1 [ 195.155533][ T5825] [ 195.166237][ T5825] usb 4-1: selecting invalid altsetting 3 [ 195.166329][ T5825] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 195.166329][ T5825] [ 195.166410][ T5825] dvb-usb: bulk message failed: -22 (5/0) [ 195.198228][ T5825] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 195.210961][ T5825] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 195.214377][ T7532] netlink: 'syz.4.425': attribute type 4 has an invalid length. [ 195.227907][ T5825] usb 4-1: media controller created [ 195.234341][ T5825] dvb-usb: bulk message failed: -22 (8/0) [ 195.241163][ T5825] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 195.252227][ T5825] dvb-usb: MAC address reading failed. [ 195.276524][ T5825] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 195.289004][ T5801] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 195.396355][ T5825] DVB: Unable to find symbol stb0899_attach() [ 195.403059][ T5825] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 195.438617][ T5801] usb 1-1: Using ep0 maxpacket: 32 [ 195.441148][ T5801] usb 1-1: unable to get BOS descriptor or descriptor too short [ 195.441196][ T5801] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 195.442436][ T5801] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 195.442482][ T5801] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 195.442500][ T5801] usb 1-1: config 14 has no interface number 0 [ 195.442516][ T5801] usb 1-1: config 14 has no interface number 1 [ 195.442575][ T5801] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 195.442597][ T5801] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 195.442620][ T5801] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 195.442644][ T5801] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 195.442668][ T5801] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 195.442691][ T5801] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 195.442715][ T5801] usb 1-1: config 14 interface 57 has no altsetting 0 [ 195.442732][ T5801] usb 1-1: config 14 interface 228 has no altsetting 0 [ 195.446908][ T5801] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.446934][ T5801] usb 1-1: Product: syz [ 195.446948][ T5801] usb 1-1: Manufacturer: syz [ 195.449728][ T5801] usb 1-1: SerialNumber: syz [ 195.648673][ T5825] rc_core: IR keymap rc-tt-1500 not found [ 195.654589][ T5825] Registered IR keymap rc-empty [ 195.665967][ T5825] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 195.680816][ T5825] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input23 [ 195.696512][ T5825] dvb-usb: schedule remote query interval to 100 msecs. [ 195.705206][ T5825] pctv452e: pctv452e_power_ctrl: 0 [ 195.705206][ T5825] [ 195.705254][ T5825] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 195.739674][ T5825] usb 4-1: USB disconnect, device number 20 [ 195.838460][ T5825] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 196.381341][ T5801] legousbtower 1-1:14.57: interrupt endpoints not found [ 196.394100][ T5801] legousbtower 1-1:14.228: get version request failed: -71 [ 196.394323][ T5801] legousbtower 1-1:14.228: probe with driver legousbtower failed with error -71 [ 196.406302][ T5801] usb 1-1: USB disconnect, device number 23 [ 196.421711][ T7561] netlink: 'syz.3.433': attribute type 3 has an invalid length. [ 196.522916][ T7566] netlink: 64 bytes leftover after parsing attributes in process `syz.4.434'. [ 196.522966][ T7566] netlink: 60 bytes leftover after parsing attributes in process `syz.4.434'. [ 196.731334][ T7471] ldusb 3-1:0.0: Couldn't submit HID_REQ_SET_REPORT -110 [ 196.876272][ T5825] usb 3-1: USB disconnect, device number 29 [ 196.900183][ T5825] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 197.328385][ T7585] warning: `syz.1.438' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 197.395674][ T7587] FAULT_INJECTION: forcing a failure. [ 197.395674][ T7587] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.395728][ T7587] CPU: 1 UID: 0 PID: 7587 Comm: syz.3.441 Not tainted syzkaller #0 PREEMPT(full) [ 197.395750][ T7587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 197.395760][ T7587] Call Trace: [ 197.395768][ T7587] [ 197.395775][ T7587] dump_stack_lvl+0xe8/0x150 [ 197.395804][ T7587] should_fail_ex+0x410/0x560 [ 197.395845][ T7587] _copy_to_user+0x31/0xb0 [ 197.395865][ T7587] __htab_map_lookup_and_delete_batch+0x142e/0x18b0 [ 197.395922][ T7587] ? __pfx___htab_map_lookup_and_delete_batch+0x10/0x10 [ 197.395948][ T7587] ? __pfx_htab_map_lookup_and_delete_batch+0x10/0x10 [ 197.395971][ T7587] bpf_map_do_batch+0x445/0x630 [ 197.395996][ T7587] __sys_bpf+0x906/0xd90 [ 197.396022][ T7587] ? __pfx___sys_bpf+0x10/0x10 [ 197.396037][ T7587] ? vfs_write+0x9ce/0xba0 [ 197.396069][ T7587] ? __pfx_vfs_write+0x10/0x10 [ 197.396112][ T7587] ? ksys_write+0x1fc/0x270 [ 197.396140][ T7587] __ia32_sys_bpf+0xba/0xd0 [ 197.396159][ T7587] __do_fast_syscall_32+0x27a/0x6a0 [ 197.396175][ T7587] ? do_fast_syscall_32+0x33/0x70 [ 197.396191][ T7587] ? asm_int80_emulation+0x1a/0x20 [ 197.396207][ T7587] ? do_int80_emulation+0x299/0x500 [ 197.396229][ T7587] ? trace_irq_disable+0x3b/0x140 [ 197.396249][ T7587] do_fast_syscall_32+0x33/0x70 [ 197.396265][ T7587] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 197.396284][ T7587] RIP: 0023:0xf7f960ec [ 197.396301][ T7587] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 197.396315][ T7587] RSP: 002b:00000000f545650c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 197.396336][ T7587] RAX: ffffffffffffffda RBX: 0000000000000019 RCX: 0000000080000800 [ 197.396349][ T7587] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 0000000000000000 [ 197.396359][ T7587] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 197.396369][ T7587] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 197.396379][ T7587] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 197.396404][ T7587] [ 197.560392][ T5352] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 197.709560][ T5352] usb 3-1: Using ep0 maxpacket: 32 [ 197.710300][ T5352] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 197.711431][ T5352] usb 3-1: config index 0 descriptor too short (expected 19, got 18) [ 197.715542][ T5352] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.715569][ T5352] usb 3-1: Product: syz [ 197.715582][ T5352] usb 3-1: Manufacturer: syz [ 197.715596][ T5352] usb 3-1: SerialNumber: syz [ 197.727361][ T5352] usb 3-1: config 0 descriptor?? [ 197.742435][ T5352] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 197.742485][ T5352] dvb-usb: bulk message failed: -22 (2/0) [ 197.776139][ T5352] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 197.778242][ T5352] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 197.778293][ T5352] usb 3-1: media controller created [ 197.846115][ T5352] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 197.896102][ T5352] usb 3-1: selecting invalid altsetting 7 [ 197.896140][ T5352] cxusb: set interface failed [ 197.902455][ T5352] dvb-usb: bulk message failed: -22 (1/0) [ 197.961328][ T7579] cxusb: i2c rd: len=87 is too big! [ 197.961328][ T7579] [ 198.079567][ T5352] DVB: Unable to find symbol lgdt330x_attach() [ 198.079599][ T5352] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 