last executing test programs: 2m46.134236482s ago: executing program 1 (id=648): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x5, &(0x7f0000000300)=@raw=[@alu={0x7, 0x1, 0xb, 0x2, 0xa}, @alu={0x7, 0x0, 0x1, 0x2, 0x0, 0x0, 0xfffffffc}, @jmp={0x5, 0x0, 0x5, 0x0, 0x0, 0x1}, @exit, @exit], &(0x7f0000000000)='syzkaller\x00', 0x201, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m45.788508275s ago: executing program 1 (id=650): r0 = add_key$keyring(&(0x7f0000001080), &(0x7f00000010c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$fscrypt_provisioning(&(0x7f0000000fc0), &(0x7f0000001000)={'syz', 0x2}, &(0x7f0000000180)=ANY=[], 0x18, r0) syz_open_dev$media(&(0x7f0000000380), 0x10, 0x101000) syz_open_dev$media(&(0x7f0000000300), 0x0, 0x0) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000640)={0x0, 0xd73, 0x400, 0x82, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_open_dev$sndmidi(&(0x7f00000000c0), 0x2, 0x161d02) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000500)={{0xfffffffffffffffc, 0x3, 0x95b3, 0x0, 0x1}, 0x8, 0x48, 0x8001}) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587c, 0x8200, 0x2, 0x367, 0x0, r2}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYRES64=r10], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="64ee4ce974a8f47617a11b6ba563febeee7734e4871a0af28c80211dd50d7a7416c78c75edacfc9eb59f67e2020c7be186bab67d5e175c22482af448c131769b42e22f71c3d55a78a07a7c7b4f7dd14764e1b5fb69039e18140ee9dd031f0ce769f7c1c5dc11592a719a5503d8e89f34be56a6433bf67cdc863e8f690b0c1c", @ANYBLOB="8c2dc9de7d41759633e405e4f495b5df6db2b5", @ANYRES32=0x0, @ANYRES64=r6, @ANYRES8=0x0], 0xc0}, 0x1, 0x0, 0x0, 0xc004}, 0x0) close(r11) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x334}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r12 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) syz_usb_control_io$printer(r12, 0x0, 0x0) syz_usb_control_io(r12, 0x0, 0x0) keyctl$unlink(0x9, r1, r0) prctl$PR_SET_SECCOMP(0x4f, 0x6bff8d04effa9b84, 0x0) keyctl$unlink(0x9, r0, r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) 2m42.50346461s ago: executing program 1 (id=662): r0 = syz_usb_connect(0x5, 0x39, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000200000040109710780001010200010902270001010080320904000003ff000000070581020002000705010200020007058203"], 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@cgroup, 0xffffffffffffffff, 0x8, 0x2000}, 0x20) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000140)={0x84, &(0x7f0000000740)={0x20, 0xf, 0x1, 'H'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) 2m40.178261767s ago: executing program 1 (id=666): add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000200)="000000000000000463656c6c00000002000000440000000600000000000000000000000000bfffffff0000000000000000000000000000000000000000000000000000000000000000000004000000000000000400000000000000140000000200"/112, 0x70, 0xffffffffffffffff) 2m39.870417445s ago: executing program 1 (id=669): socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r2, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x11403f, 0x3f}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x5, 0x0, 0x4000000009, 0x1, 0xfffffe0000000001, 0xfa11, 0x3}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) nanosleep(&(0x7f0000000000), 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x1, 0x2) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000300)={{0x200000, 0xdddd1000, 0x0, 0x2, 0x88, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0x6000, 0xd000, 0xc, 0x8, 0x0, 0x4, 0x0, 0xb2, 0x7, 0x7, 0x0, 0xff}, {0x3000, 0xeeef0000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0xe2, 0x0, 0x0, 0xff, 0x0, 0xfe, 0x0, 0x4}, {0xdddd0000, 0x10000, 0x9, 0x0, 0xfd, 0x4, 0x6, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x80}, {0xdddd1000, 0x0, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x8000000, 0x0, 0x5c, 0x1, 0x1, 0x83, 0xa, 0x26, 0x5}, {0x4000}, {0xdddd1000, 0xff}, 0xddf8ffdb, 0x0, 0x0, 0x70, 0xfffffffffffffffe, 0x0, 0x0, [0x4, 0x0, 0x1, 0x5]}) close(0x4) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) 2m39.208059211s ago: executing program 1 (id=673): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="440000001800ffff00000000000000000afaff00fc00000980000000080006000100000014000500fe8000000000000000000000000000aa0c00090008"], 0x44}}, 0x0) (async) r1 = syz_usb_connect$hid(0x5, 0xa0, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1532, 0x10d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x10, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0x361}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x1, 0xa, 0x70}}}}}]}}]}}, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000240), 0x1ff, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000cdd000/0x3000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000451000/0x2000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000dd6000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000f78000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f000071a000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) (async) r2 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) (async) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r2, 0x2219, 0xcf74, 0x16, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) (async) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x2}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}}, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x9, {0x9, 0x21, 0x1}}}, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m24.000296854s ago: executing program 32 (id=673): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="440000001800ffff00000000000000000afaff00fc00000980000000080006000100000014000500fe8000000000000000000000000000aa0c00090008"], 0x44}}, 0x0) (async) r1 = syz_usb_connect$hid(0x5, 0xa0, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1532, 0x10d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x10, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0x361}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x1, 0xa, 0x70}}}}}]}}]}}, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000240), 0x1ff, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000cdd000/0x3000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000451000/0x2000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000dd6000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000f78000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f000071a000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) (async) r2 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) (async) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r2, 0x2219, 0xcf74, 0x16, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) (async) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x2}, @NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}}, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x9, {0x9, 0x21, 0x1}}}, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.051997146s ago: executing program 4 (id=1555): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) creat(&(0x7f0000000440)='./bus\x00', 0x119) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f0000000000), 0x4) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) accept4$alg(r0, 0x0, 0x0, 0x0) 7.057458691s ago: executing program 4 (id=1559): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) openat$drirender128(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0x5, 0x9, 0x0, 0x80000001, 0xc}, 0x0) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r5 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r4, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r4, 0xffffffffffffffff) keyctl$invalidate(0x15, r5) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x9}, 0x8) timer_create(0x1, 0x0, &(0x7f0000000000)) bind$inet(r4, &(0x7f00000000c0)={0x2, 0xe26, @private=0xa010102}, 0x10) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$TIOCGSERIAL(r0, 0x541e, 0x0) bind$inet(r7, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r7, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}}], 0x1, 0x20008000) shutdown(r7, 0x1) close(0x3) 5.60813668s ago: executing program 5 (id=1567): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='illinois', 0x8) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) write(r2, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f03214e000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000300)="11d634ede8a6b1f448da56cc14cb55d8e82532b70ee09cc8c9cb4dcdc279a331e35e01dc596f12ad39aead706969adae3d1d99c0d518287203fd93956dde0b13f0660fad3e8de0eddec563b4905d703f50bf755bb6b76243c2820d4746d3707bdd6c4d7478fd099418f595b818175f", 0x6f}], 0x2}, 0x880) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={0x18, 0x39, 0x1, 0x70bd26, 0x25dfdbfc, {0x15}, [@typed={0x4, 0x1, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x40010) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r4, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/244, 0xf4}], 0x1}, 0x10009}], 0x1, 0x10000, 0x0) sendmmsg$inet6(r4, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000004f80)="000000f5b8ac2bb992ebd4c7b3ba4f60bfed002da6280c91950619c2a0e39042e0e7800ae7b041ff132d7fb40180000014c56dc066ca", 0x36}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000a40)="a603418c14260a2a66d792cf7e1960", 0xf}], 0x1}}], 0x2, 0x20e8086) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) 5.518380612s ago: executing program 0 (id=1568): connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4000, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1, 0x0, 0xfffffffe}}, 0x2e) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000180)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r3) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={r5, 0x3}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000500)={r5, 0xdd, "586f8897d1a0bd3463b8f124be0a37562eb8c2dbacf1b0331fef4f6f8640ae8c819858ffdbf6a0cbd0f8a389fda2d6a0f3696ce35c12598f152beb466ae8771c7e250ab799b5f3596d25a60ede7e74eb515b3ae5bc044dbe914576e615324a4aac429e1995ec3568bc287876a8566ed5aa4bdd52e016a98f2b254c2e4fe9f0563672a6bf2ddccc9c4663052270065c432cc452fbd464abd1babfa98b52e265ef3bdd72bdbf4eee3f19e30f09332f64cd3a9db3f8d947e1bca9b15c9084810ac2ab4402fa5fd323e8f3110736787c489d84cada956d8d197b1909a1c828"}, &(0x7f0000000600)=0xe5) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {&(0x7f00000003c0)="77cccb0deedbb94f1afd3ccb469a6721cc637e9cbc7f0685c4ab02897a615638b1ba209474e485e5c676dab2f779fc45e14a15eb8cab8dce71eaea08ea87db5609774523b75431043e4a32f82c5b61bea2b9b0eff207d81c7b175cfcb3e448d7fcac8844402e9401582eeb4a08d247096e183b9b7de727a818150a153b9397c4cc61a6bd461f30fb84b679bca11d47c56904a9d359442a5c3693048b8aa179cf9385", 0x69}, {0x0}, {&(0x7f0000000300)}], 0x5, 0x4, 0x20000006) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="4c0000001000ffff26bd7000fbdbace82624fc07a07d39864122f7b8000000", @ANYRES32=0x0, @ANYBLOB="1414000021200000240012800c0001006d6163766c616e00140002800800010010000000080003000200000008000500", @ANYRES32=r7, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0xc008006) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 5.306130302s ago: executing program 3 (id=1569): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) creat(&(0x7f0000000440)='./bus\x00', 0x119) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f0000000000), 0x4) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) accept4$alg(r0, 0x0, 0x0, 0x0) 4.671317801s ago: executing program 2 (id=1571): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000140)={0x5, 0x80000, 0xffffffffffffffff}) r2 = syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, r2, 0x0, 0x2, 0x0) sendmsg$nl_generic(r1, 0x0, 0x2400c0d4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_open_dev$vim2m(&(0x7f00000000c0), 0x8000, 0x2) r3 = syz_ublk_setup_io_uring(0xd, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) r7 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r1, 0x1, 0x0) fchdir(r8) r9 = open(&(0x7f0000000000)='./file1\x00', 0x4e4f41, 0x8) write$FUSE_CREATE_OPEN(r9, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x8}}}}, 0xa0) ioprio_set$pid(0x1, 0x0, 0x4000) sendfile(r9, r9, &(0x7f0000000080), 0x4d9b6eaf) setrlimit(0x1, &(0x7f0000000000)) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r11, 0xae60) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r11, 0x4008ae6a, &(0x7f0000000280)={0x1, 0x0, [{0x3, 0x5, 0x0, 0x0, @adapter={0x5, 0x7fffffffffffffff, 0x8000000000000001, 0x80, 0x3}}]}) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)=0x0) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) r14 = dup(r13) syz_ublk_setup_queues(r14, r12, &(0x7f0000000180)={0x0, 0x20fb87, 0x1000, 0xfffffffd, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x2, 0x200015a, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x0, 0x10001, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa71, 0x8000, 0x3, 0x2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0x3bc, 0x0, r9}}], 0x1, &(0x7f0000000500)={0x2e, 0xe, 0x0, r14, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfffd, 0x5bf, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x7}, 0x94) 4.27119768s ago: executing program 0 (id=1572): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x139}, 0x48) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfe63, 0xe7c) 3.948693661s ago: executing program 3 (id=1573): socket(0x18, 0x80000, 0x1) io_setup(0xb, &(0x7f00000000c0)=0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/mem_sleep', 0x129241, 0x100) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000480)='o', 0x1, 0x0, 0x0, 0x0, r1}]) socket$key(0xf, 0x3, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/ipc\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') socket$inet_udp(0x2, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = epoll_create1(0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES8], 0x54}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x20) 3.755918427s ago: executing program 0 (id=1574): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b705000000000000cf4877000000000004000000000000009500000000640000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) 3.561980108s ago: executing program 0 (id=1575): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x6, 0xfffffe0400000001, 0x2, 0xfffffffd}, 0x0) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, './file0\x00'}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000fd3f0000000000000300f2ff840000002e0000009500000000000000a3aeaa26ec04f5e286c0e4ac0fabd073a961817c65fd1852bcf5da031547a16307a9ded474d009696fd632c8039a8723b2a99e7c9f8d60db149fc1d1e400"/109], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="0b0b59af0f1b4314000000040a0500000000000d0add38073de648afefcf10000400000aab55"], 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f00000001c0)={0x3, {{0xa, 0x4e28, 0x2, @local, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @loopback, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB="030000000000000500000000000000010000000000000000000000000001f8ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000a008001000000020000000000000000000000000000000100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015ec00"/272], 0x110) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001200)=ANY=[@ANYBLOB="92000002000009000000008d9a215aaa76cafb00"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) close(0xffffffffffffffff) syz_open_dev$vcsn(&(0x7f00000003c0), 0x8, 0x101000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs2/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) rt_sigqueueinfo(0x0, 0x3f, &(0x7f0000000540)={0x39, 0xb, 0x7}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000400)=@tipc=@id, &(0x7f0000000340)=0x80) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 3.559615149s ago: executing program 4 (id=1576): symlink(0x0, &(0x7f0000000040)='./file0\x00') r0 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f00000000c0)={0x0, 0x0, {0x25, 0x19, 0x1, 0x9, 0x4, 0xc00, 0x5, 0x41, 0xffffffffffffffff}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x3, 0xc66, 0x10, @local, @mcast2, 0x8000, 0x8000, 0x2bbc, 0x8}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, 0x0, 0x20004014) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000380), 0x40) preadv(r3, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/220, 0xdc}, {&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/50, 0x32}, {&(0x7f0000000580)=""/200, 0xc8}], 0x4, 0x3, 0x2) r4 = socket$l2tp(0x2, 0x2, 0x73) recvmmsg(r4, &(0x7f0000007140)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000840)=""/188, 0xbc}, {&(0x7f0000000900)=""/182, 0xb6}, {&(0x7f00000009c0)=""/213, 0xd5}, {&(0x7f0000000ac0)=""/143, 0x8f}], 0x4, &(0x7f0000000bc0)=""/86, 0x56}, 0xffffffaf}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000cc0)=""/19, 0x13}], 0x1, &(0x7f0000000d40)=""/252, 0xfc}, 0xb0}, {{&(0x7f0000000e40)=@alg, 0x80, &(0x7f0000003180)=[{&(0x7f0000000ec0)=""/149, 0x95}, {&(0x7f0000000f80)=""/75, 0x4b}, {&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f0000003000)=""/130, 0x82}, {&(0x7f00000030c0)=""/134, 0x86}], 0x6, &(0x7f0000003200)=""/206, 0xce}, 0x6}, {{0x0, 0x0, &(0x7f0000003300), 0x0, &(0x7f0000003340)=""/110, 0x6e}, 0x9}, {{&(0x7f00000033c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000003840)=[{&(0x7f0000003440)=""/128, 0x80}, {&(0x7f00000035c0)=""/109, 0x6d}, {&(0x7f0000003640)=""/150, 0x96}, {&(0x7f0000003700)=""/45, 0x2d}, {&(0x7f0000003740)=""/138, 0x8a}, {&(0x7f0000003800)=""/42, 0x2a}], 0x6, &(0x7f00000038c0)=""/91, 0x5b}, 0x1}, {{&(0x7f0000003940)=@hci, 0x80, 0x0, 0x0, &(0x7f0000004b80)=""/163, 0xa3}, 0x4}, {{&(0x7f0000004c40)=@in, 0x80, &(0x7f0000004f40)=[{&(0x7f0000004cc0)=""/139, 0x8b}, {0x0}, {&(0x7f0000004e40)=""/114, 0x72}, {&(0x7f0000004ec0)=""/69, 0x45}], 0x4, &(0x7f0000004f80)=""/4096, 0x1000}, 0xe31}, {{&(0x7f0000005f80)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000007000)=[{0x0}], 0x1, &(0x7f0000007040)=""/205, 0xcd}, 0x9}], 0x8, 0x40000001, &(0x7f0000007340)={0x77359400}) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000007440)={0xe0, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_WANTED={0x7c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x78, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ')(\xb0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '%\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '-@]\x00'}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x40000}, 0x8004) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000007780)={&(0x7f0000008000)={[{&(0x7f0000007640), 0x0, 0x2}, {&(0x7f0000007680)="55e28dfee1a2499ba1174d16abcfbf4e45523314724f2424098bdcc3f44227372da2a4f8c5578bea0ce2fd395e345dfe", 0x30, 0x2}, {0x0, 0x0, 0x2}]}, 0x3, 0x3, 0x2}, 0x1) sendmsg$inet(r4, 0x0, 0xc040) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000007980), r5) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, &(0x7f000000a380)={0x0, 0x0, &(0x7f000000a340)={&(0x7f0000009000)={0x1308, r6, 0x4, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x20}}}}, [@NL80211_ATTR_NAN_FUNC={0x24, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "754c57662384"}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TYPE={0x5}]}, @NL80211_ATTR_NAN_FUNC={0x1290, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0x1280, 0xe, 0x0, 0x1, [{0x14, 0x0, "a58f55993f03871baec474388e8b4f2c"}, {0x4}, {0x1004, 0x0, "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"}, {0x6, 0x0, "31c9"}, {0x15, 0x0, "86508a098c0e9a7d0d6d2d4481dd84a9e2"}, {0x9e, 0x0, "4946ec8fa03b9dfa685bc5a0882d0bbf82099394bd338009323a052b0b86eac65855b6b4104d5d86c57d01954e4f18989348285160e9c0149d806ead4a3c018f7a80ec1620c393d0150dfe68a4d32738122164db7d9dc4c26a3b1af7a75ab151cbb766f2b300c2f8ad5a916dbd3c1547281fba81d5b1722fcb6fc0b5cba83b1691670df438d2540ef0dd6fc9258d9b2b997402721e394983b043"}, {0xda, 0x0, "be50497ff4e4bcac4a39f91a6a30dc453a82d635cebac86ada664c5c85166e49cc07deeabd36166b230ba54a859dbb04da73b2a5ab575e5176fe855c4991253df9c1afa1d7f9d8a13ee32563cc7bad6808c55393404676d0b27cef815d98f61ac84d47fe3de0d989564ce0ee82cb5f442bda5244b6a2079394d963ca4ccba22f18b9ae02cc2f2f94724d15338e9d5320792fecbe4e85c75a165318a2a57871ae33eadf2b7d20845a7f3660a16b03223e6696471e14482c941f09814cccfcb030953a6a5350577534d75dd24849da88b568c4ce1f5e28"}, {0x43, 0x0, "f5b22dda45e0f1c817f4543e4a7ebff794be9cec8cecdba8dc73c1553f11599b472e20cce81a9eec2589e841ae9fe3fe5563a41bd18e9623e8cb1fe5c5e0d4"}, {0x7f, 0x0, "0251286ee359edb7df53f7882fa413baf2d5f13ace98962171449127a2697e9d98a02c316d332251b6f2f9ad8233b5f5ae6a2a6f48d6992c9a485911f1291beba6dfae74e25b628f20c42982c6645ebbb2627b391ad8605adc2243e3c30a8c487f862a19f4d13ecb2c7b789d0a0c5e32542c2c2839503c29b42622"}]}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5}]}, @NL80211_ATTR_NAN_FUNC={0x14, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TYPE={0x5, 0x1, 0x6}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x2}]}, @NL80211_ATTR_NAN_FUNC={0xc, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x5}]}]}, 0x1308}, 0x1, 0x0, 0x0, 0x10}, 0x0) quotactl_fd$Q_GETQUOTA(r1, 0xffffffff80000700, 0xee00, &(0x7f000000a3c0)) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f000000a480), r1) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f000000a6c0)={&(0x7f000000a440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f000000a680)={&(0x7f000000a4c0)={0x1c0, r7, 0x0, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x60, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "118607dcd2a787b94165f651eecb7de8c88d6860"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xc00}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffe00}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x48}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x101}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffc}]}, @TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @rand_addr=0x64010101}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x5225, @private2={0xfc, 0x2, '\x00', 0x1}, 0xa598}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x40}]}, @TIPC_NLA_MEDIA={0x8c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffb}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe2a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8}]}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x20008000}, 0x4) mmap$IORING_OFF_SQ_RING(0x0, 0xfffc0000, 0x1000000, 0x11, r1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f000000a800)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@ipv4={""/10, ""/2, @multicast2}}}, &(0x7f000000a900)=0xe8) mount$fuse(0x0, &(0x7f000000a780)='./file0\x00', &(0x7f000000a7c0), 0x1010001, &(0x7f000000aa80)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r8}, 0x2c, {}, 0x2c, {[{@blksize}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x2}}, {@blksize={'blksize', 0x3d, 0x1000}}], [{@smackfsroot={'smackfsroot', 0x3d, '.)