last executing test programs: 2m26.090473153s ago: executing program 0 (id=1328): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e0000006700000008000000ad00000008680100", @ANYRES32=0x1, @ANYBLOB="8100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000003000000040000000500"/24, @ANYRES32, @ANYBLOB="09307d6a0e148981ad707c8109465f716c65be6e8570487e585dcd7d60c83a6c4c8361062446f4f5bc5c58562c"], 0x50) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001e1401"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x100) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 2m25.953530506s ago: executing program 0 (id=1330): syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x29, 0x5, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x119, 0x9, 0x0, 0x33) connect$unix(r0, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000e8ffffffffff0b000000480005800800010065756800070002"], 0x5c}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) r5 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r5) r6 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) sendmsg$qrtr(0xffffffffffffffff, &(0x7f0000002c80)={&(0x7f0000000040)={0x2a, 0x3, 0x4001}, 0xc, &(0x7f0000001880)=[{&(0x7f0000000340)="91a1f1b4faf8d5679d463c9bb168d99a053069da5e9d3e49d868c78eca8a82d2f570b442c3e8a8e1c3ea26eb633e14d1db808f514f76ed90597aca687f7edbd7808c8033ad6dcc1628344ef68fac5d50572071223f71a95aa487bda1f4c466dd068aa4a15363", 0x66}, {&(0x7f0000000600)="fc763667231d5dabe09ce51606b2b5ed23bd8e587c9ff17a65741e23442f5393510f3080fb0a46189b034eb81f17320f2b0772334931a555b611481630f69739685251a1a5d6cb6aed17b7fa03757deef1604a2f11718d74a61f0a6bf7148d9706d954d9259cacea5a169b2f627f35ebd44b6db4b02bf55b6f2ba0ecb2f753b7937e2f007dc3084b8c41", 0x8a}, {&(0x7f00000006c0)="6cfc29e2df62575662e2cd81145977e2b064bde2fb66d9f0660e19f56620f1e1318786f91efc019411a64f06e5373b0c4f33c6d454f1deb0a3e1eeb025ce9d96e9a21dd7c74c609c285abd871665eb7b3276515f9b94871b3bc70674b5d568450a7814e95ecff3050dd702ec2b8bd01cbbae7f06d06a44bda89327a68cafd33f97f188648ca8f95d7809f129dd493d4f16cc1b20b84867eb900b3416dad6fd21ecb4f2d192a443752ca1ad53e9c915f3acc274bc0bc34eade22d7271fc483b6c96c00dba1c7baa22c4f257d4a2d54f20137811dd3e94cce3", 0xd8}, {&(0x7f00000007c0)}, {&(0x7f0000000800)="7526e27872fdc4f88398e880bbb20aa6b70f73b4c8b1a9f9ecd38bcea3bd78b9764040fce745238527e6f36cdecfa6f1962d26e43346cb2dc3224ab85c029292f460b48d4fcb5170a8783a79a395f5f3d483e879bf80783415c9947e2fcec4a99fa4e6ff7d0a91e26e72d348c7cc67bd5d973cf22fa73df134b9e54b68b2cead872b850daf207d9e32eb81cd69f728b0cd3eaca7bf50851037cca012086cc689280f66941647959af4c6909e03dce84f987c205adcaf4ff0e60d2f548a807b2cbf2be07047e68938c743c31198b5498844c93714e941c82151a1c584c21f75293abe4e514a315e0087b58be9b7171350ac08e420bc84f1849ec87f70d3f3bab8dc01d6019cce6c97106cd4af3674e7653ca57a76ca822d45f38ede001cbf01c2c5cf4283e0d023dc421e78e084b5058eea6cd779653997c42bfeb15e59f587a1f50cab14d59391fb3f35b0bf5f7c0cfe8a09ee4c9329202a96452425d4b931245653b8d34e0bed2ce441beefed5a6eb05b97f79d93fb399160327a1fd5098d3095c99465d40e099448979bb3cc7d0b4690389043f0ab87568f99fa9bc3cf171991ffc632a0dd4d86a54972ef19eda3019678422d686b38734b98a87f4f28ab86e6811f3d31a3fbaf8c0f67ecdca0e667a8f2a132cfe37a1053020ac9854e8ab1cd4e424bfe4810bb275e78c870edaa4645f56dce581a9ba2bd3048b38f43c7e78f43fa6d85492ceae217d1719ab03df708f3cef1225416d482a17809c5104be58628596d485c2671ba20308c54058817b67291b63feb93728a254beb5281fd41fb812de53482b541e7eff10832fbcbd6c10984bcf214275ede7306b088a17381256d81604a5822a3c27ec6e0d7de5fe834c9088184f804daff6f0f62ac6514e5f09c93dfe3b7816177549e58ef7bfb235ebbaec7aca03ccdb7934ff8b55f1000a744c5df0e411b30cfc9139d30b8c3eb9d797985b21911625039c7a2bedd9742a57c78c037f94ea7e61fe1704bb6e6091d22744ee46f952f69715acf9eaa4e6e922dff51534d81adfcd5d074c1aefe57f07af6019c83584887c77180343677d355ac8a8416edb590694ecf4c9077935f64b09dd61cd43912f7116b5cf215ddfc22e86316d8ab8dde1746b310be0f9890aebd3d43ae107d781280a5f2abca2fc2d505c4dbe79eeb1a28150e020265d2aa4adfa2e969250754096760c4fcecb4a7d8980a208a5eac38cab3233c256f06b0269fe44be2779e1631a17fe29fd9a125b7764de851a8d547f878509318b2f4ff52c816f9187a7cad6029b3f84e761df0300ad0845a3d9b7b026752ae74c15d9b09959159092f6cb275f3efe75762dd193f554dc891a046f5a30e28b5fc2d8df3d99d190bbc708aafda603eb679d8e77cd3b187485dee03dec60525274daaf1dea62270f0fcdaa41046f6709344d8c78f57b6ad97dee90afd91fab78a6ed8380d4c98d9f2ef4f61002811ce1e753bfd79e183edcf7a1784c5225ffe47fdd87d85eec41b33f953bbe0e0220f385e48c065def1093b8bbecba5d68a4815df551174b843d31cf58240a94b71c99d46ca4d61ed444c27329510e96bdbd8fa7539e3bc9aa78a2d75a1332fd943bce84c71558dd9800c2ca709e95837612dd4e828f05797492d8cd3e51b5f6c4363a31516f3f0807fad4a7bcdbc639c5131e5f4194cdff9b4c6c299829c79ef0818da50e84383088af5dbb22bd22f303bd3c7c6b74a12e347d7d2c0967b4665b270d51b10127d8f6d7cfcc23dd2020479b92d3274fc4538827834e999bcbb7116fdda875daa98236c027f31180a73da5a93a14c07c46409d03c5fb0f04b5a37599c7567051ade89c45910ec3ef647200a8119d55b441b9b55d2d23e0f47ed377c2f9cf24b470fb3ee156e807b00b7b6b196d1e75ca0b1dfd5f2a5bfe306526d470b7d4c5629672142c7e90aaa13aaf71abd5915da2ab1128b1b69fb6ba808fbd638cb0f523605a5febd62d9027f4b758c537af7e401034a16c3bb3c2581fbd9dc54d89e17ebc65c5b24142bbf0043757b466609e7c03dcf226916708221c5cbfc162ed2a9c1257704d5512146bb672d12443e4a56986922ecd6d853504204d0b01e73a067dc02893030297b95dd73beb646898710106546a56695773eea322bb77108a44f652d4f0807d3728414be22c3c4719ce5f8b42eb4c50caf9eca8067ca41eb032a2104ba5698cd00f7e5ef685f0f99a2f4f9f47ba3cf158177edd1a85fc0fbf2bcd718cc239e2fc142ed0ef25ca47c47e32aed3223de1248248b47ae2645dbaaaeebf7678d6dd18ec9e1984d24d27956856475fffa35b6386bab3cbcc639329513530b35005b95807f31ca67f91e35a38cd724cac031b6b594e3606d85c5b2c2b84ae0f554524e7908ca588622f2342eaf8ca309307819976b684bb43f198d305649ad821c499cac806c8ca1a4f78b68b6655ccc01324bf3547594aae9fb91b09fe372ea2f197de13ca97966fd84079b90bf734cb6bd030e96f54ab721595b9f7a0090e4f3f0e26233a287845d9c6621f12e5ee116caa0560efe03c73b9d145adf68013e2490783782cdfbbc3a9108a24e3d054b922859647b3d4ba2d9352aaab5728862f89f92535479f14a628cf26fef01109a445787c87dfd5e24ef372bdaf27c4d5a34a3102a539866a141c791e36e13f4c7a4ec1ec1da2418f2e99a397f7163ed3a580b22f42fb3cb463edf0e8dd92eef6107d39aa4c86c694696961080eb9c8a12df2fb231b64c99110456ac0e62692ab6e7fa1232805b38a0929f3e8b5716ade6d01a82c4aa16606671982f685a085b399d85450854886763d96f06dd9ebb0b5b89640b4d739feb21fe63f275b1a32e88adea55a362388256bbd5231f86571ccf70cae8c30eda6bc6fe8862425fb8d0b24d0a606584f96d849a8b6f0fe316a563b767ebe711752b160b7ae86bf3488bee15fce3c87a869dacdbae326f7e50c6357bbba3ee42effb01e962bc3bba1ab92ec98d16d03d86a4a8bb6a3141d51c5118a118c90cdd3c2022e861d310d3a6ab021f4052aef5d4ff30e32ccabc0472cd4b6071ed15a7ca8c7801823d2e7965de90096e8d99e2005b2a0639d2ca65f1fb13ff3694dc92d65fc5eb13ddf4abd9ceaef1f178d7bdfdfac057df005bfa5ad1b723b889db1319a85c720cf5c3efcd16a81c8753ee6fe6d2269fa42d42bb663d5b943306c4391eef60810f1393b5c385cc8d4019a031d30d71e7b026abc0929883dbfb645e6dbbbea448ef03d3ac2a604c488a62542b5a8eaadf8cb8b88c0d3becfce9b6e0d1119a117b25f4257540e2a796025b405ca51f15119d2a874f6532ba0792de1f71f3ed9b31e249c32ef29d7cf37fca3ae48ca71d5a4502363b4afeac1fabef4972c50b0145228c227034fe67e3416ed80be0035cbffdbcb278d5e5cf929878d47cf1903ac2ebce18f909be6073b9d56952f26d66ad2c2cf2a102c8d6309bc1e112d34abdb7f8a9c1cc758b406b86fe12daf1fa4efc16eecf71f8330352011ccc6f249f3c88e8c26f6eef2175a4417a64ff2c0b92f7ab8c6727dc076fb33e7b83a13b2d1006ad320771abc7442e2ed8ce31a26586f6928ffe2f40d665fb3f72cfedcbe511c894bf8915eb48807ded2ee5b9a65b5044877a5bea59103067ca4f0c6a8cc100420ef413c0e746d97241f20b6839747480820393e1809b6c0ba150cee048c71e790412dc2a7eeee0a55d364057f449a9705401d01a4ac10d47dc42d9144f53a6a5bc8861ef0cfd4cb77f107443df4aa58db4316f391597b5cfcf297f4d37f70fd6a769affb03c3facc7660f35b1a9d6be8f45b4d69c03f3a1b17a718594ef456c96a67e70c5a309264476cff67b77c0628e93a7ede1d8e2d583593dc4ffb13e3b0d026c2751cfb5344a5b012a06f54826952a5c7e23c3b82e79256212e8ca50c1534da05cd056d11de41d85e84fd663349d87897f96cbec67ac30b6aa59068509ad4873ad7feefc85774172fcde78b3cf1c8efbae3e6a26b3806c941fe6202cd5d3a4a692901022cb8bbb8bff33cb260a47051b079fd43da0c79052b295899f6839415b957674d28ad254281a2edb9aece9fafd36ec301c9dc0abba4fb169991987428adfa7a970998aa306e33a3fa33335e75146f2af9f9366d60e285ddf1c6cb81d9a6af1cbd2eb82a0f86256d4c08ac012fb9142ebecb8daa95d2e649b5cf4d32b7893f063d33b9e5528ca4016c4e9bcba1a3310b064f3d5391dec472b9c128b40baab2dc85716fc60d9ebd5257d2e16c829f975bec8debbd7a2d0430a9176e386b9fd1a09caf3bbdfba9139bf3523842267b0795dc9dad9f22eb31cfbb1e2cf39a440d85ac294d79d6e65ba0df656689a4f8330b0241ca744086546c241325b4385eaa055b47adb36ac96e09f4fa79e9a172463070b66b333e5afa204db80ed677c25c41427109e44737ce8fdf9089139245fa2dcc49681ff52f4c87ff81438e29c4beb7437fb70aef754a5767dd1913cf12070aabffd4e7b79bfaf4a33c41287135fbb5036b3a2879c81bfa527248cf15ba274b88c9cf08f9f0ceec8bc50cbfdd5a37020e6428c3ebedc630f225244f02d1d40114840ffbbf66dcf8a7120b232d90af2e58becf4ec8d4be0f1846765a2344c04a92544098465ad5b4622e7a4b1b7da25b55b9044cb0d547a29b920bc985d55f11dab8c6e3d554f807f2bcbda02933d5382740e4199e8aa2aed6e307667179629bb2055fe05625e16f848f358d4b1a142e5e47e77a86e0f6a9ef8e66cb7b1a9be58743d903d499551316092e53ee6e77b3424ef74392c35761549791876e702f1a08bd35144fedc836e07965104e6a44e9f624bd7f4fc217d8c4f04a32490dab61227c85804ceed74c24c417647cf9130a3763ba8da6aad8ac5548ac93d9eb333e9010e44054a221b5f1d6065e886c21747335ee128a9bdd889b5a65bb934c1d39ccea6ee467e70460c28b9a4cfdfc4c6c0aac2e3f69f209d62bdb7080379cbba9288e2b2f314db1afd5e3c84f00d3617e784b7f501e6bc821bc0e2faa0430ab6126e264991e971ffc71e9c4c352c5dc9c44949e196f7a5564568d885e445a3edc88659475f863fd5b70fe9713112356e70d21cb6c7e1378394165fcb72ce37501bc4a0561a78b109fc05dc6d26a4cbb3794c300d5ade83448664f4c54cff5045451efee192fc492127f808a2ccb7bf5dc4455370bfbab8da79c470209088275462bc098fd06a32f3bebeaa58391f31306a8cf2ff049baf7cc479dadb9d6c32984c0a397f9e7a1cb2565641f2455352d76b099f42c77223200467aea99a3829aeebddc55e341d723dd09dfe98f80510361b884f55e59b13e6c3ddb9e695f0507f86bdf94e5db64e7ad136d03e2b63352bf1462b7a4f84d4704211db2dd0a281ee94748537841ec5854e7c9ce0c043c33bac64ea54f87e5c812229539c69427c6f12153905d7f4b72fd7661b1b6eef489969a57b45c49b67215a2e659ba57d26ee83c4eb912c754c7da67bcb01835cf3ecabac096b637ef2dac31cc264ca8c95e96f05ba6d529a5f0260523f07588a42e2b9535088ca3d17268f586e7fba52d17a7e1a3368d31dc1a1137d1d44e231db1d48e123b1fdefc4c1eca52b5209e2cd99b4a82d303899fcd0ed575f19c274d776cd3b8e729bc3f0220bcf7eb8d9485503533e5ae431a3f59127aab8a3904e86c90127b5ba4a558afe7ce5411329c2bb326dd3e04414c31fe6230553f1b63720f3f5b266d3a90b3103df6c000dccee972e2cf", 0x1000}, {&(0x7f0000001800)="47190238db287b3b4a2b9d", 0xb}], 0x6, &(0x7f0000001900)=[{0xc8, 0x193, 0x7ff, "48e13164ac1e5ab44d56eb9e96f68f79128466a22a8e74154f7f0946b48e8134d0c681b69129ab00efa12de2678c99f91ffb1425c8ad10b5a0a9155c7733890031991f6e1e9374e2aaef9c0c7b9124206d59636e5e4a5780ecbde8345e21cac0922ba2c85bc1d216ed4f5181a04623b6098a61958b6af1a9eea8e7f5597cb593bb792e9851aa796247d4949bd273d7a226b0325bf50c2e4efc44fd4500de0e15de8cf7d0e2f31f54db5cd876a115e45512fb5f227b"}, {0xd8, 0x1, 0x1, "1fbee41a5b6e74189bb537fc7ed398dc05b35c832e849a938cbe75f882663b26413ccad9ffb032356f5e3837350adcc9981ca569b214dc6b7f33f1008764ac484082ada2972e8834e0c4d5e45c4db7a36bf17c9cf7b2526ee29a16690e33cfbc23a0d87687f6baebf461c27d7fa8654570285a5d1c0d4586f4b761b6cfc8c047f1cb8de4517382bfd70968847c18284cbfd06f63d92fb54aabd2d79bced8a1decce9cbf054c9041f8125dce4ee574e975265c05737fe644e76e760b747088842c9"}, {0x18, 0x29, 0x1, "b91ec72ecbd9b16d"}, {0xa8, 0x1, 0x8e1, "75ceff4b7cdec910b7eec952d3baf27b356356f9ca89ca1ddc94dd7c956e8da279db623093082a07405a888c94f43efec5072b752cd6ca18bef4651fcad2e4cb78306682606c89dcdfbdbcd829d8a55689b44c0a35251d6dc6226e752df50ab997828f8838abb7e8b398352adbb0e0e7926b1f40c2cd886649ff39c993a9d219fb8d677c412ce55fa56fe0a006ca1506800534a9"}, {0xb8, 0xf9, 0x3, "af39fe1ad6ab1c74180c125a3c677eec6d137fdd95a001d310f88a6a9802be7631c4671bf0514f6e1ae23e1a6f002f23987cd9826719e677e861a9653d1715421fd4a28162c5f946faf0497698cc9b653152502efc72d0db6d511f6f7446fba06ef012a801cf326daac6354afd74d6fdb1f585b20d61051e548c5be00a2be65f1ddb9244ac033cf7bbfef9d3f6e8417ee611aad1ba3f36c3c6d7502c60938801f13daa87f22963c2"}, {0x1010, 0x114, 0x40, "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"}, {0x48, 0x113, 0x9, "0627a4a46ec4892d86a8d7c4a83f3036aea47f8153b92589e99e6a11f6492eedd7318fabe8018aa58000b56bfe44e607466becce45"}], 0x1370, 0x24000800}, 0x38) keyctl$read(0xb, r6, &(0x7f0000000240)=""/112, 0x349b7f55) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000000c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) unshare(0xe060400) unshare(0x2c060000) semget$private(0x0, 0x1, 0xb5ad9a7247a3f9a4) 2m23.508092137s ago: executing program 0 (id=1338): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$admmidi(&(0x7f0000000140), 0x2, 0x2002) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000440)={0x1, 0x7f, 0x2, 0x1, 0x10001000}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) read$midi(r2, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x14e203, 0x0) write$uinput_user_dev(r1, &(0x7f0000000b40)={'syz1\x00', {0xde, 0x0, 0x1000, 0xc}, 0x10, [0x7ff, 0x6, 0x40, 0x1000, 0x6f, 0x81, 0x16, 0x2, 0x7, 0xe, 0x8, 0x1ff, 0x7f, 0x7, 0x1, 0x4, 0x1000, 0x7, 0x1, 0x668, 0x7, 0x5, 0x3, 0x6, 0x3, 0x6, 0x6dc24d92, 0x4, 0x9, 0x10000, 0x6, 0x70, 0x8, 0x58, 0x6, 0x7fffffff, 0x7, 0x6, 0xffffffff, 0xfffffffd, 0x4, 0x6, 0xed, 0xd, 0x1, 0x4, 0xfffffffb, 0x4, 0xf, 0x5, 0x5, 0x6, 0x3, 0x9, 0x8, 0x101, 0x1, 0x0, 0x4, 0x0, 0x5, 0x10, 0x8, 0xfffffffd], [0x200, 0x8, 0xca49, 0xfffffff7, 0x8000, 0x0, 0x1, 0xe8, 0x1, 0x4, 0x6, 0x4, 0x6, 0x0, 0x6, 0x1f31, 0x7fff, 0xef9, 0x80000001, 0x8, 0x1, 0x3, 0x0, 0xffffff80, 0x784c7ed9, 0x6, 0x0, 0x7, 0x400, 0x4, 0x5, 0x2, 0x8, 0x59, 0xfff, 0x51, 0x101, 0x200, 0x9, 0x1dd4, 0x3ff, 0x4, 0xffffffff, 0x1, 0x200, 0x1ff, 0xea, 0xffffffff, 0x8, 0x92, 0x1, 0x0, 0x6, 0x9, 0x7fffffff, 0x6847c76b, 0xf2c, 0xfffffff8, 0x0, 0x3, 0x8001, 0x7, 0xffa, 0x6], [0x1, 0x8001, 0x5, 0x5, 0x2, 0x89, 0x70000000, 0x4, 0xfffffffd, 0x6, 0x4000000, 0x3, 0x100, 0x4, 0xe, 0x6, 0xffff, 0x2, 0x9, 0xedc, 0x9, 0x7, 0xae, 0x10, 0x200, 0x9, 0x8, 0x7, 0x4, 0x1, 0x7ff, 0x9, 0x8000, 0x4, 0x7, 0x7ff, 0x7, 0x1ff, 0x401, 0x617b5d83, 0x6, 0x1ff, 0xa76, 0x7ff, 0x7fffffff, 0x8, 0x5, 0x3, 0x6, 0xffff7fff, 0x7, 0x4, 0x9, 0x7, 0x0, 0x7, 0xfff, 0x401, 0x1, 0x4d, 0x6, 0x2, 0x313, 0x1ff], [0x7, 0x0, 0xb, 0x9f60, 0x2, 0xd03a, 0x8000, 0x80000001, 0xc, 0x8, 0x2, 0x5, 0x2, 0x0, 0x4, 0x5, 0x5, 0x6, 0x4, 0xe1, 0x3, 0x1, 0xf71d, 0xf8, 0x2, 0xfffffffc, 0x4, 0xefe, 0x3, 0xb, 0x8, 0x3, 0xfb24, 0x3, 0x8, 0x5, 0x51a1c45f, 0x800, 0x3, 0x8, 0x0, 0x9, 0x9, 0xd13, 0x7f, 0xffffffff, 0x0, 0x25f2, 0x33, 0xec8, 0x100, 0x5, 0x400, 0x4, 0x3ff, 0xff, 0x81, 0x7, 0x200, 0x3, 0x4ed138ad, 0x0, 0x4, 0x4]}, 0x45c) r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080), 0x0, 0xfffffffffffffffb) keyctl$revoke(0x3, r4) r5 = request_key(&(0x7f00000000c0)='pkcs7_test\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f00000001c0)='{\x00', 0xfffffffffffffffb) r6 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$KEYCTL_MOVE(0x1e, r4, r5, r6, 0x1) add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r7, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x100, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xffff, r1, &(0x7f0000000100)='W', 0x1, 0x2, 0x0, 0x0, r0}]) 2m23.315426382s ago: executing program 0 (id=1339): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x11, &(0x7f00000000c0)=0x20004, 0x4) pwritev2(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f00000000c0)="ce", 0x1}], 0x1, 0x1, 0xfffffffb, 0x30) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) move_mount(r1, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x204) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000000600)="6d12483bb95dab4da2bccb9a5c51f7769b4aa2ed6f00bcfff2058843f7de72fa8f9dd7572991db9f2968c67d150dbd80321f91c14a7705c3d6e2292f74d074e24cdfdc28da61b60db4ac67a81c04430dd72555dcebe8193594b8fe29718d5781fe3f418379dab48089b86edc4facdbc388e30fdfabe867722b348dcfbff8f7745bb98584b3384eb1b1c541d05427c4e5c33b3692ebf599d4a179bcd27271d55e4a38ac7be3cae3e85eddbdcf574ac462df22b6b2242245f32d5826de908a96ea66331cad4d0ff094f552e118ee643f2f12f854c3", 0xd4, 0x6, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0x62, &(0x7f0000000140)}, 0x1e) write(r4, &(0x7f0000000000)="ea", 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0x1}, 0x1c) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r7, 0x2000) write$binfmt_aout(r7, 0x0, 0xffffffdb) ioctl$TIOCSSOFTCAR(r7, 0x541a, &(0x7f0000000080)=0x4) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x480, @dev={0xac, 0x14, 0x14, 0x37}}}) ioctl$sock_inet_SIOCSIFADDR(r5, 0x891c, &(0x7f00000001c0)={'batadv_slave_0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e21, @empty}}) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000100)={0x3, 0x2, 0x2}, 0x10) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000040)='w', 0x1}], 0x1) setsockopt$inet_tcp_int(r2, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) 2m23.098718487s ago: executing program 0 (id=1341): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x4, 0x8000}, 0x4) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_usb_connect$uac2(0x0, 0x90, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000002082053b0040000102030109027e0003efff6003080b0001010520020904000000010120000924010700001e00170924070501000603000c2403010003070205"], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1d, 0x5, &(0x7f0000003280)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xa}, 0x8}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) r4 = epoll_create(0xd751) epoll_pwait(r4, &(0x7f00000000c0)=[{}], 0x1, 0xef19, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000280)={0x0, 0x0}) sendmsg$nl_generic(r1, &(0x7f0000000880)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000540)={0x2b8, 0x26, 0x20, 0x70bd28, 0x25dfdbff, {0x12}, [@nested={0x10, 0xdc, 0x0, 0x1, [@typed={0x8, 0x65, 0x0, 0x0, @pid=r5}, @nested={0x4, 0x9c}]}, @generic="0f3fdb4a06e40ae9db0c839854ad7a77b737779f071797fc8faa5e8f8e3c45541679724e5d1237ca901ad37baeac81358f6489effb03ba9a4c6170128d0c09c6d15e383d159f2da2fcfd8f4acbb03dbd5d947ba8982dc58d137b66f7a2ef338bfba461acbd808719d8c57769341f04fb70cdb6231d303934d2c11abd142c03b01e7fa86d4d48101311b37892f3340952e7", @generic="f06bad720711329f99704c52cdd83985a9e3f73f8e041f1744014042ade8e7dc6dae272a0a03ad9716af9c1402845b324c1fd1fa54448552b46514509b76c48567e81e2adbbda8c5fc19e937409ae136e429a00e4b5327f37f278dcde1db63b8432f11bf9a8c5d2858e7d95684a351f0c93cb318af3335af8449c1", @nested={0xed, 0x0, 0x0, 0x1, [@typed={0xc, 0xf3, 0x0, 0x0, @u64=0x2}, @generic="aaea3b8ddd6aaa708b257751d4", @nested={0x4, 0x107}, @typed={0xc9, 0x133, 0x0, 0x0, @binary="72977571f817d214cecfcadf84a0a42799d3b30eea44fd974c1c561006c7d29d48d5df83f1dab557f6c01db0eb985c07e64f153b236556aa9ce3573104e4d08586acc0a6f57f12354347a1ace1100c3049db63d1220964459a216b3a8d0147dde138f0dd4a50dac8a17b6f1f6de39dd86ad11e561d9480e38243bd600a61de74b55d6f5e1a191c5e0a960f1eb93fc453ecbd876557ecd7912d8fe9bfdad879e753ae3f58a9bf985ea5906b73d61d253ef654a3b8cfbf0a57d91107da4b5ee9e37de2be7859"}]}, @generic="72fcc37c52b6a1a7f2e050afc00d10a3445ea549f3a029ff392ad3e8758a47faa3c977422820cb4da4f9094cc44c8b8606417e8bb83b23297d119d788043ec6296c95f64d90a68d8f0b3ffa086368c8525a6a0e69b16a132b1864db1725f716d428f6f1984fd2782aa50f1c13050f2a0db1c54793dd1be5d57cac8c5f897d196c6cce74a81cef7b9fe67467f6fdfc4124825438a13"]}, 0x2b8}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ppoll(&(0x7f0000000080)=[{r4, 0xa1}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000500)={0x1}) r6 = fsopen(&(0x7f0000000300)='devpts\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x2, &(0x7f0000000340)='./binderfs/binder1\x00', &(0x7f0000000380)="24e3fa68234484bc7027e1b35f6feec1d9a15279535043cb4c680058514fe66ea66cdc95620c977dbaded12744ca0e1087eddbff494fbcf5f115f741841684283683c7d3af36286ff60f458a233d8969393a2e70d6b407ab63753c3350", 0x5d) sendmmsg$inet(r2, &(0x7f0000004740)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x44008004) write$binfmt_misc(r2, &(0x7f0000000300), 0xfdef) fstatfs(r3, &(0x7f0000000400)=""/217) 2m22.803313305s ago: executing program 0 (id=1342): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4000004, 0xfff, 0x5, 0x4}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x8000ffff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000000), &(0x7f0000000140)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000001030000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m21.981888288s ago: executing program 32 (id=1342): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4000004, 0xfff, 0x5, 0x4}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x8000ffff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000000), &(0x7f0000000140)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000001030000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9.365398452s ago: executing program 3 (id=1939): r0 = syz_open_dev$sg(0x0, 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, 0x0) write$P9_RVERSION(r1, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000040b2100000095f5758483"], 0x0}, 0x0) r5 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) r6 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) ioctl$HIDIOCSREPORT(r6, 0x81044804, &(0x7f0000000400)={0x1}) ioctl$HIDIOCGUSAGES(r5, 0xd01c4813, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) 9.023748993s ago: executing program 4 (id=1941): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000440)={"0e000016", 0x40, 0x6, 0x2, 0x0, 0x1, "f70000000400000000deffffff00", "000000d0", "0300", "0001ffff", ["000000000001000000ed0800", "e9ffff0b7600", "0cdd42000000000000c20d00"]}) 8.500521869s ago: executing program 4 (id=1942): syz_open_dev$vim2m(&(0x7f0000000140), 0x8003, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000200000000000d04000000000a8dbd843fdc947be58878bf1380e8b579519cd466c4400000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$unix(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10113, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x185d, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1}) epoll_create(0x7) write$P9_RSTATFS(0xffffffffffffffff, &(0x7f0000000100)={0x43, 0x9, 0x1, {0x569142f7, 0x0, 0x100000001, 0x1, 0x7f, 0x5, 0x7, 0x200, 0x6}}, 0x43) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0x1b, "0062ba7d820700000000000000000000096304"}) r7 = syz_open_pts(0xffffffffffffffff, 0x80) dup3(r7, 0xffffffffffffffff, 0x80000) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f00000003c0)={0x1000, 0x7ffe, 0x3, 0x400c, 0x5, "73309be7b7525f00", 0x70000001, 0x203}) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0xffff, 0x0, @loopback}, {0xa, 0x0, 0x0, @loopback, 0x40}}}, 0x48) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x24004045) r8 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00000071"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f00000002c0)=""/228, 0xe4) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.451879343s ago: executing program 4 (id=1949): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7f, 0x0, 0x9, 0xffffffffffffffff, 0xfffffe0000000005, 0xfa11, 0xffffffff}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0xc, &(0x7f0000000400)="001ca73e", 0x4) setsockopt$inet_opts(r3, 0x0, 0xd, &(0x7f0000000000)='S', 