last executing test programs: 11.468441504s ago: executing program 0 (id=849): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000080), &(0x7f0000000100)=0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x31, 0xffffffffffffffff, 0xf679000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRESOCT=r5, @ANYBLOB="010026bd7000fddbdf253500000008000300", @ANYRES32=r1, @ANYRESHEX=r4], 0x6c}}, 0x0) 11.031280444s ago: executing program 0 (id=850): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="91100400000000009500000000000000ab89becd60798ba0c7b340b02956c1c3822c3f572da76a3b992d243e0b89f6b734d5fdf6cb7955ac9702e4a18821040f9856a1bf21bf5e9b77a91e739c3ee223bb727fb18bc991da02854893b585f4465da763f2ac1d5e22ab728ef23681fe8fdf16f570082bdfadcd7f48aa86c2c12a78db90a7781fa547451f272ad46f8e5733fb606f040417634328cbf1b47957851ce3cbc4eb683cc45e48df30ead552a32564e7d1ab13b4aa22e4dd4970134ec08873d32468bed08369a2ec7cef09ea5af2dfc3dbf2f13954a41a3e02b5e2fd65c37b0f22ce8f18ef"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_clone(0x2148480, &(0x7f0000000200)="c79415b3920c2d4d3682f06fe5eb3337742f2f0584cb84060321d891f3e568f7ef1732fdb828d3c51d012babab153a0fb3de489c17e3979d89e131ba21cfaf89e0f783", 0x43, &(0x7f00000002c0), &(0x7f0000000340), &(0x7f0000000400)="3c8cbef7fe0b4d726b86939059e827958e3a8dca20222098") pipe2$watch_queue(0x0, 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_dev$evdev(0x0, 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) write$char_usb(r3, &(0x7f0000000040)="e2", 0x2250) setrlimit(0x5, &(0x7f0000000300)={0x4, 0x7}) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r2, 0x0, 0x2c, 0x24044000, &(0x7f0000000380)={0x2, 0x4e22, @remote}, 0x10) r4 = shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) r5 = socket(0x2d, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@empty, 0x57}) shmctl$IPC_RMID(r4, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/fib_triestat\x00') preadv(r6, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r6, 0xc0105303, 0x0) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x28182, 0x0) ioctl$AUTOFS_IOC_FAIL(r7, 0x4c80, 0xffffffffffffffb6) r8 = openat$kvm(0xffffff9c, &(0x7f0000000280), 0x503, 0x0) ioctl$KVM_GET_API_VERSION(r8, 0xae00, 0x0) 9.187181128s ago: executing program 4 (id=856): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={0x0}, 0x1, 0x0, 0x0, 0xc3c1b8eeabfaea61}, 0x4000084) 8.955960131s ago: executing program 4 (id=857): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@name={0x1e, 0x2, 0x3, {{0x42, 0x1}, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x40, 0x80000000}}, 0x10) bind$tipc(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYRESDEC=r0], 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) connect(r0, &(0x7f0000000240)=@generic={0x2c, "1c582ba1b5e745e104f87327333a3e56ca1342bee9ca26dd4a0ad64352f190ab2151249c0b48a0837bc48c1cf4e8ee75623119d80506a55486729a8132a824337694ef86cf040498f998e11d79253fcca8e928991cb6964679ddfa34336a57cd1e058ebb65e42385256e2b73c3f6e78cad3676e5ff6c87258887d34ca607"}, 0x80) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x971}) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000180)={0x1, 0x0, [{0x3ff, 0x2, 0x1, 0x0, @sint={0x9, 0x1}}]}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 8.252380149s ago: executing program 0 (id=860): r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) (async, rerun: 32) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000000)={0x0, 0x7, [@empty, @random="eb74938c674f", @broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="cfa4158617a1", @link_local, @broadcast]}) (async, rerun: 32) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)=0x2, 0x4) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000080)={0x3, "67464c3ae9d4ed0e680bf7f3e86f9b9b4a193c04fb36b5c64e41b899b534f44e", 0x5, 0x100, 0x2, 0xb45, 0x4, 0x0, 0x5, 0x20}) (async, rerun: 64) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000100)={0x5, 0x81, 0x1}) (async, rerun: 64) ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f0000000140)={0x5, "f89e3553d621fd1517354454fce123c9bb006840f2cfdb7c6f1156e5f4b05c13", 0x2}) (async, rerun: 64) ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f0000000180)={0x5, "5fabef80b553680e9dca85eb9eda45826ba4317c35e148167fa70c704e5b8861", 0x3, 0x1, 0x3, 0x40, 0x4}) (rerun: 64) syz_open_dev$vbi(&(0x7f0000000200), 0x3, 0x2) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x81}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x10000) (async) r2 = syz_usb_connect(0x4, 0x48, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0xda, 0x11, 0xcf, 0x78, 0x61d, 0xc180, 0x6bd0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0x5, 0x0, 0x10, 0x58, "", [{{0x9, 0x4, 0x5d, 0xf, 0x1, 0x97, 0xe6, 0xf, 0x9, [@uac_as={[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x2, 0x5, 0x2, 0x8}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x2, 0x4800, 0x4, 0xf}]}], [{{0x9, 0x5, 0x4, 0x0, 0x10, 0x6, 0xfc, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x7f, 0x3}]}}]}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x300, 0x4e, 0x9, 0x7f, 0x10, 0x6}, 0x35, &(0x7f0000000480)={0x5, 0xf, 0x35, 0x3, [@generic={0x23, 0x10, 0xb, "9c3b83091fef66b56f08ee13ffc07d0cc8b748f67834b95c8cad10314acd7831"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x9, 0x45, 0x40}]}, 0x8, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x1004}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x410}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x42b}}, {0x36, &(0x7f0000000580)=@string={0x36, 0x3, "bfe6f22ef00b1bf30ac21c4680cc5d343aba88a5f701a557269ec9661d62e71f23656fa09240db13eb34e5739f60aed89b3e838a"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x847}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x6406}}, {0xa5, &(0x7f0000000640)=@string={0xa5, 0x3, "fec63c04ab413c851e16e780e02f33aca734e761382d5b73511d04d90b1670ea6efce88ce77211c55f51fbdeeaf4ab6f48c6c350439e952a47850c8d04792e26dc77be03c7f28647dcf711cca7c3774eca8122cb7cb47c6478cb49a942e86718d6a8e6d10639683235a4859777672e68368013e2fe5445b315980b947cf58d79a9bef6d5592144d377363af90d5d1afb56a9c91c10f94a2bb3826d868bf4eccddc755b"}}, {0x28, &(0x7f0000000700)=@string={0x28, 0x3, "e9b0b702f6e06e011ae60a4ba96627ab846fd38f22ced75acbed16bede990f4c13139311a2f5"}}]}) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000840)={0xc, &(0x7f00000007c0)={0x40, 0x22, 0x5, {0x5, 0x5, "81558c"}}, &(0x7f0000000800)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000b40)={0x24, &(0x7f0000000880)={0x0, 0x18, 0xc0, "11fab8781c1ea1c38b9c1db05c9cac4e3ca87f3d5658329945f8fc283e5fe7ccf2baa3d125a24d9194f93d301e1c45670f8f4011d0433a1f338fe39836f9c977d0f4cee76e74504db5bcbd2c686ee90e6c06d30e7ebbb818c61e8517b4deae396178e30e7071942d1d06f34c4ff656cb3a12420f15b0f7f28b8b5d3cce09cb3983984629729b390e3d93d925dad8122aa79a25d732a62f278d2768a37b8b535e2b3c388dd33f3058020a4b4b3eb35c3ff3bb19b7e0ec9a1366f96fb7c34e2c80"}, &(0x7f0000000980)={0x0, 0xa, 0x1, 0x7e}, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0x7e}, &(0x7f0000000a00)={0x20, 0x80, 0x1c, {0x2, 0x8, 0xc31, 0x380, 0x8, 0x7fff, 0x8, 0x3c5, 0xbb8, 0x2, 0x0, 0x1c}}, &(0x7f0000000a40)={0x20, 0x85, 0x4, 0x400}, &(0x7f0000000a80)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000ac0)={0x20, 0x87, 0x2, 0xa26a}, &(0x7f0000000b00)={0x20, 0x89, 0x2}}) (async) syz_usb_connect(0x1, 0x5bc, &(0x7f0000000b80)={{0x12, 0x1, 0x310, 0xc3, 0xa5, 0x87, 0x20, 0x257a, 0x2602, 0x4ce2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5aa, 0x2, 0x4, 0x0, 0x40, 0x6, "", [{{0x9, 0x4, 0x94, 0x5, 0xe, 0x9a, 0x84, 0x12, 0x4, [@generic={0xf8, 0x11, "bedcac009e7c8f4fadf6b2430486d47c82a2fd0022737b3d7024490f906569523ff439356b242d9b836198603871c31986475af06aea6975c7d076ac9ab46c1caab22fd5e940008059870c5014d7f20eb60127c11686956b5d5012dfafa3b1a02b66032895a56842b784e5710a84b37444380b379cd1f7b3efdaba5158bc987b297c3a754e7080116d3affb4d27a1c6653be22bcb668d6d90e200c4b83dd6cb6e74266136a0b88336b43d224ceaf29ac2fee7b934e1ca7ac10566e9f12945d22fc33a6b616dd5ed50a36c9fbe4a176560f83db27594d78f2da9023f12e36a3258de14de5e138faa4532005c7dacc2483f14550ae5046"}, @uac_as={[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x6, 0x1, 0xdc, 0x5, "", '?'}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0xbe54, 0x346d, 0x4c, "045293a2ecd117541d"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xa, 0x4, 0x7, 0x10, 'Ca'}]}], [{{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x5, 0x7, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x6, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x70bf46cebb1b9846, 0xd, 0x1ff}]}}, {{0x9, 0x5, 0xa, 0x2, 0x220, 0xb3, 0x7, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x8, 0xc}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x2, 0x4}]}}, {{0x9, 0x5, 0x5, 0x10, 0x10, 0x3, 0x7f, 0xff, [@generic={0xc0, 0x21, "786e17fd9ef02e4fe34645af047342cb3a74624fe1b93e447d5feaad5f29bb0af485155ff804e91b3df403f4e475b18b4ac9ea619397a1cf4f928061e6c513d7656381f668163dd9fdbc5af7aa375416922fd00ad0272876e5b22449475f69c7caa99918ddaa8b62815fad7f630c6aac5f6c03a63eb0afa59a55c09c599b651425fbea0e49e5d3e15f4a90c7e9cb6d59c202962618e2d6fe5d91b8af5c9c474e1651e1f22c6ed1ea54c9636bdaa613860136a86cdbcc21e69086dfdeb610"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x5, 0x2}]}}, {{0x9, 0x5, 0x3, 0x3, 0x200, 0x5, 0xc, 0x0, [@generic={0x18, 0x7, "3ea7195b153f5940ae49569699e3ba6d3bc42ae7930e"}, @generic={0x8a, 0x31, "8b02741f9a24d506fa23a4850eaa0bc61f16d8a5f13d196cd6ad62a03abadffc23bbb98485e537001f2dfd993895b65224960fe485dcf17e9fd8f0dc1bba105f1760096c18a18559e602aa830d9ec9f841f04a42d6b1f7dd8922c67be59ef4744bde3f09a0943cefc293f13edb9bc28552949f095a6775d29ea7543e456c7d694360c3404c798742"}]}}, {{0x9, 0x5, 0x5, 0x3, 0x8, 0x32, 0x80, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xc, 0x401}]}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0x7f, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x7f}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x54, 0xfff9}]}}, {{0x9, 0x5, 0xe, 0x3, 0x10, 0x2, 0x2, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x4}]}}, {{0x9, 0x5, 0x6, 0x0, 0x400, 0x3, 0x6, 0x9, [@generic={0x85, 0xb, "7e7714fefa9b6885cb9e96061dc6d8d93e5a91d104811a2e57c73681f037f0937989abd643f2bbd231f2b77866ef66e68c6fb32837ab29b70753ff8e19521dd1e0ea3ac9d97e2577449c1c6e30402e3d34bfff84289a5aab9cca60d1c98a39ed95fb7291b266f4716cd0d8520b1be9555b29e460cbd8ecca60429c9e924846fc1c2b02"}]}}, {{0x9, 0x5, 0x0, 0x8, 0x8, 0x3, 0x3, 0x4, [@generic={0x43, 0x24, "021574851e70809b0e434a061742c41b7213d42e9483aae8f538339c55e53c67d22f74381fa65a0ddf9e34ceb1368bb0c2768bc7401a9c6a3fd51a19f7621f0a0c"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x200, 0xf, 0x9, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x9}]}}, {{0x9, 0x5, 0x1, 0x1, 0x8, 0x6, 0x29, 0x1, [@generic={0xe3, 0x0, "5b2929bcf25ff050b0fca6b90a227e97ae139da857e043dca9d3637de840f3a6e27b037f5e4647a07ccf0a267f2409425ad9923734bf91dbb6687fad39733a7b3147a3e333ffc1162ea6dd6fa8f0c9eeba334dbe690896dbe4fec5b03f7def429900f9f9fd22bd2e89b4948d82c6856cf2323886549f89a885b4500aaa42500a7edbd5266e6384cfad768a34816b214089f526f412182576b58109372b373ef3bcb57905abfc7641eb251ece722a5729186b34294e43bc5e74d5a7a612da96ed7ae0b62da56caba6ac2171a279f5aa0746897c97a6fb475eacfe47511dd214d346"}]}}, {{0x9, 0x5, 0xb, 0x4, 0x40, 0x4, 0xf5, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x8, 0x200}]}}, {{0x9, 0x5, 0xb, 0x3, 0x20, 0x3, 0x2, 0x6, [@generic={0x15, 0xa, "f4fc3eee424b00ce1df44c646654a9488010f6"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x4}]}}, {{0x9, 0x5, 0xe, 0x10, 0x3ff, 0x48, 0x6d}}]}}, {{0x9, 0x4, 0xdb, 0x3, 0x3, 0xff, 0x4, 0x15, 0x8, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "ad074cddd551"}, {0x5, 0x24, 0x0, 0x401}, {0xd, 0x24, 0xf, 0x1, 0x8b, 0x6, 0x7, 0x5}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x414, 0x2, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x2, 0x2, 0x5}]}, @cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "22b89c"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0xffffffff, 0x4, 0xc2, 0x26}, [@acm={0x4}, @mbim={0xc, 0x24, 0x1b, 0x4, 0x99, 0x9, 0x24, 0xb4, 0x8}]}], [{{0x9, 0x5, 0xa, 0x0, 0x20, 0x2, 0xf5}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x1, 0xfb, 0xbd}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x7, 0xff, 0x3, [@generic={0x7, 0xd, "bd79dd71ed"}]}}]}}]}}]}}, &(0x7f0000001440)={0xa, &(0x7f0000001140)={0xa, 0x6, 0x201, 0x3, 0x3, 0x2, 0x30, 0xa}, 0xc, &(0x7f0000001180)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0xc, 0x4, 0x3, 0x4}]}, 0x5, [{0x4, &(0x7f00000011c0)=@lang_id={0x4, 0x3, 0x80c}}, {0xc7, &(0x7f0000001200)=@string={0xc7, 0x3, "adaf69ecb1357351d962b22c667406b41fa7bf3c0a92b89579d363dff630aaa4f4ab9e0bf10f89bee49436d854e34606396d3359a6e5c3c9aae390cbd1ccb2c143a5288b1755e76ff9a08c10908e3ac4b266f51e8590644527a0a5169f39bddc390d02d40c0d0e6d6063a9e3f846903f3add23b1240797399a507d509177b3a62e8c35ac07ead0a2c76cde40e488754d89a30e98cc76078a7373b5257c637444935ccad042206266c25e81e464861a9084837ed563a3ceb8aba4c0a4be07f264e92c6ab9e1"}}, {0x3b, &(0x7f0000001300)=@string={0x3b, 0x3, "d0f027ef6a09b94693267eb89e862a4736e91b32de3f9c03a48a758caf262e63b74286e177d386d1b15b26b19ca5fa2ded4d41bcb8a9cd99ac"}}, {0x1e, &(0x7f0000001340)=@string={0x1e, 0x3, "b24c4cf3b6e93625d0e45e20a47031f0773c9037f2cbe8948ce8952e"}}, {0xa6, &(0x7f0000001380)=@string={0xa6, 0x3, "cc409ca26e2952ef3d81f55ab42daff5d2d5fe5a09603d31ec311185e8a027855374c83af4854e120ae0a77d5ef71eeae6144462cba73687782f9cb2fc3bc67eaf6dbd5510041a3789a19e88224b90c8a1ca124948525806e9dd5d537c1001d5bb1a0379d722b1d27245dd943092535cc32a26ae5aad32426ebfd33a0de58c4fd653e7fc89162fc550bcda326e5856096011c99db3e5169e72acc1d290cd626ad920d44a"}}]}) ioctl$SIOCGETSGCNT(r0, 0x89e1, &(0x7f0000001480)={@empty, @initdev={0xac, 0x1e, 0x1, 0x0}}) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000014c0)="5ff71d1520e05e9732058d981cb97ae80d7bfb", 0x13) (async) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000001500)=@filename='./file0\x00', 0xee00, &(0x7f0000001540)='./file0\x00') (async) setsockopt$sock_timeval(r0, 0x1, 0x0, &(0x7f0000001580), 0x8) (async) ioctl$PPPIOCSPASS(r0, 0x40087447, &(0x7f0000001600)={0x3, &(0x7f00000015c0)=[{0xfff, 0xc0, 0x3, 0x5}, {0x6, 0x1, 0x4a, 0x1b}, {0x2, 0xff, 0xb, 0xffffffff}]}) (async, rerun: 64) rmdir(&(0x7f0000001640)='./file0\x00') (async, rerun: 64) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000001680), 0x4) ioctl$VIDIOC_DQEVENT(r0, 0x80805659, &(0x7f00000016c0)={0x0, @frame_sync}) (async) syz_usb_connect$uac3(0x3, 0xa4, &(0x7f0000001740)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0x2, 0x70, 0x80, {0x8, 0xb, 0x2, 0x0, 0x1, 0x25, 0x30, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xc, 0x2e}, [@selector_unit={0x8, 0x24, 0xc, 0xff, 0x3, "28a6c9"}, @feature_unit={0x11, 0x24, 0x7, 0x4, 0x3, [0x4, 0x2, 0x4]}, @multiply_unit={0xb, 0x24, 0xd, 0x10, 0x6, 0x800, 0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x2, 0xb, 0x94, {0xa, 0x25, 0x25, 0x0, 0xff, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x34, 0x0, 0x2, {0xa, 0x25, 0x25, 0x5, 0xa, 0x3}}}}}}}}]}}, &(0x7f0000001980)={0xa, &(0x7f0000001800)={0xa, 0x6, 0x711, 0x2, 0x0, 0x6, 0x10, 0x4}, 0x97, &(0x7f0000001840)={0x5, 0xf, 0x97, 0x6, [@ssp_cap={0x14, 0x10, 0xa, 0x5, 0x2, 0x7, 0xff00, 0x4, [0xffc00f, 0x207f]}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x8, 0x1, 0x3}, @generic={0x5a, 0x10, 0x1, "db93e4dc33dad0b66adc36ba2391d750a327fde39ed2e6183d722c26c3a8b3b405e8cf1543912de062d72f3aab397e6c1c3b527730d6b6dc2bf74fbaee33eb782031fb3b18092b530ee53a23a8174464af8c4fd2e93976"}, @ssp_cap={0x10, 0x10, 0xa, 0x6, 0x1, 0x2, 0xf0f, 0x6, [0xffff00]}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x7, 0x93, 0x3, 0x8}]}, 0x2, [{0x36, &(0x7f0000001900)=@string={0x36, 0x3, "bbe8f11f744d792ca0b7611d89792666c97e6c6bfa1b268482e69e0723fdee8d0202aad353ffb14cfea042b81d99736e7214bfcb"}}, {0x4, &(0x7f0000001940)=@lang_id={0x4, 0x3, 0x89a}}]}) (async, rerun: 32) getsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f00000019c0), &(0x7f0000001a00)=0x4) (async, rerun: 32) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001a80), r0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000001ac0)={0x0, @empty, @multicast1}, &(0x7f0000001b00)=0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000001c00)={'ip_vti0\x00', &(0x7f0000001b40)={'syztnl0\x00', 0x0, 0x1, 0x7, 0x800, 0x1, {{0x1b, 0x4, 0x3, 0x29, 0x6c, 0x65, 0x0, 0x9, 0x2f, 0x0, @loopback, @private=0xa010102, {[@noop, @cipso={0x86, 0xb, 0x2, [{0x2, 0x2}, {0x2, 0x3, "81"}]}, @generic={0x7, 0x10, "1f65448014c049ce5fa3aa336d98"}, @timestamp_prespec={0x44, 0xc, 0x17, 0x3, 0x7, [{@loopback, 0x98000000}]}, @noop, @lsrr={0x83, 0x13, 0xb1, [@private=0xa010101, @loopback, @remote, @loopback]}, @lsrr={0x83, 0x1b, 0x19, [@empty, @remote, @multicast1, @rand_addr=0x64010101, @loopback, @multicast2]}]}}}}}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001c40)={'batadv0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001c80)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000001ec0)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001e80)={&(0x7f0000001d80)={0xd8, r3, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x8000}, 0x800) 5.360568738s ago: executing program 4 (id=865): openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=@newqdisc={0x478, 0x24, 0x4ee4e6a52ff56541, 0x1008, 0x1, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff5, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44c, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x4000004}, @TCA_TBF_PBURST={0x8, 0x7, 0x22b}, @TCA_TBF_PARMS={0x28, 0x1, {{0xfb, 0x2, 0x0, 0x2, 0x0, 0x4}, {0x2, 0x2, 0xffff, 0x8, 0x22, 0x10}, 0xfffff, 0x3, 0x229d}}, @TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x8, 0x8, 0x1ff, 0x1, 0x7, 0xfffffffb, 0x8001, 0x3, 0xa8, 0x7, 0x9, 0xff, 0xdf, 0xd76, 0x0, 0x8001, 0x3, 0x80, 0x7, 0x2, 0x4, 0x3, 0x7f, 0x2, 0x5, 0xffffff01, 0x1, 0x5, 0x3, 0xfffffffc, 0xcc, 0x1, 0x2, 0x40, 0x7, 0x6, 0x4000000, 0x2, 0x10, 0x650ba7ba, 0x8, 0x8, 0x3, 0x9, 0xfffffff9, 0xf, 0x1, 0x10, 0x2, 0xe, 0x2, 0x44, 0x10001, 0x2, 0x5, 0x1ff, 0x9, 0x0, 0x1, 0x1, 0x0, 0xaf, 0x4, 0x4, 0x8, 0x1000, 0xa, 0x81, 0x1, 0x9, 0x900, 0xe, 0x8001, 0xfffff801, 0x6, 0xfffffff9, 0x4, 0x5, 0x3, 0x7, 0x9bc, 0xfffffff7, 0x8, 0x4, 0x200, 0x3ff, 0x4, 0x3ff, 0xcb, 0x5, 0x4, 0x700902f0, 0x81, 0x0, 0x6, 0x5, 0x7f3a, 0x6, 0x1, 0x0, 0x8, 0x1000, 0x81, 0x5, 0x6, 0x7, 0xc0000, 0x2, 0x2, 0x6, 0xffff, 0x9, 0x5, 0x8, 0x64, 0xd69c, 0x80000000, 0xe, 0xfffffffc, 0x100, 0x7c, 0x200, 0x80000000, 0x9, 0x83, 0x4, 0x1dc5, 0x7, 0x1, 0x3, 0x2c, 0x2, 0x200, 0x7fffffff, 0x6, 0x7, 0x8, 0x9, 0x8, 0xb, 0x1, 0x0, 0x5, 0x10001, 0x31b, 0x1ff, 0x2000, 0x3, 0x2, 0x5, 0x800, 0x10, 0x37, 0x3, 0x6, 0x8001, 0x100, 0x7, 0x1, 0xb7, 0x2, 0x401, 0x4, 0x7f, 0x9, 0xffff, 0x4, 0x7, 0x4, 0x10, 0x243, 0x6, 0x7, 0xfffff24f, 0x5, 0x7, 0x9, 0xc, 0x682, 0x1, 0x1, 0x902, 0x5, 0x2, 0xa44d, 0x0, 0x5690, 0x4, 0x4, 0x4, 0x10001, 0x6, 0xd8, 0x4800000, 0xb2, 0xff64, 0x2, 0x9, 0x7f, 0x3, 0x8, 0x4, 0x0, 0x8, 0xe1bd, 0x8, 0x161, 0x1, 0x5, 0x0, 0x0, 0xbf2800, 0x3, 0x9, 0x4, 0x10001, 0x7, 0x1, 0x1000, 0x5, 0x462, 0x2, 0x8, 0x6, 0x3, 0x1, 0x1, 0x4, 0x4, 0x8001, 0x7, 0x2, 0x6065891d, 0x9, 0x8001, 0xfc3, 0x7ff, 0x40, 0xfdf2, 0x8, 0xffff, 0x4, 0x2, 0x5438, 0x5, 0x1, 0x7, 0x2, 0x7b, 0x7, 0x34d, 0x0, 0xc6, 0x6, 0x8]}, @TCA_TBF_PRATE64={0xc, 0x5, 0x339b046bfd5f3754}]}}]}, 0x478}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$unix(0x1, 0x1, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) socket$inet(0xa, 0x801, 0x84) syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0186405, &(0x7f00000000c0)={0x2, 0x3ed2, {0x0}, {}, 0x7, 0x9}) prctl$PR_SCHED_CORE(0x3e, 0x1, r8, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4004af61, &(0x7f0000000200)=0x0) r9 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0xff, 0x7, 0x101}, 0x1c) syz_io_uring_setup(0x110, &(0x7f0000000340)={0x0, 0xfad7, 0x10000, 0x3}, &(0x7f0000000040), &(0x7f0000000280), 0x0) r10 = syz_open_dev$video4linux(&(0x7f0000002180), 0x24, 0x40) ioctl$VIDIOC_G_CTRL(r10, 0xc008561b, &(0x7f0000000040)={0x8f, 0x10}) 5.068590614s ago: executing program 0 (id=868): socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x1, 0x0, 0x0, 0xb49, 0x4, 0x8, 0x0, 0x3}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) r3 = syz_open_procfs(0x0, 0x0) syz_usb_connect$uac3(0x3, 0x89, &(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYBLOB="93884a74f35bee29ec2f46e73217019cfd12c553bb1fb1851d815833eb2430bad5ad9ea3106e0ed3cdad554badb5a0beb78ec42cef8919a34d53d810a98798021a405f2c99e2f26a10f8840c3b376c185ea2f52d5f0486cfda01438bf3b310465630dc907fbdc813e596011b1684269e03c2a968be9cac441a7bcbfb4b139cb0359ac24e333e4cf2c4db99206b4155bcf0a489fb101215953a1de1f0ea139c9342a545fa6e58632a554df44e05faf30572f8242f756897e3317beb98b6cf9ab1f6fdad141c8759f9ed9286e36c28dfc3a85dc271896719a6ee49c26a01649ab4038f9a895751cba9d832e89fada842fba4478ca6", @ANYRESOCT=r3], 0x0) read(r3, 0x0, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x2, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffd, 0x0, @remote}}}, 0x108) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000140)=@ethtool_cmd={0x3c, 0xca8b, 0x8, 0x7, 0x5, 0x4, 0xfe, 0x7d, 0xf, 0x81, 0xfdc, 0x2ab26f9c, 0x3, 0x7f, 0xc4, 0x2, [0xff, 0x362]}}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000040)={0x2, 0x1, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405668, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r7, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x40000) sendto$inet(r6, &(0x7f0000000100), 0x0, 0x40048c4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="280000000209010100000000000200000000000000000480080001400000000108000e400000000066e6796a39e82edbaa0384aa3d568d26f06d0b49a9b64765e880a5dfdf1e9801c7ed62f7b959addf44d1fb2f8c5bfa10a4374cdf04330dbebe65b6d8ba7d1525f056c5d395edb8f9"], 