['}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}]}}) 3.502910756s ago: executing program 3 (id=1577): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2c30}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_USER_PORT_KEY={0x6, 0x19, 0x7}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x44}, 0x1, 0xba01, 0x0, 0xfff3}, 0xc080) 3.452648674s ago: executing program 2 (id=1578): add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000200)="000000000000000463656c6c00000002000000440000000600bfffffffffffffff00000000000000000000000000000000000000000000000000000000000000020000000000000000000004000000080000000400000000000000140000000200"/112, 0x70, 0xffffffffffffffff) 3.344065231s ago: executing program 5 (id=1579): madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = userfaultfd(0x800) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000739000/0x4000)=nil, 0x4000}) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x4004000) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, &(0x7f00000000c0)={0x100, 0x0, 0x0, 0x324344f62d60e5e7, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, &(0x7f0000000040)={0x4, 0x0, 0x0, 0xb, 0x4}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x11c}}, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x44142, 0x1ff) sendfile(r5, r4, 0x0, 0xfffa83) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_ringparam={0x33, 0x1083, 0x20000a2e, 0x401000, 0x1, 0x3, 0x2000000, 0x1, 0x3000000}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a010200000000000000000200000908000240000000030900010073797a300000000098000000160a030000000000000000000200000a6c000380180003801400010064756d6d7930000000000000000000000800014000000000400003801400010073797a6b616c6c65723100000000000014000100697036677265746170edffadf300000014000100"], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) socket$inet_udp(0x2, 0x2, 0x0) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mmap(&(0x7f00004de000/0x3000)=nil, 0x3000, 0x300000b, 0x1010, 0xffffffffffffffff, 0x42795000) socket$inet_sctp(0x2, 0x5, 0x84) 3.319679006s ago: executing program 4 (id=1580): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x420040, 0x0) r2 = gettid() rt_sigqueueinfo(r2, 0x12, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x400, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r4, &(0x7f0000000080)=ANY=[], 0xff2e) recvmmsg(r1, &(0x7f00000061c0)=[{{&(0x7f0000000540)=@x25, 0x80, &(0x7f00000039c0)=[{&(0x7f00000005c0)=""/130, 0x82}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000700)=""/199, 0xc7}, {0x0}, {0x0}, {&(0x7f0000002900)}, {0x0}, {&(0x7f0000002980)=""/3, 0x3}, {&(0x7f0000003b80)=""/4093, 0xffd}], 0x9, &(0x7f0000003a80)=""/73, 0x49}, 0x5}, {{&(0x7f0000003b00)=@alg, 0x80, &(0x7f0000004e40)=[{&(0x7f0000000800)=""/4096, 0x1000}, {0x0}, {0x0}], 0x3, &(0x7f0000004e80)=""/4096, 0x1000}, 0xfff}, {{&(0x7f0000005e80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000006100)=[{&(0x7f0000005f00)=""/181, 0xb5}, {&(0x7f0000005fc0)=""/224, 0xe0}, {&(0x7f00000001c0)=""/28, 0x1c}], 0x3}, 0x53}], 0x3, 0x40, 0x0) unshare(0x6a040000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) pread64(r6, &(0x7f0000001840)=""/4096, 0x1000, 0x1) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000001800090400000000000000000a010000000000060000000008001e0001000000"], 0x24}}, 0x80) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4000000) 3.155889895s ago: executing program 2 (id=1581): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x4000040) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="58000000100003052abd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000006380000300012800b00010069703667726500002000028008000c000004000014000600fc01dc0500000000000000000000000008000a00", @ANYRES32=r2], 0x58}}, 0x0) 3.106536393s ago: executing program 0 (id=1582): connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4000, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1, 0x0, 0xfffffffe}}, 0x2e) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000180)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r3) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={r5, 0x3}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000500)={r5, 0xdd, "586f8897d1a0bd3463b8f124be0a37562eb8c2dbacf1b0331fef4f6f8640ae8c819858ffdbf6a0cbd0f8a389fda2d6a0f3696ce35c12598f152beb466ae8771c7e250ab799b5f3596d25a60ede7e74eb515b3ae5bc044dbe914576e615324a4aac429e1995ec3568bc287876a8566ed5aa4bdd52e016a98f2b254c2e4fe9f0563672a6bf2ddccc9c4663052270065c432cc452fbd464abd1babfa98b52e265ef3bdd72bdbf4eee3f19e30f09332f64cd3a9db3f8d947e1bca9b15c9084810ac2ab4402fa5fd323e8f3110736787c489d84cada956d8d197b1909a1c828"}, &(0x7f0000000600)=0xe5) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {&(0x7f00000003c0)="77cccb0deedbb94f1afd3ccb469a6721cc637e9cbc7f0685c4ab02897a615638b1ba209474e485e5c676dab2f779fc45e14a15eb8cab8dce71eaea08ea87db5609774523b75431043e4a32f82c5b61bea2b9b0eff207d81c7b175cfcb3e448d7fcac8844402e9401582eeb4a08d247096e183b9b7de727a818150a153b9397c4cc61a6bd461f30fb84b679bca11d47c56904a9d359442a5c3693048b8aa179cf9385", 0x69}, {0x0}, {&(0x7f0000000300)}], 0x5, 0x4, 0x20000006) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="4c0000001000ffff26bd7000fbdbace82624fc07a07d39864122f7b8000000", @ANYRES32=0x0, @ANYBLOB="1414000021200000240012800c0001006d6163766c616e00140002800800010010000000080003000200000008000500", @ANYRES32=r7, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0xc008006) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 3.049029622s ago: executing program 3 (id=1583): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) creat(&(0x7f0000000440)='./bus\x00', 0x119) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f0000000000), 0x4) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) accept4$alg(r0, 0x0, 0x0, 0x0) 2.492014932s ago: executing program 2 (id=1584): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCSWINSZ(r0, 0x5414, 0x0) 2.387282957s ago: executing program 2 (id=1585): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xffee, 0xffe0}}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0xffffdd86, 0x24004800}, 0x0) 1.817982237s ago: executing program 0 (id=1586): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r1 = syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) openat$drirender128(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0x5, 0x9, 0x0, 0x80000001, 0xc}, 0x0) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r5 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r4, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r4, 0xffffffffffffffff) keyctl$invalidate(0x15, r5) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x9}, 0x8) timer_create(0x1, 0x0, &(0x7f0000000000)) bind$inet(r4, &(0x7f00000000c0)={0x2, 0xe26, @private=0xa010102}, 0x10) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$TIOCGSERIAL(r0, 0x541e, 0x0) bind$inet(r7, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r7, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}}], 0x1, 0x20008000) shutdown(r7, 0x1) close(0x3) 1.785794218s ago: executing program 3 (id=1587): socket(0x18, 0x80000, 0x1) io_setup(0xb, &(0x7f00000000c0)=0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/mem_sleep', 0x129241, 0x100) io_submit(r0, 0x1, &(0x7f0000000040)=[&(0x7f0000001500)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000480)='o', 0x1, 0x0, 0x0, 0x0, r1}]) socket$key(0xf, 0x3, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/ipc\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') socket$inet_udp(0x2, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = epoll_create1(0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES8], 0x54}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x20) 1.724602813s ago: executing program 2 (id=1588): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fsopen(0x0, 0x1) unshare(0x66000080) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x8003, 0x3ff}) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x40500, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x51) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r5, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r5, 0x1000) r6 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42) r7 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x128}}, 0x0) ioctl$HIDIOCGFEATURE(r6, 0xc0404807, &(0x7f0000000080)={0x5, "1f7f67491b5a90eeaddb94a4031a82687063ba6e44f7b91d902d0008424ad04b9634bef178be4ba64223a1d6da6d232b4ea6a453724e5a9c45a204ec36715596"}) write$UHID_GET_REPORT_REPLY(r5, &(0x7f0000000140)={0xa, {0x1, 0x3, 0xff}}, 0x5) sendfile(r4, r3, 0x0, 0x3a) r8 = syz_io_uring_setup(0xf20, &(0x7f0000000400)={0x0, 0xbeba, 0x10000, 0xffffffff, 0x40051}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1000ac8) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r13, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x6, r12, 0x0}]) syz_io_uring_submit(r9, r10, r11, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r8, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) readv(r2, &(0x7f0000000640)=[{&(0x7f0000000340)=""/208, 0xd0}, {0x0}], 0x2) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r1, 0x1000) 1.673935288s ago: executing program 4 (id=1589): mq_unlink(&(0x7f00000001c0)='\xaa\xaa\xaa\xaa\xaa') syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0xfe, 0x6, 0x0, @private=0xa010102, @local, {[@generic={0x7, 0x8, "0441b613a3ac"}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0xfe, 0x6, 0x0, @private=0xa010102, @local, {[@generic={0x7, 0x8, "0441b613a3ac"}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) syz_usb_connect$uac1(0x1, 0x72, &(0x7f0000000380)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x1235, 0x8211, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x2a, 0x0, 0x80, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfff7, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x7, 0x28, 0x20, {0x7, 0x25, 0x1, 0xc, 0x4, 0xaf2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x6, 0x4, 0x6, {0x7, 0x25, 0x1, 0x0, 0x1, 0x8}}}}}}}}]}}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x44c}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x44f}}, {0x0, 0x0}, {0x0, 0x0}]}) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x7, 0x1, 0x1, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x5, 0x50, 0xd9, "", [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x1, 0x3, 0x7a}}}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x6, 0xf, 0x3, 0x8, 0x2}, 0x87, &(0x7f0000000240)={0x5, 0xf, 0x87, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0xa, "e9bd2346920008fcf50e3fb1c032d97e"}, @generic={0x5d, 0x10, 0xa, "42f965e8b0886c1587e773b1ffbe17eaffb2be8dda86448904ba618d534aa38792451c5becee0f4adf989f27d56c4fda41e0d01a46f569b9d5e5ea4e258ce9acec5ba118336c274a76d9a8f295bdb35cba61f975b0f98a73d90b"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x3, 0x5, 0xfffc}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x3, 0x5, 0x7ffd}]}, 0x3, [{0x54, &(0x7f0000000140)=@string={0x54, 0x3, "aa46b3704e491a0da8c9b655ae4576eb7ec38d63a873c1107475581201551545ed068e6970dd1e037701ebf2aacb17a3c485beb5e16dcc8f34854a383245fb24ef69c993d3985610fe409f89f4107e7abc17"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x78, &(0x7f00000000c0)=ANY=[@ANYBLOB="7803e25ac853e81a011eb5dbc309416d3e4ca61e7a2373639390e9d5afedce80c0d88a33d11173e3813616961341ce1c2373f49d60f30c1ec199afcb0682e0352aa58a7541c877d05d06bb578149f1edaf10981c590a3a52f05dc6c7b7cb4990ec1c675e7e39b7206b0700d8d4033c4e9275721857ffcd00"]}]}) mq_unlink(&(0x7f0000000200)='\xaa\xaa\xaa\xaa\xaa') 1.556382978s ago: executing program 5 (id=1590): sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010025bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x814) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff000000000000000000003f00", @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005000100040000000600180000100000060019"], 0x4c}}, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) 1.400596201s ago: executing program 3 (id=1591): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f00000000c0), &(0x7f0000000180)=0x4) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x7, 0x600080) syz_kvm_setup_cpu$x86(r3, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="b9800000c00f3235000400000f30440f20c03508000000440f22c036646665f36526f20f22a5430f01c566ba4000edc4a39979250b00000008b9800000c00f3235010000000f30f245ab48b800000000000000800f23c00f21f83500000b000f23f8c481e57dcd", 0x67}], 0x1, 0x10, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000bdc000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000140)=0x3ff, 0x3, 0x0) mbind(&(0x7f0000bdb000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000080)=0x103e, 0x5, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newqdisc={0x2c0, 0x24, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0xc}, {0x6, 0xffff}, {0x7, 0x6}}, [@TCA_RATE={0x6, 0x5, {0x98, 0x98}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x1, 0x5, 0x5, 0x1, 0x6, 0x1ff, 0x1}}, {0x6, 0x2, [0x7]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4d40}, @TCA_STAB={0xac, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x7f, 0x2f7, 0x3ff, 0x0, 0x2, 0x2, 0x1}}, {0x6, 0x2, [0x80]}}, {{0x1c, 0x1, {0x3, 0xb6, 0xc6, 0x6, 0x1, 0x7, 0x1, 0x5}}, {0xe, 0x2, [0x3c47, 0xe1ab, 0x81, 0x7, 0xfff8]}}, {{0x1c, 0x1, {0x3, 0x1, 0x9, 0x8, 0x0, 0xd47, 0x5, 0xfffffefc}}, {0x12, 0x2, [0xfffa, 0x6, 0x8, 0x1, 0x7, 0x200, 0x0]}}, {{0x1c, 0x1, {0x80, 0xff, 0x6, 0x800, 0x0, 0x10000, 0x8, 0x4}}, {0xc, 0x2, [0x6, 0x8, 0x2, 0xa9d]}}]}, @TCA_STAB={0x84, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x10, 0x40, 0x4, 0x9, 0x1, 0x2, 0x8, 0x3}}, {0xa, 0x2, [0x8, 0x8, 0x7]}}, {{0x1c, 0x1, {0x80, 0x81, 0x4, 0x5, 0x1, 0x8, 0x40, 0x2}}, {0x8, 0x2, [0x3, 0xc]}}, {{0x1c, 0x1, {0x4, 0x3, 0x2, 0x9, 0x1, 0x0, 0x27d, 0xa}}, {0x18, 0x2, [0x1, 0x9, 0x400, 0x0, 0x7c0, 0x4, 0xf3, 0x4, 0x2, 0xffff]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3ff}, @TCA_RATE={0x6, 0x5, {0x6, 0x38}}, @TCA_STAB={0xa8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x2, 0xb8a, 0x1, 0x0, 0x7, 0x88, 0x4}}, {0xc, 0x2, [0x3, 0x9, 0x9, 0x3ff]}}, {{0x1c, 0x1, {0x6, 0x6, 0xfff6, 0x8, 0x0, 0x37b1, 0x200, 0x7}}, {0x12, 0x2, [0x101, 0x6, 0x7, 0x2, 0x7ff, 0x8, 0x1]}}, {{0x1c, 0x1, {0x4, 0x0, 0x2, 0x2, 0x1, 0x3, 0x278, 0x4}}, {0xc, 0x2, [0x2, 0x9, 0x252, 0x7]}}, {{0x1c, 0x1, {0x2, 0xe, 0x400, 0x7, 0x0, 0x0, 0x9, 0x2}}, {0x8, 0x2, [0x8, 0x0]}}]}, @TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xc, 0x3, 0xc35, 0x0, 0x2, 0x9, 0xc, 0x1}}, {0x6, 0x2, [0x81]}}, {{0x1c, 0x1, {0x0, 0x2, 0xc, 0x4, 0x0, 0x2, 0x5, 0x3}}, {0xa, 0x2, [0x6, 0x3, 0x401]}}, {{0x1c, 0x1, {0xd3, 0x2, 0x401, 0x5, 0x2, 0x3, 0x4a, 0x6}}, {0x10}}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 844.017429ms ago: executing program 5 (id=1592): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x6, 0xfffffe0400000001, 0x2, 0xfffffffd}, 0x0) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, './file0\x00'}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000fd3f0000000000000300f2ff840000002e0000009500000000000000a3aeaa26ec04f5e286c0e4ac0fabd073a961817c65fd1852bcf5da031547a16307a9ded474d009696fd632c8039a8723b2a99e7c9f8d60db149fc1d1e400"/109], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="0b0b59af0f1b4314000000040a0500000000000d0add38073de648afefcf10000400000aab55"], 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f00000001c0)={0x3, {{0xa, 0x4e28, 0x2, @local, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @loopback, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB="030000000000000500000000000000010000000000000000000000000001f8ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000a008001000000020000000000000000000000000000000100000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015ec00"/272], 0x110) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001200)=ANY=[@ANYBLOB="92000002000009000000008d9a215aaa76cafb00"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) close(0xffffffffffffffff) syz_open_dev$vcsn(&(0x7f00000003c0), 0x8, 0x101000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs2/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) rt_sigqueueinfo(0x0, 0x3f, &(0x7f0000000540)={0x39, 0xb, 0x7}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000400)=@tipc=@id, &(0x7f0000000340)=0x80) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 254.012233ms ago: executing program 5 (id=1593): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x5, &(0x7f0000000600)=@raw=[@alu={0x7, 0x1, 0xb, 0x2, 0xa}, @call={0x85, 0x0, 0x0, 0x84}, @jmp={0x5, 0x0, 0x5, 0x0, 0x0, 0x1}, @exit, @exit], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7}, 0x94) 347.42µs ago: executing program 4 (id=1594): r0 = syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x9, 0x40400) ioctl$DVB_DVR_DMX_QBUF(r0, 0xc0186f3f, &(0x7f0000000040)={0x1, 0x6, 0x21fe, 0xd, 0x10, 0x4a30}) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000100)={[0x0, 0xbf8, 0x2, 0x8000000000000000, 0x8, 0x7, 0x200, 0x7, 0x4, 0x4bf, 0xff, 0x4, 0xa4f, 0xff, 0xf, 0x9], 0xeeee0000, 0x40}) (async) ioctl$KVM_GET_TSC_KHZ_cpu(r2, 0xaea3) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, {0x8}}, './file0\x00'}) ioctl$KVM_SET_DEBUGREGS(r3, 0x4080aea2, &(0x7f0000000200)={[0x7000, 0x1ffe, 0xb000, 0xffc], 0xb, 0x1, 0x9}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x70, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000080}, 0x60000010) (async) unshare(0x10050000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f00000003c0)=[@in6={0xa, 0x4e21, 0x7fffffff, @empty, 0x2}, @in6={0xa, 0x4e20, 0x4, @local, 0xffff2d3f}], 0x38) (async) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000400)=0x1, 0x4) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x28010, r2, 0x88153000) (async) r5 = accept4(r1, &(0x7f0000000480)=@generic, &(0x7f0000000500)=0x80, 0x40000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), r5) sendmsg$rds(r3, &(0x7f0000000c40)={&(0x7f0000000540)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000580)=""/136, 0x88}, {&(0x7f0000000640)=""/219, 0xdb}], 0x2, &(0x7f0000000a80)=[@fadd={0x58, 0x114, 0x6, {{0x1, 0x7f}, &(0x7f0000000780)=0x6, &(0x7f00000007c0)=0x2, 0xffffffffffff8001, 0xa, 0x2, 0x8, 0x2, 0x117d}}, @cswp={0x58, 0x114, 0x7, {{0x6, 0x101}, &(0x7f0000000800)=0x6, &(0x7f0000000840)=0x6, 0x3, 0x2, 0x0, 0x8, 0x10, 0x4}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000880)=""/149, 0x95}, &(0x7f0000000940), 0x1}}, @mask_cswp={0x58, 0x114, 0x9, {{0x3, 0x400}, &(0x7f0000000980)=0x7, &(0x7f00000009c0)=0xffffffffffffffff, 0x3, 0x3, 0x4e3, 