0x1) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", '\x00', "374051c4", "a44a889722b66244"}, 0x28) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) r8 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$USBDEVFS_BULK(r8, 0xc0185502, &(0x7f0000000300)={{{0xc, 0x1}}, 0x2d2, 0x7, &(0x7f0000000bc0)="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"}) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=@newqdisc={0x50, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x5, 0xe9c00acdb12fdcfc}, {0xffff, 0xffff}}, [@TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x3, 0x2, 0x8, 0x2, 0xfffffffe, 0x7, 0x4}}, {0xc, 0x2, [0x4, 0x8, 0x1, 0x0]}}]}]}, 0x50}}, 0x4048842) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r9, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e21, 0x7fffffff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}], 0x1c) connect$inet6(r9, &(0x7f0000000240)={0xa, 0x4e23, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}, 0x1c) shutdown(r9, 0x1) 6.569620368s ago: executing program 2 (id=1951): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x3) munmap(&(0x7f0000001000/0x1000)=nil, 0x1000) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "dce02de9d7bd466b", "72e64b3892cb7025848c9f40363cf916", "cfff3c66", "0895cd22bb9e149b"}, 0x28) close(0x3) 5.958292132s ago: executing program 3 (id=1952): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r3, 0x40184150, &(0x7f0000000400)={0x0, &(0x7f0000000340)="67d8e003650d4f7d81c140536788abf906c44ed0a661cbd090cec367d15795f2798cd26c8e0e326ca66658eca168774a12dc7470d2711ef97819edc273344453746510ba3819eb6c7712331252cce2b3782707df364cae83cce3bf", 0x5b}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)=@ipv6_getaddr={0x20, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_TARGET_NETNSID={0x8}]}, 0x20}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="cb"], 0x8) sendmsg$inet6(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="1138", 0x2}], 0x1}, 0x4004000) 5.513532097s ago: executing program 2 (id=1955): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40010) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000ad8000000060a01040000000000000000030000010900010073797a3100000000ac0004802000018007000100637400001400028008000240000000050800014000000009540001800a00010072656469720000084400028008f101400000001108000240000000170800034000000061080003400000000608000140000000000800024000000008080002400000000f08000340000000303400018011000100666c6f775f6f66666c6f616400ffff001c0002800900010057797a32000000000900010073797a31000000000900020073797a32"], 0x100}, 0x1, 0x0, 0x0, 0x8084}, 0x24000000) 5.249434946s ago: executing program 4 (id=1956): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) getpeername(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x17, 0x1, 0xf0bd29, 0x25dfdbfc, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20044002) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff6f, 0x0, 0x0, 0x0, 0x20}, [@call={0x85, 0x0, 0x0, 0x32}]}, &(0x7f0000000080)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x3c, 0x0, 0x1, 0x70fd2b, 0x25d7dbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c050}, 0x4800) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=@ipv6_newrule={0x34, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e23, 0x4e23}}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_group_source_req(r8, 0x0, 0x2e, &(0x7f0000000000)={0x3, {{0x2, 0x4e22, @empty=0xe0009eff}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) close(0x3) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f0000000040)) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x20, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x2, 0x12, 0x0, 0x3}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x10}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) 5.239923201s ago: executing program 2 (id=1957): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r3, 0x40184150, &(0x7f0000000400)={0x0, &(0x7f0000000340)="67d8e003650d4f7d81c140536788abf906c44ed0a661cbd090cec367d15795f2798cd26c8e0e326ca66658eca168774a12dc7470d2711ef97819edc273344453746510ba3819eb6c7712331252cce2b3782707df364cae83cce3bf", 0x5b}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)=@ipv6_getaddr={0x20, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_TARGET_NETNSID={0x8}]}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="cb"], 0x8) sendmsg$inet6(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="1138", 0x2}], 0x1}, 0x4004000) 4.863322942s ago: executing program 3 (id=1959): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152d0098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe2ff01f7c6674a4d86d900633ea36641e0a781ea0ea7f2d928b8b22e2f97dd13348927375baea6863bef4acf4299096ada5cdd2a0eaafaa760a79d102d1e0c0000000000000000007926653b8d79ce16a432f124786a0bc3c5b7d196822492ae1ccf91aeac16406ad6f9cd3d96d57fceba8360ae49f73351814c9c2972f11064aaf3739d9100f9c0e4d0cb17d50c82e305ba7d62cf1cc6da26e34982a8c74dd8122cf5b5e7c34fd2712a0cef05e4d8ec7dd363219676bd9b19943185b132eb35a695e208dfa5cecdb1d6425c8879063c0f11bd64291a4209ee6dc1d9e9010013f6148c603e6a335e298efd6ab5cccc47a2c568c6afec54f8251bd840752addf200371361c9eedf05ed98585cf6d99e9e56055064bda2d373369761238c278147cd0eb7799f6b9c9fcaa3fd282154994f5b25420c86db9b6401e885de1c615a719a1c83e8fbbb181282dbaf3313a4e4a4877e9f37607e2cd6da0cf6371ec06a75f5a4206b2418ad8897ae149085d63f01f22eca44033234b3930b4d5da756669a1d59d69e7de54abf439988ed7ec33c2d0a901bb0985a24878984d8a4340fa9a356d100926fb5f2ef9976366a61b8cc2bcb1c072b0e9c564852388e1edff10d75b3832792e471cc15b40380f94d834243080158603fbc9134d6983c540525447478984611c0d9666941bfc0a30db47a8828b6e5c51aee2094599b4ce52795750e1764f1657ca8c5633c71287239dddf5c651496f7bbd148c937f083d2e4e0197dbc6ff0649c749707b17399b1d7efad23abb8b40b38704737e15662ae4913a4a001cd3b71c7af75b5ffad9780650c800a40ca80ddc41987919142fd28dbf22db5f4c435415a03455e1d55d1783ccef97d7e4655cf839d06f06e137bbe462a03b3100231914b19739dd57b4f12d026ad0c7fd3"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r2, &(0x7f00000028c0)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000200)=[{0x0}, {&(0x7f0000000400)="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", 0x46d}], 0x2}}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001540)="2aba9e4cc9b55274aa3a5dbd35f30d62249f7226e2ffa535df463037a323c732a94981bd91b9d134", 0x28}, {0x0}, {0x0}], 0x3, 0x0, 0x12}}], 0x2, 0x40) 4.736778955s ago: executing program 3 (id=1960): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$admmidi(&(0x7f0000000140), 0x2, 0x2002) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000440)={0x1, 0x7f, 0x2, 0x1, 0x10001000}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) read$midi(r2, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x14e203, 0x0) write$uinput_user_dev(r1, &(0x7f0000000b40)={'syz1\x00', {0xde, 0x0, 0x1000, 0xc}, 0x10, [0x7ff, 0x6, 0x40, 0x1000, 0x6f, 0x81, 0x16, 0x2, 0x7, 0xe, 0x8, 0x1ff, 0x7f, 0x7, 0x1, 0x4, 0x1000, 0x7, 0x1, 0x668, 0x7, 0x5, 0x3, 0x6, 0x3, 0x6, 0x6dc24d92, 0x4, 0x9, 0x10000, 0x6, 0x70, 0x8, 0x58, 0x6, 0x7fffffff, 0x7, 0x6, 0xffffffff, 0xfffffffd, 0x4, 0x6, 0xed, 0xd, 0x1, 0x4, 0xfffffffb, 0x4, 0xf, 0x5, 0x5, 0x6, 0x3, 0x9, 0x8, 0x101, 0x1, 0x0, 0x4, 0x0, 0x5, 0x10, 0x8, 0xfffffffd], [0x200, 0x8, 0xca49, 0xfffffff7, 0x8000, 0x0, 0x1, 0xe8, 0x1, 0x4, 0x6, 0x4, 0x6, 0x0, 0x6, 0x1f31, 0x7fff, 0xef9, 0x80000001, 0x8, 0x1, 0x3, 0x0, 0xffffff80, 0x784c7ed9, 0x6, 0x0, 0x7, 0x400, 0x4, 0x5, 0x2, 0x8, 0x59, 0xfff, 0x51, 0x101, 0x200, 0x9, 0x1dd4, 0x3ff, 0x4, 0xffffffff, 0x1, 0x200, 0x1ff, 0xea, 0xffffffff, 0x8, 0x92, 0x1, 0x0, 0x6, 0x9, 0x7fffffff, 0x6847c76b, 0xf2c, 0xfffffff8, 0x0, 0x3, 0x8001, 0x7, 0xffa, 0x6], [0x1, 0x8001, 0x5, 0x5, 0x2, 0x89, 0x70000000, 0x4, 0xfffffffd, 0x6, 0x4000000, 0x3, 0x100, 0x4, 0xe, 0x6, 0xffff, 0x2, 0x9, 0xedc, 0x9, 0x7, 0xae, 0x10, 0x200, 0x9, 0x8, 0x7, 0x4, 0x1, 0x7ff, 0x9, 0x8000, 0x4, 0x7, 0x7ff, 0x7, 0x1ff, 0x401, 0x617b5d83, 0x6, 0x1ff, 0xa76, 0x7ff, 0x7fffffff, 0x8, 0x5, 0x3, 0x6, 0xffff7fff, 0x7, 0x4, 0x9, 0x7, 0x0, 0x7, 0xfff, 0x401, 0x1, 0x4d, 0x6, 0x2, 0x313, 0x1ff], [0x7, 0x0, 0xb, 0x9f60, 0x2, 0xd03a, 0x8000, 0x80000001, 0xc, 0x8, 0x2, 0x5, 0x2, 0x0, 0x4, 0x5, 0x5, 0x6, 0x4, 0xe1, 0x3, 0x1, 0xf71d, 0xf8, 0x2, 0xfffffffc, 0x4, 0xefe, 0x3, 0xb, 0x8, 0x3, 0xfb24, 0x3, 0x8, 0x5, 0x51a1c45f, 0x800, 0x3, 0x8, 0x0, 0x9, 0x9, 0xd13, 0x7f, 0xffffffff, 0x0, 0x25f2, 0x33, 0xec8, 0x100, 0x5, 0x400, 0x4, 0x3ff, 0xff, 0x81, 0x7, 0x200, 0x3, 0x4ed138ad, 0x0, 0x4, 0x4]}, 0x45c) r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) keyctl$revoke(0x3, r4) r5 = request_key(&(0x7f00000000c0)='pkcs7_test\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f00000001c0)='{\x00', 0xfffffffffffffffb) r6 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$KEYCTL_MOVE(0x1e, r4, r5, r6, 0x1) add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r7, 0x2, &(0x7f0000000300)=[0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xffff, r1, &(0x7f0000000100)='W', 0x1, 0x2, 0x0, 0x0, r0}]) 4.263802746s ago: executing program 3 (id=1963): syz_usb_connect$uac2(0x2, 0x137, &(0x7f00000000c0)=ANY=[], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$dmmidi(&(0x7f0000000300), 0x8, 0x920) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x5, 0x5, {}, {}, 0x183639ee, 0x10001}) r2 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r2, 0xc004562f, &(0x7f0000000000)=0x1) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r6, &(0x7f00000000c0), 0x12) write$cgroup_pid(r4, &(0x7f0000000040), 0x12) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) 4.189640005s ago: executing program 2 (id=1964): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000140)={0xb, 0x10, 0xfa00, {0x0, r1, 0x40007}}, 0x18) r2 = syz_open_dev$sndctrl(&(0x7f0000000400), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0xc1485544, 0x0) 3.996752985s ago: executing program 2 (id=1965): ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2ac, 0x0, 0x1, 0x15, 0x0, "89753015418ab0cb0900245518580ce0c8bf604cca41f31c108938fcfa393ef569e0bcf244bb4b23555b130900000000000000d0f08e8ad896ba67a07673defa", "8b609009aaa722681a1e2513d754f688a9e306ee1dba533f02e1b69da6e26ec889fee40080000027cc7d24fdc26f1a95d702020000e4b8fb1703e47463b969e4", "ca1bf5ffffffffffffff6570128218a0d22915ff6eddb10000800400", [0xc]}) socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x1e, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000980), 0xfffffffffffffde) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) setgroups(0x0, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000007fc0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x7a, &(0x7f0000000080), &(0x7f0000000000)=0x8) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioperm(0x0, 0x6e, 0xe) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @dstopts_2292={{0x1c8, 0x29, 0x4, {0x4, 0x35, '\x00', [@generic={0xfe, 0x6d, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d18"}, @generic={0x80, 0x14, "09e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad"}, @calipso={0x7, 0x30, {0x1, 0xa, 0x7a, 0x8001, [0x5, 0x7, 0x4, 0x400, 0x7f]}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x31d4}, @ra={0x5, 0x2, 0xbf4}, @generic={0xfd, 0xd3, "1535ebfdb99e0d39d28fb7f215a54151de67b9687327f73080bb73c35bad11f299c8b1f644acb1a95df98c8149faff35640b1df83d4aa03c3b99cf5dbe2746a6d54410686a5e46ff586dba7fed5df29dd37cbf320287e08f602021944b6b09ea13002d7b3a54c3c5c1da49595a1af9008fb4d75b14f3b2dd6064c5eeae6f6bfa6439ded277798140d3cfd9e105570b848ebf79b34b89945b336eb3dc2682644a086ba1ef6ab36b568807c440dabfeaa65229d6be10a7122f4b935858215daa71d1b3d1130cc791323eae973c40eee8599a40c9"}, @generic={0x93, 0xf, "e80ee304ecb784ec4655260cecea14"}]}}}, @hoplimit={{0x14}}, @hopopts={{0x90, 0x29, 0x36, {0x5e, 0xf, '\x00', [@generic={0xff, 0x30, "50d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a9"}, @pad1, @pad1, @calipso={0x7, 0x28, {0x3, 0x8, 0x0, 0xfff, [0x202, 0x5, 0x966, 0xfffffffffffffff8]}}, @calipso={0x7, 0x8, {0x0, 0x0, 0x7, 0x6}}, @generic={0x8}, @calipso={0x7, 0x8, {0x3, 0x0, 0x4}}]}}}], 0x288}}, {{&(0x7f0000000180)={0xa, 0x4e22, 0x3, @mcast1, 0x32d8}, 0x1c, &(0x7f0000002140)}}, {{&(0x7f00000021c0)={0xa, 0x4e22, 0x8, @mcast2, 0x3}, 0x1c, &(0x7f0000003500)=[{&(0x7f0000002200)="a7e81ee311d27edde166b186224d70c3f885e2124e81ef4a7d71be0c8c7d76986fa1a2d5c9af3933060a28d6f6bb2d28d980331018ccd300be8738c2c0a3f42b039ff73169adc9c3cff8e8370235826e000e5c472379df6dab0415882229dd5debb15074b53f6813846f065857b8f5794bb5b5af855fca1b5263ca25f5c5080c2eef6a1862a184ad14b467dae36eeb46f67142508cfb514e483767384532545138f10c09575e6bf45261b5e9eed832bfb3a4bfabc3cdf95a66e566882d0b3e3e32fef56058f8e86f4bede365850071ded14e7c145b4b7a6b9a6e045172c5c2921d0564ce018a4bbd901e21f3e5091432f55d36", 0xf3}, {&(0x7f0000002300)="2c7bba70c65994efed1dfd6d0486a13334490f22c076692b409233217613642fa39d7120bae471bf6cb9e08a137357e6713cd19ebc5c927fe66a8faac16029f7f01c887490a27dd6af4e2fe1", 0x4c}, {&(0x7f0000002380)="a8c2c8bb41c1dc786a6897eaef0f131b8776432a76258e55731747f6941f95ab12e878f72ff509f4850d8030e2d168a7d9bcdd97d06010a71b960b653613f0c864a45bafd5eb6281fc133de9e3e6bbe22b42ee2f82b35060319e9b84516c821acde16ddefa292adc0db3d87529adaa0af8dcb2392c0d3d58d3036c9d7801bb", 0x7f}, {&(0x7f0000002400)="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", 0x1000}, {&(0x7f0000003400)="95aa6b12e87ba034f116dad8ee9ddc09c1dad0bf311da8e8751a4941b1377b586bf350214957c176b5508cf856a7f7612e4ca5df1c011d2d2a2b751e97faac0bce8e8c781e02764f7a0df77ee7ee3360d71cac6a3af1de006b1c1b08b29f60f07c8a9d32eddab1ba90efd49a7295254c99e691d65b5aefdfcbb686398668ead19271fcfe9a4920636589b73bfb1eb864986d", 0x92}, {&(0x7f00000034c0)}], 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x140}}], 0x3, 0x810) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_connect(0x5, 0x85c, &(0x7f00000010c0)={{0x12, 0x1, 0x310, 0x5b, 0x31, 0x83, 0x8, 0xc45, 0x6280, 0xa812, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x84a, 0x4, 0x0, 0x5, 0x50, 0x6, "", [{{0x9, 0x4, 0x3, 0xc, 0x2, 0x7, 0xa3, 0x13, 0x7, [], [{{0x9, 0x5, 0xa, 0x10, 0x3ff, 0x6, 0x5, 0x0, [@generic={0x83, 0xa, "53353ad7a90284ec85c2770019a7e639fc07129581fe49b489f0a14c03b59b75ead9455248e1bc4eb3592fa262fbb7d80ad74a0e2939978d2e29660c8ea1a8aed688f05495fcd93158cd17af18cfc0fb3f7565a263afdbeb5d59420b15d0b0e9fb53622b8b16c2d8f47b5043cdec7ec7ccc17db5dc4642eb823df311c2461fd547"}, @generic={0xd, 0x30, "314f589529d3335c1920ea"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x7f, 0x0, 0x79}}]}}, {{0x9, 0x4, 0xb0, 0x3, 0x8, 0xff, 0xff, 0xff, 0x2, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "80b98f7220fe"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x87f, 0x0, 0x8, 0x9}, [@mdlm={0x15, 0x24, 0x12, 0xff5a}, @acm={0x4, 0x24, 0x2, 0x5}, @ncm={0x6, 0x24, 0x1a, 0x4, 0x4}, @mdlm_detail={0x73, 0x24, 0x13, 0x5, "c7c6f9e7ca2893eef4d25627fa51e4c7a69a99117e37f5cd22e29bf5fdf57d23247873c5e22216163412bb127773074b79e0f4a08efa010947039840d6c724a72223cbb21d1e33ff547d17b5ebf65d4923443a95f49716a7830ec4729431c0ee0fcdf669eaf2ae9a952a39508cc77e"}, @obex={0x5, 0x24, 0x15, 0xdab0}]}], [{{0x9, 0x5, 0x8, 0x3, 0x20, 0x9, 0x1, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x2, 0x5}]}}, {{0x9, 0x5, 0xd, 0x1, 0x10, 0x5, 0x2, 0x1, [@generic={0xda, 0x6, "a7ed5a44a6d06e5dc59fa59db0a02e8c38837f61b4b66e7e0f2736e4fed9a1a141e87eac22a345e29d65ed9577cfe6eff08efaef1dcef3f44d6712a7ca31fa0766b32be5e763402ab12701c73ca398b97f594ac515c4ca06e6004d49cd2abed5cada5759a196c48357f306e6f1e902d4bd9a48f540ccf29515df503570df883b1a0437d11e010da52b7558068ac620b8ebda408eb6059e4482204c4c2a7596605c0dfe65bf98e65b63f9a73cbc32d46ae8488369f2eec2356d3a04386f54e5ee3b0bf54f0327a41962efb8367b6d8724ab4e39d16ee23ab6"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0x8, 0xff, 0x80}}, {{0x9, 0x5, 0xc, 0xc, 0x400, 0x64, 0xe, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x38a}]}}, {{0x9, 0x5, 0x3, 0x4, 0x3ff, 0xd, 0x2, 0x5, [@generic={0xd5, 0xd, "7f8d87bbc61395f47ac0f6254ce33df0184fa8731e5288f30681f0c5af8fc8f39c4920284665a85342b5623e12c5ece7e6c91412d154ad0c5e4c0e867184b9bde33251c2b1078fb1705e93604813a099d46c255d222f1db4158a42013bdf9bcc45df1c32ca842043b942f803fc5b3cbb0bd4d7bf895ed249097da45afbddfa3a3c1561da9232715d2cf1d34ccb1628cfc73c2ea1d654ae6cdba2c20424c8cc2c5dfb7765bf0177300b2f80711de99d4a7fe545b01ee7c98d3d3b9101036ae7563b124688e40fb6707f4a327e51543b60bcff87"}, @generic={0x100, 0x21, "1de914927e8a9795dfdd9dcc8609804feb5f9a7a57278c42711d6735a4ec79e64c46abc0d48f6c62df8aac35e1657011759724862b6b87d6387206093c9c681b3acc1c519bb5b7f54524bf80152b8a01527965fe4703c47f04271f064a952b330f61b60bce844bb7aa8aa13a9cfced46fea34078ae0a4a44f88de3029718238a7848ab54ca4bfc6dec99c6c7d6346ed5071700aaa1b2452d65fff542f50d939951a4921fbf12fedabdb17360a707a3c5999bc7cf8f4f1b65974b71bbac783129a56acc23cdfb3d95342c9c756657b6e350ba2a6611ae7e48c48f3498d88d182ee630b5d0f9ae798c816c50bc347686bffaf4f22c1dc375167ff738f4a4ab"}]}}, {{0x9, 0x5, 0xb, 0x1, 0x20, 0x2, 0x6, 0x24, [@generic={0xda, 0x4, "92a56dc1378c100f47fc9df089b507b6a62db626c63e4d4eb32bec29624043c8556d0101142257d49d49fa87c4d70816932cd76fbcccda28d0ef44a3fa636b40aaf6847a55ec4d5084deba7dbf68a4ea7f4ab9f008a30d01304fb89a0dd5635cf73b91050a0c22d77c570e49d65b869c6c1af3708c3e22b9cd5824348497e0f346ebd36e73caa84985aa70d2ac17907906892611ac125f7fbff3152a371e5484b3c1a1de179fda232b0b0b9271b90b66f839209ab76349518af199b71e3056f6abf0cbb01248af77511b851b2a416d71dbcd853916e03f9a"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x40}]}}, {{0x9, 0x5, 0x3, 0x3, 0x3ff, 0x0, 0xe, 0x2}}, {{0x9, 0x5, 0x2, 0x4, 0x8, 0x4, 0x4, 0x8}}]}}, {{0x9, 0x4, 0xee, 0x0, 0x4, 0x13, 0x84, 0xc5, 0xf, [@uac_as={[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x9, 0x1, 0x55, 0x8, "38f698bd22f13dfdc4"}, @as_header={0x7, 0x24, 0x1, 0x0, 0x8, 0x1001}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xa, 0xa00c, 0x9, 0xff}]}], [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x10, 0x0, 0x1}}, {{0x9, 0x5, 0x4, 0x1, 0x3ff, 0x10, 0x14, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0x97}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x2}]}}, {{0x9, 0x5, 0x3, 0x3, 0x400, 0x57, 0x9, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0xa}]}}, {{0x9, 0x5, 0x5, 0x8, 0x400, 0x8, 0x1}}]}}, {{0x9, 0x4, 0x2f, 0x2, 0xe, 0xbb, 0x2c, 0x6b, 0x9, [@generic={0x43, 0x2, "996a583de0edf4b1d167300db4f5132db0c1abd5a8a33d27b342fa8cc0f6b37f85a33b5a45f8be9f7069d6f87082a8cc69eddaee4dbccb21cfa5311273d6c8038c"}], [{{0x9, 0x5, 0x7, 0x1c, 0x10, 0x1, 0x0, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xfd, 0x5}]}}, {{0x9, 0x5, 0xe, 0x1c, 0x20, 0x4, 0x1, 0x7, [@generic={0x2b, 0x21, "e37c6090fb58500f4ff6b761ee503767b6aaeb5455490900d9b793aed3d0075a3f1d63af5d753e9921"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0x1, 0x3, 0x81}}, {{0x9, 0x5, 0x9, 0x2, 0x1ff, 0x4, 0x3, 0x6, [@generic={0x39, 0xf, "4779973e7263587d9bc7dc3f58ad8ec3330afc35d3f875baaec0ae4aafa167b581365dc32ae854f4d78fd8461aec7b7ae2415a29138719"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x400, 0x5d, 0x2, 0x3e, [@generic={0xa6, 0x8, "645afee9b8dd927656711d7ee6d52053959ff2081250c88e5750befd4c97b51fac63797946c09b0c50eb7b21bcec46043d94af608b820b9d00ddfa800b8d1c4fd221db34cdd6082b4f54f623cc4b2ec02e76ebc311af35b9f77b87a2a24585ad14cb61266ad3975745b8cea9ffe77be8b69dbf4eec22f0aa5972cc5cb3e3010b05bf681c2820276577a38aa7caa354cf608025334c45d276d57c28a58eb06b09b2e33080"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x20, 0x30, 0x5, 0x5}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x5, 0x3, 0x44}}, {{0x9, 0x5, 0xd, 0xc, 0x3ff, 0x5e, 0x9, 0x0, [@generic={0x5b, 0x22, "e7a5f7d0d693a52373e23aaa52bc882846686fc6f4c64b4fc2fa41e35bbd2ae2f6f9a0ca278600d9b108e96fd2ef72f8bc648d77d74b077095b47074b5cd6acbd13430cce268f69bb4464a26fbf55e0df584b11018d906221d"}]}}, {{0x9, 0x5, 0x8, 0x8, 0x8, 0xd, 0x1, 0xfe, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x47, 0x1000}]}}, {{0x9, 0x5, 0x0, 0x10, 0x20, 0x0, 0x3, 0x40}}, {{0x9, 0x5, 0x2, 0xc, 0x400, 0x6, 0x6, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x9f, 0x5}]}}, {{0x9, 0x5, 0x6, 0x1, 0x400, 0x6, 0x1, 0xe, [@generic={0xd, 0x5, "b06d59278aa1d6ed596b25"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0x0, 0xa6, 0x2, [@generic={0x37, 0xe, "f20dd1622ac72febbe0af000aeeb617c1ad285c04e394e8541721535e1140ff280389d7a19a0480fb4d2f0844bf6ce8effae2775b2"}]}}, {{0x9, 0x5, 0xd, 0x4, 0x200, 0x80, 0x49, 0x8}}]}}]}}]}}, &(0x7f0000001b40)={0xa, &(0x7f0000001940)={0xa, 0x6, 0x110, 0x6, 0xa7, 0x4, 0x0, 0xfb}, 0x13, &(0x7f0000001980)={0x5, 0xf, 0x13, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0x4, 0x0, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0xf, 0x6c}]}, 0x3, [{0x49, &(0x7f00000019c0)=@string={0x49, 0x3, "9cf83d15506ed2ae688f6cfa87968562c5fc233f83eacb2e0954fc0fac582377bd83eac52e8283143d8b2e08bdc968abebc44d4eb2ebf91bd86df6e2ff5bdb4ec12f68526b4182"}}, {0xb0, &(0x7f0000001a40)=@string={0xb0, 0x3, "c11c121d2758fefb2983736b177c8c9e15556848ae0e1bafe6b0636abd7f5aba2cb1eaa298a4ab7fb5c3f30598dd1859f312ea94da4f7121b796c29efe540ad3e27b64413e157aae29acf05f47f30efb92d97a227e8bdd76936311feedd2744733de5673046564f74455c808e2d3e3bb26631195338e4cef89ed203597357f8d6b32e81cbd9548ef32f9a28f8319e6d713dac49c597e611417b11c047540f2e4a7a81af95a65fbefa5bf9753d56c"}}, {0x4, &(0x7f0000001b00)=@lang_id={0x4, 0x3, 0x83e}}]}) capset(&(0x7f0000000500)={0x20080522}, 0x0) 3.450859957s ago: executing program 1 (id=1968): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000456000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000005c0)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0xffffffffffff0700) 2.759534427s ago: executing program 4 (id=1969): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_test', 0x80100, 0x9c) fgetxattr(r1, &(0x7f0000000000)=ANY=[], 0x0, 0x3) ioctl$BLKROGET(r1, 0x125e, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000fc0)={0x2, 0x8203, 0xa89, 0x3, r2}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0xbe4, 0x20d, 0xfff, 0xa1ca, r2}, 0x10) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000380)={{0x6, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x3, 'nq\x00', 0x0, 0x8000, 0x8}, {@local, 0x4e20, 0x0, 0x8, 0x48001, 0x2365}}, 0x44) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f00000000c0)={'TPROXY\x00'}, &(0x7f0000000100)=0x1e) 2.611760438s ago: executing program 4 (id=1970): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) shmget$private(0x0, 0x4000, 0x1, &(0x7f0000ff9000/0x4000)=nil) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4]}, 0x8, 0x0) wait4(r0, 0x0, 0x8, 0x0) syz_pidfd_open(r0, 0x0) setpgid(r0, r0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0x0, 0x1000000002, 0x0, 0x0, 0x6}, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x22, 0x1c, {[@global=@item_012={0x2, 0x1, 0x9, "5713"}, @local=@item_012={0x2, 0x2, 0x1, 'de'}, @local=@item_4={0x3, 0x2, 0x5, "044613f9"}, @local=@item_012={0x0, 0x2, 0x2}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local]}}, 0x0}, 0x0) syz_usb_ep_write(r2, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r2, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pread64(r3, &(0x7f0000000780)=""/185, 0xb9, 0x3c) r4 = syz_usb_connect$uac3(0x2, 0xf5, &(0x7f00000005c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x582, 0x7, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe3, 0x3, 0x1, 0x9, 0x40, 0x0, {0x8, 0xb, 0x0, 0x0, 0x1, 0x25, 