0x28}, 0x1, 0x0, 0x0, 0x20800}, 0x2000c091) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) pivot_root(&(0x7f0000001640)='./file0\x00', &(0x7f0000000100)='./file0\x00') rename(&(0x7f0000000580)='./file0\x00', 0x0) 5.067889724s ago: executing program 3 (id=869): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x5}}}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e999000000000000000000000000000000ac1414bb00bcf7787976000000000000000000000000040010000000020020108400000000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x8}}, 0x0, 0x4}, 0x94) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}, 0x1, 0x300}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@getqdisc={0x24, 0x26, 0x705, 0x70bd23, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff1}, {0x10, 0xb}, {0x4, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x4888e}, 0x0) 4.880155594s ago: executing program 3 (id=871): syz_usb_connect(0x2, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0xd7, &(0x7f0000000280)={0x0, 0x0, 0x20, 0x20000000, 0xe8}, &(0x7f00000001c0), 0x0, &(0x7f0000000200)) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r1, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0x100000000000020a, 0x0, 0x0, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket(0x18, 0x2, 0x8002) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000040)={r4, 0xfffffff7}, &(0x7f0000000100)=0x8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r5, 0x0, r5, 0x0, 0x800, 0xb) vmsplice(r6, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x7ffff000}], 0x1, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r9 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r10 = syz_pidfd_open(r9, 0x0) pidfd_send_signal(r10, 0x4, &(0x7f0000000000)={0x4, 0x8, 0x5}, 0x0) recvmmsg(r8, 0x0, 0x0, 0x2, 0x0) ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, 0x0) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5400000010000304000000000000000000000420", @ANYRES32=0x0, @ANYBLOB="00030000000000002c0012800b00010062726964676500001c00028008000500010000000500250001000000050029000000000008000a00", @ANYRES32=r11], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x8044) socket$nl_generic(0x10, 0x3, 0x10) 4.556383356s ago: executing program 1 (id=874): mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000480)={0x60, 0x0, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x8, &(0x7f0000000240)=[{}], 0x1, 0x1, 0x0, 0x2, 0x0, 0x2}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x3}) (async) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f0000000080)={0x200001fe0000, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0xa7000, &(0x7f0000ffc000/0x2000)=nil, 0x4000, r3}) (async) ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000180)={0x4, 0x4, 0x6000, 0xa7000, &(0x7f0000ffc000/0x2000)=nil, 0x4000, r3}) dup3(r2, r3, 0x80000) (async) dup3(r2, r3, 0x80000) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) (async) r4 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000440)={'#! ', './file1/../file0', [], 0xa, "000278414808f90249a8974898280f3c430a34b2de9a57967d49c269449fc906eef97ae17618a3eb9a5df5a02a484a4fff00000000000000000000baca280647784b0d"}, 0x57) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) openat$rdma_cm(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r7 = openat$rdma_cm(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r6, r7}}, 0x18) (async) write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {&(0x7f0000000000), r6, r7}}, 0x18) writev(r5, &(0x7f0000000580)=[{&(0x7f0000000300)="aefdf79d240303005a90f57f07703aeff0f64eb9ee", 0xfe5d}, {&(0x7f00000003c0)="4673c875ca4d9c", 0x7}, {&(0x7f00000001c0)="224d920db49f7943555765a95bde03470b7585e8322025dc90f470ac112d487e05c6c47e711f69a2d37548c6087aad9d81115946a920e6059e6655e619a30b74642b02a0ac3cd8f6bededb388d004301d03b6ea84789c78f08bad826c5a530f842ae69f34c70", 0x66}, {&(0x7f00000004c0)="b56bb4677bb7728cf3e5f024053d5b54dd0c7c709694d357a4c1804bb06c34b90c5da03bbdbb5ff4c01180e4606e5366ec40049dc1b0a24c255092f618f31e6f009bd5a4d4ca22f60e3a1406a02c21d45903a06490342aa591baeffed2d52a8a48710fc43b349056ecbd7946c142efb9778460842f1f1069daeabfa0d8dbc3a76298ed72b366f85fc2ce11fb699c230453728f08a74351d2081725b491", 0x9d}], 0x4) write$UHID_INPUT(r5, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) r8 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000004a40), 0x2, 0x0) ioctl$VIDIOC_S_PARM(r8, 0xc0cc5616, &(0x7f0000004cc0)={0x4, @output={0x0, 0x1, {0xfffff000, 0x2}, 0xed8d, 0x8001}}) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) 4.44098924s ago: executing program 4 (id=875): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r2, 0x0, 0xa, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x200}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xa8}}, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r4, 0xfffffffc) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r5, 0x8983, &(0x7f00000001c0)={0x7, 'syzkaller0\x00', {}, 0x92}) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="00010000c580000008001b000000"], 0x28}}, 0x0) sendmmsg(r7, 0x0, 0x0, 0x80) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r6, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300000200000000fbdbdf257f000001000000000000000000000000fe8000000000000000000000000000aa", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000019000000000004000000000000000000004000000000000000fdffffffffffffff02000000000000000000000000000000feffffffffffffff000000000000000000000000000000000000426676b800000900000000000040000105df28a5267d39c7a19623ba28d34ef829ea15c42bf3ce55e9fc301400beaa43438cbeda03ab55fe60b7"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) 4.176474852s ago: executing program 1 (id=876): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x10, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6b, 0x20, 0x0, "", [{{0x9, 0x4, 0x0, 0x40, 0x2, 0x3, 0x1, 0x1, 0x3, {0x9, 0x21, 0x9, 0xec, 0x1, {0x22, 0x40a}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xe, 0x27}}}}}]}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x200, 0x7e, 0x3, 0x4, 0x8, 0xff}, 0x84, &(0x7f0000000500)=ANY=[@ANYBLOB="050f8400063010014570ecc3cb3de2460f0c6deb8e1e9c179ab933c9527e981ed3801fa6b41a3643545b9698e456e690022b905c5424100a03e67f00000f000c0000c0000000c000000000ff00f0c00000003fff00cf0000000a10030088005207040003100b14100408c24539df3ebdd93b5b4b83a93e498e1b0a100302020009810f00"]}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000180)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000480)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a4, &(0x7f0000000000)={{@any, 0xffff7dff}, @any, 0x0, 0xffffffffffffffff, 0x4000000f8, 0x8, 0x0, 0x4000002, 0x7}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x7fffffffffffffff, 0xfffffe0000000001, 0x4, 0xffffffff}, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x186c0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r6, 0x40405514, &(0x7f00000001c0)={0x7, 0x1, 0x4a5d, 0x0, 'syz1\x00', 0x62d}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r6, 0xc1105511, &(0x7f0000000040)={0x9}) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0xc1105511, &(0x7f0000000040)) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, &(0x7f0000000380)={0x3, 0x101, 0x7, 0x8000008, 0x1, 0x3}) lseek(0xffffffffffffffff, 0x6, 0x1) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) 4.176117673s ago: executing program 2 (id=877): r0 = syz_io_uring_setup(0x254c, &(0x7f00000002c0)={0x0, 0x7c87, 0x800, 0x0, 0x39}, &(0x7f0000000080), &(0x7f00000001c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000900)={&(0x7f0000003000)={[{0x0, 0x0, 0x1}]}, 0x1, 0x3}, 0x1) io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, &(0x7f0000000f40)={0x0, 0x0, 0x3}, 0x1) (async, rerun: 32) r1 = openat$sysctl(0xffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) (rerun: 32) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x7fff0000}}, './file0\x00'}) (async, rerun: 32) r3 = socket$kcm(0x29, 0x0, 0x0) (async, rerun: 32) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f0000000100)=[{r0, 0x1000}, {r0, 0x2005}, {r0, 0x1}, {r1, 0x40}, {r0, 0x400}, {r0, 0x202}, {}, {r2, 0x4101}, {r3, 0x8008}], 0x9, &(0x7f0000000200)={r4, r5+10000000}, &(0x7f0000000240)={[0x81, 0x3]}, 0x8) 4.000222593s ago: executing program 2 (id=878): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x16, 0x301, 0x70bd24, 0xfffffffc, {0x2e}}, 0x14}, 0x1, 0x0, 0x0, 0x200448d3}, 0x0) 3.892705387s ago: executing program 2 (id=879): r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, 0x0, 0x20000011) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_CT_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x8, 0x4) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) syz_emit_ethernet(0x24, &(0x7f00000003c0)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @void, {@ipv4={0x806, @generic={{0x5, 0x4, 0x0, 0x38, 0x16, 0xff88, 0x0, 0x5, 0x16, 0x0, @empty, @broadcast}, "2b9c"}}}}, 0x0) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x1100, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000092ecc620ac0500773aeb010203010902240001000020000904c40102fffd0180090502021002020000"], 0x0) 3.675936906s ago: executing program 3 (id=880): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x14, 0x1, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0xc3c1b8eeabfaea61}, 0x4000084) 3.563457327s ago: executing program 3 (id=881): mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x4000000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(0xffffffffffffffff, 0x7af, &(0x7f0000000140)={@hyper, 0x6}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(0xffffffffffffffff, 0x7b1, &(0x7f0000000080)={&(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffd, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x282, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbde0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x573, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x8e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffdfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x92, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd], 0x1, 0x400}) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="3801000019000104fcffffff0000e3b6422cab990ec7683d9f05625c0000ac1e0001e298b56c7f84c22a00000000fc02000000000000000000000000000000000000000000000a00000000000000b4bf2376ee2eb74cddb5d23a12333b29a4a27e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000090000000000000000000000000000000000000000000000ffffffffffffffff00000000000000000000000000000000040000000000000000000000000000000000000000004000000000000000000000000000000000000000000084000500fc020000000000000000000000000000000000003300000000000000ffffffff0000000000000000000000000000000004030000000000000000000000000000ff020000000000000000000000000001000000003300000000000000e00000010000000000000000000000000040000001000700"/240], 0x138}}, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000b80)={@multicast, @local, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x30, 0x2c, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[@hopopts={0x29}], @ni={0x8c, 0x0, 0x0, 0x8, 0x4, 0x2, "6d2634cc62d045903c2b5ac3a6368a46130a35c3099a9573"}}}}}}, 0x0) mlock(&(0x7f0000001000/0x3000)=nil, 0x3000) 3.401270397s ago: executing program 3 (id=882): r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, &(0x7f0000000000)=""/103, 0x67, 0x0, 0x0, 0x0) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f0000000140)={0x0, 0xfffffffffffffffe}) ioctl$OCFS2_IOC_UNRESVSP(r1, 0x402c5829, &(0x7f0000000180)={0x0, 0x2, 0x1, 0xb, 0x4, 0xffffffff}) listen(r0, 0x8) r2 = socket$kcm(0x29, 0x5, 0x0) connect$l2tp(r1, &(0x7f00000001c0)={0x2, 0x0, @broadcast, 0x2}, 0x10) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000200)=[@ioring_restriction_sqe_flags_required={0x3, 0x15}, @ioring_restriction_sqe_flags_allowed={0x2, 0x1a}, @ioring_restriction_sqe_flags_allowed={0x2, 0x14}, @ioring_restriction_sqe_op={0x1, 0x10}, @ioring_restriction_sqe_flags_required={0x3, 0x8}, @ioring_restriction_register_op={0x0, 0x4}], 0x6) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@RTM_GETMDB={0x18, 0x56, 0x0, 0x70bd27, 0x25dfdbfd, {0x7, r3}, [""]}, 0x18}, 0x1, 0x0, 0x0, 0x40011}, 0x2400c0c0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) r4 = accept4$unix(r1, &(0x7f0000000400), &(0x7f0000000480)=0x6e, 0x80000) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, 0x1409, 0x400, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x10) write(r4, &(0x7f00000005c0)="3600a73fd0d25f5e1bb056355544d33d5c49a2e8e5cffb6f2a2ac46e2eae7f0d11034c06c2c59f9338bbcd6aeb74c2f73753d8ebea19c38445cd1bd81068d39d82c451a6963c1fc68d0413a163bcd2561b9973dbcfe1dc6e14265cc037625341acdcda0cd0a261f0fffc5192b29b41b297edc32430dbdde3de81cefce686a131659606c9e69914975c546cebdd0161aea26746132f11f8017bf05ba8254d663c0c7a520c47642bf9a6641fad8acb553128dad1c5d14e54660c8538934e85935f1dbe913c5a39d7293921de535c4fdcfd837d174d02aab2034cc7e26bfc91ee9e6f69ad54333657dca1b4726865cbe1b99b4659c1", 0xf4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000700), r1) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x64, r6, 0x306, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x746d}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x44}, 0x1840) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000840)={{0x1, 0x1, 0x18, r4, {0x307}}, './file0\x00'}) r8 = openat$fuse(0xffffff9c, &(0x7f0000000900), 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000940)={{{@in6=@private1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@initdev}}, &(0x7f0000000a40)=0xe4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000a80)={0x0, 0x0, 0x0}, &(0x7f0000000ac0)=0xc) mount$fuse(0x0, &(0x7f0000000880)='./file0\x00', &(0x7f00000008c0), 0x42048, &(0x7f0000000b00)={{'fd', 0x3d, r8}, 0x2c, {}, 0x2c, {'user_id', 0x3d, r9}, 0x2c, {'group_id', 0x3d, r10}, 0x2c, {[{@allow_other}], [{@fscontext={'fscontext', 0x3d, 'root'}}]}}) r11 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGL2TPSTATS(r11, 0x80487436, &(0x7f0000000bc0)="98b086bc71d765bf06a81b6e509bd725df38a48a84538c66d19026fb9ed8c72a73358cb3c8e3a7568da7afcc22b5d3562164974d559ab6064056f8157a728f01e7aada0d39b4cf23d3c3db289d00ec2bbb69dd9dc246ddad93c6b6c45f5d30679e399423f606faf7fb59089a919b159adc5fbb") ioctl$XFS_IOC_PATH_TO_HANDLE(r8, 0xc01c5869, &(0x7f0000000d40)={r5, &(0x7f0000000c40)='rootmode', 0x600840, &(0x7f0000000c80)={@_ha_fsid={[0x9, 0x1]}, {0xff3a, 0xf, 0x4, 0x400}}, 0xd, &(0x7f0000000cc0), &(0x7f0000000d00)=0x5}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000dc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r7, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x40, 0x0, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008010}, 0x8000) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) 2.457794646s ago: executing program 3 (id=883): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x3) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x800, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB, @ANYRES32=r1, @ANYRESDEC=0x0]) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000004100)={0x2020}, 0x2020) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@o_path={&(0x7f00000000c0)='./file0\x00', r2, 0x4000, r2}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sync() sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x2b) r5 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0xb}, 0x94) syz_usb_control_io$uac2(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="40084f0000003a45444db441ba8f87f2de0e4872fc8bf45a40f05ee2dd90695e964d4c32c89580d16e26665c3cb71de602a74a933006000000000000009e550e6cce756bd0fcb4d76e82557a2a3105786e85061901"], 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000480)={0x20, 0x3, 0x1, 0x8}}) lsetxattr$trusted_overlay_opaque(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), &(0x7f00000002c0), 0x2, 0x2) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000140)={0x0, 0x7, 0x5, &(0x7f0000000100)={0x17, "537a1468df08000000758bd16868e0bf22c7b844c1b1f10186854fff98d2870c38"}}) 2.001355666s ago: executing program 4 (id=884): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000100)=[{&(0x7f0000000280)="c1", 0x1}], 0x1, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) openat$ppp(0xffffff9c, &(0x7f0000000000), 0x4000, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) (async, rerun: 64) accept4(r1, 0x0, 0x0, 0x0) (rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x2, 0x40, 0x40, 0x0, 0x1}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) msgctl$MSG_STAT(0x0, 0xb, 0x0) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000440)=""/200, 0x200000, 0x1000, 0x0, 0x3}, 0x20) r5 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2b24d, 0x11a20}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}, @IFLA_LINKMODE={0x5, 0x11, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0xc1}, 0x0) (async, rerun: 32) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000040)) (rerun: 32) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_open_dev$swradio(&(0x7f0000000240), 0x0, 0x2) ioctl$KVM_SET_PIT(r6, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}]}) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=@ipv4_newnexthop={0x24, 0x68, 0x109, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x10}, @NHA_FDB={0x4}]}, 0x24}}, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c0000001000050400"/20, @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c0002800600010000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) (async) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0xb, "bdab7e9d"}, @main=@item_4={0x3, 0x0, 0xa, "582a6eb3"}]}}, 0x0}, 0x0) 1.460292054s ago: executing program 0 (id=885): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f40)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {}, {0x2, 0xb}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x43}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40098}, 0x4008000) (fail_nth: 3) 1.255303342s ago: executing program 0 (id=886): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x22800, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_usb_connect(0x5, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="12010003f7bb6a083c41378182d301020301090212000104110c0024dcae06"], 0x0) pipe(&(0x7f0000003180)) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x1d, 0x2, 0x400) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[], 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$rds(0x15, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) pipe2(&(0x7f0000000040), 0x0) getsockopt(r1, 0x8b, 0x80000000, &(0x7f0000000200)=""/145, &(0x7f0000000300)=0x91) syz_usb_connect$uac1(0x6, 0xa4, &(0x7f00000001c0)=ANY=[], 0x0) syz_usb_connect(0x5, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000100)=0x6, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x5, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) r2 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0), 0x0, 0x0}) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) syz_usb_connect$cdc_ncm(0x6, 0x80, &(0x7f00000006c0)=ANY=[@ANYBLOB="120101020000202505a1a440000102030109026e00020103c0040000000000000000000a240600018e1547b70f010e000000010000004f06241a2b268ef2e75228c2d531c66ab5fe6705000208241c020004080005241500010905810300020704090904010000020d00000904010102020d00000905820200040006080905030210007a40090000000000000000"], &(0x7f0000000640)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x250, 0x4, 0x5, 0x6, 0x8, 0xb}, 0x2e, &(0x7f0000000180)=ANY=[@ANYBLOB="050f2e00030a1003020a00047100020b57fd622c974b78cc2d1a083c79045a6bc3da00d739d2583878d8e54c458ea66e4b"], 0x6, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x100c}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x400a}}, {0xb9, &(0x7f0000000780)=ANY=[]}, {0x4b, &(0x7f0000000540)=ANY=[@ANYBLOB="4b07d11753d03f17d5fffffcd3032960b83eed90f2d4e9cd55de56bd303a7bf7b215bed031394b8dd529b84441b5240e6d4d36e75eee6c44a5bf20b176d1b4497175d4ee748300004561a1"]}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x860}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x41c}}]}) ioctl$FE_SET_PROPERTY(r3, 0x40106f52, &(0x7f00000001c0)={0x1e, 0x0}) 1.14011279s ago: executing program 4 (id=887): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00'/13], 0x48) bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000000580)=ANY=[@ANYBLOB="0300000004000000040000000700000000000000", @ANYRESOCT, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES8=r0], 0xc) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r1 = openat$sw_sync_info(0xffffff9c, &(0x7f0000000500), 0x2, 0x0) unshare(0x6020400) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000007c0)=ANY=[@ANYBLOB="eefc1d0549227f4aa8b8d9976a27adbf2ae0c5f319362910ae7ad4f420d3c926877e72e1da78fe72e927859a4a27220b76387483f3befbbcd1274227c826459befce45be0bb5ba0c6b67404e1689e274ee8fa083d7b4e99a12de8781d0f5fe5df667a9e3063b6cb9b8aef44996b1b1259e73dd2acf11383a24f344bc5566ac3b89b6df3866761754b92b0bb180098c537dc71f3767381ccbcf7ab903fbc0826d4ccd42d38cc25c82", @ANYRES16=r3, @ANYBLOB="ffff2abd7000fcdbdf25030000000800040082f7ffff"], 0x1c}, 0x1, 0x0, 0x0, 0x488c8}, 0x20040010) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vxcan1\x00'}) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000680)=ANY=[@ANYRESOCT=r2, @ANYRES16=r3, @ANYBLOB="000428bd7000fcdbdf250b0000003c000680080006000000000008000700", @ANYRES32=0x0, @ANYBLOB="080006000400000008000300e0000002050002000600000008000700", @ANYRES32, @ANYBLOB="0500020007000000"], 0x50}, 