0xff, 0x11, 0xe}}, @mask_cswp={0x58, 0x114, 0x9, {{0x0, 0x10001}, &(0x7f0000000a00), &(0x7f0000000a40)=0xc, 0x8000, 0x9, 0x9, 0x0, 0x10, 0x3}}], 0x190, 0x8080}, 0x40000) (async) getsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000000c80)={@private2, 0x0}, &(0x7f0000000cc0)=0x14) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000d00), 0x4080, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d40)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x81, '\x00', r6, r7, 0x1, 0x1, 0x2}, 0x50) (async) r8 = syz_open_dev$video(&(0x7f0000000dc0), 0x80, 0x100000) ioctl$VIDIOC_ENUMAUDOUT(r8, 0xc0345642, &(0x7f0000000e00)={0x4, "bf41f27928c4e1aeea873346daad30eee8f9e47d6fbb372ebad72c87092d0a1a", 0x0, 0x1}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000e80)={0x3, &(0x7f0000000e40)=[{0xb, 0x7, 0x7, 0x7}, {0xdc3e, 0xfc, 0x9}, {0xe, 0x71, 0x6, 0x1d}]}, 0x10) (async) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000ec0)='/proc/mdstat\x00', 0x0, 0x0) (async) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000f40), r7) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r9, &(0x7f0000001040)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x54, r10, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40040c0}, 0x818) (async) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f00000010c0), r3) sendmsg$IPVS_CMD_FLUSH(r9, &(0x7f0000001180)={&(0x7f0000001080), 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x1c, r11, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000011c0)) 0s ago: executing program 5 (id=1595): socket$kcm(0x11, 0x200000000000002, 0x300) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902"], 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x9, &(0x7f0000000240)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000002f000000b709000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) pipe(&(0x7f00000000c0)) socket$inet6_sctp(0xa, 0x1, 0x84) socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000340)={0x3, "da02791d2a166f6100000011000100"}) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x28d00, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f00000004c0)={0x9, "34e6498c270e0000b56a000005000000000000000000000000000100"}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000024010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r6], 0xc4}}, 0x0) kernel console output (not intermixed with test programs): 469037][ T8970] fib6_add_1+0x996/0x13e0 [ 254.469062][ T8970] fib6_add+0x211/0x1a20 [ 254.469089][ T8970] ? __pfx_fib6_add+0x10/0x10 [ 254.469111][ T8970] ? ip6_route_add+0xc9/0x1b0 [ 254.469130][ T8970] ip6_route_add+0xde/0x1b0 [ 254.469150][ T8970] inet6_rtm_newroute+0x267/0x1a30 [ 254.469170][ T8970] ? kasan_quarantine_put+0xbb/0x1f0 [ 254.469186][ T8970] ? lockdep_hardirqs_on+0x7b/0x110 [ 254.469207][ T8970] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 254.469221][ T8970] ? nlmon_xmit+0xb0/0x100 [ 254.469236][ T8970] ? kmem_cache_free+0x182/0x650 [ 254.469270][ T8970] ? __lock_acquire+0x747/0x2de0 [ 254.469290][ T8970] ? __local_bh_enable_ip+0xd6/0x140 [ 254.469308][ T8970] ? lockdep_hardirqs_on+0x7b/0x110 [ 254.469361][ T8970] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 254.469376][ T8970] rtnetlink_rcv_msg+0x802/0xc00 [ 254.469408][ T8970] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 254.469426][ T8970] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 254.469444][ T8970] ? ref_tracker_free+0x689/0x830 [ 254.469464][ T8970] ? __pfx_ref_tracker_free+0x10/0x10 [ 254.469482][ T8970] ? __asan_memcpy+0x40/0x70 [ 254.469495][ T8970] ? __skb_clone+0x5c/0x6c0 [ 254.469520][ T8970] netlink_rcv_skb+0x226/0x4a0 [ 254.469544][ T8970] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 254.469564][ T8970] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 254.469595][ T8970] ? netlink_deliver_tap+0x2e/0x1b0 [ 254.469609][ T8970] ? netlink_deliver_tap+0x2e/0x1b0 [ 254.469626][ T8970] netlink_unicast+0x7bd/0x940 [ 254.469654][ T8970] netlink_sendmsg+0x813/0xb40 [ 254.469673][ T8970] ? __pfx_netlink_sendmsg+0x10/0x10 [ 254.469693][ T8970] ? apparmor_socket_sendmsg+0x98/0x360 [ 254.469711][ T8970] ? __pfx_netlink_sendmsg+0x10/0x10 [ 254.469724][ T8970] sock_sendmsg_nosec+0x13a/0x180 [ 254.469741][ T8970] ____sys_sendmsg+0x54e/0x850 [ 254.469764][ T8970] ? __pfx_____sys_sendmsg+0x10/0x10 [ 254.469790][ T8970] ? import_iovec+0x73/0xa0 [ 254.469834][ T8970] ___sys_sendmsg+0x2a5/0x360 [ 254.469880][ T8970] ? __lock_acquire+0x747/0x2de0 [ 254.469905][ T8970] ? __pfx____sys_sendmsg+0x10/0x10 [ 254.469971][ T8970] ? __fget_files+0x2a/0x420 [ 254.469994][ T8970] ? __fget_files+0x3a2/0x420 [ 254.470023][ T8970] __x64_sys_sendmsg+0x1b1/0x290 [ 254.470070][ T8970] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 254.470109][ T8970] do_syscall_64+0x166/0x520 [ 254.470129][ T8970] ? trace_irq_disable+0x3b/0x140 [ 254.470159][ T8970] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.470175][ T8970] ? clear_bhb_loop+0x70/0xc0 [ 254.470202][ T8970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.470230][ T8970] RIP: 0033:0x7fa16279e159 [ 254.470245][ T8970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.470258][ T8970] RSP: 002b:00007fa163661028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 254.470284][ T8970] RAX: ffffffffffffffda RBX: 00007fa162a26180 RCX: 00007fa16279e159 [ 254.470303][ T8970] RDX: 0000000000000080 RSI: 0000200000000080 RDI: 000000000000000b [ 254.470314][ T8970] RBP: 00007fa163661090 R08: 0000000000000000 R09: 0000000000000000 [ 254.470324][ T8970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.470333][ T8970] R13: 00007fa162a26218 R14: 00007fa162a26180 R15: 00007fa162b4fa48 [ 254.470357][ T8970] [ 255.680812][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.680879][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.763145][ T8995] netlink: 24 bytes leftover after parsing attributes in process `syz.3.980'. [ 255.830570][ T8995] ip6gre2: entered promiscuous mode [ 255.830609][ T8995] ip6gre2: entered allmulticast mode [ 256.097842][ T32] audit: type=1326 audit(1790340586.418:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9005 comm="syz.2.984" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0670d9e159 code=0x0 [ 256.155866][ T9009] ip_tables: iptables: counters copy to user failed while replacing table [ 256.182411][ T9010] netdevsim netdevsim4: Direct firmware load for . [ 256.182411][ T9010] failed with error -2 [ 256.182429][ T9010] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 256.182429][ T9010] [ 256.567844][ T13] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 256.568102][ T13] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 256.607340][ T5684] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 256.907408][ T5669] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 257.063696][ T5669] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 257.064868][ T5669] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 257.064894][ T5669] usb 4-1: config 0 has no interface number 0 [ 257.064934][ T5669] usb 4-1: config 0 interface 41 has no altsetting 0 [ 257.069865][ T5669] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.069936][ T5669] usb 4-1: Product: syz [ 257.069977][ T5669] usb 4-1: Manufacturer: syz [ 257.070017][ T5669] usb 4-1: SerialNumber: syz [ 257.135242][ T5669] usb 4-1: config 0 descriptor?? [ 257.357276][ T5684] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 257.597484][ T5738] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 257.704092][ T5669] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 257.704315][ T5669] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 257.729659][ T5669] usb 4-1: USB disconnect, device number 33 [ 257.861964][ T9046] FAULT_INJECTION: forcing a failure. [ 257.861964][ T9046] name failslab, interval 1, probability 0, space 0, times 0 [ 257.861992][ T9046] CPU: 1 UID: 0 PID: 9046 Comm: syz.4.998 Tainted: G L syzkaller #0 PREEMPT(full) [ 257.862034][ T9046] Tainted: [L]=SOFTLOCKUP [ 257.862042][ T9046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 257.862056][ T9046] Call Trace: [ 257.862064][ T9046] [ 257.862073][ T9046] dump_stack_lvl+0xe8/0x150 [ 257.862119][ T9046] should_fail_ex+0x410/0x560 [ 257.862142][ T9046] should_failslab+0xa8/0x100 [ 257.862163][ T9046] __kmalloc_cache_noprof+0xa3/0x600 [ 257.862203][ T9046] ? __kmalloc_cache_noprof+0x14d/0x600 [ 257.862224][ T9046] ? sctp_add_bind_addr+0x8c/0x370 [ 257.862242][ T9046] ? sctp_add_bind_addr+0x8c/0x370 [ 257.862270][ T9046] sctp_add_bind_addr+0x8c/0x370 [ 257.862293][ T9046] sctp_copy_local_addr_list+0x31a/0x4e0 [ 257.862320][ T9046] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 257.862369][ T9046] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 257.862404][ T9046] ? sctp_v6_is_any+0x64/0x80 [ 257.862433][ T9046] ? sctp_copy_one_addr+0x93/0x360 [ 257.862484][ T9046] sctp_bind_addr_copy+0xb3/0x3c0 [ 257.862520][ T9046] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 257.862553][ T9046] sctp_connect_new_asoc+0x2ff/0x6b0 [ 257.862585][ T9046] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 257.862611][ T9046] ? sctp_get_af_specific+0x29/0x80 [ 257.862625][ T9046] ? sctp_inet6_send_verify+0x80/0x300 [ 257.862660][ T9046] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 257.862691][ T9046] __sctp_connect+0x5cb/0xdc0 [ 257.862729][ T9046] ? __pfx___sctp_connect+0x10/0x10 [ 257.862754][ T9046] ? security_sctp_bind_connect+0x7e/0x2c0 [ 257.862773][ T9046] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 257.862819][ T9046] sctp_getsockopt_connectx3+0x227/0x360 [ 257.862845][ T9046] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 257.862871][ T9046] ? sctp_getsockopt+0x12f/0xb90 [ 257.862901][ T9046] ? __local_bh_enable_ip+0xd6/0x140 [ 257.862926][ T9046] sctp_getsockopt+0x984/0xb90 [ 257.862945][ T9046] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 257.862987][ T9046] do_sock_getsockopt+0x51d/0x7e0 [ 257.863022][ T9046] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 257.863068][ T9046] ? __fget_files+0x3a2/0x420 [ 257.863089][ T9046] ? __fget_files+0x2a/0x420 [ 257.863143][ T9046] __x64_sys_getsockopt+0x1a4/0x240 [ 257.863183][ T9046] do_syscall_64+0x166/0x520 [ 257.863209][ T9046] ? trace_irq_disable+0x3b/0x140 [ 257.863233][ T9046] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.863249][ T9046] ? clear_bhb_loop+0x70/0xc0 [ 257.863297][ T9046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.863320][ T9046] RIP: 0033:0x7f10e299e159 [ 257.863357][ T9046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.863380][ T9046] RSP: 002b:00007f10e0bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 257.863398][ T9046] RAX: ffffffffffffffda RBX: 00007f10e2c25fa0 RCX: 00007f10e299e159 [ 257.863410][ T9046] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 257.863420][ T9046] RBP: 00007f10e0bf6090 R08: 0000200000000240 R09: 0000000000000000 [ 257.863448][ T9046] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 257.863463][ T9046] R13: 00007f10e2c26038 R14: 00007f10e2c25fa0 R15: 00007f10e2d4fa48 [ 257.863498][ T9046] [ 258.504474][ T32] audit: type=1326 audit(1790340588.828:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9059 comm="syz.0.1003" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16279e159 code=0x7ffc0000 [ 258.517803][ T32] audit: type=1326 audit(1790340588.828:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9059 comm="syz.0.1003" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16279e159 code=0x7ffc0000 [ 258.559847][ T32] audit: type=1326 audit(1790340588.888:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9059 comm="syz.0.1003" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa16279e159 code=0x7ffc0000 [ 258.559897][ T32] audit: type=1326 audit(1790340588.888:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9059 comm="syz.0.1003" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16279e159 code=0x7ffc0000 [ 258.559951][ T32] audit: type=1326 audit(1790340588.888:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9059 comm="syz.0.1003" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16279e159 code=0x7ffc0000 [ 258.563903][ T32] audit: type=1326 audit(1790340588.888:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9059 comm="syz.0.1003" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fa16279e159 code=0x7ffc0000 [ 258.563956][ T32] audit: type=1326 audit(1790340588.888:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9059 comm="syz.0.1003" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16279e159 code=0x7ffc0000 [ 258.564005][ T32] audit: type=1326 audit(1790340588.888:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9059 comm="syz.0.1003" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16279e159 code=0x7ffc0000 [ 258.564398][ T32] audit: type=1326 audit(1790340588.888:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9059 comm="syz.0.1003" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa16279e159 code=0x7ffc0000 [ 258.877225][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 259.028031][ T9068] netdevsim netdevsim3: Direct firmware load for . [ 259.028031][ T9068] failed with error -2 [ 259.028058][ T9068] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 259.028058][ T9068] [ 260.159510][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 260.337152][ T5669] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 260.467622][ T5669] usb 6-1: device descriptor read/64, error -71 [ 260.602069][ T9108] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1023'. [ 260.612670][ T9108] ip6gre3: entered promiscuous mode [ 260.612722][ T9108] ip6gre3: entered allmulticast mode [ 260.619915][ T5820] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 260.620165][ T5820] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 260.647825][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 260.717617][ T5669] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 260.847325][ T5669] usb 6-1: device descriptor read/64, error -71 [ 260.960366][ T5669] usb usb6-port1: attempt power cycle [ 261.224246][ T9123] ip_tables: iptables: counters copy to user failed while replacing table [ 261.297155][ T5669] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 261.319301][ T5669] usb 6-1: device descriptor read/8, error -71 [ 261.557197][ T5669] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 261.587872][ T5669] usb 6-1: device descriptor read/8, error -71 [ 261.698012][ T5669] usb usb6-port1: unable to enumerate USB device [ 261.950419][ T5684] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 262.077206][ C1] ip6_tnl_xmit_ctl: 3 callbacks suppressed [ 262.077229][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 262.107226][ T5684] usb 4-1: Using ep0 maxpacket: 16 [ 262.107963][ T5684] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 262.108768][ T5684] usb 4-1: config 0 has no interfaces? [ 262.112843][ T5684] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.112883][ T5684] usb 4-1: Product: syz [ 262.112898][ T5684] usb 4-1: Manufacturer: syz [ 262.112939][ T5684] usb 4-1: SerialNumber: syz [ 262.162720][ T5684] r8152-cfgselector 4-1: Unknown version 0x0000 [ 262.162742][ T5684] r8152-cfgselector 4-1: config 0 descriptor?? [ 262.239010][ T9133] bond2: option ad_user_port_key: invalid value (48421) [ 262.239035][ T9133] bond2: option ad_user_port_key: allowed values 0 - 1023 [ 262.240689][ T9133] bond2 (unregistering): Released all slaves [ 262.481622][ T5738] r8152-cfgselector 4-1: USB disconnect, device number 34 [ 262.707187][ T5684] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 262.889304][ T5684] usb 5-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 262.891613][ T5684] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.891637][ T5684] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 262.891656][ T5684] usb 5-1: config 0 interface 0 has no altsetting 0 [ 262.891681][ T5684] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.896533][ T5684] usb 5-1: config 0 descriptor?? [ 263.543570][ T9156] FAULT_INJECTION: forcing a failure. [ 263.543570][ T9156] name failslab, interval 1, probability 0, space 0, times 0 [ 263.543604][ T9156] CPU: 0 UID: 0 PID: 9156 Comm: syz.2.1042 Tainted: G L syzkaller #0 PREEMPT(full) [ 263.543630][ T9156] Tainted: [L]=SOFTLOCKUP [ 263.543637][ T9156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 263.543652][ T9156] Call Trace: [ 263.543676][ T9156] [ 263.543685][ T9156] dump_stack_lvl+0xe8/0x150 [ 263.543720][ T9156] should_fail_ex+0x410/0x560 [ 263.543749][ T9156] should_failslab+0xa8/0x100 [ 263.543777][ T9156] __kmalloc_cache_noprof+0xa3/0x600 [ 263.543800][ T9156] ? __kmalloc_cache_noprof+0x14d/0x600 [ 263.543820][ T9156] ? sctp_add_bind_addr+0x8c/0x370 [ 263.543838][ T9156] ? sctp_add_bind_addr+0x8c/0x370 [ 263.543865][ T9156] sctp_add_bind_addr+0x8c/0x370 [ 263.543889][ T9156] sctp_copy_local_addr_list+0x31a/0x4e0 [ 263.543925][ T9156] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 263.543958][ T9156] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 263.544002][ T9156] ? sctp_v6_is_any+0x64/0x80 [ 263.544024][ T9156] ? sctp_copy_one_addr+0x93/0x360 [ 263.544057][ T9156] sctp_bind_addr_copy+0xb3/0x3c0 [ 263.544089][ T9156] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 263.544119][ T9156] sctp_connect_new_asoc+0x2ff/0x6b0 [ 263.544147][ T9156] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 263.544176][ T9156] ? sctp_get_af_specific+0x29/0x80 [ 263.544194][ T9156] ? sctp_inet6_send_verify+0x80/0x300 [ 263.544229][ T9156] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 263.544258][ T9156] __sctp_connect+0x5cb/0xdc0 [ 263.544295][ T9156] ? __pfx___sctp_connect+0x10/0x10 [ 263.544320][ T9156] ? security_sctp_bind_connect+0x7e/0x2c0 [ 263.544346][ T9156] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 263.544380][ T9156] sctp_getsockopt_connectx3+0x227/0x360 [ 263.544404][ T9156] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 263.544430][ T9156] ? sctp_getsockopt+0x12f/0xb90 [ 263.544464][ T9156] ? __local_bh_enable_ip+0xd6/0x140 [ 263.544497][ T9156] sctp_getsockopt+0x984/0xb90 [ 263.544521][ T9156] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 263.544546][ T9156] do_sock_getsockopt+0x51d/0x7e0 [ 263.544581][ T9156] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 263.544625][ T9156] ? __fget_files+0x3a2/0x420 [ 263.544653][ T9156] ? __fget_files+0x2a/0x420 [ 263.544688][ T9156] __x64_sys_getsockopt+0x1a4/0x240 [ 263.544735][ T9156] do_syscall_64+0x166/0x520 [ 263.544760][ T9156] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.544780][ T9156] ? clear_bhb_loop+0x70/0xc0 [ 263.544803][ T9156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.544823][ T9156] RIP: 0033:0x7f0670d9e159 [ 263.544840][ T9156] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.544857][ T9156] RSP: 002b:00007f0671ba2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 263.544896][ T9156] RAX: ffffffffffffffda RBX: 00007f0671025fa0 RCX: 00007f0670d9e159 [ 263.544911][ T9156] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 263.544924][ T9156] RBP: 00007f0671ba2090 R08: 0000200000000240 R09: 0000000000000000 [ 263.544939][ T9156] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 263.544952][ T9156] R13: 00007f0671026038 R14: 00007f0671025fa0 R15: 00007f067114fa48 [ 263.544995][ T9156] [ 263.761440][ T31] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 263.917469][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 263.920994][ T31] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 263.922241][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.922267][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.922289][ T31] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 263.922328][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.991196][ T31] usb 4-1: config 0 descriptor?? [ 264.437287][ T5669] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 264.483672][ T31] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.001E/input/input36 [ 264.555254][ T9162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.555688][ T9162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.573844][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 264.585006][ T32] kauditd_printk_skb: 74 callbacks suppressed [ 264.585020][ T32] audit: type=1326 audit(1790340594.908:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9140 comm="syz.5.1036" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca32d9e159 code=0x7ffc0000 [ 264.585061][ T32] audit: type=1326 audit(1790340594.908:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9140 comm="syz.5.1036" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca32d9e159 