0x30, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xc, 0x17, 0x7}, [@extension_unit={0xd, 0x24, 0xa, 0x4, 0x3, [0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x3, 0x3, 0x3, 0x2, 'BC', "c89a8f"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0xc096, 0x80, 0xea, "cb987de53f3d28dce1"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x7, 0x7ff, 0x3, '\n'}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x100, 0x81, 0x9, 0x9}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x0, 0x2, 0xd, {0xa, 0x25, 0x25, 0x8001, 0xb, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x0, 0x3, 0x7f, 0xd, "6d8c1a1dfbeb"}, @as_header={0x17, 0x24, 0x1, 0x8, 0x2000, 0x7, 0x3, 0x9, 0x7, 0x9}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x9, 0x3, 0x4, 0x3, "172fc006f3cf07ab"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x9e, 0x7, 0x7, {0xa, 0x25, 0x25, 0xf5, 0x7, 0x5672}}}}}}}}]}}, &(0x7f0000000a80)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x300, 0x0, 0xec, 0x3, 0x40, 0x9}, 0x39, &(0x7f0000000740)={0x5, 0xf, 0x39, 0x5, [@wireless={0xb, 0x10, 0x1, 0xc, 0xb7, 0xdb, 0x2, 0xd97, 0xae}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "127095ec2e2f4d3d6c2736dbfb375b4d"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x7, 0x3, 0xa}, @wireless={0xb, 0x10, 0x1, 0x8, 0x14, 0x8, 0x2, 0x5, 0x3}]}, 0x6, [{0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x5467}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x43f}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x180c}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x436}}, {0x0, 0x0}, {0x94, &(0x7f00000009c0)=@string={0x94, 0x3, "4ba84e092c6b3c5980f98b6ba9aa3f46f769ffb89b698d56d37bc758dcc7d77aa234baa27a77ece0bda71b81554bb971194cd2bbdb25f5e7f1dd0d9a567f260803026dcbd1de0812d26e6c761a4d5c32163facc074ec21b07b2b973c1b03d764ff306d625e765c29fa1930f1869bc404e1d470843f3786f5e11932a74bd4136166fbc3c3fe1ad12bae94f3d12f9e8bd26478"}}]}) syz_usb_control_io$uac3(r4, &(0x7f0000000c00)={0x14, &(0x7f0000000080)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000280)=ANY=[@ANYBLOB="0003a7000000a703854461b1a1caf593abc62bfca0dbc058adb44028b51d7b08c7df99c0220cddc11c3d534141a49ba10c33a8194b3796de90b5839200340f4927395ab4ed75856acf590100f6c0a896c500d645e139c1b7a9a77831d4582106a7d17f1d27d07606efede093c07c9b5bd276d9f5306263f7cd5ca95490469e8d05d0b479a70d220180000068343f9a8142b84fc9572623f2adffaba61ca7aa2ca164527ae6a46021082375cb61aca85df589ae"]}, &(0x7f0000000ec0)={0x44, &(0x7f0000000c40)={0x0, 0x11, 0x96, "e7f068a12999c43aaaecf62da96baa426e2f457eed79ece62312941e0cf4914ab82371d5339407005afcd260f9667a8709bfc526021b90572496b7ad6449c22782cbcf73c68e6a8abc020269289618dcfff646dc25a118e82385efd6fde68c01c83ab7800bc7eec2c40ff6ad4d945669c9cf310bef2dc7dcdfca8ab6b4eb495d2ff158e0abdeb919a23106185615514fce5491554b9d"}, &(0x7f0000000d00)={0x0, 0xa, 0x1, 0xb8}, &(0x7f0000000d40)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000d80)={0x20, 0x81, 0x2, "dfd1"}, &(0x7f0000000dc0)={0x20, 0x82, 0x3, "82bce0"}, &(0x7f0000000e00)={0x20, 0x83, 0x3, "5ba512"}, &(0x7f0000000e40)={0x20, 0x84, 0x1, 'K'}, &(0x7f0000000e80)={0x20, 0x85, 0x3, "44f09e"}}) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000140), &(0x7f0000000180)=0x4) write(r5, &(0x7f0000000100)="240000001a005f0214f9f407000904ff81000e9d0d53c5e6665cd971bfa1328e1f51ac67", 0x24) mount_setattr(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540)={0x100070, 0xe, 0x40000, {r3}}, 0x20) r6 = syz_open_dev$tty1(0xc, 0x4, 0x3) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) syz_usb_ep_write(r2, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') 2.345388208s ago: executing program 5 (id=1972): openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs2/custom1\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = inotify_init() prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0xc, &(0x7f0000000040)={0x0, 0xc8a1, 0xdb00, 0x8, 0x29}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r5, 0x2219, 0x7721, 0x1f, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000540)={'dummy0\x00', &(0x7f0000000200)=@ethtool_perm_addr={0x4b}}) inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x4200004b) close(r0) 2.344940282s ago: executing program 1 (id=1973): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$admmidi(&(0x7f0000000140), 0x2, 0x2002) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000440)={0x1, 0x7f, 0x2, 0x1, 0x10001000}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) read$midi(r2, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x14e203, 0x0) write$uinput_user_dev(r1, &(0x7f0000000b40)={'syz1\x00', {0xde, 0x0, 0x1000, 0xc}, 0x10, [0x7ff, 0x6, 0x40, 0x1000, 0x6f, 0x81, 0x16, 0x2, 0x7, 0xe, 0x8, 0x1ff, 0x7f, 0x7, 0x1, 0x4, 0x1000, 0x7, 0x1, 0x668, 0x7, 0x5, 0x3, 0x6, 0x3, 0x6, 0x6dc24d92, 0x4, 0x9, 0x10000, 0x6, 0x70, 0x8, 0x58, 0x6, 0x7fffffff, 0x7, 0x6, 0xffffffff, 0xfffffffd, 0x4, 0x6, 0xed, 0xd, 0x1, 0x4, 0xfffffffb, 0x4, 0xf, 0x5, 0x5, 0x6, 0x3, 0x9, 0x8, 0x101, 0x1, 0x0, 0x4, 0x0, 0x5, 0x10, 0x8, 0xfffffffd], [0x200, 0x8, 0xca49, 0xfffffff7, 0x8000, 0x0, 0x1, 0xe8, 0x1, 0x4, 0x6, 0x4, 0x6, 0x0, 0x6, 0x1f31, 0x7fff, 0xef9, 0x80000001, 0x8, 0x1, 0x3, 0x0, 0xffffff80, 0x784c7ed9, 0x6, 0x0, 0x7, 0x400, 0x4, 0x5, 0x2, 0x8, 0x59, 0xfff, 0x51, 0x101, 0x200, 0x9, 0x1dd4, 0x3ff, 0x4, 0xffffffff, 0x1, 0x200, 0x1ff, 0xea, 0xffffffff, 0x8, 0x92, 0x1, 0x0, 0x6, 0x9, 0x7fffffff, 0x6847c76b, 0xf2c, 0xfffffff8, 0x0, 0x3, 0x8001, 0x7, 0xffa, 0x6], [0x1, 0x8001, 0x5, 0x5, 0x2, 0x89, 0x70000000, 0x4, 0xfffffffd, 0x6, 0x4000000, 0x3, 0x100, 0x4, 0xe, 0x6, 0xffff, 0x2, 0x9, 0xedc, 0x9, 0x7, 0xae, 0x10, 0x200, 0x9, 0x8, 0x7, 0x4, 0x1, 0x7ff, 0x9, 0x8000, 0x4, 0x7, 0x7ff, 0x7, 0x1ff, 0x401, 0x617b5d83, 0x6, 0x1ff, 0xa76, 0x7ff, 0x7fffffff, 0x8, 0x5, 0x3, 0x6, 0xffff7fff, 0x7, 0x4, 0x9, 0x7, 0x0, 0x7, 0xfff, 0x401, 0x1, 0x4d, 0x6, 0x2, 0x313, 0x1ff], [0x7, 0x0, 0xb, 0x9f60, 0x2, 0xd03a, 0x8000, 0x80000001, 0xc, 0x8, 0x2, 0x5, 0x2, 0x0, 0x4, 0x5, 0x5, 0x6, 0x4, 0xe1, 0x3, 0x1, 0xf71d, 0xf8, 0x2, 0xfffffffc, 0x4, 0xefe, 0x3, 0xb, 0x8, 0x3, 0xfb24, 0x3, 0x8, 0x5, 0x51a1c45f, 0x800, 0x3, 0x8, 0x0, 0x9, 0x9, 0xd13, 0x7f, 0xffffffff, 0x0, 0x25f2, 0x33, 0xec8, 0x100, 0x5, 0x400, 0x4, 0x3ff, 0xff, 0x81, 0x7, 0x200, 0x3, 0x4ed138ad, 0x0, 0x4, 0x4]}, 0x45c) r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) keyctl$revoke(0x3, r4) r5 = request_key(&(0x7f00000000c0)='pkcs7_test\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f00000001c0)='{\x00', 0xfffffffffffffffb) r6 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$KEYCTL_MOVE(0x1e, r4, r5, r6, 0x1) add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r7, 0x2, &(0x7f0000000300)=[0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xffff, r1, &(0x7f0000000100)='W', 0x1, 0x2, 0x0, 0x0, r0}]) 2.121322988s ago: executing program 1 (id=1974): timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, &(0x7f0000000280)="48b800000100000000000f23d00f21f835200000020f23f80f0866baa100ed66baf80cb8a04e5c88ef66bafc0cedf2f236d9fa430fc7bf0080000065660f383c6bd4440f20c0350a000000440f22c0c744240044506974c74424024f000000c7442406000000000f011c240fba682524", 0x70}], 0x1, 0x1, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0x80, 0x4, 0x4, 0x7f, 0x4232, 0x3, 0x81, 0x9be, 0x8001, 0x5, 0x7, 0x4db6, 0x0, 0xfffffdffff7ffffd], 0xdddd1000, 0x5df518c50f01db35}) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000180)=0x3) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x1, 0x0, 0x12, 0x20, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xffffffb8, 0x0, 0x3, 0xff, 0x0, '\x00', 0xfc}) ioctl$KVM_RUN(r4, 0xae80, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = io_uring_setup(0x6e1e, &(0x7f0000000080)={0x0, 0xb2d2, 0x200, 0xfffffffc, 0x87}) r6 = eventfd2(0x0, 0x1) io_uring_register$IORING_REGISTER_EVENTFD(r5, 0x4, &(0x7f0000000000)=r6, 0x1) io_uring_register$IORING_REGISTER_BUFFERS2(r5, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/4094, 0xffe}], &(0x7f0000001540)=[0x0, 0x0, 0x4]}, 0x20) read$eventfd(r6, &(0x7f0000000040), 0x8) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}, {0x0}], 0x0, 0x3}, 0x20) r7 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) r8 = timerfd_create(0x6, 0x0) ioctl$DVB_DVR_DMX_EXPBUF(r7, 0xc00c6f3e, &(0x7f0000000140)={0x8001, 0x80000, r8}) 2.108517946s ago: executing program 5 (id=1975): syz_emit_ethernet(0x82, &(0x7f0000000280)={@link_local, @random="1704b45adbde", @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa010600, 0x1000000}, {@private=0xb000000}, {@broadcast}, {@dev}, {@private}, {@empty}, {@private}]}]}}}}}}}, 0x0) 1.897326404s ago: executing program 5 (id=1976): r0 = syz_open_dev$sg(0x0, 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, 0x0) write$P9_RVERSION(r1, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000040b2100000095f5758483"], 0x0}, 0x0) r5 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) r6 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) ioctl$HIDIOCSREPORT(r6, 0x81044804, &(0x7f0000000400)={0x1}) ioctl$HIDIOCGUSAGES(r5, 0xd01c4813, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) 1.241754534s ago: executing program 5 (id=1977): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="340000001a00010029bd70000000000002202005000300000028000008000320", @ANYRES32=r1, @ANYBLOB="08000200e0"], 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 1.152902153s ago: executing program 5 (id=1978): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r4, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x40000105, 0x0, 0x0}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0xc0010058}]}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.070018674s ago: executing program 3 (id=1979): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7f, 0x0, 0x9, 0xffffffffffffffff, 0xfffffe0000000005, 0xfa11, 0xffffffff}, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0xc, &(0x7f0000000400)="001ca73e", 0x4) setsockopt$inet_opts(r3, 0x0, 0xd, &(0x7f0000000000)='S', 0x1) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", '\x00', "374051c4", "a44a889722b66244"}, 0x28) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) r8 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$USBDEVFS_BULK(r8, 0xc0185502, &(0x7f0000000300)={{{0xc, 0x1}}, 0x2d2, 0x7, &(0x7f0000000bc0)="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"}) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=@newqdisc={0x50, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x5, 0xe9c00acdb12fdcfc}, {0xffff, 0xffff}}, [@TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x3, 0x2, 0x8, 0x2, 0xfffffffe, 0x7, 0x4}}, {0xc, 0x2, [0x4, 0x8, 0x1, 0x0]}}]}]}, 0x50}}, 0x4048842) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e21, 0x7fffffff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}], 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e23, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}, 0x1c) shutdown(0xffffffffffffffff, 0x1) 1.030079303s ago: executing program 1 (id=1980): socket$unix(0x1, 0x5, 0x0) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f00000000c0)=0xd2, 0x100000500) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd03000a000020140000006c07010033d43afffec00000000000000000210000000010ff020000000000000000000000000001", @ANYRES16=r3], 0x340a) 706.729288ms ago: executing program 1 (id=1981): socket$unix(0x1, 0x5, 0x0) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f00000000c0)=0xd2, 0x100000500) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd03000a000020140000006c07010033d43afffec00000000000000000210000000010ff020000000000000000000000000001", @ANYRES16=r3], 0x340a) 441.642443ms ago: executing program 5 (id=1982): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x1, 0x0, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r1, 0x4008af25, 0x0) close(0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x1e, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, @void, {@can={0xc, {{0x2, 0x1}, 0x0, 0x1, 0x0, 0x0, "aabe92e8595ce6ed"}}}}, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000029c0)={0x6, 0x8000005, 0x9, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064d2, &(0x7f0000000080)={0x1, 0x80, 0x3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000040)={r5}) r6 = openat$procfs(0xffffff9c, &(0x7f0000000100)='/proc/key-users\x00', 0x0, 0x0) ustat(0x801, &(0x7f0000000000)) read$FUSE(r6, &(0x7f0000000680)={0x2020}, 0x2020) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x390, 0x0, 0x12, 0x60d, 0x1d8, 0x202, 0x2c0, 0x2e8, 0x2e8, 0x2c0, 0x2c0, 0x4, 0x0, {[{{@uncond, 0x0, 0x190, 0x1d8, 0x0, {0x0, 0x6c000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x6c, 'bm\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x74, 0x2}}, @common=@icmp6={{0x28}, {0xd, "ea98", 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0x0, 0xffffff00, 0xff000000], [0xff, 0xff000000, 0x0, 0xff], 'vcan0\x00', 'erspan0\x00', {}, {0xff}, 0x2b, 0x5, 0x6, 0x33}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4, 0x24, "d8a8c8a584f6607ab62735146bd5fc7fc221094cc78e2ee6645f9841b10b"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) 146.996921ms ago: executing program 2 (id=1983): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = fsopen(&(0x7f0000000140)='hfsplus\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000090a010400000000000000000a0000040900010073797a310000000008000a40fffffffc08000540000000020900020073797ab10000000008000640ffffff000800084000000001080003400000011c14000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = syz_usbip_server_init(0x1) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb2361000000010902"], 0x0) syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) write$usbip_server(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000300000001"], 0x35) mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2402, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r3, 0xc008ae09, &(0x7f0000000500)={0x66666666666666d, 0x0, [{0x80000001, 0x3, 0x1, 0x7fffffff, 0x9, 0x3, 0x4}, {0x7, 0xb, 0x6, 0x7f, 0xd11, 0x4, 0xfffffffe}, {0xd, 0x9, 0x1, 0x4, 0x80, 0x81, 0x2}, {0x2, 0x40, 0x5, 0x5, 0x2, 0x4, 0x1}]}) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0xa, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x80) 0s ago: executing program 1 (id=1984): syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000b5b30a40450c056055b5010203010902120001000000000904"], 0x0) r0 = memfd_create(&(0x7f0000000000)=',\xea\x00\xd4\xd7\x02\x8dmbs\x0f\xb9\x80\xb9\x13\x92\'\x94N\xc3\xe0m\xa4\x01\x00\x00\x00\x00\x00\x00\x00-\xb3\x8d\xa1v\xe5\x8a0h7\xa4\xed\x94 \x05q\xa4d\xda0y\xed\xdb\xf4\xeb\x85\x9b\xde\b\xa6\x1f\xaa\f\xa0\x16\xd3\xd6\x98\xf44Q\xae\x8c)\xcd\x1b\xecB\x0f', 0x4) ftruncate(r0, 0x7000000) r1 = dup(r0) read$FUSE(r1, &(0x7f00000063c0)={0x2020}, 0xffffffb5) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x220}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r2, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x80}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4004) r3 = syz_open_dev$evdev(&(0x7f0000000140), 0xffffffffffff8000, 0x2000) ioctl$FICLONE(r1, 0x40049409, r3) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 394.122007][ T30] audit: type=1326 audit(1778240070.505:3134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10552 comm="syz.2.1438" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe59a99cdd9 code=0x7ffc0000 [ 394.178965][ T30] audit: type=1326 audit(1778240070.505:3135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10552 comm="syz.2.1438" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fe59a99cdd9 code=0x7ffc0000 [ 394.242998][ T995] usb 5-1: unable to get BOS descriptor or descriptor too short [ 394.257649][ T995] usb 5-1: not running at top speed; connect to a high speed hub [ 394.282843][ T995] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 394.295400][ T995] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 394.318280][ T995] usb 5-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 394.328783][ T995] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.337675][ T995] usb 5-1: Product: syz [ 394.344387][ T995] usb 5-1: Manufacturer: syz [ 394.349479][ T995] usb 5-1: SerialNumber: syz [ 394.601379][T10575] trusted_key: encrypted_key: insufficient parameters specified [ 395.150498][ T5630] Bluetooth: hci0: command 0x0c1a tx timeout [ 395.500204][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 395.624905][ T995] usb 5-1: 3:0: failed to get current value for ch 0 (-71) [ 395.639090][ T995] usb 5-1: 3:0: cannot get min/max values for control 2 (id 3) [ 395.661844][ T995] usb 5-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 395.686171][ T995] usb 5-1: [3] FU [LFE Playback Volume] ch = 1, val = 0/1/1 [ 395.732016][ T5703] usb 2-1: USB disconnect, device number 52 [ 395.789284][ T995] usb 5-1: 3:0: cannot get min/max values for control 4 (id 3) [ 395.847658][ T995] usb 5-1: 3:0: failed to get current value for ch 0 (-71) [ 395.883628][ T995] usb 5-1: 3:0: cannot get min/max values for control 8 (id 3) [ 395.917439][ T995] usb 5-1: 3:0: failed to get current value for ch 0 (-71) [ 395.965640][ T995] usb 5-1: 3:0: cannot get min/max values for control 11 (id 3) [ 395.990850][ T995] usb 5-1: 3:0: cannot get min/max values for control 12 (id 3) [ 396.244839][ T995] usb 5-1: USB disconnect, device number 58 [ 396.952349][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 396.979682][T10618] __nla_validate_parse: 2 callbacks suppressed [ 396.979716][T10618] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1458'. [ 397.116395][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.137099][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 397.152857][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 397.167796][ T9] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 397.180107][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.196629][ T9] usb 6-1: config 0 descriptor?? [ 397.321008][T10625] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1459'. [ 397.513963][T10631] x_tables: duplicate underflow at hook 1 [ 397.522481][T10631] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1464'. [ 397.541746][T10631] syz_tun: entered allmulticast mode [ 397.555383][T10630] syz_tun: left allmulticast mode [ 397.565180][T10635] netlink: 'syz.3.1463': attribute type 6 has an invalid length. [ 397.576913][T10635] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1463'. [ 397.610429][ T5710] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 397.684306][ T9] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 397.750575][T10640] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1465'. [ 397.791276][T10642] fuse: Bad value for 'fd' [ 397.803217][ T5710] usb 3-1: Using ep0 maxpacket: 8 [ 397.814093][ T5710] usb 3-1: config 0 has no interfaces? [ 397.826337][ T5710] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 397.853152][ T5710] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.888098][ T5710] usb 3-1: config 0 descriptor?? [ 397.948096][T10638] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 397.978935][T10638] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 398.068169][T10613] usb 6-1: string descriptor 0 read error: -71 [ 398.068414][ T5710] usb 6-1: USB disconnect, device number 6 [ 398.091540][T10648] plantronics 0003:047F:FFFF.0018: usb_submit_urb(ctrl) failed: -19 [ 398.428241][T10638] bond7: left allmulticast mode [ 398.434905][T10638] 8021q: adding VLAN 0 to HW filter on device bond7 [ 398.530125][ T48] bond6: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 398.649402][T10654] fuse: Unknown parameter 'usar_id' [ 398.674400][ T48] bond5: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 398.722294][ T48] bond5: (slave veth5): making interface the new active one [ 398.750818][ T48] bond5: active interface up! [ 399.340280][ T9] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 399.520330][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 399.532292][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 399.557608][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 399.589582][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.623318][T10667] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 399.625560][ T9] usb 4-1: Product: syz [ 399.630614][T10667] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 399.647572][T10667] vhci_hcd vhci_hcd.0: Device attached [ 399.704504][ T9] usb 4-1: Manufacturer: syz [ 399.716663][ T9] usb 4-1: SerialNumber: syz [ 399.742697][ T9] usb 4-1: config 0 descriptor?? [ 399.773922][ T9] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 399.805957][ T9] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 399.920691][ T5703] usb 44-1: SetAddress Request (2) to port 0 [ 399.944311][ T5703] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 400.032528][T10676] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1474'. [ 400.374568][ T9] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 400.482362][ T5360] usb 3-1: USB disconnect, device number 68 [ 400.599319][T10683] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1475'. [ 400.691688][T10685] x_tables: ip_tables: dscp.0 match: invalid size 8 (kernel) != (user) 160 [ 400.787146][T10682] sctp: [Deprecated]: syz.2.1476 (pid 10682) Use of int in max_burst socket option deprecated. [ 400.787146][T10682] Use struct sctp_assoc_value instead [ 400.872713][ T9] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 400.895905][ T9] em28xx 4-1:0.0: board has no eeprom [ 400.913915][T10690] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1478'. [ 401.230465][ T9] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 401.243572][ T9] em28xx 4-1:0.0: dvb set to bulk mode. [ 401.260492][ T10] em28xx 4-1:0.0: Binding DVB extension [ 401.280407][ T9] usb 4-1: USB disconnect, device number 65 [ 401.326863][ T9] em28xx 4-1:0.0: Disconnecting em28xx [ 401.428298][ T10] em28xx 4-1:0.0: Registering input extension [ 401.441381][ T9] em28xx 4-1:0.0: Closing input extension [ 401.516319][ T9] em28xx 4-1:0.0: Freeing device [ 401.736331][T10697] netlink: 'syz.4.1481': attribute type 1 has an invalid length. [ 402.409600][T10668] vhci_hcd: connection reset by peer [ 402.426414][ T48] vhci_hcd vhci_hcd.5: stop threads [ 402.456263][ T48] vhci_hcd vhci_hcd.5: release socket [ 402.485035][ T48] vhci_hcd vhci_hcd.5: disconnect device [ 403.304948][ T995] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 403.540963][ T995] usb 5-1: Using ep0 maxpacket: 8 [ 403.645108][ T995] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 403.719703][ T995] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 403.761166][ T995] usb 5-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 403.789664][ T995] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.819091][ T995] usb 5-1: Product: syz [ 403.840976][ T995] usb 5-1: Manufacturer: syz [ 403.858384][ T995] usb 5-1: SerialNumber: syz [ 403.901595][ T995] usb 5-1: config 0 descriptor?? [ 404.157970][T10732] capability: warning: `syz.4.1490' uses 32-bit capabilities (legacy support in use) [ 404.466508][T10782] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1494'. [ 404.728113][ T995] usb 5-1: USB disconnect, device number 59 [ 405.062010][ T5703] usb 