last executing test programs: 29m59.621776505s ago: executing program 1 (id=2185): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000840)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="000426bd7000fbdbdf250500000008000300", @ANYRES32=r2, @ANYBLOB="0c0099002801000079000000"], 0x28}, 0x1, 0x0, 0x0, 0x8041}, 0x10000c51) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000534af6fb000000000000005500000b1e00"], 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000023, 0x13, r3, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="20000080130a050000000000020073797a3200200000"], 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x40) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_ext={0x1c, 0x1d, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000c0ffffff00000000ff0f000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000009500000000000000b7080000000000007b8af8ff00000000b7080000030000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="00000000000800000085000000a5000000bf91000003000000000000000000001bbf3685fb029a0900b7000000000000009500000000000000805d591500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x401, 0x8, &(0x7f0000000200)=""/8, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0x6, 0x3, 0x1}, 0x10, 0x1a6ef, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[r3, r3, r3], 0x0, 0x10, 0x3bc00000}, 0x94) syz_usb_connect$midi(0x4, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r6, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbd, &(0x7f0000000500)=[{}], 0x8, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0xf, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) r7 = socket$nl_audit(0x10, 0x3, 0x9) r8 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r8, 0x40085112, &(0x7f0000000000)=@t={0x81, 0x5, 0x0, 0x0, @generic}) setsockopt$sock_int(r7, 0x1, 0x10, &(0x7f0000000880), 0x4) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, [], [], [0x0, 0x0, 0x800], [0x1]}) 29m58.589849956s ago: executing program 1 (id=2189): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipmr_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x1c}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001780)) r2 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000002000)={0x0, 0x9, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000001fc0)={0x496a8ed2f96a5b2, 0x7, '\x00', @string=0x0}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'syztnl0\x00', &(0x7f00000000c0)={'gre0\x00', 0x0, 0x20, 0x40, 0x3, 0x8, {{0x3e, 0x4, 0x1, 0x3e, 0xf8, 0x67, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@rr={0x7, 0x13, 0x86, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @multicast1, @private=0xa010102]}, @timestamp_prespec={0x44, 0x34, 0xcd, 0x3, 0x6, [{@loopback}, {@rand_addr=0x64010101, 0x9119}, {@private=0xa010100, 0xb4c8}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x4}, {@dev={0xac, 0x14, 0x14, 0x38}, 0x24}, {@loopback, 0x6}]}, @timestamp_prespec={0x44, 0x2c, 0x97, 0x3, 0x1, [{@remote, 0x1}, {@multicast2, 0xd7b}, {@broadcast, 0x6}, {@private=0xa010102}, {@multicast2, 0xa450}]}, @noop, @timestamp_prespec={0x44, 0x1c, 0x27, 0x3, 0x2, [{@empty, 0x17}, {@remote, 0x4}, {@broadcast, 0x7}]}, @timestamp_prespec={0x44, 0x2c, 0x7f, 0x3, 0xd, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x800}, {@private=0xa010100, 0x3}, {@broadcast, 0x4}, {@remote, 0x1ff}, {@empty, 0x7}]}, @ssrr={0x89, 0x27, 0xdb, [@dev={0xac, 0x14, 0x14, 0x3c}, @multicast2, @rand_addr=0x64010102, @multicast2, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x2}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000240)={'ip6_vti0\x00', 0x0, 0x29, 0x7f, 0x5, 0x9, 0x22, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, '\x00', 0x1}, 0x10, 0x7, 0x7fff, 0x8}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000300)) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r4, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r6}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 29m58.085305577s ago: executing program 1 (id=2191): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x8080, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x8}, 0x1c) socket$unix(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) sendmsg$rds(r1, &(0x7f00000001c0)={&(0x7f00000017c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000480)=[@cswp={0x58, 0x114, 0x7, {{0x2, 0x7}, &(0x7f0000000200)=0x6, &(0x7f0000000380)=0xfffffffffffffff8, 0x1675ea28, 0x9ff, 0x8, 0x3, 0x3f, 0x2}}, @rdma_args={0x48, 0x114, 0x1, {{0xfffffff8, 0x4}, {0x0}, &(0x7f0000001580)=[{&(0x7f00000003c0)=""/139, 0x8b}], 0x1, 0x8}}], 0xa0}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x82, &(0x7f0000006680)) r6 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000280)=ANY=[@ANYBLOB="0005010000004f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f0000000180)={0x44, &(0x7f0000000140)={0x20, 0xa02da726a9b588e2, 0x24, 'N'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x3, &(0x7f0000000000)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000a00)=@broute={'broute\x00', 0x3ffff, 0x2, 0x2e4, [0x200000000500, 0x200000000530, 0x2000000007b4, 0x200000000500, 0x200000000500, 0x200000000500], 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000100000000000000000000000000000000000000000000000000000000000000ffffffff02000000050000002200000002016e69637666300000000000000000000064766d7270300000000000000000000070696d3672656731000000000000000064766d72703100000000000000000000aaaaaaaaaa2aff00ff00000000000000000000fffffffe006e0000009e000000d600000000000000000000000000000000000000000000000000000000000000000000000800000000000000fdffffff000000006d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000fcffffff00000000050000002800000055687465616d300000000014c1470000000000000064766d727031000000000000000000006970366772653000000000000000000067656e65766530000000000000000000aaaaaaaaaabb00000000ffff0180c2000001000000ffffff9e0000004e0100007e0100003830325f3300000000000000000000000000000000000000000000000000000008000000000000008e000006020400006e666c6f670000000000000000000000000000000000000000000000000000005000000000000000020000000700010000000000f0a940bb914e49f7a4c07f94289e26d5f546b9779a800a7f4a32c0f6070a6a69ffddcf05605c980d960b1bb620765861bb90601961ac523749276cfaa8f81cc0000000006d61726b000000000000000000000000000000000000000000000000000000001000000000000000f0ffffff00000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000800000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff00000000"]}, 0x35f) ioprio_set$pid(0x3, 0x0, 0x0) 29m53.6186612s ago: executing program 1 (id=2211): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000200)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/nfsfs\x00') getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000080)={@mcast1, 0x0}, &(0x7f00000000c0)=0x14) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x2, {0x1, 0x1, 0x2}, 0xfc}, 0x18) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf}}) 29m53.307897057s ago: executing program 1 (id=2212): socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x81, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000140)={0x79, 0x0, 0xc}) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000240)={0x7e, 0x0, [{0x0, 0x4, 0x0, 0x0, @msi={0x5, 0x800, 0x4}}]}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0xffffffffffffffff, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0x70bd27, 0x200, {0x2, 0x0, 0x4, 0x0, 0x4}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000500)=@hci, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000400)=""/248, 0x151}], 0x1}, 0x40002000) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') syz_usb_connect$uac1(0x0, 0xaa, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902980003010000000904000000010100000a2401000000020102132406040006030000000000000000000000000924030000010000ff0924050000f8431cfd0924030604030204001b2404", @ANYBLOB="06c9"], 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000280)={0x1, 0x3fff, 0x0, &(0x7f0000000340)=""/185, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f00000000c0)=0x1) 29m52.450927678s ago: executing program 1 (id=2214): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000033d000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000001c0)="d8df7e23b3b9ce000000b807000000ba000000000f301b8154fea900b9b60a000080320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000b9a6080000b800000100ba000000000f300f300fc79d53bf0000c4b9e16dc301012202", 0xba}], 0x1, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fdf000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, 0x0}], 0x1, 0x1b, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x20, 0x5, 0xfd}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x7df, 0x40, 0x9, 0xff, 0x8000000000000001, 0x8001, 0x455, 0xb, 0x3, 0xffffffff, 0xfffffffffffffff, 0x9, 0x1, 0x20000000000fc, 0x2, 0x4], 0x8080000, 0x40005}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 29m51.942178076s ago: executing program 32 (id=2214): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000033d000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000001c0)="d8df7e23b3b9ce000000b807000000ba000000000f301b8154fea900b9b60a000080320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000b9a6080000b800000100ba000000000f300f300fc79d53bf0000c4b9e16dc301012202", 0xba}], 0x1, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fdf000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, 0x0}], 0x1, 0x1b, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x20, 0x5, 0xfd}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x7df, 0x40, 0x9, 0xff, 0x8000000000000001, 0x8001, 0x455, 0xb, 0x3, 0xffffffff, 0xfffffffffffffff, 0x9, 0x1, 0x20000000000fc, 0x2, 0x4], 0x8080000, 0x40005}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 24.603892028s ago: executing program 5 (id=10771): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000000)=@file={0x1, './file0/../file0\x00'}, 0x6e) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r3) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYRESDEC=r1, @ANYRESDEC=r3], 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x20008000) close(r1) move_mount(0xffffffffffffff9c, 0x0, r1, 0x0, 0x262) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x7c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1a}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x7c}}, 0x20008010) 24.399161704s ago: executing program 5 (id=10772): r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x8, 0x8000) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280), 0x802, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000140)={0x400000100002f, {0x0, 0x80000000, 0x6300, 0x1}}) ioctl$BLKOPENZONE(r0, 0x40101286, &(0x7f0000000040)={0x0, 0x3}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) setsockopt$sock_cred(r2, 0x1, 0x34, &(0x7f00000002c0), 0xc) 22.898855136s ago: executing program 5 (id=10774): pipe(&(0x7f0000019480)) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r1 = socket$inet6(0xa, 0x3, 0x3b) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 22.437400766s ago: executing program 5 (id=10775): socket(0x1, 0xa, 0x1ff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r2 = dup(r1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x19) write$UHID_INPUT(r2, &(0x7f0000001040)={0x18, {"a2e3ad21ed6b52f99cfbf4c087f70c9b3e6ee7ff7fc6e5539b9b3b0e8b9b411b5d30091b080d29428f0e1ac6e7049b3468959b4c9a242a9b67f3988f7ef319520200ffe8d178708c523c921b1b25380a169b63d336cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca5b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b4124351601611c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb77ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b405177548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e05130935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b3110b932a4d02da711b757fe43c06d21e35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc238a081ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed714887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee658e4cb5e930ed624806c43a006dc9336d07c2b8081c128ad2706f48261f7897084c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264d2700c838fa2c7b34252600c9654e502dcea39cb6bc3eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c6000064b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa70826ad01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x100d}}, 0xfffffdef) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r4 = socket(0x2d, 0x2, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x11d, 0x1, 0x0, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0\x00') r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00') sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="28400400", @ANYRES16=r3, @ANYBLOB="050004000000000000004400000008000300", @ANYRES32=r5, @ANYBLOB="0c00238005000f000a000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x40840) 22.284435635s ago: executing program 5 (id=10777): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001200050104000000ffdbdf2505001900ff00000028001a000a01010200002e59f8f8be96bb0d0000ff01000000000000000000000000000102"], 0x40}, 0x1, 0x0, 0x0, 0x4815}, 0x2004c804) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r9, 0x0, 0xf3a, 0x0) write(r5, &(0x7f0000000240)="94", 0x1) vmsplice(r8, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2", 0x2}], 0x1, 0x0) tee(r4, r9, 0x8f5, 0x0) write$cgroup_devices(r9, 0x0, 0x8) write(r6, 0x0, 0x0) close(r2) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r10, 0x29, 0x1a, &(0x7f0000000040)=0xac, 0x4) setsockopt(r3, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x6}, 0x1c) ioctl$SIOCGETVIFCNT(r1, 0x89e0, &(0x7f0000000000)) 21.997338131s ago: executing program 5 (id=10779): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async, rerun: 64) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) (rerun: 64) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, 0x9, 0x1, 0x1a6}) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 21.418497883s ago: executing program 33 (id=10779): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async, rerun: 64) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) (rerun: 64) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ff9000/0x4000)=nil, 0x9, 0x1, 0x1a6}) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 12.186971187s ago: executing program 6 (id=10780): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f000082f000/0x2000)=nil, 0x2000, 0x19) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x1, 0x0, 0x40, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000814000/0x4000)=nil) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x4000000) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r4 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r4, 0x110, 0x1, &(0x7f0000000040)='\x04]{!\x00', 0x5) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000480)='u\x00\x00\xf1\x94\x00'/18, 0x0, r3) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r3) sendmsg$tipc(r3, &(0x7f0000003140)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x1, {0x43, 0x3}}, 0x10, &(0x7f0000000140), 0x0, &(0x7f0000002140)="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", 0xdf2, 0x40051}, 0x20008000) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2) syz_open_dev$radio(&(0x7f0000000240), 0x2, 0x2) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x5, "152a44e3112c0000f5a82d86c200000000000000000000000000000800"}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000005000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff7000/0x1000)=nil, 0x0}, 0x68) 7.618751601s ago: executing program 6 (id=10816): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000086d044fc1ffffed000001090224000100000000090400000103000300"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x5, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000009a65d0860040800"], 0x0) 6.739970685s ago: executing program 0 (id=10819): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x8}, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8, 0x40]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0xfffffffc, 0x0, 0x9, 0xfffffe00, 0x0, 0xa68f]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @local, 0x8000}, {0xa, 0x4e22, 0x800, @empty}, 0x0, {[0x0, 0x8000, 0x0, 0xfffffffc]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, {0xa, 0x0, 0x4, @empty}, 0x0, {[0x3, 0x0, 0x0, 0x1, 0x89f, 0x8, 0x1]}}, 0x5c) request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='y\xa9n::e\x00'/18, 0xfffffffffffffffe) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)={0x0, 0x15, '\x00', [@enc_lim={0x4, 0x1, 0xee}, @ra={0x5, 0x2, 0xd26d}, @generic={0x1, 0x78, "5df141508d70f8f10763c8bb66bb717894c724f46b31d6637e4af85b8d66e90856db0d9778426208dace91f9224b0ef732ac805aaca74df6e1dca9c91b323ffe69000c6be58430171395ceca75650efff3b03f9f3f4961e451f9da5fe4ef4b5d0a1cdf364d450fcc0053356342789b9d11b6ee6aff208d94"}, @jumbo={0xc2, 0x4, 0xae}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x3a}}, @hao={0xc9, 0x10, @private1}]}, 0xb8) pwrite64(r1, 0x0, 0x0, 0x5) 6.622610557s ago: executing program 0 (id=10820): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01864c1, &(0x7f00000000c0)={0x0, 0x1, 0xffffffffffffffff}) syncfs(r1) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) pipe(&(0x7f0000000140)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e1d, 0x1, @loopback, 0x13}, 0x1c) r3 = socket(0x2b, 0x80801, 0x1) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x2, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000040)="8171080de30ed9d7c3fca505cd6aa005", 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12011003000000408a253600400001020301090224000101f54008090400810203010304092100000701221b03090581030700000000"], &(0x7f0000000500)={0xa, &(0x7f00000003c0)={0x60, 0x6, 0x310, 0x4, 0x81, 0x4, 0x10, 0x7}, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="d7a80532115df7c5f525d01c4320865615839c209729f3ed6581876d023790b943b698db5c8ed1ddc3ff27a03b5cf40383fba4c34bb3bd58f342d7a3bc8188ca92d86a99f9c60dd13842f3aa6be70489d19fe114a038f7bd481807570d0193396f4008d16f25e3efc2087fcc57c29de00d2bac72f2a93144c59eaa466e329c1e6725f4be6172697148171eefbe00d5fb9be80bf15adee253978e65705deaec91180c575ecab13aea04a7f890e60e84762a529ba98e59e979d8db13cfd6a02dc3e41a7f09f907e125821f17924700a4"], 0x1, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x380a}}]}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xba98575a95aeb70d) 6.572471034s ago: executing program 3 (id=10821): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crc32c-generic)\x00'}, 0x58) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x8, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0x0, 0x2}}}}}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newqdisc={0x468, 0x24, 0xf0b, 0x8000000, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x3d42fb6ebd0ca4a5}, @TCA_TBF_PARMS={0x28, 0x1, {{0x7, 0x1, 0x6, 0xd, 0xe, 0x8e1}, {0xd5, 0x0, 0x2, 0x1, 0x80}, 0x80, 0x56b6, 0x1a10}}, @TCA_TBF_PTAB={0x404, 0x3, [0x2, 0xfff, 0x5, 0xffff, 0x2c000000, 0x8, 0x2, 0xcf, 0x5, 0xb6, 0x1, 0x75, 0x81, 0x2, 0x2, 0x7, 0xa85, 0x5, 0x2, 0x8000, 0xfffffffb, 0x0, 0x4b3, 0x2, 0xe8, 0x8ccc, 0xaa1, 0x3, 0x7a0, 0x0, 0x80000000, 0x5c4, 0x10001, 0xff, 0xc63, 0x5f41cb59, 0x7, 0x2, 0xca6, 0x3, 0xffffffff, 0x7, 0x3, 0x675, 0x6, 0x8, 0x9, 0x0, 0x7, 0x4, 0xc64, 0xfffffffe, 0x7, 0x3ff, 0x9, 0x7fffffff, 0x7, 0x28000, 0xd, 0x4a5, 0xb86, 0xffffffff, 0x2, 0x9, 0x3b8, 0x4, 0x200, 0x37, 0x8001, 0xfffffffd, 0x33, 0x3, 0x7ff, 0x10001, 0x10000, 0xfffffffa, 0x1e, 0x4, 0x8000, 0x200, 0x4, 0x9, 0x3dd6, 0x1, 0x4, 0x9, 0x7, 0x200, 0x6729, 0xd, 0x7ff, 0x1c000000, 0xfffffff3, 0x1, 0x0, 0x8, 0x1, 0x9, 0xf, 0x101, 0x8, 0x6, 0x7f, 0x6c, 0x46d28bf6, 0x2, 0x1, 0xbe45, 0x0, 0xe, 0x8001, 0x8, 0x80000000, 0x80, 0x9, 0x2, 0x9, 0xbad, 0xab, 0x4, 0x40, 0x696, 0x0, 0x4000000, 0x4, 0xfff, 0x1, 0x4, 0x9, 0x8, 0x9, 0x7, 0x1, 0xba, 0x5, 0x2, 0x6, 0x9, 0x1, 0x4, 0x3, 0x9, 0x3, 0x3, 0x594c18ec, 0x1, 0x8000, 0x9, 0x3, 0x0, 0x40, 0x80000000, 0xbba2, 0xf0a3, 0x400, 0xd7, 0x7ff, 0x100, 0x0, 0x8, 0x0, 0x9, 0x9, 0x345a0b24, 0x401, 0x7, 0x3, 0x5, 0xc, 0x2, 0x9706, 0x9, 0x4, 0x7fff, 0x4, 0xa5d, 0x7e39, 0x5, 0x6, 0x9, 0x7ff, 0xffffffff, 0x1cca, 0x400, 0x3, 0xfffffbff, 0x10000, 0x9, 0xfffffff8, 0x3, 0xffffffff, 0x0, 0x6ef59359, 0x9fe7, 0x6, 0xff9, 0x800, 0x8, 0x9, 0x3, 0xf, 0x7, 0xe, 0x1, 0x3, 0xffffffff, 0x8, 0x3ff, 0xfffff801, 0x1ff, 0x357, 0x575, 0x9, 0x10, 0x10000, 0xf, 0x80000000, 0x9, 0x8, 0xc, 0x8, 0x67a, 0x8000, 0x400, 0xe, 0x100, 0x74, 0x1, 0x1, 0x6, 0x9, 0x80000001, 0x0, 0x9, 0x5, 0xffffffb0, 0x1cd, 0xb, 0x80, 0x0, 0x7fffffff, 0x61e, 0x9, 0xfffffff8, 0x1ff, 0x5, 0x6, 0x9, 0x7, 0x5, 0xfffffffa, 0x5, 0xa3, 0x5, 0x8, 0x6]}]}}]}, 0x468}}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x4, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x80, 0xff, 0x2, 0x0, '\x00', 0x0, 0x6}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x0, 0xe6, 0x2, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87}, {0x9, 0x8, 0x8, '\x00', 0xf}, {0xfb, 0xff, 0x3, '\x00', 0x69}, {0x0, 0xfa, 0xf5, '\x00', 0xf}, {0x7, 0x9, 0xf5, '\x00', 0xb4}, {0xf, 0x4, 0x54, '\x00', 0xff}, {0x75, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x5, 0xc}, {0x7f, 0x5, 0x4a, '\x00', 0x6}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x8, '\x00', 0xdc}, {0xfb, 0x58, 0xfb, '\x00', 0xc}, {0xfe, 0x1, 0x26}, {0xcf, 0x3, 0x8, '\x00', 0x6}, {0xf, 0xee, 0x8, '\x00', 0x3}, {0x39, 0x42, 0x6, '\x00', 0xb}, {0xb, 0x6, 0xc0, '\x00', 0x9}, {0x31, 0xc, 0x5}, {0x9, 0x2, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x4d, 0xc, 0x83, '\x00', 0x7c}, {0x10, 0x6, 0x92, '\x00', 0x10}, {0x1, 0x8f, 0x7e, '\x00', 0x4}, {0x7, 0x6, 0x4}]}}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}}}, 0x24}}, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r8 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_GET_MSRS_sys(r8, 0xc008ae88, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x40, 0x80) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_genetlink_get_family_id$nl80211(0x0, r9) read$FUSE(r10, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r10, &(0x7f0000000040)={0x50, 0x0, r11, {0x7, 0x1f, 0x80000000, 0x410400, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x20}}, 0x50) syz_fuse_handle_req(r10, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r10, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.577634248s ago: executing program 3 (id=10822): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) syz_emit_ethernet(0x76, &(0x7f00000000c0)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0xfc, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr, @rand_addr, {[@rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@loopback}, {@remote}, {@private}, {@dev}, {@dev}, {@dev}]}]}}}}}}}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r5, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20008000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000400)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, 0x90) r7 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x8000, 0x1000000000000}) ioctl$DMA_BUF_SET_NAME_A(r7, 0x40046201, &(0x7f00000002c0)='!