198.198937][ T5352] rc_core: IR keymap rc-dvico-portable not found [ 198.199251][ T5352] Registered IR keymap rc-empty [ 198.200464][ T5352] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 198.207110][ T5352] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input24 [ 198.218502][ T5352] dvb-usb: schedule remote query interval to 100 msecs. [ 198.221485][ T5352] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 198.233699][ T5352] usb 3-1: USB disconnect, device number 30 [ 198.290121][ T5801] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 198.313860][ T5352] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 198.359248][ T44] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 198.440382][ T5801] usb 2-1: Using ep0 maxpacket: 32 [ 198.441135][ T5801] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 198.449196][ T5801] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 198.449405][ T5801] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 198.449429][ T5801] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 198.449453][ T5801] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 198.449469][ T5801] usb 2-1: config 0 interface 0 has no altsetting 0 [ 198.453939][ T5801] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 198.453967][ T5801] usb 2-1: Product: syz [ 198.453980][ T5801] usb 2-1: Manufacturer: syz [ 198.453993][ T5801] usb 2-1: SerialNumber: syz [ 198.462551][ T5801] usb 2-1: config 0 descriptor?? [ 198.473654][ T5801] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 198.481865][ T5801] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 198.528771][ T44] usb 1-1: Using ep0 maxpacket: 32 [ 198.530239][ T44] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 198.534657][ T44] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 198.534700][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.544612][ T44] usb 1-1: config 0 descriptor?? [ 198.566389][ T44] hub 1-1:0.0: bad descriptor, ignoring hub [ 198.566417][ T44] hub 1-1:0.0: probe with driver hub failed with error -5 [ 198.573564][ T44] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 198.638195][ T7608] FAULT_INJECTION: forcing a failure. [ 198.638195][ T7608] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 198.638242][ T7608] CPU: 1 UID: 0 PID: 7608 Comm: syz.3.446 Not tainted syzkaller #0 PREEMPT(full) [ 198.638266][ T7608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 198.638278][ T7608] Call Trace: [ 198.638285][ T7608] [ 198.638292][ T7608] dump_stack_lvl+0xe8/0x150 [ 198.638332][ T7608] should_fail_ex+0x410/0x560 [ 198.638364][ T7608] _copy_from_user+0x2d/0xb0 [ 198.638385][ T7608] move_addr_to_kernel+0x7e/0x160 [ 198.638410][ T7608] get_compat_msghdr+0x3db/0x4c0 [ 198.638435][ T7608] ? __pfx_get_compat_msghdr+0x10/0x10 [ 198.638469][ T7608] ___sys_sendmsg+0x201/0x360 [ 198.638488][ T7608] ? __lock_acquire+0x6df/0x2e50 [ 198.638514][ T7608] ? __pfx____sys_sendmsg+0x10/0x10 [ 198.638533][ T7608] ? get_pid_task+0x20/0x1f0 [ 198.638551][ T7608] ? get_pid_task+0x20/0x1f0 [ 198.638565][ T7608] ? get_pid_task+0x20/0x1f0 [ 198.638609][ T7608] ? __fget_files+0x2a/0x420 [ 198.638631][ T7608] ? __fget_files+0x3a2/0x420 [ 198.638662][ T7608] __sys_sendmsg+0x177/0x240 [ 198.638683][ T7608] ? __pfx___sys_sendmsg+0x10/0x10 [ 198.638720][ T7608] __do_fast_syscall_32+0x27a/0x6a0 [ 198.638739][ T7608] ? do_fast_syscall_32+0x33/0x70 [ 198.638755][ T7608] ? asm_int80_emulation+0x1a/0x20 [ 198.638772][ T7608] ? do_int80_emulation+0x299/0x500 [ 198.638797][ T7608] ? trace_irq_disable+0x3b/0x140 [ 198.638819][ T7608] do_fast_syscall_32+0x33/0x70 [ 198.638836][ T7608] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 198.638858][ T7608] RIP: 0023:0xf7f960ec [ 198.638875][ T7608] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 198.638891][ T7608] RSP: 002b:00000000f545650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 198.638913][ T7608] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080001c00 [ 198.638932][ T7608] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 198.638942][ T7608] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 198.638953][ T7608] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 198.638964][ T7608] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 198.638991][ T7608] [ 198.990392][ T7610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.445'. [ 199.032358][ T7603] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 199.047555][ T7610] Set syz1 is full, maxelem 2 reached [ 199.156376][ T44] usb 1-1: USB disconnect, device number 24 [ 199.406639][ T7624] netlink: 12 bytes leftover after parsing attributes in process `syz.3.450'. [ 199.421767][ T7624] FAULT_INJECTION: forcing a failure. [ 199.421767][ T7624] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 199.436749][ T7624] CPU: 0 UID: 0 PID: 7624 Comm: syz.3.450 Not tainted syzkaller #0 PREEMPT(full) [ 199.436779][ T7624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 199.436791][ T7624] Call Trace: [ 199.436801][ T7624] [ 199.436811][ T7624] dump_stack_lvl+0xe8/0x150 [ 199.436847][ T7624] should_fail_ex+0x410/0x560 [ 199.436898][ T7624] _copy_to_user+0x31/0xb0 [ 199.436923][ T7624] simple_read_from_buffer+0xe1/0x170 [ 199.436956][ T7624] proc_fail_nth_read+0x1bb/0x230 [ 199.436986][ T7624] ? common_file_perm+0x20e/0x2b0 [ 199.437011][ T7624] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 199.437044][ T7624] ? rw_verify_area+0x24a/0x4c0 [ 199.437073][ T7624] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 199.437103][ T7624] vfs_read+0x213/0xa80 [ 199.437136][ T7624] ? __pfx___mutex_lock+0x10/0x10 [ 199.437172][ T7624] ? __pfx_vfs_read+0x10/0x10 [ 199.437202][ T7624] ? __fget_files+0x2a/0x420 [ 199.437233][ T7624] ? __fget_files+0x3a2/0x420 [ 199.437258][ T7624] ? __fget_files+0x2a/0x420 [ 199.437290][ T7624] ksys_read+0x150/0x270 [ 199.437319][ T7624] ? __pfx_ksys_read+0x10/0x10 [ 199.437349][ T7624] ? asm_int80_emulation+0x1a/0x20 [ 199.437374][ T7624] do_int80_emulation+0x198/0x500 [ 199.437402][ T7624] ? trace_irq_disable+0x3b/0x140 [ 199.437421][ T7624] ? asm_int80_emulation+0x1a/0x20 [ 199.437441][ T7624] ? clear_bhb_loop+0x70/0xc0 [ 199.437462][ T7624] ? clear_bhb_loop+0x70/0xc0 [ 199.437488][ T7624] asm_int80_emulation+0x1a/0x20 [ 199.437506][ T7624] RIP: 0023:0xf71975ab [ 199.437526][ T7624] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 199.437544][ T7624] RSP: 002b:00000000f54564bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 199.437568][ T7624] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54565d0 [ 199.437582][ T7624] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 199.437595][ T7624] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 199.437607][ T7624] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 199.437620][ T7624] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 199.437651][ T7624] [ 199.863890][ T7627] FAULT_INJECTION: forcing a failure. [ 199.863890][ T7627] name failslab, interval 1, probability 0, space 0, times 0 [ 199.863941][ T7627] CPU: 1 UID: 0 PID: 7627 Comm: syz.3.451 Not tainted syzkaller #0 PREEMPT(full) [ 199.863965][ T7627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 199.863977][ T7627] Call Trace: [ 199.863985][ T7627] [ 