code=0x7ffc0000 [ 264.636595][ T32] audit: type=1326 audit(1790340594.958:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9140 comm="syz.5.1036" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fca32d9e159 code=0x7ffc0000 [ 264.636764][ T32] audit: type=1326 audit(1790340594.958:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9140 comm="syz.5.1036" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca32d9e159 code=0x7ffc0000 [ 264.636893][ T32] audit: type=1326 audit(1790340594.958:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9140 comm="syz.5.1036" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca32d9e159 code=0x7ffc0000 [ 264.642992][ T5669] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 264.687763][ T32] audit: type=1326 audit(1790340594.998:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9140 comm="syz.5.1036" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7fca32d9e159 code=0x7ffc0000 [ 264.687998][ T32] audit: type=1326 audit(1790340594.998:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9140 comm="syz.5.1036" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca32d9e159 code=0x7ffc0000 [ 264.752260][ T32] audit: type=1326 audit(1790340595.018:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9140 comm="syz.5.1036" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca32d9e159 code=0x7ffc0000 [ 264.752313][ T32] audit: type=1326 audit(1790340595.068:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9140 comm="syz.5.1036" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fca32d9e159 code=0x7ffc0000 [ 264.752371][ T5669] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 264.752397][ T5669] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 264.752418][ T5669] usb 3-1: config 0 has no interface number 0 [ 264.752460][ T5669] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 264.752488][ T5669] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 264.752511][ T5669] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 264.759451][ T9154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.803641][ T9154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.873120][ T32] audit: type=1326 audit(1790340595.198:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9140 comm="syz.5.1036" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca32d9e159 code=0x7ffc0000 [ 264.931717][ T5669] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.931742][ T5669] usb 3-1: Product: syz [ 264.931760][ T5669] usb 3-1: Manufacturer: syz [ 264.931770][ T5669] usb 3-1: SerialNumber: syz [ 264.968296][ T31] microsoft 0003:045E:07DA.001E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 264.999080][ T5669] usb 3-1: config 0 descriptor?? [ 265.245882][ T9159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1043'. [ 265.374032][ T5684] usbhid 5-1:0.0: can't add hid device: -71 [ 265.374161][ T5684] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 265.404600][ T5684] usb 5-1: USB disconnect, device number 22 [ 265.637952][ T31] usb 4-1: reset high-speed USB device number 35 using dummy_hcd [ 266.499932][ T5670] usb 4-1: USB disconnect, device number 35 [ 267.369155][ T5669] usbtouchscreen 3-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 267.421278][ T5669] usb 3-1: USB disconnect, device number 10 [ 268.257221][ T9213] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 268.327943][ T9221] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1054'. [ 268.411799][ T9213] usb 4-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 268.435359][ T9213] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.435385][ T9213] usb 4-1: Product: syz [ 268.435398][ T9213] usb 4-1: Manufacturer: syz [ 268.435412][ T9213] usb 4-1: SerialNumber: syz [ 268.463446][ T9203] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.496778][ T9203] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.498579][ T9213] usb 4-1: USB2VGA dongle found at address 36 [ 268.508283][ T9213] usb 4-1: Allocated 8 output buffers [ 268.773498][ T9227] netlink: 'syz.3.1053': attribute type 30 has an invalid length. [ 268.941368][ T9203] ip6gre1: left promiscuous mode [ 268.941394][ T9203] ip6gre1: left allmulticast mode [ 268.962967][ T9203] wireguard0: left promiscuous mode [ 268.980655][ T9203] bond2: left promiscuous mode [ 268.980676][ T9203] ip6gre2: left promiscuous mode [ 268.999767][ T9203] ip6gre3: left promiscuous mode [ 269.001324][ T9203] ip6gre3: left allmulticast mode [ 269.117399][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 269.152749][ T9220] wireguard2: entered promiscuous mode [ 269.206855][ T9221] ip6gre5: entered promiscuous mode [ 269.206877][ T9221] ip6gre5: entered allmulticast mode [ 269.219820][ T5820] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.219917][ T5820] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.219955][ T5820] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.219991][ T5820] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.448015][ T5820] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 269.448234][ T5820] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 269.477283][ T5708] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 269.576607][ T9213] usb 4-1: Failed to early initialize device [ 269.637434][ T9213] usb 4-1: USB disconnect, device number 36 [ 269.638318][ T9251] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1062'. [ 269.667237][ T5670] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 269.768303][ T9223] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 269.919416][ T9223] usb 5-1: Using ep0 maxpacket: 16 [ 269.925421][ T9223] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 269.926954][ T9223] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 269.929682][ T9223] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 269.948462][ T9223] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.948515][ T9223] usb 5-1: Product: syz [ 269.948600][ T9223] usb 5-1: Manufacturer: syz [ 269.948636][ T9223] usb 5-1: SerialNumber: syz [ 270.013295][ T9223] usb 5-1: 0:2 : does not exist [ 270.139058][ T5677] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 270.237281][ T5670] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 270.290463][ T5677] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 270.297304][ T5677] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 270.297375][ T5677] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.297548][ T5677] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 270.297716][ T5677] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.347096][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 270.380288][ T5677] usb 3-1: config 0 descriptor?? [ 270.403987][ T5677] usb-storage 3-1:0.0: USB Mass Storage device detected [ 270.442195][ T5677] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 272.321745][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 272.452209][ T9277] netlink: 'syz.3.1068': attribute type 2 has an invalid length. [ 272.452233][ T9277] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1068'. [ 272.485664][ T9277] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 272.626805][ T9280] batadv_slave_0: entered promiscuous mode [ 272.644517][ T9279] batadv_slave_0: left promiscuous mode [ 272.646194][ T9281] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1070'. [ 272.710632][ T9223] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 272.807275][ T9283] ip_tables: iptables: counters copy to user failed while replacing table [ 273.122830][ T9223] usb 5-1: USB disconnect, device number 23 [ 273.357216][ C1] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 273.432813][ T5633] udevd[5633]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 273.638424][ T9223] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 273.809255][ T9223] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 273.811191][ T9223] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 273.811214][ T9223] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 273.811232][ T9223] usb 5-1: config 0 has no interface number 0 [ 273.811290][ T9223] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 273.811313][ T9223] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 273.811334][ T9223] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 273.816057][ T9223] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.816080][ T9223] usb 5-1: Product: syz [ 273.816094][ T9223] usb 5-1: Manufacturer: syz [ 273.816107][ T9223] usb 5-1: SerialNumber: syz [ 273.927346][ T9223] usb 5-1: config 0 descriptor?? [ 274.041707][ T9305] nvme nvme0: failed to connect socket: -111 [ 274.162704][ T9294] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1076'. [ 274.367981][ T5670] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 274.528046][ T5670] usb 6-1: Using ep0 maxpacket: 32 [ 274.528757][ T5670] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 274.530749][ T5670] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 274.530766][ T5670] usb 6-1: config 0 has no interface number 0 [ 274.530815][ T5670] usb 6-1: config 0 interface 12 has no altsetting 0 [ 274.596227][ T5670] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.596253][ T5670] usb 6-1: Product: syz [ 274.596268][ T5670] usb 6-1: Manufacturer: syz [ 274.596282][ T5670] usb 6-1: SerialNumber: syz [ 274.636906][ T5670] usb 6-1: config 0 descriptor?? [ 274.960841][ T9313] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1081'. [ 275.801514][ T5670] f81534 6-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 275.801565][ T5670] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 275.801581][ T5670] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 275.801670][ T5670] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 275.862129][ T5670] usb 6-1: USB disconnect, device number 11 [ 275.901164][ T9355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.923124][ T9355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.985385][ T9355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.990517][ T9355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.300832][ T9223] usbtouchscreen 5-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 276.357343][ T9223] usb 5-1: USB disconnect, device number 24 [ 277.377978][ T5669] usb 3-1: USB disconnect, device number 11 [ 277.498223][ T9223] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 277.667101][ T9223] usb 4-1: Using ep0 maxpacket: 8 [ 277.683680][ T9223] usb 4-1: unable to get BOS descriptor or descriptor too short [ 277.683736][ T9223] usb 4-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 1.40 [ 277.714687][ T9223] usb 4-1: config 1 has an invalid descriptor of length 145, skipping remainder of the config [ 277.714708][ T9223] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 277.731598][ T9223] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 277.731619][ T9223] usb 4-1: Manufacturer: syz [ 278.422006][ T32] kauditd_printk_skb: 40 callbacks suppressed [ 278.422022][ T32] audit: type=1326 audit(1790340608.748:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9377 comm="syz.2.1099" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0670d9e159 code=0x7ffc0000 [ 278.422289][ T32] audit: type=1326 audit(1790340608.748:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9377 comm="syz.2.1099" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0670d9e159 code=0x7ffc0000 [ 278.422907][ T32] audit: type=1326 audit(1790340608.748:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9377 comm="syz.2.1099" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f0670d9e159 code=0x7ffc0000 [ 278.423149][ T32] audit: type=1326 audit(1790340608.748:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9377 comm="syz.2.1099" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0670d9e159 code=0x7ffc0000 [ 278.423755][ T32] audit: type=1326 audit(1790340608.748:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9377 comm="syz.2.1099" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f0670d9e159 code=0x7ffc0000 [ 278.425308][ T32] audit: type=1326 audit(1790340608.748:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9377 comm="syz.2.1099" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0670d9e159 code=0x7ffc0000 [ 278.425356][ T32] audit: type=1326 audit(1790340608.748:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9377 comm="syz.2.1099" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0670d9e159 code=0x7ffc0000 [ 278.425786][ T32] audit: type=1326 audit(1790340608.748:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9377 comm="syz.2.1099" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0670d9e159 code=0x7ffc0000 [ 278.560039][ T32] audit: type=1326 audit(1790340608.878:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9377 comm="syz.2.1099" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0670d9e159 code=0x7ffc0000 [ 278.560096][ T32] audit: type=1326 audit(1790340608.878:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9377 comm="syz.2.1099" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0670d9e159 code=0x7ffc0000 [ 278.732192][ T9383] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1101'. [ 278.753877][ T9388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.767778][ T9388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.768565][ T9390] netlink: 'syz.4.1103': attribute type 1 has an invalid length. [ 278.881234][ T9394] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1103'. [ 278.898968][ T9390] bond2: entered promiscuous mode [ 278.901726][ T9390] 8021q: adding VLAN 0 to HW filter on device bond2 [ 279.387374][ T5677] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 279.517586][ T5677] usb 5-1: device descriptor read/64, error -71 [ 279.705553][ T9401] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1107'. [ 279.777331][ T5677] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 279.919190][ T5677] usb 5-1: device descriptor read/64, error -71 [ 280.038221][ T5677] usb usb5-port1: attempt power cycle [ 280.045040][ T9223] usb 4-1: 0:1 : does not exist [ 280.140257][ T9223] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 280.144856][ T9223] usb 4-1: USB disconnect, device number 37 [ 280.187126][ T5669] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 280.203111][ T5633] udevd[5633]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 280.337153][ T5669] usb 3-1: Using ep0 maxpacket: 32 [ 280.340657][ T5669] usb 3-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 280.340705][ T5669] usb 3-1: too many configurations: 17, using maximum allowed: 8 [ 280.342104][ T5669] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 280.342128][ T5669] usb 3-1: config 0 has no interface number 0 [ 280.342168][ T5669] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 280.342190][ T5669] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 280.354542][ T5669] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 280.354604][ T5669] usb 3-1: config 0 has no interface number 0 [ 280.354738][ T5669] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 280.354805][ T5669] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 280.364136][ T5669] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 280.364568][ T5669] usb 3-1: config 0 has no interface number 0 [ 280.364681][ T5669] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 280.364751][ T5669] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 280.378922][ T5669] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 280.378948][ T5669] usb 3-1: config 0 has no interface number 0 [ 280.379074][ T5669] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 280.379128][ T5669] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 280.403220][ T5669] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 280.403293][ T5669] usb 3-1: config 0 has no interface number 0 [ 280.403393][ T5669] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 280.403448][ T5669] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 280.428299][ T5669] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 280.428353][ T5669] usb 3-1: config 0 has no interface number 0 [ 280.428490][ T5669] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 280.428533][ T5669] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 280.442911][ T5669] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 280.442971][ T5669] usb 3-1: config 0 has no interface number 0 [ 280.443074][ T5669] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 280.443136][ T5669] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 280.454192][ T5669] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 280.454258][ T5669] usb 3-1: config 0 has no interface number 0 [ 280.454368][ T5669] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 280.454424][ T5669] usb 3-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 280.464398][ T5677] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 280.499427][ T5669] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.499453][ T5669] usb 3-1: Product: syz [ 280.499468][ T5669] usb 3-1: Manufacturer: syz [ 280.499483][ T5669] usb 3-1: SerialNumber: syz [ 280.509552][ T5677] usb 5-1: device descriptor read/8, error -71 [ 280.573434][ T5669] usb 3-1: config 0 descriptor?? [ 280.683552][ T5669] etas_es58x 3-1:0.2: Starting syz syz (Serial Number syz) [ 280.806553][ T5669] etas_es58x 3-1:0.2: could not parse product info: '424242424242' [ 280.822282][ T5677] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 280.857792][ T5677] usb 5-1: device descriptor read/8, error -71 [ 280.903872][ T9413] overlayfs: missing 'lowerdir' [ 280.957662][ T5677] usb usb5-port1: unable to enumerate USB device [ 281.023177][ T9408] fuse: fd is not a fuse device [ 281.217110][ T5669] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 281.279257][ C1] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 281.347119][ T5669] usb 4-1: device descriptor read/64, error -71 [ 281.539032][ T9223] usb 3-1: USB disconnect, device number 12 [ 281.542367][ T9223] etas_es58x 3-1:0.2: Disconnecting syz syz [ 281.589791][ T5669] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 281.719661][ T5669] usb 4-1: device descriptor read/64, error -71 [ 281.830332][ T5669] usb usb4-port1: attempt power cycle [ 282.170975][ T5669] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 282.188667][ T5669] usb 4-1: device descriptor read/8, error -71 [ 282.427444][ T5669] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 282.454059][ T5669] usb 4-1: device descriptor read/8, error -71 [ 282.566497][ T5669] usb usb4-port1: unable to enumerate USB device [ 282.703958][ T9443] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1115'. [ 282.787174][ T9223] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 282.948015][ T9223] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 282.950193][ T9223] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.983620][ T9223] usb 6-1: config 0 descriptor?? [ 282.998736][ T9223] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 283.206273][ T9456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.225534][ T9456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.450212][ T9456] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1118'. [ 283.511595][ T9223] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 283.511643][ T9223] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 283.985010][ T9479] batadv_slave_0: entered promiscuous mode [ 284.015400][ T9478] batadv_slave_0: left promiscuous mode [ 284.392755][ T9488] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 284.704856][ T9493] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1129'. [ 284.806640][ T32] kauditd_printk_skb: 25 callbacks suppressed [ 284.806671][ T32] audit: type=1326 audit(1790340615.128:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9480 comm="syz.3.1124" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a1f39e159 code=0x7ffc0000 [ 284.838373][ T32] audit: type=1326 audit(1790340615.128:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9480 comm="syz.3.1124" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a1f39e159 code=0x7ffc0000 [ 284.863811][ T32] audit: type=1326 audit(1790340615.188:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9480 comm="syz.3.1124" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f0a1f39e159 code=0x7ffc0000 [ 284.863901][ T32] audit: type=1326 audit(1790340615.188:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9480 comm="syz.3.1124" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a1f39e159 code=0x7ffc0000 [ 284.863975][ T32] audit: type=1326 audit(1790340615.188:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9480 