\x00') ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000340)={0x0, 0x1, 0x17}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0xc0000101, 0x0, 0x4000000000208}]}) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r11, 0x0, 0x18, 0x0, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010026bd7000fedbdf251200000008000300", @ANYRES32=r13], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) remap_file_pages(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000000, 0x0, 0x10000) 5.439904896s ago: executing program 3 (id=10824): r0 = socket(0x11, 0x3, 0x0) setsockopt(r0, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000000), &(0x7f00000000c0)=0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth0_to_bond\x00', 0x0}) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000040)=@ll={0x11, 0x6, r2, 0x1, 0xf1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000280)="070f", 0x2}, {&(0x7f0000001540)="11ec4e696119aed2", 0x8}], 0x2}, 0x4) 5.334843259s ago: executing program 4 (id=10825): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000036571a20cd0c8000fe67010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000000c0)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40022042, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x42, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x6000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f000033d000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000001c0)="d8df7e23b3b9ce000000b807000000ba000000000f301b8154fea900b9b60a000080320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000b9a6080000b800000100ba000000000f300f300fc79d53bf0000c4b9e16dc301012202", 0xba}], 0x1, 0x10, 0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x4000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r4, 0xc08c5335, &(0x7f00000002c0)={0x9, 0x2, 0x0, 'queue1\x00', 0x3ff}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'geneve0\x00'}) 5.326485989s ago: executing program 3 (id=10826): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f000082f000/0x2000)=nil, 0x2000, 0x19) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x1, 0x0, 0x40, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000814000/0x4000)=nil) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x4000000) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r4 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r4, 0x110, 0x1, &(0x7f0000000040)='\x04]{!\x00', 0x5) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000480)='u\x00\x00\xf1\x94\x00'/18, 0x0, r3) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r3) sendmsg$tipc(r3, &(0x7f0000003140)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x1, {0x43, 0x3}}, 0x10, &(0x7f0000000140), 0x0, &(0x7f0000002140)="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", 0xdf2, 0x40051}, 0x20008000) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2) syz_open_dev$radio(&(0x7f0000000240), 0x2, 0x2) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x5, "152a44e3112c0000f5a82d86c200000000000000000000000000000800"}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000005000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff7000/0x1000)=nil, 0x0}, 0x68) 4.492813969s ago: executing program 6 (id=10827): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c4b20710200e0101"], 0x0) syz_usb_ep_write(r1, 0x81, 0xf6, &(0x7f0000000780)="40a647de28413c0198023ee398c6bf7c5db29c430000d678c09b1abcd144201ba4a7ee7c2e081147cc0335720ea4e3ad66c1f138e0164f2f41a3cfe6c759e05cf6344341b06f428dbd016889ddc568cb2f62b6e9a5430905c48cf80af3f919c1792103c504863dface0ae579a5add8e5d47f64390a880c9b0b3471939d5a087a1c8bd2ed3d7af96ff1ed8ad999e4c1b3936bf09802b3eecdd379bebe1e938e63dfc6b457ca701730c33dabfd5ac1d511a7f87700c1699b96dfe33e75c5319debe7b71420b519e51359e08e0fd380eec621a03324c94e587ea5c3325c55a80ce71554809354eb3e4e58f2ce44cace78db1a0cecd81671") 3.507075816s ago: executing program 4 (id=10828): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006c617374000000"], 0xe4}}, 0x800) 3.490774117s ago: executing program 0 (id=10829): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000036571a20cd0c8000fe67010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000000c0)={0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="00146a"], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40022042, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x42, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x6000) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f000033d000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000001c0)="d8df7e23b3b9ce000000b807000000ba000000000f301b8154fea900b9b60a000080320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000b9a6080000b800000100ba000000000f300f300fc79d53bf0000c4b9e16dc301012202", 0xba}], 0x1, 0x10, 0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x4000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r4, 0xc08c5335, &(0x7f00000002c0)={0x9, 0x2, 0x0, 'queue1\x00', 0x3ff}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newlink={0x4c, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gre={{0x8}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x4}, @IFLA_GRE_IGNORE_DF={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x10) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fdf000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, 0x0}], 0x1, 0x1b, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') lseek(r8, 0x8000000000000000, 0x2) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, &(0x7f0000000140)={0x1, 0x1, 0x3, 0x4, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(0xffffffffffffffff, 0x40026f33, &(0x7f0000000100)=0x808c) ioctl$DVB_DEMUX_DMX_REMOVE_PID(0xffffffffffffffff, 0x40026f34, &(0x7f0000000040)=0x808c) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000000)={0x20, 0x5, 0xfd}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.32077144s ago: executing program 4 (id=10830): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001000ffff25bd7000fddbdf2500000000", @ANYBLOB="1720000021200000400012800c0001006d6163766c616e00300002"], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) (fail_nth: 6) 3.207239508s ago: executing program 4 (id=10831): socket$unix(0x1, 0x1, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) futex(&(0x7f0000000140)=0x1, 0x8b, 0x1, &(0x7f0000000180), 0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) r1 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) read(r2, 0x0, 0x0) 2.373366201s ago: executing program 2 (id=10832): openat$kvm(0x0, &(0x7f00000000c0), 0x5418c0, 0x0) r0 = ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000000)={0x1}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) r2 = fspick(0xffffffffffffffff, &(0x7f0000000540)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000019080), 0x102400) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r3, 0xc0a85352, &(0x7f00000190c0)={{0x0, 0xf}, 'port1\x00', 0x0, 0xb1008, 0x2, 0x6, 0x7, 0x370000, 0x7ff, 0x0, 0x4, 0x81}) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f00000004c0)={{&(0x7f0000000280)=[{0x2, 0x2400000000, 0x5, {0x9a2, 0x7fffffffffffffff}, 0xf, 0x2a, 0x63ad}, {0x8, 0x3, 0xa, {0x400000c, 0x2}, 0x7, 0x0, 0x4}, {0x7, 0x8, 0xc, {0x3ff, 0x7795}, 0x2, 0x4}, {0xd9, 0x2, 0x7, {0x6, 0x1}, 0x1, 0x5, 0x1}], 0x4, 0x40, 0x7, 0x7}, {&(0x7f0000000380)=[{0x0, 0xfffffffffffffff7}, {0x0, 0x8}, {0x8000, 0x6}, {0x5, 0x7f}], 0x4, 0x10, 0x101, 0xc2}, {&(0x7f00000003c0)=[0x112d, 0x6, 0x401, 0xfffffffffffffffa], 0x4, 0x8, 0x7c7, 0xd3}, {&(0x7f0000000400)=[{0x3, 0x3, 0x8000000000000001, 0x1, 0x248}, {0x7, 0x7fff, 0xfff, 0x2, 0x4}, {0x9, 0x9, 0x101, 0x4000000000000e, 0xffffffff}], 0x3, 0x28, 0x3, 0x81}, {&(0x7f0000000480), 0x0, 0x8, 0xd, 0xd}}) ioctl$VT_DISALLOCATE(r1, 0x5608) r5 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0x8) unlinkat(r6, &(0x7f0000000280)='./bus\x00', 0x200) ioctl$PPPIOCSMRU1(r4, 0x40047452, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @private=0xa010100}, 0xfffffffffffffed8) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendto$inet(r7, &(0x7f0000000040)="17", 0xfffffe75, 0x10008085, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x6c304000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="d300000010010000180a00"/22], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x11}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) 2.135633692s ago: executing program 3 (id=10833): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r0, 0xc0305615, &(0x7f0000000200)={0x0, {0x7b, 0xb}}) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x9, 0x800}, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, 0x0, &(0x7f0000000500)) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0xc08, 0x80}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}, 0x1, 0x0, 0x0, 0x404c8c0}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001780)=@newlink={0x3c, 0x10, 0x403, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x429a4}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wlan1\x00'}]}, 0x3c}}, 0x8000) syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000094ae94405f0520c4336a000000010902120001000000000904"], 0x0) select(0x40, &(0x7f0000000000)={0x9, 0x7, 0xffff, 0x0, 0x0, 0x1000}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c4606ff78a33e02003cc0aafd054489016ac2ec7378af5500000000"], 0x78) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x7, 0xfff3}, {0xb, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 2.044580438s ago: executing program 2 (id=10834): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3c}, {0x6, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x1400000004, 0x800009d8}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x24040040}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e0"], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) sendmmsg(r1, 0x0, 0x0, 0x0) 1.930926394s ago: executing program 2 (id=10835): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x68, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3c, 0x3, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x2c, 0xb, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xec}}, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f0000000180)={0x1, 0x48, '\x00', 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000040)=@buf) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = add_key$keyring(&(0x7f0000000240), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, r5) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) userfaultfd(0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8000000) r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000480), 0xa6f81, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000180)=0x6f) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000063c0)={0x2020}, 0x2020) getpid() sendmsg$unix(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x8841) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = io_uring_setup(0x1693, &(0x7f0000000080)={0x0, 0x4d49, 0x800, 0x2, 0x277}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r7, 0x13, &(0x7f0000000040)=[0x5, 0x9501], 0x2) 1.798053095s ago: executing program 4 (id=10836): r0 = memfd_secret(0x80000) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x700, 0x8000, 0x10, 0x6, {{0x6, 0x4, 0x0, 0x1, 0x18, 0x66, 0x0, 0x6, 0x4, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x10}, {[@end]}}}}}) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x9, 0x3, 0x3, @vifc_lcl_ifindex=r2, @rand_addr=0x64010102}, 0x10) syz_io_uring_setup(0x56a4, &(0x7f0000000140)={0x0, 0x76f, 0x80, 0x0, 0xa9, 0x0, r1}, &(0x7f00000001c0)=0x0, &(0x7f0000000200), &(0x7f0000000240)) r4 = mmap$IORING_OFF_SQ_RING(0x0, 0x6, 0x2, 0xc9108af7fe239575, r0, 0x0) r5 = syz_ublk_setup_io_uring(0x296e, &(0x7f0000000280)={0x0, 0xa103, 0x10000, 0x2, 0x24d, 0x0, r0}, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)=0x0) syz_io_uring_submit(r3, r4, r6, &(0x7f0000000900)=@IORING_OP_FUTEX_WAIT={0x33, 0x0, 0x0, 0x54, 0xffffffff, &(0x7f0000000880)=[{&(0x7f00000003c0)="802dc9dbbf75c4536ead451e0628e780353d8f4c083cb9552d881fb4328a9841a81b846328a67d9324d298da9eb8c47352c3e9293b43545ee8c5038bd8b20ae6fb833570a01d10fa8c3a81eeb7c29d3a01137e02617bc08caf5f86b9942a3f6d0869d4655035b4ed74b0290e69a6fd16b7c314e7dc68705d85cbf09a53b070b386fea7c7d2dd4511a17a3e1e3e560358f3d9dc78a7f0a0e83cb5d0760e5a0d35a25695481f8fa3b880f91f6b87dd99de9bbb816af669edd2ca4e939879c569291ae253d219295390fd7b4f4dfa4e51f8f67491", 0xd3}, {&(0x7f00000004c0)="abb915db09353f6660e019eebdc652f1a38d654abd36e265ae2c2fac6fe81209190f7acc62c79702ab71c5f74e224106e16874309c83387aee1162d7101fb40b6336e2bdd99d9655a45d62b3d21996fb74507319ecf78e0535017dbd0e6ee4a34663400f6070ed809661df72509b7ea5eb48541aff9a9ec5201ece7745f32c7b6039fa98d40df6c5f4b6cd56e630e796d7f32b4be142ee984b119b8b9afbfce88e0d683acb06916a73fd3e6d275a16fce0665c310e19c2499660ca3c257668b8e319bcb03f35d1d8e084a00a46c83f0c90c94e15a78043b0ba339610e10133744f25887b21d07b1b2395b23553fe7e3e", 0xf0}, {&(0x7f00000005c0)="6147b054bc5109170fb4835a1d479c3327da530026cefb137697f4ecd7a55b4ac7a3b38e021a4bbd3931a866602b42a9614cfad45cf47f4d2a8cfaea01ad15bee8179089c7fa3cb9c8f5a931bf6ca502cd4a4d380686757e560f4c1a8fe91cec199c66c747feaed90781e144c5b5c3d55c94a9fd464bc1b50dbe856d6469c3e8265ee08f273ce2b6a5f486504fb7092dcaa93abc5998a14b98530469f1cecee73fb7da36de462af45ca3ef6ca1ec057b4a0013cd86d9f32d1fefc2a17a7b", 0xbe}, {&(0x7f0000000680)="14", 0x1}, {&(0x7f00000006c0)="dec5c02896629e6a5bc92c5fbce6cccd2f92e400acc59378b36f543e9ef7f76e12e1981f0da743ff984029d4ce3baa821ec29c6b753136e761c4d6b18a8b777832db59c71c2f67ef9b9d91aefc9b61c46fd707bfd6", 0x55}, {&(0x7f0000000740)="2fe917714518aa037fc1d4f0ef3fe58dbfe1111b3db10e9c38bda1538151380a18ab3bc8ccd3d86d3b8f3acf948363d7d3776352819156f3f1141e0c9a0fd284506920521a449c8afe7cea0fd65f3cc649fff7f64edbcc2827189d96cdd3d2e8531b0d9392770eab737b6d25f6d08e8673e3904bedf6e23b9902da04c8368d32b82c39c94de2b4ab6bfa785bb8070fcc28b18cc0dd4d2fdb3ba8ddc67639ea", 0x9f}, {&(0x7f0000000800)="1e68428f19038856b13b8ed366e8ddbbc2407102e954b7bd3811c414088ab2b0e32cf95babedebfe0929f3d841f3b2ad07284b95bcec24e0387e4ff43e1af3c38b0a17bdd4f593b94e3766711ac5f5cafea1b71cf5ea7670488022332b4855f7", 0x60}], 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x25a1}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000009c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x420}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)=@getnexthop={0x48, 0x6a, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NHA_GROUPS={0x4}, @NHA_OIF={0x8, 0x5, r7}, @NHA_FDB={0x4}, @NHA_OIF={0x8}, @NHA_GROUPS={0x4}, @NHA_MASTER={0x8}, @NHA_MASTER={0x8, 0xa, 0x1}, @NHA_FDB={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c000}, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000b00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0x3, [@enum={0x9, 0x3, 0x0, 0x6, 0x4, [{0xc, 0xfffffff7}, {0x6, 0x10001}, {0xb, 0x1}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1, 0xc}}, @fwd={0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x7}}, @typedef={0x5, 0x0, 0x0, 0x8, 0x5}, @float={0x5, 0x0, 0x0, 0x10, 0x8}]}, {0x0, [0x2e]}}, &(0x7f0000000bc0)=""/75, 0x93, 0x4b, 0x1, 0x6, 0x10000, @value=r1}, 0x28) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) setsockopt$inet6_tcp_buf(r1, 0x6, 0x21, &(0x7f0000000c80)="66d40e93658f397e83b8a5b300844c39326aaff1955f65df807e4563f70d14c8b310e7b70af927e8e499e0f8df", 0x2d) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000001cc0)={&(0x7f0000000cc0)=[0x5, 0xfffffffa, 0xfffffffd, 0x9, 0x0, 0x8, 0xd289, 0x81, 0x2, 0x4, 0x4caa3722, 0x4, 0x6, 0x51, 0x7, 0x6, 0x800, 0x800, 0x6, 0x1, 0x8, 0x6, 0x9b, 0x2, 0xf4, 0x7, 0x3ff, 0x6a32, 0x5, 0x400, 0x0, 0xfffffff8, 0xfffffffb, 0x15e, 0x5, 0x800, 0x9, 0x9, 0x540b, 0x5, 0xffffffff, 0xa1, 0x3, 0xffffcd90, 0x0, 0x0, 0x53e6, 0x7fffffff, 0x1, 0xc, 0x8, 0x6, 0x5, 0x134, 0xf271, 0xe6, 0x101, 0x4, 0x5, 0x1, 0x2, 0x7f, 0x755, 0x4, 0x9, 0x7fff, 0x8001, 0xff, 0x2, 0x5, 0x3, 0x2, 0x2a, 0x8, 0x10001, 0x90, 0xfffff7d2, 0x81, 0x6, 0xd0a, 0x7, 0x8000, 0xfff, 0x6, 0x2da60cbf, 0x2, 0x5, 0xc, 0x3, 0x8, 0x9, 0x0, 0x9a1d, 0xfffffffd, 0x2, 0xa49, 0x0, 0x2, 0x3ff, 0x3, 0x3, 0x7fffffff, 0x8000, 0x49, 0x9a6, 0x7, 0x82e, 0x7, 0x254e, 0x4, 0x0, 0xe4ce, 0x1, 0x1aa, 0x8, 0x8, 0x9, 0x8, 0x52330386, 0x3, 0xe, 0x7, 0x7, 0x67d, 0xfffffffb, 0x7, 0x99, 0x7, 0x3, 0x9c90, 0x4250e479, 0xfffffffe, 0x5855b125, 0x10001, 0x9, 0x8, 0x4, 0x0, 0x800, 0x8, 0xdd4b, 0x5e4f, 0x1, 0x4, 0x9, 0x800, 0xa7, 0x7, 0xffff, 0x3ff, 0xffffffff, 0xffffffff, 0x6, 0x1, 0x2, 0x7, 0x7, 0x4, 0x0, 0x1, 0x4, 0xbab, 0x7, 0xffffffff, 0x817, 0x3, 0x9, 0x0, 0x9, 0x401, 0xde8, 0x8001, 0x5, 0x10000, 0x9, 0x8, 0x8, 0x8000, 0x1, 0x2, 0x7fffffff, 0x3, 0x1, 0x6, 0xc, 0x1fa7ae95, 0x2, 0x2, 0xfffffff8, 0x3, 0x0, 0x9, 0x80000001, 0xf57, 0x1, 0x13e, 0x8, 0x7, 0x9, 0x6, 0x3, 0x5, 0x5, 0x8001, 0x5, 0x4, 0x100, 0x0, 0x1, 0x8000, 0x4, 0x2, 0x8, 0x2, 0x3, 0x1000, 0x8, 0x3, 0x5e3, 0x2, 0x2, 0x2, 0x7, 0x37c7, 0x9, 0x10, 0x8f, 0xfff, 0x785d85c8, 0x400, 0x6, 0x7, 0x6, 0x2, 0x3, 0x2, 0x0, 0x9, 0x5, 0xb4c, 0x7, 0x1, 0x7ff, 0x5, 0x1, 0x8, 0x9, 0xffff, 0x1ff, 0x40, 0x4, 0x60, 0xd042, 0x5, 0x0, 0x8, 0x17, 0x0, 0x6, 0x7, 0x7, 0x3ff, 0x1, 0x6, 0x784b, 0x2, 0x4, 0x7, 0xfffffff8, 0x3, 0xb42e, 0x8, 0x5, 0x540, 0x422, 0xffffffff, 0x0, 0x2, 0x3, 0x46, 0x3ff, 0xb0a, 0x7, 0xd, 0x3, 0xfffffffa, 0xa3b, 0x80000001, 0x2, 0xffffffff, 0x101, 0x8001, 0xfffffffe, 0x0, 0x5, 0x5, 0x3, 0x4, 0x2, 0x8000, 0x7fff, 0xe, 0x10, 0x5, 0x1f37, 0x1, 0x6, 0x572, 0xffff, 0x8, 0x1fe7, 0x9, 0x5, 0x0, 0x100, 0x886, 0x7f, 0x7, 0xfff, 0x5, 0x101, 0x5, 0x6e, 0x40, 0x3f48, 0x0, 0xe, 0xf7, 0xfffffff9, 0x2, 0x3, 0x8001, 0x4, 0x7, 0xff, 0x9, 0x7, 0x4, 0x6, 0x5, 0x1, 0x8001, 0xf38, 0x7fffffff, 0x1, 0x1, 0xcde, 0x2, 0x1000, 0x1, 0x80, 0x8000, 0x0, 0x5, 0xc, 0x8, 0x9, 0x3, 0x2d, 0x1ff, 0xfffffffb, 0x6, 0x6, 0x2637, 0x6, 0x4, 0xa, 0x3, 0x200, 0x3, 0x2, 0x6, 0x81, 0x4, 0x6, 0x0, 0x9, 0xd, 0x101, 0x6, 0xffff, 0x4, 0x2d, 0x9, 0xd, 0x2, 0x2, 0x6e0, 0x2, 0x5, 0x7fffffff, 0xfffffe00, 0x81, 0x5, 0x80, 0x9, 0x8, 0x9, 0xd81c, 0x10000, 0xfffffff8, 0x4, 0x9, 0x5, 0x100, 0x3, 0xfffff362, 0x5, 0xfffffff4, 0x1, 0xfffffff7, 0x8, 0x42d, 0xfffffffa, 0x8, 0x8, 0x1, 0x65c0, 0xffffffc0, 0x1b, 0x2, 0x7, 0x1, 0x9, 0x10, 0xffffffff, 0xffffff39, 0x0, 0x8, 0xfffffffe, 0x0, 0x4, 0x5, 0x5, 0x1, 0x8, 0x5, 0x3, 0xfffffffb, 0xc7a0, 0x5, 0x77, 0xfffffffe, 0x1, 0x7, 0xf, 0x3, 0x6, 0x8, 0xf3b, 0x8000, 0x4, 0x1, 0x0, 0xc20, 0x8, 0x0, 0x4, 0x4, 0x0, 0xa, 0xb, 0x1, 0x1, 0xa5, 0x6, 0x4, 0x7, 0x6, 0xb, 0x4, 0x4, 0x8, 0x821, 0x8, 0x8, 0xd, 0x0, 0x8, 0xb324, 0x8, 0x101, 0x6d21b1ca, 0x280, 0x0, 0x3, 0x0, 0x2, 0x9, 0x9, 0x9, 0x4, 0x5, 0x32b864ff, 0x7, 0x9, 0x800, 0x7, 0x0, 0x4, 0x1, 0xff, 0xfffffff7, 0x6, 0x2, 0x288, 0xe, 0x5, 0xb, 0x41d, 0x8, 0xa1a, 0x81, 0x5f, 0xfff, 0xfffffff5, 0x4, 0xfffffff7, 0x5ca, 0x7fff, 0x1ff, 0x7fff, 0xfffffc01, 0xb9, 0x56, 0x1, 0x2, 0x4, 0xfe, 0x0, 0x8, 0x3, 0xffffff73, 0xe89, 0x7, 0x81, 0x1, 0x2, 0x0, 0xd1, 0x80a, 0x0, 0xfffffff9, 0x100, 0x0, 0x80df, 0x2af5e7f2, 0xffff8001, 0x8, 0x7, 0x0, 0x137, 0x8, 0x8001, 0x7, 0x5, 0xc, 0x3, 0xba, 0x23, 0xff, 0x6, 0xffffffff, 0x8, 0x7ff, 0x7fffffff, 0xffffff80, 0x5, 0x1, 0x6, 0x0, 0xffffffff, 0x80b, 0x2, 0x199a, 0x2a5c, 0x7f907855, 0x7, 0xfffffffc, 0x2, 0x3, 0x80000000, 0x8, 0x3, 0x400, 0xddd, 0x6, 0x1, 0x8000, 0x5, 0x2, 0x4, 0x4, 0x8, 0x7, 0xffffffff, 0xd, 0x81, 0x7, 0x5, 0x4, 0x2, 0x3ff, 0x8, 0x99b, 0x80000000, 0x1000, 0x0, 0x5, 0x1, 0x6, 0x4, 0x101, 0x5, 0x80000000, 0x5a, 0x8, 0x10000, 0x4, 0x2, 0x8, 0x5, 0x10, 0x1ff, 0x8, 0x1, 0xffff0055, 0x0, 0x101, 0x8001, 0x3654df32, 0x9, 0xffffffff, 0x8, 0x5, 0xfd8, 0x6, 0x7, 0x4, 0x1000, 0x6, 0x4, 0x7, 0x5, 0xfff, 0x0, 0x10000, 0x7, 0x7, 0xc6e0, 0x62b0, 0xeb32, 0x6, 0xff, 0xc, 0xfffffff7, 0x100, 0xe5, 0x5d3a4fe, 0x7, 0x471, 0x8, 0xfffffffa, 0xa8, 0x5, 0x5, 0xfff, 0x1, 0x8, 0x2, 0xf1, 0x4, 0x6, 0x80000000, 0x5, 0x9, 0x1, 0x8, 0x7, 0x0, 0x3, 0x101, 0x3, 0x9, 0x4, 0x6, 0x4, 0x9f, 0x7, 0x4dab, 0x4e0, 0x4, 0x9, 0x9, 0x4, 0x8, 0x62, 0x4, 0xe1c4, 0x1, 0x4, 0x80000000, 0x9, 0x4, 0x3, 0xfffeffff, 0x4a70, 0x3c01, 0xbd3e634, 0xfffff03c, 0xff, 0x73e089f9, 0x8, 0xc24f, 0x7, 0x3, 0x8, 0x5, 0x0, 0x400, 0x1, 0x5, 0x2, 0x7, 0x9, 0x5, 0x2, 0x8be, 0x729ebd9, 0x7fffffff, 0xdca, 0x1, 0x4, 0xb337, 0xfc, 0x3, 0x1, 0x53d0, 0x80000000, 0x8001, 0x7, 0x1, 0x6, 0x6, 0x7f, 0x5, 0x3, 0x33a, 0x2, 0x6, 0xffffffff, 0x2, 0xb, 0x0, 0x9, 0x8, 0x9, 0x3, 0x5, 0x2, 0x19, 0x6, 0x3, 0x40, 0xffffffff, 0x9, 0x4, 0x7, 0x310b, 0x7, 0x20db, 0x1, 0x4, 0x5, 0x47, 0x2, 0x1, 0x6, 0xf, 0x1, 0x6, 0x101, 0x3, 0x8, 0x8, 0x9, 0x7f9439ab, 0x6, 0x4, 0x8, 0x7fff, 0x1, 0x8001, 0x8, 0x6, 0x5, 0x8, 0xc39, 0x6, 0x7, 0x5, 0xda, 0xc, 0xc4, 0xffffffed, 0x4, 0x8, 0x29f2, 0x5, 0xfffffff0, 0x5, 0x0, 0xa2, 0x5, 0xffffff00, 0x8, 0xfe, 0x0, 0x6047f30d, 0x2, 0x8, 0x4, 0xd, 0x80000000, 0x9, 0x1, 0x2, 0x200, 0xfffffffa, 0x2, 0xfffffffe, 0x2, 0x10001, 0x400, 0x3, 0x0, 0xada, 0x6, 0xe2a, 0x6, 0xa1de, 0xc7aa, 0x1, 0x8, 0x7, 0x8, 0x2e0, 0x6, 0x0, 0xa9c, 0x5, 0x6dfb, 0x1, 0x7, 0x2, 0x713, 0x3, 0x15c, 0x828, 0x3, 0x1, 0x400, 0x1, 0x8, 0x4749, 0x100, 0x4, 0x2, 0x383, 0x8, 0x80, 0x80, 0xffffff44, 0x41, 0xa001, 0x0, 0x10, 0xe59, 0x400, 0x9, 0x2, 0x9, 0x7, 0x8, 0x8000, 0x6, 0x8000, 0x7, 0x7ff, 0x0, 0x3, 0x2, 0x10000, 0x2, 0x101, 0x7d, 0x1, 0x4, 0x2, 0xc3f, 0x800, 0x2, 0x8, 0x5ca, 0x3, 0xfe, 0x0, 0x6, 0x10000, 0x800, 0xb, 0x8001, 0x9, 0x76, 0x6, 0x0, 0x8, 0xc, 0x8, 0xe8, 0xffffff99, 0xfffffffe, 0x6, 0x0, 0x1, 0x0, 0x400, 0x1ff, 0x5, 0x6, 0x1, 0x7, 0x6, 0x51, 0x4, 0x800, 0x1, 0x4, 0x4, 0xf, 0x1, 0x3, 0x2, 0xc9ae, 0x5bcb, 0xfffffffe, 0x3, 0x5, 0xfff, 0x8000, 0x92, 0x0, 0x1, 0x3, 0xce, 0x0, 0x10000, 0x9, 0x100, 0x88, 0xf3, 0x0, 0x6, 0x101, 0x10000, 0xd, 0xfff, 0x0, 0x5, 0x1, 0x4, 0xf6, 0xfffffffe, 0x1, 0x81, 0x6, 0xa91, 0x2, 0x40, 0x6, 0x8, 0x4, 0x5, 0x7, 0xac5, 0x5, 0x2, 0x3, 0x5, 0x1, 0x5, 0x36d, 0x5, 0x9, 0xa22, 0x8, 0x3, 0x8, 0x0, 0x4, 0x438a, 0x1, 0x9, 0x1, 0x3, 0x8, 0x5, 0xffffffff, 0xac5, 0x8, 0x7ff, 0x0, 0x4, 0x9, 0x0, 0x0, 0x7fff, 0x7, 0x10001, 0x103, 0x401, 0x4000, 0x1853104c, 0x7], 0x6, 0x400, 0x10001}) socket$can_j1939(0x1d, 0x2, 0x7) r8 = open(&(0x7f0000001d00)='./file0\x00', 0x42, 0x6c) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001d80), r8) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000001e40)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x2c, r9, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_MRU={0x6, 0x1d, 0x8f9}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x10004) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000001ec0), r0) sendmsg$BATADV_CMD_TP_METER(r8, &(0x7f0000001f80)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001f40)={&(0x7f0000001f00)={0x24, r10, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x24000000) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, &(0x7f0000001fc0)={@hyper, 0xeaa}) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000002000)={0x7, r1}) ioctl$PPPIOCSCOMPRESS(r11, 0x4010744d) setsockopt$netlink_NETLINK_PKTINFO(r11, 0x10e, 0x3, &(0x7f0000002040)=0x1676, 0x4) clock_gettime(0x0, &(0x7f0000002100)={0x0, 0x0}) mq_timedsend(r1, &(0x7f0000002080)="efd36e5a52f636a01b8cddc570ca697be69d27f6268c080c1b7d9e7a1e0aaa916f8088bbfb0a92a45bbc8d26601c0f8c5798689eb6e77cfd759a1bbee2f780774f7a37db6d733c4075eb3edef89e3f0e1300", 0x52, 