199.863993][ T7627] dump_stack_lvl+0xe8/0x150 [ 199.864024][ T7627] should_fail_ex+0x410/0x560 [ 199.864070][ T7627] should_failslab+0xa8/0x100 [ 199.864094][ T7627] __kmalloc_cache_noprof+0xa3/0x600 [ 199.864120][ T7627] ? __mutex_trylock_common+0x15f/0x270 [ 199.864144][ T7627] ? fuse_lookup_name+0x1c6/0x870 [ 199.864162][ T7627] ? fuse_lookup_name+0x1c6/0x870 [ 199.864188][ T7627] fuse_lookup_name+0x1c6/0x870 [ 199.864206][ T7627] ? trace_contention_end+0x3d/0x140 [ 199.864255][ T7627] ? __pfx_fuse_lookup_name+0x10/0x10 [ 199.864276][ T7627] ? fuse_lock_inode+0xd3/0x120 [ 199.864323][ T7627] fuse_lookup+0x20b/0x4f0 [ 199.864343][ T7627] ? __kasan_kmalloc+0x93/0xb0 [ 199.864368][ T7627] ? __pfx_fuse_lookup+0x10/0x10 [ 199.864408][ T7627] ? d_alloc+0x144/0x190 [ 199.864435][ T7627] lookup_one_qstr_excl+0x12d/0x360 [ 199.864466][ T7627] __start_renaming+0x1da/0x410 [ 199.864501][ T7627] filename_renameat2+0x3a0/0x9a0 [ 199.864535][ T7627] ? __pfx_filename_renameat2+0x10/0x10 [ 199.864576][ T7627] ? strncpy_from_user+0x150/0x2c0 [ 199.864606][ T7627] ? do_getname+0x151/0x250 [ 199.864630][ T7627] __se_sys_renameat2+0x5a/0x2c0 [ 199.864655][ T7627] __do_fast_syscall_32+0x27a/0x6a0 [ 199.864675][ T7627] ? do_fast_syscall_32+0x33/0x70 [ 199.864691][ T7627] ? asm_int80_emulation+0x1a/0x20 [ 199.864709][ T7627] ? do_int80_emulation+0x299/0x500 [ 199.864739][ T7627] do_fast_syscall_32+0x33/0x70 [ 199.864757][ T7627] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 199.864790][ T7627] RIP: 0023:0xf7f960ec [ 199.864809][ T7627] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 199.864825][ T7627] RSP: 002b:00000000f543550c EFLAGS: 00000206 ORIG_RAX: 0000000000000161 [ 199.864853][ T7627] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000100 [ 199.864866][ T7627] RDX: 00000000ffffff9c RSI: 0000000080000480 RDI: 0000000000000004 [ 199.864879][ T7627] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 199.864890][ T7627] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 199.864902][ T7627] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 199.864931][ T7627] [ 200.183801][ T7632] FAULT_INJECTION: forcing a failure. [ 200.183801][ T7632] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 200.218300][ T7632] CPU: 0 UID: 0 PID: 7632 Comm: syz.2.453 Not tainted syzkaller #0 PREEMPT(full) [ 200.218333][ T7632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 200.218347][ T7632] Call Trace: [ 200.218356][ T7632] [ 200.218365][ T7632] dump_stack_lvl+0xe8/0x150 [ 200.218402][ T7632] should_fail_ex+0x410/0x560 [ 200.218438][ T7632] prepare_alloc_pages+0x223/0x600 [ 200.218467][ T7632] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 200.218495][ T7632] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 200.218517][ T7632] ? __alloc_frozen_pages_noprof+0x29e/0x5a0 [ 200.218541][ T7632] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 200.218566][ T7632] ? __pfx_policy_nodemask+0x10/0x10 [ 200.218587][ T7632] ? __get_vm_area_node+0x155/0x2f0 [ 200.218611][ T7632] ? __vmalloc_node_range_noprof+0x343/0x1540 [ 200.218637][ T7632] ? __vmalloc_noprof+0xd2/0x120 [ 200.218667][ T7632] __alloc_pages_noprof+0x10/0x100 [ 200.218690][ T7632] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 200.218720][ T7632] ? alloc_pages_noprof+0x140/0x2b0 [ 200.218749][ T7632] __kasan_populate_vmalloc+0xb7/0x1c0 [ 200.218787][ T7632] alloc_vmap_area+0xd1a/0x1420 [ 200.218830][ T7632] ? __pfx_alloc_vmap_area+0x10/0x10 [ 200.218854][ T7632] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 200.218886][ T7632] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 200.218916][ T7632] ? __get_vm_area_node+0x155/0x2f0 [ 200.218947][ T7632] __get_vm_area_node+0x200/0x2f0 [ 200.218984][ T7632] __vmalloc_node_range_noprof+0x343/0x1540 [ 200.219014][ T7632] ? bpf_check+0x10ee/0x2e10 [ 200.219039][ T7632] ? rcu_is_watching+0x16/0xb0 [ 200.219071][ T7632] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 200.219100][ T7632] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 200.219134][ T7632] ? bpf_check+0x106b/0x2e10 [ 200.219158][ T7632] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 200.219196][ T7632] ? security_capable+0xb9/0x2c0 [ 200.219219][ T7632] ? bpf_check+0x10ee/0x2e10 [ 200.219238][ T7632] __vmalloc_noprof+0xd2/0x120 [ 200.219265][ T7632] ? bpf_check+0x10ee/0x2e10 [ 200.219300][ T7632] bpf_check+0x10ee/0x2e10 [ 200.219335][ T7632] ? ktime_get_with_offset+0x93/0x2d0 [ 200.219360][ T7632] ? __pfx_bpf_check+0x10/0x10 [ 200.219385][ T7632] ? bpf_obj_name_cpy+0x194/0x1e0 [ 200.219418][ T7632] bpf_prog_load+0x14d6/0x1c20 [ 200.219456][ T7632] ? __pfx_bpf_prog_load+0x10/0x10 [ 200.219508][ T7632] __sys_bpf+0xd0d/0xd90 [ 200.219540][ T7632] ? __pfx___sys_bpf+0x10/0x10 [ 200.219566][ T7632] ? ksys_write+0x1e6/0x270 [ 200.219600][ T7632] ? __mutex_unlock_slowpath+0x731/0x900 [ 200.219651][ T7632] ? fput+0xa0/0xd0 [ 200.219676][ T7632] ? ksys_write+0x242/0x270 [ 200.219712][ T7632] __ia32_sys_bpf+0xba/0xd0 [ 200.219736][ T7632] __do_fast_syscall_32+0x27a/0x6a0 [ 200.219758][ T7632] ? do_fast_syscall_32+0x33/0x70 [ 200.219778][ T7632] ? asm_int80_emulation+0x1a/0x20 [ 200.219797][ T7632] ? do_int80_emulation+0x299/0x500 [ 200.219827][ T7632] ? trace_irq_disable+0x3b/0x140 [ 200.219851][ T7632] do_fast_syscall_32+0x33/0x70 [ 200.219871][ T7632] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 200.219896][ T7632] RIP: 0023:0xf6fdf0ec [ 200.219916][ T7632] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 200.219933][ T7632] RSP: 002b:00000000f53cd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 200.219958][ T7632] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800001c0 [ 200.219972][ T7632] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 200.219985][ T7632] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 200.219998][ T7632] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 200.220010][ T7632] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 200.220041][ T7632] [ 200.332173][ T7632] syz.2.453: vmalloc error: size 1496, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 200.332273][ T7632] CPU: 1 UID: 0 PID: 7632 Comm: syz.2.453 Not tainted syzkaller #0 PREEMPT(full) [ 200.332294][ T7632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 200.332304][ T7632] Call Trace: [ 200.332312][ T7632] [ 200.332320][ T7632] dump_stack_lvl+0xe8/0x150 [ 200.332354][ T7632] warn_alloc+0x24d/0x270 [ 200.332387][ T7632] ? lockdep_hardirqs_on+0x7b/0x110 [ 200.332415][ T7632] ? __pfx_warn_alloc+0x10/0x10 [ 200.332440][ T7632] ? kfree+0x1c5/0x650 [ 200.332470][ T7632] ? __get_vm_area_node+0x219/0x2f0 [ 200.332502][ T7632] __vmalloc_node_range_noprof+0x36b/0x1540 [ 200.332530][ T7632] ? rcu_is_watching+0x16/0xb0 [ 200.332558][ T7632] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 200.332583][ T7632] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 200.332612][ T7632] ? bpf_check+0x106b/0x2e10 [ 200.332634][ T7632] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 200.332665][ T7632] ? security_capable+0xb9/0x2c0 [ 200.332686][ T7632] ? bpf_check+0x10ee/0x2e10 [ 200.332703][ T7632] __vmalloc_noprof+0xd2/0x120 [ 200.332727][ T7632] ? bpf_check+0x10ee/0x2e10 [ 200.332749][ T7632] bpf_check+0x10ee/0x2e10 [ 200.332778][ T7632] ? ktime_get_with_offset+0x93/0x2d0 [ 200.332801][ T7632] ? __pfx_bpf_check+0x10/0x10 [ 200.332832][ T7632] ? bpf_obj_name_cpy+0x194/0x1e0 [ 200.332860][ T7632] bpf_prog_load+0x14d6/0x1c20 [ 200.332892][ T7632] ? __pfx_bpf_prog_load+0x10/0x10 [ 200.332936][ T7632] __sys_bpf+0xd0d/0xd90 [ 200.332963][ T7632] ? __pfx___sys_bpf+0x10/0x10 [ 200.332986][ T7632] ? ksys_write+0x1e6/0x270 [ 200.333014][ T7632] ? __mutex_unlock_slowpath+0x731/0x900 [ 200.333057][ T7632] ? fput+0xa0/0xd0 [ 200.333078][ T7632] ? ksys_write+0x242/0x270 [ 200.333107][ T7632] __ia32_sys_bpf+0xba/0xd0 [ 200.333129][ T7632] __do_fast_syscall_32+0x27a/0x6a0 [ 200.333147][ T7632] ? do_fast_syscall_32+0x33/0x70 [ 200.333163][ T7632] ? asm_int80_emulation+0x1a/0x20 [ 200.333182][ T7632] ? do_int80_emulation+0x299/0x500 [ 200.333207][ T7632] ? trace_irq_disable+0x3b/0x140 [ 200.333227][ T7632] do_fast_syscall_32+0x33/0x70 [ 200.333244][ T7632] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 200.333266][ T7632] RIP: 0023:0xf6fdf0ec [ 200.333284][ T7632] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 200.333300][ T7632] RSP: 002b:00000000f53cd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 200.333318][ T7632] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800001c0 [ 200.333332][ T7632] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 200.333343][ T7632] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 200.333354][ T7632] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 200.333365][ T7632] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 200.333393][ T7632] [ 200.333437][ T7632] Mem-Info: [ 200.333448][ T7632] active_anon:6417 inactive_anon:9 isolated_anon:0 [ 200.333448][ T7632] active_file:8755 inactive_file:48389 isolated_file:0 [ 200.333448][ T7632] unevictable:0 dirty:22 writeback:0 [ 200.333448][ T7632] slab_reclaimable:10652 slab_unreclaimable:95244 [ 200.333448][ T7632] mapped:31354 shmem:523 pagetables:1263 [ 200.333448][ T7632] sec_pagetables:0 bounce:0 [ 200.333448][ T7632] kernel_misc_reclaimable:0 [ 200.333448][ T7632] free:1295240 free_pcp:10600 free_cma:0 [ 200.333499][ T7632] Node 0 active_anon:25668kB inactive_anon:36kB active_file:35020kB inactive_file:193308kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:125416kB dirty:88kB writeback:0kB shmem:2092kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13580kB pagetables:4944kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 200.333576][ T7632] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:248kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:108kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 200.333619][ T7632] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 200.345237][ T7632] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 200.345282][ T7632] Node 0 DMA32 free:1242508kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:25668kB inactive_anon:36kB active_file:35020kB inactive_file:193308kB unevictable:0kB writepending:88kB zspages:0kB present:3129332kB managed:2546736kB mlocked:0kB bounce:0kB free_pcp:30560kB local_pcp:17428kB free_cma:0kB [ 200.345366][ T7632] lowmem_reserve[]: 0 0 0 0 0 [ 200.345400][ T7632] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 200.345451][ T7632] lowmem_reserve[]: 0 0 0 0 0 [ 200.345510][ T7632] Node 1 Normal free:3923092kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:248kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:11756kB local_pcp:9352kB free_cma:0kB [ 200.345564][ T7632] lowmem_reserve[]: 0 0 0 0 0 [ 200.345597][ T7632] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 200.345731][ T7632] Node 0 DMA32: 2839*4kB (UME) 1358*8kB (UME) 674*16kB (UME) 461*32kB (UME) 231*64kB (UME) 92*128kB (UME) 35*256kB (UM) 20*512kB (UME) 14*1024kB (UME) 10*2048kB (UME) 272*4096kB (M) = 1242444kB [ 200.347153][ T7632] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 200.347273][ T7632] Node 1 Normal: 5*4kB (UM) 8*8kB (UM) 8*16kB (UM) 6*32kB (UM) 4*64kB (UM) 4*128kB (UM) 6*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 2*2048kB (U) 955*4096kB (M) = 3923092kB [ 200.347450][ T7632] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 200.347466][ T7632] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 200.347481][ T7632] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 200.347496][ T7632] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 200.347535][ T7632] 57675 total pagecache pages [ 200.347543][ T7632] 12 pages in swap cache [ 200.347549][ T7632] Free swap = 124948kB [ 200.347556][ T7632] Total swap = 124996kB [ 200.347564][ T7632] 2097051 pages RAM [ 200.347571][ T7632] 0 pages HighMem/MovableOnly [ 200.347577][ T7632] 428751 pages reserved [ 200.347584][ T7632] 0 pages cma reserved [ 201.549066][ T5352] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 201.648667][ T5828] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 201.699738][ T5352] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 201.701076][ T5352] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 201.701127][ T5352] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 201.701150][ T5352] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 201.701248][ T5352] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.718701][ T44] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 201.839421][ T5828] usb 3-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 201.840801][ T5828] usb 3-1: config 128 has an invalid interface number: 148 but max is 0 [ 201.840828][ T5828] usb 3-1: config 128 has no interface number 0 [ 201.840866][ T5828] usb 3-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 201.840896][ T5828] usb 3-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 201.840921][ T5828] usb 3-1: config 128 interface 148 has no altsetting 0 [ 201.842922][ T5828] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.842943][ T5828] usb 3-1: Product: syz [ 201.842964][ T5828] usb 3-1: Manufacturer: syz [ 201.842984][ T5828] usb 3-1: SerialNumber: syz [ 201.878667][ T44] usb 4-1: Using ep0 maxpacket: 32 [ 201.880901][ T44] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 201.882272][ T44] usb 4-1: config index 0 descriptor too short (expected 19, got 18) [ 201.884965][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.884987][ T44] usb 4-1: Product: syz [ 201.885000][ T44] usb 4-1: Manufacturer: syz [ 201.885045][ T44] usb 4-1: SerialNumber: syz [ 201.889237][ T5827] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 201.890523][ T44] usb 4-1: config 0 descriptor?? [ 201.895360][ T44] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 201.895439][ T44] dvb-usb: bulk message failed: -22 (2/0) [ 201.910138][ T44] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 201.915065][ T44] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 201.915152][ T44] usb 4-1: media controller created [ 201.919367][ T5352] usb 1-1: usb_control_msg returned -32 [ 201.919416][ T5352] usbtmc 1-1:16.0: can't read capabilities [ 201.955016][ T44] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 202.002524][ T44] usb 4-1: selecting invalid altsetting 7 [ 202.002545][ T44] cxusb: set interface failed [ 202.002557][ T44] dvb-usb: bulk message failed: -22 (1/0) [ 202.050062][ T44] DVB: Unable to find symbol