comm="syz.3.1124" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a1f39e159 code=0x7ffc0000 [ 284.893345][ T32] audit: type=1326 audit(1790340615.218:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9480 comm="syz.3.1124" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f0a1f39e159 code=0x7ffc0000 [ 284.893398][ T32] audit: type=1326 audit(1790340615.218:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9480 comm="syz.3.1124" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a1f39e159 code=0x7ffc0000 [ 284.917584][ T32] audit: type=1326 audit(1790340615.218:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9480 comm="syz.3.1124" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a1f39e159 code=0x7ffc0000 [ 284.917767][ T32] audit: type=1326 audit(1790340615.218:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9480 comm="syz.3.1124" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0a1f39e159 code=0x7ffc0000 [ 284.936377][ T32] audit: type=1326 audit(1790340615.268:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9480 comm="syz.3.1124" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a1f39e159 code=0x7ffc0000 [ 285.117363][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 285.584257][ T5708] usb 6-1: USB disconnect, device number 12 [ 285.722552][ T9529] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1144'. [ 285.722851][ T9529] netlink: 592 bytes leftover after parsing attributes in process `syz.2.1144'. [ 285.723127][ T9529] netlink: 592 bytes leftover after parsing attributes in process `syz.2.1144'. [ 286.081525][ T9544] af_packet: tpacket_rcv: packet too big, clamped from 4096 to 3952. macoff=96 [ 287.199688][ T5677] usb 6-1: new low-speed USB device number 13 using dummy_hcd [ 287.283409][ T9573] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 287.353104][ T5677] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 287.354751][ T5677] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.354768][ T5677] usb 6-1: config 0 has no interfaces? [ 287.354809][ T5677] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.403061][ T5677] usb 6-1: config 0 descriptor?? [ 287.614195][ T9579] xt_hashlimit: max too large, truncated to 1048576 [ 287.677183][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 287.790688][ T9560] ip_tables: iptables: counters copy to user failed while replacing table [ 287.950920][ T9584] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1158'. [ 289.746783][ T5670] usb 6-1: USB disconnect, device number 13 [ 290.057111][ T9608] netlink: 'syz.3.1162': attribute type 5 has an invalid length. [ 291.011395][ T9623] netlink: 'syz.0.1168': attribute type 1 has an invalid length. [ 291.198620][ T9623] bond4: entered promiscuous mode [ 291.201049][ T9623] 8021q: adding VLAN 0 to HW filter on device bond4 [ 291.343953][ T9628] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1169'. [ 291.506015][ T9631] kvm: pic: non byte write [ 291.712397][ T9635] vimc link validate: Scaler:src:4096x2160 (0x33424752, 10, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 291.715167][ T32] kauditd_printk_skb: 25 callbacks suppressed [ 291.715181][ T32] audit: type=1326 audit(1790340622.038:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9614 comm="syz.5.1164" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca32d9e159 code=0x7ffc0000 [ 291.716429][ T32] audit: type=1326 audit(1790340622.038:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9614 comm="syz.5.1164" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca32d9e159 code=0x7ffc0000 [ 291.788746][ T32] audit: type=1326 audit(1790340622.098:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9614 comm="syz.5.1164" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fca32d9e159 code=0x7ffc0000 [ 291.788803][ T32] audit: type=1326 audit(1790340622.098:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9614 comm="syz.5.1164" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca32d9e159 code=0x7ffc0000 [ 291.844801][ T32] audit: type=1326 audit(1790340622.098:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9614 comm="syz.5.1164" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca32d9e159 code=0x7ffc0000 [ 291.844969][ T32] audit: type=1326 audit(1790340622.178:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9614 comm="syz.5.1164" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7fca32d9e159 code=0x7ffc0000 [ 291.845084][ T32] audit: type=1326 audit(1790340622.178:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9614 comm="syz.5.1164" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca32d9e159 code=0x7ffc0000 [ 291.845238][ T32] audit: type=1326 audit(1790340622.178:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9614 comm="syz.5.1164" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca32d9e159 code=0x7ffc0000 [ 291.846959][ T32] audit: type=1326 audit(1790340622.178:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9614 comm="syz.5.1164" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fca32d9e159 code=0x7ffc0000 [ 291.921799][ T32] audit: type=1326 audit(1790340622.228:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9614 comm="syz.5.1164" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca32d9e159 code=0x7ffc0000 [ 292.128348][ T9612] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 292.489106][ T9640] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1172'. [ 292.591786][ T5669] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 292.592168][ T5669] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 292.592502][ T5669] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 292.592807][ T5669] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 292.592839][ T5669] rtc rtc0: __rtc_set_alarm: err=-22 [ 292.814135][ T9647] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1175'. [ 293.367637][ T9661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.368156][ T9661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.373141][ T9661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.373651][ T9661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.382474][ T9661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.383584][ T9661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.073475][ T9680] tipc: Started in network mode [ 294.073522][ T9680] tipc: Node identity ac1414aa, cluster identity 4711 [ 294.074223][ T9680] tipc: Enabled bearer , priority 10 [ 294.077920][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 294.197219][ T9223] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 294.358072][ T9223] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 294.359662][ T9223] usb 3-1: config 0 has an invalid interface number: 117 but max is 0 [ 294.359687][ T9223] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.359720][ T9223] usb 3-1: config 0 has no interface number 0 [ 294.359785][ T9223] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 294.359809][ T9223] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 294.359830][ T9223] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 294.441505][ T9223] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.441560][ T9223] usb 3-1: Product: syz [ 294.441576][ T9223] usb 3-1: Manufacturer: syz [ 294.441591][ T9223] usb 3-1: SerialNumber: syz [ 294.482012][ T9223] usb 3-1: config 0 descriptor?? [ 294.548037][ T5670] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 294.698044][ T5670] usb 6-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 294.699060][ T5670] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.701851][ T5670] usb 6-1: config 0 descriptor?? [ 294.733517][ T9678] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1187'. [ 294.837852][ T5677] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 294.861828][ T9692] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1192'. [ 294.975265][ T5670] hackrf 6-1:0.0: usb_control_msg() failed -71 request 0e [ 294.975294][ T5670] hackrf 6-1:0.0: Could not detect board [ 294.975342][ T5670] hackrf 6-1:0.0: probe with driver hackrf failed with error -71 [ 294.996557][ T5670] usb 6-1: USB disconnect, device number 14 [ 295.003811][ T5677] usb 4-1: Using ep0 maxpacket: 16 [ 295.004593][ T5677] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 295.005336][ T5677] usb 4-1: config 0 has no interfaces? [ 295.021923][ T5677] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.021950][ T5677] usb 4-1: Product: syz [ 295.021966][ T5677] usb 4-1: Manufacturer: syz [ 295.021982][ T5677] usb 4-1: SerialNumber: syz [ 295.082671][ T5677] r8152-cfgselector 4-1: Unknown version 0x0000 [ 295.082734][ T5677] r8152-cfgselector 4-1: config 0 descriptor?? [ 295.187413][ T5669] tipc: Node number set to 2886997162 [ 295.508954][ T5677] r8152-cfgselector 4-1: USB disconnect, device number 42 [ 295.913208][ T9223] usbtouchscreen 3-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 295.939000][ T9223] usb 3-1: USB disconnect, device number 13 [ 295.997277][ C1] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 296.089414][ T5670] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 296.238120][ T5670] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 296.239392][ T5670] usb 5-1: config 1 has an invalid interface number: 27 but max is 1 [ 296.239414][ T5670] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 296.239431][ T5670] usb 5-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 296.239451][ T5670] usb 5-1: config 1 has no interface number 2 [ 296.242881][ T5670] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.242901][ T5670] usb 5-1: Product: syz [ 296.242917][ T5670] usb 5-1: Manufacturer: syz [ 296.242927][ T5670] usb 5-1: SerialNumber: syz [ 296.544722][ T9719] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1199'. [ 296.589708][ T9733] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1202'. [ 297.347218][ T9213] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 297.507563][ T9213] usb 3-1: Using ep0 maxpacket: 8 [ 297.508626][ T9213] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 297.511597][ T9213] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 297.511641][ T9213] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 297.511688][ T9213] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 297.571418][ T9213] usb 3-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 297.571446][ T9213] usb 3-1: Product: syz [ 297.571484][ T9213] usb 3-1: Manufacturer: syz [ 297.571499][ T9213] usb 3-1: SerialNumber: syz [ 297.604030][ T9213] usb 3-1: config 0 descriptor?? [ 297.767239][ T9213] rc_core: IR keymap rc-imon-rsc not found [ 297.767257][ T9213] Registered IR keymap rc-empty [ 297.768750][ T9213] rc rc0: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 297.771447][ T9213] input: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input40 [ 298.026496][ T5669] usb 3-1: USB disconnect, device number 14 [ 298.406409][ T9755] netlink: 'syz.5.1207': attribute type 1 has an invalid length. [ 298.514068][ T9755] bond1: entered promiscuous mode [ 298.515226][ T9755] 8021q: adding VLAN 0 to HW filter on device bond1 [ 298.647014][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 298.972120][ T5670] usb 5-1: selecting invalid altsetting 1 [ 298.972155][ T5670] speedtch 5-1:1.0: speedtch_bind: setting interface to 1 failed (-22)! [ 298.972203][ T5670] speedtch 5-1:1.0: usbatm_usb_probe: bind failed: -22! [ 298.972265][ T5670] speedtch 5-1:1.0: probe with driver speedtch failed with error -22 [ 299.065115][ T5670] usb 5-1: selecting invalid altsetting 1 [ 299.065136][ T5670] speedtch 5-1:1.27: speedtch_bind: setting interface to 1 failed (-22)! [ 299.065702][ T5670] speedtch 5-1:1.27: usbatm_usb_probe: bind failed: -22! [ 299.065758][ T5670] speedtch 5-1:1.27: probe with driver speedtch failed with error -22 [ 299.110506][ T5670] usb 5-1: selecting invalid altsetting 1 [ 299.110521][ T5670] speedtch 5-1:1.1: speedtch_bind: setting interface to 1 failed (-22)! [ 299.110951][ T5670] speedtch 5-1:1.1: usbatm_usb_probe: bind failed: -22! [ 299.110983][ T5670] speedtch 5-1:1.1: probe with driver speedtch failed with error -22 [ 299.177340][ T5670] usb 5-1: USB disconnect, device number 29 [ 299.821119][ T5669] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 299.874737][ T5669] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 300.192363][ T9796] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1222'. [ 300.661586][ T9784] netlink: 'syz.0.1218': attribute type 3 has an invalid length. [ 300.833426][ T9213] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 300.855926][ T9213] hid-generic 0000:0000:0000.0020: hidraw1: HID v0.00 Device [syz1] on syz0 [ 300.947832][ T5677] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 301.097304][ T5677] usb 5-1: Using ep0 maxpacket: 8 [ 301.098183][ T5677] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 301.101358][ T5677] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 301.101391][ T5677] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 301.101426][ T5677] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 301.101474][ T5677] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 301.101498][ T5677] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 301.101522][ T5677] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 301.101546][ T5677] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 301.101570][ T5677] usb 5-1: config 168 interface 0 has no altsetting 0 [ 301.103354][ T5677] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 301.103414][ T5677] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 301.103449][ T5677] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 301.103477][ T5677] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 301.103502][ T5677] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 301.103528][ T5677] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 301.103579][ T5677] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 301.103613][ T5677] usb 5-1: config 168 interface 0 has no altsetting 0 [ 301.104859][ T5677] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 301.104916][ T5677] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 301.104954][ T5677] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 301.104979][ T5677] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 301.105003][ T5677] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 301.105027][ T5677] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 301.105095][ T5677] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 301.105121][ T5677] usb 5-1: config 168 interface 0 has no altsetting 0 [ 301.235397][ T5677] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.235423][ T5677] usb 5-1: Product: syz [ 301.235437][ T5677] usb 5-1: Manufacturer: syz [ 301.235450][ T5677] usb 5-1: SerialNumber: syz [ 301.283715][ T9811] fido_id[9811]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 301.760009][ T5677] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 301.782897][ T5677] usb 5-1: USB disconnect, device number 30 [ 302.357763][ T9820] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1229'. [ 302.655130][ T9831] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1233'. [ 302.837547][ T5670] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 302.989214][ T5670] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 302.993765][ T5670] usb 5-1: config 1 has an invalid descriptor of length 112, skipping remainder of the config [ 302.993792][ T5670] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 303.011280][ T5670] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.011345][ T5670] usb 5-1: Product: syz [ 303.011383][ T5670] usb 5-1: Manufacturer: syz [ 303.011414][ T5670] usb 5-1: SerialNumber: syz [ 303.396774][ T5670] usb 5-1: unit 4 not found! [ 303.412979][ T9857] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.414353][ T9857] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.505004][ T5670] usb 5-1: USB disconnect, device number 31 [ 303.569789][ T5708] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 303.593384][ T5633] udevd[5633]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 303.722850][ T5708] usb 4-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00 [ 303.724403][ T5708] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 303.724453][ T5708] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 303.724474][ T5708] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 303.724513][ T5708] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.914304][ T9864] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1243'. [ 304.323039][ T5708] rtsx_usb 4-1:1.0: probe with driver rtsx_usb failed with error -71 [ 304.378053][ T5708] usb 4-1: USB disconnect, device number 43 [ 304.603362][ T9871] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1246'. [ 305.819828][ T9884] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.1249'. [ 305.966798][ T9881] syzkaller0: entered promiscuous mode [ 305.966829][ T9881] syzkaller0: entered allmulticast mode [ 306.666379][ T9897] FAULT_INJECTION: forcing a failure. [ 306.666379][ T9897] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 306.666633][ T9897] CPU: 1 UID: 0 PID: 9897 Comm: syz.4.1251 Tainted: G L syzkaller #0 PREEMPT(full) [ 306.666663][ T9897] Tainted: [L]=SOFTLOCKUP [ 306.666672][ T9897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 306.666690][ T9897] Call Trace: [ 306.666703][ T9897] [ 306.666713][ T9897] dump_stack_lvl+0xe8/0x150 [ 306.666747][ T9897] should_fail_ex+0x410/0x560 [ 306.666777][ T9897] _copy_to_user+0x31/0xb0 [ 306.666807][ T9897] simple_read_from_buffer+0xe1/0x170 [ 306.666843][ T9897] proc_fail_nth_read+0x1bb/0x230 [ 306.666863][ T9897] ? common_file_perm+0x20e/0x2b0 [ 306.666891][ T9897] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 306.666915][ T9897] ? rw_verify_area+0x24a/0x4c0 [ 306.666947][ T9897] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 306.666971][ T9897] vfs_read+0x213/0xa80 [ 306.667006][ T9897] ? __pfx___mutex_lock+0x10/0x10 [ 306.667043][ T9897] ? __pfx_vfs_read+0x10/0x10 [ 306.667094][ T9897] ? __fget_files+0x2a/0x420 [ 306.667129][ T9897] ? __fget_files+0x3a2/0x420 [ 306.667159][ T9897] ? __fget_files+0x2a/0x420 [ 306.667198][ T9897] ksys_read+0x150/0x270 [ 306.667234][ T9897] ? __pfx_ksys_read+0x10/0x10 [ 306.667280][ T9897] do_syscall_64+0x166/0x520 [ 306.667309][ T9897] ? trace_irq_disable+0x3b/0x140 [ 306.667332][ T9897] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.667355][ T9897] ? clear_bhb_loop+0x70/0xc0 [ 306.667382][ T9897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.667405][ T9897] RIP: 0033:0x7f10e295e98e [ 306.667427][ T9897] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 306.667445][ T9897] RSP: 002b:00007f10e0b92fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 306.667469][ T9897] RAX: ffffffffffffffda RBX: 00007f10e0b936c0 RCX: 00007f10e295e98e [ 306.667486][ T9897] RDX: 000000000000000f RSI: 00007f10e0b930a0 RDI: 000000000000000c [ 306.667499][ T9897] RBP: 00007f10e0b93090 R08: 0000000000000000 R09: 0000000000000000 [ 306.667513][ T9897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.667527][ T9897] R13: 00007f10e2c26308 R14: 00007f10e2c26270 R15: 00007f10e2d4fa48 [ 306.667563][ T9897] [ 308.090196][ T9920] netdevsim netdevsim2: Direct firmware load for . [ 308.090196][ T9920] failed with error -2 [ 308.090229][ T9920] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 308.090229][ T9920] [ 309.559934][ T9929] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.1261'. [ 310.777261][ T9918] ip6gre6: entered promiscuous mode [ 310.777284][ T9918] ip6gre6: entered allmulticast mode [ 311.025803][ T9938] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1264'. [ 311.047659][ T9940] ip_tables: iptables: counters copy to user failed while replacing table [ 311.334754][ T9944] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1268'. [ 311.474396][ T9949] loop8: detected capacity change from 0 to 16384 [ 311.696343][ T9955] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1270'. [ 311.943532][ T9956] loop8: detected capacity change from 16384 to 16383 [ 312.007191][ T9956] I/O error, dev loop8, sector 128 op 0x1:(WRITE) flags 0x804800 phys_seg 128 prio class 2 [ 312.007455][ T9956] Buffer I/O error on dev loop8, logical block 16, lost async page write [ 312.007563][ T9956] Buffer I/O error on dev loop8, logical block 17, lost async page write [ 312.007587][ T9956] Buffer I/O error on dev loop8, logical block 18, lost async page write [ 312.007609][ T9956] Buffer I/O error on dev loop8, logical block 19, lost async page write [ 312.007630][ T9956] Buffer I/O error on dev