0x1, 0x0, 0x0, 0x8001}, 0x0) mprotect(&(0x7f0000fac000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, &(0x7f0000000540)='fou\x00') mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ffb000/0x4000)=nil) connect$inet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r4, 0x11) r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r5, 0xc038563b, &(0x7f0000000080)={0x3, 0x2, @raw_data=[0x8, 0x0, 0xc, 0x0, 0xc, 0x0, 0x10000, 0x2, 0x3, 0x1, 0xffbfffff, 0x400000, 0x5, 0x1, 0x20, 0xffffffff]}) r6 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r9 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r9, 0x0, &(0x7f00000008c0)={0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r10 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r10, 0x707, &(0x7f0000000040)={&(0x7f00000019c0)=[{0x3, 0x0, 0x0, 0x0}, {0xc, 0x201, 0x0, 0x0}, {0xc, 0x2401, 0x50, &(0x7f0000000900)="30dc48cb46e4208a59b26684ac5005119c2e6dfd62832df910de4fc14cee9811bf98ce9ae05613e5a5075d9f488f08a382186f070406023c5e7ba0f4a501cc464894ce9a53acd85de44063553342a2b2"}], 0x3}) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x1, r8}, 0x10) preadv(r1, &(0x7f0000000700)=[{&(0x7f0000000300)=""/209, 0xd1}], 0x1, 0x2, 0x200) syz_clone(0x40000, &(0x7f0000000000)="1e818ae943ed6cce8f884781048627d1caa6207e86032a1708e9962efefc85ea6b4a4b963f99d30c63d82de59942a8884d9aa8a78617fa80a12e61320bb50afcff3897a54f6531d3dcec5212b1607fd6657075b68856970a63175761259599e331a7f84e3d25a9af341fa7b79144f43943cb0f3ecc2749034b5fa0aea322d5203bd714f84ceb6c3741e68b712dd59e2d92a0ccbf4ebb0caf", 0x98, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="af43f5832a08cde360498294002bdcb4a89b897faf7193e86ec2054ab81f9077f28f8ae58ce97e6c6ab9b737a8471467712fc88926ec49d7a78536efcb7e2a4eb8512f6c934a1f03531cc4649bac84708d769b98da2937988efe0a9449fcc18f277651aca6b5472be0db176fc99658bfaec9a6a69a7ce3b30d003a84305c727c3cd2a8c6535ab168fe126f26b5f005267d24615949a150835159e8bca9ebc3fb60216bec4356d9a001aaccdb31f8d7e4c0d756f87ab7808f76f3a637bbfaab6df9c679f8374836863983c0135850") 691.858013ms ago: executing program 1 (id=888): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) (async) r2 = epoll_create1(0x80000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000200)="1857cbfcf377c53f2b6fe3bd9170696dffb5ee4fd6fab7b2f652a62ab43ebcfc5ff1917c1f065d52ba76525f95220b03a05f2549f77a379128981452", 0x8, r1, 0x0, 0x20000000}, 0x38) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000001100)={0x10000000}) (async) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000000)) (async) ioctl$FITHAW(r0, 0xc0045878) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x70, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x44, 0x3, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x34, 0x7, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd4}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) (async) close(r0) 646.440683ms ago: executing program 2 (id=889): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000680)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @remote, @loopback, 0xf8c, 0x3ff, 0x101, 0x500, 0x80000001, 0x5000000}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0xfff1, 0x2}, {0xffff}, {0xd, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000022c0)=@newtfilter={0x88, 0x2c, 0xd27, 0x30bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xd, 0xf}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x4e0, 0xca0b, 0x0, 0x3}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40000}, 0x44000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x4000) signalfd(0xffffffffffffffff, &(0x7f00000007c0)={[0xffffffffffffffff]}, 0x8) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000040)={0x50, 0x0, r8, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r7, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r7, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x9, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x0, 0x8000, 0xfffffffc, r9, r10, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r11, &(0x7f00000000c0)='lp\x00', 0xfffffdef) read$FUSE(r7, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_POLL(r11, &(0x7f000000a380)={0x18, 0xfffffffffffffffe, r12, {0x5}}, 0x18) dup2(r11, r7) ioctl$USBDEVFS_RESET(r11, 0x5514) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) socket$kcm(0x11, 0x3, 0x0) 556.629769ms ago: executing program 1 (id=890): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x34, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x6}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xc0d0}, 0x20) r2 = syz_open_dev$video4linux(&(0x7f0000000880), 0x7, 0x20240) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0xc0405627, &(0x7f0000000200)={0x6, 0x1}) ioctl$VIDIOC_S_STD(r2, 0x40085618, &(0x7f0000000000)=0x400) 348.596079ms ago: executing program 1 (id=891): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x14, 0x1, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0xc3c1b8eeabfaea61}, 0x4000084) 254.646228ms ago: executing program 1 (id=892): r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0x40, 0xfffffffc, {0xa, 0x3f, 0x9, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xfffff001, 0x6}}, @IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x3f}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$inet6(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090527bd7000fcdbdf25020000ff", @ANYRES32=r7, @ANYBLOB="08000900be200000080008000001000008000200ac141423080001000a0101020800090003000000080009"], 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) sendto$inet6(r5, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000740)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3f8, 0x210, 0x0, 0x0, 0x0, 0x94, 0x364, 0x364, 0x364, 0x364, 0x364, 0x6, &(0x7f00000004c0), {[{{@ip={@multicast2, @multicast1, 0xffffff00, 0xff000000, 'gre0\x00', 'bridge0\x00', {0xff}, {0xff}, 0x88, 0x1, 0x18}, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'erspan0\x00', 'ip6gretap0\x00', {0xff}, {0xff}, 0x0, 0x2, 0x8}, 0x0, 0xb8, 0xdc, 0x0, {}, [@common=@icmp={{0x24}, {0x8, "9eff"}}, @inet=@rpfilter={{0x24}}]}, @ECN={0x24, 'ECN\x00', 0x0, {0x0, 0xd, 0x3}}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xffffffff, 0x2, @local, 0x4e23}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, 0xffffff00, 0xff000000, 'veth1_to_hsr\x00', 'vcan0\x00', {0xff}, {0xff}, 0x32, 0x6, 0x4}, 0x0, 0x9c, 0xc0, 0x0, {}, [@common=@ah={{0x2c}, {[0x1, 0x323]}}]}, @ECN={0x24, 'ECN\x00', 0x0, {0x21, 0xf3, 0x1}}}, {{@ip={@multicast1, @broadcast, 0xff, 0x0, 'nr0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x1d, 0x1, 0x40}, 0x0, 0x70, 0x94}, @TTL={0x24, 'TTL\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x454) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r8 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r8, 0xc008561c, &(0x7f0000000000)={0x0, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"}) r9 = syz_open_dev$vim2m(&(0x7f00000002c0), 0xb, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r9, 0xc0d05604, &(0x7f0000000100)={0x1, @pix_mp={0x8, 0x80, 0x50565559, 0x8, 0x7, [{0x6, 0x2}, {0xdf34, 0x9}, {0x0, 0xfffffffb}, {0x31d, 0x2}, {0x5, 0x2}, {0x5, 0xffffffff}, {0x1, 0x3}, {0x18, 0x3}], 0x2, 0x40, 0x2, 0x2, 0x6}}) r10 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x200) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r10, 0xc0a45352, &(0x7f0000000040)={{0x0, 0xff}, 'port1\x00', 0x0, 0x20044, 0x1, 0x5, 0x6, 0x8, 0x9, 0x0, 0x3, 0x4}) socket$nl_netfilter(0x10, 0x3, 0xc) r11 = syz_usb_connect(0x5, 0x4a, &(0x7f0000000180)=ANY=[@ANYRESHEX], 0x0) r12 = openat$vnet(0xffffff9c, &(0x7f0000000200), 0x2, 0x0) write$vhost_msg_v2(r12, &(0x7f0000000340)={0x2, 0x0, {&(0x7f0000000400)=""/174, 0xae, 0x0, 0x3, 0x4}}, 0x48) syz_usb_ep_write$ath9k_ep1(r11, 0x82, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mknod$loop(0x0, 0xfff, 0x1) 249.924294ms ago: executing program 2 (id=893): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb781", 0x4f}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) 0s ago: executing program 2 (id=894): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ifreq(r0, 0x8947, &(0x7f0000000000)={'bond0\x00', @ifru_hwaddr=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}}) lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffdb1, 0x0) kernel console output (not intermixed with test programs): ttributes in process `syz.3.569'. [ 224.650243][ T807] usb 5-1: USB disconnect, device number 31 [ 224.822225][ T7699] netlink: 4 bytes leftover after parsing attributes in process `syz.2.573'. [ 224.854362][ T7701] netlink: 16 bytes leftover after parsing attributes in process `syz.3.574'. [ 224.951410][ T7704] binder: 7703:7704 ioctl 8400941f 80000500 returned -22 [ 225.007976][ T7704] program syz.4.575 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 225.026102][ T7704] binder: 7703:7704 ioctl 8903 80000180 returned -22 [ 225.047954][ T7704] netlink: 8 bytes leftover after parsing attributes in process `syz.4.575'. [ 225.062854][ T7704] netlink: 24 bytes leftover after parsing attributes in process `syz.4.575'. [ 225.085766][ T7704] binder: 7703:7704 ioctl 400c620e 80000200 returned -22 [ 225.379231][ T7719] netlink: 132 bytes leftover after parsing attributes in process `syz.2.581'. [ 225.432172][ T7721] netlink: 60 bytes leftover after parsing attributes in process `syz.4.579'. [ 225.767640][ T5070] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 225.946420][ T5070] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.991343][ T5070] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 226.021790][ T5070] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 226.052972][ T5070] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.115113][ T5070] usb 4-1: config 0 descriptor?? [ 226.382794][ T7734] netlink: 44 bytes leftover after parsing attributes in process `syz.2.587'. [ 226.838351][ T7742] binder: 7739:7742 ioctl 8400941f 80000500 returned -22 [ 226.865569][ T7742] program syz.2.589 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 226.890655][ T7742] binder: 7739:7742 ioctl 8903 80000180 returned -22 [ 226.905516][ T7742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.589'. [ 226.929034][ T7742] binder: 7739:7742 ioctl 400c620e 80000200 returned -22 [ 227.173500][ T7753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.210222][ T7753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.248323][ T7753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.277393][ T7753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.400148][ T7774] netdevsim netdevsim2: Firmware load for '..' refused, path contains '..' component [ 228.603884][ T5709] usb 4-1: USB disconnect, device number 36 [ 228.646501][ T7784] __nla_validate_parse: 1 callbacks suppressed [ 228.646520][ T7784] netlink: 60 bytes leftover after parsing attributes in process `syz.1.599'. [ 228.980841][ T7788] binder: 7787:7788 ioctl 8400941f 80000500 returned -22 [ 228.993569][ T7790] netlink: 52 bytes leftover after parsing attributes in process `syz.4.603'. [ 229.016197][ T7790] netlink: 52 bytes leftover after parsing attributes in process `syz.4.603'. [ 229.028554][ T7788] program syz.3.602 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 229.047940][ T7790] netlink: 52 bytes leftover after parsing attributes in process `syz.4.603'. [ 229.059637][ T7788] binder: 7787:7788 ioctl 8903 80000180 returned -22 [ 229.090432][ T7788] netlink: 8 bytes leftover after parsing attributes in process `syz.3.602'. [ 229.125622][ T7788] netlink: 24 bytes leftover after parsing attributes in process `syz.3.602'. [ 229.165252][ T7791] binder: 7787:7791 ioctl 400c620e 80000200 returned -22 [ 230.807340][ T5709] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 230.969354][ T5709] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.019855][ T5709] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 231.049563][ T5709] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 231.086084][ T5709] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.118423][ T5709] usb 4-1: config 0 descriptor?? [ 231.745639][ T7822] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.082447][ T7827] netlink: 28 bytes leftover after parsing attributes in process `syz.0.615'. [ 232.151634][ T7828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.196912][ T7828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.278839][ T7828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.325614][ T7828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.347290][ T7831] binder: 7830:7831 ioctl 8400941f 80000500 returned -22 [ 232.392898][ T7831] program syz.1.616 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 232.429579][ T7831] binder: 7830:7831 ioctl 8903 80000180 returned -22 [ 232.465051][ T7831] netlink: 8 bytes leftover after parsing attributes in process `syz.1.616'. [ 232.504155][ T7831] netlink: 24 bytes leftover after parsing attributes in process `syz.1.616'. [ 232.518706][ T7834] binder: 7830:7834 ioctl 400c620e 80000200 returned -22 [ 232.939278][ T7843] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 232.945443][ T7843] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 232.951758][ T7843] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 232.959918][ T7843] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 232.966061][ T7843] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 233.076592][ T7850] netlink: 'syz.0.623': attribute type 7 has an invalid length. [ 233.086296][ T7850] netlink: 'syz.0.623': attribute type 8 has an invalid length. [ 233.217313][ T807] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 233.376894][ T807] usb 2-1: Using ep0 maxpacket: 32 [ 233.389469][ T807] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.415297][ T807] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 233.439521][ T807] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 233.455229][ T807] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.476879][ T807] usb 2-1: Product: ⯈㤋⯷욝㶑랔漰䨆紒¬㤸掃䓝梻䔾ॳ痯ټ俦뒤Ⰱ相냞社⮌挻㠫ⓚ斒鿬遤伴垽ﬢ䊲䪏⃪瑠㤶챣 [ 233.514337][ T807] usb 2-1: Manufacturer: ᭃ킋櫒蘔뻄㞫줄㒊Რ믄픱ᲁ꭬ꈯᱍ熅킗韈搊㼿ㅖﾣ噕쀪䃮㑃隖॑옑我藟㨭짻䯾䇅卮韬‭磯쫺ﲥ왧蒠♼ᆛ褜ⷚ絮뼆㩒콈圲鳫㏚誹㎕맽컩Ҥﯢ᝙驤鳲텹ᕐʥ菃緁我៥瞊⮈跋﷌阮겓 [ 233.580906][ T807] usb 2-1: SerialNumber: syz [ 233.594350][ T5716] usb 4-1: USB disconnect, device number 37 [ 233.813057][ T7845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.842420][ T7845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.887023][ T807] cdc_ncm 2-1:1.0: bind() failure [ 233.926493][ T807] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 233.951579][ T807] cdc_ncm 2-1:1.1: bind() failure [ 233.986919][ T807] usb 2-1: USB disconnect, device number 25 [ 233.993614][ T7871] binder: 7870:7871 ioctl 8400941f 80000500 returned -22 [ 234.050947][ T7871] program syz.3.630 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 234.074484][ T30] audit: type=1326 audit(1778461892.697:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7872 comm="syz.4.628" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef01c code=0x7ffc0000 [ 234.080666][ T7871] binder: 7870:7871 ioctl 8903 80000180 returned -22 [ 234.118500][ T30] audit: type=1326 audit(1778461892.697:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7872 comm="syz.4.628" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf6fef01c code=0x7ffc0000 [ 234.145163][ T30] audit: type=1326 audit(1778461892.697:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7872 comm="syz.4.628" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef01c code=0x7ffc0000 [ 234.265386][ T30] audit: type=1326 audit(1778461892.727:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7872 comm="syz.4.628" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6fef01c code=0x7ffc0000 [ 234.290647][ T30] audit: type=1326 audit(1778461892.727:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7872 comm="syz.4.628" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef01c code=0x7ffc0000 [ 234.352639][ T7871] binder: 7870:7871 ioctl 400c620e 80000200 returned -22 [ 234.455251][ T30] audit: type=1326 audit(1778461892.727:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7872 comm="syz.4.628" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf712616b code=0x7ffc0000 [ 234.562075][ T30] audit: type=1326 audit(1778461892.727:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7872 comm="syz.4.628" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf712616b code=0x7ffc0000 [ 234.670998][ T30] audit: type=1326 audit(1778461892.727:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7872 comm="syz.4.628" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef01c code=0x7ffc0000 [ 234.754816][ T30] audit: type=1326 audit(1778461892.737:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7872 comm="syz.4.628" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf6fef01c code=0x7ffc0000 [ 234.830620][ T30] audit: type=1326 audit(1778461892.737:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7872 comm="syz.4.628" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef01c code=0x7ffc0000 [ 234.896544][ T7885] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 234.978334][ T5628] Bluetooth: hci3: command 0x0c1a tx timeout [ 234.978353][ T5626] Bluetooth: hci4: command 0x0c1a tx timeout [ 234.984491][ T5628] Bluetooth: hci2: command 0x0c1a tx timeout [ 234.990734][ T5632] Bluetooth: hci1: command 0x0c1a tx timeout [ 235.004534][ T4945] Bluetooth: hci0: command 0x0c1a tx timeout [ 235.048565][ T7890] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 235.102529][ T7890] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 235.152487][ T7890] kvm: requested 11733 ns i8254 timer period limited to 200000 ns [ 235.177375][ T5716] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 235.199364][ T7890] kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 235.231530][ T7890] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 235.255704][ T7890] kvm: requested 5028 ns i8254 timer period limited to 200000 ns [ 235.277384][ T7890] kvm: requested 39390 ns i8254 timer period limited to 200000 ns [ 235.300572][ T7890] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 235.323072][ T7890] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 235.345737][ T7894] fuse: root generation should be zero [ 235.372850][ T5716] usb 2-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 235.408287][ T5716] usb 2-1: config 36 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 235.449705][ T5716] usb 2-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 235.502242][ T5716] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 235.524306][ T5716] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 235.551547][ T5716] usb 2-1: Manufacturer: syz [ 235.565778][ T5716] usb 2-1: SerialNumber: syz [ 235.602224][ T7888] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 235.780999][ T7902] loop3: detected capacity change from 0 to 7 [ 235.804978][ C1] blk_print_req_error: 51 callbacks suppressed [ 235.804994][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 235.820494][ C1] buffer_io_error: 50 callbacks suppressed [ 235.820511][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 235.837434][ T807] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 235.851406][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 235.861347][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 235.873475][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 235.882867][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 235.894373][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 235.903671][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 235.914703][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 235.924043][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 235.934688][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 235.943894][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 235.954700][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 235.964083][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 235.972330][ T7902] ldm_validate_partition_table(): Disk read failed. [ 235.988613][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 235.997885][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 236.042004][ T5716] yealink 2-1:36.0: invalid payload size 64, expected 16 [ 236.045959][ T7902] Buffer I/O error on dev loop3, logical block 0, async page read [ 236.061337][ T807] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.062722][ T7902] Buffer I/O error on dev loop3, logical block 0, async page read [ 236.082119][ T7902] Dev loop3: unable to read RDB block 0 [ 236.082645][ T5716] input: Yealink usb-p1k as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:36.0/input/input50 [ 236.089334][ T7902] loop3: unable to read partition table [ 236.100140][ T807] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 236.115213][ T807] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 236.125775][ T807] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.139772][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 236.143032][ T7902] loop3: partition table beyond EOD, [ 236.146914][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 236.160000][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 236.167218][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 236.175067][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 236.183467][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 236.190478][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 236.198449][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 236.207219][ T7902] truncated [ 236.208047][ C1] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 236.210919][ T7902] loop_reread_partitions: partition scan of loop3 (Cj̖P=ý?