lgdt330x_attach() [ 202.050103][ T44] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 202.077510][ T5828] usb 3-1: USB disconnect, device number 31 [ 202.099938][ T5827] usb 5-1: Using ep0 maxpacket: 16 [ 202.101202][ T7646] cxusb: i2c rd: len=87 is too big! [ 202.101202][ T7646] [ 202.105753][ T5827] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 202.135453][ T5827] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.168929][ T5827] usb 5-1: config 0 descriptor?? [ 202.185093][ T5827] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 202.257879][ T5825] usb 1-1: USB disconnect, device number 25 [ 202.268959][ T44] rc_core: IR keymap rc-dvico-portable not found [ 202.275811][ T44] Registered IR keymap rc-empty [ 202.289955][ T44] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 202.304832][ T44] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input25 [ 202.319130][ T44] dvb-usb: schedule remote query interval to 100 msecs. [ 202.327181][ T44] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 202.429578][ T5352] dvb-usb: bulk message failed: -22 (1/0) [ 202.538657][ T5352] dvb-usb: bulk message failed: -22 (1/0) [ 202.644049][ T5352] usb 4-1: USB disconnect, device number 21 [ 202.659799][ T5828] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 202.714676][ T5352] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 202.808817][ T5828] usb 3-1: Using ep0 maxpacket: 8 [ 202.809969][ T5828] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 202.811799][ T5828] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 202.811850][ T5828] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 202.811871][ T5828] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 202.811921][ T5828] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 16 [ 202.811944][ T5828] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 202.811983][ T5828] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.027790][ T5828] usb 3-1: usb_control_msg returned -32 [ 203.027899][ T5828] usbtmc 3-1:16.0: can't read capabilities [ 203.456037][ T7665] netlink: 'syz.3.464': attribute type 1 has an invalid length. [ 203.494736][ T7665] 8021q: adding VLAN 0 to HW filter on device bond1 [ 203.520488][ T7665] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 203.527537][ T7665] bond1: (slave batadv1): making interface the new active one [ 203.538426][ T7665] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 203.811100][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 203.811189][ T30] audit: type=1326 audit(1788384066.976:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7643 comm="syz.2.459" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 203.846727][ T30] audit: type=1326 audit(1788384067.006:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7643 comm="syz.2.459" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=27 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 203.873967][ T30] audit: type=1326 audit(1788384067.006:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7643 comm="syz.2.459" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 203.874077][ T30] audit: type=1326 audit(1788384067.036:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7643 comm="syz.2.459" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 203.874116][ T30] audit: type=1326 audit(1788384067.036:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7643 comm="syz.2.459" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 203.874183][ T30] audit: type=1326 audit(1788384067.036:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7643 comm="syz.2.459" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 203.904084][ T30] audit: type=1326 audit(1788384067.036:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7643 comm="syz.2.459" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 203.914744][ T30] audit: type=1326 audit(1788384067.066:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7643 comm="syz.2.459" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 203.918474][ T30] audit: type=1326 audit(1788384067.076:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7643 comm="syz.2.459" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 203.918627][ T30] audit: type=1326 audit(1788384067.076:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7643 comm="syz.2.459" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 203.977378][ T7604] ldusb 2-1:0.0: Couldn't submit HID_REQ_SET_REPORT -110 [ 204.182161][ T5828] usb 2-1: USB disconnect, device number 23 [ 204.191829][ T5828] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 204.530912][ T5827] usb 5-1: Detected FT232A [ 204.545521][ T5827] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 204.552775][ T5827] usb 5-1: USB disconnect, device number 21 [ 204.562558][ T5827] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 204.579405][ T5827] ftdi_sio 5-1:0.0: device disconnected [ 205.206075][ T5352] usb 3-1: USB disconnect, device number 32 [ 205.310976][ T7692] FAULT_INJECTION: forcing a failure. [ 205.310976][ T7692] name failslab, interval 1, probability 0, space 0, times 0 [ 205.324575][ T7692] CPU: 1 UID: 0 PID: 7692 Comm: syz.0.473 Not tainted syzkaller #0 PREEMPT(full) [ 205.324606][ T7692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 205.324618][ T7692] Call Trace: [ 205.324626][ T7692] [ 205.324634][ T7692] dump_stack_lvl+0xe8/0x150 [ 205.324677][ T7692] should_fail_ex+0x410/0x560 [ 205.324713][ T7692] should_failslab+0xa8/0x100 [ 205.324737][ T7692] __kmalloc_cache_noprof+0xa3/0x600 [ 205.324765][ T7692] ? rcu_is_watching+0x16/0xb0 [ 205.324789][ T7692] ? __hw_addr_create+0x62/0x240 [ 205.324810][ T7692] ? __hw_addr_create+0x62/0x240 [ 205.324837][ T7692] __hw_addr_create+0x62/0x240 [ 205.324863][ T7692] __hw_addr_add_ex+0x1ce/0x520 [ 205.324892][ T7692] dev_addr_init+0x15a/0x240 [ 205.324916][ T7692] ? __pfx_dev_addr_init+0x10/0x10 [ 205.324941][ T7692] ? __kvmalloc_node_noprof+0x345/0x820 [ 205.324970][ T7692] alloc_netdev_mqs+0x2b4/0x12a0 [ 205.324992][ T7692] ? __pfx_snprintf+0x10/0x10 [ 205.325013][ T7692] ? __pfx_ipip_tunnel_setup+0x10/0x10 [ 205.325045][ T7692] rtnl_create_link+0x321/0xd70 [ 205.325076][ T7692] rtnl_newlink_create+0x258/0x7b0 [ 205.325105][ T7692] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 205.325132][ T7692] ? __pfx___mutex_lock+0x10/0x10 [ 205.325169][ T7692] ? ns_capable+0x89/0xe0 [ 205.325201][ T7692] rtnl_newlink+0x166d/0x1c30 [ 205.325240][ T7692] ? __pfx_rtnl_newlink+0x10/0x10 [ 205.325258][ T7692] ? __do_fast_syscall_32+0x27a/0x6a0 [ 205.325277][ T7692] ? do_fast_syscall_32+0x33/0x70 [ 205.325294][ T7692] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 205.325356][ T7692] ? kasan_quarantine_put+0xbb/0x1f0 [ 205.325387][ T7692] ? lockdep_hardirqs_on+0x7b/0x110 [ 205.325421][ T7692] ? nlmon_xmit+0xb0/0x100 [ 205.325450][ T7692] ? kmem_cache_free+0x182/0x650 [ 205.325483][ T7692] ? __lock_acquire+0x6df/0x2e50 [ 205.325509][ T7692] ? __dev_queue_xmit+0x29b/0x3820 [ 205.325536][ T7692] ? __local_bh_enable_ip+0xd6/0x140 [ 205.325561][ T7692] ? lockdep_hardirqs_on+0x7b/0x110 [ 205.325588][ T7692] ? __dev_queue_xmit+0x29b/0x3820 [ 205.325609][ T7692] ? __local_bh_enable_ip+0xd6/0x140 [ 205.325632][ T7692] ? __dev_queue_xmit+0x29b/0x3820 [ 205.325673][ T7692] ? lock_acquire+0x115/0x350 [ 205.325710][ T7692] ? __pfx_rtnl_newlink+0x10/0x10 [ 205.325728][ T7692] rtnetlink_rcv_msg+0x802/0xc00 [ 205.325763][ T7692] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 205.325793][ T7692] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 205.325822][ T7692] ? ref_tracker_free+0x689/0x830 [ 205.325851][ T7692] ? __pfx_ref_tracker_free+0x10/0x10 [ 205.325884][ T7692] netlink_rcv_skb+0x226/0x4a0 [ 205.325912][ T7692] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 205.325946][ T7692] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 205.325986][ T7692] ? netlink_deliver_tap+0x2e/0x1b0 [ 205.326011][ T7692] ? netlink_deliver_tap+0x2e/0x1b0 [ 205.326042][ T7692] netlink_unicast+0x7bd/0x940 [ 205.326078][ T7692] netlink_sendmsg+0x813/0xb40 [ 205.326115][ T7692] ? __pfx_netlink_sendmsg+0x10/0x10 [ 205.326149][ T7692] ? apparmor_socket_sendmsg+0x98/0x360 [ 205.326181][ T7692] ? __pfx_netlink_sendmsg+0x10/0x10 [ 205.326204][ T7692] sock_sendmsg_nosec+0x13a/0x180 [ 205.326235][ T7692] ____sys_sendmsg+0x54e/0x850 [ 205.326261][ T7692] ? __pfx_____sys_sendmsg+0x10/0x10 [ 205.326296][ T7692] ___sys_sendmsg+0x2a5/0x360 [ 205.326318][ T7692] ? __lock_acquire+0x6df/0x2e50 [ 205.326344][ T7692] ? __pfx____sys_sendmsg+0x10/0x10 [ 205.326364][ T7692] ? get_pid_task+0x20/0x1f0 [ 205.326384][ T7692] ? get_pid_task+0x20/0x1f0 [ 205.326400][ T7692] ? get_pid_task+0x20/0x1f0 [ 205.326453][ T7692] ? __fget_files+0x2a/0x420 [ 205.326479][ T7692] ? __fget_files+0x3a2/0x420 [ 205.326515][ T7692] __sys_sendmsg+0x177/0x240 [ 205.326540][ T7692] ? __pfx___sys_sendmsg+0x10/0x10 [ 205.326585][ T7692] __do_fast_syscall_32+0x27a/0x6a0 [ 205.326606][ T7692] ? do_fast_syscall_32+0x33/0x70 [ 205.326623][ T7692] ? asm_int80_emulation+0x1a/0x20 [ 205.326643][ T7692] ? do_int80_emulation+0x299/0x500 [ 205.326685][ T7692] do_fast_syscall_32+0x33/0x70 [ 205.326706][ T7692] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 205.326729][ T7692] RIP: 0023:0xf70bf0ec [ 205.326748][ T7692] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 205.326766][ T7692] RSP: 002b:00000000f54ad50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 205.326788][ T7692] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 205.326803][ T7692] RDX: 00000000040008c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 205.326815][ T7692] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 205.326828][ T7692] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 205.326840][ T7692] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 205.326872][ T7692] [ 205.878834][ T5352] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 205.996857][ T7707] FAULT_INJECTION: forcing a failure. [ 205.996857][ T7707] name failslab, interval 1, probability 0, space 0, times 0 [ 205.996920][ T7707] CPU: 0 UID: 0 PID: 7707 Comm: syz.4.479 Not tainted syzkaller #0 PREEMPT(full) [ 205.996944][ T7707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 205.996954][ T7707] Call Trace: [ 205.996960][ T7707] [ 205.996968][ T7707] dump_stack_lvl+0xe8/0x150 [ 205.996999][ T7707] should_fail_ex+0x410/0x560 [ 205.997031][ T7707] should_failslab+0xa8/0x100 [ 205.997054][ T7707] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 205.997081][ T7707] ? __kasan_kmalloc+0x93/0xb0 [ 205.997105][ T7707] ? __request_module+0x2ec/0x630 [ 205.997125][ T7707] ? __request_module+0x2ec/0x630 [ 205.997147][ T7707] ? __kmalloc_cache_noprof+0x14d/0x600 [ 205.997176][ T7707] kstrdup+0x42/0x100 [ 205.997210][ T7707] __request_module+0x2ec/0x630 [ 205.997237][ T7707] ? __pfx___request_module+0x10/0x10 [ 205.997269][ T7707] ? rtnl_link_ops_get+0x23/0x250 [ 205.997287][ T7707] ? rtnl_link_ops_get+0x23/0x250 [ 205.997307][ T7707] ? rtnl_link_ops_get+0x215/0x250 [ 205.997330][ T7707] rtnl_newlink+0x662/0x1c30 [ 205.997351][ T7707] ? __lock_acquire+0x6df/0x2e50 [ 205.997375][ T7707] ? __pfx_rtnl_newlink+0x10/0x10 [ 205.997394][ T7707] ? __lock_acquire+0x6df/0x2e50 [ 205.997418][ T7707] ? __lock_acquire+0x6df/0x2e50 [ 205.997449][ T7707] ? lock_acquire+0x115/0x350 [ 205.997473][ T7707] ? lock_acquire+0x115/0x350 [ 205.997499][ T7707] ? is_bpf_text_address+0x26/0x2b0 [ 205.997525][ T7707] ? __lock_acquire+0x6df/0x2e50 [ 205.997546][ T7707] ? kernel_text_address+0xa5/0xe0 [ 205.997567][ T7707] ? __kernel_text_address+0xd/0x30 [ 205.997586][ T7707] ? unwind_get_return_address+0x4d/0x90 [ 205.997607][ T7707] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 205.997634][ T7707] ? arch_stack_walk+0xfb/0x150 [ 205.997664][ T7707] ? lock_acquire+0x115/0x350 [ 205.997695][ T7707] ? __pfx_rtnl_newlink+0x10/0x10 [ 205.997711][ T7707] rtnetlink_rcv_msg+0x802/0xc00 [ 205.997737][ T7707] ? netlink_sendmsg+0x5d4/0xb40 [ 205.997762][ T7707] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 205.997787][ T7707] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 205.997815][ T7707] ? __lock_acquire+0x6df/0x2e50 [ 205.997844][ T7707] netlink_rcv_skb+0x226/0x4a0 [ 205.997866][ T7707] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 205.997894][ T7707] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 205.997927][ T7707] ? netlink_deliver_tap+0x2e/0x1b0 [ 205.997947][ T7707] ? netlink_deliver_tap+0x2e/0x1b0 [ 205.997974][ T7707] netlink_unicast+0x7bd/0x940 [ 205.998003][ T7707] netlink_sendmsg+0x813/0xb40 [ 205.998033][ T7707] ? __pfx_netlink_sendmsg+0x10/0x10 [ 205.998062][ T7707] ? apparmor_socket_sendmsg+0x98/0x360 [ 205.998091][ T7707] ? __pfx_netlink_sendmsg+0x10/0x10 [ 205.998112][ T7707] sock_sendmsg_nosec+0x13a/0x180 [ 205.998139][ T7707] ____sys_sendmsg+0x54e/0x850 [ 205.998163][ T7707] ? __pfx_____sys_sendmsg+0x10/0x10 [ 205.998205][ T7707] ___sys_sendmsg+0x2a5/0x360 [ 205.998223][ T7707] ? __lock_acquire+0x6df/0x2e50 [ 205.998245][ T7707] ? __pfx____sys_sendmsg+0x10/0x10 [ 205.998264][ T7707] ? get_pid_task+0x20/0x1f0 [ 205.998281][ T7707] ? get_pid_task+0x20/0x1f0 [ 205.998296][ T7707] ? get_pid_task+0x20/0x1f0 [ 205.998340][ T7707] ? __fget_files+0x2a/0x420 [ 205.998362][ T7707] ? __fget_files+0x3a2/0x420 [ 205.998394][ T7707] __sys_sendmsg+0x177/0x240 [ 205.998416][ T7707] ? __pfx___sys_sendmsg+0x10/0x10 [ 205.998452][ T7707] __do_fast_syscall_32+0x27a/0x6a0 [ 205.998472][ T7707] ? do_fast_syscall_32+0x33/0x70 [ 205.998488][ T7707] ? asm_int80_emulation+0x1a/0x20 [ 205.998505][ T7707] ? do_int80_emulation+0x299/0x500 [ 205.998530][ T7707] ? trace_irq_disable+0x3b/0x140 [ 205.998551][ T7707] do_fast_syscall_32+0x33/0x70 [ 205.998568][ T7707] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 205.998590][ T7707] RIP: 0023:0xf706f0ec [ 205.998608][ T7707] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 205.998624][ T7707] RSP: 002b:00000000f545d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 205.998645][ T7707] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000000 [ 205.998659][ T7707] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 205.998670][ T7707] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 205.998680][ T7707] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 205.998691][ T7707] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 205.998718][ T7707] [ 206.100117][ T5352] usb 3-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 