loop8, logical block 20, lost async page write [ 312.007650][ T9956] Buffer I/O error on dev loop8, logical block 21, lost async page write [ 312.007671][ T9956] Buffer I/O error on dev loop8, logical block 22, lost async page write [ 312.007717][ T9956] Buffer I/O error on dev loop8, logical block 23, lost async page write [ 312.007737][ T9956] Buffer I/O error on dev loop8, logical block 24, lost async page write [ 312.007758][ T9956] Buffer I/O error on dev loop8, logical block 25, lost async page write [ 312.014397][ T9956] I/O error, dev loop8, sector 1152 op 0x1:(WRITE) flags 0x804800 phys_seg 128 prio class 2 [ 312.131891][ T9956] I/O error, dev loop8, sector 2176 op 0x1:(WRITE) flags 0x804800 phys_seg 128 prio class 2 [ 312.134773][ T9956] I/O error, dev loop8, sector 3200 op 0x1:(WRITE) flags 0x804800 phys_seg 128 prio class 2 [ 312.136766][ T9956] I/O error, dev loop8, sector 4224 op 0x1:(WRITE) flags 0x800800 phys_seg 80 prio class 2 [ 312.194833][ T9956] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 312.194950][ T9956] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 312.195019][ T9956] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 312.195113][ T9956] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 312.195238][ T9956] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 312.195428][ T9956] ldm_validate_partition_table(): Disk read failed. [ 312.195585][ T9956] Dev loop8: unable to read RDB block 0 [ 312.195906][ T9956] loop8: unable to read partition table [ 312.196245][ T9956] loop_reread_partitions: partition scan of loop8 (() failed (rc=-5) [ 312.637267][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 313.916075][ T9986] fuse: fd is not a fuse device [ 314.017088][ T9223] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 314.128976][ T9993] veth1_to_hsr: entered allmulticast mode [ 314.130993][ T9993] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 314.178240][ T9223] usb 5-1: Using ep0 maxpacket: 16 [ 314.180060][ T9223] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 314.199564][ T9223] usb 5-1: config 0 has no interfaces? [ 314.205062][ T9223] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.205089][ T9223] usb 5-1: Product: syz [ 314.205133][ T9223] usb 5-1: Manufacturer: syz [ 314.205150][ T9223] usb 5-1: SerialNumber: syz [ 314.240215][ T9223] r8152-cfgselector 5-1: Unknown version 0x0000 [ 314.240266][ T9223] r8152-cfgselector 5-1: config 0 descriptor?? [ 314.241467][ T9993] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 314.706489][ T5708] r8152-cfgselector 5-1: USB disconnect, device number 32 [ 315.024864][T10007] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1286'. [ 315.269284][ T32] kauditd_printk_skb: 31 callbacks suppressed [ 315.269304][ T32] audit: type=1326 audit(1790340645.598:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10013 comm="syz.3.1288" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a1f39e159 code=0x7ffc0000 [ 315.269443][ T32] audit: type=1326 audit(1790340645.598:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10013 comm="syz.3.1288" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a1f39e159 code=0x7ffc0000 [ 315.272839][ T32] audit: type=1326 audit(1790340645.598:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10013 comm="syz.3.1288" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0a1f39e159 code=0x7ffc0000 [ 315.272914][ T32] audit: type=1326 audit(1790340645.598:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10013 comm="syz.3.1288" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a1f39e159 code=0x7ffc0000 [ 315.272946][ T32] audit: type=1326 audit(1790340645.598:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10013 comm="syz.3.1288" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a1f39e159 code=0x7ffc0000 [ 315.273856][ T32] audit: type=1326 audit(1790340645.598:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10013 comm="syz.3.1288" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f0a1f39e159 code=0x7ffc0000 [ 315.274061][ T32] audit: type=1326 audit(1790340645.598:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10013 comm="syz.3.1288" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a1f39e159 code=0x7ffc0000 [ 315.275708][ T32] audit: type=1326 audit(1790340645.598:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10013 comm="syz.3.1288" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a1f39e159 code=0x7ffc0000 [ 315.284754][ T32] audit: type=1326 audit(1790340645.608:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10013 comm="syz.3.1288" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0a1f39e159 code=0x7ffc0000 [ 315.383731][ T32] audit: type=1326 audit(1790340645.648:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10013 comm="syz.3.1288" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a1f39e159 code=0x7ffc0000 [ 316.107136][ T5670] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 316.118857][ T5708] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 316.257093][ T5670] usb 6-1: Using ep0 maxpacket: 32 [ 316.258019][ T5670] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 316.259532][ T5670] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.259562][ T5670] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 58999, setting to 1024 [ 316.259604][ T5670] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.264524][ T5670] usb 6-1: config 0 descriptor?? [ 316.266023][T10020] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 316.270364][ T5708] usb 5-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 316.316035][ T5708] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 316.316099][ T5708] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 316.316255][ T5708] usb 5-1: config 1 interface 1 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 316.347763][ T5670] hub 6-1:0.0: USB hub found [ 316.379985][ T5708] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.380044][ T5708] usb 5-1: Product: syz [ 316.380061][ T5708] usb 5-1: Manufacturer: syz [ 316.380077][ T5708] usb 5-1: SerialNumber: syz [ 316.486380][ T5670] hub 6-1:0.0: 1 port detected [ 316.667234][ T5708] usb 5-1: 0:2 : does not exist [ 316.883089][ T5708] usb 5-1: USB disconnect, device number 33 [ 317.118539][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 317.119458][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 317.122316][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.122374][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.262570][ T5670] usb 6-1: reset high-speed USB device number 15 using dummy_hcd [ 317.397521][T10045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.397930][T10045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.457789][ T9213] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 317.462449][T10053] loop5: detected capacity change from 0 to 7 [ 317.465139][T10053] loop5: p1 p3 p4 [ 317.465192][T10053] loop5: partition table partially beyond EOD, truncated [ 317.465390][T10053] loop5: p1 size 128 extends beyond EOD, truncated [ 317.503973][T10053] loop5: p3 size 3645588866 extends beyond EOD, truncated [ 317.519696][ T5670] usb 6-1: device descriptor read/64, error -32 [ 317.617877][ T9213] usb 4-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice= 1.00 [ 317.619206][ T9213] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 317.619251][ T9213] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 317.619271][ T9213] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 317.619335][ T9213] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.744164][ T5633] udevd[5633]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 317.746896][ T5622] udevd[5622]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 317.758116][ T5670] usb 6-1: reset high-speed USB device number 15 using dummy_hcd [ 317.772206][ T5617] udevd[5617]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 317.970110][T10063] tipc: Enabled bearer , priority 10 [ 318.159306][ T9213] rtsx_usb 4-1:1.0: probe with driver rtsx_usb failed with error -71 [ 318.189353][ T9213] usb 4-1: USB disconnect, device number 44 [ 318.301692][T10067] FAULT_INJECTION: forcing a failure. [ 318.301692][T10067] name failslab, interval 1, probability 0, space 0, times 0 [ 318.301728][T10067] CPU: 1 UID: 0 PID: 10067 Comm: syz.0.1306 Tainted: G L syzkaller #0 PREEMPT(full) [ 318.301755][T10067] Tainted: [L]=SOFTLOCKUP [ 318.301763][T10067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 318.301775][T10067] Call Trace: [ 318.301783][T10067] [ 318.301791][T10067] dump_stack_lvl+0xe8/0x150 [ 318.301827][T10067] should_fail_ex+0x410/0x560 [ 318.301857][T10067] should_failslab+0xa8/0x100 [ 318.301883][T10067] ? dst_alloc+0x105/0x170 [ 318.301904][T10067] kmem_cache_alloc_noprof+0xa1/0x600 [ 318.301937][T10067] ? __pfx_find_exception+0x10/0x10 [ 318.301957][T10067] ? dst_alloc+0x105/0x170 [ 318.301977][T10067] ? fib_lookup+0x76/0x440 [ 318.302000][T10067] dst_alloc+0x105/0x170 [ 318.302025][T10067] ip_route_output_key_hash_rcu+0x14ac/0x2720 [ 318.302057][T10067] ? ip_route_output_key_hash+0xd8/0x2a0 [ 318.302081][T10067] ip_route_output_key_hash+0x18d/0x2a0 [ 318.302114][T10067] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 318.302142][T10067] ? lock_acquire+0x115/0x350 [ 318.302174][T10067] ip_route_output_flow+0x2a/0x150 [ 318.302205][T10067] ? security_sk_classify_flow+0x6d/0x150 [ 318.302242][T10067] udp_sendmsg+0x144a/0x2140 [ 318.302285][T10067] ? __pfx_udp_sendmsg+0x10/0x10 [ 318.302315][T10067] ? __css_rstat_updated+0x237/0x540 [ 318.302344][T10067] ? __pfx___css_rstat_updated+0x10/0x10 [ 318.302377][T10067] ? count_memcg_event_mm+0x21/0x260 [ 318.302411][T10067] ? count_memcg_event_mm+0x21/0x260 [ 318.302437][T10067] ? count_memcg_event_mm+0x21/0x260 [ 318.302470][T10067] ? begin_current_label_crit_section+0x2a3/0x830 [ 318.302509][T10067] udpv6_sendmsg+0x915/0x2610 [ 318.302550][T10067] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 318.302572][T10067] ? rcu_is_watching+0x16/0xb0 [ 318.302606][T10067] ? __pfx___up_read+0x10/0x10 [ 318.302652][T10067] ? __pfx_current_check_autobind_udp_socket+0x10/0x10 [ 318.302705][T10067] ? inet_send_prepare+0x5b/0x260 [ 318.302729][T10067] ? inet6_sendmsg+0xe4/0x120 [ 318.302749][T10067] ? __pfx_inet6_sendmsg+0x10/0x10 [ 318.302767][T10067] sock_sendmsg_nosec+0x90/0x180 [ 318.302791][T10067] ____sys_sendmsg+0x54e/0x850 [ 318.302824][T10067] ? __pfx_____sys_sendmsg+0x10/0x10 [ 318.302861][T10067] ? import_iovec+0x73/0xa0 [ 318.302890][T10067] ___sys_sendmsg+0x2a5/0x360 [ 318.302916][T10067] ? __lock_acquire+0x747/0x2de0 [ 318.302940][T10067] ? __pfx____sys_sendmsg+0x10/0x10 [ 318.302973][T10067] ? kstrtouint+0x6e/0xe0 [ 318.303016][T10067] ? __fget_files+0x2a/0x420 [ 318.303042][T10067] ? __fget_files+0x3a2/0x420 [ 318.303078][T10067] __sys_sendmmsg+0x273/0x4d0 [ 318.303111][T10067] ? __pfx___sys_sendmmsg+0x10/0x10 [ 318.303148][T10067] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 318.303188][T10067] ? ksys_write+0x242/0x270 [ 318.303220][T10067] ? __pfx_ksys_write+0x10/0x10 [ 318.303256][T10067] __x64_sys_sendmmsg+0xa0/0xc0 [ 318.303286][T10067] do_syscall_64+0x166/0x520 [ 318.303316][T10067] ? trace_irq_disable+0x3b/0x140 [ 318.303336][T10067] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.303356][T10067] ? clear_bhb_loop+0x70/0xc0 [ 318.303380][T10067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.303400][T10067] RIP: 0033:0x7fa16279e159 [ 318.303417][T10067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 318.303434][T10067] RSP: 002b:00007fa1636a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 318.303455][T10067] RAX: ffffffffffffffda RBX: 00007fa162a25fa0 RCX: 00007fa16279e159 [ 318.303470][T10067] RDX: 0400000000000172 RSI: 0000200000003cc0 RDI: 0000000000000003 [ 318.303484][T10067] RBP: 00007fa1636a3090 R08: 0000000000000000 R09: 0000000000000000 [ 318.303497][T10067] R10: 0000000004001c00 R11: 0000000000000246 R12: 0000000000000001 [ 318.303509][T10067] R13: 00007fa162a26038 R14: 00007fa162a25fa0 R15: 00007fa162b4fa48 [ 318.303540][T10067] [ 318.379340][ T9215] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 318.586538][ T5708] usb 6-1: USB disconnect, device number 15 [ 318.798686][ T9215] usb 5-1: Using ep0 maxpacket: 32 [ 318.803491][ T9215] usb 5-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 318.821920][ T9215] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.821951][ T9215] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 318.821976][ T9215] usb 5-1: config 0 interface 0 has no altsetting 0 [ 318.822033][ T9215] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.912576][ T9215] usb 5-1: config 0 descriptor?? [ 318.972782][T10070] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1307'. [ 318.972814][T10070] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1307'. [ 319.001109][T10071] FAULT_INJECTION: forcing a failure. [ 319.001109][T10071] name failslab, interval 1, probability 0, space 0, times 0 [ 319.001145][T10071] CPU: 1 UID: 0 PID: 10071 Comm: syz.5.1308 Tainted: G L syzkaller #0 PREEMPT(full) [ 319.001171][T10071] Tainted: [L]=SOFTLOCKUP [ 319.001178][T10071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 319.001192][T10071] Call Trace: [ 319.001202][T10071] [ 319.001208][T10071] dump_stack_lvl+0xe8/0x150 [ 319.001238][T10071] should_fail_ex+0x410/0x560 [ 319.001277][T10071] should_failslab+0xa8/0x100 [ 319.001305][T10071] __kmalloc_cache_noprof+0xa3/0x600 [ 319.001326][T10071] ? __kmalloc_cache_noprof+0x14d/0x600 [ 319.001344][T10071] ? sctp_add_bind_addr+0x8c/0x370 [ 319.001365][T10071] ? sctp_add_bind_addr+0x8c/0x370 [ 319.001382][T10071] sctp_add_bind_addr+0x8c/0x370 [ 319.001399][T10071] sctp_copy_local_addr_list+0x31a/0x4e0 [ 319.001448][T10071] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 319.001480][T10071] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 319.001516][T10071] ? sctp_v6_is_any+0x64/0x80 [ 319.001532][T10071] ? sctp_copy_one_addr+0x93/0x360 [ 319.001558][T10071] sctp_bind_addr_copy+0xb3/0x3c0 [ 319.001605][T10071] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 319.001636][T10071] sctp_connect_new_asoc+0x2ff/0x6b0 [ 319.001667][T10071] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 319.001690][T10071] ? sctp_get_af_specific+0x29/0x80 [ 319.001703][T10071] ? sctp_inet6_send_verify+0x80/0x300 [ 319.001729][T10071] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 319.001758][T10071] __sctp_connect+0x5cb/0xdc0 [ 319.001794][T10071] ? __pfx___sctp_connect+0x10/0x10 [ 319.001816][T10071] ? security_sctp_bind_connect+0x7e/0x2c0 [ 319.001841][T10071] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 319.001866][T10071] sctp_getsockopt_connectx3+0x227/0x360 [ 319.001899][T10071] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 319.001925][T10071] ? sctp_getsockopt+0x12f/0xb90 [ 319.001950][T10071] ? __local_bh_enable_ip+0xd6/0x140 [ 319.001985][T10071] sctp_getsockopt+0x984/0xb90 [ 319.002002][T10071] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 319.002020][T10071] do_sock_getsockopt+0x51d/0x7e0 [ 319.002062][T10071] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 319.002106][T10071] ? __fget_files+0x3a2/0x420 [ 319.002136][T10071] ? __fget_files+0x2a/0x420 [ 319.002162][T10071] __x64_sys_getsockopt+0x1a4/0x240 [ 319.002201][T10071] do_syscall_64+0x166/0x520 [ 319.002235][T10071] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.002255][T10071] ? clear_bhb_loop+0x70/0xc0 [ 319.002278][T10071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.002300][T10071] RIP: 0033:0x7fca32d9e159 [ 319.002313][T10071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.002326][T10071] RSP: 002b:00007fca33c87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 319.002355][T10071] RAX: ffffffffffffffda RBX: 00007fca33025fa0 RCX: 00007fca32d9e159 [ 319.002371][T10071] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 319.002384][T10071] RBP: 00007fca33c87090 R08: 0000200000000240 R09: 0000000000000000 [ 319.002397][T10071] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 319.002410][T10071] R13: 00007fca33026038 R14: 00007fca33025fa0 R15: 00007fca3314fa48 [ 319.002446][T10071] [ 319.292879][T10065] fuse: Invalid gid '00000000000000000000004' [ 319.475608][T10065] syzkaller0: entered promiscuous mode [ 319.475631][T10065] syzkaller0: entered allmulticast mode [ 319.509104][T10065] netlink: 2724 bytes leftover after parsing attributes in process `syz.4.1305'. [ 319.509290][T10065] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1305'. [ 319.509312][T10065] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1305'. [ 319.544394][T10065] TC_ACT_REPEAT abuse ? [ 319.603905][T10082] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1309'. [ 319.856232][ T9215] greenasia 0003:0E8F:0012.0021: no output reports found [ 319.880524][ T9215] greenasia 0003:0E8F:0012.0021: hidraw0: USB HID v80.00 Joystick [HID 0e8f:0012] on usb-dummy_hcd.4-1/input0 [ 319.905713][T10087] FAULT_INJECTION: forcing a failure. [ 319.905713][T10087] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 319.905744][T10087] CPU: 1 UID: 0 PID: 10087 Comm: syz.0.1312 Tainted: G L syzkaller #0 PREEMPT(full) [ 319.905765][T10087] Tainted: [L]=SOFTLOCKUP [ 319.905772][T10087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 319.905799][T10087] Call Trace: [ 319.905808][T10087] [ 319.905817][T10087] dump_stack_lvl+0xe8/0x150 [ 319.905853][T10087] should_fail_ex+0x410/0x560 [ 319.905882][T10087] _copy_from_user+0x2d/0xb0 [ 319.905955][T10087] __sys_bind+0x1c6/0x410 [ 319.905983][T10087] ? __pfx___sys_bind+0x10/0x10 [ 319.906017][T10087] ? __pfx_ksys_write+0x10/0x10 [ 319.906060][T10087] __x64_sys_bind+0x7a/0x90 [ 319.906077][T10087] do_syscall_64+0x166/0x520 [ 319.906096][T10087] ? trace_irq_disable+0x3b/0x140 [ 319.906137][T10087] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.906157][T10087] ? clear_bhb_loop+0x70/0xc0 [ 319.906180][T10087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.906203][T10087] RIP: 0033:0x7fa16279e159 [ 319.906217][T10087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.906230][T10087] RSP: 002b:00007fa1636a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 319.906245][T10087] RAX: ffffffffffffffda RBX: 00007fa162a25fa0 RCX: 00007fa16279e159 [ 319.906289][T10087] RDX: 000000000000001c RSI: 0000200000000140 RDI: 0000000000000003 [ 319.906304][T10087] RBP: 00007fa1636a3090 R08: 0000000000000000 R09: 0000000000000000 [ 319.906318][T10087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.906330][T10087] R13: 00007fa162a26038 R14: 00007fa162a25fa0 R15: 00007fa162b4fa48 [ 319.906362][T10087] [ 320.321249][ T5708] usb 5-1: USB disconnect, device number 34 [ 321.099242][ T9223] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 321.540782][ T9223] usb 3-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 321.543484][ T9223] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.002830][ T9223] wacom 0003:056A:033B.0022: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 322.042683][ T9223] wacom 0003:056A:033B.0022: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.2-1/input0 [ 322.066726][ T9223] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:056A:033B.0022/input/input42 [ 322.230824][ T9223] usb 3-1: USB disconnect, device number 15 [ 322.237234][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 322.326940][T10122] fido_id[10122]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 323.647400][ T5708] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 323.804559][ T5708] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 323.806868][ T5708] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 323.806894][ T5708] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 323.806915][ T5708] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 323.863376][ T5708] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 323.863404][ T5708] usb 5-1: Product: syz [ 323.863421][ T5708] usb 5-1: Manufacturer: syz [ 323.863436][ T5708] usb 5-1: SerialNumber: syz [ 324.126371][ T5708] usblp 5-1:1.0: usblp1: USB Unidirectional printer dev 35 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 324.178440][T10182] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1350'. [ 324.325414][ T5708] usb 5-1: USB disconnect, device number 35 [ 324.346914][T10189] netlink: 79 bytes leftover after parsing attributes in process `syz.2.1353'. [ 324.366367][ T5708] usblp1: removed [ 325.437175][ C1] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 327.279480][ T9215] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 327.440493][ T9215] usb 3-1: unable to get BOS descriptor or descriptor too short [ 327.441183][ T9215] usb 3-1: not running