}X %֐ȵ4FLQk݊5) failed (rc=-5) [ 236.217249][ C1] yealink 2-1:36.0: unexpected response 0 [ 236.225543][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 236.244492][ C1] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 236.251312][ C1] yealink 2-1:36.0: unexpected response 0 [ 236.257971][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 236.265341][ C1] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 236.272389][ C1] yealink 2-1:36.0: unexpected response 0 [ 236.278911][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 236.286004][ C1] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 236.293855][ C1] yealink 2-1:36.0: unexpected response 0 [ 236.300465][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 236.307581][ C1] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 236.314469][ C1] yealink 2-1:36.0: unexpected response 0 [ 236.320555][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 236.328201][ C1] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 236.335022][ C1] yealink 2-1:36.0: unexpected response 0 [ 236.343185][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 236.351188][ C1] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 236.358333][ C1] yealink 2-1:36.0: unexpected response 0 [ 236.364546][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 236.371702][ C1] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 236.378500][ C1] yealink 2-1:36.0: unexpected response 0 [ 236.384737][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 236.391774][ C1] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 236.398655][ C1] yealink 2-1:36.0: unexpected response 0 [ 236.405798][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 236.412862][ C1] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 236.419654][ C1] yealink 2-1:36.0: unexpected response 0 [ 236.425666][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 236.432691][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 236.441913][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 236.449885][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 236.456912][ C1] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 236.464068][ C1] yealink 2-1:36.0: unexpected response 0 [ 236.475372][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 236.482515][ C1] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 236.489311][ C1] yealink 2-1:36.0: unexpected response 0 [ 236.495534][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 236.502630][ C1] yealink 2-1:36.0: urb_irq_callback - urb status -71 [ 236.509528][ C1] yealink 2-1:36.0: unexpected response 0 [ 236.515655][ T5716] usb 2-1: USB disconnect, device number 26 [ 236.521650][ C1] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 236.521682][ C1] yealink 2-1:36.0: urb_ctl_callback - usb_submit_urb failed -19 [ 236.576160][ T807] usb 5-1: config 0 descriptor?? [ 236.868023][ T7913] FAULT_INJECTION: forcing a failure. [ 236.868023][ T7913] name failslab, interval 1, probability 0, space 0, times 0 [ 236.881183][ T7913] CPU: 0 UID: 0 PID: 7913 Comm: syz.0.644 Tainted: G L syzkaller #0 PREEMPT(full) [ 236.881212][ T7913] Tainted: [L]=SOFTLOCKUP [ 236.881219][ T7913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 236.881242][ T7913] Call Trace: [ 236.881250][ T7913] [ 236.881258][ T7913] dump_stack_lvl+0xe8/0x150 [ 236.881285][ T7913] should_fail_ex+0x412/0x560 [ 236.881313][ T7913] should_failslab+0xa8/0x100 [ 236.881338][ T7913] __kmalloc_cache_noprof+0x88/0x660 [ 236.881360][ T7913] ? __pfx_stack_trace_save+0x10/0x10 [ 236.881384][ T7913] ? rtnl_newlink+0x136/0x1bb0 [ 236.881411][ T7913] rtnl_newlink+0x136/0x1bb0 [ 236.881432][ T7913] ? kasan_save_track+0x3e/0x80 [ 236.881453][ T7913] ? kasan_save_free_info+0x46/0x50 [ 236.881471][ T7913] ? __kasan_slab_free+0x5c/0x80 [ 236.881493][ T7913] ? dev_hard_start_xmit+0x2cd/0x830 [ 236.881515][ T7913] ? __dev_queue_xmit+0x14d9/0x3950 [ 236.881537][ T7913] ? __netlink_deliver_tap+0x5ad/0x850 [ 236.881557][ T7913] ? netlink_deliver_tap+0x19c/0x1b0 [ 236.881579][ T7913] ? netlink_unicast+0x730/0x8e0 [ 236.881596][ T7913] ? netlink_sendmsg+0x813/0xb40 [ 236.881618][ T7913] ? __pfx_rtnl_newlink+0x10/0x10 [ 236.881644][ T7913] ? do_fast_syscall_32+0x33/0x70 [ 236.881667][ T7913] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 236.881719][ T7913] ? kasan_quarantine_put+0xbb/0x1f0 [ 236.881740][ T7913] ? lockdep_hardirqs_on+0x7a/0x110 [ 236.881766][ T7913] ? nlmon_xmit+0xb0/0x100 [ 236.881786][ T7913] ? kmem_cache_free+0x182/0x650 [ 236.881819][ T7913] ? __lock_acquire+0x6b5/0x2cf0 [ 236.881842][ T7913] ? __dev_queue_xmit+0x2b6/0x3950 [ 236.881869][ T7913] ? __local_bh_enable_ip+0xd0/0x130 [ 236.881887][ T7913] ? lockdep_hardirqs_on+0x7a/0x110 [ 236.881908][ T7913] ? __dev_queue_xmit+0x2b6/0x3950 [ 236.881931][ T7913] ? __local_bh_enable_ip+0xd0/0x130 [ 236.881947][ T7913] ? __dev_queue_xmit+0x2b6/0x3950 [ 236.881977][ T7913] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 236.882012][ T7913] ? __pfx_rtnl_newlink+0x10/0x10 [ 236.882031][ T7913] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 236.882055][ T7913] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 236.882074][ T7913] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 236.882093][ T7913] ? ref_tracker_free+0x693/0x840 [ 236.882118][ T7913] ? __pfx_ref_tracker_free+0x10/0x10 [ 236.882148][ T7913] netlink_rcv_skb+0x232/0x4b0 [ 236.882172][ T7913] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 236.882194][ T7913] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 236.882226][ T7913] ? netlink_deliver_tap+0x2e/0x1b0 [ 236.882248][ T7913] ? netlink_deliver_tap+0x2e/0x1b0 [ 236.882275][ T7913] netlink_unicast+0x75c/0x8e0 [ 236.882305][ T7913] netlink_sendmsg+0x813/0xb40 [ 236.882335][ T7913] ? __pfx_netlink_sendmsg+0x10/0x10 [ 236.882364][ T7913] ? aa_sock_msg_perm+0xf1/0x1b0 [ 236.882396][ T7913] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 236.882426][ T7913] ____sys_sendmsg+0x972/0x9f0 [ 236.882457][ T7913] ? __pfx_____sys_sendmsg+0x10/0x10 [ 236.882484][ T7913] ? kstrtoull+0x12f/0x1d0 [ 236.882511][ T7913] ___sys_sendmsg+0x2a5/0x360 [ 236.882533][ T7913] ? __lock_acquire+0x6b5/0x2cf0 [ 236.882555][ T7913] ? __pfx____sys_sendmsg+0x10/0x10 [ 236.882580][ T7913] ? get_pid_task+0x20/0x1f0 [ 236.882602][ T7913] ? get_pid_task+0x20/0x1f0 [ 236.882620][ T7913] ? get_pid_task+0x20/0x1f0 [ 236.882673][ T7913] ? __fget_files+0x2a/0x420 [ 236.882692][ T7913] ? __fget_files+0x3a0/0x420 [ 236.882721][ T7913] __sys_sendmsg+0x183/0x260 [ 236.882746][ T7913] ? __pfx___sys_sendmsg+0x10/0x10 [ 236.882788][ T7913] __do_fast_syscall_32+0x229/0x6e0 [ 236.882812][ T7913] ? do_fast_syscall_32+0x33/0x70 [ 236.882834][ T7913] ? lockdep_hardirqs_on+0x7a/0x110 [ 236.882856][ T7913] ? asm_int80_emulation+0x1a/0x20 [ 236.882872][ T7913] ? do_int80_emulation+0x286/0x530 [ 236.882894][ T7913] ? trace_irq_disable+0x3b/0x140 [ 236.882920][ T7913] do_fast_syscall_32+0x33/0x70 [ 236.882945][ T7913] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 236.882965][ T7913] RIP: 0023:0xf700f01c [ 236.882981][ T7913] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 236.882996][ T7913] RSP: 002b:00000000f53fd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 236.883014][ T7913] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 236.883026][ T7913] RDX: 0000000000008800 RSI: 0000000000000000 RDI: 0000000000000000 [ 236.883037][ T7913] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 236.883047][ T7913] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 236.883057][ T7913] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 236.883083][ T7913] [ 237.353719][ T5695] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 237.444630][ T7916] binder: 7915:7916 ioctl 8400941f 80000500 returned -22 [ 237.452287][ T7916] binder: BINDER_SET_CONTEXT_MGR already set [ 237.459744][ T7916] binder: 7915:7916 ioctl 4018620d 80004a80 returned -16 [ 237.472108][ T5716] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 237.501789][ T7916] program syz.2.643 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 237.512362][ T7916] binder: 7915:7916 ioctl 8903 80000180 returned -22 [ 237.520861][ T7916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.643'. [ 237.530606][ T7916] netlink: 24 bytes leftover after parsing attributes in process `syz.2.643'. [ 237.536857][ T5695] usb 4-1: device descriptor read/64, error -71 [ 237.555388][ T7916] binder: 7915:7916 ioctl 400c620e 80000200 returned -22 [ 237.669023][ T5716] usb 2-1: Using ep0 maxpacket: 8 [ 237.683210][ T5716] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 237.703094][ T5716] usb 2-1: New USB device found, idVendor=1235, idProduct=8203, bcdDevice= 0.40 [ 237.724356][ T5716] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.746354][ T5716] usb 2-1: Product: Т [ 237.757136][ T5716] usb 2-1: Manufacturer: ┍䭧䑑ᛳỺ뒷⊧肿粇踃︍谔녖ኆ鶐䪵谪佬洇봞₭ఇ㔥铝㨓狫꧿ⱝ쐩兰鉽⮯噛瘞╬娞켌ꮞᚅ뽕瑺묳䫬⃅鶆㝜豣᪾쾓맫ࠩ뀠晰꼆迡⹈㲢振Ħ额몠궢蟎䧥쩦竍㊨室₺ꍦ৲囒鐌벟陁麀刉㙽۹놚詍㠐浦䘧㼀닸器╩釘戄ﱯ䫻宵븜褼䵴຃馦攱莆 [ 237.797053][ T5695] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 237.831427][ T7927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.860839][ T7927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.873853][ T5716] usb 2-1: SerialNumber: ఁ [ 237.905011][ T7927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.917422][ T7927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.946971][ T5695] usb 4-1: device descriptor read/64, error -71 [ 238.057037][ T5695] usb usb4-port1: attempt power cycle [ 238.114955][ T5716] usb 2-1: unit 1 not found! [ 238.126358][ T5716] usb 2-1: unit 6 not found! [ 238.136811][ T5716] usb 2-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8203); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 238.156960][ T5716] usb 2-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 238.241337][ T5716] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 238.273955][ T5716] usb 2-1: USB disconnect, device number 27 [ 238.294301][ T5736] udevd[5736]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 238.406843][ T5695] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 238.448609][ T5695] usb 4-1: device descriptor read/8, error -71 [ 238.690828][ T5695] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 238.701503][ T7935] FAULT_INJECTION: forcing a failure. [ 238.701503][ T7935] name failslab, interval 1, probability 0, space 0, times 0 [ 238.743704][ T7935] CPU: 1 UID: 0 PID: 7935 Comm: syz.0.649 Tainted: G L syzkaller #0 PREEMPT(full) [ 238.743725][ T7935] Tainted: [L]=SOFTLOCKUP [ 238.743765][ T7935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 238.743776][ T7935] Call Trace: [ 238.743784][ T7935] [ 238.743792][ T7935] dump_stack_lvl+0xe8/0x150 [ 238.743813][ T7935] should_fail_ex+0x412/0x560 [ 238.743840][ T7935] should_failslab+0xa8/0x100 [ 238.743866][ T7935] __kmalloc_cache_node_noprof+0x8a/0x6b0 [ 238.743891][ T7935] ? __get_vm_area_node+0x13f/0x300 [ 238.743916][ T7935] __get_vm_area_node+0x13f/0x300 [ 238.743935][ T7935] ? do_raw_spin_lock+0x12b/0x2f0 [ 238.744032][ T7935] __vmalloc_node_range_noprof+0x36a/0x1750 [ 238.744048][ T7935] ? xt_compat_init_offsets+0xdc/0x1d0 [ 238.744078][ T7935] ? __mutex_lock+0x608/0x1550 [ 238.744094][ T7935] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 238.744107][ T7935] ? translate_compat_table+0x1e9/0x2620 [ 238.744121][ T7935] ? __pfx___mutex_lock+0x10/0x10 [ 238.744141][ T7935] ? xt_compat_init_offsets+0xdc/0x1d0 [ 238.744157][ T7935] vmalloc_noprof+0xb2/0xe0 [ 238.744170][ T7935] ? xt_compat_init_offsets+0xdc/0x1d0 [ 238.744186][ T7935] xt_compat_init_offsets+0xdc/0x1d0 [ 238.744203][ T7935] translate_compat_table+0x209/0x2620 [ 238.744229][ T7935] ? __pfx_translate_compat_table+0x10/0x10 [ 238.744250][ T7935] ? _copy_from_user+0x94/0xb0 [ 238.744267][ T7935] do_ip6t_set_ctl+0xa6c/0xe10 [ 238.744282][ T7935] ? rcu_is_watching+0x15/0xb0 [ 238.744339][ T7935] ? trace_contention_end+0x3d/0x140 [ 238.744359][ T7935] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 238.744390][ T7935] ? nf_setsockopt+0x221/0x290 [ 238.744409][ T7935] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 238.744423][ T7935] ? nf_setsockopt+0x3a/0x290 [ 238.744442][ T7935] ? __pfx_aa_sk_perm+0x10/0x10 [ 238.744457][ T7935] nf_setsockopt+0x26f/0x290 [ 238.744469][ T7935] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 238.744482][ T7935] do_sock_setsockopt+0x17c/0x1b0 [ 238.744498][ T7935] __ia32_sys_setsockopt+0x13d/0x1b0 [ 238.744514][ T7935] __do_fast_syscall_32+0x229/0x6e0 [ 238.744558][ T7935] ? do_fast_syscall_32+0x33/0x70 [ 238.744573][ T7935] ? irqentry_exit+0x10f/0x760 [ 238.744589][ T7935] do_fast_syscall_32+0x33/0x70 [ 238.744604][ T7935] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 238.744617][ T7935] RIP: 0023:0xf700f01c [ 238.744628][ T7935] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 238.744636][ T7935] RSP: 002b:00000000f53fd50c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 238.744647][ T7935] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000029 [ 238.744654][ T7935] RDX: 0000000000000040 RSI: 0000000080000000 RDI: 0000000000000360 [ 238.744660][ T7935] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 238.744666][ T7935] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 238.744671][ T7935] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 238.744686][ T7935] [ 238.745381][ T7935] syz.0.649: vmalloc error: size 24, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null) [ 239.073006][ T5695] usb 4-1: device descriptor read/8, error -71 [ 239.093597][ T7935] ,cpuset=/,mems_allowed=0-1 [ 239.104859][ T7935] CPU: 0 UID: 0 PID: 7935 Comm: syz.0.649 Tainted: G L syzkaller #0 PREEMPT(full) [ 239.104877][ T7935] Tainted: [L]=SOFTLOCKUP [ 239.104881][ T7935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 239.104888][ T7935] Call Trace: [ 239.104892][ T7935] [ 239.104897][ T7935] dump_stack_lvl+0xe8/0x150 [ 239.104914][ T7935] warn_alloc+0x249/0x340 [ 239.104932][ T7935] ? __pfx_warn_alloc+0x10/0x10 [ 239.104946][ T7935] ? __get_vm_area_node+0x13f/0x300 [ 239.104961][ T7935] ? __get_vm_area_node+0x2b5/0x300 [ 239.104972][ T7935] ? do_raw_spin_lock+0x12b/0x2f0 [ 239.104990][ T7935] __vmalloc_node_range_noprof+0x38f/0x1750 [ 239.105015][ T7935] ? __mutex_lock+0x608/0x1550 [ 239.105032][ T7935] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 239.105045][ T7935] ? translate_compat_table+0x1e9/0x2620 [ 239.105059][ T7935] ? __pfx___mutex_lock+0x10/0x10 [ 239.105075][ T7935] ? xt_compat_init_offsets+0xdc/0x1d0 [ 239.105091][ T7935] vmalloc_noprof+0xb2/0xe0 [ 239.105104][ T7935] ? xt_compat_init_offsets+0xdc/0x1d0 [ 239.105120][ T7935] xt_compat_init_offsets+0xdc/0x1d0 [ 239.105137][ T7935] translate_compat_table+0x209/0x2620 [ 239.105163][ T7935] ? __pfx_translate_compat_table+0x10/0x10 [ 239.105187][ T7935] ? _copy_from_user+0x94/0xb0 [ 239.105204][ T7935] do_ip6t_set_ctl+0xa6c/0xe10 [ 239.105217][ T7935] ? rcu_is_watching+0x15/0xb0 [ 239.105230][ T7935] ? trace_contention_end+0x3d/0x140 [ 239.105243][ T7935] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 239.105258][ T7935] ? nf_setsockopt+0x221/0x290 [ 239.105271][ T7935] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 239.105284][ T7935] ? nf_setsockopt+0x3a/0x290 [ 239.105302][ T7935] ? __pfx_aa_sk_perm+0x10/0x10 [ 239.105318][ T7935] nf_setsockopt+0x26f/0x290 [ 239.105329][ T7935] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 239.105341][ T7935] do_sock_setsockopt+0x17c/0x1b0 [ 239.105357][ T7935] __ia32_sys_setsockopt+0x13d/0x1b0 [ 239.105373][ T7935] __do_fast_syscall_32+0x229/0x6e0 [ 239.105388][ T7935] ? do_fast_syscall_32+0x33/0x70 [ 239.105403][ T7935] ? irqentry_exit+0x10f/0x760 [ 239.105419][ T7935] do_fast_syscall_32+0x33/0x70 [ 239.105434][ T7935] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 239.105446][ T7935] RIP: 0023:0xf700f01c [ 239.105456][ T7935] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 239.105464][ T7935] RSP: 002b:00000000f53fd50c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 239.105475][ T7935] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000029 [ 239.105481][ T7935] RDX: 0000000000000040 RSI: 0000000080000000 RDI: 0000000000000360 [ 239.105487][ T7935] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 239.105492][ T7935] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 239.105498][ T7935] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 239.105517][ T7935] [ 239.105529][ T7935] Mem-Info: [ 239.453999][ T5718] usb 5-1: USB disconnect, device number 32 [ 239.546462][ T7935] active_anon:11346 inactive_anon:0 isolated_anon:0 [ 239.546462][ T7935] active_file:19035 inactive_file:40032 isolated_file:0 [ 239.546462][ T7935] unevictable:768 dirty:284 writeback:0 [ 239.546462][ T7935] slab_reclaimable:6147 slab_unreclaimable:95322 [ 239.546462][ T7935] mapped:30458 shmem:1290 pagetables:1754 [ 239.546462][ T7935] sec_pagetables:0 bounce:0 [ 239.546462][ T7935] kernel_misc_reclaimable:0 [ 239.546462][ T7935] free:1305330 free_pcp:13786 free_cma:0 [ 239.601516][ T5695] usb usb4-port1: unable to enumerate USB device [ 239.617732][ T7935] Node 0 active_anon:45384kB inactive_anon:0kB active_file:76140kB inactive_file:159924kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121832kB dirty:1136kB writeback:0kB shmem:3624kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12144kB pagetables:6724kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 239.666857][ T7935] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:192kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 239.712286][ T7935] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 239.747678][ T7935] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 239.764756][ T7935] Node 0 DMA32 free:1262220kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:45884kB inactive_anon:0kB active_file:76140kB inactive_file:159924kB unevictable:1536kB writepending:1136kB zspages:0kB present:3129332kB managed:2552616kB mlocked:0kB bounce:0kB free_pcp:54124kB local_pcp:23740kB free_cma:0kB [ 239.811869][ T7935] lowmem_reserve[]: 0 0 0 0 0 [ 239.820013][ T7935] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:668kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 239.883320][ T7935] lowmem_reserve[]: 0 0 0 0 0 [ 239.892204][ T7935] Node 1 Normal free:3944040kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 239.931566][ T7935] lowmem_reserve[]: 0 0 0 0 0 [ 239.942822][ T7935] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 239.956519][ T7935] Node 0 DMA32: 3044*4kB (UME) 2298*8kB (UME) 650*16kB (UME) 694*32kB (UME) 353*64kB (UME) 215*128kB (UME) 117*256kB (UME) 103*512kB (UME) 59*1024kB (UME) 34*2048kB (UM) 229*4096kB (UM) = 1264000kB [ 239.980565][ T7935] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 240.003025][ T7935] Node 1 Normal: 0*4kB 1*8kB (M) 8*16kB (UM) 9*32kB (UM) 9*64kB (UM) 3*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 961*4096kB (M) = 3944040kB [ 240.023951][ T7935] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 240.041143][ T7935] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 240.051974][ T7935] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 240.063695][ T7935] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 240.073835][ T7935] 60352 total pagecache pages [ 240.079197][ T7935] 0 pages in swap cache [ 240.083443][ T7935] Free swap = 124996kB [ 240.090180][ T7935] Total swap = 124996kB [ 240.094495][ T7935] 2097051 pages RAM [ 240.098838][ T7935] 0 pages HighMem/MovableOnly [ 240.103721][ T7935] 427115 pages reserved [ 240.108348][ T7935] 0 pages cma reserved [ 240.476791][ T5716] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 240.502703][ T807] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 240.639441][ T5716] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.654912][ T5716] usb 2-1: config 0 has no interfaces? [ 240.669620][ T807] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.680759][ T5716] usb 2-1: New USB device found, idVendor=0925, idProduct=8066, bcdDevice= 0.00 [ 240.696754][ T807] usb 3-1: config 0 has no interfaces? [ 240.703515][ T5716] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.712916][ T807] usb 3-1: New USB device found, idVendor=0925, idProduct=8066, bcdDevice= 0.00 [ 240.724729][ T807] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.738343][ T5716] usb 2-1: config 0 descriptor?? [ 240.772271][ T807] usb 3-1: config 0 descriptor?? [ 241.341785][ T7967] FAULT_INJECTION: forcing a failure. [ 241.341785][ T7967] name failslab, interval 1, probability 0, space 0, times 0 [ 241.363180][ T7967] CPU: 1 UID: 0 PID: 7967 Comm: syz.3.660 Tainted: G L syzkaller #0 PREEMPT(full) [ 241.363209][ T7967] Tainted: [L]=SOFTLOCKUP [ 241.363214][ T7967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 241.363223][ T7967] Call Trace: [ 241.363230][ T7967] [ 241.363236][ T7967] dump_stack_lvl+0xe8/0x150 [ 241.363258][ T7967] should_fail_ex+0x412/0x560 [ 241.363279][ T7967] should_failslab+0xa8/0x100 [ 241.363303][ T7967] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 241.363327][ T7967] ? __alloc_skb+0x186/0x7d0 [ 241.363346][ T7967] ? __alloc_skb+0x1d0/0x7d0 [ 241.363364][ T7967] ? __local_bh_enable_ip+0xd0/0x130 [ 241.363387][ T7967] __alloc_skb+0x1d0/0x7d0 [ 241.363407][ T7967] ? netlink_ack_tlv_len+0x78/0x210 [ 241.363432][ T7967] netlink_ack+0x146/0xa50 [ 241.363455][ T7967] ? security_capable+0xb9/0x2c0 [ 241.363484][ T7967] nfnetlink_rcv+0x2a7/0x27b0 [ 241.363550][ T7967] ? __local_bh_enable_ip+0xd0/0x130 [ 241.363568][ T7967] ? lockdep_hardirqs_on+0x7a/0x110 [ 241.363588][ T7967] ? __dev_queue_xmit+0x2b6/0x3950 [ 241.363611][ T7967] ? __local_bh_enable_ip+0xd0/0x130 [ 241.363625][ T7967] ? __dev_queue_xmit+0x2b6/0x3950 [ 241.363646][ T7967] ? __dev_queue_xmit+0x1fe5/0x3950 [ 241.363666][ T7967] ? __sys_sendmsg+0x183/0x260 [ 241.363692][ T7967] ? __dev_queue_xmit+0x2b6/0x3950 [ 241.363717][ T7967] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 241.363742][ T7967] ? __pfx___dev_queue_xmit+0x10/0x10 [ 241.363772][ T7967] ? ref_tracker_free+0x693/0x840 [ 241.363797][ T7967] ? __pfx_ref_tracker_free+0x10/0x10 [ 241.363834][ T7967] ? skb_clone+0x246/0x3a0 [ 241.363861][ T7967] ? __netlink_deliver_tap+0x807/0x850 [ 241.363882][ T7967] ? netlink_deliver_tap+0x2e/0x1b0 [ 241.363914][ T7967] ? netlink_deliver_tap+0x2e/0x1b0 [ 241.363935][ T7967] ? netlink_deliver_tap+0x2e/0x1b0 [ 241.363961][ T7967] netlink_unicast+0x75c/0x8e0 [ 241.363991][ T7967] netlink_sendmsg+0x813/0xb40 [ 241.364020][ T7967] ? __pfx_netlink_sendmsg+0x10/0x10 [ 241.364045][ T7967] ? aa_sock_msg_perm+0xf1/0x1b0 [ 241.364068][ T7967] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 241.364094][ T7967] ____sys_sendmsg+0x972/0x9f0 [ 241.364125][ T7967] ? __pfx_____sys_sendmsg+0x10/0x10 [ 241.364152][ T7967] ? kstrtoull+0x12f/0x1d0 [ 241.364174][ T7967] ___sys_sendmsg+0x2a5/0x360 [ 241.364196][ T7967] ? __lock_acquire+0x6b5/0x2cf0 [ 241.364218][ T7967] ? __pfx____sys_sendmsg+0x10/0x10 [ 241.364242][ T7967] ? get_pid_task+0x20/0x1f0 [ 241.364262][ T7967] ? get_pid_task+0x20/0x1f0 [ 241.364279][ T7967] ? get_pid_task+0x20/0x1f0 [ 241.364318][ T7967] ? __fget_files+0x2a/0x420 [ 241.364335][ T7967] ? __fget_files+0x3a0/0x420 [ 241.364362][ T7967] __sys_sendmsg+0x183/0x260 [ 241.364385][ T7967] ? __pfx___sys_sendmsg+0x10/0x10 [ 241.364424][ T7967] __do_fast_syscall_32+0x229/0x6e0 [ 241.364448][ T7967] ? do_fast_syscall_32+0x33/0x70 [ 241.364470][ T7967] ? lockdep_hardirqs_on+0x7a/0x110 [ 241.364498][ T7967] ? asm_int80_emulation+0x1a/0x20 [ 241.364512][ T7967] ? do_int80_emulation+0x286/0x530 [ 241.364534][ T7967] ? trace_irq_disable+0x3b/0x140 [ 241.364560][ T7967] do_fast_syscall_32+0x33/0x70 [ 241.364583][ T7967] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 241.364602][ T7967] RIP: 0023:0xf7fa601c [ 241.364617][ T7967] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 241.364631][ T7967] RSP: 002b:00000000f546650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 241.364648][ T7967] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000008000c2c0 [ 241.364659][ T7967] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 241.364668][ T7967] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 241.364677][ T7967] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 241.364686][ T7967] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 241.364711][ T7967] [ 242.097005][ T5718] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 242.113491][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 242.123025][ C1] buffer_io_error: 9 callbacks suppressed [ 242.123041][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 242.137755][ C1] I/O error, dev loop5, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 242.147528][ C1] Buffer I/O error on dev loop5, logical block 1, async page read [ 242.155683][ C1] I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 242.164913][ C1] Buffer I/O error on dev loop5, logical block 2, async page read [ 242.175011][ C1] I/O error, dev loop5, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 242.184342][ C1] Buffer I/O error on dev loop5, logical block 3, async page read [ 242.194862][ C1] I/O error, dev loop5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 242.204073][ C1] Buffer I/O error on dev loop5, logical block 4, async page read [ 242.212065][ C1] I/O error, dev loop5, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 242.221248][ C1] Buffer I/O error on dev loop5, logical block 5, async page read [ 242.225503][ T7979] FAULT_INJECTION: forcing a failure. [ 242.225503][ T7979] name failslab, interval 1, probability 0, space 0, times 0 [ 242.229191][ C1] I/O error, dev loop5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 242.229219][ C1] Buffer I/O error on dev loop5, logical block 6, async page read [ 242.232668][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 242.246501][ C0] I/O error, dev loop5, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 242.251508][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 242.260141][ C0] Buffer I/O error on dev loop5, logical block 1, async page read [ 242.260243][ C0] I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 242.271017][ T7979] CPU: 1 UID: 0 PID: 7979 Comm: syz.0.664 Tainted: G L syzkaller #0 PREEMPT(full) [ 242.271044][ T7979] Tainted: [L]=SOFTLOCKUP [ 242.271051][ T7979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 242.271061][ T7979] Call Trace: [ 242.271067][ T7979] [ 242.271074][ T7979] dump_stack_lvl+0xe8/0x150 [ 242.271098][ T7979] should_fail_ex+0x412/0x560 [ 242.271125][ T7979] should_failslab+0xa8/0x100 [ 242.271152][ T7979] __kmalloc_noprof+0xe8/0x760 [ 242.271184][ T7979] ? security_task_alloc+0x4d/0x330 [ 242.271208][ T7979] security_task_alloc+0x4d/0x330 [ 242.271229][ T7979] copy_process+0x1d12/0x4440 [ 242.271263][ T7979] ? copy_process+0xd87/0x4440 [ 242.271290][ T7979] ? __pfx_copy_process+0x10/0x10 [ 242.271320][ T7979] ? mutex_init_lockdep+0xdf/0x110 [ 242.271344][ T7979] vhost_task_create+0x1f9/0x380 [ 242.271367][ T7979] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 242.271388][ T7979] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 242.271410][ T7979] ? __pfx_vhost_task_create+0x10/0x10 [ 242.271430][ T7979] ? is_bpf_text_address+0x26/0x2b0 [ 242.271455][ T7979] ? __pfx_vhost_task_fn+0x10/0x10 [ 242.271480][ T7979] ? __lock_acquire+0x6b5/0x2cf0 [ 242.271509][ T7979] kvm_mmu_post_init_vm+0x147/0x2d0 [ 242.271534][ T7979] kvm_arch_vcpu_ioctl_run+0x106/0x20d0 [ 242.271566][ T7979] ? __mutex_trylock_common+0x158/0x260 [ 242.271587][ T7979] ? look_up_lock_class+0x57/0x110 [ 242.271610][ T7979] ? register_lock_class+0x31/0x2e0 [ 242.271627][ T7979] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 242.271653][ T7979] ? __lock_acquire+0x6b5/0x2cf0 [ 242.271673][ T7979] ? __mutex_lock+0x319/0x1550 [ 242.271716][ T7979] ? do_raw_write_lock+0x11d/0x260 [ 242.271753][ T7979] kvm_vcpu_ioctl+0xa62/0xfd0 [ 242.271781][ T7979] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 242.271799][ T7979] ? do_vfs_ioctl+0x1166/0x1530 [ 242.271826][ T7979] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 242.271881][ T7979] kvm_vcpu_compat_ioctl+0x204/0x390 [ 242.271906][ T7979] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 242.271928][ T7979] ? __fget_files+0x3a0/0x420 [ 242.271946][ T7979] ? __fget_files+0x2a/0x420 [ 242.271968][ T7979] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 242.271995][ T7979] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 242.272022][ T7979] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 242.272049][ T7979] ? __fget_files+0x3a0/0x420 [ 242.272074][ T7979] ? fput+0xa0/0xd0 [ 242.272095][ T7979] ? ksys_write+0x242/0x270 [ 242.272128][ T7979] __do_fast_syscall_32+0x229/0x6e0 [ 242.272152][ T7979] ? do_fast_syscall_32+0x33/0x70 [ 242.272183][ T7979] ? lockdep_hardirqs_on+0x7a/0x110 [ 242.272203][ T7979] ? asm_int80_emulation+0x1a/0x20 [ 242.272219][ T7979] ? do_int80_emulation+0x286/0x530 [ 242.272239][ T7979] ? trace_irq_disable+0x3b/0x140 [ 242.272264][ T7979] do_fast_syscall_32+0x33/0x70 [ 242.272289][ T7979] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 242.272309][ T7979] RIP: 0023:0xf700f01c [ 242.272324][ T7979] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 242.272348][ T7979] RSP: 002b:00000000f53fd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 242.272376][ T7979] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80 [ 242.272388][ T7979] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 242.272398][ T7979] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 242.272407][ T7979] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 242.272485][ T7979] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 242.272515][ T7979] [ 242.666039][ C0] Buffer I/O error on dev loop5, logical block 2, async page read [ 242.680293][ T4994] ldm_validate_partition_table(): Disk read failed. [ 242.697783][ T5718] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 242.708835][ T5718] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 242.709872][ T4994] Dev loop5: unable to read RDB block 0 [ 242.726774][ T9] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 242.742574][ T5718] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 242.753014][ T5718] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.755565][ T4994] loop5: unable to read partition table [ 242.764474][ T5718] usb 5-1: config 0 descriptor?? [ 242.769815][ T4994] loop5: partition table beyond EOD, truncated [ 242.898629][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 242.906869][ T9] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.918095][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 242.924838][ T9] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 242.934140][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.945925][ T9] usb 4-1: config 0 descriptor?? [ 243.221219][ T5070] usb 2-1: USB disconnect, device number 28 [ 243.282499][ T5718] usb 3-1: USB disconnect, device number 28 [ 243.376625][ T9] mcp2221 0003:04D8:00DD.000D: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 243.753860][ T7999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.764166][ T7999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.775067][ T7999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.785402][ T7999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.826983][ T807] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 243.976832][ T807] usb 3-1: Using ep0 maxpacket: 8 [ 243.985633][ T807] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 244.000117][ T807] usb 3-1: New USB device found, idVendor=1235, idProduct=8203, bcdDevice= 0.40 [ 244.011094][ T807] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.023830][ T807] usb 3-1: Product: Т [ 244.029883][ T807] usb 3-1: Manufacturer: ┍䭧䑑ᛳỺ뒷⊧肿粇踃︍谔녖ኆ鶐䪵谪佬洇봞₭ఇ㔥铝㨓狫꧿ⱝ쐩兰鉽⮯噛瘞╬娞켌ꮞᚅ뽕瑺묳䫬⃅鶆㝜豣᪾쾓맫ࠩ뀠晰꼆迡⹈㲢振Ħ额몠궢蟎䧥쩦竍㊨室₺ꍦ৲囒鐌벟陁麀刉㙽۹놚詍㠐浦䘧㼀닸器╩釘戄ﱯ䫻宵븜褼䵴຃馦攱莆 [ 244.066175][ T807] usb 3-1: SerialNumber: ఁ [ 244.212765][ T5716] usb 4-1: USB disconnect, device number 42 [ 244.314817][ T807] usb 3-1: unit 1 not found! [ 244.334403][ T807] usb 3-1: unit 6 not found! [ 244.348314][ T807] usb 3-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8203); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 244.381653][ T807] usb 3-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 244.496232][ T807] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 244.535174][ T807] usb 3-1: USB disconnect, device number 29 [ 244.579651][ T5736] udevd[5736]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 244.703172][ T8006] fuse: Bad value for 'group_id' [ 244.708584][ T8006] fuse: Bad value for 'group_id' [ 244.756409][ T8008] fuse: Unknown parameter '' [ 244.839686][ T9] usb 5-1: USB disconnect, device number 33 [ 244.937254][ T8016] random: crng reseeded on system resumption [ 247.557145][ T5718] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 247.708298][ T5718] usb 5-1: device descriptor read/64, error -71 [ 247.869636][ T8087] netlink: 'syz.3.694': attribute type 9 has an invalid length. [ 247.886823][ T8087] netlink: 184592 bytes leftover after parsing attributes in process `syz.3.694'. [ 248.007347][ T5718] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 248.136853][ T9] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 248.158083][ T5718] usb 5-1: device descriptor read/64, error -71 [ 248.267161][ T5718] usb usb5-port1: attempt power cycle [ 248.306797][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 248.317664][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 248.332325][ T9] usb 4-1: config 8 has an invalid interface number: 134 but max is 0 [ 248.343384][ T9] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 248.354211][ T9] usb 4-1: config 8 has no interface number 0 [ 248.364315][ T9] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0011, bcdDevice=fa.e6 [ 248.373766][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.382213][ T9] usb 4-1: Product: syz [ 248.386506][ T9] usb 4-1: Manufacturer: syz [ 248.391291][ T9] usb 4-1: SerialNumber: syz [ 248.443187][ T8103] FAULT_INJECTION: forcing a failure. [ 248.443187][ T8103] name failslab, interval 1, probability 0, space 0, times 0 [ 248.457283][ T8103] CPU: 0 UID: 0 PID: 8103 Comm: syz.1.698 Tainted: G L syzkaller #0 PREEMPT(full) [ 248.457315][ T8103] Tainted: [L]=SOFTLOCKUP [ 248.457321][ T8103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 248.457331][ T8103] Call Trace: [ 248.457338][ T8103] [ 248.457346][ T8103] dump_stack_lvl+0xe8/0x150 [ 248.457371][ T8103] should_fail_ex+0x412/0x560 [ 248.457399][ T8103] should_failslab+0xa8/0x100 [ 248.457426][ T8103] __kmalloc_noprof+0xe8/0x760 [ 248.457449][ T8103] ? tomoyo_encode+0x28b/0x550 [ 248.457475][ T8103] tomoyo_encode+0x28b/0x550 [ 248.457503][ T8103] tomoyo_realpath_from_path+0x58d/0x5d0 [ 248.457536][ T8103] ? tomoyo_path_number_perm+0x219/0x630 [ 248.457556][ T8103] tomoyo_path_number_perm+0x246/0x630 [ 248.457578][ T8103] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 248.457598][ T8103] ? __lock_acquire+0x6b5/0x2cf0 [ 248.457652][ T8103] ? __fget_files+0x2a/0x420 [ 248.457675][ T8103] ? __fget_files+0x3a0/0x420 [ 248.457692][ T8103] ? __fget_files+0x2a/0x420 [ 248.457716][ T8103] security_file_ioctl_compat+0xc3/0x2a0 [ 248.457738][ T8103] __ia32_compat_sys_ioctl+0x139/0x950 [ 248.457770][ T8103] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 248.457797][ T8103] ? __fget_files+0x3a0/0x420 [ 248.457821][ T8103] ? fput+0xa0/0xd0 [ 248.457838][ T8103] ? ksys_write+0x242/0x270 [ 248.457872][ T8103] __do_fast_syscall_32+0x229/0x6e0 [ 248.457896][ T8103] ? do_fast_syscall_32+0x33/0x70 [ 248.457916][ T8103] ? lockdep_hardirqs_on+0x7a/0x110 [ 248.457946][ T8103] ? asm_int80_emulation+0x1a/0x20 [ 248.457962][ T8103] ? do_int80_emulation+0x286/0x530 [ 248.457983][ T8103] ? trace_irq_disable+0x3b/0x140 [ 248.458008][ T8103] do_fast_syscall_32+0x33/0x70 [ 248.458032][ T8103] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 248.458052][ T8103] RIP: 0023:0xf705f01c [ 248.458068][ T8103] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 248.458081][ T8103] RSP: 002b:00000000f544d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 248.458100][ T8103] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0386105 [ 248.458112][ T8103] RDX: 0000000080000500 RSI: 0000000000000000 RDI: 0000000000000000 [ 248.458122][ T8103] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 248.458132][ T8103] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 248.458142][ T8103] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 248.458169][ T8103] [ 248.458943][ T8103] ERROR: Out of memory at tomoyo_realpath_from_path. [ 248.733682][ T9] kvaser_usb 4-1:8.134: error -ENODEV: Cannot get usb endpoint(s) [ 248.747421][ T9] usb 4-1: USB disconnect, device number 43 [ 248.787698][ T5718] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 248.820418][ T5718] usb 5-1: device descriptor read/8, error -71 [ 249.076857][ T5718] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 249.117388][ T5718] usb 5-1: device descriptor read/8, error -71 [ 249.169716][ T8107] fuse: Bad value for 'group_id' [ 249.175991][ T8107] fuse: Bad value for 'group_id' [ 249.237195][ T5718] usb usb5-port1: unable to enumerate USB device [ 249.607020][ T5716] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 249.696776][ T5718] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 249.777593][ T5716] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 249.797053][ T5716] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.815599][ T5716] usb 1-1: Product: syz [ 249.822672][ T5716] usb 1-1: Manufacturer: syz [ 249.832617][ T5716] usb 1-1: SerialNumber: syz [ 249.854485][ T5716] usb 1-1: config 0 descriptor?? [ 249.873562][ T5716] hub 1-1:0.0: bad descriptor, ignoring hub [ 249.881143][ T5716] hub 1-1:0.0: probe with driver hub failed with error -5 [ 249.898675][ T5718] usb 3-1: Using ep0 maxpacket: 8 [ 249.914910][ T5718] usb 3-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 249.933422][ T5718] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.953514][ T5718] usb 3-1: Product: syz [ 249.958183][ T5718] usb 3-1: Manufacturer: syz [ 249.963060][ T5718] usb 3-1: SerialNumber: syz [ 249.976602][ T5718] usb 3-1: config 0 descriptor?? [ 250.097360][ T5716] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 250.132405][ T5716] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 250.158024][ T5716] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 250.179767][ T5716] usb 1-1: media controller created [ 250.227910][ T5716] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 250.354343][ T5716] DVB: Unable to find symbol dib7000p_attach() [ 250.370212][ T5716] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 250.450415][ C1] blk_print_req_error: 131 callbacks suppressed [ 250.450435][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 250.466594][ C1] buffer_io_error: 130 callbacks suppressed [ 250.466610][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 250.512577][ T8131] raw_sendmsg: syz.3.705 forgot to set AF_INET. Fix it! [ 250.542420][ C1] I/O error, dev loop5, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 250.551986][ C1] Buffer I/O error on dev loop5, logical block 1, async page read [ 250.559977][ C1] I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 250.569719][ C1] Buffer I/O error on dev loop5, logical block 2, async page read [ 250.578304][ C1] I/O error, dev loop5, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 250.587570][ C1] Buffer I/O error on dev loop5, logical block 3, async page read [ 250.595516][ C1] I/O error, dev loop5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 250.604724][ C1] Buffer I/O error on dev loop5, logical block 4, async page read [ 250.612761][ C1] I/O error, dev loop5, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 250.621966][ C1] Buffer I/O error on dev loop5, logical block 5, async page read [ 250.630108][ C1] I/O error, dev loop5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 250.639410][ C1] Buffer I/O error on dev loop5, logical block 6, async page read [ 250.650112][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 250.660337][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 250.668648][ C1] I/O error, dev loop5, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 250.678030][ C1] Buffer I/O error on dev loop5, logical block 1, async page read [ 250.686140][ C1] I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 250.695419][ C1] Buffer I/O error on dev loop5, logical block 2, async page read [ 250.713357][ T8131] tipc: Started in network mode [ 250.722863][ T8133] FAULT_INJECTION: forcing a failure. [ 250.722863][ T8133] name failslab, interval 1, probability 0, space 0, times 0 [ 250.736636][ T8133] CPU: 1 UID: 0 PID: 8133 Comm: syz.4.706 Tainted: G L syzkaller #0 PREEMPT(full) [ 250.736662][ T8133] Tainted: [L]=SOFTLOCKUP [ 250.736673][ T8133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 250.736682][ T8133] Call Trace: [ 250.736688][ T8133] [ 250.736695][ T8133] dump_stack_lvl+0xe8/0x150 [ 250.736720][ T8133] should_fail_ex+0x412/0x560 [ 250.736747][ T8133] should_failslab+0xa8/0x100 [ 250.736773][ T8133] __kmalloc_cache_noprof+0x88/0x660 [ 250.736797][ T8133] ? snd_pcm_oss_change_params_locked+0x1ae/0x3e00 [ 250.736818][ T8133] ? __kmalloc_cache_noprof+0x15b/0x660 [ 250.736845][ T8133] snd_pcm_oss_change_params_locked+0x1ae/0x3e00 [ 250.736866][ T8133] ? __pfx___mutex_trylock_common+0x10/0x10 [ 250.736890][ T8133] ? rcu_is_watching+0x15/0xb0 [ 250.736908][ T8133] ? trace_contention_end+0x3d/0x140 [ 250.736931][ T8133] ? __mutex_lock+0x319/0x1550 [ 250.736966][ T8133] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 250.736987][ T8133] ? snd_pcm_oss_get_active_substream+0x136/0x280 [ 250.737012][ T8133] ? __pfx___mutex_lock+0x10/0x10 [ 250.737047][ T8133] ? __fget_files+0x2a/0x420 [ 250.737071][ T8133] snd_pcm_oss_get_active_substream+0x1e2/0x280 [ 250.737098][ T8133] snd_pcm_oss_ioctl+0x93b/0xdf0 [ 250.737122][ T8133] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 250.737149][ T8133] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 250.737177][ T8133] ? __fget_files+0x3a0/0x420 [ 250.737200][ T8133] ? fput+0xa0/0xd0 [ 250.737217][ T8133] ? ksys_write+0x242/0x270 [ 250.737251][ T8133] __do_fast_syscall_32+0x229/0x6e0 [ 250.737275][ T8133] ? do_fast_syscall_32+0x33/0x70 [ 250.737295][ T8133] ? lockdep_hardirqs_on+0x7a/0x110 [ 250.737316][ T8133] ? asm_int80_emulation+0x1a/0x20 [ 250.737331][ T8133] ? do_int80_emulation+0x286/0x530 [ 250.737355][ T8133] do_fast_syscall_32+0x33/0x70 [ 250.737377][ T8133] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 250.737395][ T8133] RIP: 0023:0xf6fef01c [ 250.737408][ T8133] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 250.737433][ T8133] RSP: 002b:00000000f53dd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 250.737453][ T8133] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0045004 [ 250.737465][ T8133] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 250.737475][ T8133] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 250.737484][ T8133] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 250.737493][ T8133] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 250.737515][ T8133] [ 250.750407][ T4994] ldm_validate_partition_table(): Disk read failed. [ 250.776290][ T8131] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711 [ 251.076763][ T5716] rc_core: IR keymap rc-dib0700-rc5 not found [ 251.084623][ T5716] Registered IR keymap rc-empty [ 251.091019][ T5716] dvb-usb: could not initialize remote control. [ 251.103601][ T5716] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 251.119313][ T8131] tipc: Enabled bearer , priority 10 [ 251.163353][ T4994] Dev loop5: unable to read RDB block 0 [ 251.188790][ T4994] loop5: unable to read partition table [ 251.195777][ T4994] loop5: partition table beyond EOD, truncated [ 251.568552][ T8141] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.598740][ T8141] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.605953][ T8141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.815554][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 251.815577][ T30] audit: type=1800 audit(1778461910.437:57): pid=8146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.708" name="memory.events" dev="tmpfs" ino=687 res=0 errno=0 [ 252.065260][ T5718] usb 3-1: USB disconnect, device number 30 [ 252.154347][ T8148] netlink: 132 bytes leftover after parsing attributes in process `syz.4.709'. [ 252.227833][ T807] tipc: Node number set to 4269801494 [ 252.725998][ T8167] syzkaller0: entered promiscuous mode [ 252.733826][ T8167] syzkaller0: entered allmulticast mode [ 252.755542][ T8167] FAULT_INJECTION: forcing a failure. [ 252.755542][ T8167] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.769705][ T8167] CPU: 0 UID: 0 PID: 8167 Comm: syz.4.716 Tainted: G L syzkaller #0 PREEMPT(full) [ 252.769732][ T8167] Tainted: [L]=SOFTLOCKUP [ 252.769739][ T8167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 252.769748][ T8167] Call Trace: [ 252.769755][ T8167] [ 252.769763][ T8167] dump_stack_lvl+0xe8/0x150 [ 252.769788][ T8167] should_fail_ex+0x412/0x560 [ 252.769816][ T8167] _copy_from_iter+0x1d3/0x1670 [ 252.769841][ T8167] ? sock_alloc_send_pskb+0x896/0x990 [ 252.769869][ T8167] ? __pfx__copy_from_iter+0x10/0x10 [ 252.769900][ T8167] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 252.769928][ T8167] skb_copy_datagram_from_iter+0xf5/0x710 [ 252.769956][ T8167] ? dev_get_by_index+0x22/0x2e0 [ 252.769973][ T8167] ? skb_put+0x11b/0x210 [ 252.769997][ T8167] packet_sendmsg+0x35b1/0x4fb0 [ 252.770026][ T8167] ? __lock_acquire+0x6b5/0x2cf0 [ 252.770047][ T8167] ? __lock_acquire+0x6b5/0x2cf0 [ 252.770073][ T8167] ? __lock_acquire+0x6b5/0x2cf0 [ 252.770105][ T8167] ? __pfx_packet_sendmsg+0x10/0x10 [ 252.770122][ T8167] ? aa_sk_perm+0x6d5/0x900 [ 252.770151][ T8167] ? __pfx_aa_sk_perm+0x10/0x10 [ 252.770179][ T8167] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 252.770205][ T8167] ? __import_iovec+0x5d4/0x7e0 [ 252.770230][ T8167] ? aa_sock_msg_perm+0xf1/0x1b0 [ 252.770252][ T8167] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 252.770274][ T8167] ____sys_sendmsg+0x972/0x9f0 [ 252.770300][ T8167] ? __pfx_____sys_sendmsg+0x10/0x10 [ 252.770327][ T8167] ? kstrtoull+0x12f/0x1d0 [ 252.770360][ T8167] ___sys_sendmsg+0x2a5/0x360 [ 252.770382][ T8167] ? __lock_acquire+0x6b5/0x2cf0 [ 252.770404][ T8167] ? __pfx____sys_sendmsg+0x10/0x10 [ 252.770430][ T8167] ? get_pid_task+0x20/0x1f0 [ 252.770450][ T8167] ? get_pid_task+0x20/0x1f0 [ 252.770469][ T8167] ? get_pid_task+0x20/0x1f0 [ 252.770559][ T8167] ? __fget_files+0x2a/0x420 [ 252.770579][ T8167] ? __fget_files+0x3a0/0x420 [ 252.770607][ T8167] __sys_sendmsg+0x183/0x260 [ 252.770631][ T8167] ? __pfx___sys_sendmsg+0x10/0x10 [ 252.770667][ T8167] __do_fast_syscall_32+0x229/0x6e0 [ 252.770690][ T8167] ? do_fast_syscall_32+0x33/0x70 [ 252.770709][ T8167] ? lockdep_hardirqs_on+0x7a/0x110 [ 252.770731][ T8167] ? asm_int80_emulation+0x1a/0x20 [ 252.770748][ T8167] ? do_int80_emulation+0x286/0x530 [ 252.770772][ T8167] ? trace_irq_disable+0x3b/0x140 [ 252.770800][ T8167] do_fast_syscall_32+0x33/0x70 [ 252.770825][ T8167] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 252.770846][ T8167] RIP: 0023:0xf6fef01c [ 252.770862][ T8167] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 252.770876][ T8167] RSP: 002b:00000000f53dd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 252.770894][ T8167] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800000c0 [ 252.770907][ T8167] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 252.770917][ T8167] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 252.770927][ T8167] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 252.770937][ T8167] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 252.770962][ T8167] [ 253.499276][ T5716] IPVS: starting estimator thread 0... [ 253.576503][ T8177] bridge1: entered promiscuous mode [ 253.607123][ T8180] IPVS: using max 32 ests per chain, 76800 per kthread [ 253.621179][ T8177] bridge1: entered allmulticast mode [ 253.632951][ T8177] team0: Port device bridge1 added [ 253.748284][ T8173] syz.4.717 (8173): drop_caches: 2 [ 253.780370][ T8187] trusted_key: encrypted_key: insufficient parameters specified [ 253.818325][ T5718] usb 1-1: USB disconnect, device number 23 [ 253.869672][ T8185] bond1: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 253.920125][ T5718] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 254.186331][ T8179] syz.3.718 (8179): drop_caches: 2 [ 254.313946][ T8179] bridge2: entered promiscuous mode [ 254.335060][ T8179] bridge2: entered allmulticast mode [ 254.367441][ T8179] team0: Port device bridge2 added [ 254.446352][ T8194] netlink: 132 bytes leftover after parsing attributes in process `syz.4.721'. [ 254.581991][ T8198] netlink: 'syz.0.722': attribute type 21 has an invalid length. [ 254.593788][ T8197] netlink: 8 bytes leftover after parsing attributes in process `syz.4.723'. [ 254.609450][ T8198] netlink: 4 bytes leftover after parsing attributes in process `syz.0.722'. [ 254.777852][ T8203] netlink: 88 bytes leftover after parsing attributes in process `syz.4.723'. [ 255.233250][ T8202] fuse: Bad value for 'group_id' [ 255.239548][ T8202] fuse: Bad value for 'group_id' [ 255.642673][ T8225] syz.3.731 (8225): drop_caches: 2 [ 255.654580][ T8233] FAULT_INJECTION: forcing a failure. [ 255.654580][ T8233] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 255.690916][ T8225] bridge3: entered promiscuous mode [ 255.696494][ T8233] CPU: 1 UID: 0 PID: 8233 Comm: syz.4.732 Tainted: G L syzkaller #0 PREEMPT(full) [ 255.696524][ T8233] Tainted: [L]=SOFTLOCKUP [ 255.696530][ T8233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 255.696540][ T8233] Call Trace: [ 255.696547][ T8233] [ 255.696554][ T8233] dump_stack_lvl+0xe8/0x150 [ 255.696580][ T8233] should_fail_ex+0x412/0x560 [ 255.696608][ T8233] _copy_from_iter+0x1d3/0x1670 [ 255.696634][ T8233] ? rcu_is_watching+0x15/0xb0 [ 255.696660][ T8233] ? __pfx__copy_from_iter+0x10/0x10 [ 255.696688][ T8233] ? netlink_sendmsg+0x650/0xb40 [ 255.696708][ T8233] ? skb_put+0x11b/0x210 [ 255.696730][ T8233] netlink_sendmsg+0x6c0/0xb40 [ 255.696757][ T8233] ? __pfx_netlink_sendmsg+0x10/0x10 [ 255.696782][ T8233] ? aa_sock_msg_perm+0xf1/0x1b0 [ 255.696804][ T8233] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 255.696827][ T8233] ____sys_sendmsg+0x972/0x9f0 [ 255.696849][ T8233] ? __pfx_____sys_sendmsg+0x10/0x10 [ 255.696868][ T8233] ? kstrtoull+0x12f/0x1d0 [ 255.696885][ T8233] ___sys_sendmsg+0x2a5/0x360 [ 255.696900][ T8233] ? __lock_acquire+0x6b5/0x2cf0 [ 255.696917][ T8233] ? __pfx____sys_sendmsg+0x10/0x10 [ 255.696935][ T8233] ? get_pid_task+0x20/0x1f0 [ 255.696950][ T8233] ? get_pid_task+0x20/0x1f0 [ 255.696963][ T8233] ? get_pid_task+0x20/0x1f0 [ 255.696997][ T8233] ? __fget_files+0x2a/0x420 [ 255.697012][ T8233] ? __fget_files+0x3a0/0x420 [ 255.697033][ T8233] __sys_sendmsg+0x183/0x260 [ 255.697052][ T8233] ? __pfx___sys_sendmsg+0x10/0x10 [ 255.697083][ T8233] __do_fast_syscall_32+0x229/0x6e0 [ 255.697102][ T8233] ? do_fast_syscall_32+0x33/0x70 [ 255.697118][ T8233] ? lockdep_hardirqs_on+0x7a/0x110 [ 255.697134][ T8233] ? asm_int80_emulation+0x1a/0x20 [ 255.697146][ T8233] ? do_int80_emulation+0x286/0x530 [ 255.697162][ T8233] ? trace_irq_disable+0x3b/0x140 [ 255.697183][ T8233] do_fast_syscall_32+0x33/0x70 [ 255.697201][ T8233] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 255.697216][ T8233] RIP: 0023:0xf6fef01c [ 255.697229][ T8233] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 255.697249][ T8233] RSP: 002b:00000000f53dd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 255.697263][ T8233] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000300 [ 255.697272][ T8233] RDX: 0000000024008084 RSI: 0000000000000000 RDI: 0000000000000000 [ 255.697280][ T8233] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 255.697287][ T8233] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 255.697294][ T8233] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 255.697313][ T8233] [ 255.727417][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.730788][ T8225] bridge3: entered allmulticast mode [ 255.735748][ T8225] team0: Port device bridge3 added [ 255.737077][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.967023][ T8235] netlink: 132 bytes leftover after parsing attributes in process `syz.4.733'. [ 256.252035][ T8240] IPv6: Can't replace route, no match found [ 256.421644][ T8245] netlink: 'syz.2.736': attribute type 13 has an invalid length. [ 256.502078][ T8251] netlink: 68 bytes leftover after parsing attributes in process `syz.2.736'. [ 256.606926][ T5709] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 256.717211][ T5716] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 256.766914][ T5709] usb 2-1: Using ep0 maxpacket: 32 [ 256.777371][ T5709] usb 2-1: config 0 interface 0 has no altsetting 0 [ 256.790604][ T5709] usb 2-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 256.808561][ T5709] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.832629][ T5709] usb 2-1: config 0 descriptor?? [ 256.895264][ T5716] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 256.905995][ T5716] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.917202][ T5716] usb 5-1: Product: syz [ 256.923795][ T5716] usb 5-1: Manufacturer: syz [ 256.930990][ T5716] usb 5-1: SerialNumber: syz [ 256.941936][ T5716] usb 5-1: config 0 descriptor?? [ 256.959503][ T5716] hub 5-1:0.0: bad descriptor, ignoring hub [ 256.969326][ T5716] hub 5-1:0.0: probe with driver hub failed with error -5 [ 256.987015][ T5730] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 257.137028][ T5730] usb 4-1: Using ep0 maxpacket: 8 [ 257.156409][ T5730] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 257.194139][ T5730] usb 4-1: New USB device found, idVendor=1235, idProduct=8203, bcdDevice= 0.40 [ 257.211636][ T5716] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 257.220550][ T5730] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.234386][ T5730] usb 4-1: Product: Т [ 257.240661][ T5716] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 257.250653][ T5730] usb 4-1: Manufacturer: ┍䭧䑑ᛳỺ뒷⊧肿粇踃︍谔녖ኆ鶐䪵谪佬洇봞₭ఇ㔥铝㨓狫꧿ⱝ쐩兰鉽⮯噛瘞╬娞켌ꮞᚅ뽕瑺묳䫬⃅鶆㝜豣᪾쾓맫ࠩ뀠晰꼆迡⹈㲢振Ħ额몠궢蟎䧥쩦竍㊨室₺ꍦ৲囒鐌벟陁麀刉㙽۹놚詍㠐浦䘧㼀닸器╩釘戄ﱯ䫻宵븜褼䵴຃馦攱莆 [ 257.284930][ T5716] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 257.289877][ T5709] magicmouse 0003:05AC:0324.000E: unknown main item tag 0x0 [ 257.301716][ T5716] usb 5-1: media controller created [ 257.315757][ T5709] magicmouse 0003:05AC:0324.000E: unknown main item tag 0x0 [ 257.329024][ T5730] usb 4-1: SerialNumber: ఁ [ 257.332418][ T5709] magicmouse 0003:05AC:0324.000E: unknown main item tag 0x0 [ 257.334075][ T5716] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 257.358854][ T5709] magicmouse 0003:05AC:0324.000E: unknown main item tag 0x0 [ 257.414212][ T5709] magicmouse 0003:05AC:0324.000E: unknown main item tag 0x0 [ 257.454542][ T5716] DVB: Unable to find symbol dib7000p_attach() [ 257.462919][ T5716] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 257.480272][ T5709] magicmouse 0003:05AC:0324.000E: unknown main item tag 0x0 [ 257.504855][ T5709] magicmouse 0003:05AC:0324.000E: unknown main item tag 0x0 [ 257.536577][ T5709] magicmouse 0003:05AC:0324.000E: unknown main item tag 0x0 [ 257.548702][ T5716] rc_core: IR keymap rc-dib0700-rc5 not found [ 257.559836][ T5716] Registered IR keymap rc-empty [ 257.572385][ T5709] magicmouse 0003:05AC:0324.000E: unknown main item tag 0x0 [ 257.574185][ T5716] dvb-usb: could not initialize remote control. [ 257.598364][ T5709] magicmouse 0003:05AC:0324.000E: unknown main item tag 0x0 [ 257.606280][ T5730] usb 4-1: unit 1 not found! [ 257.612060][ T5716] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 257.617541][ T5709] magicmouse 0003:05AC:0324.000E: hidraw0: USB HID vff.ff Device [HID 05ac:0324] on usb-dummy_hcd.1-1/input0 [ 257.636310][ T5709] magicmouse 0003:05AC:0324.000E: magicmouse input not registered [ 257.637662][ T5730] usb 4-1: unit 6 not found! [ 257.652835][ T5709] magicmouse 0003:05AC:0324.000E: probe with driver magicmouse failed with error -12 [ 257.686378][ T5709] usb 2-1: USB disconnect, device number 29 [ 257.753816][ T5730] usb 4-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8203); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 257.773975][ T5730] usb 4-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 257.784018][ T5070] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 257.845687][ T8260] fido_id[8260]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 257.947424][ T5730] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 257.960938][ T5070] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 257.976449][ T5070] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 258.015009][ T5070] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 258.024573][ T5730] usb 4-1: USB disconnect, device number 44 [ 258.048486][ T5070] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 258.059301][ T5070] usb 3-1: SerialNumber: syz [ 258.092847][ T5736] udevd[5736]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 258.361856][ T5070] usb 3-1: 0:2 : does not exist [ 258.372833][ T5070] usb 3-1: unit 255 not found! [ 258.470581][ T8265] syzkaller0: entered promiscuous mode [ 258.482214][ T8265] syzkaller0: entered allmulticast mode [ 258.548246][ T5070] usb 3-1: USB disconnect, device number 31 [ 258.659674][ T5736] udevd[5736]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 258.779854][ T8270] netlink: 132 bytes leftover after parsing attributes in process `syz.3.744'. [ 259.367201][ T30] audit: type=1326 audit(1778461917.997:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8282 comm="syz.1.748" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f01c code=0x7ffc0000 [ 259.393589][ T30] audit: type=1326 audit(1778461918.017:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8282 comm="syz.1.748" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf705f01c code=0x7ffc0000 [ 259.420640][ T30] audit: type=1326 audit(1778461918.017:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8282 comm="syz.1.748" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf705f047 code=0x7ffc0000 [ 259.446611][ T30] audit: type=1326 audit(1778461918.017:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8282 comm="syz.1.748" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f01c code=0x7ffc0000 [ 259.497321][ T30] audit: type=1326 audit(1778461918.047:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8282 comm="syz.1.748" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f01c code=0x7ffc0000 [ 259.535591][ T30] audit: type=1326 audit(1778461918.047:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8282 comm="syz.1.748" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf705f01c code=0x7ffc0000 [ 259.561100][ T30] audit: type=1326 audit(1778461918.097:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8282 comm="syz.1.748" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf705f047 code=0x7ffc0000 [ 259.623299][ T30] audit: type=1326 audit(1778461918.097:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8282 comm="syz.1.748" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf705f01c code=0x7ffc0000 [ 259.678035][ T30] audit: type=1326 audit(1778461918.097:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8282 comm="syz.1.748" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f01c code=0x7ffc0000 [ 259.730150][ T30] audit: type=1326 audit(1778461918.097:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8282 comm="syz.1.748" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f01c code=0x7ffc0000 [ 259.993274][ T8297] tipc: Can't bind to reserved service type 2 [ 260.062200][ T9] usb 5-1: USB disconnect, device number 38 [ 260.161073][ T8302] netlink: 132 bytes leftover after parsing attributes in process `syz.4.755'. [ 260.183980][ T9] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 260.661573][ T8312] netlink: 132 bytes leftover after parsing attributes in process `syz.3.758'. [ 261.635454][ C0] blk_print_req_error: 131 callbacks suppressed [ 261.635473][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 261.650980][ C0] buffer_io_error: 130 callbacks suppressed [ 261.650991][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 261.668795][ C0] I/O error, dev loop5, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 261.678220][ C0] Buffer I/O error on dev loop5, logical block 1, async page read [ 261.689736][ C0] I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 261.698969][ C0] Buffer I/O error on dev loop5, logical block 2, async page read [ 261.706871][ C0] I/O error, dev loop5, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 261.716207][ C0] Buffer I/O error on dev loop5, logical block 3, async page read [ 261.724209][ C0] I/O error, dev loop5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 261.733725][ C0] Buffer I/O error on dev loop5, logical block 4, async page read [ 261.769938][ C0] I/O error, dev loop5, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 261.779266][ C0] Buffer I/O error on dev loop5, logical block 5, async page read [ 261.787186][ C0] I/O error, dev loop5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 261.796373][ C0] Buffer I/O error on dev loop5, logical block 6, async page read [ 261.848457][ C1] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 261.857686][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 261.866529][ C1] I/O error, dev loop5, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 261.875792][ C1] Buffer I/O error on dev loop5, logical block 1, async page read [ 261.883791][ C1] I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 261.893101][ C1] Buffer I/O error on dev loop5, logical block 2, async page read [ 261.931202][ T4994] ldm_validate_partition_table(): Disk read failed. [ 261.979678][ T4994] Dev loop5: unable to read RDB block 0 [ 262.012777][ T4994] loop5: unable to read partition table [ 262.032032][ T4994] loop5: partition table beyond EOD, truncated [ 264.570956][ T8348] netlink: 132 bytes leftover after parsing attributes in process `syz.4.767'. [ 264.846753][ T3315] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.870705][ T3315] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.106230][ T8373] netlink: 8 bytes leftover after parsing attributes in process `syz.4.772'. [ 265.153261][ T8375] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 265.159797][ T8375] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 265.173958][ T8363] netlink: 60 bytes leftover after parsing attributes in process `syz.4.772'. [ 265.193672][ T5716] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 265.213453][ T8375] vhci_hcd vhci_hcd.0: Device attached [ 265.390872][ T5716] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 265.412949][ T5716] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.434656][ T5716] usb 2-1: Product: syz [ 265.445742][ T5716] usb 2-1: Manufacturer: syz [ 265.456914][ T5730] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 265.466198][ T5716] usb 2-1: SerialNumber: syz [ 265.476833][ T5070] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 265.493391][ T5716] usb 2-1: config 0 descriptor?? [ 265.515124][ T5716] hub 2-1:0.0: bad descriptor, ignoring hub [ 265.531377][ T5716] hub 2-1:0.0: probe with driver hub failed with error -5 [ 265.626857][ T5070] usb 3-1: device descriptor read/64, error -71 [ 265.755143][ T5716] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 265.772227][ T5716] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 265.787742][ T5716] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 265.800478][ T5716] usb 2-1: media controller created [ 265.822766][ T5716] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 265.876821][ T5070] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 265.895591][ T5716] DVB: Unable to find symbol dib7000p_attach() [ 265.912117][ T5716] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 266.019297][ T5070] usb 3-1: device descriptor read/64, error -71 [ 266.036800][ T5716] rc_core: IR keymap rc-dib0700-rc5 not found [ 266.049058][ T5716] Registered IR keymap rc-empty [ 266.066532][ T5716] dvb-usb: could not initialize remote control. [ 266.081835][ T5716] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 266.128938][ T5070] usb usb3-port1: attempt power cycle [ 266.342435][ T8390] tipc: Enabling of bearer