206.122393][ T5352] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 206.122431][ T5352] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.122454][ T5352] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 206.122497][ T5352] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.290093][ T5352] usb 3-1: config 0 descriptor?? [ 206.535260][ T7715] netlink: 'syz.0.483': attribute type 4 has an invalid length. [ 206.535327][ T7715] netlink: 152 bytes leftover after parsing attributes in process `syz.0.483'. [ 206.775415][ T5352] hid-multitouch 0003:0457:07DA.000A: unknown main item tag 0x0 [ 206.783366][ T5352] hid-multitouch 0003:0457:07DA.000A: unknown main item tag 0x0 [ 206.783402][ T5352] hid-multitouch 0003:0457:07DA.000A: unknown main item tag 0x0 [ 206.783428][ T5352] hid-multitouch 0003:0457:07DA.000A: unknown main item tag 0x0 [ 206.783454][ T5352] hid-multitouch 0003:0457:07DA.000A: unknown main item tag 0x0 [ 206.783479][ T5352] hid-multitouch 0003:0457:07DA.000A: unknown main item tag 0x0 [ 206.783506][ T5352] hid-multitouch 0003:0457:07DA.000A: unknown main item tag 0x0 [ 206.783533][ T5352] hid-multitouch 0003:0457:07DA.000A: unknown main item tag 0x0 [ 206.783559][ T5352] hid-multitouch 0003:0457:07DA.000A: unknown main item tag 0x0 [ 206.783585][ T5352] hid-multitouch 0003:0457:07DA.000A: unknown main item tag 0x0 [ 206.860598][ T5352] hid-multitouch 0003:0457:07DA.000A: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.2-1/input0 [ 206.879990][ T5828] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 207.037776][ T5828] usb 1-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 207.044012][ T5828] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 207.044041][ T5828] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 207.044064][ T5828] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 5632, setting to 64 [ 207.050790][ T5828] usb 1-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 207.050820][ T5828] usb 1-1: Manufacturer: syz [ 207.062557][ T5828] usb 1-1: config 0 descriptor?? [ 207.092209][ T5828] smsusb:smsusb_probe: board id=9, interface number 0 [ 207.122972][ T7719] netlink: 'syz.4.484': attribute type 4 has an invalid length. [ 207.122999][ T5828] smsusb:siano_media_device_register: media controller created [ 207.136486][ T5828] smsusb:smsusb_start_streaming: smsusb_submit_urb(...) failed [ 207.136514][ T5828] smsusb:smsusb_init_device: smsusb_start_streaming(...) failed [ 207.155730][ T5828] ------------[ cut here ]------------ [ 207.155749][ T5828] !PageLargeKmalloc(page) [ 207.155760][ T5828] WARNING: mm/slub.c:6724 at free_large_kmalloc+0x97/0x110, CPU#0: kworker/0:18/5828 [ 207.176230][ T5828] Modules linked in: [ 207.180419][ T5828] CPU: 0 UID: 0 PID: 5828 Comm: kworker/0:18 Not tainted syzkaller #0 PREEMPT(full) [ 207.190438][ T5828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 207.200812][ T5828] Workqueue: usb_hub_wq hub_event [ 207.207556][ T5828] RIP: 0010:free_large_kmalloc+0x97/0x110 [ 207.213481][ T5828] Code: 8b 43 30 83 f8 ff 74 13 25 00 00 00 ff 3d 00 00 00 f8 75 7a c7 43 30 ff ff ff ff 48 89 df 89 ee 5b 41 5e 5d e9 2a af fc ff 90 <0f> 0b 90 48 89 df 48 c7 c6 fa 04 49 8e 5b 41 5e 5d e9 e3 0a fc fe [ 207.233410][ T5828] RSP: 0018:ffffc900052aeb08 EFLAGS: 00010206 [ 207.239777][ T5828] RAX: 00000000ff000000 RBX: ffffea000117f880 RCX: 0000000000000001 [ 207.247796][ T5828] RDX: ffffc9001e321000 RSI: ffff888045fe2000 RDI: ffffea000117f880 [ 207.256405][ T5828] RBP: 0000000000000000 R08: ffff888054c4a103 R09: 1ffff1100a989420 [ 207.264848][ T5828] R10: dffffc0000000000 R11: ffffed100a989421 R12: 1ffff11004b0d082 [ 207.273481][ T5828] R13: 0000000000000000 R14: ffff888054c4a160 R15: dffffc0000000000 [ 207.282080][ T5828] FS: 0000000000000000(0000) GS:ffff888124cda000(0000) knlGS:0000000000000000 [ 207.291306][ T5828] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 207.297932][ T5828] CR2: 000000000c3bdb7b CR3: 00000000558d6000 CR4: 00000000003526f0 [ 207.306279][ T5828] Call Trace: [ 207.309749][ T5828] [ 207.312748][ T5828] usb_free_urb+0xd0/0x120 [ 207.317224][ T5828] smsusb_term_device+0x1d0/0x3d0 [ 207.322347][ T5828] smsusb_probe+0x1aba/0x2280 [ 207.327077][ T5828] ? __pfx_smsusb_probe+0x10/0x10 [ 207.332213][ T5828] ? do_raw_spin_lock+0x12b/0x2f0 [ 207.337318][ T5828] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 207.342993][ T5828] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 207.345914][ T5803] usb 3-1: USB disconnect, device number 33 [ 207.356345][ T5828] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 207.362931][ T5828] ? __pm_runtime_set_status+0x994/0xc80 [ 207.369237][ T5828] usb_probe_interface+0x788/0xe50 [ 207.374627][ T5828] ? __pfx_usb_probe_interface+0x10/0x10 [ 207.381303][ T5828] ? sysfs_do_create_link_sd+0xe0/0x110 [ 207.387655][ T5828] ? driver_sysfs_add+0x1fe/0x210 [ 207.393665][ T5828] ? __pfx_usb_probe_interface+0x10/0x10 [ 207.399615][ T5828] really_probe+0x254/0xae0 [ 207.404257][ T5828] __driver_probe_device+0x1e8/0x360 [ 207.409870][ T5828] driver_probe_device+0x4f/0x240 [ 207.414972][ T5828] __device_attach_driver+0x270/0x410 [ 207.420473][ T5828] bus_for_each_drv+0x258/0x2f0 [ 207.425466][ T5828] ? __pfx___device_attach_driver+0x10/0x10 [ 207.431623][ T5828] ? __pfx_bus_for_each_drv+0x10/0x10 [ 207.437237][ T5828] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 207.443528][ T5828] __device_attach+0x2c4/0x450 [ 207.448442][ T5828] ? __pfx___device_attach+0x10/0x10 [ 207.454021][ T5828] ? do_raw_spin_unlock+0xf5/0x200 [ 207.459321][ T5828] ? _raw_spin_unlock+0x28/0x50 [ 207.464219][ T5828] device_initial_probe+0xa1/0xd0 [ 207.469467][ T5828] bus_probe_device+0x12a/0x220 [ 207.475532][ T5828] device_add+0x7d7/0xb80 [ 207.479969][ T5828] usb_set_configuration+0x1ad8/0x2180 [ 207.485591][ T5828] usb_generic_driver_probe+0x8d/0x150 [ 207.491340][ T5828] usb_probe_device+0x1c3/0x3b0 [ 207.496330][ T5828] ? __pfx_usb_probe_device+0x10/0x10 [ 207.501822][ T5828] really_probe+0x254/0xae0 [ 207.506384][ T5828] __driver_probe_device+0x1e8/0x360 [ 207.511865][ T5828] driver_probe_device+0x4f/0x240 [ 207.516954][ T5828] __device_attach_driver+0x270/0x410 [ 207.522577][ T5828] bus_for_each_drv+0x258/0x2f0 [ 207.527572][ T5828] ? __pfx___device_attach_driver+0x10/0x10 [ 207.533701][ T5828] ? __pfx_bus_for_each_drv+0x10/0x10 [ 207.539603][ T5828] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 207.545646][ T5828] __device_attach+0x2c4/0x450 [ 207.550519][ T5828] ? __pfx___device_attach+0x10/0x10 [ 207.556020][ T5828] ? do_raw_spin_unlock+0xf5/0x200 [ 207.561262][ T5828] ? _raw_spin_unlock+0x28/0x50 [ 207.566165][ T5828] device_initial_probe+0xa1/0xd0 [ 207.571643][ T5828] bus_probe_device+0x12a/0x220 [ 207.576576][ T5828] device_add+0x7d7/0xb80 [ 207.581008][ T5828] usb_new_device+0x9aa/0x1690 [ 207.585827][ T5828] ? __pfx_usb_new_device+0x10/0x10 [ 207.591137][ T5828] ? _raw_spin_unlock_irq+0x23/0x50 [ 207.596397][ T5828] hub_event+0x28e8/0x4d30 [ 207.600977][ T5828] ? do_raw_spin_unlock+0xf5/0x200 [ 207.606296][ T5828] ? __pfx_hub_event+0x10/0x10 [ 207.611250][ T5828] ? rcu_is_watching+0x16/0xb0 [ 207.616148][ T5828] ? process_scheduled_works+0x97a/0x1630 [ 207.622166][ T5828] process_scheduled_works+0xc3d/0x1630 [ 207.627803][ T5828] ? __pfx_process_scheduled_works+0x10/0x10 [ 207.634022][ T5828] ? assign_work+0x3cf/0x5d0 [ 207.638890][ T5828] worker_thread+0xa47/0xfb0 [ 207.643609][ T5828] ? __kthread_parkme+0x71/0x1f0 [ 207.648711][ T5828] kthread+0x38b/0x480 [ 207.652851][ T5828] ? __pfx_worker_thread+0x10/0x10 [ 207.658071][ T5828] ? __pfx_kthread+0x10/0x10 [ 207.662854][ T5828] ret_from_fork+0x514/0xb70 [ 207.667568][ T5828] ? __pfx_ret_from_fork+0x10/0x10 [ 207.672953][ T5828] ? __switch_to+0xc89/0x1420 [ 207.677768][ T5828] ? __pfx_kthread+0x10/0x10 [ 207.682530][ T5828] ret_from_fork_asm+0x1a/0x30 [ 207.687433][ T5828] [ 207.691074][ T5828] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 207.698834][ T5828] CPU: 0 UID: 0 PID: 5828 Comm: kworker/0:18 Not tainted syzkaller #0 PREEMPT(full) [ 207.708681][ T5828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 207.718926][ T5828] Workqueue: usb_hub_wq hub_event [ 207.724081][ T5828] Call Trace: [ 207.727627][ T5828] [ 207.730697][ T5828] vpanic+0x56d/0xa60 [ 207.734694][ T5828] ? __pfx__printk+0x10/0x10 [ 207.739289][ T5828] ? __pfx_vpanic+0x10/0x10 [ 207.743890][ T5828] ? is_bpf_text_address+0x292/0x2b0 [ 207.749271][ T5828] ? is_bpf_text_address+0x26/0x2b0 [ 207.754494][ T5828] panic+0xc5/0xd0 [ 207.758237][ T5828] ? __pfx_panic+0x10/0x10 [ 207.762692][ T5828] ? ret_from_fork_asm+0x1a/0x30 [ 207.767655][ T5828] __warn+0x315/0x4c0 [ 207.771654][ T5828] ? free_large_kmalloc+0x97/0x110 [ 207.776785][ T5828] ? free_large_kmalloc+0x97/0x110 [ 207.781903][ T5828] __report_bug+0x276/0x570 [ 207.786458][ T5828] ? bus_for_each_drv+0x258/0x2f0 [ 207.792027][ T5828] ? __device_attach+0x2c4/0x450 [ 207.796992][ T5828] ? device_initial_probe+0xa1/0xd0 [ 207.802213][ T5828] ? free_large_kmalloc+0x97/0x110 [ 207.807365][ T5828] ? __pfx___report_bug+0x10/0x10 [ 207.812429][ T5828] ? bus_probe_device+0x12a/0x220 [ 207.817552][ T5828] ? device_add+0x7d7/0xb80 [ 207.822075][ T5828] ? usb_new_device+0x9aa/0x1690 [ 207.827047][ T5828] ? hub_event+0x28e8/0x4d30 [ 207.831738][ T5828] ? process_scheduled_works+0xc3d/0x1630 [ 207.837557][ T5828] ? worker_thread+0xa47/0xfb0 [ 207.842332][ T5828] ? kthread+0x38b/0x480 [ 207.846597][ T5828] ? smscore_unregister_device+0x651/0x780 [ 207.852600][ T5828] ? free_large_kmalloc+0x97/0x110 [ 207.857730][ T5828] report_bug+0x16b/0x220 [ 207.862079][ T5828] ? free_large_kmalloc+0x97/0x110 [ 207.867198][ T5828] ? free_large_kmalloc+0x99/0x110 [ 207.872317][ T5828] handle_bug+0x9c/0x200 [ 207.876668][ T5828] exc_invalid_op+0x1a/0x50 [ 207.881188][ T5828] asm_exc_invalid_op+0x1a/0x20 [ 207.886050][ T5828] RIP: 0010:free_large_kmalloc+0x97/0x110 [ 207.891968][ T5828] Code: 8b 43 30 83 f8 ff 74 13 25 00 00 00 ff 3d 00 00 00 f8 75 7a c7 43 30 ff ff ff ff 48 89 df 89 ee 5b 41 5e 5d e9 2a af fc ff 90 <0f> 0b 90 48 89 df 48 c7 c6 fa 04 49 8e 5b 41 5e 5d e9 e3 0a fc fe [ 207.911950][ T5828] RSP: 0018:ffffc900052aeb08 EFLAGS: 00010206 [ 207.918360][ T5828] RAX: 00000000ff000000 RBX: ffffea000117f880 RCX: 0000000000000001 [ 207.926872][ T5828] RDX: ffffc9001e321000 RSI: ffff888045fe2000 RDI: ffffea000117f880 [ 207.935003][ T5828] RBP: 0000000000000000 R08: ffff888054c4a103 R09: 1ffff1100a989420 [ 207.943106][ T5828] R10: dffffc0000000000 R11: ffffed100a989421 R12: 1ffff11004b0d082 [ 207.951102][ T5828] R13: 0000000000000000 R14: ffff888054c4a160 R15: dffffc0000000000 [ 207.959123][ T5828] usb_free_urb+0xd0/0x120 [ 207.963637][ T5828] smsusb_term_device+0x1d0/0x3d0 [ 207.968796][ T5828] smsusb_probe+0x1aba/0x2280 [ 207.973560][ T5828] ? __pfx_smsusb_probe+0x10/0x10 [ 207.978592][ T5828] ? do_raw_spin_lock+0x12b/0x2f0 [ 207.983735][ T5828] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 207.989321][ T5828] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 207.995323][ T5828] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 208.001156][ T5828] ? __pm_runtime_set_status+0x994/0xc80 [ 208.006832][ T5828] usb_probe_interface+0x788/0xe50 [ 208.012291][ T5828] ? __pfx_usb_probe_interface+0x10/0x10 [ 208.017934][ T5828] ? sysfs_do_create_link_sd+0xe0/0x110 [ 208.023537][ T5828] ? driver_sysfs_add+0x1fe/0x210 [ 208.028667][ T5828] ? __pfx_usb_probe_interface+0x10/0x10 [ 208.034426][ T5828] really_probe+0x254/0xae0 [ 208.039027][ T5828] __driver_probe_device+0x1e8/0x360 [ 208.044337][ T5828] driver_probe_device+0x4f/0x240 [ 208.049494][ T5828] __device_attach_driver+0x270/0x410 [ 208.054979][ T5828] bus_for_each_drv+0x258/0x2f0 [ 208.059858][ T5828] ? __pfx___device_attach_driver+0x10/0x10 [ 208.065786][ T5828] ? __pfx_bus_for_each_drv+0x10/0x10 [ 208.071277][ T5828] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 208.077202][ T5828] __device_attach+0x2c4/0x450 [ 208.081975][ T5828] ? __pfx___device_attach+0x10/0x10 [ 208.087265][ T5828] ? do_raw_spin_unlock+0xf5/0x200 [ 208.092400][ T5828] ? _raw_spin_unlock+0x28/0x50 [ 208.097269][ T5828] device_initial_probe+0xa1/0xd0 [ 208.102480][ T5828] bus_probe_device+0x12a/0x220 [ 208.107591][ T5828] device_add+0x7d7/0xb80 [ 208.111963][ T5828] usb_set_configuration+0x1ad8/0x2180 [ 208.117452][ T5828] usb_generic_driver_probe+0x8d/0x150 [ 208.122925][ T5828] usb_probe_device+0x1c3/0x3b0 [ 208.127805][ T5828] ? __pfx_usb_probe_device+0x10/0x10 [ 208.133276][ T5828] really_probe+0x254/0xae0 [ 208.137799][ T5828] __driver_probe_device+0x1e8/0x360 [ 208.143262][ T5828] driver_probe_device+0x4f/0x240 [ 208.148399][ T5828] __device_attach_driver+0x270/0x410 [ 208.153789][ T5828] bus_for_each_drv+0x258/0x2f0 [ 208.158663][ T5828] ? __pfx___device_attach_driver+0x10/0x10 [ 208.164586][ T5828] ? __pfx_bus_for_each_drv+0x10/0x10 [ 208.170238][ T5828] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 208.176067][ T5828] __device_attach+0x2c4/0x450 [ 208.180924][ T5828] ? __pfx___device_attach+0x10/0x10 [ 208.186314][ T5828] ? do_raw_spin_unlock+0xf5/0x200 [ 208.191437][ T5828] ? _raw_spin_unlock+0x28/0x50 [ 208.196306][ T5828] device_initial_probe+0xa1/0xd0 [ 208.201601][ T5828] bus_probe_device+0x12a/0x220 [ 208.206554][ T5828] device_add+0x7d7/0xb80 [ 208.210903][ T5828] usb_new_device+0x9aa/0x1690 [ 208.215689][ T5828] ? __pfx_usb_new_device+0x10/0x10 [ 208.220907][ T5828] ? _raw_spin_unlock_irq+0x23/0x50 [ 208.226124][ T5828] hub_event+0x28e8/0x4d30 [ 208.230643][ T5828] ? do_raw_spin_unlock+0xf5/0x200 [ 208.235897][ T5828] ? __pfx_hub_event+0x10/0x10 [ 208.240715][ T5828] ? rcu_is_watching+0x16/0xb0 [ 208.245520][ T5828] ? process_scheduled_works+0x97a/0x1630 [ 208.251277][ T5828] process_scheduled_works+0xc3d/0x1630 [ 208.256956][ T5828] ? __pfx_process_scheduled_works+0x10/0x10 [ 208.262953][ T5828] ? assign_work+0x3cf/0x5d0 [ 208.267556][ T5828] worker_thread+0xa47/0xfb0 [ 208.272173][ T5828] ? __kthread_parkme+0x71/0x1f0 [ 208.277219][ T5828] kthread+0x38b/0x480 [ 208.281304][ T5828] ? __pfx_worker_thread+0x10/0x10 [ 208.286422][ T5828] ? __pfx_kthread+0x10/0x10 [ 208.291126][ T5828] ret_from_fork+0x514/0xb70 [ 208.295735][ T5828] ? __pfx_ret_from_fork+0x10/0x10 [ 208.300992][ T5828] ? __switch_to+0xc89/0x1420 [ 208.305709][ T5828] ? __pfx_kthread+0x10/0x10 [ 208.310530][ T5828] ret_from_fork_asm+0x1a/0x30 [ 208.315425][ T5828] [ 208.318743][ T5828] Kernel Offset: disabled [ 208.323166][ T5828] Rebooting in 86400 seconds..