at top speed; connect to a high speed hub [ 327.441217][ T9215] usb 3-1: New USB device found, idVendor=0582, idProduct=0027, bcdDevice= 0.40 [ 327.442742][ T9215] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 327.442774][ T9215] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 327.495388][ T9215] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.495450][ T9215] usb 3-1: Product: syz [ 327.495466][ T9215] usb 3-1: Manufacturer: syz [ 327.495500][ T9215] usb 3-1: SerialNumber: syz [ 327.537300][T10266] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 327.537434][T10266] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 327.627192][ T5670] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 327.762352][ T9215] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 327.763617][ T9215] usb 3-1: invalid MIDI in EP 0 [ 327.786762][ T5670] usb 4-1: not running at top speed; connect to a high speed hub [ 327.786844][ T5670] usb 4-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 327.796358][ T5670] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 327.816644][ T5670] usb 4-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 327.816666][ T5670] usb 4-1: Product: syz [ 327.816680][ T5670] usb 4-1: Manufacturer: syz [ 327.865924][ T5670] uvcvideo 4-1:1.0: Found UVC 1.00 device syz (225a:e1d4) [ 328.084144][ T5670] uvcvideo 4-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 328.085976][ T5670] uvcvideo 4-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 328.086031][ T5670] uvcvideo 4-1:1.1: Failed to initialize the device (-71). [ 328.135762][ T5670] uvcvideo 4-1:1.0: probe with driver uvcvideo failed with error -71 [ 328.175556][ T5670] usb 4-1: USB disconnect, device number 45 [ 328.285848][ T9215] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 328.305998][ T9215] usb 3-1: USB disconnect, device number 16 [ 328.573634][ T5632] udevd[5632]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 329.128628][ T9215] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 329.277078][ T9215] usb 3-1: Using ep0 maxpacket: 16 [ 329.277936][ T9215] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 329.279272][ T9215] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 329.279296][ T9215] usb 3-1: config 1 has no interface number 0 [ 329.279334][ T9215] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 329.279383][ T9215] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 329.279407][ T9215] usb 3-1: config 1 interface 105 has no altsetting 0 [ 329.283720][ T9215] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 329.283746][ T9215] usb 3-1: Product: syz [ 329.283762][ T9215] usb 3-1: Manufacturer: syz [ 329.283778][ T9215] usb 3-1: SerialNumber: syz [ 329.377216][T10317] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 329.377377][T10317] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 329.797605][T10317] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 329.797751][T10317] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 330.001438][ T9215] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 330.001722][ T9215] aqc111 3-1:1.105: probe with driver aqc111 failed with error -71 [ 330.036254][ T9215] usb 3-1: USB disconnect, device number 17 [ 330.142910][T10345] tipc: Bearer : already 2 bearers with priority 10 [ 330.142941][T10345] tipc: Bearer : trying with adjusted priority [ 330.143409][T10345] tipc: Enabling of bearer rejected, failed to enable media [ 330.185379][T10345] tipc: Bearer : already 2 bearers with priority 10 [ 330.185396][T10345] tipc: Bearer : trying with adjusted priority [ 330.187547][T10345] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 330.211475][T10345] tipc: Enabled bearer , priority 9 [ 333.053324][ T32] kauditd_printk_skb: 74 callbacks suppressed [ 333.053339][ T32] audit: type=1326 audit(1790340663.378:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10401 comm="syz.0.1439" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16279e159 code=0x7ffc0000 [ 333.053370][ T32] audit: type=1326 audit(1790340663.378:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10401 comm="syz.0.1439" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16279e159 code=0x7ffc0000 [ 333.054812][ T32] audit: type=1326 audit(1790340663.378:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10401 comm="syz.0.1439" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7fa16279e159 code=0x7ffc0000 [ 333.077678][ T32] audit: type=1326 audit(1790340663.378:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10401 comm="syz.0.1439" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16279e159 code=0x7ffc0000 [ 333.077818][ T32] audit: type=1326 audit(1790340663.398:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10401 comm="syz.0.1439" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16279e159 code=0x7ffc0000 [ 333.224291][ T32] audit: type=1326 audit(1790340663.548:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10407 comm="syz.3.1440" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a1f39e159 code=0x7ffc0000 [ 333.224345][ T32] audit: type=1326 audit(1790340663.548:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10407 comm="syz.3.1440" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a1f39e159 code=0x7ffc0000 [ 333.290028][ T32] audit: type=1326 audit(1790340663.608:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10407 comm="syz.3.1440" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0a1f39e159 code=0x7ffc0000 [ 333.290111][ T32] audit: type=1326 audit(1790340663.608:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10407 comm="syz.3.1440" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a1f39e159 code=0x7ffc0000 [ 333.290153][ T32] audit: type=1326 audit(1790340663.608:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10407 comm="syz.3.1440" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a1f39e159 code=0x7ffc0000 [ 333.857762][T10413] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1442'. [ 334.040778][T10416] kvm: pic: non byte write [ 334.357117][ T5669] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 334.389699][T10425] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 334.519825][ T5669] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 334.526044][ T5669] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 334.526068][ T5669] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 334.561449][ T5669] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.561474][ T5669] usb 5-1: Product: syz [ 334.561502][ T5669] usb 5-1: Manufacturer: syz [ 334.561517][ T5669] usb 5-1: SerialNumber: syz [ 334.638927][ T5669] usb 5-1: 0:2 : does not exist [ 334.639002][ T5669] usb 5-1: unit 9 not found! [ 334.867430][T10431] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 335.201695][ T5669] usb 5-1: 4:0: cannot get min/max values for control 1 (id 4) [ 335.448512][ T5669] usb 5-1: USB disconnect, device number 36 [ 335.553703][ T5633] udevd[5633]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 336.002013][T10445] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1453'. [ 336.382912][T10456] syz.5.1457 (10456): drop_caches: 2 [ 336.459281][T10452] syz.3.1456 (10452): drop_caches: 2 [ 337.008703][T10474] bridge0: port 1(gretap0) entered blocking state [ 337.008829][T10474] bridge0: port 1(gretap0) entered disabled state [ 337.009005][T10474] gretap0: entered allmulticast mode [ 337.018929][T10474] gretap0: entered promiscuous mode [ 337.050884][T10474] bridge0: port 1(gretap0) entered blocking state [ 337.051173][T10474] bridge0: port 1(gretap0) entered forwarding state [ 337.118883][T10478] tipc: Enabling of bearer rejected, already enabled [ 337.337071][ T9223] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 337.507058][ T9223] usb 3-1: Using ep0 maxpacket: 8 [ 337.507851][ T9223] usb 3-1: New USB device found, idVendor=2b73, idProduct=000a, bcdDevice= 0.40 [ 337.508645][ T9223] usb 3-1: config 0 has no interfaces? [ 337.512723][ T9223] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.512750][ T9223] usb 3-1: Product: syz [ 337.512795][ T9223] usb 3-1: Manufacturer: syz [ 337.512810][ T9223] usb 3-1: SerialNumber: syz [ 337.561180][ T9223] usb 3-1: config 0 descriptor?? [ 337.717495][ T1228] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 337.869895][ T1228] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 337.890551][ T1228] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.890568][ T1228] usb 5-1: Product: syz [ 337.890578][ T1228] usb 5-1: Manufacturer: syz [ 337.890587][ T1228] usb 5-1: SerialNumber: syz [ 338.365480][ T1228] rtl8150 5-1:1.0: couldn't reset the device [ 338.365825][ T1228] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 338.435943][ T1228] usb 5-1: USB disconnect, device number 37 [ 339.417402][T10498] syz.3.1471 (10498): drop_caches: 2 [ 339.488155][T10499] netdevsim netdevsim4: Direct firmware load for . [ 339.488155][T10499] failed with error -2 [ 339.488181][T10499] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 339.488181][T10499] [ 339.589756][T10504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.590288][T10504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.726127][ T32] kauditd_printk_skb: 18 callbacks suppressed [ 339.726146][ T32] audit: type=1326 audit(1790340670.048:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10509 comm="syz.3.1474" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a1f39e159 code=0x7ffc0000 [ 339.726191][ T32] audit: type=1326 audit(1790340670.048:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10509 comm="syz.3.1474" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a1f39e159 code=0x7ffc0000 [ 339.777814][ T32] audit: type=1326 audit(1790340670.098:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10509 comm="syz.3.1474" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0a1f39e159 code=0x7ffc0000 [ 339.777979][ T32] audit: type=1326 audit(1790340670.098:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10509 comm="syz.3.1474" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a1f39e159 code=0x7ffc0000 [ 339.778078][ T32] audit: type=1326 audit(1790340670.108:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10509 comm="syz.3.1474" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a1f39e159 code=0x7ffc0000 [ 339.814778][ T32] audit: type=1326 audit(1790340670.138:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10509 comm="syz.3.1474" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f0a1f39e159 code=0x7ffc0000 [ 339.814923][ T32] audit: type=1326 audit(1790340670.138:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10509 comm="syz.3.1474" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a1f39e159 code=0x7ffc0000 [ 339.815060][ T32] audit: type=1326 audit(1790340670.138:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10509 comm="syz.3.1474" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a1f39e159 code=0x7ffc0000 [ 339.848337][ T32] audit: type=1326 audit(1790340670.168:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10509 comm="syz.3.1474" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0a1f39e159 code=0x7ffc0000 [ 339.891413][ T32] audit: type=1326 audit(1790340670.208:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10509 comm="syz.3.1474" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a1f39e159 code=0x7ffc0000 [ 340.013371][ T1228] usb 3-1: USB disconnect, device number 18 [ 340.200689][T10515] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1476'. [ 340.358374][T10519] netlink: 348 bytes leftover after parsing attributes in process `syz.3.1477'. [ 340.697806][ T9215] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 340.857760][ T9215] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 340.859082][ T9215] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 340.859106][ T9215] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 340.859125][ T9215] usb 4-1: config 0 has no interface number 0 [ 340.862825][ T9215] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.862850][ T9215] usb 4-1: Product: syz [ 340.862868][ T9215] usb 4-1: Manufacturer: syz [ 340.862879][ T9215] usb 4-1: SerialNumber: syz [ 340.866541][ T9215] usb 4-1: config 0 descriptor?? [ 340.918822][ T1228] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 341.067230][ T1228] usb 6-1: Using ep0 maxpacket: 16 [ 341.069274][ T1228] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 341.070110][ T1228] usb 6-1: config 0 has no interfaces? [ 341.075358][ T1228] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.075381][ T1228] usb 6-1: Product: syz [ 341.075395][ T1228] usb 6-1: Manufacturer: syz [ 341.075409][ T1228] usb 6-1: SerialNumber: syz [ 341.107489][ T1228] usb 6-1: config 0 descriptor?? [ 341.301222][ T9215] uvcvideo 4-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 341.301263][ T9215] uvcvideo 4-1:0.64: No valid video chain found. [ 341.489177][ T1228] usb 6-1: USB disconnect, device number 16 [ 341.719591][T10540] syz.2.1484 (10540): drop_caches: 2 [ 341.834643][T10542] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1485'. [ 342.519977][T10552] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1488'. [ 343.325789][T10567] wireguard1: entered promiscuous mode [ 343.459729][ T5670] usb 4-1: USB disconnect, device number 46 [ 344.373022][T10578] syz.3.1495 (10578): drop_caches: 2 [ 344.797504][ T4932] Bluetooth: hci5: command 0x0406 tx timeout [ 344.988278][T10598] batadv_slave_0: entered promiscuous mode [ 344.995611][T10597] batadv_slave_0: left promiscuous mode [ 345.315444][T10600] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1503'. [ 345.368438][T10600] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1503'. [ 345.709162][T10614] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 345.867198][ T1228] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 346.017096][ T1228] usb 3-1: Using ep0 maxpacket: 8 [ 346.019644][ T1228] usb 3-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=cd.b4 [ 346.025329][ T1228] usb 3-1: config index 0 descriptor too short (expected 1821, got 853) [ 346.025365][ T1228] usb 3-1: config 0 has an invalid interface number: 103 but max is 2 [ 346.025401][ T1228] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 346.025447][ T1228] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 346.025468][ T1228] usb 3-1: config 0 has no interface number 0 [ 346.025502][ T1228] usb 3-1: config 0 interface 103 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 346.025518][ T1228] usb 3-1: config 0 interface 103 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 346.025554][ T1228] usb 3-1: config 0 interface 103 has no altsetting 0 [ 346.069242][ T1228] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.069308][ T1228] usb 3-1: Product: syz [ 346.069344][ T1228] usb 3-1: Manufacturer: syz [ 346.069381][ T1228] usb 3-1: SerialNumber: syz [ 346.134334][ T1228] usb 3-1: config 0 descriptor?? [ 346.153798][T10621] syz.5.1510 (10621): drop_caches: 2 [ 346.302934][ T32] kauditd_printk_skb: 70 callbacks suppressed [ 346.302952][ T32] audit: type=1326 audit(1790340676.628:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10623 comm="syz.5.1511" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca32d9e159 code=0x7ffc0000 [ 346.303090][ T32] audit: type=1326 audit(1790340676.628:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10623 comm="syz.5.1511" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca32d9e159 code=0x7ffc0000 [ 346.305049][ T32] audit: type=1326 audit(1790340676.628:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10623 comm="syz.5.1511" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fca32d9e159 code=0x7ffc0000 [ 346.305222][ T32] audit: type=1326 audit(1790340676.628:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10623 comm="syz.5.1511" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca32d9e159 code=0x7ffc0000 [ 346.305370][ T32] audit: type=1326 audit(1790340676.628:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10623 comm="syz.5.1511" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca32d9e159 code=0x7ffc0000 [ 346.305747][ T32] audit: type=1326 audit(1790340676.628:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10623 comm="syz.5.1511" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fca32d9e159 code=0x7ffc0000 [ 346.305836][ T32] audit: type=1326 audit(1790340676.628:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10623 comm="syz.5.1511" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca32d9e159 code=0x7ffc0000 [ 346.307258][ T32] audit: type=1326 audit(1790340676.628:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10623 comm="syz.5.1511" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fca32d9e159 code=0x7ffc0000 [ 346.313555][ T32] audit: type=1326 audit(1790340676.638:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10623 comm="syz.5.1511" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca32d9e159 code=0x7ffc0000 [ 346.313603][ T32] audit: type=1326 audit(1790340676.638:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10623 comm="syz.5.1511" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca32d9e159 code=0x7ffc0000 [ 346.607362][ T1228] usb 3-1: USB disconnect, device number 19 [ 347.704036][T10646] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 347.873463][T10649] syz.3.1521 (10649): drop_caches: 2 [ 349.392799][T10684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.393229][T10684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.034375][ T9223] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 350.203469][ T9223] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 350.223382][ T9223] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.223417][ T9223] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.223476][ T9223] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.303638][ T9223] usb 4-1: config 0 descriptor?? [ 350.409924][T10697] batadv_slave_0: entered promiscuous mode [ 350.425236][T10695] batadv_slave_0: left promiscuous mode [ 351.110039][ T5819] IPVS: starting estimator thread 0... [ 351.197236][T10706] IPVS: using max 38 ests per chain, 91200 per kthread [ 351.756888][T10715] FAULT_INJECTION: forcing a failure. [ 351.756888][T10715] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 351.759071][T10715] CPU: 1 UID: 0 PID: 10715 Comm: syz.2.1541 Tainted: G L syzkaller #0 PREEMPT(full) [ 351.759100][T10715] Tainted: [L]=SOFTLOCKUP [ 351.759108][T10715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 351.759120][T10715] Call Trace: [ 351.759128][T10715] [ 351.759136][T10715] dump_stack_lvl+0xe8/0x150 [ 351.759169][T10715] should_fail_ex+0x410/0x560 [ 351.759195][T10715] _copy_to_user+0x31/0xb0 [ 351.759223][T10715] simple_read_from_buffer+0xe1/0x170 [ 351.759257][T10715] proc_fail_nth_read+0x1bb/0x230 [ 351.759275][T10715] ? common_file_perm+0x20e/0x2b0 [ 351.759300][T10715] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 351.759320][T10715] ? rw_verify_area+0x24a/0x4c0 [ 351.759351][T10715] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 351.759363][T10715] vfs_read+0x213/0xa80 [ 351.759407][T10715] ? __pfx___mutex_lock+0x10/0x10 [ 351.759435][T10715] ? __pfx_vfs_read+0x10/0x10 [ 351.759469][T10715] ? __fget_files+0x2a/0x420 [ 351.759500][T10715] ? __fget_files+0x3a2/0x420 [ 351.759519][T10715] ? __fget_files+0x2a/0x420 [ 351.759554][T10715] ksys_read+0x150/0x270 [ 351.759586][T10715] ? __pfx_ksys_read+0x10/0x10 [ 351.759623][T10715] do_syscall_64+0x166/0x520 [ 351.759650][T10715] ? trace_irq_disable+0x3b/0x140 [ 351.759663][T10715] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.759678][T10715] ? clear_bhb_loop+0x70/0xc0 [ 351.759694][T10715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.759724][T10715] RIP: 0033:0x7f0670d5e98e [ 351.759742][T10715] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 351.759758][T10715] RSP: 002b:00007f0671ba1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 351.759777][T10715] RAX: ffffffffffffffda RBX: 00007f0671ba26c0 RCX: 00007f0670d5e98e [ 351.759792][T10715] RDX: 000000000000000f RSI: 00007f0671ba20a0 RDI: 0000000000000004 [ 351.759805][T10715] RBP: 00007f0671ba2090 R08: 0000000000000000 R09: 0000000000000000 [ 351.759830][T10715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.759838][T10715] R13: 00007f0671026038 R14: 00007f0671025fa0 R15: 00007f067114fa48 [ 351.759877][T10715] [ 352.805017][T10730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.835134][T10730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.926437][T10730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.943708][T10730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.026517][ T9223] usbhid 