44-1: device descriptor read/8, error -110 [ 405.378599][T10803] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1499'. [ 405.467780][ T5703] usb usb44-port1: attempt power cycle [ 405.841711][T10813] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 405.947829][T10808] syz_tun: entered promiscuous mode [ 406.077886][ T5703] usb usb44-port1: unable to enumerate USB device [ 406.335132][T10822] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1505'. [ 406.613982][T10832] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1510'. [ 406.898710][T10840] netlink: 'syz.3.1512': attribute type 1 has an invalid length. [ 407.025955][T10840] 8021q: adding VLAN 0 to HW filter on device bond5 [ 407.186819][T10842] bond5: (slave veth9): Enslaving as an active interface with a down link [ 407.209946][T10843] FAULT_INJECTION: forcing a failure. [ 407.209946][T10843] name failslab, interval 1, probability 0, space 0, times 0 [ 407.247494][T10843] CPU: 1 UID: 0 PID: 10843 Comm: syz.3.1512 Tainted: G L syzkaller #0 PREEMPT(full) [ 407.247526][T10843] Tainted: [L]=SOFTLOCKUP [ 407.247532][T10843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 407.247541][T10843] Call Trace: [ 407.247547][T10843] [ 407.247555][T10843] dump_stack_lvl+0xe8/0x150 [ 407.247585][T10843] should_fail_ex+0x412/0x560 [ 407.247607][T10843] should_failslab+0xa8/0x100 [ 407.247629][T10843] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 407.247649][T10843] ? __alloc_skb+0x1d0/0x7d0 [ 407.247665][T10843] ? __local_bh_enable_ip+0xd0/0x130 [ 407.247683][T10843] __alloc_skb+0x1d0/0x7d0 [ 407.247703][T10843] rtmsg_ifinfo_build_skb+0x84/0x260 [ 407.247723][T10843] rtnetlink_event+0x1b7/0x270 [ 407.247743][T10843] notifier_call_chain+0x1ad/0x3d0 [ 407.247766][T10843] netif_set_mac_address+0x39f/0x4e0 [ 407.247789][T10843] ? __pfx_netif_set_mac_address+0x10/0x10 [ 407.247813][T10843] ? __pfx_kobject_init_and_add+0x10/0x10 [ 407.247842][T10843] dev_set_mac_address+0x12b/0x260 [ 407.247863][T10843] bond_enslave+0x112f/0x3c10 [ 407.247897][T10843] ? __pfx_bond_enslave+0x10/0x10 [ 407.247923][T10843] ? __pfx___dev_change_flags+0x10/0x10 [ 407.247943][T10843] ? mutex_is_locked+0x17/0x50 [ 407.247962][T10843] do_set_master+0x533/0x6d0 [ 407.247990][T10843] do_setlink+0x103d/0x45a0 [ 407.248034][T10843] ? __pfx_do_setlink+0x10/0x10 [ 407.248082][T10843] ? do_raw_spin_lock+0x12b/0x2f0 [ 407.248132][T10843] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 407.248150][T10843] ? lockdep_hardirqs_on+0x7a/0x110 [ 407.248172][T10843] ? __mutex_lock+0xef8/0x1550 [ 407.248191][T10843] ? __pfx___nla_validate_parse+0x10/0x10 [ 407.248214][T10843] ? __mutex_lock+0x608/0x1550 [ 407.248235][T10843] ? rtnl_newlink+0x883/0x1bb0 [ 407.248252][T10843] ? __pfx___mutex_lock+0x10/0x10 [ 407.248277][T10843] ? full_name_hash+0x92/0xe0 [ 407.248298][T10843] rtnl_newlink+0x15ad/0x1bb0 [ 407.248322][T10843] ? __pfx_rtnl_newlink+0x10/0x10 [ 407.248338][T10843] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.248373][T10843] ? kasan_quarantine_put+0xbb/0x1f0 [ 407.248391][T10843] ? lockdep_hardirqs_on+0x7a/0x110 [ 407.248412][T10843] ? nlmon_xmit+0xb0/0x100 [ 407.248428][T10843] ? kmem_cache_free+0x182/0x650 [ 407.248453][T10843] ? __lock_acquire+0x6b5/0x2cf0 [ 407.248471][T10843] ? __dev_queue_xmit+0x2b6/0x3950 [ 407.248492][T10843] ? __local_bh_enable_ip+0xd0/0x130 [ 407.248506][T10843] ? lockdep_hardirqs_on+0x7a/0x110 [ 407.248524][T10843] ? __dev_queue_xmit+0x2b6/0x3950 [ 407.248543][T10843] ? __local_bh_enable_ip+0xd0/0x130 [ 407.248556][T10843] ? __dev_queue_xmit+0x2b6/0x3950 [ 407.248587][T10843] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 407.248612][T10843] ? __pfx_rtnl_newlink+0x10/0x10 [ 407.248629][T10843] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 407.248649][T10843] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 407.248665][T10843] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 407.248681][T10843] ? ref_tracker_free+0x693/0x840 [ 407.248701][T10843] ? __pfx_ref_tracker_free+0x10/0x10 [ 407.248718][T10843] ? __asan_memcpy+0x40/0x70 [ 407.248735][T10843] ? __skb_clone+0x63/0x7a0 [ 407.248758][T10843] netlink_rcv_skb+0x232/0x4b0 [ 407.248777][T10843] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 407.248795][T10843] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 407.248820][T10843] ? netlink_deliver_tap+0x2e/0x1b0 [ 407.248841][T10843] ? netlink_deliver_tap+0x2e/0x1b0 [ 407.248862][T10843] netlink_unicast+0x75c/0x8e0 [ 407.248885][T10843] netlink_sendmsg+0x813/0xb40 [ 407.248909][T10843] ? __pfx_netlink_sendmsg+0x10/0x10 [ 407.248930][T10843] ? aa_sock_msg_perm+0xf1/0x1b0 [ 407.248949][T10843] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 407.248970][T10843] ____sys_sendmsg+0x972/0x9f0 [ 407.248989][T10843] ? __might_fault+0xaf/0x130 [ 407.249010][T10843] ? __pfx_____sys_sendmsg+0x10/0x10 [ 407.249034][T10843] ? import_iovec+0x73/0xa0 [ 407.249056][T10843] ___sys_sendmsg+0x2a5/0x360 [ 407.249074][T10843] ? __lock_acquire+0x6b5/0x2cf0 [ 407.249091][T10843] ? __pfx____sys_sendmsg+0x10/0x10 [ 407.249131][T10843] ? __fget_files+0x2a/0x420 [ 407.249150][T10843] ? __fget_files+0x3a0/0x420 [ 407.249187][T10843] __x64_sys_sendmsg+0x1bd/0x2a0 [ 407.249221][T10843] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 407.249250][T10843] ? __pfx_ksys_write+0x10/0x10 [ 407.249275][T10843] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.249290][T10843] do_syscall_64+0x15f/0xf80 [ 407.249309][T10843] ? clear_bhb_loop+0x40/0x90 [ 407.249326][T10843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.249340][T10843] RIP: 0033:0x7f7db619cdd9 [ 407.249354][T10843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 407.249367][T10843] RSP: 002b:00007f7db7028028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 407.249384][T10843] RAX: ffffffffffffffda RBX: 00007f7db6416180 RCX: 00007f7db619cdd9 [ 407.249394][T10843] RDX: 0000000000008000 RSI: 0000200000000240 RDI: 0000000000000005 [ 407.249404][T10843] RBP: 00007f7db7028090 R08: 0000000000000000 R09: 0000000000000000 [ 407.249413][T10843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 407.249422][T10843] R13: 00007f7db6416218 R14: 00007f7db6416180 R15: 00007f7db653fa48 [ 407.249442][T10843] [ 408.018006][T10843] bond5: (slave veth0_virt_wifi): making interface the new active one [ 408.057273][T10843] bond5: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 408.145773][T10820] netlink: zone id is out of range [ 408.196959][T10820] netlink: zone id is out of range [ 408.214050][T10820] netlink: zone id is out of range [ 408.219483][T10820] netlink: zone id is out of range [ 408.226163][T10820] netlink: zone id is out of range [ 408.231851][T10820] netlink: zone id is out of range [ 408.285964][T10820] netlink: zone id is out of range [ 408.293980][T10820] netlink: zone id is out of range [ 408.299389][T10820] netlink: zone id is out of range [ 408.305214][T10820] netlink: zone id is out of range [ 408.401103][T10857] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1518'. [ 408.731060][T10867] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 408.777897][T10865] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1517'. [ 408.822576][T10864] netlink: 'syz.4.1520': attribute type 10 has an invalid length. [ 408.832531][T10864] team0: Port device dummy0 added [ 408.833077][T10863] netlink: 'syz.4.1520': attribute type 10 has an invalid length. [ 408.839669][T10863] team0: Port device dummy0 removed [ 408.846124][T10863] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 408.900997][T10870] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1522'. [ 408.944465][T10870] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1522'. [ 409.175851][T10879] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1525'. [ 409.200832][T10879] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1525'. [ 409.228291][T10883] raw_sendmsg: syz.1.1527 forgot to set AF_INET. Fix it! [ 409.252758][T10879] batadv1: entered promiscuous mode [ 409.266641][T10879] batadv1: entered allmulticast mode [ 409.289919][T10885] loop8: detected capacity change from 0 to 8 [ 409.297123][T10879] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 409.332444][T10885] Dev loop8: unable to read RDB block 8 [ 409.358633][T10885] loop8: unable to read partition table [ 409.381243][T10885] loop8: partition table beyond EOD, truncated [ 409.473359][T10885] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 409.502027][ T5360] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 409.548030][T10891] fuse: Bad value for 'fd' [ 409.640951][ T5360] usb 2-1: device descriptor read/64, error -71 [ 409.657858][T10893] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1529'. [ 409.829205][T10898] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1531'. [ 409.880345][ T5360] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 410.011528][ T5360] usb 2-1: device descriptor read/64, error -71 [ 410.131113][ T5360] usb usb2-port1: attempt power cycle [ 410.293535][ T5630] Bluetooth: unknown link type 12 [ 410.299114][ T5630] Bluetooth: hci1: connection err: -111 [ 410.472992][T10910] x_tables: duplicate underflow at hook 1 [ 410.481313][ T5360] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 410.501468][T10910] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1534'. [ 410.544966][ T5360] usb 2-1: device descriptor read/8, error -71 [ 410.642732][T10910] syz_tun: entered allmulticast mode [ 410.703622][T10909] syz_tun: left allmulticast mode [ 410.800625][ T5360] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 410.841012][ T5360] usb 2-1: device descriptor read/8, error -71 [ 410.961157][ T5360] usb usb2-port1: unable to enumerate USB device [ 411.390249][ T5360] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 411.446312][T10886] syz.2.1524 (10886): drop_caches: 2 [ 411.552686][ T5360] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.582235][ T5360] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 411.605553][ T5360] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 411.635581][ T5360] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 411.659113][ T5360] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.683335][ T5360] usb 5-1: config 0 descriptor?? [ 412.136162][ T5360] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 412.350891][ T5710] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 412.500942][T10937] syzkaller1: entered promiscuous mode [ 412.513204][T10937] syzkaller1: entered allmulticast mode [ 412.531849][ T9] usb 5-1: USB disconnect, device number 60 [ 412.544909][ T5710] usb 3-1: Using ep0 maxpacket: 8 [ 412.555156][ T5710] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 412.565661][ T5710] usb 3-1: config 0 has no interface number 0 [ 412.574176][ T5710] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 412.592888][ T5710] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 412.608775][T10924] usb 5-1: string descriptor 0 read error: -19 [ 412.638862][ T5710] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 412.663141][ T5710] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 412.679416][ T5710] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 412.691383][ T5710] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.716614][ T5710] usb 3-1: config 0 descriptor?? [ 412.742416][ T5710] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 412.973069][ T5710] usb 3-1: USB disconnect, device number 69 [ 412.979184][ C0] ldusb 3-1:0.55: usb_submit_urb failed (-19) [ 413.023430][ T5710] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 413.105029][ T5360] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 413.282540][ T5360] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 413.309280][ T5360] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 413.324709][ T5360] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 413.343587][ T5360] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 413.363348][ T5360] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 413.378140][ T5360] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 413.395613][ T5360] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 413.405569][ T5725] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 413.413785][ T5360] usb 2-1: Product: syz [ 413.418410][ T5360] usb 2-1: Manufacturer: syz [ 413.438161][ T5360] cdc_wdm 2-1:1.0: skipping garbage [ 413.453655][ T5360] cdc_wdm 2-1:1.0: skipping garbage [ 413.467634][T10955] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1548'. [ 413.479628][T10955] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1548'. [ 413.483096][ T5360] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 413.496118][ T5360] cdc_wdm 2-1:1.0: Unknown control protocol [ 413.574182][ T5725] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 413.586795][ T5725] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 413.617437][ T5725] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 413.650325][ T5725] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.703706][ T5725] usb 6-1: config 0 descriptor?? [ 413.730892][ T5710] usb 2-1: USB disconnect, device number 57 [ 413.982418][T10961] syzkaller0: entered promiscuous mode [ 413.995589][T10961] syzkaller0: entered allmulticast mode [ 414.270724][ T5710] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 414.452126][ T5710] usb 5-1: Using ep0 maxpacket: 32 [ 414.479663][ T5710] usb 5-1: config 2 has an invalid interface number: 196 but max is 0 [ 414.514487][ T5710] usb 5-1: config 2 has no interface number 0 [ 414.537518][ T5710] usb 5-1: config 2 interface 196 has no altsetting 0 [ 414.562456][ T5710] usb 5-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice= 9.71 [ 414.588154][ T5710] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.629027][ T5710] usb 5-1: Product: syz [ 414.651645][ T5710] usb 5-1: Manufacturer: syz [ 414.654806][T10969] net_ratelimit: 120 callbacks suppressed [ 414.654829][T10969] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 414.670515][ T5710] usb 5-1: SerialNumber: syz [ 414.935529][T10977] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1554'. [ 415.090970][T10978] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1554'. [ 415.640209][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 415.799109][ T5725] usbhid 6-1:0.0: can't add hid device: -71 [ 415.815250][ T5725] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 415.846765][ T5725] usb 6-1: USB disconnect, device number 7 [ 415.930087][T10985] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1555'. [ 416.680365][ T10] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 416.897798][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 416.947596][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 416.979617][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 417.034238][ T10] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 417.089796][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.151005][ T10] usb 6-1: config 0 descriptor?? [ 417.665723][ T10] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 417.806220][T10990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1557'. [ 418.041244][T10987] usb 6-1: string descriptor 0 read error: -71 [ 418.042236][ T10] usb 6-1: USB disconnect, device number 8 [ 418.049194][T10992] plantronics 0003:047F:FFFF.001A: usb_submit_urb(ctrl) failed: -19 [ 418.260304][ T9] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 418.432390][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 418.442646][ T9] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 418.452329][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.498268][ T9] usb 2-1: config 0 descriptor?? [ 418.534427][ T9] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 419.040968][T11003] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1561'. [ 419.051319][ T9] gspca_sonixj: reg_w1 err -110 [ 419.057491][ T9] sonixj 2-1:0.0: probe with driver sonixj failed with error -110 [ 419.411664][ T5681] usb 2-1: USB disconnect, device number 58 [ 419.880375][ T5710] rndis_host 5-1:2.196: ACM capabilities 01, not really RNDIS? [ 420.681702][ T30] kauditd_printk_skb: 155 callbacks suppressed [ 420.681725][ T30] audit: type=1326 audit(1778240097.555:3291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11010 comm="syz.1.1565" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e9f59cdd9 code=0x7ffc0000 [ 420.753145][ T30] audit: type=1326 audit(1778240097.585:3292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11010 comm="syz.1.1565" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e9f59cdd9 code=0x7ffc0000 [ 420.793274][ T30] audit: type=1326 audit(1778240097.585:3293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11010 comm="syz.1.1565" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e9f59cdd9 code=0x7ffc0000 [ 420.818765][ T30] audit: type=1326 audit(1778240097.585:3294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11010 comm="syz.1.1565" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e9f59cdd9 code=0x7ffc0000 [ 420.851197][ T30] audit: type=1326 audit(1778240097.585:3295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11010 comm="syz.1.1565" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7f0e9f59cdd9 code=0x7ffc0000 [ 420.876129][ T30] audit: type=1326 audit(1778240097.585:3296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11010 comm="syz.1.1565" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e9f59cdd9 code=0x7ffc0000 [ 420.917027][ T30] audit: type=1326 audit(1778240097.585:3297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11010 comm="syz.1.1565" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e9f59cdd9 code=0x7ffc0000 [ 420.942863][ T30] audit: type=1326 audit(1778240097.585:3298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11010 comm="syz.1.1565" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e9f59cdd9 code=0x7ffc0000 [ 420.972372][ T30] audit: type=1326 audit(1778240097.585:3299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11010 comm="syz.1.1565" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e9f59cdd9 code=0x7ffc0000 [ 420.998517][ T30] audit: type=1326 audit(1778240097.585:3300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11010 comm="syz.1.1565" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e9f59cdd9 code=0x7ffc0000 [ 421.859838][ T5360] usb 5-1: USB disconnect, device number 61 [ 422.101837][T11023] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1572'. [ 422.188780][T11031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1570'. [ 422.516249][T11045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1578'. [ 423.225271][T11071] input: syz1 as /devices/virtual/input/input34 [ 423.629530][T11085] netlink: 'syz.5.1593': attribute type 1 has an invalid length. [ 423.661722][ T5360] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 423.711238][T11090] netlink: 'syz.2.1594': attribute type 1 has an invalid length. [ 423.719458][T11090] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1594'. [ 423.756786][T11085] 8021q: adding VLAN 0 to HW filter on device bond1 [ 423.798019][T11087] bond1: (slave veth0_virt_wifi): making interface the new active one [ 423.810860][ T5360] usb 5-1: device descriptor read/64, error -71 [ 423.825118][T11087] bond1: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 423.854050][T11094] bond1: (slave veth0_virt_wifi): Releasing active interface [ 424.070493][ T5360] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 424.210876][ T5360] usb 5-1: device descriptor read/64, error -71 [ 424.217757][T11102] binder_alloc: 11101: binder_alloc_buf, no vma [ 424.335149][ T5360] usb usb5-port1: attempt power cycle [ 424.355387][T11104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1598'. [ 424.508400][T11110] tipc: Enabling of bearer rejected, failed to enable media [ 424.680600][ T5710] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 424.690458][ T5360] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 424.715717][ T5360] usb 5-1: device descriptor read/8, error -71 [ 424.721373][T11117] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1603'. [ 424.837029][ T995] hid_parser_main: 28 callbacks suppressed [ 424.837057][ T995] hid-generic 0006:0004:0009.001B: unknown main item tag 0x0 [ 424.850969][ T5710] usb 3-1: Using ep0 maxpacket: 32 [ 424.859144][T11123] netlink: 'syz.5.1605': attribute type 2 has an invalid length. [ 424.861355][ T995] hid-generic 0006:0004:0009.001B: unknown main item tag 0x0 [ 424.875653][ T995] hid-generic 0006:0004:0009.001B: unknown main item tag 0x0 [ 424.877417][ T5710] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 424.885759][ T995] hid-generic 0006:0004:0009.001B: unknown main item tag 0x0 [ 424.903654][ T995] hid-generic 0006:0004:0009.001B: unknown main item tag 0x0 [ 424.911868][ T995] hid-generic 0006:0004:0009.001B: unknown main item tag 0x0 [ 424.919999][ T995] hid-generic 0006:0004:0009.001B: unknown main item tag 0x0 [ 424.921125][ T5710] usb 3-1: config 0 interface 0 altsetting 16 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 424.943443][ T5710] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 424.945836][ T995] hid-generic 0006:0004:0009.001B: unknown main item tag 0x0 [ 424.955409][ T5710] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x8F has invalid wMaxPacketSize 0 [ 424.963049][ T5360] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 424.973345][ T5710] usb 3-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 424.994308][ T5710] usb 3-1: config 0 interface 0 has no altsetting 0 [ 424.994568][ T995] hid-generic 0006:0004:0009.001B: unknown main item tag 0x0 [ 425.001718][ T5710] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 425.009372][ T995] hid-generic 0006:0004:0009.001B: unknown main item tag 0x0 [ 425.022454][ T5710] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.035357][ T5360] usb 5-1: device descriptor read/8, error -71 [ 425.038049][ T5710] usb 3-1: config 0 descriptor?? [ 425.059777][ T995] hid-generic 0006:0004:0009.001B: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 425.147822][T11126] fido_id[11126]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 425.151497][ T5360] usb usb5-port1: unable to enumerate USB device [ 425.661973][ T5360] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 425.696012][T11108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.723927][T11108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.760789][ T5710] usbhid 3-1:0.0: can't add hid device: -71 [ 425.777661][ T5710] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 425.817530][ T5710] usb 3-1: USB disconnect, device number 70 [ 425.861408][ T5360] usb 6-1: Using ep0 maxpacket: 16 [ 425.894331][ T5360] usb 6-1: config 252 has an invalid interface number: 15 but max is 0 [ 425.931810][ T5360] usb 6-1: config 252 has no interface number 0 [ 425.982559][ T5360] usb 6-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 426.064060][ T5360] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 426.089713][ T5360] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.113563][ T5360] usb 6-1: Product: syz [ 426.124424][ T5360] usb 6-1: Manufacturer: syz [ 426.129202][ T5360] usb 6-1: SerialNumber: syz [ 426.162062][ T5360] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 426.310299][ T5725] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 426.373792][T11148] syzkaller0: entered promiscuous mode [ 426.385157][T11148] syzkaller0: entered allmulticast mode [ 426.445180][ T5360] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 426.480756][ T5725] usb 2-1: Using ep0 maxpacket: 32 [ 426.488353][ T5725] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 426.516851][ T5725] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 426.554612][T11149] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1607'. [ 426.557493][ T5725] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 426.582546][ T5725] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 426.591858][ T5725] usb 2-1: Product: syz [ 426.596507][ T5725] usb 2-1: Manufacturer: syz [ 426.604565][ T5360] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 426.618788][ T5360] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 426.645453][ T5725] hub 2-1:4.0: USB hub found [ 426.653527][ T5360] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 426.715037][ T5360] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 426.740705][ T5360] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.769215][ T5360] usb 4-1: config 0 descriptor?? [ 426.786884][T11154] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1615'. [ 426.804331][T11149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 426.849223][ T5725] hub 2-1:4.0: 2 ports detected [ 426.883747][T11149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 427.040855][ T5688] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 427.210422][ T5688] usb 3-1: Using ep0 maxpacket: 8 [ 427.229273][ T5360] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 427.265914][ T5688] usb 3-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 427.296265][T10754] usb 6-1: Failed to submit usb control message: -110 [ 427.316700][ T5688] usb 3-1: config 1 interface 0 has no altsetting 0 [ 427.324006][T10754] usb 6-1: unable to send the bmi data to the device: -110 [ 427.353787][ T5688] usb 3-1: language id specifier not provided by device, defaulting to English [ 427.366480][T10754] usb 6-1: unable to get target info from device [ 427.384984][T10754] usb 6-1: could not get target info (-110) [ 427.397386][ T5688] usb 3-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.40 [ 427.418170][T10754] usb 6-1: could not probe fw (-110) [ 427.427380][ T5688] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.458152][ T5688] usb 3-1: Product: syz [ 427.473559][ T5688] usb 3-1: Manufacturer: ࠝ [ 427.500621][ T5688] usb 3-1: SerialNumber: syz [ 427.558641][T11163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.582449][T11163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.651224][T11165] FAULT_INJECTION: forcing a failure. [ 427.651224][T11165] name failslab, interval 1, probability 0, space 0, times 0 [ 427.665977][T11165] CPU: 1 UID: 0 PID: 11165 Comm: syz.4.1618 Tainted: G L syzkaller #0 PREEMPT(full) [ 427.666022][T11165] Tainted: [L]=SOFTLOCKUP [ 427.666031][T11165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 427.666046][T11165] Call Trace: [ 427.666057][T11165] [ 427.666069][T11165] dump_stack_lvl+0xe8/0x150 [ 427.666103][T11165] should_fail_ex+0x412/0x560 [ 427.666138][T11165] should_failslab+0xa8/0x100 [ 427.666172][T11165] __kmalloc_cache_noprof+0x88/0x660 [ 427.666201][T11165] ? __pfx_stack_trace_save+0x10/0x10 [ 427.666233][T11165] ? rtnl_newlink+0x136/0x1bb0 [ 427.666267][T11165] rtnl_newlink+0x136/0x1bb0 [ 427.666296][T11165] ? kasan_save_track+0x3e/0x80 [ 427.666322][T11165] ? kasan_save_free_info+0x46/0x50 [ 427.666346][T11165] ? __kasan_slab_free+0x5c/0x80 [ 427.666371][T11165] ? dev_hard_start_xmit+0x2cd/0x830 [ 427.666395][T11165] ? __dev_queue_xmit+0x14d9/0x3950 [ 427.666421][T11165] ? __netlink_deliver_tap+0x5ad/0x850 [ 427.666448][T11165] ? netlink_deliver_tap+0x19c/0x1b0 [ 427.666473][T11165] ? netlink_unicast+0x730/0x8e0 [ 427.666497][T11165] ? netlink_sendmsg+0x813/0xb40 [ 427.666527][T11165] ? __pfx_rtnl_newlink+0x10/0x10 [ 427.666552][T11165] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.666620][T11165] ? kasan_quarantine_put+0xbb/0x1f0 [ 427.666650][T11165] ? lockdep_hardirqs_on+0x7a/0x110 [ 427.666685][T11165] ? nlmon_xmit+0xb0/0x100 [ 427.666711][T11165] ? kmem_cache_free+0x182/0x650 [ 427.666752][T11165] ? __lock_acquire+0x6b5/0x2cf0 [ 427.666782][T11165] ? __dev_queue_xmit+0x2b6/0x3950 [ 427.666815][T11165] ? __local_bh_enable_ip+0xd0/0x130 [ 427.666839][T11165] ? lockdep_hardirqs_on+0x7a/0x110 [ 427.666867][T11165] ? __dev_queue_xmit+0x2b6/0x3950 [ 427.666895][T11165] ? __local_bh_enable_ip+0xd0/0x130 [ 427.666915][T11165] ? __dev_queue_xmit+0x2b6/0x3950 [ 427.666954][T11165] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 427.666997][T11165] ? __pfx_rtnl_newlink+0x10/0x10 [ 427.667024][T11165] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 427.667054][T11165] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 427.667081][T11165] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 427.667106][T11165] ? ref_tracker_free+0x693/0x840 [ 427.667138][T11165] ? __pfx_ref_tracker_free+0x10/0x10 [ 427.667166][T11165] ? __asan_memcpy+0x40/0x70 [ 427.667191][T11165] ? __skb_clone+0x63/0x7a0 [ 427.667230][T11165] netlink_rcv_skb+0x232/0x4b0 [ 427.667260][T11165] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 427.667290][T11165] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 427.667330][T11165] ? netlink_deliver_tap+0x2e/0x1b0 [ 427.667357][T11165] ? netlink_deliver_tap+0x2e/0x1b0 [ 427.667389][T11165] netlink_unicast+0x75c/0x8e0 [ 427.667427][T11165] netlink_sendmsg+0x813/0xb40 [ 427.667467][T11165] ? __pfx_netlink_sendmsg+0x10/0x10 [ 427.667499][T11165] ? aa_sock_msg_perm+0xf1/0x1b0 [ 427.667531][T11165] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 427.667565][T11165] ____sys_sendmsg+0x972/0x9f0 [ 427.667595][T11165] ? __might_fault+0xaf/0x130 [ 427.667638][T11165] ? __pfx_____sys_sendmsg+0x10/0x10 [ 427.667678][T11165] ? import_iovec+0x73/0xa0 [ 427.667713][T11165] ___sys_sendmsg+0x2a5/0x360 [ 427.667743][T11165] ? __lock_acquire+0x6b5/0x2cf0 [ 427.667770][T11165] ? __pfx____sys_sendmsg+0x10/0x10 [ 427.667835][T11165] ? __fget_files+0x2a/0x420 [ 427.667861][T11165] ? __fget_files+0x3a0/0x420 [ 427.667898][T11165] __x64_sys_sendmsg+0x1bd/0x2a0 [ 427.667930][T11165] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 427.667971][T11165] ? __pfx_ksys_write+0x10/0x10 [ 427.668012][T11165] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.668037][T11165] do_syscall_64+0x15f/0xf80 [ 427.668067][T11165] ? clear_bhb_loop+0x40/0x90 [ 427.668095][T11165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.668119][T11165] RIP: 0033:0x7fb78219cdd9 [ 427.668141][T11165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 427.668163][T11165] RSP: 002b:00007fb782fe8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 427.668189][T11165] RAX: ffffffffffffffda RBX: 00007fb782415fa0 RCX: 00007fb78219cdd9 [ 427.668205][T11165] RDX: 0000000004004804 RSI: 0000200000000380 RDI: 0000000000000003 [ 427.668221][T11165] RBP: 00007fb782fe8090 R08: 0000000000000000 R09: 0000000000000000 [ 427.668235][T11165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 427.668250][T11165] R13: 00007fb782416038 R14: 00007fb782415fa0 R15: 00007fb78253fa48 [ 427.668285][T11165] [ 428.216333][T11151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1614'. [ 428.268253][T11167] Cannot find add_set index 65534 as target [ 428.604680][ T995] hub 2-1:4.0: activate --> -90 [ 428.805796][ T5688] usbhid 3-1:1.0: can't add hid device: -71 [ 428.827967][ T5688] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 428.880104][ T5688] usb 3-1: USB disconnect, device number 71 [ 428.991731][ T30] kauditd_printk_skb: 65 callbacks suppressed [ 428.991754][ T30] audit: type=1326 audit(1778240105.865:3366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11181 comm="syz.2.1625" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe59a99cdd9 code=0x0 [ 429.053718][T11186] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 429.159344][T11186] fuse: Bad value for 'fd' [ 429.336495][T11187] usb usb8: usbfs: process 11187 (syz.2.1625) did not claim interface 0 before use [ 429.378360][ T5688] usb 6-1: USB disconnect, device number 9 [ 429.427508][T11141] sch_fq: defrate 16 ignored. [ 429.456363][T11141] xt_cgroup: path and classid specified [ 429.535677][ T5725] usb 4-1: reset high-speed USB device number 66 using dummy_hcd [ 429.546361][ T995] hub 2-1:4.0: hub_ext_port_status failed (err = -71) [ 429.562896][ T5703] usb 2-1: USB disconnect, device number 59 [ 429.569478][ T995] usb 2-1-port2: cannot reset (err = -71) [ 429.576963][ T995] usb 2-1-port2: Cannot enable. Maybe the USB cable is bad? [ 429.589877][ T995] usb 2-1-port2: attempt power cycle [ 429.720917][ T5725] usb 4-1: device firmware changed [ 429.728749][ T5360] usb 4-1: USB disconnect, device number 66 [ 429.900678][ T5722] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 429.908474][ T5360] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 430.080626][ T5722] usb 6-1: Using ep0 maxpacket: 32 [ 430.094536][ T5360] usb 4-1: unable to get BOS descriptor or descriptor too short [ 430.108062][ T5722] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 430.121232][ T5722] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 430.135208][ T5360] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 430.147132][ T5722] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 430.159132][ T5360] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 430.172269][ T5360] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 430.182777][ T5360] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.192564][ T5360] usb 4-1: Product: syz [ 430.197122][ T5722] usb 6-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 430.206862][ T5722] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.215423][ T5360] usb 4-1: Manufacturer: syz [ 430.220941][ T5360] usb 4-1: SerialNumber: syz [ 430.225825][ T5722] usb 6-1: Product: syz [ 430.232776][ T5722] usb 6-1: Manufacturer: syz [ 430.239840][ T5722] usb 6-1: SerialNumber: syz [ 430.244847][ T5360] usb 4-1: selecting invalid altsetting 1 [ 430.258405][ T5722] usb 6-1: config 0 descriptor?? [ 430.272073][ T5360] usb 4-1: unit 6 not found! [ 430.316116][ T5722] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input36 [ 430.355527][T11201] FAULT_INJECTION: forcing a failure. [ 430.355527][T11201] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 430.371631][T11201] CPU: 0 UID: 0 PID: 11201 Comm: syz.1.1632 Tainted: G L syzkaller #0 PREEMPT(full) [ 430.371668][T11201] Tainted: [L]=SOFTLOCKUP [ 430.371677][T11201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 430.371690][T11201] Call Trace: [ 430.371700][T11201] [ 430.371710][T11201] dump_stack_lvl+0xe8/0x150 [ 430.371742][T11201] should_fail_ex+0x412/0x560 [ 430.371777][T11201] _copy_from_user+0x2d/0xb0 [ 430.371809][T11201] input_event_from_user+0xb1/0x290 [ 430.371833][T11201] ? __pfx_input_event_from_user+0x10/0x10 [ 430.371868][T11201] evdev_write+0x2c7/0x4c0 [ 430.371890][T11201] ? __lock_acquire+0x6b5/0x2cf0 [ 430.371920][T11201] ? __pfx_evdev_write+0x10/0x10 [ 430.371943][T11201] ? bpf_lsm_file_permission+0x9/0x20 [ 430.371972][T11201] ? security_file_permission+0x75/0x260 [ 430.371995][T11201] ? rw_verify_area+0x255/0x4d0 [ 430.372025][T11201] ? __pfx_evdev_write+0x10/0x10 [ 430.372047][T11201] vfs_write+0x29a/0xb90 [ 430.372087][T11201] ? __pfx_vfs_write+0x10/0x10 [ 430.372119][T11201] ? __fget_files+0x2a/0x420 [ 430.372148][T11201] ? __fget_files+0x2a/0x420 [ 430.372173][T11201] ? __fget_files+0x3a0/0x420 [ 430.372195][T11201] ? __fget_files+0x2a/0x420 [ 430.372227][T11201] ksys_write+0x150/0x270 [ 430.372257][T11201] ? __pfx_ksys_write+0x10/0x10 [ 430.372291][T11201] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.372313][T11201] do_syscall_64+0x15f/0xf80 [ 430.372339][T11201] ? trace_irq_disable+0x3b/0x140 [ 430.372367][T11201] ? clear_bhb_loop+0x40/0x90 [ 430.372392][T11201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.372411][T11201] RIP: 0033:0x7f0e9f59cdd9 [ 430.372431][T11201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 430.372448][T11201] RSP: 002b:00007f0ea04e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 430.372470][T11201] RAX: ffffffffffffffda RBX: 00007f0e9f815fa0 RCX: 00007f0e9f59cdd9 [ 430.372485][T11201] RDX: 00000000000012d8 RSI: 0000200000000040 RDI: 0000000000000004 [ 430.372498][T11201] RBP: 00007f0ea04e4090 R08: 0000000000000000 R09: 0000000000000000 [ 430.372510][T11201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 430.372522][T11201] R13: 00007f0e9f816038 R14: 00007f0e9f815fa0 R15: 00007f0e9f93fa48 [ 430.372553][T11201] [ 430.718092][T11190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.785154][T11195] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1629'. [ 430.848384][T11190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.149383][T11213] FAULT_INJECTION: forcing a failure. [ 431.149383][T11213] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 431.187998][T11213] CPU: 1 UID: 0 PID: 11213 Comm: syz.1.1635 Tainted: G L syzkaller #0 PREEMPT(full) [ 431.188042][T11213] Tainted: [L]=SOFTLOCKUP [ 431.188050][T11213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 431.188063][T11213] Call Trace: [ 431.188073][T11213] [ 431.188082][T11213] dump_stack_lvl+0xe8/0x150 [ 431.188114][T11213] should_fail_ex+0x412/0x560 [ 431.188146][T11213] prepare_alloc_pages+0x22a/0x650 [ 431.188185][T11213] __alloc_frozen_pages_noprof+0x12f/0x380 [ 431.188219][T11213] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 431.188256][T11213] ? __pfx_policy_nodemask+0x10/0x10 [ 431.188300][T11213] ? do_raw_spin_lock+0x12b/0x2f0 [ 431.188339][T11213] alloc_pages_mpol+0x235/0x490 [ 431.188377][T11213] alloc_pages_noprof+0xac/0x2a0 [ 431.188400][T11213] __pmd_alloc+0x3a/0x5c0 [ 431.188430][T11213] handle_mm_fault+0xe96/0x3170 [ 431.188469][T11213] ? handle_mm_fault+0xee/0x3170 [ 431.188501][T11213] ? __pfx_handle_mm_fault+0x10/0x10 [ 431.188539][T11213] ? __lock_acquire+0x6b5/0x2cf0 [ 431.188568][T11213] ? lock_mm_and_find_vma+0xa7/0x340 [ 431.188599][T11213] do_user_addr_fault+0x75b/0x1340 [ 431.188635][T11213] exc_page_fault+0x6a/0xc0 [ 431.188664][T11213] asm_exc_page_fault+0x26/0x30 [ 431.188684][T11213] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 431.188706][T11213] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 431.188723][T11213] RSP: 0018:ffffc9000596fd58 EFLAGS: 00050216 [ 431.188742][T11213] RAX: 00007ffffffff001 RBX: 0000000000000020 RCX: 0000000000000020 [ 431.188757][T11213] RDX: 0000000000000001 RSI: 0000200000000f40 RDI: ffffc9000596fdc0 [ 431.188772][T11213] RBP: ffffc9000596feb8 R08: ffffc9000596fddf R09: 1ffff92000b2dfbb [ 431.188786][T11213] R10: dffffc0000000000 R11: fffff52000b2dfbc R12: 0000000000000020 [ 431.188800][T11213] R13: 0000000000000020 R14: ffffc9000596fdc0 R15: 0000200000000f40 [ 431.188832][T11213] _copy_from_user+0x7a/0xb0 [ 431.188859][T11213] __sys_connect+0x156/0x450 [ 431.188886][T11213] ? __pfx___sys_connect+0x10/0x10 [ 431.188921][T11213] ? __pfx_ksys_write+0x10/0x10 [ 431.188952][T11213] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.188973][T11213] __x64_sys_connect+0x7a/0x90 [ 431.188997][T11213] do_syscall_64+0x15f/0xf80 [ 431.189023][T11213] ? trace_irq_disable+0x3b/0x140 [ 431.189051][T11213] ? clear_bhb_loop+0x40/0x90 [ 431.189075][T11213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.189094][T11213] RIP: 0033:0x7f0e9f59cdd9 [ 431.189113][T11213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 431.189129][T11213] RSP: 002b:00007f0ea04e4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 431.189148][T11213] RAX: ffffffffffffffda RBX: 00007f0e9f815fa0 RCX: 00007f0e9f59cdd9 [ 431.189163][T11213] RDX: 0000000000000020 RSI: 0000200000000f40 RDI: 0000000000000003 [ 431.189175][T11213] RBP: 00007f0ea04e4090 R08: 0000000000000000 R09: 0000000000000000 [ 431.189186][T11213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 431.189197][T11213] R13: 00007f0e9f816038 R14: 00007f0e9f815fa0 R15: 00007f0e9f93fa48 [ 431.189228][T11213] [ 431.593732][ T5360] usb 4-1: 2:0: cannot get min/max values for control 1 (id 2) [ 431.934591][ T5360] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 431.952320][ T5360] usb 4-1: USB disconnect, device number 67 [ 431.994528][T11222] netlink: 'syz.5.1638': attribute type 10 has an invalid length. [ 432.028530][ T5696] udevd[5696]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 432.059605][T11223] netlink: 'syz.5.1638': attribute type 10 has an invalid length. [ 432.117217][T11222] team0: Failed to send options change via netlink (err -105) [ 432.135568][T11222] team0: Port device dummy0 added [ 432.146599][T11223] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 432.175429][T11223] team0: Failed to send options change via netlink (err -105) [ 432.195550][T11223] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 432.217379][T11223] team0: Port device dummy0 removed [ 432.249366][T11223] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 432.466920][T11235] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1643'. [ 432.480338][ T5688] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 432.489530][T11235] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1643'. [ 432.634586][ T5688] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 432.655170][ T5688] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.695714][ T5688] usb 5-1: config 0 descriptor?? [ 432.931307][ T5688] usbhid 5-1:0.0: can't add hid device: -71 [ 432.951625][ T5688] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 432.985682][ T5688] usb 5-1: USB disconnect, device number 66 [ 433.353778][T11242] usb usb8: usbfs: process 11242 (syz.3.1644) did not claim interface 0 before use [ 433.395860][T11242] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 433.407435][T11242] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 433.470530][ T5688] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 433.650343][ T5688] usb 5-1: Using ep0 maxpacket: 32 [ 433.660682][ T5688] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 433.690524][ T5688] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.728334][ T5688] usb 5-1: config 0 descriptor?? [ 433.753341][ T5688] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 433.792851][ T5688] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 434.067863][T11237] usb usb8: usbfs: process 11237 (syz.2.1641) did not claim interface 0 before use [ 434.106934][T11237] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 434.121314][T11237] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 434.162012][T11228] ldusb 5-1:0.0: Read buffer overflow, 177 bytes dropped [ 434.246980][ T995] usb 5-1: USB disconnect, device number 67 [ 434.276445][ T995] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 435.140987][ T995] IPVS: starting estimator thread 0... [ 435.179302][T11252] gre0: entered promiscuous mode [ 435.205720][T11252] gre0: entered allmulticast mode [ 435.271500][T11254] IPVS: using max 24 ests per chain, 57600 per kthread [ 435.440408][ T5688] usb 4-1: new full-speed USB device number 68 using dummy_hcd [ 435.613118][ T5688] usb 4-1: config 4 has an invalid interface number: 88 but max is 0 [ 435.661421][ T5688] usb 4-1: config 4 has no interface number 0 [ 435.684336][ T5688] usb 4-1: config 4 interface 88 altsetting 119 has a duplicate endpoint with address 0xB, skipping [ 435.721836][T11260] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 435.725233][ T5688] usb 4-1: config 4 interface 88 altsetting 119 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 435.728779][T11260] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 435.752331][T11260] vhci_hcd vhci_hcd.0: Device attached [ 435.797835][ T5688] usb 4-1: config 4 interface 88 altsetting 119 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 435.825418][T11264] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1650'. [ 435.840108][ T5688] usb 4-1: config 4 interface 88 has no altsetting 0 [ 435.876405][ T5688] usb 4-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=af.e7 [ 435.890026][ T5688] usb 4-1: New USB device strings: Mfr=8, Product=0, SerialNumber=3 [ 435.903629][ T5688] usb 4-1: Manufacturer: syz [ 435.921435][ T5688] usb 4-1: SerialNumber: syz [ 435.948659][T11256] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 436.050372][ T995] usb 36-1: SetAddress Request (14) to port 0 [ 436.076712][ T995] usb 36-1: new SuperSpeed USB device number 14 using vhci_hcd [ 436.182649][ T5688] usb 4-1: USB disconnect, device number 68 [ 436.519684][T11274] tipc: Enabling of bearer rejected, failed to enable media [ 437.170806][ T5722] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 437.232034][T11294] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 437.330419][ T5722] usb 2-1: device descriptor read/64, error -71 [ 437.580684][ T5722] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 437.740391][ T5722] usb 2-1: device descriptor read/64, error -71 [ 437.870960][ T5722] usb usb2-port1: attempt power cycle [ 438.100658][T11306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1663'. [ 438.250759][ T5722] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 438.389569][ T5722] usb 2-1: device descriptor read/8, error -71 [ 438.405196][T11261] vhci_hcd: connection reset by peer [ 438.452753][ T12] vhci_hcd vhci_hcd.1: stop threads [ 438.472619][ T12] vhci_hcd vhci_hcd.1: release socket [ 438.479503][T11314] loop5: detected capacity change from 0 to 7 [ 438.492328][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 438.507044][T11314] Dev loop5: unable to read RDB block 7 [ 438.521088][T11314] loop5: AHDI p1 [ 438.554070][T11314] loop5: partition table partially beyond EOD, truncated [ 440.222662][T11346] netlink: 'syz.4.1678': attribute type 8 has an invalid length. [ 440.250819][T11346] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1678'. [ 440.334624][T11346] bond0: entered promiscuous mode [ 440.350092][T11346] bond_slave_0: entered promiscuous mode [ 440.369921][T11346] bond_slave_1: entered promiscuous mode [ 440.388829][T11346] dummy0: entered promiscuous mode [ 440.440897][T11340] capability: warning: `syz.5.1675' uses deprecated v2 capabilities in a way that may be insecure [ 440.457276][T11346] gretap0: entered promiscuous mode [ 440.486322][T11346] bond0: left promiscuous mode [ 440.503814][T11346] bond_slave_0: left promiscuous mode [ 440.514355][T11346] bond_slave_1: left promiscuous mode [ 440.516914][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.526667][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.530054][T11346] dummy0: left promiscuous mode [ 440.550104][ T30] audit: type=1800 audit(1778240117.415:3367): pid=11345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1675" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 440.591166][T11350] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1679'. [ 