rejected, failed to enable media [ 266.473359][ T8395] netlink: 40 bytes leftover after parsing attributes in process `syz.4.779'. [ 266.498649][ T5070] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 266.549378][ T5070] usb 3-1: device descriptor read/8, error -71 [ 266.760594][ T5716] IPVS: starting estimator thread 0... [ 266.816998][ T5070] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 266.848536][ T5070] usb 3-1: device descriptor read/8, error -71 [ 266.866839][ T8401] IPVS: using max 34 ests per chain, 81600 per kthread [ 266.968085][ T5070] usb usb3-port1: unable to enumerate USB device [ 267.588438][ T9] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 267.757974][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 267.773519][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 267.791174][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 267.811246][ T9] usb 5-1: config 1 interface 0 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 267.827311][ T9] usb 5-1: config 1 interface 0 has no altsetting 0 [ 267.852102][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 267.877510][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.894086][ T9] usb 5-1: Product: syz [ 267.901667][ T9] usb 5-1: Manufacturer: syz [ 267.906526][ T9] usb 5-1: SerialNumber: syz [ 268.056220][ T8376] vhci_hcd: connection reset by peer [ 268.065758][ T12] vhci_hcd vhci_hcd.2: stop threads [ 268.093408][ T12] vhci_hcd vhci_hcd.2: release socket [ 268.120499][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 268.153433][ T9] cdc_ether 5-1:1.0: GUID doesn't match [ 268.211317][ T9] usb 5-1: USB disconnect, device number 39 [ 268.245203][ T5718] usb 2-1: USB disconnect, device number 30 [ 268.449647][ T5718] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 268.892072][ T8428] netlink: 24 bytes leftover after parsing attributes in process `syz.4.789'. [ 269.197082][ T9] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 269.356800][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 269.386228][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 269.418827][ T9] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 269.442567][ T8433] bridge2: entered promiscuous mode [ 269.461774][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 269.476588][ T9] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 269.487989][ T8433] bridge2: entered allmulticast mode [ 269.497708][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.507543][ T9] usb 5-1: Product: syz [ 269.515154][ T8430] syz.2.790 (8430): drop_caches: 2 [ 269.521772][ T9] usb 5-1: Manufacturer: syz [ 269.527114][ T9] usb 5-1: SerialNumber: syz [ 269.558103][ T9] usb 5-1: config 0 descriptor?? [ 269.638111][ T8445] FAULT_INJECTION: forcing a failure. [ 269.638111][ T8445] name failslab, interval 1, probability 0, space 0, times 0 [ 269.664922][ T8445] CPU: 1 UID: 0 PID: 8445 Comm: syz.3.794 Tainted: G L syzkaller #0 PREEMPT(full) [ 269.664951][ T8445] Tainted: [L]=SOFTLOCKUP [ 269.664958][ T8445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 269.664968][ T8445] Call Trace: [ 269.664976][ T8445] [ 269.664983][ T8445] dump_stack_lvl+0xe8/0x150 [ 269.665009][ T8445] should_fail_ex+0x412/0x560 [ 269.665036][ T8445] should_failslab+0xa8/0x100 [ 269.665063][ T8445] __kmalloc_noprof+0xe8/0x760 [ 269.665085][ T8445] ? snd_interval_refine+0x609/0xa50 [ 269.665101][ T8445] ? snd_pcm_hw_refine+0x9b1/0x1710 [ 269.665131][ T8445] snd_pcm_hw_refine+0x9b1/0x1710 [ 269.665158][ T8445] ? kasan_save_track+0x4f/0x80 [ 269.665181][ T8445] ? snd_pcm_hw_param_near+0x7f/0x4d0 [ 269.665200][ T8445] ? snd_pcm_oss_set_rate+0x1bc/0x4e0 [ 269.665219][ T8445] ? __ia32_compat_sys_ioctl+0x5ea/0x950 [ 269.665242][ T8445] ? do_fast_syscall_32+0x33/0x70 [ 269.665265][ T8445] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 269.665286][ T8445] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 269.665349][ T8445] snd_pcm_hw_param_last+0x3ad/0xb70 [ 269.665378][ T8445] snd_pcm_hw_param_near+0x329/0x4d0 [ 269.665406][ T8445] snd_pcm_oss_change_params_locked+0x1fed/0x3e00 [ 269.665453][ T8445] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 269.665486][ T8445] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 269.665515][ T8445] ? __might_fault+0xaf/0x130 [ 269.665540][ T8445] snd_pcm_oss_get_active_substream+0x1e2/0x280 [ 269.665567][ T8445] snd_pcm_oss_set_rate+0x1bc/0x4e0 [ 269.665593][ T8445] snd_pcm_oss_ioctl+0xc2e/0xdf0 [ 269.665616][ T8445] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 269.665644][ T8445] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 269.665672][ T8445] ? __fget_files+0x3a0/0x420 [ 269.665699][ T8445] ? fput+0xa0/0xd0 [ 269.665718][ T8445] ? ksys_write+0x242/0x270 [ 269.665752][ T8445] __do_fast_syscall_32+0x229/0x6e0 [ 269.665775][ T8445] ? do_fast_syscall_32+0x33/0x70 [ 269.665796][ T8445] ? lockdep_hardirqs_on+0x7a/0x110 [ 269.665816][ T8445] ? asm_int80_emulation+0x1a/0x20 [ 269.665839][ T8445] ? do_int80_emulation+0x286/0x530 [ 269.665861][ T8445] ? trace_irq_disable+0x3b/0x140 [ 269.665888][ T8445] do_fast_syscall_32+0x33/0x70 [ 269.665911][ T8445] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 269.665932][ T8445] RIP: 0023:0xf7fa601c [ 269.665948][ T8445] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 269.665961][ T8445] RSP: 002b:00000000f546650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 269.665978][ T8445] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0045002 [ 269.665989][ T8445] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 269.665997][ T8445] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 269.666006][ T8445] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 269.666015][ T8445] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 269.666039][ T8445] [ 269.686893][ T5709] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 270.058435][ T8450] netlink: 4 bytes leftover after parsing attributes in process `syz.3.796'. [ 270.153441][ T9] gs_usb 5-1:0.0: Configuring for 256 interfaces [ 270.159991][ T9] gs_usb 5-1:0.0: Driver cannot handle more that 255 CAN interfaces [ 270.168218][ T9] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -22 [ 270.218473][ T5709] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 270.248440][ T5709] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 270.260364][ T5709] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 270.274152][ T5709] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.288395][ T5709] usb 2-1: config 0 descriptor?? [ 270.363532][ T5070] usb 5-1: USB disconnect, device number 40 [ 270.441713][ T8461] FAULT_INJECTION: forcing a failure. [ 270.441713][ T8461] name failslab, interval 1, probability 0, space 0, times 0 [ 270.455234][ T8461] CPU: 0 UID: 0 PID: 8461 Comm: syz.3.800 Tainted: G L syzkaller #0 PREEMPT(full) [ 270.455263][ T8461] Tainted: [L]=SOFTLOCKUP [ 270.455270][ T8461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 270.455280][ T8461] Call Trace: [ 270.455288][ T8461] [ 270.455295][ T8461] dump_stack_lvl+0xe8/0x150 [ 270.455321][ T8461] should_fail_ex+0x412/0x560 [ 270.455352][ T8461] should_failslab+0xa8/0x100 [ 270.455379][ T8461] __kmalloc_noprof+0xe8/0x760 [ 270.455402][ T8461] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 270.455431][ T8461] tomoyo_realpath_from_path+0xe3/0x5d0 [ 270.455456][ T8461] ? tomoyo_domain+0xd7/0x130 [ 270.455484][ T8461] ? tomoyo_path_number_perm+0x219/0x630 [ 270.455503][ T8461] tomoyo_path_number_perm+0x246/0x630 [ 270.455526][ T8461] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 270.455545][ T8461] ? __lock_acquire+0x6b5/0x2cf0 [ 270.455577][ T8461] ? irqentry_exit+0x218/0x760 [ 270.455598][ T8461] ? lockdep_hardirqs_on+0x7a/0x110 [ 270.455638][ T8461] ? __fget_files+0x2a/0x420 [ 270.455662][ T8461] ? __fget_files+0x3a0/0x420 [ 270.455680][ T8461] ? __fget_files+0x2a/0x420 [ 270.455711][ T8461] security_file_ioctl_compat+0xc3/0x2a0 [ 270.455732][ T8461] __ia32_compat_sys_ioctl+0x139/0x950 [ 270.455760][ T8461] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 270.455789][ T8461] ? __fget_files+0x3a0/0x420 [ 270.455814][ T8461] ? fput+0xa0/0xd0 [ 270.455834][ T8461] ? ksys_write+0x242/0x270 [ 270.455868][ T8461] __do_fast_syscall_32+0x229/0x6e0 [ 270.455892][ T8461] ? do_fast_syscall_32+0x33/0x70 [ 270.455913][ T8461] ? lockdep_hardirqs_on+0x7a/0x110 [ 270.455934][ T8461] ? asm_int80_emulation+0x1a/0x20 [ 270.455950][ T8461] ? do_int80_emulation+0x286/0x530 [ 270.455978][ T8461] do_fast_syscall_32+0x33/0x70 [ 270.456001][ T8461] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 270.456020][ T8461] RIP: 0023:0xf7fa601c [ 270.456037][ T8461] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 270.456051][ T8461] RSP: 002b:00000000f546650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 270.456069][ T8461] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000005441 [ 270.456081][ T8461] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 270.456091][ T8461] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 270.456100][ T8461] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 270.456110][ T8461] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 270.456136][ T8461] [ 270.456184][ T8461] ERROR: Out of memory at tomoyo_realpath_from_path. [ 270.587640][ T5730] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 270.751010][ T8465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.751433][ T8465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.757712][ T8465] netlink: 4 bytes leftover after parsing attributes in process `syz.1.792'. [ 270.816266][ T8467] netlink: 4 bytes leftover after parsing attributes in process `syz.0.799'. [ 270.920189][ T8463] netlink: 28 bytes leftover after parsing attributes in process `syz.0.799'. [ 270.929472][ T8463] netlink: 28 bytes leftover after parsing attributes in process `syz.0.799'. [ 271.120346][ T5709] ath6kl: Failed to submit usb control message: -71 [ 271.124789][ T8478] netlink: 'syz.3.803': attribute type 29 has an invalid length. [ 271.151985][ T8478] netlink: 4 bytes leftover after parsing attributes in process `syz.3.803'. [ 271.152623][ T5709] ath6kl: unable to send the bmi data to the device: -71 [ 271.209729][ T5709] ath6kl: Unable to send get target info: -71 [ 271.231460][ T5709] ath6kl: Failed to init ath6kl core: -71 [ 271.246540][ T5709] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 271.281189][ T5709] usb 2-1: USB disconnect, device number 31 [ 271.429781][ T8484] netlink: 12 bytes leftover after parsing attributes in process `syz.3.805'. [ 271.439834][ T8484] netlink: 'syz.3.805': attribute type 8 has an invalid length. [ 271.503533][ T8485] netlink: 8 bytes leftover after parsing attributes in process `syz.3.805'. [ 271.526821][ T5070] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 271.694728][ T5070] usb 5-1: Using ep0 maxpacket: 32 [ 271.707515][ T5070] usb 5-1: unable to get BOS descriptor or descriptor too short [ 271.721194][ T5070] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 271.732737][ T5070] usb 5-1: config 1 interface 0 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 271.749470][ T5070] usb 5-1: config 1 interface 0 has no altsetting 0 [ 271.775838][ T5070] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 271.795753][ T5070] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.807623][ T5070] usb 5-1: Product: syz [ 271.815882][ T5070] usb 5-1: Manufacturer: syz [ 271.823286][ T5070] usb 5-1: SerialNumber: syz [ 271.834208][ T8495] netdevsim netdevsim3: Firmware load for '..' refused, path contains '..' component [ 272.061204][ T5070] cdc_ether 5-1:1.0: GUID doesn't match [ 272.089117][ T5070] usb 5-1: USB disconnect, device number 41 [ 272.209058][ T9] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 272.371891][ T9] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 272.389467][ T9] usb 3-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 272.403901][ T9] usb 3-1: Product: syz [ 272.411617][ T9] usb 3-1: Manufacturer: syz [ 272.420031][ T9] usb 3-1: SerialNumber: syz [ 272.436230][ T9] usb 3-1: config 0 descriptor?? [ 272.453696][ T9] ch341 3-1:0.0: ch341-uart converter detected [ 272.654407][ T8501] netlink: 12 bytes leftover after parsing attributes in process `syz.2.811'. [ 272.918215][ T8504] syz.4.812 (8504): drop_caches: 2 [ 272.919817][ T1088] tipc: Subscription rejected, illegal request [ 272.943145][ T8504] bridge2: entered promiscuous mode [ 272.951387][ T8504] bridge2: entered allmulticast mode [ 273.176795][ T5709] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 273.338214][ T5709] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.356906][ T5709] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.374067][ T5709] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 273.393141][ T5709] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 273.410893][ T5709] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 273.427312][ T5709] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 273.447008][ T5709] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 273.459583][ T5709] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.472073][ T5709] usb 4-1: Product: syz [ 273.479355][ T5709] usb 4-1: Manufacturer: syz [ 273.486564][ T5709] usb 4-1: SerialNumber: syz [ 273.538087][ T9] usb 3-1: failed to receive control message: -110 [ 273.560062][ T9] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 273.744577][ T8520] netlink: 'syz.4.816': attribute type 10 has an invalid length. [ 273.768277][ T8520] team0: Device vxcan1 is of different type [ 274.195791][ T8534] netlink: 4 bytes leftover after parsing attributes in process `syz.2.811'. [ 274.287140][ T8539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.820'. [ 274.606852][ T9] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 274.806796][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 274.842276][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 274.899261][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x47, changing to 0x7 [ 274.941040][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 64256, setting to 64 [ 274.980251][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 275.049935][ T9] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 275.071252][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.102687][ T9] usb 2-1: Product: syz [ 275.111562][ T9] usb 2-1: Manufacturer: syz [ 275.125721][ T9] usb 2-1: SerialNumber: syz [ 275.143781][ T9] usb 2-1: config 0 descriptor?? [ 275.389071][ T5070] usb 3-1: USB disconnect, device number 36 [ 275.424132][ T5070] ch341 3-1:0.0: device disconnected [ 275.588102][ T5716] usb 2-1: USB disconnect, device number 32 [ 275.920855][ T5709] cdc_ncm 4-1:1.0: bind() failure [ 275.937488][ T5070] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 275.972311][ T5709] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 275.992350][ T5709] cdc_ncm 4-1:1.1: bind() failure [ 276.015787][ T5709] usb 4-1: USB disconnect, device number 45 [ 276.107896][ T5070] usb 3-1: Using ep0 maxpacket: 32 [ 276.126300][ T5070] usb 3-1: unable to get BOS descriptor or descriptor too short [ 276.145849][ T5070] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 276.158982][ T5070] usb 3-1: config 1 interface 0 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 276.172761][ T5070] usb 3-1: config 1 interface 0 has no altsetting 0 [ 276.187587][ T5070] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 276.197002][ T5070] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.206198][ T5070] usb 3-1: Product: syz [ 276.213669][ T5070] usb 3-1: Manufacturer: syz [ 276.218524][ T5070] usb 3-1: SerialNumber: syz [ 276.447761][ T5070] cdc_ether 3-1:1.0: GUID doesn't match [ 276.462042][ T8587] netlink: 68 bytes leftover after parsing attributes in process `syz.4.827'. [ 276.501028][ T5070] usb 3-1: USB disconnect, device number 37 [ 276.570489][ T8590] netlink: 8 bytes leftover after parsing attributes in process `syz.1.828'. [ 276.925102][ T8607] batadv_slave_0: entered promiscuous mode [ 276.943876][ T8607] macvlan2: entered promiscuous mode [ 276.965369][ T8607] batadv_slave_0: left promiscuous mode [ 277.070483][ T8615] netlink: 'syz.2.835': attribute type 32 has an invalid length. [ 277.095049][ T8615] netlink: 'syz.2.835': attribute type 32 has an invalid length. [ 277.105030][ T8612] netdevsim netdevsim4: Firmware load for '..' refused, path contains '..' component [ 277.117750][ T9] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 277.160841][ T30] kauditd_printk_skb: 123 callbacks suppressed [ 277.160854][ T30] audit: type=1326 audit(1778461935.777:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8614 comm="syz.2.835" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70af01c code=0x0 [ 277.213960][ T8617] netlink: 8 bytes leftover after parsing attributes in process `syz.0.831'. [ 277.288910][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.360829][ T9] usb 4-1: config 0 has no interfaces? [ 277.381299][ T9] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 277.395006][ T8628] netlink: 60 bytes leftover after parsing attributes in process `syz.0.831'. [ 277.415214][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.442117][ T9] usb 4-1: config 0 descriptor?? [ 277.900410][ T8600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.917254][ T8600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.944386][ T8600] netlink: 28 bytes leftover after parsing attributes in process `syz.3.830'. [ 278.002532][ T9] usb 4-1: USB disconnect, device number 46 [ 278.846633][ T8664] FAULT_INJECTION: forcing a failure. [ 278.846633][ T8664] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 278.866938][ T8664] CPU: 1 UID: 0 PID: 8664 Comm: syz.3.840 Tainted: G L syzkaller #0 PREEMPT(full) [ 278.866964][ T8664] Tainted: [L]=SOFTLOCKUP [ 278.866970][ T8664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 278.866978][ T8664] Call Trace: [ 278.866986][ T8664] [ 278.866991][ T8664] dump_stack_lvl+0xe8/0x150 [ 278.867008][ T8664] should_fail_ex+0x412/0x560 [ 278.867026][ T8664] _copy_from_iter+0x1d3/0x1670 [ 278.867040][ T8664] ? unwind_next_frame+0xa6/0x2550 [ 278.867056][ T8664] ? __lock_acquire+0x6b5/0x2cf0 [ 278.867067][ T8664] ? __pfx__copy_from_iter+0x10/0x10 [ 278.867087][ T8664] tun_get_user+0x6cf/0x43e0 [ 278.867107][ T8664] ? aa_file_perm+0x192/0x15e0 [ 278.867124][ T8664] ? aa_file_perm+0x50e/0x15e0 [ 278.867137][ T8664] ? __pfx_tun_get_user+0x10/0x10 [ 278.867150][ T8664] ? __lock_acquire+0x6b5/0x2cf0 [ 278.867163][ T8664] ? kstrtoull+0x12f/0x1d0 [ 278.867177][ T8664] ? ref_tracker_alloc+0x35c/0x4c0 [ 278.867214][ T8664] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 278.867227][ T8664] ? tun_get+0x1c/0x2f0 [ 278.867240][ T8664] ? tun_get+0x1c/0x2f0 [ 278.867254][ T8664] ? tun_get+0x1c/0x2f0 [ 278.867265][ T8664] ? tun_get+0x1c/0x2f0 [ 278.867284][ T8664] tun_chr_write_iter+0x113/0x200 [ 278.867297][ T8664] vfs_write+0x61d/0xb90 [ 278.867320][ T8664] ? __pfx_vfs_write+0x10/0x10 [ 278.867339][ T8664] ? __fget_files+0x2a/0x420 [ 278.867355][ T8664] ksys_write+0x150/0x270 [ 278.867370][ T8664] ? __pfx_ksys_write+0x10/0x10 [ 278.867388][ T8664] __do_fast_syscall_32+0x229/0x6e0 [ 278.867405][ T8664] ? do_fast_syscall_32+0x33/0x70 [ 278.867419][ T8664] ? lockdep_hardirqs_on+0x7a/0x110 [ 278.867433][ T8664] ? asm_int80_emulation+0x1a/0x20 [ 278.867442][ T8664] ? do_int80_emulation+0x286/0x530 [ 278.867457][ T8664] ? trace_irq_disable+0x3b/0x140 [ 278.867474][ T8664] do_fast_syscall_32+0x33/0x70 [ 278.867489][ T8664] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 278.867501][ T8664] RIP: 0023:0xf7fa601c [ 278.867512][ T8664] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 278.867520][ T8664] RSP: 002b:00000000f546650c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 278.867531][ T8664] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000240 [ 278.867538][ T8664] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000000 [ 278.867544][ T8664] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 278.867549][ T8664] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 278.867555][ T8664] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 278.867568][ T8664] [ 279.486796][ T9] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 279.659429][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.662304][ T8685] trusted_key: encrypted_key: insufficient parameters specified [ 279.677692][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 279.692434][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 279.709921][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.726348][ T9] usb 2-1: config 0 descriptor?? [ 279.744248][ T8685] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 279.844435][ T5718] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 279.856944][ T5716] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 279.954725][ T5730] usb 2-1: USB disconnect, device number 33 [ 279.999144][ T5716] usb 5-1: device descriptor read/64, error -71 [ 280.006376][ T5718] usb 4-1: Using ep0 maxpacket: 32 [ 280.030197][ T5718] usb 4-1: unable to get BOS descriptor or descriptor too short [ 280.041169][ T5718] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 280.054529][ T5718] usb 4-1: config 1 interface 0 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 280.067986][ T5718] usb 4-1: config 1 interface 0 has no altsetting 0 [ 280.080023][ T5718] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 280.099635][ T5718] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.127696][ T5718] usb 4-1: Product: syz [ 280.141086][ T5718] usb 4-1: Manufacturer: syz [ 280.160536][ T5718] usb 4-1: SerialNumber: syz [ 280.256812][ T5716] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 280.366798][ T5730] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 280.401000][ T5716] usb 5-1: device descriptor read/64, error -71 [ 280.415697][ T5718] cdc_ether 4-1:1.0: GUID doesn't match [ 280.460380][ T5718] usb 4-1: USB disconnect, device number 47 [ 280.517531][ T5716] usb usb5-port1: attempt power cycle [ 280.667420][ T5730] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 280.698968][ T5730] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.713911][ T5730] usb 3-1: Product: syz [ 280.719561][ T5730] usb 3-1: Manufacturer: syz [ 280.724923][ T5730] usb 3-1: SerialNumber: syz [ 280.735409][ T5730] usb 3-1: config 0 descriptor?? [ 280.832188][ T5730] hub 3-1:0.0: bad descriptor, ignoring hub [ 280.844007][ T5730] hub 3-1:0.0: probe with driver hub failed with error -5 [ 280.916929][ T5716] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 280.958642][ T5716] usb 5-1: device descriptor read/8, error -71 [ 281.108193][ T5730] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 281.152405][ T8726] syzkaller0: entered promiscuous mode [ 281.161514][ T5730] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 281.188801][ T5730] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 281.208460][ T8726] syzkaller0: entered allmulticast mode [ 281.224377][ T5730] usb 3-1: media controller created [ 281.230077][ T5716] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 281.270979][ T5730] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 281.285698][ T5716] usb 5-1: device descriptor read/8, error -71 [ 281.407097][ T5716] usb usb5-port1: unable to enumerate USB device [ 281.427710][ T5730] DVB: Unable to find symbol dib7000p_attach() [ 281.441034][ T5730] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 281.679454][ T5730] rc_core: IR keymap rc-dib0700-rc5 not found [ 281.702511][ T5730] Registered IR keymap rc-empty [ 281.717638][ T5730] dvb-usb: could not initialize remote control. [ 281.732258][ T5730] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 282.906776][ T5718] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 283.066934][ T5718] usb 5-1: device descriptor read/64, error -71 [ 283.326825][ T5718] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 283.477105][ T5718] usb 5-1: device descriptor read/64, error -71 [ 283.597847][ T5718] usb usb5-port1: attempt power cycle [ 283.976869][ T5718] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 284.017487][ T5718] usb 5-1: device descriptor read/8, error -71 [ 284.297004][ T5718] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 284.346033][ T5718] usb 5-1: device descriptor read/8, error -71 [ 284.479976][ T5718] usb usb5-port1: unable to enumerate USB device [ 284.538397][ T5070] usb 3-1: USB disconnect, device number 38 [ 284.595498][ T5070] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 284.736593][ T8766] input: syz0 as /devices/virtual/input/input55 [ 285.186814][ T5730] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 285.302005][ T8770] syz.1.863 (8770): drop_caches: 2 [ 285.346851][ T5730] usb 3-1: Using ep0 maxpacket: 32 [ 285.364017][ T5730] usb 3-1: unable to get BOS descriptor or descriptor too short [ 285.364343][ T8770] bridge2: entered promiscuous mode [ 285.388553][ T8770] bridge2: entered allmulticast mode [ 285.389196][ T5730] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 285.426833][ T5730] usb 3-1: config 1 interface 0 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 285.456836][ T5730] usb 3-1: config 1 interface 0 has no altsetting 0 [ 285.471315][ T5730] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 285.487017][ T5730] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.500228][ T8770] team0: Port device bridge2 added [ 285.506896][ T5730] usb 3-1: Product: syz [ 285.517336][ T5730] usb 3-1: Manufacturer: syz [ 285.527817][ T5730] usb 3-1: SerialNumber: syz [ 285.624079][ T8775] FAULT_INJECTION: forcing a failure. [ 285.624079][ T8775] name failslab, interval 1, probability 0, space 0, times 0 [ 285.637211][ T8775] CPU: 1 UID: 0 PID: 8775 Comm: syz.3.864 Tainted: G L syzkaller #0 PREEMPT(full) [ 285.637240][ T8775] Tainted: [L]=SOFTLOCKUP [ 285.637246][ T8775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 285.637260][ T8775] Call Trace: [ 285.637267][ T8775] [ 285.637275][ T8775] dump_stack_lvl+0xe8/0x150 [ 285.637301][ T8775] should_fail_ex+0x412/0x560 [ 285.637329][ T8775] should_failslab+0xa8/0x100 [ 285.637356][ T8775] __kmalloc_noprof+0xe8/0x760 [ 285.637379][ T8775] ? nft_set_elem_expr_alloc+0x1a5/0x5f0 [ 285.637406][ T8775] nft_set_elem_expr_alloc+0x1a5/0x5f0 [ 285.637431][ T8775] ? __pfx_nft_set_elem_expr_alloc+0x10/0x10 [ 285.637465][ T8775] ? nft_rhash_init+0x2c0/0x3b0 [ 285.637490][ T8775] ? __pfx_nft_rhash_init+0x10/0x10 [ 285.637510][ T8775] ? kasan_quarantine_put+0xbb/0x1f0 [ 285.637531][ T8775] ? __pfx_nft_rhash_key+0x10/0x10 [ 285.637552][ T8775] ? __pfx_nft_rhash_obj+0x10/0x10 [ 285.637572][ T8775] ? __pfx_nft_rhash_cmp+0x10/0x10 [ 285.637598][ T8775] nft_set_expr_alloc+0x68/0x760 [ 285.637626][ T8775] ? nf_tables_newset+0x13bf/0x2580 [ 285.637649][ T8775] nf_tables_newset+0x1c6b/0x2580 [ 285.637684][ T8775] ? __pfx_nf_tables_newset+0x10/0x10 [ 285.637722][ T8775] ? __nla_parse+0x40/0x60 [ 285.637750][ T8775] nfnetlink_rcv+0x123e/0x27b0 [ 285.637804][ T8775] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 285.637841][ T8775] ? ref_tracker_free+0x693/0x840 [ 285.637891][ T8775] ? __netlink_deliver_tap+0x807/0x850 [ 285.637923][ T8775] ? netlink_deliver_tap+0x2e/0x1b0 [ 285.637944][ T8775] ? netlink_deliver_tap+0x2e/0x1b0 [ 285.637968][ T8775] netlink_unicast+0x75c/0x8e0 [ 285.637996][ T8775] netlink_sendmsg+0x813/0xb40 [ 285.638026][ T8775] ? __pfx_netlink_sendmsg+0x10/0x10 [ 285.638053][ T8775] ? aa_sock_msg_perm+0xf1/0x1b0 [ 285.638078][ T8775] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 285.638105][ T8775] ____sys_sendmsg+0x972/0x9f0 [ 285.638138][ T8775] ? __pfx_____sys_sendmsg+0x10/0x10 [ 285.638166][ T8775] ? kstrtoull+0x12f/0x1d0 [ 285.638193][ T8775] ___sys_sendmsg+0x2a5/0x360 [ 285.638215][ T8775] ? __lock_acquire+0x6b5/0x2cf0 [ 285.638239][ T8775] ? __pfx____sys_sendmsg+0x10/0x10 [ 285.638264][ T8775] ? get_pid_task+0x20/0x1f0 [ 285.638285][ T8775] ? get_pid_task+0x20/0x1f0 [ 285.638304][ T8775] ? get_pid_task+0x20/0x1f0 [ 285.638350][ T8775] ? __fget_files+0x2a/0x420 [ 285.638369][ T8775] ? __fget_files+0x3a0/0x420 [ 285.638399][ T8775] __sys_sendmsg+0x183/0x260 [ 285.638425][ T8775] ? __pfx___sys_sendmsg+0x10/0x10 [ 285.638470][ T8775] __do_fast_syscall_32+0x229/0x6e0 [ 285.638495][ T8775] ? do_fast_syscall_32+0x33/0x70 [ 285.638518][ T8775] ? lockdep_hardirqs_on+0x7a/0x110 [ 285.638540][ T8775] ? asm_int80_emulation+0x1a/0x20 [ 285.638556][ T8775] ? do_int80_emulation+0x286/0x530 [ 285.638579][ T8775] ? trace_irq_disable+0x3b/0x140 [ 285.638606][ T8775] do_fast_syscall_32+0x33/0x70 [ 285.638637][ T8775] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 285.638657][ T8775] RIP: 0023:0xf7fa601c [ 285.638674][ T8775] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 285.638688][ T8775] RSP: 002b:00000000f546650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 285.638707][ T8775] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 285.638719][ T8775] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 285.638729][ T8775] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 285.638739][ T8775] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 285.638750][ T8775] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 285.638782][ T8775] [ 286.173148][ T5730] cdc_ether 3-1:1.0: GUID doesn't match [ 286.182976][ T5730] usb 3-1: USB disconnect, device number 39 [ 286.212021][ T8777] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 286.411816][ T8779] netlink: 28 bytes leftover after parsing attributes in process `syz.3.866'. [ 286.565843][ T8787] netlink: 4 bytes leftover after parsing attributes in process `syz.3.869'. [ 286.578038][ T8787] netlink: 4 bytes leftover after parsing attributes in process `syz.3.869'. [ 286.597660][ T8787] netlink: 125 bytes leftover after parsing attributes in process `syz.3.869'. [ 286.615527][ T8787] netlink: 125 bytes leftover after parsing attributes in process `syz.3.869'. [ 287.157093][ T8796] syz.3.871 (8796): drop_caches: 2 [ 287.179005][ T8804] loop8: detected capacity change from 0 to 135 [ 287.204111][ T8806] bridge4: entered promiscuous mode [ 287.214720][ T8806] bridge4: entered allmulticast mode [ 287.232011][ T8806] team0: Port device bridge4 added [ 287.697365][ T5730] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 287.856926][ T5730] usb 2-1: Using ep0 maxpacket: 32 [ 287.864012][ T8824] netlink: 4 bytes leftover after parsing attributes in process `syz.2.879'. [ 287.895761][ T5730] usb 2-1: config 1 interface 0 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 287.931280][ T5730] usb 2-1: config 1 interface 0 has no altsetting 0 [ 287.957541][ T5730] usb 2-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.40 [ 287.983607][ T5730] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.008975][ T5730] usb 2-1: Product: syz [ 288.019561][ T5730] usb 2-1: Manufacturer: syz [ 288.034343][ T5730] usb 2-1: SerialNumber: syz [ 288.080719][ T8829] netlink: 132 bytes leftover after parsing attributes in process `syz.3.881'. [ 288.266771][ T9] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 288.447744][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 288.479708][ T9] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 288.512098][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.547116][ T9] usb 3-1: config 0 has no interface number 0 [ 288.569225][ T9] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 288.588539][ T9] usb 3-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 288.612276][ T9] usb 3-1: config 0 interface 196 has no altsetting 0 [ 288.626525][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 288.644593][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.656792][ T9] usb 3-1: Product: syz [ 288.666185][ T9] usb 3-1: Manufacturer: syz [ 288.678369][ T9] usb 3-1: SerialNumber: syz [ 288.699217][ T9] usb 3-1: config 0 descriptor?? [ 288.719378][ T8824] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 289.895261][ T8842] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 289.905417][ T8842] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 289.916961][ T5695] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 289.951721][ T8843] create_pit_timer: 8 callbacks suppressed [ 289.951737][ T8843] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 290.233105][ T5695] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 290.272729][ T5695] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.292623][ T5695] usb 4-1: Product: syz [ 290.312623][ T5695] usb 4-1: Manufacturer: syz [ 290.344728][ T5695] usb 4-1: SerialNumber: syz [ 290.376081][ T5695] usb 4-1: config 0 descriptor?? [ 290.449374][ T5695] hub 4-1:0.0: bad descriptor, ignoring hub [ 290.482567][ T5695] hub 4-1:0.0: probe with driver hub failed with error -5 [ 290.662735][ T5695] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 290.682406][ T5695] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 290.696087][ T5695] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 290.710698][ T5695] usb 4-1: media controller created [ 290.777785][ T5695] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 290.830081][ T5730] usbhid 2-1:1.0: can't add hid device: -71 [ 290.836954][ T5709] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 290.854236][ T9] ipheth 3-1:0.196: Unable to find endpoints [ 290.881547][ T5730] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 290.929454][ T9] usb 3-1: USB disconnect, device number 40 [ 290.935266][ T5730] usb 2-1: USB disconnect, device number 34 [ 291.029382][ T5709] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 291.076064][ T5709] usb 5-1: config 0 has no interface number 0 [ 291.098373][ T5695] DVB: Unable to find symbol dib7000p_attach() [ 291.112577][ T5709] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 291.127025][ T5695] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 291.145768][ T5709] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.172159][ T5709] usb 5-1: Product: syz [ 291.198799][ T5709] usb 5-1: Manufacturer: syz [ 291.233835][ T5709] usb 5-1: SerialNumber: syz [ 291.258864][ T5709] usb 5-1: config 0 descriptor?? [ 291.339646][ T5695] rc_core: IR keymap rc-dib0700-rc5 not found [ 291.349881][ T5695] Registered IR keymap rc-empty [ 291.369545][ T5695] dvb-usb: could not initialize remote control. [ 291.386910][ T5695] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 291.492514][ T5709] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 291.525183][ T5709] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 291.553596][ T5709] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 291.578912][ T8869] netlink: 27 bytes leftover after parsing attributes in process `syz.1.892'. [ 291.594414][ T5709] usb 5-1: media controller created [ 291.647461][ T5709] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 291.693288][ T8851] ------------[ cut here ]------------ [ 291.699471][ T8851] usb 4-1: BOGUS control dir, pipe 80003080 doesn't match bRequestType c0 [ 291.708094][ T8851] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1053/0x18b0, CPU#0: syz.4.887/8851 [ 291.718983][ T8851] Modules linked in: [ 291.723619][ T8851] CPU: 0 UID: 0 PID: 8851 Comm: syz.4.887 Tainted: G L syzkaller #0 PREEMPT(full) [ 291.735871][ T8851] Tainted: [L]=SOFTLOCKUP [ 291.740263][ T8851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 291.751253][ T8851] RIP: 0010:usb_submit_urb+0x1115/0x18b0 [ 291.758511][ T8851] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c1 f2 ff ff 89 e9 [ 291.779342][ T8851] RSP: 0018:ffffc900102c7768 EFLAGS: 00010246 [ 291.785533][ T8851] RAX: 0000000000000000 RBX: ffff888075b7e900 RCX: 0000000080003080 [ 291.793565][ T8851] RDX: ffff88807e2bf480 RSI: ffffffff8c808de0 RDI: ffffffff903e1e60 [ 291.801758][ T8851] RBP: 1ffff1100a069884 R08: 00000000000000c0 R09: 0000000000000000 [ 291.810157][ T8851] R10: ffffc900102c7860 R11: fffff52002058f18 R12: ffff88807bc0c100 [ 291.818488][ T8851] R13: ffff88805034c420 R14: 0000000080003080 R15: ffff88807e2bf480 [ 291.826578][ T8851] FS: 0000000000000000(0000) GS:ffff88812528d000(0063) knlGS:00000000f53ddb40 [ 291.836075][ T8851] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 291.843061][ T8851] CR2: 00000000800019c0 CR3: 000000008b9bc000 CR4: 00000000003526f0 [ 291.851241][ T8851] Call Trace: [ 291.854583][ T8851] [ 291.857859][ T8851] ? __init_swait_queue_head+0xa9/0x150 [ 291.863457][ T8851] usb_start_wait_urb+0x13f/0x5b0 [ 291.868671][ T8851] ? rcu_is_watching+0x15/0xb0 [ 291.873991][ T8851] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 291.879637][ T8851] ? trace_kmalloc+0x2a/0xf0 [ 291.884282][ T8851] usb_control_msg+0x234/0x3e0 [ 291.889153][ T8851] dib0700_i2c_xfer+0xbb2/0xf80 [ 291.894077][ T8851] __i2c_transfer+0x79a/0x1f70 [ 291.899195][ T8851] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 291.905098][ T8851] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 291.910985][ T8851] ? i2c_transfer+0xc8/0x2d0 [ 291.915579][ T8851] i2c_transfer+0x1cc/0x2d0 [ 291.920134][ T8851] i2cdev_ioctl_rdwr+0x460/0x740 [ 291.925085][ T8851] compat_i2cdev_ioctl+0x59f/0x5c0 [ 291.930439][ T8851] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 291.936076][ T8851] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 291.941773][ T8851] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 291.947488][ T8851] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 291.953667][ T8851] ? kmem_cache_free+0x182/0x650 [ 291.959497][ T8851] ? __se_sys_futex_time32+0x3ab/0x440 [ 291.965399][ T8851] ? rcu_is_watching+0x15/0xb0 [ 291.970384][ T8851] __do_fast_syscall_32+0x229/0x6e0 [ 291.975607][ T8851] ? do_fast_syscall_32+0x33/0x70 [ 291.981008][ T8851] ? lockdep_hardirqs_on+0x7a/0x110 [ 291.986399][ T8851] ? asm_int80_emulation+0x1a/0x20 [ 291.992034][ T8851] ? do_int80_emulation+0x286/0x530 [ 291.997993][ T8851] ? trace_irq_disable+0x3b/0x140 [ 292.003251][ T8851] do_fast_syscall_32+0x33/0x70 [ 292.008186][ T8851] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 292.014654][ T8851] RIP: 0023:0xf6fef01c [ 292.018805][ T8851] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 292.039196][ T8851] RSP: 002b:00000000f53dd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 292.047985][ T8851] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 0000000000000707 [ 292.056063][ T8851] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 292.064262][ T8851] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 292.072475][ T8851] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 292.080491][ T8851] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 292.088584][ T8851] [ 292.091607][ T8851] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 292.099061][ T8851] CPU: 0 UID: 0 PID: 8851 Comm: syz.4.887 Tainted: G L syzkaller #0 PREEMPT(full) [ 292.109810][ T8851] Tainted: [L]=SOFTLOCKUP [ 292.114175][ T8851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 292.124447][ T8851] Call Trace: [ 292.127731][ T8851] [ 292.130672][ T8851] vpanic+0x56c/0xa60 [ 292.134838][ T8851] ? __pfx__printk+0x10/0x10 [ 292.139512][ T8851] ? __pfx_vpanic+0x10/0x10 [ 292.144004][ T8851] ? is_bpf_text_address+0x292/0x2b0 [ 292.149363][ T8851] ? is_bpf_text_address+0x26/0x2b0 [ 292.154568][ T8851] panic+0xc5/0xd0 [ 292.159074][ T8851] ? __pfx_panic+0x10/0x10 [ 292.163784][ T8851] __warn+0x315/0x4c0 [ 292.168579][ T8851] ? usb_submit_urb+0x1053/0x18b0 [ 292.173741][ T8851] ? usb_submit_urb+0x1053/0x18b0 [ 292.179256][ T8851] __report_bug+0x29a/0x540 [ 292.183767][ T8851] ? usb_submit_urb+0x1053/0x18b0 [ 292.188883][ T8851] ? __pfx___report_bug+0x10/0x10 [ 292.193923][ T8851] ? lockdep_hardirqs_on+0x7a/0x110 [ 292.199224][ T8851] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 292.205052][ T8851] report_bug_entry+0x19a/0x290 [ 292.209922][ T8851] ? usb_submit_urb+0x1115/0x18b0 [ 292.214960][ T8851] ? usb_submit_urb+0x111a/0x18b0 [ 292.220014][ T8851] handle_bug+0xce/0x200 [ 292.224258][ T8851] exc_invalid_op+0x1a/0x50 [ 292.228997][ T8851] asm_exc_invalid_op+0x1a/0x20 [ 292.234059][ T8851] RIP: 0010:usb_submit_urb+0x1115/0x18b0 [ 292.239716][ T8851] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c1 f2 ff ff 89 e9 [ 292.260537][ T8851] RSP: 0018:ffffc900102c7768 EFLAGS: 00010246 [ 292.266709][ T8851] RAX: 0000000000000000 RBX: ffff888075b7e900 RCX: 0000000080003080 [ 292.275736][ T8851] RDX: ffff88807e2bf480 RSI: ffffffff8c808de0 RDI: ffffffff903e1e60 [ 292.283835][ T8851] RBP: 1ffff1100a069884 R08: 00000000000000c0 R09: 0000000000000000 [ 292.292065][ T8851] R10: ffffc900102c7860 R11: fffff52002058f18 R12: ffff88807bc0c100 [ 292.300115][ T8851] R13: ffff88805034c420 R14: 0000000080003080 R15: ffff88807e2bf480 [ 292.308320][ T8851] ? usb_submit_urb+0x10a4/0x18b0 [ 292.313600][ T8851] ? __init_swait_queue_head+0xa9/0x150 [ 292.319234][ T8851] usb_start_wait_urb+0x13f/0x5b0 [ 292.324265][ T8851] ? rcu_is_watching+0x15/0xb0 [ 292.329126][ T8851] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 292.334678][ T8851] ? trace_kmalloc+0x2a/0xf0 [ 292.339379][ T8851] usb_control_msg+0x234/0x3e0 [ 292.344166][ T8851] dib0700_i2c_xfer+0xbb2/0xf80 [ 292.349059][ T8851] __i2c_transfer+0x79a/0x1f70 [ 292.353824][ T8851] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 292.360066][ T8851] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 292.365867][ T8851] ? i2c_transfer+0xc8/0x2d0 [ 292.370444][ T8851] i2c_transfer+0x1cc/0x2d0 [ 292.375291][ T8851] i2cdev_ioctl_rdwr+0x460/0x740 [ 292.380240][ T8851] compat_i2cdev_ioctl+0x59f/0x5c0 [ 292.385376][ T8851] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 292.391113][ T8851] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 292.397051][ T8851] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 292.402521][ T8851] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 292.408678][ T8851] ? kmem_cache_free+0x182/0x650 [ 292.414312][ T8851] ? __se_sys_futex_time32+0x3ab/0x440 [ 292.419887][ T8851] ? rcu_is_watching+0x15/0xb0 [ 292.424665][ T8851] __do_fast_syscall_32+0x229/0x6e0 [ 292.429956][ T8851] ? do_fast_syscall_32+0x33/0x70 [ 292.435067][ T8851] ? lockdep_hardirqs_on+0x7a/0x110 [ 292.440282][ T8851] ? asm_int80_emulation+0x1a/0x20 [ 292.445483][ T8851] ? do_int80_emulation+0x286/0x530 [ 292.450680][ T8851] ? trace_irq_disable+0x3b/0x140 [ 292.456584][ T8851] do_fast_syscall_32+0x33/0x70 [ 292.461455][ T8851] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 292.467791][ T8851] RIP: 0023:0xf6fef01c [ 292.471849][ T8851] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 292.491705][ T8851] RSP: 002b:00000000f53dd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 292.500121][ T8851] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 0000000000000707 [ 292.508614][ T8851] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 292.516582][ T8851] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 292.524560][ T8851] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 292.532526][ T8851] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 292.540495][ T8851] [ 292.544016][ T8851] Kernel Offset: disabled [ 292.548421][ T8851] Rebooting in 86400 seconds..