0x8, &(0x7f0000002140)={r12, r13+10000000}) ioctl$BTRFS_IOC_SCRUB_CANCEL(r5, 0x941c, 0x0) r14 = openat$null(0xffffffffffffff9c, &(0x7f00000021c0), 0x21eb41, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000002180), r14) 1.721218429s ago: executing program 4 (id=10837): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000086d044fc1ffffed000001090224000100000000090400000103000300"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x5, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000009a65d0860040800"], 0x0) 1.318388185s ago: executing program 6 (id=10838): syz_open_dev$dri(0x0, 0x1, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900083301fec400000000000000000000000000bbfe8000"], 0x0) 1.253401919s ago: executing program 6 (id=10839): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01864c1, &(0x7f00000000c0)={0x0, 0x1, 0xffffffffffffffff}) syncfs(r1) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) pipe(&(0x7f0000000140)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e1d, 0x1, @loopback, 0x13}, 0x1c) r3 = socket(0x2b, 0x80801, 0x1) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x2, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000040)="8171080de30ed9d7c3fca505cd6aa005", 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="12011003000000408a253600400001020301090224000101f54008090400810203010304092100000701221b03090581030700000000"], &(0x7f0000000500)={0xa, &(0x7f00000003c0)={0x60, 0x6, 0x310, 0x4, 0x81, 0x4, 0x10, 0x7}, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="d7a80532115df7c5f525d01c4320865615839c209729f3ed6581876d023790b943b698db5c8ed1ddc3ff27a03b5cf40383fba4c34bb3bd58f342d7a3bc8188ca92d86a99f9c60dd13842f3aa6be70489d19fe114a038f7bd481807570d0193396f4008d16f25e3efc2087fcc57c29de00d2bac72f2a93144c59eaa466e329c1e6725f4be6172697148171eefbe00d5fb9be80bf15adee253978e65705deaec91180c575ecab13aea04a7f890e60e84762a529ba98e59e979d8db13cfd6a02dc3e41a7f09f907e125821f17924700a4"], 0x1, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x380a}}]}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xba98575a95aeb70d) 1.090439896s ago: executing program 2 (id=10840): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006c617374000000"], 0xe4}}, 0x800) 1.019990169s ago: executing program 2 (id=10841): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x129642, 0x0) syz_usb_connect$uac2(0x5, 0x9f, &(0x7f0000000440)=ANY=[@ANYBLOB="12010003000000209909028d00030104007f080b0101010a20020904000000010120000924010700061500b20c24030500040a25007f008009040100000102200009040101010102200008240201e60304061024010505000400000005050000004409050109000206998008250101181e00000904020000010220000904020101010220000905820900020e0452082501040f43ce03"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async, rerun: 64) r1 = fanotify_init(0x200, 0x0) (async) r2 = fsopen(&(0x7f0000000080)='erofs\x00', 0x1) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000001c0)='acl\x00JN\xa0\xc3\xcd,\xebl>J\"f\xe7\xe0A\x04%\xb4\xd0\x7fb)\x9f\xd3\xeb\xfe\x8fi\xee\x02\x03\a\xb0p\xe9\xfe_\a0\xee\x82{\xa5\xbc\xb6\x8d\xe8\xe3K{H\xbc\xa0y+\xabL,\x8b^|#x\x85\xacc\xa5\xf3\xa7\x05Y~\xc3\xbag\x1d\x95\xcd\xaf\xd2\xd6\xc7v3\xe1r\xdbL\xcdPu\x91\xce\xa5\x86@vG\xb1t\x0f\xf2gg\xcb\xbc\xe9\x90\x00\xd5\xb2V0yZD/\xa1\x7f\xee{\xd3\xecN\xb1\xee\xb1\xb5\x1bu0=:\x84\xd5N2\xc5\x91\x8d\x12\xf7\xdd\xea\xad\xf8<$b\x8b\x89\x18\xe6\xaa\xf3\xa9\x01_\x9b\x89\x05\xc7\xb9\xac\xf5\xb8\x9d2\x8bt\x16\xe8\x9e\x02*\x8a\x83:\a\xef\xee\xeb\xf9\x96\xe9\b\v7`SN\xd1}s\xa7\x8c\x9bB\x13P\x11\x1fl\xc87\x96\xa2\x8f9\xfe\xb0Y~{=SU\xc8D\xe8(\x1c\xffQ\xa9\xdfY06\x19\xa7\x91&\x03Q\x95\xda\xde\x17\xd4\x954\xf8\xa6\xfad:c\xf4\xaa\x99\xcb\xd2GtO', 0x0, r2) r3 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) r4 = dup(r3) fanotify_mark(r1, 0x1, 0x48000046, r4, 0x0) (async) r5 = dup(r4) (async) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) write$binfmt_elf64(r5, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRESOCT=r1, @ANYRES16, @ANYRESHEX=r4], 0x178) (async) unshare(0x20040400) r7 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0xe9) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x2005, 0x3, 'none\x00', 0x1, 0x4, 0x72}, 0x2c) (async) setsockopt$IP_VS_SO_SET_EDITDEST(r8, 0x0, 0x489, &(0x7f0000000380)={{0x84, @empty, 0x4e20, 0x3, 'ovf\x00', 0x0, 0x6, 0x2b}, {@rand_addr=0x64010100, 0x4e23, 0x4, 0x8, 0x48001}}, 0x44) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) (async, rerun: 32) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r9, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) recvmmsg(r6, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000980)=""/247, 0xf7}], 0x1}, 0x1}], 0x1, 0x40000121, 0x0) (async, rerun: 64) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0) (rerun: 64) close(r10) socket$nl_route(0x10, 0x3, 0x0) (async) r11 = fsopen(&(0x7f0000000240)='ext2\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r11, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r12, &(0x7f0000000000), 0xfffffecc) 922.96414ms ago: executing program 2 (id=10842): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r1, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r2 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) r3 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) getpid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) read$eventfd(r3, &(0x7f0000000100), 0x8) io_submit(r4, 0x1, &(0x7f0000001600)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xd5, r3, 0x0, 0x0, 0x3, 0x0, 0x1, r3}]) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)) openat$zero(0xffffffffffffff9c, 0x0, 0x20801, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(0xffffffffffffffff, 0xc0884123, &(0x7f0000000280)={0x0, "728d0a484585ec93a59baeb6831b8ef110181595fe49bc4ac10b67b1b99eeeaa18e15a525115cc71983456358ceb7e1a6f926168ce0c3c2b0f3513a5f2674185", {0x800000000000004, 0x50000000000}}) pselect6(0x40, &(0x7f0000000100)={0x0, 0x9, 0x0, 0x80000001, 0x7fb, 0x8, 0x100200}, 0x0, &(0x7f0000000240)={0x1e, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0xa}, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, &(0x7f0000000940)={0x1, 0x1, 0xffff4f11, 0xfffd, 0xffffe00000000003, 0x20000000000000b, 0xfffffffffffffffc, 0x200, 0x4a, 0x28, 0x80000005, 0x2}) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) setxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='system.sockprotoname\x00', &(0x7f0000000340)='\x00', 0x1, 0x1) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000500)={0x40, 0x10, 0xbc, "693688d3dfa4d83162768c34031ec5e85f9c84c54420c3bacdd6df61806db8903dd5bb09264a88478f5d396da0abf22945e4d4ee372d4b4bde79b17f4835167ce5da238121646944a01734328a1616459912cff7032ef66b000522fb2f132f7003f42b5c84d22bc8e02a01cb97f0ebcbe5248ccef0db11555027ae4b17fea2a17fbc439feca1986edd0999d478ba4def6da5c62806b54d8ed5e8d88aef490b4e8c760adff59a57814236271614d0271f8a79c930d35071de9a9be3f6"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000800)={0x20, 0x15, 0x4, 'Qx\x00z'}, 0x0, 0x0, 0x0, 0x0}) 796.618063ms ago: executing program 3 (id=10843): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f000082f000/0x2000)=nil, 0x2000, 0x19) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x1, 0x0, 0x40, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000814000/0x4000)=nil) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r4 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r4, 0x110, 0x1, &(0x7f0000000040)='\x04]{!\x00', 0x5) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, &(0x7f0000000480)='u\x00\x00\xf1\x94\x00'/18, 0x0, r3) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r3) sendmsg$tipc(r3, &(0x7f0000003140)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x1, {0x43, 0x3}}, 0x10, &(0x7f0000000140), 0x0, &(0x7f0000002140)="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", 0xdf2, 0x40051}, 0x20008000) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2) syz_open_dev$radio(&(0x7f0000000240), 0x2, 0x2) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x5, "152a44e3112c0000f5a82d86c200000000000000000000000000000800"}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000005000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff7000/0x1000)=nil, 0x0}, 0x68) 354.389021ms ago: executing program 0 (id=10844): openat$kvm(0x0, &(0x7f00000000c0), 0x5418c0, 0x0) r0 = ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000000)={0x1}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) r2 = fspick(0xffffffffffffffff, &(0x7f0000000540)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000019080), 0x102400) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r3, 0xc0a85352, &(0x7f00000190c0)={{0x0, 0xf}, 'port1\x00', 0x0, 0xb1008, 0x2, 0x6, 0x7, 0x370000, 0x7ff, 0x0, 0x4, 0x81}) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f00000004c0)={{&(0x7f0000000280)=[{0x2, 0x2400000000, 0x5, {0x9a2, 0x7fffffffffffffff}, 0xf, 0x2a, 0x63ad}, {0x8, 0x3, 0xa, {0x400000c, 0x2}, 0x7, 0x0, 0x4}, {0x7, 0x8, 0xc, {0x3ff, 0x7795}, 0x2, 0x4}, {0xd9, 0x2, 0x7, {0x6, 0x1}, 0x1, 0x5, 0x1}], 0x4, 0x40, 0x7, 0x7}, {&(0x7f0000000380)=[{0x0, 0xfffffffffffffff7}, {0x0, 0x8}, {0x8000, 0x6}, {0x5, 0x7f}], 0x4, 0x10, 0x101, 0xc2}, {&(0x7f00000003c0)=[0x112d, 0x6, 0x401, 0xfffffffffffffffa], 0x4, 0x8, 0x7c7, 0xd3}, {&(0x7f0000000400)=[{0x3, 0x3, 0x8000000000000001, 0x1, 0x248}, {0x7, 0x7fff, 0xfff, 0x2, 0x4}, {0x9, 0x9, 0x101, 0x4000000000000e, 0xffffffff}], 0x3, 0x28, 0x3, 0x81}, {&(0x7f0000000480), 0x0, 0x8, 0xd, 0xd}}) ioctl$VT_DISALLOCATE(r1, 0x5608) r5 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x1, 0x8) unlinkat(r6, &(0x7f0000000280)='./bus\x00', 0x200) ioctl$PPPIOCSMRU1(r4, 0x40047452, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @private=0xa010100}, 0xfffffffffffffed8) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendto$inet(r7, &(0x7f0000000040)="17", 0xfffffe75, 0x10008085, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x6c304000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="d300000010010000180a00"/22], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x11}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) 198.591302ms ago: executing program 0 (id=10845): r0 = syz_io_uring_setup(0x202c61, &(0x7f0000000080)={0x0, 0xcfcb, 0x1042, 0x4, 0x354}, &(0x7f0000000100), &(0x7f0000000300), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000340), 0x0) r1 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) r2 = shmat(r1, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x6000) syz_emit_ethernet(0x1e, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa1e000c01000060000200009d619029773e98b2b6"], &(0x7f0000000140)={0x0, 0x3, [0x29, 0xbfe, 0x41c, 0x7db]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20004804) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ptrace(0x10, r3) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) shmdt(r2) 0s ago: executing program 0 (id=10846): socket$unix(0x1, 0x1, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) futex(&(0x7f0000000140)=0x1, 0x8b, 0x1, &(0x7f0000000180), 0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) r1 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) read(r2, 0x0, 0x0) kernel console output (not intermixed with test programs): 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2877.602265][ T9411] RSP: 002b:00007fa241e54028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2877.602288][ T9411] RAX: ffffffffffffffda RBX: 00007fa241225fa0 RCX: 00007fa240f9de99 [ 2877.602300][ T9411] RDX: 0000000000000046 RSI: 0000200000000a00 RDI: 0000000000000003 [ 2877.602310][ T9411] RBP: 00007fa241e54090 R08: 0000000000000000 R09: 0000000000000000 [ 2877.602320][ T9411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2877.602329][ T9411] R13: 00007fa241226038 R14: 00007fa241225fa0 R15: 00007fa24134fa48 [ 2877.602354][ T9411] [ 2878.057489][ T9404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2878.066894][ T9404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2878.076391][ T7246] usb 5-1: device descriptor read/64, error -71 [ 2878.091538][ T9404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2878.100658][ T9404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2878.111869][ T1701] usb 6-1: USB disconnect, device number 28 [ 2878.319062][ T7246] usb 5-1: reset high-speed USB device number 5 using dummy_hcd [ 2878.327760][ T7246] usb 5-1: device reset changed ep0 maxpacket size! [ 2878.338553][ T7246] gspca_se401: read req failed req 0x06 error -19 [ 2878.362346][ T7246] usb 5-1: USB disconnect, device number 5 [ 2878.426025][ T7247] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 2878.505460][ T7246] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 2878.555941][ T7247] usb 4-1: device descriptor read/64, error -71 [ 2878.663521][ T7246] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2878.691315][ T7246] usb 5-1: config 63 has an invalid interface number: 66 but max is 0 [ 2878.708662][ T7246] usb 5-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 2878.737120][ T7246] usb 5-1: config 63 has no interface number 0 [ 2878.752585][ T7246] usb 5-1: config 63 interface 66 has no altsetting 0 [ 2878.776081][ T7246] usb 5-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 2878.801391][ T7246] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2878.813064][ T7247] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 2878.830208][ T7246] usb 5-1: Product: syz [ 2878.841535][ T7246] usb 5-1: Manufacturer: syz [ 2878.855439][ T7246] usb 5-1: SerialNumber: syz [ 2878.975425][ T7247] usb 4-1: device descriptor read/64, error -71 [ 2879.096050][ T7247] usb usb4-port1: attempt power cycle [ 2879.194617][ T9419] netlink: 'syz.0.10616': attribute type 1 has an invalid length. [ 2879.231864][ T9419] program syz.0.10616 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2879.262286][ T7246] uvcvideo 5-1:63.66: probe with driver uvcvideo failed with error -22 [ 2879.286147][ T7246] usb 5-1: USB disconnect, device number 6 [ 2879.458155][ T7247] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 2879.488535][ T7247] usb 4-1: device descriptor read/8, error -71 [ 2879.521892][ T9424] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 2879.528480][ T9424] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 2879.602233][ T9424] vhci_hcd vhci_hcd.0: Device attached [ 2879.756135][ T7247] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 2879.789997][ T7247] usb 4-1: device descriptor read/8, error -71 [ 2879.916258][ T7247] usb usb4-port1: unable to enumerate USB device [ 2879.945793][ T7246] usb 44-1: SetAddress Request (2) to port 0 [ 2879.987351][ T7246] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 2880.038594][ T9425] vhci_hcd: connection reset by peer [ 2880.050180][ T5007] vhci_hcd vhci_hcd.5: stop threads [ 2880.068376][ T5007] vhci_hcd vhci_hcd.5: release socket [ 2880.088409][ T5007] vhci_hcd vhci_hcd.5: disconnect device [ 2880.653719][ T7245] usb 3-1: USB disconnect, device number 111 [ 2880.660176][ T9385] cdc_wdm 3-1:1.0: Error autopm - -16 [ 2880.948182][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 2880.948202][ T30] audit: type=1326 audit(1784754785.575:18479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9439 comm="syz.2.10621" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea7f9de99 code=0x7ffc0000 [ 2880.993116][ T30] audit: type=1326 audit(1784754785.615:18480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9439 comm="syz.2.10621" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea7f9de99 code=0x7ffc0000 [ 2881.018577][ T30] audit: type=1326 audit(1784754785.615:18481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9439 comm="syz.2.10621" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea7f9de99 code=0x7ffc0000 [ 2881.051862][ T30] audit: type=1326 audit(1784754785.615:18482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9439 comm="syz.2.10621" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea7f9de99 code=0x7ffc0000 [ 2881.080540][ T30] audit: type=1326 audit(1784754785.615:18483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9439 comm="syz.2.10621" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4ea7f9de99 code=0x7ffc0000 [ 2881.106662][ T30] audit: type=1326 audit(1784754785.615:18484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9439 comm="syz.2.10621" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea7f9de99 code=0x7ffc0000 [ 2881.132674][ T30] audit: type=1326 audit(1784754785.615:18485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9439 comm="syz.2.10621" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea7f9de99 code=0x7ffc0000 [ 2881.165826][ T3742] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 2881.174121][ T30] audit: type=1326 audit(1784754785.615:18486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9439 comm="syz.2.10621" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea7f9de99 code=0x7ffc0000 [ 2881.222723][ T30] audit: type=1326 audit(1784754785.615:18487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9439 comm="syz.2.10621" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ea7f9de99 code=0x7ffc0000 [ 2881.252931][ T30] audit: type=1326 audit(1784754785.615:18488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9439 comm="syz.2.10621" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4ea7f9de99 code=0x7ffc0000 [ 2881.287215][T19236] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 2881.331200][ T9447] x_tables: duplicate underflow at hook 2 [ 2881.335827][ T3742] usb 6-1: Using ep0 maxpacket: 8 [ 2881.348497][ T3742] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 2881.362903][ T3742] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2881.371670][ T3742] usb 6-1: Product: syz [ 2881.377647][ T3742] usb 6-1: Manufacturer: syz [ 2881.389281][ T3742] usb 6-1: SerialNumber: syz [ 2881.399702][ T3742] usb 6-1: config 0 descriptor?? [ 2881.415116][ T3742] gspca_main: se401-2.14.0 probing 047d:5003 [ 2881.459057][T19236] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2881.469276][T19236] usb 5-1: config 228 has an invalid interface number: 86 but max is 0 [ 2881.477802][T19236] usb 5-1: config 228 has no interface number 0 [ 2881.484189][T19236] usb 5-1: config 228 interface 86 has no altsetting 0 [ 2881.500076][T19236] usb 5-1: New USB device found, idVendor=0b57, idProduct=9de3, bcdDevice=87.f6 [ 2881.509536][T19236] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2881.522730][T19236] usb 5-1: Product: syz [ 2881.527363][T19236] usb 5-1: Manufacturer: syz [ 2881.532133][T19236] usb 5-1: SerialNumber: syz [ 2881.573009][ T9453] netlink: 200 bytes leftover after parsing attributes in process `syz.2.10623'. [ 2881.737589][ T7236] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 2881.745484][ T3742] usb 6-1: reset high-speed USB device number 29 using dummy_hcd [ 2881.767809][ T9444] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10622'. [ 2881.811196][T19236] usbhid 5-1:228.86: couldn't find an input interrupt endpoint [ 2881.841955][T19236] usb 5-1: USB disconnect, device number 7 [ 2881.875218][ T9456] FAULT_INJECTION: forcing a failure. [ 2881.875218][ T9456] name failslab, interval 1, probability 0, space 0, times 0 [ 2881.889077][ T9456] CPU: 0 UID: 0 PID: 9456 Comm: syz.0.10626 Tainted: G L syzkaller #0 PREEMPT(full) [ 2881.889110][ T9456] Tainted: [L]=SOFTLOCKUP [ 2881.889118][ T9456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 2881.889136][ T9456] Call Trace: [ 2881.889145][ T9456] [ 2881.889155][ T9456] dump_stack_lvl+0xe8/0x150 [ 2881.889193][ T9456] should_fail_ex+0x40c/0x560 [ 2881.889223][ T9456] ? traverse+0xf1/0x620 [ 2881.889247][ T9456] should_failslab+0xa8/0x100 [ 2881.889281][ T9456] __kvmalloc_node_noprof+0x176/0x860 [ 2881.889311][ T9456] ? __alloc_frozen_pages_noprof+0x1db/0x380 [ 2881.889344][ T9456] ? traverse+0xf1/0x620 [ 2881.889374][ T9456] traverse+0xf1/0x620 [ 2881.889409][ T9456] seq_read_iter+0xb6a/0xca0 [ 2881.889441][ T9456] ? kernfs_fop_read_iter+0x144/0x6a0 [ 2881.889497][ T9456] copy_splice_read+0x5ff/0xaa0 [ 2881.889537][ T9456] ? rcu_is_watching+0x15/0xb0 [ 2881.889571][ T9456] ? __pfx_copy_splice_read+0x10/0x10 [ 2881.889611][ T9456] ? look_up_lock_class+0x57/0x110 [ 2881.889634][ T9456] ? register_lock_class+0x31/0x2e0 [ 2881.889672][ T9456] ? alloc_pipe_info+0x35d/0x4c0 [ 2881.889696][ T9456] ? __pfx_copy_splice_read+0x10/0x10 [ 2881.889725][ T9456] splice_direct_to_actor+0x48b/0xcb0 [ 2881.889785][ T9456] ? __pfx_direct_splice_actor+0x10/0x10 [ 2881.889816][ T9456] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 2881.889845][ T9456] ? irqentry_exit+0x218/0x8f0 [ 2881.889877][ T9456] do_splice_direct+0x195/0x290 [ 2881.889907][ T9456] ? vfs_copy_file_range+0x98a/0x1340 [ 2881.889935][ T9456] ? __pfx_do_splice_direct+0x10/0x10 [ 2881.889969][ T9456] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 2881.890016][ T9456] vfs_copy_file_range+0xaf0/0x1340 [ 2881.890059][ T9456] ? __pfx_vfs_copy_file_range+0x10/0x10 [ 2881.890099][ T9456] __se_sys_copy_file_range+0x2fb/0x480 [ 2881.890126][ T9456] ? fput+0xa0/0xd0 [ 2881.890155][ T9456] ? __pfx___se_sys_copy_file_range+0x10/0x10 [ 2881.890182][ T9456] ? __pfx_ksys_write+0x10/0x10 [ 2881.890221][ T9456] ? __x64_sys_copy_file_range+0x21/0xf0 [ 2881.890249][ T9456] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2881.890275][ T9456] do_syscall_64+0x174/0x580 [ 2881.890297][ T9456] ? trace_irq_disable+0x3b/0x140 [ 2881.890326][ T9456] ? clear_bhb_loop+0x40/0x90 [ 2881.890354][ T9456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2881.890376][ T9456] RIP: 0033:0x7f5f8b79de99 [ 2881.890398][ T9456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2881.890419][ T9456] RSP: 002b:00007f5f8c71b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 2881.890443][ T9456] RAX: ffffffffffffffda RBX: 00007f5f8ba25fa0 RCX: 00007f5f8b79de99 [ 2881.890460][ T9456] RDX: 0000000000000003 RSI: 0000200000000000 RDI: 0000000000000003 [ 2881.890474][ T9456] RBP: 00007f5f8c71b090 R08: 0000000000000004 R09: 0000000000000000 [ 2881.890489][ T9456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2881.890502][ T9456] R13: 00007f5f8ba26038 R14: 00007f5f8ba25fa0 R15: 00007f5f8bb4fa48 [ 2881.890536][ T9456] [ 2882.215683][ T7236] usb 4-1: Using ep0 maxpacket: 8 [ 2882.222874][ T7236] usb 4-1: config 0 has no interfaces? [ 2882.229883][ T7236] usb 4-1: config 0 has no interfaces? [ 2882.241316][ T7236] usb 4-1: config 0 has no interfaces? [ 2882.251385][ T7236] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2882.260646][ T7236] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2882.268852][ T7236] usb 4-1: Product: syz [ 2882.273081][ T7236] usb 4-1: Manufacturer: syz [ 2882.278109][ T7236] usb 4-1: SerialNumber: syz [ 2882.286058][ T7236] usb 4-1: config 0 descriptor?? [ 2882.361155][ T9458] netlink: 16166 bytes leftover after parsing attributes in process `syz.0.10627'. [ 2882.376940][ T9458] FAULT_INJECTION: forcing a failure. [ 2882.376940][ T9458] name failslab, interval 1, probability 0, space 0, times 0 [ 2882.390409][ T9458] CPU: 1 UID: 0 PID: 9458 Comm: syz.0.10627 Tainted: G L syzkaller #0 PREEMPT(full) [ 