440.592457][T11346] gretap0: left promiscuous mode [ 440.659351][T11350] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1679'. [ 440.821134][T11356] fuse: Bad value for 'fd' [ 440.953314][T11358] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 440.960124][T11358] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 441.019042][T11366] netlink: 'syz.3.1680': attribute type 6 has an invalid length. [ 441.044258][T11364] binder_alloc: 11359: binder_alloc_buf, no vma [ 441.226240][ T995] usb 36-1: device descriptor read/8, error -110 [ 441.252701][ T5703] usb 38-1: SetAddress Request (6) to port 0 [ 441.307342][ T5703] usb 38-1: new SuperSpeed USB device number 6 using vhci_hcd [ 441.315565][T11358] vhci_hcd vhci_hcd.0: Device attached [ 441.682608][T11384] gre0: left promiscuous mode [ 441.700499][ T995] usb usb36-port1: attempt power cycle [ 441.716461][T11384] gre0: left allmulticast mode [ 441.830493][T11386] fuse: Bad value for 'fd' [ 441.924457][T11391] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1687'. [ 441.952281][T11384] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 442.069569][T11369] binder: 11338:11369 ioctl c0306201 0 returned -14 [ 442.160929][ T5722] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 442.301336][ T995] usb usb36-port1: unable to enumerate USB device [ 442.310685][ T5722] usb 3-1: device descriptor read/64, error -71 [ 442.580765][ T5722] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 442.730442][ T5722] usb 3-1: device descriptor read/64, error -71 [ 442.860987][ T5722] usb usb3-port1: attempt power cycle [ 443.230400][ T5722] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 443.288030][ T5722] usb 3-1: device descriptor read/8, error -71 [ 443.303078][T11362] vhci_hcd: connection reset by peer [ 443.319524][ T9688] vhci_hcd vhci_hcd.2: stop threads [ 443.338012][ T9688] vhci_hcd vhci_hcd.2: release socket [ 443.355288][ T9688] vhci_hcd vhci_hcd.2: disconnect device [ 443.774798][T11399] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1690'. [ 443.811429][T11399] netlink: 'syz.2.1690': attribute type 7 has an invalid length. [ 443.842889][T11399] netlink: 'syz.2.1690': attribute type 8 has an invalid length. [ 443.886452][T11399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1690'. [ 443.984530][T11399] team0: entered promiscuous mode [ 444.003145][T11399] team_slave_0: entered promiscuous mode [ 444.034479][T11399] team_slave_1: entered promiscuous mode [ 444.064296][T11399] bond0: entered promiscuous mode [ 444.101065][T11399] bond_slave_0: entered promiscuous mode [ 444.133608][T11399] bond_slave_1: entered promiscuous mode [ 444.160907][T11399] veth3: entered promiscuous mode [ 444.168227][T11399] gretap0: entered promiscuous mode [ 444.187037][T11399] debugfs: 'hsr1' already exists in 'hsr' [ 444.195486][T11399] Cannot create hsr debugfs directory [ 444.206757][T11399] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 444.449657][T11408] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1693'. [ 444.452304][T11409] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 444.579609][T11410] loop1: detected capacity change from 0 to 8 [ 444.770174][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 445.181688][T11417] sctp: [Deprecated]: syz.3.1695 (pid 11417) Use of struct sctp_assoc_value in delayed_ack socket option. [ 445.181688][T11417] Use struct sctp_sack_info instead [ 445.221940][T11419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.269493][T11419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.953809][T11428] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1699'. [ 445.978158][T11428] FAULT_INJECTION: forcing a failure. [ 445.978158][T11428] name failslab, interval 1, probability 0, space 0, times 0 [ 446.025822][T11428] CPU: 0 UID: 0 PID: 11428 Comm: syz.4.1699 Tainted: G L syzkaller #0 PREEMPT(full) [ 446.025859][T11428] Tainted: [L]=SOFTLOCKUP [ 446.025869][T11428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 446.025882][T11428] Call Trace: [ 446.025892][T11428] [ 446.025901][T11428] dump_stack_lvl+0xe8/0x150 [ 446.025934][T11428] should_fail_ex+0x412/0x560 [ 446.025969][T11428] should_failslab+0xa8/0x100 [ 446.026003][T11428] __kvmalloc_node_noprof+0x178/0x8a0 [ 446.026036][T11428] ? alloc_netdev_mqs+0xa8/0x1210 [ 446.026068][T11428] alloc_netdev_mqs+0xa8/0x1210 [ 446.026087][T11428] ? __pfx_ip6_tnl_dev_setup+0x10/0x10 [ 446.026128][T11428] rtnl_create_link+0x31f/0xd70 [ 446.026159][T11428] rtnl_newlink_create+0x277/0xb70 [ 446.026198][T11428] ? __pfx___nla_validate_parse+0x10/0x10 [ 446.026239][T11428] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 446.026271][T11428] ? __pfx___mutex_lock+0x10/0x10 [ 446.026311][T11428] ? ns_capable+0x89/0xe0 [ 446.026328][T11428] rtnl_newlink+0x166a/0x1bb0 [ 446.026355][T11428] ? __pfx_rtnl_newlink+0x10/0x10 [ 446.026376][T11428] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.026437][T11428] ? kasan_quarantine_put+0xbb/0x1f0 [ 446.026463][T11428] ? lockdep_hardirqs_on+0x7a/0x110 [ 446.026487][T11428] ? nlmon_xmit+0xb0/0x100 [ 446.026504][T11428] ? kmem_cache_free+0x182/0x650 [ 446.026533][T11428] ? __lock_acquire+0x6b5/0x2cf0 [ 446.026562][T11428] ? __dev_queue_xmit+0x2b6/0x3950 [ 446.026596][T11428] ? __local_bh_enable_ip+0xd0/0x130 [ 446.026624][T11428] ? lockdep_hardirqs_on+0x7a/0x110 [ 446.026643][T11428] ? __dev_queue_xmit+0x2b6/0x3950 [ 446.026662][T11428] ? __local_bh_enable_ip+0xd0/0x130 [ 446.026676][T11428] ? __dev_queue_xmit+0x2b6/0x3950 [ 446.026708][T11428] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 446.026751][T11428] ? __pfx_rtnl_newlink+0x10/0x10 [ 446.026775][T11428] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 446.026799][T11428] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 446.026815][T11428] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 446.026831][T11428] ? ref_tracker_free+0x693/0x840 [ 446.026856][T11428] ? __pfx_ref_tracker_free+0x10/0x10 [ 446.026884][T11428] ? __asan_memcpy+0x40/0x70 [ 446.026908][T11428] ? __skb_clone+0x63/0x7a0 [ 446.026944][T11428] netlink_rcv_skb+0x232/0x4b0 [ 446.026966][T11428] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 446.026984][T11428] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 446.027013][T11428] ? netlink_deliver_tap+0x2e/0x1b0 [ 446.027041][T11428] ? netlink_deliver_tap+0x2e/0x1b0 [ 446.027074][T11428] netlink_unicast+0x75c/0x8e0 [ 446.027109][T11428] netlink_sendmsg+0x813/0xb40 [ 446.027133][T11428] ? __pfx_netlink_sendmsg+0x10/0x10 [ 446.027153][T11428] ? aa_sock_msg_perm+0xf1/0x1b0 [ 446.027187][T11428] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 446.027219][T11428] ____sys_sendmsg+0x972/0x9f0 [ 446.027247][T11428] ? __might_fault+0xaf/0x130 [ 446.027274][T11428] ? __pfx_____sys_sendmsg+0x10/0x10 [ 446.027299][T11428] ? import_iovec+0x73/0xa0 [ 446.027322][T11428] ___sys_sendmsg+0x2a5/0x360 [ 446.027350][T11428] ? __lock_acquire+0x6b5/0x2cf0 [ 446.027378][T11428] ? __pfx____sys_sendmsg+0x10/0x10 [ 446.027437][T11428] ? __fget_files+0x2a/0x420 [ 446.027454][T11428] ? __fget_files+0x3a0/0x420 [ 446.027476][T11428] __x64_sys_sendmsg+0x1bd/0x2a0 [ 446.027509][T11428] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 446.027548][T11428] ? __pfx_ksys_write+0x10/0x10 [ 446.027583][T11428] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.027599][T11428] do_syscall_64+0x15f/0xf80 [ 446.027617][T11428] ? trace_irq_disable+0x3b/0x140 [ 446.027639][T11428] ? clear_bhb_loop+0x40/0x90 [ 446.027665][T11428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.027687][T11428] RIP: 0033:0x7fb78219cdd9 [ 446.027707][T11428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 446.027726][T11428] RSP: 002b:00007fb782fe8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 446.027747][T11428] RAX: ffffffffffffffda RBX: 00007fb782415fa0 RCX: 00007fb78219cdd9 [ 446.027757][T11428] RDX: 0000000004004804 RSI: 0000200000000380 RDI: 0000000000000003 [ 446.027767][T11428] RBP: 00007fb782fe8090 R08: 0000000000000000 R09: 0000000000000000 [ 446.027776][T11428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 446.027785][T11428] R13: 00007fb782416038 R14: 00007fb782415fa0 R15: 00007fb78253fa48 [ 446.027816][T11428] [ 446.440711][ T5703] usb 38-1: device descriptor read/8, error -110 [ 447.020448][ T5688] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 447.085180][ T5703] usb usb38-port1: attempt power cycle [ 447.145090][T11437] syzkaller0: entered promiscuous mode [ 447.179861][T11437] syzkaller0: entered allmulticast mode [ 447.186135][T11440] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1703'. [ 447.191952][ T5688] usb 5-1: Using ep0 maxpacket: 16 [ 447.236117][ T5688] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 447.260901][ T5688] usb 5-1: config 0 has no interface number 0 [ 447.275752][ T5688] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 447.309484][ T5688] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 447.368125][ T5688] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 447.412027][ T5688] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.453552][ T5688] usb 5-1: Product: syz [ 447.476550][ T9] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 447.498251][ T5688] usb 5-1: Manufacturer: syz [ 447.516348][ T5688] usb 5-1: SerialNumber: syz [ 447.585754][ T5688] usb 5-1: config 0 descriptor?? [ 447.603238][T11435] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 447.613981][T11435] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 447.665957][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 447.682312][ T5703] usb usb38-port1: unable to enumerate USB device [ 447.697202][ T9] usb 2-1: config 114 has an invalid interface number: 240 but max is 0 [ 447.739231][ T9] usb 2-1: config 114 has no interface number 0 [ 447.775109][ T9] usb 2-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 447.823787][ T9] usb 2-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 447.862453][T11447] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 447.879026][ T9] usb 2-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 447.884743][T11447] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 447.924745][ T9] usb 2-1: config 114 interface 240 has no altsetting 0 [ 447.955914][ T5688] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 447.983779][ T9] usb 2-1: string descriptor 0 read error: -22 [ 447.994668][ T9] usb 2-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38 [ 448.013478][ T5688] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -32 [ 448.024751][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.035953][ T5688] asix 5-1:0.251: probe with driver asix failed with error -5 [ 448.063618][T11440] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 448.073296][T11440] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 448.091362][ T9] ir_usb 2-1:114.240: IR Dongle converter detected [ 448.230918][ T5722] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 448.322466][ T9] usb 2-1: IR Dongle converter now attached to ttyUSB0 [ 448.431412][ T5722] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 448.447230][ T5722] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 448.468670][ T5722] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 448.499862][ T5722] usb 3-1: config 0 interface 0 has no altsetting 0 [ 448.513347][ T5722] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 448.530273][ T5722] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 448.552936][ T5722] usb 3-1: config 0 interface 0 has no altsetting 0 [ 448.575635][ T5722] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 448.590483][ T5688] usb 2-1: USB disconnect, device number 68 [ 448.608401][ T5722] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 448.633667][ T5688] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 448.636535][ T5722] usb 3-1: config 0 interface 0 has no altsetting 0 [ 448.672373][ T5688] ir_usb 2-1:114.240: device disconnected [ 448.681893][ T5722] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 448.700297][ T5722] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 448.726995][ T5722] usb 3-1: config 0 interface 0 has no altsetting 0 [ 448.736176][ T5722] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 448.759559][ T5722] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 448.781241][ T5722] usb 3-1: config 0 interface 0 has no altsetting 0 [ 448.793459][ T5722] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 448.812304][ T5722] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 448.836188][ T5722] usb 3-1: config 0 interface 0 has no altsetting 0 [ 448.845194][ T5722] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 448.861972][ T5722] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 448.873740][ T5722] usb 3-1: config 0 interface 0 has no altsetting 0 [ 448.883906][ T5722] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 448.910831][ T5722] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 448.924702][ T5703] usb 5-1: USB disconnect, device number 68 [ 448.945442][ T5722] usb 3-1: config 0 interface 0 has no altsetting 0 [ 448.958921][ T5722] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 448.972881][ T5722] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 448.986316][ T5722] usb 3-1: Product: syz [ 448.991618][ T5722] usb 3-1: Manufacturer: syz [ 448.996722][ T5722] usb 3-1: SerialNumber: syz [ 449.011950][T11468] netlink: 'syz.4.1709': attribute type 1 has an invalid length. [ 449.024370][ T5722] usb 3-1: config 0 descriptor?? [ 449.047008][ T5722] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 449.221158][T11468] 8021q: adding VLAN 0 to HW filter on device bond8 [ 449.646299][T11473] bond8: (slave veth9): Enslaving as an active interface with a down link [ 449.672890][T11486] veth0_virt_wifi: entered promiscuous mode [ 449.707872][T11486] bond6: (slave veth0_virt_wifi): Releasing active interface [ 449.735332][T11494] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1710'. [ 449.753443][T11486] bond6: (slave veth7): making interface the new active one [ 449.800970][T11486] bond8: (slave veth0_virt_wifi): making interface the new active one [ 449.829685][T11486] bond8: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 450.033706][T11500] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1712'. [ 450.046328][T11500] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1712'. [ 450.430272][ T10] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 450.603691][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 450.629703][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 450.654962][ T10] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 450.687205][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.708376][T11511] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1716'. [ 450.715064][ T10] usb 5-1: config 0 descriptor?? [ 450.961267][T11516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.013927][ C1] usb 3-1: yurex_control_callback - control failed: -2 [ 451.032452][T11516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.095206][T11516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.128993][ T5688] usb 3-1: USB disconnect, device number 76 [ 451.144724][T11516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.204526][ T5688] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 451.273821][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 451.295252][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 451.336367][T11521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.408859][ T10] usb 5-1: USB disconnect, device number 69 [ 451.420706][T11521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.939628][T11516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.995656][T11516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.390509][ T5722] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 452.570619][ T5722] usb 5-1: Using ep0 maxpacket: 32 [ 452.598382][ T5722] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 452.664922][ T5722] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 452.700296][ T5722] usb 5-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 452.721681][ T5722] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.749168][ T5722] usb 5-1: config 0 descriptor?? [ 453.152516][ T5722] usbhid 5-1:0.0: can't add hid device: -71 [ 453.181581][ T5722] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 453.257348][ T5722] usb 5-1: USB disconnect, device number 70 [ 453.483608][T11540] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 454.410104][ T5688] hid_parser_main: 7 callbacks suppressed [ 454.439542][ T5688] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 454.503005][ T5688] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 454.777559][T11565] netlink: 'syz.1.1733': attribute type 16 has an invalid length. [ 454.803404][T11565] netlink: 'syz.1.1733': attribute type 17 has an invalid length. [ 454.945379][T11565] syz_tun: left promiscuous mode [ 454.996239][T11565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 455.023764][T11565] 8021q: adding VLAN 0 to HW filter on device team0 [ 455.076453][T11565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 455.446545][T11565] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 455.491928][T11565] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 455.532800][T11565] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 455.532865][T11565] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 455.572364][T11565] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 455.934473][T11577] netlink: 'syz.1.1737': attribute type 1 has an invalid length. [ 456.316985][T11577] 8021q: adding VLAN 0 to HW filter on device bond6 [ 456.523645][T11587] netlink: 'syz.5.1739': attribute type 6 has an invalid length. [ 456.598747][T11591] netlink: 'syz.4.1740': attribute type 10 has an invalid length. [ 456.646078][T11579] bond6: (slave veth5): Enslaving as an active interface with a down link [ 456.651726][T11593] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1740'. [ 456.684205][T11580] veth0_virt_wifi: entered promiscuous mode [ 456.768609][T11580] bond6: (slave veth0_virt_wifi): making interface the new active one [ 456.810820][T11580] bond6: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 456.863359][T11591] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 456.892658][T11593] bridge_slave_1: left allmulticast mode [ 456.898940][T11593] bridge_slave_1: left promiscuous mode [ 456.919835][T11593] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.951239][T11593] bridge_slave_0: left allmulticast mode [ 456.958637][T11593] bridge_slave_0: left promiscuous mode [ 456.969565][T11593] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.055369][T11593] bond0: (slave bridge0): Releasing backup interface [ 457.210061][T11597] ip6gre2: entered promiscuous mode [ 457.221126][T11597] ip6gre2: entered allmulticast mode [ 457.548906][T11616] fuse: Bad value for 'fd' [ 457.600762][T11614] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 458.620831][ T30] audit: type=1326 audit(1778240135.495:3368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11627 comm="syz.1.1751" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0e9f59cdd9 code=0x0 [ 458.686800][T11629] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1751'. [ 458.698133][T11629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1751'. [ 458.726662][T11629] batadv1: entered promiscuous mode [ 458.734298][T11629] batadv1: entered allmulticast mode [ 458.743991][T11629] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 459.780373][ T10] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 459.952727][ T10] usb 2-1: config 0 has an invalid interface number: 49 but max is 0 [ 459.972471][ T10] usb 2-1: config 0 has no interface number 0 [ 459.985996][ T10] usb 2-1: too many endpoints for config 0 interface 49 altsetting 56: 52, using maximum allowed: 30 [ 460.007598][ T10] usb 2-1: config 0 interface 49 altsetting 56 has 0 endpoint descriptors, different from the interface descriptor's value: 52 [ 460.038350][ T10] usb 2-1: config 0 interface 49 has no altsetting 0 [ 460.050016][ T10] usb 2-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 460.065479][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.074318][ T10] usb 2-1: Product: syz [ 460.079035][ T10] usb 2-1: Manufacturer: syz [ 460.084560][ T10] usb 2-1: SerialNumber: syz [ 460.096597][ T10] usb 2-1: config 0 descriptor?? [ 461.066470][T10756] veth0_virt_wifi: left promiscuous mode [ 461.117187][T11656] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.1759'. [ 461.411830][T11666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.429483][T11666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.945411][T11683] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1769'. [ 462.115116][T11687] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1770'. [ 462.144102][T11688] dlm: non-version read from control device 0 [ 462.590477][ T10] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 462.602046][ T10] sonixb 2-1:0.49: Error reading register 00: -71 [ 462.623094][ T10] usb 2-1: USB disconnect, device number 69 [ 463.111218][T11703] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1777'. [ 463.122219][T11703] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1777'. [ 463.799979][T11714] trusted_key: encrypted_key: insufficient parameters specified [ 464.047456][T11720] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1783'. [ 464.311767][ T5710] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 464.485501][ T5710] usb 3-1: Using ep0 maxpacket: 8 [ 464.506470][ T5710] usb 3-1: config 129 has an invalid interface number: 164 but max is 0 [ 464.535424][ T5710] usb 3-1: config 129 has no interface number 0 [ 464.553736][ T5710] usb 3-1: config 129 interface 164 has no altsetting 0 [ 464.581674][ T5710] usb 3-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=8b.16 [ 464.608621][ T5710] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.643040][ T5710] usb 3-1: Product: syz [ 464.664000][ T5710] usb 3-1: Manufacturer: syz [ 464.682949][ T5710] usb 3-1: SerialNumber: syz [ 464.937660][ T5710] ums_eneub6250 3-1:129.164: USB Mass Storage device detected [ 465.057181][ T5710] usb 3-1: USB disconnect, device number 77 [ 465.406891][T11735] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1787'. [ 465.502239][ T1102] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 465.542082][ T1102] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 465.578189][ T1102] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 465.611021][T11740] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1788'. [ 465.623290][ T1102] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 465.721274][T11743] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1789'. [ 466.141182][T11749] bond9: option arp_interval: invalid value (18446744073709547520) [ 466.182697][T11749] bond9: option arp_interval: allowed values 0 - 2147483647 [ 466.226095][T11749] bond9 (unregistering): Released all slaves [ 466.378469][T11766] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 