4-1:0.0: can't add hid device: -71 [ 353.026661][ T9223] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 353.064958][ T9223] usb 4-1: USB disconnect, device number 47 [ 353.386164][T10741] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1549'. [ 353.778336][ T1228] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 353.778516][ T5669] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 353.856951][T10760] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1557'. [ 353.937064][ T5669] usb 6-1: Using ep0 maxpacket: 16 [ 353.938166][ T1228] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 353.940422][ T5669] usb 6-1: unable to get BOS descriptor or descriptor too short [ 353.940467][ T5669] usb 6-1: New USB device found, idVendor=ebc4, idProduct=a108, bcdDevice=52.b8 [ 353.941188][ T1228] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 353.941208][ T1228] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 353.941248][ T1228] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 353.942426][ T5669] usb 6-1: config 9 has an invalid descriptor of length 99, skipping remainder of the config [ 353.942441][ T5669] usb 6-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 353.945748][ T5669] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.945774][ T5669] usb 6-1: Product: syz [ 353.945784][ T5669] usb 6-1: Manufacturer: syz [ 353.945830][ T5669] usb 6-1: SerialNumber: syz [ 353.993124][ T1228] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.993149][ T1228] usb 4-1: Product: syz [ 353.993173][ T1228] usb 4-1: Manufacturer: syz [ 353.993187][ T1228] usb 4-1: SerialNumber: syz [ 354.043597][ T5708] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 354.058184][ T32] kauditd_printk_skb: 45 callbacks suppressed [ 354.058199][ T32] audit: type=1326 audit(1790340684.378:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10755 comm="syz.4.1555" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e299e159 code=0x7ffc0000 [ 354.079603][ T1228] usb 4-1: config 0 descriptor?? [ 354.080945][T10749] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 354.081050][T10749] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 354.086902][ T1228] usb 4-1: ucan: probing device on interface #0 [ 354.134724][ T32] audit: type=1326 audit(1790340684.468:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10755 comm="syz.4.1555" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f10e299e159 code=0x7ffc0000 [ 354.160115][ T32] audit: type=1326 audit(1790340684.488:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10755 comm="syz.4.1555" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e299e159 code=0x7ffc0000 [ 354.160312][ T32] audit: type=1326 audit(1790340684.488:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10755 comm="syz.4.1555" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10e299e159 code=0x7ffc0000 [ 354.209859][ T5708] usb 3-1: device descriptor read/64, error -71 [ 354.385582][T10764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.386233][T10764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.448453][ T5708] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 354.573678][T10751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.581008][T10751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.590510][ T5708] usb 3-1: device descriptor read/64, error -71 [ 354.698655][ T5708] usb usb3-port1: attempt power cycle [ 354.716545][T10749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.729286][T10749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.730581][ T1228] ucan 4-1:0.0: probe with driver ucan failed with error -71 [ 354.763785][ T1228] usb 4-1: USB disconnect, device number 48 [ 354.801742][ T5670] usb 6-1: USB disconnect, device number 17 [ 355.067138][ T5708] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 355.097839][ T5708] usb 3-1: device descriptor read/8, error -71 [ 355.338526][ T5708] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 355.361597][ T5708] usb 3-1: device descriptor read/8, error -71 [ 355.471298][ T5708] usb usb3-port1: unable to enumerate USB device [ 355.620013][T10779] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 356.487765][T10791] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1568'. [ 356.576845][T10791] kvm: pic: non byte write [ 356.976874][ T32] audit: type=1326 audit(1790340687.298:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10792 comm="syz.3.1569" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a1f39e159 code=0x7ffc0000 [ 356.978210][ T32] audit: type=1326 audit(1790340687.298:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10792 comm="syz.3.1569" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a1f39e159 code=0x7ffc0000 [ 356.982297][ T32] audit: type=1326 audit(1790340687.308:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10792 comm="syz.3.1569" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f0a1f39e159 code=0x7ffc0000 [ 356.982418][ T32] audit: type=1326 audit(1790340687.308:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10792 comm="syz.3.1569" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a1f39e159 code=0x7ffc0000 [ 356.982519][ T32] audit: type=1326 audit(1790340687.308:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10792 comm="syz.3.1569" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a1f39e159 code=0x7ffc0000 [ 358.446753][T10813] syz.0.1575 (10813): drop_caches: 2 [ 358.718827][T10827] netlink: 'syz.2.1581': attribute type 1 has an invalid length. [ 358.783920][T10831] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1582'. [ 358.803204][T10827] bond3: entered promiscuous mode [ 358.803617][T10827] 8021q: adding VLAN 0 to HW filter on device bond3 [ 358.883354][T10827] 8021q: adding VLAN 0 to HW filter on device bond3 [ 358.898847][T10827] bond3: (slave ip6gre4): The slave device specified does not support setting the MAC address [ 358.898873][T10827] bond3: (slave ip6gre4): Setting fail_over_mac to active for active-backup mode [ 358.939143][T10827] bond3: (slave ip6gre4): making interface the new active one [ 358.939169][T10827] ip6gre4: entered promiscuous mode [ 358.944066][T10827] bond3: (slave ip6gre4): Enslaving as an active interface with an up link [ 359.024900][T10837] netdevsim netdevsim5: Direct firmware load for . [ 359.024900][T10837] failed with error -2 [ 359.024930][T10837] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 359.024930][T10837] [ 359.100356][T10835] kvm: pic: non byte write [ 359.536180][ T32] audit: type=1326 audit(1790340689.858:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10832 comm="syz.3.1583" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a1f39e159 code=0x7ffc0000 [ 359.536255][ T32] audit: type=1326 audit(1790340689.858:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10832 comm="syz.3.1583" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f0a1f39e159 code=0x7ffc0000 [ 359.537880][ T32] audit: type=1326 audit(1790340689.858:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10832 comm="syz.3.1583" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a1f39e159 code=0x7ffc0000 [ 359.537941][ T32] audit: type=1326 audit(1790340689.858:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10832 comm="syz.3.1583" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a1f39e159 code=0x7ffc0000 [ 360.202310][ T1228] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 360.218072][ T1228] hid-generic 0000:0000:0000.0023: hidraw0: HID v0.00 Device [syz1] on syz0 [ 360.400586][ T9223] usb 5-1: new low-speed USB device number 38 using dummy_hcd [ 360.538344][T10863] bond2: option ad_user_port_key: invalid value (48421) [ 360.538370][T10863] bond2: option ad_user_port_key: allowed values 0 - 1023 [ 360.543407][T10863] bond2 (unregistering): Released all slaves [ 360.588908][ T9223] usb 5-1: New USB device found, idVendor=1235, idProduct=8211, bcdDevice= 0.40 [ 360.590354][ T9223] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1023, setting to 0 [ 360.590426][ T9223] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 0 [ 360.649299][ T9223] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.649364][ T9223] usb 5-1: Manufacturer: я [ 360.954969][T10854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.967773][T10854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.058153][ T9223] usb 5-1: low speed audio streaming not supported [ 361.058175][ T9223] usb 5-1: low speed audio streaming not supported [ 361.192772][ T9223] usb 5-1: USB disconnect, device number 38 [ 361.264126][ T5633] udevd[5633]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 361.366459][T10871] syz.5.1592 (10871): drop_caches: 2 [ 361.631189][T10856] netlink: 'syz.2.1588': attribute type 3 has an invalid length. [ 361.917402][ T33] INFO: task syz.1.673:8053 blocked for more than 143 seconds. [ 361.917433][ T33] Tainted: G L syzkaller #0 [ 361.917446][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 361.917458][ T33] task:syz.1.673 state:D stack:28552 pid:8053 tgid:8051 ppid:5621 task_flags:0x400040 flags:0x00080002 [ 361.917562][ T33] Call Trace: [ 361.917571][ T33] [ 361.917586][ T33] __schedule+0x17db/0x58f0 [ 361.917650][ T33] ? __pfx___schedule+0x10/0x10 [ 361.917713][ T33] ? schedule+0x90/0x2b0 [ 361.917743][ T33] schedule+0x164/0x2b0 [ 361.917772][ T33] schedule_preempt_disabled+0x13/0x30 [ 361.917800][ T33] __mutex_lock+0x7c1/0x1550 [ 361.917863][ T33] ? __mutex_lock+0x5d4/0x1550 [ 361.917899][ T33] ? usbdev_open+0x151/0x770 [ 361.917936][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 361.917967][ T33] ? bus_find_device+0x27d/0x2d0 [ 361.918031][ T33] ? __pfx_bus_find_device+0x10/0x10 [ 361.918066][ T33] ? usbdev_open+0xa7/0x770 [ 361.918096][ ** replaying previous printk message ** [ 361.918096][ T33] ? usbdev_open+0xa7/0x770 [ 361.918135][ T33] usbdev_open+0x151/0x770 [ 361.918199][ T33] ? do_raw_spin_lock+0x12b/0x2f0 [ 361.918236][ T33] ? __pfx_usbdev_open+0x10/0x10 [ 361.918281][ T33] ? do_raw_spin_unlock+0xf5/0x200 [ 361.918346][ T33] chrdev_open+0x4d9/0x600 [ 361.918376][ T33] ? __pfx_chrdev_open+0x10/0x10 [ 361.918404][ T33] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 361.918437][ T33] ? __pfx_chrdev_open+0x10/0x10 [ 361.918490][ T33] do_dentry_open+0x816/0x1380 [ 361.918530][ T33] vfs_open+0x3b/0x340 [ 361.918556][ T33] ? path_openat+0x1428/0x1d60 [ 361.918594][ T33] path_openat+0x1443/0x1d60 [ 361.918669][ T33] do_file_open+0x23e/0x4a0 [ 361.918698][ T33] ? __pfx_do_file_open+0x10/0x10 [ 361.918744][ T33] ? _raw_spin_unlock+0x28/0x50 [ 361.938480][ T33] ? alloc_fd+0x651/0x6c0 [ 361.938615][ T33] do_sys_openat2+0x115/0x200 [ 361.938697][ T33] ? _raw_spin_unlock_irq+0x2e/0x50 [ 361.938760][ T33] ? __pfx_do_sys_openat2+0x10/0x10 [ 361.938821][ T33] ? exc_page_fault+0x6a/0xc0 [ 361.938888][ T33] ? do_user_addr_fault+0xc4c/0x1340 [ 361.938945][ T33] __x64_sys_openat+0x138/0x170 [ 361.939034][ T33] do_syscall_64+0x166/0x520 [ 361.939117][ T33] ? trace_irq_disable+0x3b/0x140 [ 361.939193][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.939260][ T33] ? clear_bhb_loop+0x70/0xc0 [ 361.942178][ T33] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.942254][ T33] RIP: 0033:0x7ff9f0b5e98e [ 361.942320][ T33] RSP: 002b:00007ff9f1a8cb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 361.942380][ T33] RAX: ffffffffffffffda RBX: 00007ff9f1a8d6c0 RCX: 00007ff9f0b5e98e [ 361.942420][ T33] RDX: 0000000000000000 RSI: 00007ff9f1a8cc00 RDI: ffffffffffffff9c [ 361.942458][ T33] RBP: 00007ff9f1a8cc00 R08: 0000000000000000 R09: 0000000000000000 [ 361.942489][ T33] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 361.942527][ T33] R13: 00007ff9f0e26128 R14: 00007ff9f0e26090 R15: 00007ff9f0f4fa48 [ 361.942615][ T33] [ 361.948258][ T33] [ 361.948258][ T33] Showing all locks held in the system: [ 361.948309][ T33] locks held by kworker/0:1/10: 5, on CPU#0: [ 361.948352][ T33] #0: ffff888022af1940 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 361.948534][ T33] #1: ffffc900000f7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 361.948696][ T33] #2: ffff8880299f81d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 361.948838][ T33] #3: ffff888029cae1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 361.948979][ T33] #4: ffff888032bd71a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 361.949122][ T33] locks held by pr/ttyS0/16: 2, last CPU#0: [ 361.949224][ T33] #0: ffffffff8ec36538 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 361.949396][ T33] #1: ffffffff9ad412d8 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x67/0xc0 [ 361.949584][ T33] locks held by khungtaskd/33: 1, last CPU#1: [ 361.972955][ T33] #0: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 361.973212][ T33] locks held by klogd/4972: 1, last CPU#1: [ 361.973228][ T33] #0: ffffffff8eeac770 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 361.973284][ T33] locks held by udevd/4983: 1, last CPU#1: [ 361.973334][ T33] #0: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: sock_def_readable+0xae/0x550 [ 361.973523][ T33] locks held by getty/5376: 2, on CPU#0: [ 361.973556][ T33] #0: ffff888035bbf0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 361.973720][ T33] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 361.973874][ T33] locks held by udevd/5633: 1, last CPU#1: [ 361.973921][ T33] #0: ffff88807b04c378 (&mm->mmap_lock){++++}-{4:4}, at: __might_fault+0xaf/0x130 [ 361.974079][ T33] locks held by kworker/1:5/5670: 3, last CPU#1: [ 361.974116][ T33] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 361.974266][ T33] #1: ffffc9000411fc40 ((work_completion)(&uhid->worker)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 361.986926][ T33] #2: ffff888068c05a58 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 361.987293][ T33] locks held by syz.1.673/8053: 1, on CPU#1: [ 361.987338][ T33] #0: ffff8880299f81d8 (&dev->mutex){....}-{4:4}, at: usbdev_open+0x151/0x770 [ 361.987506][ T33] locks held by kworker/0:17/9223: 3, on CPU#0: [ 361.987529][ T33] #0: ffff88801b06a140 ((wq_completion)events_freezable){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 361.987598][ T33] #1: ffffc90005147c40 ((work_completion)(&hcd->wakeup_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 361.987667][ T33] #2: ffff888029beb1d8 (&dev->mutex){....}-{4:4}, at: usb_remote_wakeup+0x23/0x120 [ 361.987716][ T33] locks held by syz.2.1571/10802: 2, last CPU#0: [ 361.987731][ T33] #0: ffff8880285c2460 (sb_writers#5){.+.+}-{0:0}, at: vfs_coredump+0x3764/0x4520 [ 361.987870][ T33] #1: ffff8880b863bb20 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb2/0x160 [ 361.988039][ T33] locks held by syz.2.1588/10856: 2, last CPU#0: [ 361.988076][ T33] #0: ffff888035605cf8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 361.988272][ T33] #1: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 362.000351][ T33] locks held by syz.2.1588/10859: 2, last CPU#1: [ 362.000398][ T33] #0: ffff888076eba9f8 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 362.000551][ T33] #1: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 362.000756][ T33] locks held by syz.3.1591/10866: 2, last CPU#1: [ 362.000789][ T33] #0: ffff888035601078 (&mm->mmap_lock){++++}-{4:4}, at: madvise_lock+0x152/0x2e0 [ 362.005939][ T5670] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 362.008150][ T33] #1: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 362.008215][ T33] locks held by syz.4.1594/10881: 2, last CPU#1: [ 362.008229][ T33] #0: ffff88807ecd7678 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 362.008293][ T33] #1: ffffffff8ed5c920 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 362.008349][ T33] [ 362.008355][ T33] ============================================= [ 362.008355][ T33] [ 362.008364][ T33] NMI backtrace for cpu 1 [ 362.008379][ T33] CPU: 1 UID: 0 PID: 33 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 362.008408][ T33] Tainted: [L]=SOFTLOCKUP [ 362.008416][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 362.008427][ T33] Call Trace: [ 362.008435][ T33] [ 362.008444][ T33] dump_stack_lvl+0xe8/0x150 [ 362.008474][ T33] nmi_cpu_backtrace+0x274/0x2d0 [ 362.008496][ T33] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 362.008531][ T33] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 362.008555][ T33] sys_info+0x135/0x170 [ 362.008614][ T33] watchdog+0xfd7/0x1030 [ 362.008702][ T33] ? watchdog+0x1c7/0x1030 [ 362.008769][ T33] kthread+0x38b/0x480 [ 362.008824][ T33] ? __pfx_watchdog+0x10/0x10 [ 362.008868][ T33] ? __pfx_kthread+0x10/0x10 [ 362.008922][ T33] ret_from_fork+0x514/0xb70 [ 362.008977][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 362.009023][ T33] ? __switch_to+0xc89/0x1420 [ 362.009099][ T33] ? __pfx_kthread+0x10/0x10 [ 362.009147][ T33] ret_from_fork_asm+0x1a/0x30 [ 362.009256][ T33] [ 362.009351][ T33] Sending NMI from CPU 1 to CPUs 0: [ 362.009417][ C0] NMI backtrace for cpu 0 [ 362.009431][ C0] CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT(full) [ 362.009454][ C0] Tainted: [L]=SOFTLOCKUP [ 362.009461][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 362.009471][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 362.009494][ C0] Code: e8 be 9a 54 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 ff 9e c4 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 362.009508][ C0] RSP: 0018:ffffc900001578b8 EFLAGS: 00000002 [ 362.009523][ C0] RAX: 1ffffffff35a8200 RBX: 00000000000003fd RCX: 0000000000000000 [ 362.009535][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 362.009546][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 362.009557][ C0] R10: dffffc0000000000 R11: ffffffff857340f0 R12: dffffc0000000000 [ 362.009570][ C0] R13: 0000000000000000 R14: ffffffff9ad41300 R15: 0000000000000000 [ 362.009581][ C0] FS: 0000000000000000(0000) GS:ffff888124cca000(0000) knlGS:0000000000000000 [ 362.009595][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 362.009606][ C0] CR2: 00002000000ff030 CR3: 00000000289e6000 CR4: 00000000003526f0 [ 362.009622][ C0] Call Trace: [ 362.009628][ C0] [ 362.009635][ C0] wait_for_lsr+0x184/0x2f0 [ 362.009657][ C0] __serial8250_console_fifo_write+0xcd/0x3e0 [ 362.009685][ C0] serial8250_console_write+0xaa1/0x1200 [ 362.009703][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 362.009729][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 362.009748][ C0] ? __schedule+0x17f1/0x58f0 [ 362.009774][ C0] nbcon_emit_next_record+0xef5/0x1a90 [ 362.009806][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 362.009828][ C0] ? nbcon_context_try_acquire+0x819/0xbd0 [ 362.009853][ C0] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 362.009874][ C0] nbcon_kthread_func+0x679/0x880 [ 362.009895][ C0] ? nbcon_kthread_func+0x163/0x880 [ 362.009911][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 362.009932][ C0] ? __kthread_parkme+0x71/0x1f0 [ 362.009956][ C0] ? __kthread_parkme+0x199/0x1f0 [ 362.009983][ C0] kthread+0x38b/0x480 [ 362.009998][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 362.010014][ C0] ? __pfx_kthread+0x10/0x10 [ 362.010030][ C0] ret_from_fork+0x514/0xb70 [ 362.010047][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 362.010062][ C0] ? __switch_to+0xc89/0x1420 [ 362.010085][ C0] ? __pfx_kthread+0x10/0x10 [ 362.010102][ C0] ret_from_fork_asm+0x1a/0x30 [ 362.010134][ C0] [ 362.024048][ T33] Kernel panic - not syncing: hung_task: blocked tasks [ 363.007751][ T33] CPU: 1 UID: 0 PID: 33 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 363.018437][ T33] Tainted: [L]=SOFTLOCKUP [ 363.022765][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 363.032825][ T33] Call Trace: [ 363.036113][ T33] [ 363.039055][ T33] vpanic+0x56d/0xa60 [ 363.043084][ T33] ? __pfx___schedule+0x10/0x10 [ 363.047977][ T33] ? __pfx_vpanic+0x10/0x10 [ 363.052513][ T33] panic+0xc5/0xd0 [ 363.056246][ T33] ? __pfx_panic+0x10/0x10 [ 363.060682][ T33] ? preempt_schedule_common+0x7f/0xd0 [ 363.066159][ T33] ? preempt_schedule_thunk+0x16/0x40 [ 363.071542][ T33] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 363.077703][ T33] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 363.083875][ T33] watchdog+0x1030/0x1030 [ 363.088213][ T33] ? watchdog+0x1c7/0x1030 [ 363.092642][ T33] kthread+0x38b/0x480 [ 363.096713][ T33] ? __pfx_watchdog+0x10/0x10 [ 363.101387][ T33] ? __pfx_kthread+0x10/0x10 [ 363.105980][ T33] ret_from_fork+0x514/0xb70 [ 363.110580][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 363.115696][ T33] ? __switch_to+0xc89/0x1420 [ 363.120432][ T33] ? __pfx_kthread+0x10/0x10 [ 363.125033][ T33] ret_from_fork_asm+0x1a/0x30 [ 363.129828][ T33] [ 363.133450][ T33] Kernel Offset: disabled [ 363.137811][ T33] Rebooting in 86400 seconds..