2882.390445][ T9458] Tainted: [L]=SOFTLOCKUP [ 2882.390451][ T9458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 2882.390461][ T9458] Call Trace: [ 2882.390467][ T9458] [ 2882.390474][ T9458] dump_stack_lvl+0xe8/0x150 [ 2882.390525][ T9458] should_fail_ex+0x40c/0x560 [ 2882.390557][ T9458] should_failslab+0xa8/0x100 [ 2882.390595][ T9458] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 2882.390616][ T9458] ? skb_clone+0x212/0x3a0 [ 2882.390633][ T9458] ? skb_clone+0x212/0x3a0 [ 2882.390669][ T9458] skb_clone+0x212/0x3a0 [ 2882.390698][ T9458] __netlink_deliver_tap+0x413/0x860 [ 2882.390733][ T9458] ? netlink_deliver_tap+0x2e/0x1b0 [ 2882.390762][ T9458] netlink_deliver_tap+0x19c/0x1b0 [ 2882.390780][ T9458] netlink_sendskb+0x68/0x140 [ 2882.390807][ T9458] netlink_rcv_skb+0x2a4/0x4a0 [ 2882.390845][ T9458] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2882.390881][ T9458] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2882.390920][ T9458] ? netlink_deliver_tap+0x2e/0x1b0 [ 2882.390936][ T9458] ? netlink_deliver_tap+0x2e/0x1b0 [ 2882.390977][ T9458] netlink_unicast+0x7bb/0x940 [ 2882.391021][ T9458] netlink_sendmsg+0x813/0xb40 [ 2882.391056][ T9458] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2882.391083][ T9458] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2882.391129][ T9458] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2882.391157][ T9458] sock_sendmsg_nosec+0x13a/0x180 [ 2882.391188][ T9458] sock_write_iter+0x2de/0x3e0 [ 2882.391221][ T9458] ? __pfx_sock_write_iter+0x10/0x10 [ 2882.391247][ T9458] ? bpf_lsm_file_permission+0x9/0x20 [ 2882.391266][ T9458] ? security_file_permission+0x75/0x260 [ 2882.391319][ T9458] vfs_write+0x612/0xba0 [ 2882.391367][ T9458] ? __pfx_vfs_write+0x10/0x10 [ 2882.391407][ T9458] ? __fget_files+0x2a/0x420 [ 2882.391450][ T9458] ksys_write+0x150/0x270 [ 2882.391487][ T9458] ? __pfx_ksys_write+0x10/0x10 [ 2882.391530][ T9458] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2882.391553][ T9458] do_syscall_64+0x174/0x580 [ 2882.391569][ T9458] ? trace_irq_disable+0x3b/0x140 [ 2882.391605][ T9458] ? clear_bhb_loop+0x40/0x90 [ 2882.391635][ T9458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2882.391657][ T9458] RIP: 0033:0x7f5f8b79de99 [ 2882.391678][ T9458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2882.391700][ T9458] RSP: 002b:00007f5f8c71b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2882.391717][ T9458] RAX: ffffffffffffffda RBX: 00007f5f8ba25fa0 RCX: 00007f5f8b79de99 [ 2882.391729][ T9458] RDX: 000000000000fe33 RSI: 0000200000000000 RDI: 0000000000000004 [ 2882.391739][ T9458] RBP: 00007f5f8c71b090 R08: 0000000000000000 R09: 0000000000000000 [ 2882.391763][ T9458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2882.391777][ T9458] R13: 00007f5f8ba26038 R14: 00007f5f8ba25fa0 R15: 00007f5f8bb4fa48 [ 2882.391812][ T9458] [ 2882.734898][ T9451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2882.744520][ T9451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2882.754064][ T9451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2882.766411][ T9451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2882.810139][T19236] usb 4-1: USB disconnect, device number 70 [ 2882.826262][ T9460] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10630'. [ 2883.027068][ T9469] xt_hashlimit: size too large, truncated to 1048576 [ 2883.171842][ T9476] loop5: detected capacity change from 0 to 7 [ 2883.188450][ T9476] Dev loop5: unable to read RDB block 7 [ 2883.199507][ T9476] loop5: AHDI p1 [ 2883.208240][ T9476] loop5: partition table partially beyond EOD, truncated [ 2883.341442][ T3742] gspca_se401: read req failed req 0x06 error -19 [ 2883.355075][ T3742] usb 6-1: USB disconnect, device number 29 [ 2883.535766][ T3742] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 2883.707774][ T3742] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2883.730299][ T3742] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2883.765376][ T3742] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2883.789703][ T3742] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2884.024215][ T9481] netlink: 'syz.4.10636': attribute type 1 has an invalid length. [ 2884.033970][ T3742] usb 6-1: usb_control_msg returned -32 [ 2884.048212][ T9481] program syz.4.10636 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2884.054513][ T3742] usbtmc 6-1:16.0: can't read capabilities [ 2884.165865][ T7236] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 2884.252109][ T3742] usb 6-1: USB disconnect, device number 30 [ 2884.327169][ T7236] usb 4-1: Using ep0 maxpacket: 8 [ 2884.340943][ T7236] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 2884.352291][ T7236] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2884.362268][ T7236] usb 4-1: Product: syz [ 2884.370481][ T7236] usb 4-1: Manufacturer: syz [ 2884.375260][ T7236] usb 4-1: SerialNumber: syz [ 2884.390281][ T7236] usb 4-1: config 0 descriptor?? [ 2884.407410][ T7236] gspca_main: se401-2.14.0 probing 047d:5003 [ 2884.725412][ T7236] usb 4-1: reset high-speed USB device number 71 using dummy_hcd [ 2884.816292][ T3742] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 2884.944482][ T9496] FAULT_INJECTION: forcing a failure. [ 2884.944482][ T9496] name failslab, interval 1, probability 0, space 0, times 0 [ 2884.960270][ T9496] CPU: 0 UID: 0 PID: 9496 Comm: syz.2.10641 Tainted: G L syzkaller #0 PREEMPT(full) [ 2884.960304][ T9496] Tainted: [L]=SOFTLOCKUP [ 2884.960312][ T9496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 2884.960325][ T9496] Call Trace: [ 2884.960334][ T9496] [ 2884.960344][ T9496] dump_stack_lvl+0xe8/0x150 [ 2884.960391][ T9496] should_fail_ex+0x40c/0x560 [ 2884.960423][ T9496] should_failslab+0xa8/0x100 [ 2884.960459][ T9496] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 2884.960485][ T9496] ? local_lock_release+0x9c/0x160 [ 2884.960520][ T9496] ? __alloc_skb+0x1d7/0x7a0 [ 2884.960549][ T9496] ? __alloc_skb+0x1d7/0x7a0 [ 2884.960586][ T9496] __alloc_skb+0x1d7/0x7a0 [ 2884.960622][ T9496] netlink_dump+0x1e7/0xee0 [ 2884.960646][ T9496] ? __netlink_lookup+0xc6/0x8b0 [ 2884.960681][ T9496] ? __pfx_netlink_dump+0x10/0x10 [ 2884.960714][ T9496] ? netlink_lookup+0x30/0x200 [ 2884.960736][ T9496] ? netlink_lookup+0x30/0x200 [ 2884.960764][ T9496] __netlink_dump_start+0x589/0x7b0 [ 2884.960794][ T9496] rtnetlink_rcv_msg+0xa48/0xc00 [ 2884.960829][ T9496] ? __pfx_tc_dump_tfilter+0x10/0x10 [ 2884.960935][ T9496] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 2884.960967][ T9496] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2884.961022][ T9496] ? ref_tracker_free+0x689/0x830 [ 2884.961050][ T9496] ? __pfx_rtnl_dumpit+0x10/0x10 [ 2884.961083][ T9496] ? __pfx_tc_dump_tfilter+0x10/0x10 [ 2884.961110][ T9496] ? __asan_memcpy+0x40/0x70 [ 2884.961134][ T9496] ? __skb_clone+0x5c/0x6c0 [ 2884.961165][ T9496] netlink_rcv_skb+0x226/0x4a0 [ 2884.961190][ T9496] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2884.961224][ T9496] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2884.961261][ T9496] ? netlink_deliver_tap+0x2e/0x1b0 [ 2884.961293][ T9496] ? netlink_deliver_tap+0x2e/0x1b0 [ 2884.961323][ T9496] netlink_unicast+0x7bb/0x940 [ 2884.961369][ T9496] netlink_sendmsg+0x813/0xb40 [ 2884.961404][ T9496] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2884.961433][ T9496] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2884.961463][ T9496] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2884.961487][ T9496] sock_sendmsg_nosec+0x13a/0x180 [ 2884.961516][ T9496] ____sys_sendmsg+0x54e/0x850 [ 2884.961541][ T9496] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2884.961574][ T9496] ? import_iovec+0x73/0xa0 [ 2884.961611][ T9496] ___sys_sendmsg+0x2a5/0x360 [ 2884.961633][ T9496] ? __lock_acquire+0x683/0x2cf0 [ 2884.961669][ T9496] ? __pfx____sys_sendmsg+0x10/0x10 [ 2884.961728][ T9496] ? __fget_files+0x2a/0x420 [ 2884.961758][ T9496] ? __fget_files+0x3a2/0x420 [ 2884.961799][ T9496] __x64_sys_sendmsg+0x1b1/0x290 [ 2884.961825][ T9496] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2884.961868][ T9496] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2884.961893][ T9496] do_syscall_64+0x174/0x580 [ 2884.961915][ T9496] ? trace_irq_disable+0x3b/0x140 [ 2884.961943][ T9496] ? clear_bhb_loop+0x40/0x90 [ 2884.961971][ T9496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2884.962002][ T9496] RIP: 0033:0x7f4ea7f9de99 [ 2884.962024][ T9496] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2884.962043][ T9496] RSP: 002b:00007f4ea8f02028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2884.962066][ T9496] RAX: ffffffffffffffda RBX: 00007f4ea8226090 RCX: 00007f4ea7f9de99 [ 2884.962082][ T9496] RDX: 0000000004041080 RSI: 0000200000006040 RDI: 0000000000000003 [ 2884.962096][ T9496] RBP: 00007f4ea8f02090 R08: 0000000000000000 R09: 0000000000000000 [ 2884.962110][ T9496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2884.962123][ T9496] R13: 00007f4ea8226128 R14: 00007f4ea8226090 R15: 00007f4ea834fa48 [ 2884.962158][ T9496] [ 2885.334384][ T3742] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2885.345986][ T3742] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2885.356795][ T3742] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2885.365718][ T7246] usb 44-1: device descriptor read/8, error -110 [ 2885.380142][ T3742] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 2885.403182][ T3742] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2885.412986][ T3742] usb 5-1: Product: syz [ 2885.417577][ T3742] usb 5-1: Manufacturer: syz [ 2885.422254][ T3742] usb 5-1: SerialNumber: syz [ 2885.498320][ T3742] usb 5-1: selecting invalid altsetting 1 [ 2885.504925][ T3742] usb 5-1: unit 6 not found! [ 2885.606398][ T9503] FAULT_INJECTION: forcing a failure. [ 2885.606398][ T9503] name failslab, interval 1, probability 0, space 0, times 0 [ 2885.619541][ T9503] CPU: 0 UID: 0 PID: 9503 Comm: syz.5.10643 Tainted: G L syzkaller #0 PREEMPT(full) [ 2885.619573][ T9503] Tainted: [L]=SOFTLOCKUP [ 2885.619580][ T9503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 2885.619592][ T9503] Call Trace: [ 2885.619602][ T9503] [ 2885.619611][ T9503] dump_stack_lvl+0xe8/0x150 [ 2885.619652][ T9503] should_fail_ex+0x40c/0x560 [ 2885.619680][ T9503] should_failslab+0xa8/0x100 [ 2885.619711][ T9503] __kmalloc_noprof+0xfe/0x720 [ 2885.619738][ T9503] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 2885.619767][ T9503] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 2885.619802][ T9503] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 2885.619837][ T9503] genl_family_rcv_msg_doit+0xda/0x340 [ 2885.619871][ T9503] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2885.619905][ T9503] ? apparmor_capable+0x126/0x170 [ 2885.619934][ T9503] ? bpf_lsm_capable+0x9/0x20 [ 2885.619958][ T9503] ? security_capable+0x7e/0x2c0 [ 2885.619995][ T9503] genl_rcv_msg+0x614/0x7a0 [ 2885.620027][ T9503] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2885.620052][ T9503] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 2885.620077][ T9503] ? __pfx_nl80211_new_key+0x10/0x10 [ 2885.620101][ T9503] ? __pfx_nl80211_post_doit+0x10/0x10 [ 2885.620127][ T9503] ? __pfx_ref_tracker_free+0x10/0x10 [ 2885.620152][ T9503] ? __asan_memcpy+0x40/0x70 [ 2885.620173][ T9503] ? __skb_clone+0x5c/0x6c0 [ 2885.620199][ T9503] netlink_rcv_skb+0x226/0x4a0 [ 2885.620221][ T9503] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2885.620248][ T9503] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2885.620283][ T9503] ? down_read+0x2be/0x330 [ 2885.620310][ T9503] genl_rcv+0x28/0x40 [ 2885.620333][ T9503] netlink_unicast+0x7bb/0x940 [ 2885.620374][ T9503] netlink_sendmsg+0x813/0xb40 [ 2885.620405][ T9503] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2885.620441][ T9503] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2885.620466][ T9503] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2885.620486][ T9503] sock_sendmsg_nosec+0x13a/0x180 [ 2885.620515][ T9503] ____sys_sendmsg+0x54e/0x850 [ 2885.620540][ T9503] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2885.620568][ T9503] ? import_iovec+0x73/0xa0 [ 2885.620601][ T9503] ___sys_sendmsg+0x2a5/0x360 [ 2885.620619][ T9503] ? __lock_acquire+0x683/0x2cf0 [ 2885.620649][ T9503] ? __pfx____sys_sendmsg+0x10/0x10 [ 2885.620702][ T9503] ? __fget_files+0x2a/0x420 [ 2885.620727][ T9503] ? __fget_files+0x3a2/0x420 [ 2885.620762][ T9503] __x64_sys_sendmsg+0x1b1/0x290 [ 2885.620785][ T9503] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2885.620822][ T9503] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2885.620844][ T9503] do_syscall_64+0x174/0x580 [ 2885.620863][ T9503] ? trace_irq_disable+0x3b/0x140 [ 2885.620887][ T9503] ? clear_bhb_loop+0x40/0x90 [ 2885.620912][ T9503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2885.620933][ T9503] RIP: 0033:0x7f5bda79de99 [ 2885.620953][ T9503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2885.620971][ T9503] RSP: 002b:00007f5bdb5a2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2885.620992][ T9503] RAX: ffffffffffffffda RBX: 00007f5bdaa25fa0 RCX: 00007f5bda79de99 [ 2885.621006][ T9503] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 2885.621019][ T9503] RBP: 00007f5bdb5a2090 R08: 0000000000000000 R09: 0000000000000000 [ 2885.621032][ T9503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2885.621044][ T9503] R13: 00007f5bdaa26038 R14: 00007f5bdaa25fa0 R15: 00007f5bdab4fa48 [ 2885.621075][ T9503] [ 2886.002590][ T7246] usb usb44-port1: attempt power cycle [ 2886.304732][ T9510] loop5: detected capacity change from 0 to 7 [ 2886.333132][ T9510] Buffer I/O error on dev loop5, logical block 0, async page read [ 2886.341225][ T9510] Buffer I/O error on dev loop5, logical block 0, async page read [ 2886.349282][ T9510] Buffer I/O error on dev loop5, logical block 0, async page read [ 2886.375515][ T9510] Buffer I/O error on dev loop5, logical block 0, async page read [ 2886.384691][ T9510] Buffer I/O error on dev loop5, logical block 0, async page read [ 2886.421681][ T9510] Buffer I/O error on dev loop5, logical block 0, async page read [ 2886.430051][ T9510] Buffer I/O error on dev loop5, logical block 0, async page read [ 2886.438480][ T9510] ldm_validate_partition_table(): Disk read failed. [ 2886.445246][ T9510] Buffer I/O error on dev loop5, logical block 0, async page read [ 2886.453885][ T9510] Buffer I/O error on dev loop5, logical block 0, async page read [ 2886.461950][ T9510] Buffer I/O error on dev loop5, logical block 0, async page read [ 2886.470184][ T9510] Dev loop5: unable to read RDB block 0 [ 2886.482227][ T9510] loop5: unable to read partition table [ 2886.488816][ T9510] loop5: partition table beyond EOD, truncated [ 2886.496369][ T9510] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü¾Sêj̳–¢P=Ãë?ã}X‹ºÐ œëÜ5õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5) [ 2886.603519][ T7246] usb usb44-port1: unable to enumerate USB device [ 2886.612125][ T7236] gspca_se401: read req failed req 0x06 error -19 [ 2886.630751][ T7236] usb 4-1: USB disconnect, device number 71 [ 2886.666576][ T3742] usb 5-1: 2:0: failed to get current value for ch 0 (-71) [ 2886.771374][ T3742] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 2886.784001][ T3742] usb 5-1: USB disconnect, device number 8 [ 2886.851195][ T6065] udevd[6065]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2886.981465][ T4992] ldm_validate_partition_table(): Disk read failed. [ 2886.989813][ T4992] Dev loop5: unable to read RDB block 0 [ 2886.996218][ T4992] loop5: unable to read partition table [ 2887.002156][ T4992] loop5: partition table beyond EOD, truncated [ 2887.729519][ T7236] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 2887.901711][ T7236] usb 5-1: Using ep0 maxpacket: 8 [ 2887.908738][ T7236] usb 5-1: config 0 has no interfaces? [ 2887.940115][ T7236] usb 5-1: config 0 has no interfaces? [ 2887.974570][ T7236] usb 5-1: config 0 has no interfaces? [ 2888.079466][ T7236] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2888.089192][ T7236] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2888.097348][ T7236] usb 5-1: Product: syz [ 2888.101564][ T7236] usb 5-1: Manufacturer: syz [ 2888.106505][ T7236] usb 5-1: SerialNumber: syz [ 2888.134058][ T7236] usb 5-1: config 0 descriptor?? [ 2888.356764][ T9514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2888.368051][ T9514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2888.381116][ T9514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2888.392336][ T9514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2888.405066][ T7246] usb 5-1: USB disconnect, device number 9 [ 2890.240700][ T9527] netlink: 44 bytes leftover after parsing attributes in process `syz.4.10652'. [ 2890.303000][ T9528] netlink: 128 bytes leftover after parsing attributes in process `syz.4.10652'. [ 2890.626232][ T7245] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 2890.795613][ T9530] Cannot find del_set index 2 as target [ 2890.839158][ T7245] usb 5-1: Using ep0 maxpacket: 8 [ 2890.879303][ T7245] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2890.890534][ T7245] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 2890.905214][ T7245] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 2890.916902][ T7245] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 2890.927706][ T7245] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2890.945201][ T7245] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 2890.955315][ T7245] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 2890.963498][ T7245] usb 5-1: Product: syz [ 2890.967985][ T7245] usb 5-1: Manufacturer: syz [ 2890.972887][ T7245] usb 5-1: SerialNumber: syz [ 2890.981386][ T7245] usb 5-1: config 0 descriptor?? [ 2891.201716][ T7245] radio-si470x 5-1:0.0: DeviceID=0x52b8 ChipID=0x0000 [ 2891.210143][ T7245] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 2891.428386][ T7245] radio-si470x 5-1:0.0: software version 82, hardware version 184 [ 2891.436888][ T7245] radio-si470x 5-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 2891.971900][ T7245] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -110 [ 2891.982643][ T7245] radio-si470x 5-1:0.0: submitting int urb failed (-90) [ 2891.990402][ T7245] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -32 [ 2892.014968][ T7245] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -22 [ 2892.859095][ T9506] FAULT_INJECTION: forcing a failure. [ 2892.859095][ T9506] name failslab, interval 1, probability 0, space 0, times 0 [ 2892.889521][ T9506] CPU: 0 UID: 0 PID: 9506 Comm: syz.3.10644 Tainted: G L syzkaller #0 PREEMPT(full) [ 2892.889557][ T9506] Tainted: [L]=SOFTLOCKUP [ 2892.889567][ T9506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 2892.889580][ T9506] Call Trace: [ 2892.889589][ T9506] [ 2892.889600][ T9506] dump_stack_lvl+0xe8/0x150 [ 2892.889639][ T9506] should_fail_ex+0x40c/0x560 [ 2892.889671][ T9506] should_failslab+0xa8/0x100 [ 2892.889706][ T9506] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 2892.889733][ T9506] ? local_lock_release+0x9c/0x160 [ 2892.889767][ T9506] ? __alloc_skb+0x1d7/0x7a0 [ 2892.889796][ T9506] ? __alloc_skb+0x1d7/0x7a0 [ 2892.889841][ T9506] __alloc_skb+0x1d7/0x7a0 [ 2892.889878][ T9506] netlink_ack+0x136/0xb30 [ 2892.889900][ T9506] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2892.889931][ T9506] ? ref_tracker_free+0x689/0x830 [ 2892.889962][ T9506] ? __pfx_ref_tracker_free+0x10/0x10 [ 2892.889990][ T9506] ? __asan_memcpy+0x40/0x70 [ 2892.890024][ T9506] netlink_rcv_skb+0x2a4/0x4a0 [ 2892.890049][ T9506] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2892.890084][ T9506] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2892.890120][ T9506] ? netlink_deliver_tap+0x2e/0x1b0 [ 2892.890143][ T9506] ? netlink_deliver_tap+0x2e/0x1b0 [ 2892.890173][ T9506] netlink_unicast+0x7bb/0x940 [ 2892.890217][ T9506] netlink_sendmsg+0x813/0xb40 [ 2892.890251][ T9506] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2892.890280][ T9506] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2892.890309][ T9506] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2892.890332][ T9506] sock_sendmsg_nosec+0x13a/0x180 [ 2892.890364][ T9506] ____sys_sendmsg+0x54e/0x850 [ 2892.890392][ T9506] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2892.890425][ T9506] ? import_iovec+0x73/0xa0 [ 2892.890463][ T9506] ___sys_sendmsg+0x2a5/0x360 [ 2892.890485][ T9506] ? __lock_acquire+0x683/0x2cf0 [ 2892.890520][ T9506] ? __pfx____sys_sendmsg+0x10/0x10 [ 2892.890579][ T9506] ? __fget_files+0x2a/0x420 [ 2892.890608][ T9506] ? __fget_files+0x3a2/0x420 [ 2892.890647][ T9506] __x64_sys_sendmsg+0x1b1/0x290 [ 2892.890673][ T9506] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2892.890716][ T9506] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2892.890740][ T9506] do_syscall_64+0x174/0x580 [ 2892.890763][ T9506] ? trace_irq_disable+0x3b/0x140 [ 2892.890791][ T9506] ? clear_bhb_loop+0x40/0x90 [ 2892.890818][ T9506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2892.890850][ T9506] RIP: 0033:0x7fa240f9de99 [ 2892.890872][ T9506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2892.890893][ T9506] RSP: 002b:00007fa241e12028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2892.890918][ T9506] RAX: ffffffffffffffda RBX: 00007fa241226180 RCX: 00007fa240f9de99 [ 2892.890935][ T9506] RDX: 0000000008000010 RSI: 0000200000000740 RDI: 0000000000000006 [ 2892.890950][ T9506] RBP: 00007fa241e12090 R08: 0000000000000000 R09: 0000000000000000 [ 2892.890965][ T9506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2892.890979][ T9506] R13: 00007fa241226218 R14: 00007fa241226180 R15: 00007fa24134fa48 [ 2892.891014][ T9506] [ 2892.891463][ T9509] team0: entered promiscuous mode [ 2893.223702][ T9509] team_slave_0: entered promiscuous mode [ 2893.231253][ T9509] team_slave_1: entered promiscuous mode [ 2893.239777][ T9509] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2893.327161][ T7247] usb 5-1: USB disconnect, device number 10 [ 2893.340308][ T9537] syzkaller0: entered promiscuous mode [ 2893.346343][ T9537] syzkaller0: entered allmulticast mode [ 2893.391628][ T9537] tipc: Started in network mode [ 2893.400681][ T9537] tipc: Node identity f23d8f51e97d, cluster identity 4711 [ 2893.418854][ T9537] tipc: Enabled bearer , priority 0 [ 2893.442690][ T9537] tipc: Resetting bearer [ 2893.462718][ T9536] tipc: Resetting bearer [ 2893.551264][ T9536] tipc: Disabling bearer [ 2893.787088][ T9542] netlink: 'syz.5.10657': attribute type 1 has an invalid length. [ 2893.807252][ T9542] program syz.5.10657 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2894.505746][ T7247] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 2894.584294][ T9567] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2894.677992][ T7247] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2894.704718][ T7247] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2894.717130][ T7247] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2894.732281][ T7247] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 2894.743701][ T7247] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2894.753797][ T7247] usb 6-1: Product: syz [ 2894.759362][ T7247] usb 6-1: Manufacturer: syz [ 2894.764215][ T7247] usb 6-1: SerialNumber: syz [ 2894.779919][ T7247] usb 6-1: selecting invalid altsetting 1 [ 2894.787239][ T7247] usb 6-1: unit 6 not found! [ 2894.875921][ T1704] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 2895.037760][ T1704] usb 3-1: Using ep0 maxpacket: 32 [ 2895.054496][ T1704] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2895.069666][ T1704] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2895.096374][ T1704] usb 3-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 2895.115162][ T1704] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2895.123067][ T1704] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 2895.139342][ T1704] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2895.152908][ T1704] usb 3-1: config 0 descriptor?? [ 2895.495463][ T7245] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 2895.572549][ T1704] hid_parser_main: 28 callbacks suppressed [ 2895.572601][ T1704] hid-thrustmaster 0003:044F:B65D.003F: unknown main item tag 0x0 [ 2895.590499][ T1704] hid-thrustmaster 0003:044F:B65D.003F: unknown main item tag 0x0 [ 2895.590741][ T7247] usb 6-1: 2:0: failed to get current value for ch 0 (-71) [ 2895.606871][ T1704] hid-thrustmaster 0003:044F:B65D.003F: unknown main item tag 0x0 [ 2895.614827][ T1704] hid-thrustmaster 0003:044F:B65D.003F: unknown main item tag 0x0 [ 2895.623774][ T1704] hid-thrustmaster 0003:044F:B65D.003F: unknown main item tag 0x0 [ 2895.662780][ T1704] hid-thrustmaster 0003:044F:B65D.003F: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.2-1/input0 [ 2895.679908][ T7245] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2895.689361][ T7245] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2895.698499][ T1704] hid-thrustmaster 0003:044F:B65D.003F: Unexpected non-int endpoint [ 2895.711594][ T7245] usb 5-1: Product: syz [ 2895.719121][ T7247] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 2895.731288][ T7245] usb 5-1: Manufacturer: syz [ 2895.747028][ T7247] usb 6-1: USB disconnect, device number 31 [ 2895.753080][ T7245] usb 5-1: SerialNumber: syz [ 2895.781783][ T7245] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2895.827415][ T1704] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2895.846823][ T6047] udevd[6047]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2895.880926][ C1] hid-thrustmaster 0003:044F:B65D.003F: Unknown packet type 0x7011, unable to proceed further with wheel init [ 2896.032045][ C1] usb 5-1: ath9k_htc: invalid pkt_len (fefd) [ 2896.228711][ T9584] netlink: 204 bytes leftover after parsing attributes in process `syz.5.10673'. [ 2896.240993][ T7236] usb 5-1: USB disconnect, device number 11 [ 2896.545466][ T7247] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 2896.609029][T32703] usb 3-1: USB disconnect, device number 112 [ 2896.705451][ T7247] usb 6-1: Using ep0 maxpacket: 32 [ 2896.712623][ T7247] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2896.724958][ T7247] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2896.735149][ T7247] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2896.746621][ T7247] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2896.768149][ T7247] usb 6-1: config 0 descriptor?? [ 2896.780888][ T7247] hub 6-1:0.0: USB hub found [ 2896.959163][ T1704] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2896.986948][ T1704] ath9k_htc: Failed to initialize the device [ 2896.997982][ T7236] usb 5-1: ath9k_htc: USB layer deinitialized [ 2897.103253][ T9597] syzkaller0: entered promiscuous mode [ 2897.109024][ T9597] syzkaller0: entered allmulticast mode [ 2897.126519][ T9597] tipc: Enabled bearer , priority 0 [ 2897.138215][ T9595] tipc: Resetting bearer [ 2897.193097][ T9595] tipc: Disabling bearer [ 2897.275674][ T7247] hub 6-1:0.0: 1 port detected [ 2897.291969][ T7247] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 2897.311571][ T7247] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 2897.330381][ T7247] usbhid 6-1:0.0: can't add hid device: -71 [ 2897.347266][ T7247] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2897.378970][ T7247] usb 6-1: USB disconnect, device number 32 [ 2897.386150][ T7236] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 2897.423860][ T9600] syzkaller0: entered promiscuous mode [ 2897.430145][ T9600] syzkaller0: entered allmulticast mode [ 2897.489116][ T9601] FAULT_INJECTION: forcing a failure. [ 2897.489116][ T9601] name failslab, interval 1, probability 0, space 0, times 0 [ 2897.504587][ T9601] CPU: 1 UID: 0 PID: 9601 Comm: syz.2.10680 Tainted: G L syzkaller #0 PREEMPT(full) [ 2897.504624][ T9601] Tainted: [L]=SOFTLOCKUP [ 2897.504633][ T9601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 2897.504647][ T9601] Call Trace: [ 2897.504656][ T9601] [ 2897.504666][ T9601] dump_stack_lvl+0xe8/0x150 [ 2897.504716][ T9601] should_fail_ex+0x40c/0x560 [ 2897.504748][ T9601] should_failslab+0xa8/0x100 [ 2897.504784][ T9601] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 2897.504811][ T9601] ? skb_clone+0x212/0x3a0 [ 2897.504833][ T9601] ? skb_clone+0x212/0x3a0 [ 2897.504862][ T9601] skb_clone+0x212/0x3a0 [ 2897.504890][ T9601] __netlink_deliver_tap+0x413/0x860 [ 2897.504926][ T9601] ? netlink_deliver_tap+0x2e/0x1b0 [ 2897.504952][ T9601] netlink_deliver_tap+0x19c/0x1b0 [ 2897.504976][ T9601] netlink_sendskb+0x68/0x140 [ 2897.505012][ T9601] netlink_rcv_skb+0x2a4/0x4a0 [ 2897.505036][ T9601] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 2897.505073][ T9601] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2897.505108][ T9601] ? bpf_lsm_capable+0x9/0x20 [ 2897.505135][ T9601] ? security_capable+0x7e/0x2c0 [ 2897.505178][ T9601] nfnetlink_rcv+0x2b9/0x28c0 [ 2897.505215][ T9601] ? __dev_queue_xmit+0x29b/0x3820 [ 2897.505243][ T9601] ? __local_bh_enable_ip+0xd0/0x130 [ 2897.505272][ T9601] ? lockdep_hardirqs_on+0x7a/0x110 [ 2897.505292][ T9601] ? __dev_queue_xmit+0x29b/0x3820 [ 2897.505314][ T9601] ? __local_bh_enable_ip+0xd0/0x130 [ 2897.505336][ T9601] ? __dev_queue_xmit+0x29b/0x3820 [ 2897.505359][ T9601] ? __dev_queue_xmit+0x1edc/0x3820 [ 2897.505382][ T9601] ? do_syscall_64+0x174/0x580 [ 2897.505402][ T9601] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2897.505437][ T9601] ? __dev_queue_xmit+0x29b/0x3820 [ 2897.505462][ T9601] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 2897.505501][ T9601] ? __pfx___dev_queue_xmit+0x10/0x10 [ 2897.505534][ T9601] ? ref_tracker_free+0x689/0x830 [ 2897.505565][ T9601] ? __pfx_ref_tracker_free+0x10/0x10 [ 2897.505599][ T9601] ? __asan_memcpy+0x40/0x70 [ 2897.505622][ T9601] ? __skb_clone+0x5c/0x6c0 [ 2897.505650][ T9601] ? __skb_clone+0x449/0x6c0 [ 2897.505677][ T9601] ? skb_clone+0x246/0x3a0 [ 2897.505702][ T9601] ? __netlink_deliver_tap+0x811/0x860 [ 2897.505723][ T9601] ? netlink_deliver_tap+0x2e/0x1b0 [ 2897.505752][ T9601] ? netlink_deliver_tap+0x2e/0x1b0 [ 2897.505773][ T9601] ? netlink_deliver_tap+0x2e/0x1b0 [ 2897.505803][ T9601] netlink_unicast+0x7bb/0x940 [ 2897.505846][ T9601] netlink_sendmsg+0x813/0xb40 [ 2897.505878][ T9601] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2897.505906][ T9601] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2897.505933][ T9601] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2897.505954][ T9601] sock_sendmsg_nosec+0x13a/0x180 [ 2897.505986][ T9601] ____sys_sendmsg+0x54e/0x850 [ 2897.506013][ T9601] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2897.506042][ T9601] ? import_iovec+0x73/0xa0 [ 2897.506079][ T9601] ___sys_sendmsg+0x2a5/0x360 [ 2897.506106][ T9601] ? __pfx____sys_sendmsg+0x10/0x10 [ 2897.506164][ T9601] ? __fget_files+0x2a/0x420 [ 2897.506192][ T9601] ? __fget_files+0x3a2/0x420 [ 2897.506231][ T9601] __x64_sys_sendmsg+0x1b1/0x290 [ 2897.506255][ T9601] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2897.506297][ T9601] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2897.506323][ T9601] do_syscall_64+0x174/0x580 [ 2897.506344][ T9601] ? trace_irq_disable+0x3b/0x140 [ 2897.506373][ T9601] ? clear_bhb_loop+0x40/0x90 [ 2897.506401][ T9601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2897.506430][ T9601] RIP: 0033:0x7f4ea7f9de99 [ 2897.506452][ T9601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2897.506471][ T9601] RSP: 002b:00007f4ea8f23028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2897.506495][ T9601] RAX: ffffffffffffffda RBX: 00007f4ea8225fa0 RCX: 00007f4ea7f9de99 [ 2897.506512][ T9601] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 2897.506527][ T9601] RBP: 00007f4ea8f23090 R08: 0000000000000000 R09: 0000000000000000 [ 2897.506539][ T9601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2897.506551][ T9601] R13: 00007f4ea8226038 R14: 00007f4ea8225fa0 R15: 00007f4ea834fa48 [ 2897.506591][ T9601] [ 2897.928226][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 2897.935173][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 2897.944394][ T7236] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 2897.952801][ T7236] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2897.979388][ T7236] usb 5-1: config 0 has no interface number 0 [ 2897.990279][ T7236] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 2898.003256][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 2898.003273][ T30] audit: type=1326 audit(1784754802.635:18509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9602 comm="syz.0.10683" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5f8b79de99 code=0x0 [ 2898.008213][ T7236] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 2898.050424][ T7236] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2898.097844][ T7236] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 2898.113296][ T7236] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2898.173523][ T7236] usb 5-1: Product: syz [ 2898.187855][ T7236] usb 5-1: Manufacturer: syz [ 2898.192548][ T7236] usb 5-1: SerialNumber: syz [ 2898.202740][ T7236] usb 5-1: config 0 descriptor?? [ 2898.338559][ T9610] syzkaller0: entered promiscuous mode [ 2898.346877][ T9610] syzkaller0: entered allmulticast mode [ 2898.561262][ T9614] Cannot find del_set index 2 as target [ 2898.630208][ T9594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2898.662040][ T9594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2898.854840][ T9619] sctp: [Deprecated]: syz.2.10685 (pid 9619) Use of int in max_burst socket option deprecated. [ 2898.854840][ T9619] Use struct sctp_assoc_value instead [ 2898.898735][ T7236] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.117/input/input162 [ 2898.975974][ T1701] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 2899.005690][ T7247] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 2899.118434][ T7236] usb 5-1: USB disconnect, device number 12 [ 2899.136891][ T1701] usb 4-1: Using ep0 maxpacket: 32 [ 2899.145875][ T1701] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2899.168747][ T1701] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2899.178988][ T7247] usb 6-1: Using ep0 maxpacket: 32 [ 2899.186944][ T1701] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2899.198319][ T1701] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2899.209475][ T7247] usb 6-1: too many configurations: 17, using maximum allowed: 8 [ 2899.223495][ T7247] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 2899.235709][ T7247] usb 6-1: config 0 has no interface number 0 [ 2899.243023][ T7247] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2899.254670][ T1701] usb 4-1: config 0 descriptor?? [ 2899.262415][ T7247] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 2899.276998][ T1701] hub 4-1:0.0: USB hub found [ 2899.293630][ T7247] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 2899.303933][ T7247] usb 6-1: config 0 has no interface number 0 [ 2899.311158][ T7247] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2899.321974][ T7247] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 2899.338509][ T7247] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 2899.347205][ T7247] usb 6-1: config 0 has no interface number 0 [ 2899.353361][ T7247] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2899.367422][ T7247] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 2899.390788][ T7247] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 2899.400936][ T7247] usb 6-1: config 0 has no interface number 0 [ 2899.407770][ T7247] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2899.418055][ T7247] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 2899.429665][ T7247] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 2899.439757][ T7247] usb 6-1: config 0 has no interface number 0 [ 2899.446413][ T7247] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2899.456927][ T7247] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 2899.469327][ T7247] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 2899.484079][ T7247] usb 6-1: config 0 has no interface number 0 [ 2899.490698][ T7247] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2899.501253][ T7247] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 2899.513161][ T7247] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 2899.524675][ T7247] usb 6-1: config 0 has no interface number 0 [ 2899.532007][ T7247] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2899.543376][ T7247] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 2899.556527][ T7247] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 2899.567322][ T7247] usb 6-1: config 0 has no interface number 0 [ 2899.585912][ T7247] usb 6-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2899.597126][ T7247] usb 6-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 2899.612646][ T7247] usb 6-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 2899.622744][ T7247] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2899.632487][ T7247] usb 6-1: Product: syz [ 2899.637339][ T7247] usb 6-1: Manufacturer: syz [ 2899.642105][ T7247] usb 6-1: SerialNumber: syz [ 2899.660635][ T7247] usb 6-1: config 0 descriptor?? [ 2899.677275][ T7247] etas_es58x 6-1:0.2: Starting syz syz (Serial Number syz) [ 2899.697756][ T1701] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 2899.715199][ T1701] usbhid 4-1:0.0: can't add hid device: -71 [ 2899.722922][ T1701] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2899.767007][ T1701] usb 4-1: USB disconnect, device number 72 [ 2899.880524][ T7247] etas_es58x 6-1:0.2: could not retrieve the product info string [ 2899.904542][ T9641] loop9: detected capacity change from 0 to 524287872 [ 2899.924998][ T9644] xt_hashlimit: size too large, truncated to 1048576 [ 2900.004369][ T7247] usb 6-1: USB disconnect, device number 33 [ 2900.024295][ T7247] etas_es58x 6-1:0.2: Disconnecting syz syz [ 2900.214981][ T9650] FAULT_INJECTION: forcing a failure. [ 2900.214981][ T9650] name failslab, interval 1, probability 0, space 0, times 0 [ 2900.342293][ T9650] CPU: 0 UID: 0 PID: 9650 Comm: syz.2.10698 Tainted: G L syzkaller #0 PREEMPT(full) [ 2900.342325][ T9650] Tainted: [L]=SOFTLOCKUP [ 2900.342332][ T9650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 2900.342344][ T9650] Call Trace: [ 2900.342353][ T9650] [ 2900.342361][ T9650] dump_stack_lvl+0xe8/0x150 [ 2900.342396][ T9650] should_fail_ex+0x40c/0x560 [ 2900.342422][ T9650] ? traverse+0xf1/0x620 [ 2900.342444][ T9650] should_failslab+0xa8/0x100 [ 2900.342475][ T9650] __kvmalloc_node_noprof+0x176/0x860 [ 2900.342505][ T9650] ? aa_file_perm+0x18b/0x15f0 [ 2900.342528][ T9650] ? traverse+0xf1/0x620 [ 2900.342554][ T9650] traverse+0xf1/0x620 [ 2900.342573][ T9650] ? aa_file_perm+0x18b/0x15f0 [ 2900.342599][ T9650] ? aa_file_perm+0x4ed/0x15f0 [ 2900.342624][ T9650] seq_read_iter+0xb6a/0xca0 [ 2900.342660][ T9650] seq_read+0x367/0x480 [ 2900.342679][ T9650] ? get_pid_task+0x20/0x1f0 [ 2900.342715][ T9650] ? __pfx_seq_read+0x10/0x10 [ 2900.342743][ T9650] ? apparmor_file_permission+0x1f4/0x300 [ 2900.342777][ T9650] ? __pfx_seq_read+0x10/0x10 [ 2900.342795][ T9650] proc_reg_read+0x1e9/0x2e0 [ 2900.342828][ T9650] ? __pfx_proc_reg_read+0x10/0x10 [ 2900.342857][ T9650] vfs_read+0x213/0xa80 [ 2900.342900][ T9650] ? __pfx_vfs_read+0x10/0x10 [ 2900.342931][ T9650] ? __fget_files+0x2a/0x420 [ 2900.342960][ T9650] ? __fget_files+0x2a/0x420 [ 2900.342984][ T9650] ? __fget_files+0x3a2/0x420 [ 2900.343008][ T9650] ? __fget_files+0x2a/0x420 [ 2900.343042][ T9650] __x64_sys_pread64+0x196/0x220 [ 2900.343076][ T9650] ? __pfx___x64_sys_pread64+0x10/0x10 [ 2900.343115][ T9650] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2900.343137][ T9650] do_syscall_64+0x174/0x580 [ 2900.343167][ T9650] ? trace_irq_disable+0x3b/0x140 [ 2900.343192][ T9650] ? clear_bhb_loop+0x40/0x90 [ 2900.343217][ T9650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2900.343237][ T9650] RIP: 0033:0x7f4ea7f9de99 [ 2900.343258][ T9650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2900.343274][ T9650] RSP: 002b:00007f4ea8f23028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 2900.343295][ T9650] RAX: ffffffffffffffda RBX: 00007f4ea8225fa0 RCX: 00007f4ea7f9de99 [ 2900.343310][ T9650] RDX: 00000000000000fd RSI: 0000200000000100 RDI: 0000000000000003 [ 2900.343323][ T9650] RBP: 00007f4ea8f23090 R08: 0000000000000000 R09: 0000000000000000 [ 2900.343335][ T9650] R10: 0000000000000036 R11: 0000000000000246 R12: 0000000000000001 [ 2900.343347][ T9650] R13: 00007f4ea8226038 R14: 00007f4ea8225fa0 R15: 00007f4ea834fa48 [ 2900.343379][ T9650] [ 2900.885779][ T1701] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 2900.962983][ T9670] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10702'. [ 2900.994645][ T9670] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 2901.061647][ T1701] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2901.088321][ T1701] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2901.110165][ T1701] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2901.134351][ T1701] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 2901.157633][ T1701] usb 5-1: SerialNumber: syz [ 2901.203547][ T9676] netlink: 'syz.5.10704': attribute type 1 has an invalid length. [ 2901.274081][ T9676] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2901.332894][ T9679] bond1: (slave dummy0): making interface the new active one [ 2901.373300][ T9679] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 2901.439025][ T1701] usb 5-1: 0:2 : does not exist [ 2901.459736][ T1701] usb 5-1: unit 5: unexpected type 0x09 [ 2901.561783][ T1701] usb 5-1: USB disconnect, device number 13 [ 2901.660513][ T6065] udevd[6065]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2901.925734][T32703] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 2902.100181][T32703] usb 6-1: Using ep0 maxpacket: 32 [ 2902.127984][T32703] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2902.154060][T32703] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2902.189382][T32703] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2902.226770][T32703] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2902.259990][T32703] usb 6-1: config 0 descriptor?? [ 2902.281534][T32703] hub 6-1:0.0: USB hub found [ 2902.403260][ T9717] netlink: 144 bytes leftover after parsing attributes in process `syz.2.10709'. [ 2902.406376][ T3742] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 2902.585419][ T3742] usb 4-1: Using ep0 maxpacket: 16 [ 2902.612584][ T3742] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2902.640941][ T3742] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2902.666013][ T3742] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2902.688881][ T3742] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 2902.700029][ T3742] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2902.712314][ T3742] usb 4-1: Product: syz [ 2902.723454][ T7241] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 2902.738487][ T3742] usb 4-1: Manufacturer: syz [ 2902.745710][ T3742] usb 4-1: SerialNumber: syz [ 2902.758656][T32703] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 2902.775707][T32703] usbhid 6-1:0.0: can't add hid device: -71 [ 2902.782459][T32703] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2902.816808][T32703] usb 6-1: USB disconnect, device number 34 [ 2902.887690][ T7241] usb 5-1: config 3 has an invalid interface number: 153 but max is 0 [ 2902.906118][ T7241] usb 5-1: config 3 has no interface number 0 [ 2902.917796][ T7241] usb 5-1: config 3 interface 153 altsetting 8 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 2902.930860][ T7241] usb 5-1: config 3 interface 153 altsetting 8 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 2902.944004][ T7241] usb 5-1: config 3 interface 153 has no altsetting 0 [ 2902.954622][ T7241] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0512, bcdDevice=90.80 [ 2902.964598][ T7241] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2902.973445][ T7241] usb 5-1: Product: syz [ 2902.980455][ T7241] usb 5-1: Manufacturer: syz [ 2902.986716][ T9708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2902.998178][ T7241] usb 5-1: SerialNumber: syz [ 2903.004783][ T9708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2903.037580][ T3742] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 2903.048519][ T3742] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 2903.258205][ T9708] netlink: 128 bytes leftover after parsing attributes in process `syz.3.10712'. [ 2903.290247][ T7241] option 5-1:3.153: GSM modem (1-port) converter detected [ 2903.310103][ T9708] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2903.338879][ T9732] random: crng reseeded on system resumption [ 2903.354069][ T7241] usb 5-1: USB disconnect, device number 14 [ 2903.400765][ T7241] option 5-1:3.153: device disconnected [ 2903.596231][ T3742] usb 4-1: 2:1 : can't get Cluster Descriptor [ 2903.860667][ T1704] usb 4-1: USB disconnect, device number 73 [ 2904.160615][ T9735] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10718'. [ 2904.575685][ T7241] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 2904.717332][ T7241] usb 5-1: device descriptor read/64, error -71 [ 2904.965533][ T7241] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 2905.105751][ T7241] usb 5-1: device descriptor read/64, error -71 [ 2905.216084][ T7241] usb usb5-port1: attempt power cycle [ 2905.452964][ T9760] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2905.548109][ T9758] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10727'. [ 2905.574320][ T7241] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 2905.636550][ T7241] usb 5-1: device descriptor read/8, error -71 [ 2905.801416][ T9767] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10729'. [ 2905.811652][ T9758] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10727'. [ 2905.885689][ T7241] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 2905.887940][ T9769] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10730'. [ 2905.919259][ T7247] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 2905.936102][ T9769] netlink: 244 bytes leftover after parsing attributes in process `syz.3.10730'. [ 2905.956548][ T7241] usb 5-1: device descriptor read/8, error -71 [ 2905.978908][ T9758] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10727'. [ 2906.000314][ T9758] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10727'. [ 2906.075919][ T7241] usb usb5-port1: unable to enumerate USB device [ 2906.095360][ T7247] usb 3-1: Using ep0 maxpacket: 8 [ 2906.108619][ T7247] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2906.126763][ T7247] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 174, changing to 7 [ 2906.156459][ T7247] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0078, bcdDevice= 0.40 [ 2906.177336][ T7247] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2906.195378][ T3742] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 2906.203190][ T7247] usb 3-1: Product: syz [ 2906.207941][ T7247] usb 3-1: Manufacturer: syz [ 2906.219086][ T7247] usb 3-1: SerialNumber: syz [ 2906.285801][T32703] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 2906.356383][ T3742] usb 4-1: Using ep0 maxpacket: 16 [ 2906.368119][ T3742] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2906.377540][ T3742] usb 4-1: config 9 has an invalid interface number: 57 but max is 0 [ 2906.390747][ T3742] usb 4-1: config 9 has no interface number 0 [ 2906.397524][ T3742] usb 4-1: config 9 interface 57 has no altsetting 0 [ 2906.409195][ T3742] usb 4-1: string descriptor 0 read error: -22 [ 2906.419834][ T3742] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7 [ 2906.429731][ T3742] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2906.437928][T32703] usb 6-1: Using ep0 maxpacket: 16 [ 2906.457296][T32703] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 2906.487173][T32703] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2906.512565][T32703] usb 6-1: Product: syz [ 2906.523431][T32703] usb 6-1: Manufacturer: syz [ 2906.534636][T32703] usb 6-1: SerialNumber: syz [ 2906.558418][T32703] usb 6-1: config 0 descriptor?? [ 2906.988115][T32703] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 2907.014944][T32703] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2907.034995][T32703] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 2907.043170][T32703] usb 6-1: media controller created [ 2907.076947][T32703] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2907.299312][ T3742] video4linux radio48: keene_cmd_main failed (-71) [ 2907.306449][ T3742] radio-keene 4-1:9.57: V4L2 device registered as radio48 [ 2907.323983][ T3742] usb 4-1: USB disconnect, device number 74 [ 2907.651527][T32703] zl10353_read_register: readreg error (reg=127, ret==0) [ 2907.651672][ T9772] dtv5100: wlen = 0, aborting. [ 2907.670450][T32703] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 2907.688201][T32703] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 2907.714818][T32703] usb 6-1: USB disconnect, device number 35 [ 2907.738286][ T9779] FAULT_INJECTION: forcing a failure. [ 2907.738286][ T9779] name failslab, interval 1, probability 0, space 0, times 0 [ 2907.753372][ T9779] CPU: 1 UID: 0 PID: 9779 Comm: syz.4.10733 Tainted: G L syzkaller #0 PREEMPT(full) [ 2907.753407][ T9779] Tainted: [L]=SOFTLOCKUP [ 2907.753419][ T9779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 2907.753432][ T9779] Call Trace: [ 2907.753441][ T9779] [ 2907.753451][ T9779] dump_stack_lvl+0xe8/0x150 [ 2907.753489][ T9779] should_fail_ex+0x40c/0x560 [ 2907.753521][ T9779] should_failslab+0xa8/0x100 [ 2907.753556][ T9779] __kmalloc_cache_noprof+0xa8/0x660 [ 2907.753587][ T9779] ? rtnl_newlink+0x136/0x1bd0 [ 2907.753618][ T9779] ? rtnl_newlink+0x136/0x1bd0 [ 2907.753656][ T9779] rtnl_newlink+0x136/0x1bd0 [ 2907.753691][ T9779] ? kasan_save_track+0x4f/0x80 [ 2907.753717][ T9779] ? kasan_save_track+0x3e/0x80 [ 2907.753743][ T9779] ? kasan_save_free_info+0x40/0x50 [ 2907.753764][ T9779] ? __kasan_slab_free+0x5c/0x80 [ 2907.753792][ T9779] ? kmem_cache_free+0x182/0x650 [ 2907.753818][ T9779] ? dev_hard_start_xmit+0x2cd/0x830 [ 2907.753842][ T9779] ? __netlink_deliver_tap+0x5b4/0x860 [ 2907.753864][ T9779] ? netlink_deliver_tap+0x19c/0x1b0 [ 2907.753885][ T9779] ? netlink_unicast+0x77f/0x940 [ 2907.753916][ T9779] ? netlink_sendmsg+0x813/0xb40 [ 2907.753939][ T9779] ? __pfx_rtnl_newlink+0x10/0x10 [ 2907.753968][ T9779] ? do_syscall_64+0x174/0x580 [ 2907.753990][ T9779] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2907.754048][ T9779] ? kasan_quarantine_put+0xbb/0x1f0 [ 2907.754075][ T9779] ? lockdep_hardirqs_on+0x7a/0x110 [ 2907.754101][ T9779] ? nlmon_xmit+0xb0/0x100 [ 2907.754141][ T9779] ? kmem_cache_free+0x182/0x650 [ 2907.754181][ T9779] ? __lock_acquire+0x683/0x2cf0 [ 2907.754216][ T9779] ? __dev_queue_xmit+0x29b/0x3820 [ 2907.754245][ T9779] ? __local_bh_enable_ip+0xd0/0x130 [ 2907.754270][ T9779] ? lockdep_hardirqs_on+0x7a/0x110 [ 2907.754291][ T9779] ? __dev_queue_xmit+0x29b/0x3820 [ 2907.754313][ T9779] ? __local_bh_enable_ip+0xd0/0x130 [ 2907.754336][ T9779] ? __dev_queue_xmit+0x29b/0x3820 [ 2907.754364][ T9779] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 2907.754395][ T9779] ? __pfx_rtnl_newlink+0x10/0x10 [ 2907.754439][ T9779] ? __pfx_rtnl_newlink+0x10/0x10 [ 2907.754469][ T9779] rtnetlink_rcv_msg+0x802/0xc00 [ 2907.754505][ T9779] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 2907.754537][ T9779] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2907.754568][ T9779] ? ref_tracker_free+0x689/0x830 [ 2907.754599][ T9779] ? __pfx_ref_tracker_free+0x10/0x10 [ 2907.754627][ T9779] ? __asan_memcpy+0x40/0x70 [ 2907.754650][ T9779] ? __skb_clone+0x5c/0x6c0 [ 2907.754679][ T9779] netlink_rcv_skb+0x226/0x4a0 [ 2907.754704][ T9779] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2907.754744][ T9779] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2907.754781][ T9779] ? netlink_deliver_tap+0x2e/0x1b0 [ 2907.754804][ T9779] ? netlink_deliver_tap+0x2e/0x1b0 [ 2907.754833][ T9779] netlink_unicast+0x7bb/0x940 [ 2907.754877][ T9779] netlink_sendmsg+0x813/0xb40 [ 2907.754910][ T9779] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2907.754939][ T9779] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2907.754968][ T9779] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2907.754991][ T9779] sock_sendmsg_nosec+0x13a/0x180 [ 2907.755022][ T9779] ____sys_sendmsg+0x54e/0x850 [ 2907.755050][ T9779] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2907.755081][ T9779] ? import_iovec+0x73/0xa0 [ 2907.755115][ T9779] ___sys_sendmsg+0x2a5/0x360 [ 2907.755146][ T9779] ? __lock_acquire+0x683/0x2cf0 [ 2907.755179][ T9779] ? __pfx____sys_sendmsg+0x10/0x10 [ 2907.755235][ T9779] ? __fget_files+0x2a/0x420 [ 2907.755264][ T9779] ? __fget_files+0x3a2/0x420 [ 2907.755301][ T9779] __x64_sys_sendmsg+0x1b1/0x290 [ 2907.755326][ T9779] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2907.755365][ T9779] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2907.755390][ T9779] do_syscall_64+0x174/0x580 [ 2907.755410][ T9779] ? trace_irq_disable+0x3b/0x140 [ 2907.755438][ T9779] ? clear_bhb_loop+0x40/0x90 [ 2907.755465][ T9779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2907.755486][ T9779] RIP: 0033:0x7fa95039de99 [ 2907.755508][ T9779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2907.755526][ T9779] RSP: 002b:00007fa951340028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2907.755550][ T9779] RAX: ffffffffffffffda RBX: 00007fa950625fa0 RCX: 00007fa95039de99 [ 2907.755566][ T9779] RDX: 0000000020040040 RSI: 0000200000000000 RDI: 0000000000000003 [ 2907.755582][ T9779] RBP: 00007fa951340090 R08: 0000000000000000 R09: 0000000000000000 [ 2907.755595][ T9779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2907.755609][ T9779] R13: 00007fa950626038 R14: 00007fa950625fa0 R15: 00007fa95074fa48 [ 2907.755644][ T9779] [ 2908.222536][T32703] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 2908.559778][ T9785] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2908.571463][ T9785] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 2908.814454][ T9790] xt_hashlimit: size too large, truncated to 1048576 [ 2909.055156][ T7247] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 2909.102749][ T7247] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 2909.142906][ T7247] usb 3-1: unit 254 not found! [ 2909.188992][ T9799] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10740'. [ 2909.344179][ T7247] usb 3-1: USB disconnect, device number 113 [ 2909.513231][ T6065] udevd[6065]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2909.613177][ T9810] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 2909.669066][ T9810] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 2910.015398][T32703] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 2910.170859][T32703] usb 6-1: device descriptor read/64, error -71 [ 2910.425460][T32703] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 2910.602836][ T9844] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10746'. [ 2910.617699][T32703] usb 6-1: device descriptor read/64, error -71 [ 2910.733818][ T9846] netlink: 104 bytes leftover after parsing attributes in process `syz.4.10747'. [ 2910.753159][ T30] audit: type=1326 audit(1784754815.375:18510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9845 comm="syz.4.10747" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa95039de99 code=0x7ffc0000 [ 2910.767010][T32703] usb usb6-port1: attempt power cycle [ 2910.807643][ T30] audit: type=1326 audit(1784754815.375:18511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9845 comm="syz.4.10747" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa95039de99 code=0x7ffc0000 [ 2910.856439][ T30] audit: type=1326 audit(1784754815.375:18512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9845 comm="syz.4.10747" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa95039de99 code=0x7ffc0000 [ 2910.911857][ T30] audit: type=1326 audit(1784754815.375:18513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9845 comm="syz.4.10747" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa95039de99 code=0x7ffc0000 [ 2910.952754][ T30] audit: type=1326 audit(1784754815.375:18514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9845 comm="syz.4.10747" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa95039de99 code=0x7ffc0000 [ 2910.980109][ T30] audit: type=1326 audit(1784754815.375:18515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9845 comm="syz.4.10747" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa95039de99 code=0x7ffc0000 [ 2911.028567][ T30] audit: type=1326 audit(1784754815.375:18516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9845 comm="syz.4.10747" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa95039de99 code=0x7ffc0000 [ 2911.095625][ T30] audit: type=1326 audit(1784754815.375:18517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9845 comm="syz.4.10747" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa95039de99 code=0x7ffc0000 [ 2911.122575][ T30] audit: type=1326 audit(1784754815.375:18518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9845 comm="syz.4.10747" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fa95039de99 code=0x7ffc0000 [ 2911.148235][T32703] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 2911.189954][ T30] audit: type=1326 audit(1784754815.375:18519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9845 comm="syz.4.10747" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa95039de99 code=0x7ffc0000 [ 2911.190375][ T9853] FAULT_INJECTION: forcing a failure. [ 2911.190375][ T9853] name failslab, interval 1, probability 0, space 0, times 0 [ 2911.219146][T32703] usb 6-1: device descriptor read/8, error -71 [ 2911.278833][ T9853] CPU: 1 UID: 0 PID: 9853 Comm: syz.4.10749 Tainted: G L syzkaller #0 PREEMPT(full) [ 2911.278866][ T9853] Tainted: [L]=SOFTLOCKUP [ 2911.278872][ T9853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 2911.278882][ T9853] Call Trace: [ 2911.278889][ T9853] [ 2911.278899][ T9853] dump_stack_lvl+0xe8/0x150 [ 2911.278929][ T9853] should_fail_ex+0x40c/0x560 [ 2911.278952][ T9853] should_failslab+0xa8/0x100 [ 2911.278977][ T9853] __kmalloc_noprof+0xfe/0x720 [ 2911.278999][ T9853] ? iter_file_splice_write+0x1ea/0x1240 [ 2911.279021][ T9853] ? iter_file_splice_write+0x1ea/0x1240 [ 2911.279049][ T9853] iter_file_splice_write+0x1ea/0x1240 [ 2911.279071][ T9853] ? __lock_acquire+0x683/0x2cf0 [ 2911.279097][ T9853] ? kfree+0x1c5/0x640 [ 2911.279112][ T9853] ? copy_splice_read+0x92a/0xaa0 [ 2911.279138][ T9853] ? copy_splice_read+0x92a/0xaa0 [ 2911.279163][ T9853] ? __pfx_iter_file_splice_write+0x10/0x10 [ 2911.279185][ T9853] ? direct_splice_actor+0x49/0x160 [ 2911.279209][ T9853] ? direct_splice_actor+0x49/0x160 [ 2911.279241][ T9853] ? __pfx_iter_file_splice_write+0x10/0x10 [ 2911.279265][ T9853] direct_splice_actor+0x101/0x160 [ 2911.279291][ T9853] splice_direct_to_actor+0x57b/0xcb0 [ 2911.279363][ T9853] ? __pfx_direct_splice_actor+0x10/0x10 [ 2911.279396][ T9853] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 2911.279435][ T9853] do_splice_direct+0x195/0x290 [ 2911.279460][ T9853] ? __pfx_do_splice_direct+0x10/0x10 [ 2911.279484][ T9853] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 2911.279512][ T9853] ? rw_verify_area+0x203/0x4c0 [ 2911.279540][ T9853] do_sendfile+0x52e/0x7c0 [ 2911.279566][ T9853] ? __pfx_do_sendfile+0x10/0x10 [ 2911.279585][ T9853] ? __fget_files+0x3a2/0x420 [ 2911.279613][ T9853] __se_sys_sendfile64+0x144/0x1a0 [ 2911.279633][ T9853] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 2911.279657][ T9853] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2911.279674][ T9853] do_syscall_64+0x174/0x580 [ 2911.279691][ T9853] ? trace_irq_disable+0x3b/0x140 [ 2911.279711][ T9853] ? clear_bhb_loop+0x40/0x90 [ 2911.279731][ T9853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2911.279747][ T9853] RIP: 0033:0x7fa95039de99 [ 2911.279762][ T9853] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2911.279776][ T9853] RSP: 002b:00007fa951340028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2911.279793][ T9853] RAX: ffffffffffffffda RBX: 00007fa950625fa0 RCX: 00007fa95039de99 [ 2911.279805][ T9853] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 2911.279814][ T9853] RBP: 00007fa951340090 R08: 0000000000000000 R09: 0000000000000000 [ 2911.279824][ T9853] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 2911.279833][ T9853] R13: 00007fa950626038 R14: 00007fa950625fa0 R15: 00007fa95074fa48 [ 2911.279862][ T9853] [ 2911.695755][T32703] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 2911.729502][T32703] usb 6-1: device descriptor read/8, error -71 [ 2911.737168][ T9857] xt_hashlimit: size too large, truncated to 1048576 [ 2911.858143][T32703] usb usb6-port1: unable to enumerate USB device [ 2912.538849][ T9872] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10753'. [ 2913.153614][ T9880] input: syz0 as /devices/virtual/input/input163 [ 2918.301823][ T9892] syzkaller0: entered promiscuous mode [ 2918.316660][ T9892] syzkaller0: entered allmulticast mode [ 2918.515885][T32703] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 2918.578679][ T9902] xt_hashlimit: size too large, truncated to 1048576 [ 2918.675962][T32703] usb 6-1: Using ep0 maxpacket: 8 [ 2918.690093][T32703] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 2918.714427][T32703] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2918.749371][T32703] usb 6-1: Product: syz [ 2918.777016][T32703] usb 6-1: Manufacturer: syz [ 2918.793348][T32703] usb 6-1: SerialNumber: syz [ 2918.824294][T32703] usb 6-1: config 0 descriptor?? [ 2918.854235][T32703] gspca_main: se401-2.14.0 probing 047d:5003 [ 2918.862872][ T7241] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 2919.025430][ T7241] usb 4-1: Using ep0 maxpacket: 16 [ 2919.037843][ T7241] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 2919.048279][ T7241] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2919.057216][ T7241] usb 4-1: Product: syz [ 2919.061780][ T7241] usb 4-1: Manufacturer: syz [ 2919.067561][ T7241] usb 4-1: SerialNumber: syz [ 2919.093787][ T7241] usb 4-1: config 0 descriptor?? [ 2919.219886][ T9912] netlink: 52 bytes leftover after parsing attributes in process `syz.4.10765'. [ 2919.292965][T32703] gspca_se401: Wrong descriptor type [ 2919.507751][ T7241] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 2919.527747][ T7241] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2919.538277][ T7241] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 2919.559674][ T7241] usb 4-1: media controller created [ 2919.578443][ T9919] netlink: 164 bytes leftover after parsing attributes in process `syz.0.10767'. [ 2919.602937][ T7241] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2919.627160][T32703] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 2919.721305][ T7241] zl10353_read_register: readreg error (reg=127, ret==0) [ 2919.744156][ T7241] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 2919.756756][ T7241] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 2919.774313][ T7241] usb 4-1: USB disconnect, device number 75 [ 2919.795464][T32703] usb 5-1: Using ep0 maxpacket: 32 [ 2919.842704][T32703] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 2919.877693][T32703] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2919.888541][T32703] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 2919.901016][T32703] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2919.912200][ T7241] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 2919.938719][T32703] usb 5-1: config 0 descriptor?? [ 2920.086982][ T1704] usb 6-1: USB disconnect, device number 40 [ 2920.279545][ T9926] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10769'. [ 2920.885391][ T7241] usb 3-1: new full-speed USB device number 114 using dummy_hcd [ 2921.096991][ T7241] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2921.148044][ T7241] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2921.216950][ T7241] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2921.278132][ T7241] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2921.630206][ T7241] usb 3-1: usb_control_msg returned -32 [ 2921.638372][ T7241] usbtmc 3-1:16.0: can't read capabilities [ 2921.892565][ T1704] usb 3-1: USB disconnect, device number 114 [ 2922.178862][ T9943] xt_hashlimit: size too large, truncated to 1048576 [ 2922.247889][T32703] usbhid 5-1:0.0: can't add hid device: -71 [ 2922.272563][T32703] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2922.312991][T32703] usb 5-1: USB disconnect, device number 19 [ 2923.739925][ T5006] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2923.772472][ T9955] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10781'. [ 2923.952933][ T3783] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2923.971136][ T3783] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2923.987953][ T3783] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2924.022542][ T3783] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2924.046575][ T3783] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2924.477816][ T5006] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2924.544817][ T9968] xt_hashlimit: size too large, truncated to 1048576 [ 2924.750464][ T5006] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2924.948540][ T5006] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2925.077271][ T7241] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 2925.248452][ T7241] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2925.274354][ T7241] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2925.331043][ T7241] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2925.369715][ T7241] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2925.619656][ T7241] usb 5-1: usb_control_msg returned -32 [ 2925.626569][ T7241] usbtmc 5-1:16.0: can't read capabilities [ 2925.733891][ T5006] bridge_slave_1: left allmulticast mode [ 2925.756210][ T5006] bridge_slave_1: left promiscuous mode [ 2925.768175][ T5006] bridge0: port 2(bridge_slave_1) entered disabled state [ 2925.858897][ T5006] bridge_slave_0: left allmulticast mode [ 2925.866395][ T7247] usb 5-1: USB disconnect, device number 20 [ 2925.888742][ T5006] bridge_slave_0: left promiscuous mode [ 2925.923840][ T5006] bridge0: port 1(bridge_slave_0) entered disabled state [ 2926.156021][ T3783] Bluetooth: hci0: command tx timeout [ 2926.490886][ T5006] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2926.530994][ T5006] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2926.567695][ T5006] bond0 (unregistering): Released all slaves [ 2926.590323][ T5006] bond1 (unregistering): (slave dummy0): Releasing active interface [ 2926.611405][ T5006] bond1 (unregistering): Released all slaves [ 2926.652480][ T5287] 8021q: adding VLAN 0 to HW filter on device eth5 [ 2926.682602][ T9958] bridge0: port 1(bridge_slave_0) entered blocking state [ 2926.691545][ T9958] bridge0: port 1(bridge_slave_0) entered disabled state [ 2926.701808][ T9958] bridge_slave_0: entered allmulticast mode [ 2926.714074][ T9958] bridge_slave_0: entered promiscuous mode [ 2926.726509][ T9958] bridge0: port 2(bridge_slave_1) entered blocking state [ 2926.735834][ T9958] bridge0: port 2(bridge_slave_1) entered disabled state [ 2926.744148][ T9958] bridge_slave_1: entered allmulticast mode [ 2926.763291][ T9958] bridge_slave_1: entered promiscuous mode [ 2926.863596][ T7241] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 2926.951782][ T9958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2927.005927][ T9958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2927.047734][ T7241] usb 5-1: config 1 descriptor has 1 excess byte, ignoring [ 2927.061411][ T7241] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 2927.094786][ T7241] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2927.108153][ T7241] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2927.127750][ T7241] usb 5-1: Product: syz [ 2927.132220][ T7241] usb 5-1: Manufacturer: syz [ 2927.152325][ T7241] usb 5-1: SerialNumber: syz [ 2927.250253][ T9958] team0: Port device team_slave_0 added [ 2927.266770][ T5006] hsr_slave_0: left promiscuous mode [ 2927.280927][ T5006] hsr_slave_1: left promiscuous mode [ 2927.289104][ T5006] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2927.298163][ T5006] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2927.315136][ T5006] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2927.333510][ T5006] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2927.358764][ T5006] veth1_macvtap: left promiscuous mode [ 2927.410105][ T5006] veth0_macvtap: left promiscuous mode [ 2927.416596][T10006] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2927.438136][ T7241] usb 5-1: USB disconnect, device number 21 [ 2928.205312][ T5006] team_slave_1 (unregistering): left promiscuous mode [ 2928.246034][ T3783] Bluetooth: hci0: command tx timeout [ 2928.258989][ T5006] team0 (unregistering): Port device team_slave_1 removed [ 2928.315184][ T5006] team_slave_0 (unregistering): left promiscuous mode [ 2928.352382][ T5006] team0 (unregistering): Port device team_slave_0 removed [ 2928.617033][T10045] netlink: 44 bytes leftover after parsing attributes in process `syz.4.10796'. [ 2928.804350][ T9958] team0: Port device team_slave_1 added [ 2928.822289][ T5287] 8021q: adding VLAN 0 to HW filter on device eth6 [ 2928.971340][ T9958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2928.981114][ T9958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2929.009434][T19236] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 2929.021469][ T9958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2929.094244][ T9958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2929.111475][ T9958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2929.190197][T19236] usb 3-1: Using ep0 maxpacket: 32 [ 2929.207664][ T9958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2929.235510][T19236] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2929.278349][T19236] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2929.305764][T19236] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2929.330179][T19236] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2929.402952][T19236] usb 3-1: config 0 descriptor?? [ 2929.450008][T19236] hub 3-1:0.0: USB hub found [ 2929.515734][ T9958] hsr_slave_0: entered promiscuous mode [ 2929.540272][ T9958] hsr_slave_1: entered promiscuous mode [ 2929.584922][ T9958] debugfs: 'hsr0' already exists in 'hsr' [ 2929.605129][ T9958] Cannot create hsr debugfs directory [ 2929.721074][T19236] hub 3-1:0.0: 1 port detected [ 2930.125915][ T7241] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 2930.180859][ T9958] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 2930.192543][ T9958] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2930.201717][ T9958] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 2930.214271][ T9958] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2930.236953][ T9958] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 2930.250551][ T9958] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2930.259840][ T9958] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 2930.272851][ T9958] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2930.290188][ T7241] usb 5-1: Using ep0 maxpacket: 8 [ 2930.304285][ T7241] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2930.319144][ T3783] Bluetooth: hci0: command tx timeout [ 2930.329408][ T7241] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2930.344678][ T7241] usb 5-1: New USB device found, idVendor=046d, idProduct=c14f, bcdDevice=ff.ff [ 2930.354702][ T7241] usb 5-1: New USB device strings: Mfr=237, Product=0, SerialNumber=0 [ 2930.366617][ T7241] usb 5-1: Manufacturer: syz [ 2930.382688][ T7241] usb 5-1: config 0 descriptor?? [ 2930.401706][ T7241] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 2930.592864][ T9958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2930.644281][ T9958] 8021q: adding VLAN 0 to HW filter on device team0 [ 2930.677077][ T4999] bridge0: port 1(bridge_slave_0) entered blocking state [ 2930.684459][ T4999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2930.725085][ T5002] bridge0: port 2(bridge_slave_1) entered blocking state [ 2930.732579][ T5002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2930.810849][T19236] hub 3-1:0.0: hub_hub_status failed (err = -32) [ 2930.825803][T19236] hub 3-1:0.0: config failed, can't get hub status (err -32) [ 2930.843414][T10057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2930.873684][T19236] usbhid 3-1:0.0: can't add hid device: -32 [ 2930.883214][T19236] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 2930.901635][ T5287] 8021q: adding VLAN 0 to HW filter on device eth7 [ 2930.939396][T10057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2930.965867][ T7246] usb 5-1: USB disconnect, device number 22 [ 2930.982093][T19236] usb 3-1: USB disconnect, device number 115 [ 2930.992600][T10074] syzkaller0: entered promiscuous mode [ 2930.999563][T10074] syzkaller0: entered allmulticast mode [ 2931.135653][ T9958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2931.260431][ T9958] veth0_vlan: entered promiscuous mode [ 2931.307835][ T9958] veth1_vlan: entered promiscuous mode [ 2931.421268][ T9958] veth0_macvtap: entered promiscuous mode [ 2931.460257][ T9958] veth1_macvtap: entered promiscuous mode [ 2931.492663][ T9958] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2931.527219][ T9958] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2931.584213][ T5007] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2931.629632][ T5006] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2931.663322][ T5006] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2931.721658][ T5006] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2931.829730][T10091] FAULT_INJECTION: forcing a failure. [ 2931.829730][T10091] name failslab, interval 1, probability 0, space 0, times 0 [ 2931.926141][T10091] CPU: 1 UID: 0 PID: 10091 Comm: syz.4.10802 Tainted: G L syzkaller #0 PREEMPT(full) [ 2931.926180][T10091] Tainted: [L]=SOFTLOCKUP [ 2931.926186][T10091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 2931.926196][T10091] Call Trace: [ 2931.926203][T10091] [ 2931.926210][T10091] dump_stack_lvl+0xe8/0x150 [ 2931.926241][T10091] should_fail_ex+0x40c/0x560 [ 2931.926297][T10091] should_failslab+0xa8/0x100 [ 2931.926333][T10091] __kmalloc_noprof+0xfe/0x720 [ 2931.926355][T10091] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 2931.926379][T10091] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 2931.926406][T10091] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 2931.926435][T10091] genl_family_rcv_msg_doit+0xda/0x340 [ 2931.926461][T10091] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2931.926489][T10091] ? apparmor_capable+0x126/0x170 [ 2931.926512][T10091] ? bpf_lsm_capable+0x9/0x20 [ 2931.926531][T10091] ? security_capable+0x7e/0x2c0 [ 2931.926582][T10091] genl_rcv_msg+0x614/0x7a0 [ 2931.926608][T10091] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2931.926633][T10091] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 2931.926653][T10091] ? __pfx_nl80211_set_station+0x10/0x10 [ 2931.926674][T10091] ? __pfx_nl80211_post_doit+0x10/0x10 [ 2931.926695][T10091] ? __pfx_ref_tracker_free+0x10/0x10 [ 2931.926719][T10091] ? __asan_memcpy+0x40/0x70 [ 2931.926736][T10091] ? __skb_clone+0x5c/0x6c0 [ 2931.926757][T10091] netlink_rcv_skb+0x226/0x4a0 [ 2931.926774][T10091] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2931.926796][T10091] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2931.926824][T10091] ? down_read+0x2be/0x330 [ 2931.926844][T10091] genl_rcv+0x28/0x40 [ 2931.926863][T10091] netlink_unicast+0x7bb/0x940 [ 2931.926895][T10091] netlink_sendmsg+0x813/0xb40 [ 2931.926919][T10091] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2931.926939][T10091] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2931.926960][T10091] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2931.926976][T10091] sock_sendmsg_nosec+0x13a/0x180 [ 2931.926999][T10091] ____sys_sendmsg+0x54e/0x850 [ 2931.927019][T10091] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2931.927041][T10091] ? import_iovec+0x73/0xa0 [ 2931.927068][T10091] ___sys_sendmsg+0x2a5/0x360 [ 2931.927083][T10091] ? __lock_acquire+0x683/0x2cf0 [ 2931.927108][T10091] ? __pfx____sys_sendmsg+0x10/0x10 [ 2931.927151][T10091] ? __fget_files+0x2a/0x420 [ 2931.927172][T10091] ? __fget_files+0x3a2/0x420 [ 2931.927200][T10091] __x64_sys_sendmsg+0x1b1/0x290 [ 2931.927218][T10091] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2931.927248][T10091] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2931.927266][T10091] do_syscall_64+0x174/0x580 [ 2931.927281][T10091] ? trace_irq_disable+0x3b/0x140 [ 2931.927301][T10091] ? clear_bhb_loop+0x40/0x90 [ 2931.927320][T10091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2931.927336][T10091] RIP: 0033:0x7fa95039de99 [ 2931.927352][T10091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2931.927366][T10091] RSP: 002b:00007fa951340028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2931.927384][T10091] RAX: ffffffffffffffda RBX: 00007fa950625fa0 RCX: 00007fa95039de99 [ 2931.927395][T10091] RDX: 0000000000008000 RSI: 0000200000000780 RDI: 0000000000000003 [ 2931.927406][T10091] RBP: 00007fa951340090 R08: 0000000000000000 R09: 0000000000000000 [ 2931.927416][T10091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2931.927425][T10091] R13: 00007fa950626038 R14: 00007fa950625fa0 R15: 00007fa95074fa48 [ 2931.927449][T10091] [ 2932.382020][ T5007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2932.390446][ T5007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2932.399540][ T3783] Bluetooth: hci0: command tx timeout [ 2932.520539][ T5008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2932.586166][ T5008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2932.628549][T10096] netlink: 'syz.4.10804': attribute type 1 has an invalid length. [ 2932.673629][T10096] 8021q: adding VLAN 0 to HW filter on device bond6 [ 2932.987932][T10083] netlink: 'syz.3.10800': attribute type 1 has an invalid length. [ 2933.026640][T10083] program syz.3.10800 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2933.041851][T32703] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 2933.228069][T32703] usb 5-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 2933.259486][T32703] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2933.298269][T32703] usb 5-1: config 0 descriptor?? [ 2933.339739][T32703] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 2933.390512][T10111] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10805'. [ 2933.396835][ T7246] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 2933.432022][T10111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10805'. [ 2933.484412][ T5287] 8021q: adding VLAN 0 to HW filter on device eth8 [ 2933.564438][T32703] gspca_sunplus: reg_w_riv err -71 [ 2933.609604][T32703] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 2933.617063][ T7246] usb 3-1: Using ep0 maxpacket: 8 [ 2933.656250][ T7246] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 2933.667613][T32703] usb 5-1: USB disconnect, device number 23 [ 2933.702473][ T7246] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2933.717732][ T7246] usb 3-1: Product: syz [ 2933.723121][ T7246] usb 3-1: Manufacturer: syz [ 2933.741243][ T7246] usb 3-1: SerialNumber: syz [ 2933.801417][ T7246] usb 3-1: config 0 descriptor?? [ 2933.853092][ T7246] gspca_main: se401-2.14.0 probing 047d:5003 [ 2934.277618][ T7246] gspca_se401: Wrong descriptor type [ 2934.525989][T32703] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 2934.558644][T10125] netlink: 'syz.4.10809': attribute type 1 has an invalid length. [ 2934.623042][T10125] 8021q: adding VLAN 0 to HW filter on device bond7 [ 2934.709052][T32703] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2934.734303][T32703] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2934.762553][T32703] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2934.797711][T32703] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 2934.818298][T32703] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2934.837617][T32703] usb 4-1: Product: syz [ 2934.848848][T32703] usb 4-1: Manufacturer: syz [ 2934.858996][T32703] usb 4-1: SerialNumber: syz [ 2934.893014][T32703] usb 4-1: selecting invalid altsetting 1 [ 2934.910872][T32703] usb 4-1: unit 6 not found! [ 2934.945388][ T1699] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 2935.072041][T19236] usb 3-1: USB disconnect, device number 116 [ 2935.125139][ T1699] usb 5-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 2935.159535][ T1699] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2935.208872][ T1699] usb 5-1: config 0 descriptor?? [ 2935.240558][ T1699] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 2935.453025][ T1699] gspca_sunplus: reg_w_riv err -71 [ 2935.462457][ T1699] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 2935.474880][ T1699] usb 5-1: USB disconnect, device number 24 [ 2935.625762][T19236] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 2935.698813][T32703] usb 4-1: 2:0: failed to get current value for ch 0 (-71) [ 2935.747874][T32703] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 2935.760710][T32703] usb 4-1: USB disconnect, device number 76 [ 2935.785463][T19236] usb 3-1: Using ep0 maxpacket: 16 [ 2935.797179][ T9893] udevd[9893]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2935.832566][T19236] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 2935.842507][T19236] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2935.852637][T19236] usb 3-1: Product: syz [ 2935.857556][T19236] usb 3-1: Manufacturer: syz [ 2935.865675][T19236] usb 3-1: SerialNumber: syz [ 2935.881289][T19236] usb 3-1: config 0 descriptor?? [ 2936.032816][T10135] FAULT_INJECTION: forcing a failure. [ 2936.032816][T10135] name failslab, interval 1, probability 0, space 0, times 0 [ 2936.047279][T10135] CPU: 0 UID: 0 PID: 10135 Comm: syz.4.10811 Tainted: G L syzkaller #0 PREEMPT(full) [ 2936.047305][T10135] Tainted: [L]=SOFTLOCKUP [ 2936.047311][T10135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 2936.047323][T10135] Call Trace: [ 2936.047329][T10135] [ 2936.047336][T10135] dump_stack_lvl+0xe8/0x150 [ 2936.047398][T10135] should_fail_ex+0x40c/0x560 [ 2936.047422][T10135] should_failslab+0xa8/0x100 [ 2936.047447][T10135] __kmalloc_noprof+0xfe/0x720 [ 2936.047468][T10135] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 2936.047491][T10135] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 2936.047519][T10135] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 2936.047547][T10135] genl_family_rcv_msg_doit+0xda/0x340 [ 2936.047574][T10135] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 2936.047601][T10135] ? apparmor_capable+0x126/0x170 [ 2936.047624][T10135] ? bpf_lsm_capable+0x9/0x20 [ 2936.047644][T10135] ? security_capable+0x7e/0x2c0 [ 2936.047674][T10135] genl_rcv_msg+0x614/0x7a0 [ 2936.047699][T10135] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2936.047719][T10135] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 2936.047739][T10135] ? __pfx_nl80211_del_key+0x10/0x10 [ 2936.047759][T10135] ? __pfx_nl80211_post_doit+0x10/0x10 [ 2936.047781][T10135] ? __pfx_ref_tracker_free+0x10/0x10 [ 2936.047818][T10135] ? __asan_memcpy+0x40/0x70 [ 2936.047835][T10135] ? __skb_clone+0x5c/0x6c0 [ 2936.047856][T10135] netlink_rcv_skb+0x226/0x4a0 [ 2936.047873][T10135] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2936.047895][T10135] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2936.047923][T10135] ? down_read+0x2be/0x330 [ 2936.047943][T10135] genl_rcv+0x28/0x40 [ 2936.047962][T10135] netlink_unicast+0x7bb/0x940 [ 2936.047994][T10135] netlink_sendmsg+0x813/0xb40 [ 2936.048018][T10135] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2936.048038][T10135] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2936.048058][T10135] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2936.048074][T10135] sock_sendmsg_nosec+0x13a/0x180 [ 2936.048098][T10135] ____sys_sendmsg+0x54e/0x850 [ 2936.048118][T10135] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2936.048141][T10135] ? import_iovec+0x73/0xa0 [ 2936.048168][T10135] ___sys_sendmsg+0x2a5/0x360 [ 2936.048182][T10135] ? __lock_acquire+0x683/0x2cf0 [ 2936.048226][T10135] ? __pfx____sys_sendmsg+0x10/0x10 [ 2936.048297][T10135] ? __fget_files+0x2a/0x420 [ 2936.048324][T10135] ? __fget_files+0x3a2/0x420 [ 2936.048352][T10135] __x64_sys_sendmsg+0x1b1/0x290 [ 2936.048370][T10135] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2936.048400][T10135] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2936.048418][T10135] do_syscall_64+0x174/0x580 [ 2936.048433][T10135] ? trace_irq_disable+0x3b/0x140 [ 2936.048453][T10135] ? clear_bhb_loop+0x40/0x90 [ 2936.048473][T10135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2936.048489][T10135] RIP: 0033:0x7fa95039de99 [ 2936.048504][T10135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2936.048517][T10135] RSP: 002b:00007fa951340028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2936.048534][T10135] RAX: ffffffffffffffda RBX: 00007fa950625fa0 RCX: 00007fa95039de99 [ 2936.048546][T10135] RDX: 00000000000008c0 RSI: 0000200000000680 RDI: 0000000000000003 [ 2936.048556][T10135] RBP: 00007fa951340090 R08: 0000000000000000 R09: 0000000000000000 [ 2936.048566][T10135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2936.048575][T10135] R13: 00007fa950626038 R14: 00007fa950625fa0 R15: 00007fa95074fa48 [ 2936.048600][T10135] [ 2936.620203][T19236] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 2936.632297][T19236] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2936.643559][T19236] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 2936.651661][T19236] usb 3-1: media controller created [ 2936.667028][T19236] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2936.785370][ T7246] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 2936.798035][ T7247] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 2936.824774][T19236] zl10353_read_register: readreg error (reg=127, ret==0) [ 2936.835816][T19236] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 2936.844978][T19236] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 2936.858359][T19236] usb 3-1: USB disconnect, device number 117 [ 2936.899731][T10142] FAULT_INJECTION: forcing a failure. [ 2936.899731][T10142] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2936.913329][T10142] CPU: 1 UID: 0 PID: 10142 Comm: syz.0.10814 Tainted: G L syzkaller #0 PREEMPT(full) [ 2936.913366][T10142] Tainted: [L]=SOFTLOCKUP [ 2936.913377][T10142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 2936.913390][T10142] Call Trace: [ 2936.913401][T10142] [ 2936.913411][T10142] dump_stack_lvl+0xe8/0x150 [ 2936.913441][T19236] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 2936.913452][T10142] should_fail_ex+0x40c/0x560 [ 2936.913509][T10142] _copy_to_user+0x31/0xb0 [ 2936.913658][T10142] simple_read_from_buffer+0xe1/0x170 [ 2936.913778][T10142] proc_fail_nth_read+0x1bb/0x230 [ 2936.913868][T10142] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2936.913971][T10142] ? rw_verify_area+0x24a/0x4c0 [ 2936.914059][T10142] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2936.914150][T10142] vfs_read+0x213/0xa80 [ 2936.914248][T10142] ? __pfx___mutex_lock+0x10/0x10 [ 2936.914327][T10142] ? __pfx_vfs_read+0x10/0x10 [ 2936.914433][T10142] ? __fget_files+0x2a/0x420 [ 2936.914528][T10142] ? __fget_files+0x3a2/0x420 [ 2936.914622][T10142] ? __fget_files+0x2a/0x420 [ 2936.914729][T10142] ksys_read+0x150/0x270 [ 2936.914835][T10142] ? __pfx_ksys_read+0x10/0x10 [ 2936.914963][T10142] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2936.915060][T10142] do_syscall_64+0x174/0x580 [ 2936.915134][T10142] ? trace_irq_disable+0x3b/0x140 [ 2936.915217][T10142] ? clear_bhb_loop+0x40/0x90 [ 2936.915298][T10142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2936.915360][T10142] RIP: 0033:0x7f5f8b75e6ce [ 2936.915419][T10142] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2936.915479][T10142] RSP: 002b:00007f5f8c71afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2936.915548][T10142] RAX: ffffffffffffffda RBX: 00007f5f8c71b6c0 RCX: 00007f5f8b75e6ce [ 2936.915595][T10142] RDX: 000000000000000f RSI: 00007f5f8c71b0a0 RDI: 0000000000000003 [ 2936.915640][T10142] RBP: 00007f5f8c71b090 R08: 0000000000000000 R09: 0000000000000000 [ 2936.915679][T10142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2936.915724][T10142] R13: 00007f5f8ba26038 R14: 00007f5f8ba25fa0 R15: 00007f5f8bb4fa48 [ 2936.915819][T10142] [ 2937.011894][ T7247] usb 5-1: Using ep0 maxpacket: 16 [ 2937.152777][ T7246] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2937.179378][ T7246] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 2937.196416][ T7246] usb 4-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 2937.205839][ T7246] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2937.233233][ T7246] usb 4-1: config 0 descriptor?? [ 2937.250771][ T7247] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2937.266756][ T7247] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2937.284803][ T7247] usb 5-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 2937.300093][ T7247] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2937.325826][ T7247] usb 5-1: config 0 descriptor?? [ 2937.444837][T10138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2937.454739][T10138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2937.681094][ T7246] zeroplus 0003:0C12:0005.0040: item fetching failed at offset 8/40 [ 2937.696652][ T7246] zeroplus 0003:0C12:0005.0040: parse failed [ 2937.703165][ T7246] zeroplus 0003:0C12:0005.0040: probe with driver zeroplus failed with error -22 [ 2937.785742][ T7247] kye 0003:0458:5019.0041: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 2937.801435][ T7247] kye 0003:0458:5019.0041: unknown main item tag 0x2 [ 2937.810070][ T7247] kye 0003:0458:5019.0041: unknown main item tag 0x0 [ 2937.817424][ T7247] kye 0003:0458:5019.0041: unknown main item tag 0x0 [ 2937.829719][ T7247] kye 0003:0458:5019.0041: unknown main item tag 0x0 [ 2937.845361][ T7247] kye 0003:0458:5019.0041: unknown main item tag 0x0 [ 2937.852534][ T7247] kye 0003:0458:5019.0041: unknown main item tag 0x0 [ 2937.868402][ T7247] kye 0003:0458:5019.0041: unknown main item tag 0x0 [ 2937.881702][ T7247] kye 0003:0458:5019.0041: unknown main item tag 0x0 [ 2937.892370][ T7247] kye 0003:0458:5019.0041: unknown main item tag 0x0 [ 2937.907977][ T7247] kye 0003:0458:5019.0041: unknown main item tag 0x0 [ 2937.960495][T10140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2937.984665][ T7247] kye 0003:0458:5019.0041: hidraw0: USB HID vff.fc Device [HID 0458:5019] on usb-dummy_hcd.4-1/input0 [ 2938.002420][ T7247] kye 0003:0458:5019.0041: tablet-enabling feature report not found [ 2938.011806][T10140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2938.025809][ T7247] kye 0003:0458:5019.0041: tablet enabling failed [ 2938.201310][T10153] netlink: 'syz.2.10817': attribute type 1 has an invalid length. [ 2938.265019][T10153] 8021q: adding VLAN 0 to HW filter on device bond7 [ 2938.382688][ T1704] usb 4-1: USB disconnect, device number 77 [ 2938.461333][T10163] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10821'. [ 2938.565714][ T7247] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 2938.717868][ T7247] usb 3-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 2938.727628][ T7247] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2938.741807][ T7247] usb 3-1: config 0 descriptor?? [ 2938.753135][ T7247] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 2938.964486][ T7247] gspca_sunplus: reg_w_riv err -71 [ 2938.970292][ T7247] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 2938.981740][ T7247] usb 3-1: USB disconnect, device number 118 [ 