466.410004][T11767] netlink: 9 bytes leftover after parsing attributes in process `syz.5.1796'. [ 466.465136][T11767] netlink: 9 bytes leftover after parsing attributes in process `syz.5.1796'. [ 466.670254][ T5710] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 466.847026][ T5710] usb 2-1: Using ep0 maxpacket: 16 [ 466.874678][ T5710] usb 2-1: descriptor type invalid, skip [ 466.883864][ T5710] usb 2-1: descriptor type invalid, skip [ 466.898276][ T5710] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 7 [ 466.939605][ T5710] usb 2-1: New USB device found, idVendor=1235, idProduct=8004, bcdDevice= 0.40 [ 466.958496][ T5710] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.991785][ T5710] usb 2-1: Product: syz [ 466.996400][ T5710] usb 2-1: Manufacturer: syz [ 467.003878][ T5710] usb 2-1: SerialNumber: syz [ 467.131523][T11772] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 467.149899][T11772] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 467.618113][T11772] batman_adv: batadv0: Interface deactivated: gretap1 [ 467.699426][ T1102] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.720624][ T1102] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.767059][ T1102] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.794430][ T1102] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.642634][ T5703] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 468.790782][ T5703] usb 5-1: device descriptor read/64, error -71 [ 468.871044][ T5360] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 469.040553][ T5703] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 469.049719][ T5360] usb 4-1: Using ep0 maxpacket: 16 [ 469.072819][ T5360] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 469.103796][ T5360] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 469.122158][ T5360] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.140554][ T5360] usb 4-1: Product: syz [ 469.148334][ T5360] usb 4-1: Manufacturer: syz [ 469.166837][ T5360] usb 4-1: SerialNumber: syz [ 469.183414][ T5360] usb 4-1: config 0 descriptor?? [ 469.220513][ T5703] usb 5-1: device descriptor read/64, error -71 [ 469.239592][ T5360] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 469.297782][ T5360] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 469.361020][ T5703] usb usb5-port1: attempt power cycle [ 469.477764][T11798] netlink: 'syz.2.1805': attribute type 1 has an invalid length. [ 469.571394][T11798] 8021q: adding VLAN 0 to HW filter on device bond6 [ 469.587630][T11800] bond5: (slave veth0_virt_wifi): Releasing active interface [ 469.691705][ T5710] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 469.710294][ T5703] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 469.733166][ T5710] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 469.793248][ T5703] usb 5-1: device descriptor read/8, error -71 [ 469.823016][ T5360] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 469.941988][ T5710] usb 2-1: USB disconnect, device number 70 [ 470.113876][ T5703] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 470.196865][ T5696] udevd[5696]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 470.218652][T11808] FAULT_INJECTION: forcing a failure. [ 470.218652][T11808] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 470.236287][ T5703] usb 5-1: device descriptor read/8, error -71 [ 470.247196][T11808] CPU: 1 UID: 0 PID: 11808 Comm: syz.2.1810 Tainted: G L syzkaller #0 PREEMPT(full) [ 470.247233][T11808] Tainted: [L]=SOFTLOCKUP [ 470.247242][T11808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 470.247256][T11808] Call Trace: [ 470.247281][T11808] [ 470.247291][T11808] dump_stack_lvl+0xe8/0x150 [ 470.247323][T11808] should_fail_ex+0x412/0x560 [ 470.247356][T11808] _copy_from_user+0x2d/0xb0 [ 470.247388][T11808] smc_setsockopt+0x3c5/0xac0 [ 470.247423][T11808] ? __pfx_smc_setsockopt+0x10/0x10 [ 470.247450][T11808] ? aa_sock_opt_perm+0xff/0x1a0 [ 470.247482][T11808] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 470.247510][T11808] ? __pfx_smc_setsockopt+0x10/0x10 [ 470.247540][T11808] do_sock_setsockopt+0x17c/0x1b0 [ 470.247576][T11808] __x64_sys_setsockopt+0x13d/0x1b0 [ 470.247607][T11808] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.247630][T11808] do_syscall_64+0x15f/0xf80 [ 470.247658][T11808] ? trace_irq_disable+0x3b/0x140 [ 470.247689][T11808] ? clear_bhb_loop+0x40/0x90 [ 470.247715][T11808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.247738][T11808] RIP: 0033:0x7fe59a99cdd9 [ 470.247759][T11808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 470.247778][T11808] RSP: 002b:00007fe59b84f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 470.247812][T11808] RAX: ffffffffffffffda RBX: 00007fe59ac15fa0 RCX: 00007fe59a99cdd9 [ 470.247828][T11808] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000003 [ 470.247842][T11808] RBP: 00007fe59b84f090 R08: 000000000000011e R09: 0000000000000000 [ 470.247856][T11808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 470.247868][T11808] R13: 00007fe59ac16038 R14: 00007fe59ac15fa0 R15: 00007fe59ad3fa48 [ 470.247900][T11808] [ 470.677844][ T5360] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 470.700093][ T5360] em28xx 4-1:0.0: board has no eeprom [ 470.761155][ T5703] usb usb5-port1: unable to enumerate USB device [ 471.589957][T10756] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 471.613580][T10756] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.865155][T11796] em28xx 4-1:0.0: writing to i2c device at 0xe failed (error=-5) [ 471.891749][T10756] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 471.904704][T10756] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.933603][ T5360] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 471.934584][T11841] FAULT_INJECTION: forcing a failure. [ 471.934584][T11841] name failslab, interval 1, probability 0, space 0, times 0 [ 471.947329][ T5360] em28xx 4-1:0.0: dvb set to bulk mode. [ 471.959609][T11841] CPU: 0 UID: 0 PID: 11841 Comm: syz.5.1820 Tainted: G L syzkaller #0 PREEMPT(full) [ 471.959645][T11841] Tainted: [L]=SOFTLOCKUP [ 471.959653][T11841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 471.959670][T11841] Call Trace: [ 471.959680][T11841] [ 471.959689][T11841] dump_stack_lvl+0xe8/0x150 [ 471.959718][T11841] should_fail_ex+0x412/0x560 [ 471.959749][T11841] should_failslab+0xa8/0x100 [ 471.959800][T11841] ? ep_insert+0x283/0x1a40 [ 471.959826][T11841] kmem_cache_alloc_noprof+0x87/0x650 [ 471.959853][T11841] ? percpu_counter_add_batch+0xea/0x1d0 [ 471.959888][T11841] ep_insert+0x283/0x1a40 [ 471.959924][T11841] ? irqentry_exit+0x218/0x730 [ 471.959952][T11841] ? lockdep_hardirqs_on+0x7a/0x110 [ 471.959979][T11841] ? __pfx_ep_insert+0x10/0x10 [ 471.960004][T11841] ? __pfx___mutex_lock+0x10/0x10 [ 471.960044][T11841] ? do_epoll_ctl+0x17a/0xe80 [ 471.960075][T11841] do_epoll_ctl+0x7f4/0xe80 [ 471.960109][T11841] __x64_sys_epoll_ctl+0x165/0x1b0 [ 471.960139][T11841] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 471.960163][T11841] ? __task_pid_nr_ns+0x28/0x470 [ 471.960197][T11841] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.960219][T11841] do_syscall_64+0x15f/0xf80 [ 471.960248][T11841] ? clear_bhb_loop+0x40/0x90 [ 471.960272][T11841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.960293][T11841] RIP: 0033:0x7f5d69f9cdd9 [ 471.960313][T11841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 471.960331][T11841] RSP: 002b:00007f5d6aef6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 471.960354][T11841] RAX: ffffffffffffffda RBX: 00007f5d6a215fa0 RCX: 00007f5d69f9cdd9 [ 471.960369][T11841] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 471.960382][T11841] RBP: 00007f5d6aef6090 R08: 0000000000000000 R09: 0000000000000000 [ 471.960395][T11841] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 471.960408][T11841] R13: 00007f5d6a216038 R14: 00007f5d6a215fa0 R15: 00007f5d6a33fa48 [ 471.960440][T11841] [ 472.186469][ T5722] em28xx 4-1:0.0: Binding DVB extension [ 472.323316][T11846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.333937][ T5360] usb 4-1: USB disconnect, device number 69 [ 472.359189][ T5360] em28xx 4-1:0.0: Disconnecting em28xx [ 472.418709][ T5722] em28xx 4-1:0.0: Registering input extension [ 472.425886][T11846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.442287][T10756] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 472.453226][ T5360] em28xx 4-1:0.0: Closing input extension [ 472.461307][T10756] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.509187][T11846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.561863][T11846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.573032][ T5360] em28xx 4-1:0.0: Freeing device [ 472.744473][T10756] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 472.755734][T10756] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.840887][ T5725] usb 2-1: new low-speed USB device number 71 using dummy_hcd [ 472.848309][T11855] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 473.011814][ T5725] usb 2-1: Invalid ep0 maxpacket: 16 [ 473.150403][ T5725] usb 2-1: new low-speed USB device number 72 using dummy_hcd [ 473.239729][T11866] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 473.310588][ T5725] usb 2-1: Invalid ep0 maxpacket: 16 [ 473.330999][ T5725] usb usb2-port1: attempt power cycle [ 473.451122][T11872] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 473.711671][ T5725] usb 2-1: new low-speed USB device number 73 using dummy_hcd [ 473.741243][ T5725] usb 2-1: Invalid ep0 maxpacket: 16 [ 473.900817][ T5725] usb 2-1: new low-speed USB device number 74 using dummy_hcd [ 473.953868][ T5725] usb 2-1: Invalid ep0 maxpacket: 16 [ 473.980287][ T5725] usb usb2-port1: unable to enumerate USB device [ 474.164980][T10756] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface [ 474.694610][T10756] gretap0 (unregistering): left promiscuous mode [ 475.091880][T11891] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1830'. [ 475.365609][T10756] bond0 (unregistering): left promiscuous mode [ 475.386009][T10756] bond_slave_0: left promiscuous mode [ 475.398304][T10756] bond_slave_1: left promiscuous mode [ 475.447461][T10756] dummy0: left promiscuous mode [ 475.503804][T10756] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 475.561333][T10756] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 475.610411][T10756] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 475.712524][T10756] bond0 (unregistering): Released all slaves [ 475.766733][T10756] bond1 (unregistering): Released all slaves [ 475.826467][T10756] bond2 (unregistering): Released all slaves [ 475.876473][T10756] bond3 (unregistering): (slave veth3): Releasing active interface [ 475.897596][T10756] bond3 (unregistering): (slave veth0_virt_wifi): Releasing active interface [ 475.928341][T10756] bond3 (unregistering): Released all slaves [ 476.095712][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1 [ 476.325652][T10756] tipc: Left network mode [ 476.631937][T11908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.678822][T11904] xt_connbytes: Forcing CT accounting to be enabled [ 476.723134][T11908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.748046][T11904] set match dimension is over the limit! [ 476.940348][ T5360] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 477.160603][ T5360] usb 2-1: Using ep0 maxpacket: 32 [ 477.186885][ T5360] usb 2-1: config 1 interface 0 altsetting 208 endpoint 0x81 has an invalid bInterval 166, changing to 11 [ 477.239618][ T5360] usb 2-1: config 1 interface 0 has no altsetting 0 [ 477.279232][ T5360] usb 2-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.40 [ 477.327051][ T5360] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.357881][ T5360] usb 2-1: Product: 䠛㶦ᐹᨭ⩧ᯅ⩣﹐۬큁뵸菄楍漜邳㤖끍ૐ⋑‬١蠈㓍횭⛄삭ᯣ鋾꺨烉込䴓聸癡晞綆酗딙鸛콌諽㍩㾉ꪲ玸䤨鿤㎤횁귃喱Ὦ秎梹ꊯ䏉ྙꙵ [ 477.606079][T11919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.635416][T11919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.825880][ T5360] usbhid 2-1:1.0: can't add hid device: -71 [ 477.832916][T10756] team0: left promiscuous mode [ 477.856557][T10756] team_slave_0: left promiscuous mode [ 477.866284][ T5360] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 477.887994][T10756] team_slave_1: left promiscuous mode [ 477.924516][ T5360] usb 2-1: USB disconnect, device number 75 [ 478.040371][T10756] hsr_slave_0: left promiscuous mode [ 478.074899][T10756] hsr_slave_1: left promiscuous mode [ 478.115477][T10756] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 478.153615][T10756] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 478.183739][T10756] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 478.205679][T10756] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 478.241062][T10756] veth1_macvtap: left promiscuous mode [ 478.269310][T10756] veth0_macvtap: left promiscuous mode [ 478.325270][T10756] veth1_vlan: left promiscuous mode [ 478.417358][T10756] veth0_vlan: left promiscuous mode [ 478.439426][T11928] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1837'. [ 478.635452][T11932] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1837'. [ 479.436163][T11943] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 479.807520][T10756] team0 (unregistering): Port device team_slave_1 removed [ 479.848581][T10756] team0 (unregistering): Port device team_slave_0 removed [ 480.308151][ T5289] 8021q: adding VLAN 0 to HW filter on device eth2 [ 480.867662][T11955] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1843'. [ 480.928674][T11955] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1843'. [ 481.468892][ T5710] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 481.692383][ T5710] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 481.771883][ T5710] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.785011][T10756] IPVS: stop unused estimator thread 0... [ 481.814528][ T5710] usb 2-1: Product: syz [ 481.833377][ T5710] usb 2-1: Manufacturer: syz [ 481.857567][ T5710] usb 2-1: SerialNumber: syz [ 481.921819][ T5710] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 481.981681][ T9] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 482.098063][T11987] loop5: detected capacity change from 0 to 7 [ 482.139225][T11987] Dev loop5: unable to read RDB block 7 [ 482.184852][T11987] loop5: AHDI p1 [ 482.210504][T11987] loop5: partition table partially beyond EOD, truncated [ 482.416599][T11964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.453279][T11998] trusted_key: encrypted_key: insufficient parameters specified [ 482.477801][T11964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.997531][ T5710] usb 2-1: USB disconnect, device number 76 [ 483.142997][ T9] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 483.180829][ T9] ath9k_htc: Failed to initialize the device [ 483.206906][ T5710] usb 2-1: ath9k_htc: USB layer deinitialized [ 483.235736][T12011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.272506][T12011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.397677][ T5289] 8021q: adding VLAN 0 to HW filter on device eth3 [ 485.619866][ T5710] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 485.688520][ T5710] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 485.868424][T12061] fuse: Bad value for 'fd' [ 486.169375][ T5289] 8021q: adding VLAN 0 to HW filter on device eth4 [ 486.684557][T12082] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 487.352471][ T5722] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 487.511319][ T5722] usb 2-1: device descriptor read/64, error -71 [ 487.771192][ T5722] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 487.900557][T12106] netlink: 9 bytes leftover after parsing attributes in process `syz.5.1874'. [ 487.983884][T12106] netlink: 9 bytes leftover after parsing attributes in process `syz.5.1874'. [ 488.706787][T12120] trusted_key: encrypted_key: insufficient parameters specified [ 489.374810][T12134] loop8: detected capacity change from 0 to 128 [ 489.430229][ T30] audit: type=1800 audit(1778240166.285:3369): pid=12131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1879" name="bus" dev="tmpfs" ino=1954 res=0 errno=0 [ 489.531458][T12136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 489.610639][ T5722] usb 2-1: device descriptor read/64, error -71 [ 489.619074][T12136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 489.741684][ T5722] usb usb2-port1: attempt power cycle [ 490.100471][ T5722] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 490.166347][ T5722] usb 2-1: Using ep0 maxpacket: 16 [ 490.176878][ T5722] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 490.200752][ T5722] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 490.213485][ T5722] usb 2-1: config 0 has no interface number 0 [ 490.224383][ T5722] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 490.243878][ T5722] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.258222][ T5722] usb 2-1: Product: syz [ 490.263938][ T5722] usb 2-1: Manufacturer: syz [ 490.268908][ T5722] usb 2-1: SerialNumber: syz [ 490.290591][ T5722] usb 2-1: config 0 descriptor?? [ 490.319255][ T5722] uvcvideo 2-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 490.351107][ T5722] uvcvideo 2-1:0.105: No valid video chain found. [ 490.515523][ T5722] usb 2-1: USB disconnect, device number 79 [ 490.908160][T12153] fuse: Bad value for 'fd' [ 490.969521][T12152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 490.998527][T12152] 8021q: adding VLAN 0 to HW filter on device team0 [ 491.091964][T12152] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 491.449618][T12160] dlm: no locking on control device [ 491.490726][T12152] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 491.574586][T12152] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 491.591421][ T5703] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 491.650587][ T5360] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 491.674425][T12152] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 491.707370][T12152] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 491.726319][T12152] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 491.809746][ T5703] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 491.866032][ T5703] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 491.892404][ T5703] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 491.923253][ T5703] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 491.989040][ T5703] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.095687][ T5703] usb 4-1: config 0 descriptor?? [ 492.571008][ T5703] plantronics 0003:047F:FFFF.001F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 492.907430][ T5710] usb 4-1: USB disconnect, device number 70 [ 492.927313][T12159] usb 4-1: string descriptor 0 read error: -19 [ 492.977034][T12162] fido_id[12162]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 493.742058][T12174] netlink: 'syz.3.1891': attribute type 5 has an invalid length. [ 493.778614][T12174] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1891'. [ 494.348067][T12178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.532435][T12178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.831413][ T5710] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 494.990245][ T5710] usb 5-1: Using ep0 maxpacket: 16 [ 495.004609][ T5710] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 495.035216][ T5710] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 495.109761][ T5710] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.132048][T12215] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1898'. [ 495.146257][ T5710] usb 5-1: Product: syz [ 495.163603][ T5710] usb 5-1: Manufacturer: syz [ 495.174491][ T5710] usb 5-1: SerialNumber: syz [ 495.208847][T12219] FAULT_INJECTION: forcing a failure. [ 495.208847][T12219] name failslab, interval 1, probability 0, space 0, times 0 [ 495.245245][T12220] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1898'. [ 495.259321][ T5710] usb 5-1: config 0 descriptor?? [ 495.264992][T12219] CPU: 1 UID: 0 PID: 12219 Comm: syz.3.1900 Tainted: G L syzkaller #0 PREEMPT(full) [ 495.265029][T12219] Tainted: [L]=SOFTLOCKUP [ 495.265038][T12219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 495.265052][T12219] Call Trace: [ 495.265066][T12219] [ 495.265076][T12219] dump_stack_lvl+0xe8/0x150 [ 495.265109][T12219] should_fail_ex+0x412/0x560 [ 495.265145][T12219] should_failslab+0xa8/0x100 [ 495.265179][T12219] __kmalloc_cache_noprof+0x88/0x660 [ 495.265208][T12219] ? __sctp_v6_cmp_addr+0x1dc/0x510 [ 495.265237][T12219] ? sctp_v6_cmp_addr+0x15/0xd0 [ 495.265266][T12219] ? sctp_add_bind_addr+0x8c/0x370 [ 495.265302][T12219] sctp_add_bind_addr+0x8c/0x370 [ 495.265337][T12219] sctp_copy_local_addr_list+0x314/0x4f0 [ 495.265372][T12219] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 495.265400][T12219] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 495.265434][T12219] ? sctp_v4_is_any+0x35/0x60 [ 495.265464][T12219] ? sctp_copy_one_addr+0x93/0x360 [ 495.265498][T12219] sctp_bind_addr_copy+0xb3/0x3c0 [ 495.265530][T12219] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 495.265560][T12219] sctp_connect_new_asoc+0x2ff/0x6b0 [ 495.265589][T12219] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 495.265614][T12219] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 495.265639][T12219] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 495.265662][T12219] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 495.265701][T12219] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 495.265733][T12219] ? security_sctp_bind_connect+0x7e/0x2c0 [ 495.265762][T12219] sctp_sendmsg+0x1528/0x2c10 [ 495.265809][T12219] ? __pfx_sctp_sendmsg+0x10/0x10 [ 495.265836][T12219] ? aa_sk_perm+0x6d5/0x900 [ 495.265862][T12219] ? __might_fault+0xaf/0x130 [ 495.265897][T12219] ? __pfx_aa_sk_perm+0x10/0x10 [ 495.265928][T12219] ? sock_rps_record_flow+0x19/0x350 [ 495.265961][T12219] ? __pfx_inet_sendmsg+0x10/0x10 [ 495.265984][T12219] ? inet_sendmsg+0x2f4/0x370 [ 495.266004][T12219] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 495.266032][T12219] ? __pfx_inet_sendmsg+0x10/0x10 [ 495.266055][T12219] __sys_sendto+0x5de/0x710 [ 495.266087][T12219] ? __pfx___sys_sendto+0x10/0x10 [ 495.266111][T12219] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 495.266155][T12219] ? __fget_files+0x3a0/0x420 [ 495.266195][T12219] ? ksys_write+0x242/0x270 [ 495.266228][T12219] ? __pfx_ksys_write+0x10/0x10 [ 495.266264][T12219] __x64_sys_sendto+0xde/0x100 [ 495.266291][T12219] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.266315][T12219] do_syscall_64+0x15f/0xf80 [ 495.266345][T12219] ? clear_bhb_loop+0x40/0x90 [ 495.266372][T12219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.266391][T12219] RIP: 0033:0x7f7db619cdd9 [ 495.266410][T12219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 495.266426][T12219] RSP: 002b:00007f7db706a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 495.266447][T12219] RAX: ffffffffffffffda RBX: 00007f7db6415fa0 RCX: 00007f7db619cdd9 [ 495.266460][T12219] RDX: 0000000000000001 RSI: 00002000000004c0 RDI: 0000000000000003 [ 495.266471][T12219] RBP: 00007f7db706a090 R08: 0000200000000240 R09: 000000000000001c [ 495.266483][T12219] R10: 0000000000044001 R11: 0000000000000246 R12: 0000000000000002 [ 495.266494][T12219] R13: 00007f7db6416038 R14: 00007f7db6415fa0 R15: 00007f7db653fa48 [ 495.266522][T12219] [ 495.282633][ T5710] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 495.784873][T12228] openvswitch: netlink: Duplicate or invalid key (type 0). [ 495.797109][T12228] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 495.858104][ T5710] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 496.002788][T12232] netlink: 'syz.1.1904': attribute type 10 has an invalid length. [ 496.094494][ T5710] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 496.526821][ T5710] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 496.544638][ T5710] em28xx 5-1:0.0: board has no eeprom [ 497.092341][T12249] netlink: 'syz.3.1907': attribute type 6 has an invalid length. [ 497.249231][T12249] netlink: 'syz.3.1907': attribute type 7 has an invalid length. [ 497.323104][T12249] netlink: 'syz.3.1907': attribute type 8 has an invalid length. [ 497.624037][T12201] em28xx 5-1:0.0: writing to i2c device at 0xe failed (error=-5) [ 497.680415][ T5710] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 497.725769][ T5710] em28xx 5-1:0.0: dvb set to bulk mode. [ 497.773654][ T10] em28xx 5-1:0.0: Binding DVB extension [ 497.826376][ T5710] usb 5-1: USB disconnect, device number 75 [ 497.887204][ T5710] em28xx 5-1:0.0: Disconnecting em28xx [ 498.018200][T12274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.065373][T12274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.094079][ T10] em28xx 5-1:0.0: Registering input extension [ 498.118174][T12274] netlink: 'syz.5.1910': attribute type 10 has an invalid length. [ 498.146594][ T5710] em28xx 5-1:0.0: Closing input extension [ 498.265748][T12274] 8021q: adding VLAN 0 to HW filter on device team0 [ 498.415155][T12274] bond0: (slave team0): Enslaving as an active interface with an up link [ 499.181427][ T5710] em28xx 5-1:0.0: Freeing device [ 499.399833][T12302] netlink: 'syz.1.1913': attribute type 61 has an invalid length. [ 499.500989][ T5710] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 499.680841][ T5710] usb 5-1: Using ep0 maxpacket: 32 [ 499.719327][ T5710] usb 5-1: config 239 has an invalid descriptor of length 0, skipping remainder of the config [ 499.767641][ T5710] usb 5-1: config 239 has 1 interface, different from the descriptor's value: 3 [ 499.819786][ T5710] usb 5-1: New USB device found, idVendor=0582, idProduct=003b, bcdDevice= 0.40 [ 499.855273][ T5710] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.885052][ T5710] usb 5-1: Product: syz [ 499.905011][ T5710] usb 5-1: Manufacturer: syz [ 499.919679][ T5710] usb 5-1: SerialNumber: syz [ 500.051195][T12310] syzkaller0: entered promiscuous mode [ 500.082231][T12310] syzkaller0: entered allmulticast mode [ 500.136799][T12317] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1918'. [ 500.551688][ T5710] usb 5-1: unit 2 not found! [ 500.827951][ T5710] usb 5-1: USB disconnect, device number 76 [ 501.096195][ T5696] udevd[5696]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:239.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 501.972728][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.983820][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.511477][ T5710] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 502.744812][ T5710] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 502.769046][ T5710] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 502.801197][ T5710] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 502.846230][ T5710] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 502.894411][ T5710] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.935873][ T5710] usb 4-1: config 0 descriptor?? [ 503.310387][ T5360] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 503.374354][ T5710] plantronics 0003:047F:FFFF.0020: reserved main item tag 0xd [ 503.458751][ T5710] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 503.497039][ T5360] usb 3-1: device descriptor read/64, error -71 [ 503.625062][ T10] usb 4-1: USB disconnect, device number 71 [ 503.780266][ T5360] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 503.814527][T12383] fido_id[12383]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 503.830282][ T5710] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 503.917180][T12389] netlink: 'syz.5.1926': attribute type 1 has an invalid length. [ 504.020417][ T5710] usb 5-1: Using ep0 maxpacket: 8 [ 504.042116][ T5710] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 504.080271][ T5710] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 504.114286][ T5710] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.171974][ T5710] usb 5-1: config 0 descriptor?? [ 504.393729][T12389] 8021q: adding VLAN 0 to HW filter on device bond2 [ 504.413184][ T5710] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 504.491097][T12391] bond2: (slave veth0_virt_wifi): making interface the new active one [ 504.517948][T12391] bond2: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 504.627818][ T10] usb 5-1: USB disconnect, device number 77 [ 504.961161][T12401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.988601][T12401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.346857][ T5630] Bluetooth: hci1: unexpected event for opcode 0x040d [ 505.613384][ T5360] usb 3-1: device descriptor read/64, error -71 [ 505.735162][ T5360] usb usb3-port1: attempt power cycle [ 506.100611][ T5360] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 506.142397][ T5360] usb 3-1: Using ep0 maxpacket: 8 [ 506.166452][ T5360] usb 3-1: config 0 has no interfaces? [ 506.185202][ T5360] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 506.228890][ T5360] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.276023][T12443] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1936'. [ 506.298134][ T5360] usb 3-1: config 0 descriptor?? [ 506.482524][T12450] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1936'. [ 507.150512][ T5710] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 507.183581][ T995] usb 2-1: new full-speed USB device number 81 using dummy_hcd [ 507.301984][ T5710] usb 4-1: device descriptor read/64, error -71 [ 507.340518][ T995] usb 2-1: device descriptor read/64, error -71 [ 507.443336][ T10] usb 3-1: USB disconnect, device number 80 [ 507.560262][ T5710] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 507.610732][ T995] usb 2-1: new full-speed USB device number 82 using dummy_hcd [ 507.670463][T12485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1943'. [ 507.720573][ T5710] usb 4-1: device descriptor read/64, error -71 [ 507.780320][ T995] usb 2-1: device descriptor read/64, error -71 [ 507.840946][ T5710] usb usb4-port1: attempt power cycle [ 507.896288][T12488] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1944'. [ 507.910774][ T995] usb usb2-port1: attempt power cycle [ 508.190235][ T5710] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 508.222009][ T5710] usb 4-1: device descriptor read/8, error -71 [ 508.261121][ T995] usb 2-1: new full-speed USB device number 83 using dummy_hcd [ 508.303780][T12492] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1946'. [ 508.315507][ T995] usb 2-1: device descriptor read/8, error -71 [ 508.470325][ T5710] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 508.498850][T12501] netlink: 'syz.5.1950': attribute type 13 has an invalid length. [ 508.501121][ T5710] usb 4-1: device descriptor read/8, error -71 [ 508.513271][T12501] netlink: 'syz.5.1950': attribute type 17 has an invalid length. [ 508.563579][ T995] usb 2-1: new full-speed USB device number 84 using dummy_hcd [ 508.602243][ T995] usb 2-1: device descriptor read/8, error -71 [ 508.630623][ T5710] usb usb4-port1: unable to enumerate USB device [ 508.654695][T12506] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1949'. [ 508.715906][T12508] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1949'. [ 508.726190][ T995] usb usb2-port1: unable to enumerate USB device [ 508.734776][T12501] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 510.358274][T12540] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[5643] was attempted by "ci-upstream-kasan-gce/syz-executor exec"[12540] [ 510.432475][T12543] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1954'. [ 510.489793][T12543] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.499725][T12543] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.456169][T12566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.495168][T12566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.960441][ T5681] usb 4-1: new full-speed USB device number 76 using dummy_hcd [ 512.114763][ T5681] usb 4-1: device descriptor read/64, error -71 [ 512.380783][ T5681] usb 4-1: new full-speed USB device number 77 using dummy_hcd [ 512.530280][ T5681] usb 4-1: device descriptor read/64, error -71 [ 512.651329][ T5681] usb usb4-port1: attempt power cycle [ 512.690709][T12580] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 513.000433][ T5681] usb 4-1: new full-speed USB device number 78 using dummy_hcd [ 513.037778][T12583] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 513.044527][T12583] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 513.053660][ T5681] usb 4-1: device descriptor read/8, error -71 [ 513.076406][T12583] vhci_hcd vhci_hcd.0: Device attached [ 513.300677][ T5681] usb 4-1: new full-speed USB device number 79 using dummy_hcd [ 513.332092][ T5681] usb 4-1: device descriptor read/8, error -71 [ 513.340663][ T10] usb 38-1: SetAddress Request (10) to port 0 [ 513.363283][ T10] usb 38-1: new SuperSpeed USB device number 10 using vhci_hcd [ 513.465763][ T5681] usb usb4-port1: unable to enumerate USB device [ 513.750533][ T5681] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 513.830674][ T5710] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 513.912747][ T5681] usb 3-1: device descriptor read/64, error -71 [ 513.930858][T12606] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 513.994499][T12610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.011348][ T5710] usb 5-1: Using ep0 maxpacket: 16 [ 514.030246][ T5710] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 514.048291][T12610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.059086][ T5710] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 514.086799][ T5710] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 514.109102][ T5710] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.139804][ T5710] usb 5-1: config 0 descriptor?? [ 514.210552][ T5681] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 514.350409][ T5681] usb 3-1: device descriptor read/64, error -71 [ 514.470598][ T5681] usb usb3-port1: attempt power cycle [ 514.689121][T12613] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1977'. [ 514.820340][ T5681] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 514.863304][ T5681] usb 3-1: device descriptor read/8, error -71 [ 515.106261][T12622] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1979'. [ 515.125924][ T5681] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 515.263055][ T5681] usb 3-1: device descriptor read/8, error -71 [ 515.287467][T12584] vhci_hcd: connection reset by peer [ 515.324545][T12596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.339708][T10741] vhci_hcd vhci_hcd.2: stop threads [ 515.357154][T12624] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1979'. [ 515.372937][T12596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.397416][ T5681] usb usb3-port1: unable to enumerate USB device [ 515.437717][T10741] vhci_hcd vhci_hcd.2: release socket [ 515.470825][T10741] vhci_hcd vhci_hcd.2: disconnect device [ 515.885432][T12634] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 515.892207][T12634] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 515.924086][T12632] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 515.950525][T12634] vhci_hcd vhci_hcd.0: Device attached [ 516.210401][ T9] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 516.290340][ T5703] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 516.370378][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 516.386246][ T9] usb 3-1: config index 0 descriptor too short (expected 8192, got 45) [ 516.409701][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 516.444381][ T9] usb 3-1: config 0 has no interfaces? [ 516.445123][T12629] ================================================================== [ 516.459076][T12629] BUG: KASAN: slab-use-after-free in drm_gem_object_release_handle+0x4b/0x1e0 [ 516.460431][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 516.468525][T12629] Read of size 8 at addr ffff88807fbd8278 by task syz.5.1982/12629 [ 516.468560][T12629] [ 516.468578][T12629] CPU: 1 UID: 0 PID: 12629 Comm: syz.5.1982 Tainted: G L syzkaller #0 PREEMPT(full) [ 516.468608][T12629] Tainted: [L]=SOFTLOCKUP [ 516.468616][T12629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 516.468630][T12629] Call Trace: [ 516.468644][T12629] [ 516.468654][T12629] dump_stack_lvl+0xe8/0x150 [ 516.468682][T12629] print_address_description+0x55/0x1e0 [ 516.468705][T12629] ? drm_gem_object_release_handle+0x4b/0x1e0 [ 516.468733][T12629] print_report+0x58/0x70 [ 516.468751][T12629] kasan_report+0x117/0x150 [ 516.468781][T12629] ? drm_gem_object_release_handle+0x4b/0x1e0 [ 516.468812][T12629] drm_gem_object_release_handle+0x4b/0x1e0 [ 516.468842][T12629] idr_for_each+0x1c6/0x2a0 [ 516.468868][T12629] ? __pfx_drm_fb_release+0x10/0x10 [ 516.468894][T12629] ? __pfx_drm_gem_object_release_handle+0x10/0x10 [ 516.468923][T12629] ? __pfx_idr_for_each+0x10/0x10 [ 516.468954][T12629] drm_gem_release+0x28/0x40 [ 516.468972][T12629] drm_file_free+0x729/0xa00 [ 516.469000][T12629] drm_release+0x2de/0x3f0 [ 516.469023][T12629] ? __pfx_drm_release+0x10/0x10 [ 516.469044][T12629] __fput+0x44f/0xa60 [ 516.469071][T12629] task_work_run+0x1d9/0x270 [ 516.469100][T12629] ? __pfx_task_work_run+0x10/0x10 [ 516.469128][T12629] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.469149][T12629] exit_to_user_mode_loop+0xed/0x480 [ 516.469169][T12629] ? rcu_is_watching+0x15/0xb0 [ 516.469192][T12629] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.469212][T12629] do_syscall_64+0x33e/0xf80 [ 516.469239][T12629] ? clear_bhb_loop+0x40/0x90 [ 516.469261][T12629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.469281][T12629] RIP: 0033:0x7f5d69f9cdd9 [ 516.469301][T12629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 516.469319][T12629] RSP: 002b:00007f5d6a33fba8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 516.469351][T12629] RAX: 0000000000000000 RBX: 00007f5d6a217da0 RCX: 00007f5d69f9cdd9 [ 516.469366][T12629] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 516.469380][T12629] RBP: 00007f5d6a217da0 R08: 0000000000000006 R09: 0000000000000000 [ 516.469393][T12629] R10: 00007f5d6a217cb0 R11: 0000000000000246 R12: 000000000007e10e [ 516.469408][T12629] R13: 00007f5d6a21609c R14: 000000000007df3f R15: 00007f5d6a216090 [ 516.469430][T12629] [ 516.469437][T12629] [ 516.743222][T12629] Allocated by task 12632: [ 516.747657][T12629] kasan_save_track+0x3e/0x80 [ 516.752645][T12629] __kasan_kmalloc+0x93/0xb0 [ 516.757731][T12629] __kmalloc_cache_noprof+0x31c/0x660 [ 516.763954][T12629] __drm_gem_shmem_create+0xc4/0x2e0 [ 516.769699][T12629] drm_gem_shmem_dumb_create+0x72/0x120 [ 516.775474][T12629] drm_mode_create_dumb_ioctl+0x2bd/0x340 [ 516.781415][T12629] drm_ioctl_kernel+0x2df/0x3b0 [ 516.786767][T12629] drm_ioctl+0x6ba/0xb80 [ 516.791221][T12629] __se_sys_ioctl+0xfc/0x170 [ 516.796310][T12629] do_syscall_64+0x15f/0xf80 [ 516.801031][T12629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.807845][T12629] [ 516.810284][T12629] Freed by task 12635: [ 516.814812][T12629] kasan_save_track+0x3e/0x80 [ 516.819731][T12629] kasan_save_free_info+0x46/0x50 [ 516.825144][T12629] __kasan_slab_free+0x5c/0x80 [ 516.830162][T12629] kfree+0x1c5/0x640 [ 516.834214][T12629] drm_gem_object_release_handle+0xc2/0x1e0 [ 516.840427][T12629] drm_gem_handle_delete+0x7b/0xb0 [ 516.845692][T12629] drm_ioctl_kernel+0x2df/0x3b0 [ 516.850692][T12629] drm_ioctl+0x6ba/0xb80 [ 516.855045][T12629] __se_sys_ioctl+0xfc/0x170 [ 516.860040][T12629] do_syscall_64+0x15f/0xf80 [ 516.864777][T12629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.870968][T12629] [ 516.873392][T12629] The buggy address belongs to the object at ffff88807fbd8000 [ 516.873392][T12629] which belongs to the cache kmalloc-1k of size 1024 [ 516.887781][T12629] The buggy address is located 632 bytes inside of [ 516.887781][T12629] freed 1024-byte region [ffff88807fbd8000, ffff88807fbd8400) [ 516.903121][T12629] [ 516.905827][T12629] The buggy address belongs to the physical page: [ 516.912735][T12629] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807fbd9800 pfn:0x7fbd8 [ 516.923815][T12629] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 516.933236][T12629] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 516.942653][T12629] page_type: f5(slab) [ 516.946777][T12629] raw: 00fff00000000240 ffff88813fe1adc0 ffffea0000b5ee10 ffffea0001e05c10 [ 516.956285][T12629] raw: ffff88807fbd9800 000000080010000e 00000000f5000000 0000000000000000 [ 516.965423][T12629] head: 00fff00000000240 ffff88813fe1adc0 ffffea0000b5ee10 ffffea0001e05c10 [ 516.974752][T12629] head: ffff88807fbd9800 000000080010000e 00000000f5000000 0000000000000000 [ 516.984448][T12629] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 516.993925][T12629] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 517.002850][T12629] page dumped because: kasan: bad access detected [ 517.009647][T12629] page_owner tracks the page as allocated [ 517.015675][T12629] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5625, tgid 5625 (syz-executor), ts 84954462220, free_ts 84873237910 [ 517.038263][T12629] post_alloc_hook+0x231/0x280 [ 517.043328][T12629] get_page_from_freelist+0x24ba/0x2540 [ 517.049165][T12629] __alloc_frozen_pages_noprof+0x18d/0x380 [ 517.055145][T12629] allocate_slab+0x77/0x660 [ 517.059885][T12629] refill_objects+0x339/0x3d0 [ 517.065025][T12629] __pcs_replace_empty_main+0x321/0x720 [ 517.070813][T12629] __kmalloc_node_track_caller_noprof+0x572/0x7b0 [ 517.077452][T12629] kmemdup_noprof+0x2b/0x70 [ 517.082973][T12629] setup_userns_sysctls+0x53/0x2d0 [ 517.088319][T12629] create_user_ns+0xf60/0x18f0 [ 517.093556][T12629] copy_creds+0x1f2/0xa30 [ 517.098086][T12629] copy_process+0xd6c/0x4440 [ 517.102716][T12629] kernel_clone+0x284/0x8f0 [ 517.107345][T12629] __x64_sys_clone+0x1b6/0x230 [ 517.112444][T12629] do_syscall_64+0x15f/0xf80 [ 517.117333][T12629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.123711][T12629] page last free pid 5635 tgid 5635 stack trace: [ 517.130124][T12629] __free_frozen_pages+0xbc7/0xd30 [ 517.135374][T12629] __slab_free+0x274/0x2c0 [ 517.139876][T12629] qlist_free_all+0x99/0x100 [ 517.144619][T12629] kasan_quarantine_reduce+0x148/0x160 [ 517.150209][T12629] __kasan_slab_alloc+0x22/0x80 [ 517.155202][T12629] kmem_cache_alloc_noprof+0x2bc/0x650 [ 517.160891][T12629] skb_clone+0x212/0x3a0 [ 517.165793][T12629] hci_cmd_work+0xd8/0x7e0 [ 517.171614][T12629] process_scheduled_works+0xb5d/0x1860 [ 517.177541][T12629] worker_thread+0xa53/0xfc0 [ 517.182262][T12629] kthread+0x388/0x470 [ 517.186660][T12629] ret_from_fork+0x514/0xb70 [ 517.191464][T12629] ret_from_fork_asm+0x1a/0x30 [ 517.196252][T12629] [ 517.198684][T12629] Memory state around the buggy address: [ 517.204428][T12629] ffff88807fbd8100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 517.213166][T12629] ffff88807fbd8180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 517.222053][T12629] >ffff88807fbd8200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 517.230246][T12629] ^ [ 517.238898][T12629] ffff88807fbd8280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 517.247880][T12629] ffff88807fbd8300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 517.256306][T12629] ================================================================== [ 517.288882][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.290919][ T5703] usb 2-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 517.318662][ T5703] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.364612][T12629] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 517.372148][T12629] CPU: 1 UID: 0 PID: 12629 Comm: syz.5.1982 Tainted: G L syzkaller #0 PREEMPT(full) [ 517.383801][T12629] Tainted: [L]=SOFTLOCKUP [ 517.388153][T12629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 517.398618][T12629] Call Trace: [ 517.402293][T12629] [ 517.406098][T12629] vpanic+0x56c/0xa60 [ 517.410329][T12629] ? __pfx_vpanic+0x10/0x10 [ 517.415096][T12629] ? __pfx___schedule+0x10/0x10 [ 517.420452][T12629] panic+0xc5/0xd0 [ 517.424757][T12629] ? __pfx_panic+0x10/0x10 [ 517.429760][T12629] ? preempt_schedule_common+0x82/0xd0 [ 517.435910][T12629] ? drm_gem_object_release_handle+0x4b/0x1e0 [ 517.442882][T12629] check_panic_on_warn+0x89/0xb0 [ 517.448314][T12629] ? drm_gem_object_release_handle+0x4b/0x1e0 [ 517.454783][T12629] end_report+0x73/0x170 [ 517.459429][T12629] ? drm_gem_object_release_handle+0x4b/0x1e0 [ 517.465980][T12629] kasan_report+0x128/0x150 [ 517.470724][T12629] ? drm_gem_object_release_handle+0x4b/0x1e0 [ 517.477101][T12629] drm_gem_object_release_handle+0x4b/0x1e0 [ 517.483295][T12629] idr_for_each+0x1c6/0x2a0 [ 517.488055][T12629] ? __pfx_drm_fb_release+0x10/0x10 [ 517.493511][T12629] ? __pfx_drm_gem_object_release_handle+0x10/0x10 [ 517.500305][T12629] ? __pfx_idr_for_each+0x10/0x10 [ 517.505588][T12629] drm_gem_release+0x28/0x40 [ 517.510637][T12629] drm_file_free+0x729/0xa00 [ 517.515298][T12629] drm_release+0x2de/0x3f0 [ 517.519877][T12629] ? __pfx_drm_release+0x10/0x10 [ 517.525332][T12629] __fput+0x44f/0xa60 [ 517.529461][T12629] task_work_run+0x1d9/0x270 [ 517.534082][T12629] ? __pfx_task_work_run+0x10/0x10 [ 517.539499][T12629] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.546043][T12629] exit_to_user_mode_loop+0xed/0x480 [ 517.551617][T12629] ? rcu_is_watching+0x15/0xb0 [ 517.556673][T12629] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.563126][T12629] do_syscall_64+0x33e/0xf80 [ 517.567761][T12629] ? clear_bhb_loop+0x40/0x90 [ 517.572552][T12629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.578566][T12629] RIP: 0033:0x7f5d69f9cdd9 [ 517.583197][T12629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 517.605615][T12629] RSP: 002b:00007f5d6a33fba8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 517.614764][T12629] RAX: 0000000000000000 RBX: 00007f5d6a217da0 RCX: 00007f5d69f9cdd9 [ 517.623728][T12629] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 517.632782][T12629] RBP: 00007f5d6a217da0 R08: 0000000000000006 R09: 0000000000000000 [ 517.641967][T12629] R10: 00007f5d6a217cb0 R11: 0000000000000246 R12: 000000000007e10e [ 517.650798][T12629] R13: 00007f5d6a21609c R14: 000000000007df3f R15: 00007f5d6a216090 [ 517.659089][T12629] [ 517.663137][T12629] Kernel Offset: disabled [ 517.667834][T12629] Rebooting in 86400 seconds..