2939.483734][T10167] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10822'. [ 2939.613719][T19236] usb 5-1: USB disconnect, device number 25 [ 2940.006221][T19236] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 2940.075692][ T7247] usb 3-1: new full-speed USB device number 119 using dummy_hcd [ 2940.179378][T19236] usb 5-1: Using ep0 maxpacket: 32 [ 2940.194961][T19236] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 2940.210637][T19236] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2940.232184][T19236] usb 5-1: Product: syz [ 2940.243994][ T7247] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2940.253846][T19236] usb 5-1: Manufacturer: syz [ 2940.259408][ T7247] usb 3-1: not running at top speed; connect to a high speed hub [ 2940.267984][T19236] usb 5-1: SerialNumber: syz [ 2940.277296][ T7247] usb 3-1: config 17 has an invalid interface number: 8 but max is 1 [ 2940.286271][ T7247] usb 3-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 2940.303602][ T7247] usb 3-1: config 17 has no interface number 0 [ 2940.311318][T19236] usb 5-1: config 0 descriptor?? [ 2940.323522][ T7247] usb 3-1: config 17 interface 8 altsetting 6 endpoint 0x3 has an invalid bInterval 0, changing to 4 [ 2940.367240][ T7247] usb 3-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid maxpacket 62603, setting to 1023 [ 2940.387088][ T7247] usb 3-1: config 17 interface 8 has no altsetting 0 [ 2940.409668][ T7247] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 2940.419418][ T7247] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2940.430379][ T7247] usb 3-1: Product: syz [ 2940.445559][ T7247] usb 3-1: Manufacturer: syz [ 2940.458863][ T7247] usb 3-1: SerialNumber: syz [ 2940.540545][T19236] snd-usb-6fire 5-1:0.0: unable to receive device firmware state. [ 2940.573166][T19236] snd-usb-6fire 5-1:0.0: probe with driver snd-usb-6fire failed with error -121 [ 2940.934391][ T7246] usb 5-1: USB disconnect, device number 26 [ 2941.600835][T10190] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10828'. [ 2941.623685][T10190] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10828'. [ 2942.025739][T19236] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 2942.185668][T19236] usb 5-1: Using ep0 maxpacket: 16 [ 2942.197850][T19236] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 2942.207398][T19236] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2942.216965][T19236] usb 5-1: Product: syz [ 2942.221480][T19236] usb 5-1: Manufacturer: syz [ 2942.226168][T19236] usb 5-1: SerialNumber: syz [ 2942.234969][T19236] usb 5-1: config 0 descriptor?? [ 2942.605103][ T7247] usb 3-1: selecting invalid altsetting 0 [ 2942.613736][ T7247] usb 3-1: 8:6 : no UAC_FORMAT_TYPE desc [ 2942.627566][ T7247] usb 3-1: selecting invalid altsetting 0 [ 2942.654917][T19236] dvb_usb_dtv5100 5-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 2942.679016][T19236] usb 5-1: USB disconnect, device number 27 [ 2942.711122][ T7247] usb 3-1: USB disconnect, device number 119 [ 2942.768270][ T9893] udevd[9893]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.8/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2942.916797][T10198] netlink: 'syz.3.10833': attribute type 1 has an invalid length. [ 2942.968474][T10198] 8021q: adding VLAN 0 to HW filter on device bond7 [ 2943.245807][ T7236] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 2943.418538][ T7236] usb 4-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 2943.427854][ T7236] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2943.439009][ T7236] usb 4-1: config 0 descriptor?? [ 2943.458408][ T7236] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 2943.555403][T19236] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 2943.670684][ T7236] gspca_sunplus: reg_w_riv err -71 [ 2943.688403][T19236] usb 5-1: device descriptor read/64, error -71 [ 2943.696026][ T7236] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 2943.712999][ T7236] usb 4-1: USB disconnect, device number 78 [ 2943.934897][T10217] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10840'. [ 2943.945063][T19236] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 2943.953649][T10217] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10840'. [ 2944.085865][T19236] usb 5-1: device descriptor read/64, error -71 [ 2944.195874][T19236] usb usb5-port1: attempt power cycle [ 2944.405402][ T1704] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 2944.545375][T19236] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 2944.565740][ T1704] usb 3-1: Using ep0 maxpacket: 32 [ 2944.573637][T19236] usb 5-1: device descriptor read/8, error -71 [ 2944.584999][ T1704] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2944.622749][ T1704] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2944.669484][ T1704] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2944.694862][ T1704] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2944.731068][ T1704] usb 3-1: config 0 descriptor?? [ 2944.768492][ T1704] hub 3-1:0.0: USB hub found [ 2944.815380][T19236] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 2944.846214][T19236] usb 5-1: device descriptor read/8, error -71 [ 2944.967229][T19236] usb usb5-port1: unable to enumerate USB device [ 2946.825982][ T7246] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 2947.007482][ T7246] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 2947.032105][ T7246] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2947.067060][ T7246] usb 5-1: config 0 has no interface number 0 [ 2947.082509][ T7246] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 2947.110197][ T7246] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 2947.142651][ T7246] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2947.178236][ T7246] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 2947.211129][ T7246] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2947.230476][ T7246] usb 5-1: Product: syz [ 2947.241080][ T7246] usb 5-1: Manufacturer: syz [ 2947.250912][ T7246] usb 5-1: SerialNumber: syz [ 2947.273047][ T7246] usb 5-1: config 0 descriptor?? [ 2947.691844][T10259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2947.709507][T10259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2947.725084][ T1704] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 2947.754083][ T1704] usbhid 3-1:0.0: can't add hid device: -71 [ 2947.767355][ T1704] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2947.806503][ T1704] usb 3-1: USB disconnect, device number 120 [ 2947.938498][ T7246] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.117/input/input165 [ 2948.041279][T10283] FAULT_INJECTION: forcing a failure. [ 2948.041279][T10283] name failslab, interval 1, probability 0, space 0, times 0 [ 2948.103779][T10283] CPU: 0 UID: 0 PID: 10283 Comm: syz.2.10849 Tainted: G L syzkaller #0 PREEMPT(full) [ 2948.103814][T10283] Tainted: [L]=SOFTLOCKUP [ 2948.103823][T10283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 2948.103837][T10283] Call Trace: [ 2948.103846][T10283] [ 2948.103857][T10283] dump_stack_lvl+0xe8/0x150 [ 2948.103894][T10283] should_fail_ex+0x40c/0x560 [ 2948.103927][T10283] should_failslab+0xa8/0x100 [ 2948.103963][T10283] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 2948.103991][T10283] ? dst_alloc+0x105/0x170 [ 2948.104015][T10283] ? dst_alloc+0x105/0x170 [ 2948.104052][T10283] ? __local_bh_enable_ip+0xd0/0x130 [ 2948.104082][T10283] dst_alloc+0x105/0x170 [ 2948.104105][T10283] ? ip_check_mc_rcu+0x629/0x670 [ 2948.104136][T10283] ip_route_output_key_hash_rcu+0x14ac/0x2720 [ 2948.104181][T10283] ? ip_route_output_key_hash+0xd8/0x2a0 [ 2948.104216][T10283] ip_route_output_key_hash+0x18d/0x2a0 [ 2948.104253][T10283] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 2948.104283][T10283] ? is_bpf_text_address+0x26/0x2b0 [ 2948.104319][T10283] ? kernel_text_address+0xa5/0xe0 [ 2948.104353][T10283] ? __kernel_text_address+0xd/0x30 [ 2948.104393][T10283] tcp_v4_connect+0x6fd/0x1950 [ 2948.104512][T10283] ? __pfx_tcp_v4_connect+0x10/0x10 [ 2948.104534][T10283] ? unwind_get_return_address+0x4d/0x90 [ 2948.104557][T10283] ? __pfx_stack_trace_consume_entry+0x1/0x10 [ 2948.104585][T10283] ? tcp_v6_connect+0x6bc/0x1cf0 [ 2948.104645][T10283] tcp_v6_connect+0xcb1/0x1cf0 [ 2948.104667][T10283] ? sock_sendmsg_nosec+0x90/0x180 [ 2948.104693][T10283] ? ____sys_sendmsg+0x54e/0x850 [ 2948.104715][T10283] ? do_syscall_64+0x174/0x580 [ 2948.104757][T10283] ? __pfx_tcp_v6_connect+0x10/0x10 [ 2948.104795][T10283] __inet_stream_connect+0x258/0xe00 [ 2948.104840][T10283] ? rcu_is_watching+0x15/0xb0 [ 2948.104873][T10283] ? __pfx___inet_stream_connect+0x10/0x10 [ 2948.104904][T10283] ? __kasan_kmalloc+0x93/0xb0 [ 2948.104936][T10283] ? __kmalloc_cache_noprof+0x32d/0x660 [ 2948.104969][T10283] ? __kmalloc_cache_noprof+0x150/0x660 [ 2948.104997][T10283] ? tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 2948.105036][T10283] tcp_sendmsg_fastopen+0x3af/0x5f0 [ 2948.105066][T10283] tcp_sendmsg_locked+0x4cdc/0x55c0 [ 2948.105092][T10283] ? tcp_sendmsg_locked+0x691/0x55c0 [ 2948.105120][T10283] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 2948.105155][T10283] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 2948.105187][T10283] ? current_check_access_socket+0x26a/0xdf0 [ 2948.105218][T10283] ? __lock_acquire+0x683/0x2cf0 [ 2948.105276][T10283] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 2948.105306][T10283] ? tcp_sendmsg+0x21/0x50 [ 2948.105330][T10283] ? __local_bh_enable_ip+0xd0/0x130 [ 2948.105362][T10283] tcp_sendmsg+0x2f/0x50 [ 2948.105385][T10283] ? __pfx_inet6_sendmsg+0x10/0x10 [ 2948.105408][T10283] sock_sendmsg_nosec+0x90/0x180 [ 2948.105440][T10283] ____sys_sendmsg+0x54e/0x850 [ 2948.105470][T10283] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2948.105503][T10283] ? import_iovec+0x73/0xa0 [ 2948.105538][T10283] ___sys_sendmsg+0x2a5/0x360 [ 2948.105559][T10283] ? __lock_acquire+0x683/0x2cf0 [ 2948.105593][T10283] ? __pfx____sys_sendmsg+0x10/0x10 [ 2948.105654][T10283] ? __fget_files+0x2a/0x420 [ 2948.105684][T10283] ? __fget_files+0x3a2/0x420 [ 2948.105724][T10283] __x64_sys_sendmsg+0x1b1/0x290 [ 2948.105751][T10283] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2948.105794][T10283] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2948.105820][T10283] do_syscall_64+0x174/0x580 [ 2948.105842][T10283] ? trace_irq_disable+0x3b/0x140 [ 2948.105870][T10283] ? clear_bhb_loop+0x40/0x90 [ 2948.105897][T10283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2948.105920][T10283] RIP: 0033:0x7f4ea7f9de99 [ 2948.105942][T10283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2948.105962][T10283] RSP: 002b:00007f4ea8f23028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2948.105987][T10283] RAX: ffffffffffffffda RBX: 00007f4ea8225fa0 RCX: 00007f4ea7f9de99 [ 2948.106003][T10283] RDX: 0000000020000000 RSI: 0000200000002ec0 RDI: 0000000000000003 [ 2948.106016][T10283] RBP: 00007f4ea8f23090 R08: 0000000000000000 R09: 0000000000000000 [ 2948.106082][T10283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2948.106097][T10283] R13: 00007f4ea8226038 R14: 00007f4ea8225fa0 R15: 00007f4ea834fa48 [ 2948.106130][T10283] [ 2948.567329][ T1704] usb 5-1: USB disconnect, device number 32 [ 2948.690758][ T1699] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 2948.703707][T10292] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10852'. [ 2948.717950][T10292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10852'. [ 2948.816391][T10297] netlink: 'syz.2.10853': attribute type 1 has an invalid length. [ 2948.847985][ T1699] usb 4-1: config 1 descriptor has 1 excess byte, ignoring [ 2948.860554][ T1699] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 2948.873699][ T1699] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2948.884721][ T1699] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2948.893165][ T1699] usb 4-1: Product: syz [ 2948.897413][ T1699] usb 4-1: Manufacturer: syz [ 2948.902064][ T1699] usb 4-1: SerialNumber: syz [ 2948.953133][T10297] 8021q: adding VLAN 0 to HW filter on device bond8 [ 2949.129359][T10284] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2949.151893][ T1699] usb 4-1: USB disconnect, device number 79 [ 2949.225679][ T7246] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 2949.380411][ T7246] usb 3-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 2949.390420][ T7246] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2949.427008][ T7246] usb 3-1: config 0 descriptor?? [ 2949.444032][ T7246] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 2949.652893][ T7246] gspca_sunplus: reg_w_riv err -71 [ 2949.658810][ T7246] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 2949.691267][ T7246] usb 3-1: USB disconnect, device number 121 [ 2959.119280][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 2959.126390][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 3020.557544][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 3020.563954][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 3048.239677][ T3783] Bluetooth: hci0: command 0x0406 tx timeout [ 3081.997889][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 3082.004518][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 3093.515665][ T31] INFO: task kworker/1:11:7248 blocked for more than 143 seconds. [ 3093.523684][ T31] Tainted: G L syzkaller #0 [ 3093.531936][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3093.541631][ T31] task:kworker/1:11 state:D stack:23848 pid:7248 tgid:7248 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 3093.554015][ T31] Workqueue: usb_hub_wq hub_event [ 3093.559889][ T31] Call Trace: [ 3093.563254][ T31] [ 3093.566566][ T31] __schedule+0x17d9/0x56c0 [ 3093.571165][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 3093.576413][ T31] ? __pfx___schedule+0x10/0x10 [ 3093.581346][ T31] ? schedule+0x90/0x2b0 [ 3093.585848][ T31] schedule+0x164/0x2b0 [ 3093.590161][ T31] usb_kill_urb+0x1cf/0x2f0 [ 3093.594959][ T31] ? __pfx_usb_kill_urb+0x10/0x10 [ 3093.600920][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 3093.607180][ T31] usb_start_wait_urb+0x22a/0x5b0 [ 3093.612386][ T31] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 3093.618307][ T31] usb_control_msg+0x234/0x3e0 [ 3093.623268][ T31] hub_port_init+0xb0b/0x28c0 [ 3093.628807][ T31] hub_event+0x24e8/0x4d30 [ 3093.633338][ T31] ? do_raw_spin_unlock+0xf5/0x210 [ 3093.638842][ T31] ? __pfx_hub_event+0x10/0x10 [ 3093.643709][ T31] ? process_scheduled_works+0xa20/0x14e0 [ 3093.649547][ T31] ? rcu_is_watching+0x15/0xb0 [ 3093.654391][ T31] ? process_scheduled_works+0xa20/0x14e0 [ 3093.660524][ T31] process_scheduled_works+0xa8e/0x14e0 [ 3093.666799][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 3093.672857][ T31] ? assign_work+0x3cf/0x5d0 [ 3093.677678][ T31] worker_thread+0xa47/0xfb0 [ 3093.682387][ T31] kthread+0x388/0x470 [ 3093.686874][ T31] ? __pfx_worker_thread+0x10/0x10 [ 3093.692269][ T31] ? __pfx_kthread+0x10/0x10 [ 3093.697180][ T31] ret_from_fork+0x514/0xb70 [ 3093.701857][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 3093.707125][ T31] ? __switch_to+0xc89/0x1420 [ 3093.711880][ T31] ? __pfx_kthread+0x10/0x10 [ 3093.716972][ T31] ret_from_fork_asm+0x1a/0x30 [ 3093.721792][ T31] [ 3093.724923][ T31] [ 3093.724923][ T31] Showing all locks held in the system: [ 3093.733084][ T31] 1 lock held by khungtaskd/31: [ 3093.738089][ T31] #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 3093.748882][ T31] 2 locks held by getty/5382: [ 3093.753615][ T31] #0: ffff8880328c10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 3093.763884][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 3093.774755][ T31] 5 locks held by kworker/1:11/7248: [ 3093.781939][ T31] #0: ffff8880202aa540 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 3093.793472][ T31] #1: ffffc900033f7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 3093.805852][ T31] #2: ffff88802b77e1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 3093.814827][ T31] #3: ffff88802b713568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x20a1/0x4d30 [ 3093.824869][ T31] #4: ffff88802bb75660 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x20c9/0x4d30 [ 3093.834970][ T31] [ 3093.837729][ T31] ============================================= [ 3093.837729][ T31] [ 3093.846260][ T31] NMI backtrace for cpu 0 [ 3093.846278][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 3093.846300][ T31] Tainted: [L]=SOFTLOCKUP [ 3093.846306][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 3093.846316][ T31] Call Trace: [ 3093.846322][ T31] [ 3093.846329][ T31] dump_stack_lvl+0xe8/0x150 [ 3093.846358][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 3093.846463][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 3093.846496][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 3093.846520][ T31] sys_info+0x135/0x170 [ 3093.846539][ T31] watchdog+0xfd7/0x1030 [ 3093.846565][ T31] ? watchdog+0x1c7/0x1030 [ 3093.846588][ T31] kthread+0x388/0x470 [ 3093.846612][ T31] ? __pfx_watchdog+0x10/0x10 [ 3093.846629][ T31] ? __pfx_kthread+0x10/0x10 [ 3093.846652][ T31] ret_from_fork+0x514/0xb70 [ 3093.846677][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 3093.846699][ T31] ? __switch_to+0xc89/0x1420 [ 3093.846720][ T31] ? __pfx_kthread+0x10/0x10 [ 3093.846749][ T31] ret_from_fork_asm+0x1a/0x30 [ 3093.846775][ T31] [ 3093.846781][ T31] Sending NMI from CPU 0 to CPUs 1: [ 3093.965313][ C1] NMI backtrace for cpu 1 [ 3093.965335][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 3093.965361][ C1] Tainted: [L]=SOFTLOCKUP [ 3093.965368][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 3093.965381][ C1] RIP: 0010:mark_lock+0xa/0x190 [ 3093.965415][ C1] Code: df 48 8b 2c 24 e9 b6 fd ff ff 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 41 56 41 55 41 54 53 <8b> 46 20 89 c1 81 e1 00 00 03 00 83 f9 01 bb 09 00 00 00 83 db 00 [ 3093.965432][ C1] RSP: 0018:ffffc90000a08520 EFLAGS: 00000046 [ 3093.965449][ C1] RAX: 0000000000000002 RBX: ffff88801e280c38 RCX: 0000000000000003 [ 3093.965462][ C1] RDX: 0000000000000008 RSI: ffff88801e280c18 RDI: ffff88801e280000 [ 3093.965476][ C1] RBP: 0000000000000000 R08: ffffffff8176f27f R09: 0000000000080000 [ 3093.965489][ C1] R10: 0000000000000000 R11: ffffffff8eb59c60 R12: 0000000000000002 [ 3093.965502][ C1] R13: ffff88801e280c18 R14: ffff88801e280000 R15: 0000000000000003 [ 3093.965516][ C1] FS: 0000000000000000(0000) GS:ffff888125054000(0000) knlGS:0000000000000000 [ 3093.965532][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3093.965545][ C1] CR2: 000055cb5c699660 CR3: 000000000e946000 CR4: 00000000003526f0 [ 3093.965563][ C1] Call Trace: [ 3093.965570][ C1] [ 3093.965581][ C1] __lock_acquire+0x683/0x2cf0 [ 3093.965610][ C1] ? chacha_permute+0x4ce/0xf00 [ 3093.965716][ C1] ? unwind_next_frame+0x8f/0x2550 [ 3093.965735][ C1] ? lock_acquire+0x106/0x350 [ 3093.965762][ C1] ? unwind_next_frame+0x8f/0x2550 [ 3093.965779][ C1] lock_acquire+0x106/0x350 [ 3093.965803][ C1] ? unwind_next_frame+0x8f/0x2550 [ 3093.965825][ C1] ? unwind_next_frame+0x8f/0x2550 [ 3093.965843][ C1] ? kasan_record_aux_stack+0xbd/0xd0 [ 3093.965864][ C1] ? unwind_next_frame+0x8f/0x2550 [ 3093.965883][ C1] unwind_next_frame+0xac/0x2550 [ 3093.965900][ C1] ? unwind_next_frame+0x8f/0x2550 [ 3093.965921][ C1] ? kasan_save_stack+0x3e/0x60 [ 3093.965944][ C1] ? unwind_next_frame+0x8f/0x2550 [ 3093.965964][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 3093.965988][ C1] arch_stack_walk+0x11b/0x150 [ 3093.966010][ C1] ? kasan_record_aux_stack+0xbd/0xd0 [ 3093.966031][ C1] stack_trace_save+0xa9/0x100 [ 3093.966053][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 3093.966074][ C1] ? chacha_block_generic+0x5d7/0xd90 [ 3093.966106][ C1] ? __lock_acquire+0x683/0x2cf0 [ 3093.966131][ C1] kasan_save_stack+0x3e/0x60 [ 3093.966153][ C1] ? kasan_save_stack+0x3e/0x60 [ 3093.966175][ C1] ? kasan_record_aux_stack+0xbd/0xd0 [ 3093.966216][ C1] kasan_record_aux_stack+0xbd/0xd0 [ 3093.966242][ C1] insert_work+0x3d/0x330 [ 3093.966262][ C1] __queue_work+0xcd8/0x10a0 [ 3093.966286][ C1] ? __queue_work+0x1ea/0x10a0 [ 3093.966310][ C1] call_timer_fn+0x192/0x5e0 [ 3093.966337][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 3093.966359][ C1] ? call_timer_fn+0xd4/0x5e0 [ 3093.966385][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 3093.966416][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 3093.966435][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 3093.966458][ C1] __run_timer_base+0x67e/0x8b0 [ 3093.966482][ C1] ? ktime_get+0x45/0x220 [ 3093.966509][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 3093.966535][ C1] ? ktime_get+0x1f5/0x220 [ 3093.966558][ C1] ? lapic_next_event+0x11/0x20 [ 3093.966588][ C1] run_timer_softirq+0xb7/0x170 [ 3093.966613][ C1] handle_softirqs+0x225/0x840 [ 3093.966635][ C1] ? __irq_exit_rcu+0xca/0x220 [ 3093.966659][ C1] __irq_exit_rcu+0xca/0x220 [ 3093.966679][ C1] irq_exit_rcu+0x9/0x30 [ 3093.966698][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 3093.966730][ C1] [ 3093.966736][ C1] [ 3093.966744][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3093.966766][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 3093.966795][ C1] Code: dc 7f 02 e9 13 05 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 9a 19 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 3093.966811][ C1] RSP: 0018:ffffc90000197e40 EFLAGS: 00000242 [ 3093.966827][ C1] RAX: 0000000002b809d9 RBX: ffffffff819ab450 RCX: 0000000080000001 [ 3093.966841][ C1] RDX: 0000000000000001 RSI: ffffffff8e22be89 RDI: ffffffff8c4bdb80 [ 3093.966854][ C1] RBP: ffffc90000197f10 R08: ffff8880b87338db R09: 1ffff110170e671b [ 3093.966869][ C1] R10: dffffc0000000000 R11: ffffed10170e671c R12: 0000000000000000 [ 3093.966883][ C1] R13: 1ffff11003c50000 R14: 1ffff92000032fd0 R15: dffffc0000000000 [ 3093.966899][ C1] ? do_idle+0x2e0/0x540 [ 3093.966927][ C1] default_idle+0x9/0x20 [ 3093.966946][ C1] default_idle_call+0x72/0xb0 [ 3093.966967][ C1] do_idle+0x2e0/0x540 [ 3093.966991][ C1] ? __pfx_do_idle+0x10/0x10 [ 3093.967016][ C1] ? do_idle+0x4d1/0x540 [ 3093.967039][ C1] cpu_startup_entry+0x43/0x60 [ 3093.967063][ C1] start_secondary+0x101/0x110 [ 3093.967087][ C1] common_startup_64+0x13e/0x157 [ 3093.967115][ C1] [ 3094.461372][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 3094.468333][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 3094.479061][ T31] Tainted: [L]=SOFTLOCKUP [ 3094.483487][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 3094.493568][ T31] Call Trace: [ 3094.496889][ T31] [ 3094.500017][ T31] vpanic+0x56c/0xa60 [ 3094.504168][ T31] ? __pfx___schedule+0x10/0x10 [ 3094.509068][ T31] ? __pfx_vpanic+0x10/0x10 [ 3094.513613][ T31] ? nmi_trigger_cpumask_backtrace+0x207/0x380 [ 3094.519815][ T31] panic+0xc5/0xd0 [ 3094.523584][ T31] ? __pfx_panic+0x10/0x10 [ 3094.528069][ T31] ? preempt_schedule_common+0x82/0xd0 [ 3094.533593][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 3094.538999][ T31] ? nmi_trigger_cpumask_backtrace+0x314/0x380 [ 3094.545224][ T31] ? nmi_trigger_cpumask_backtrace+0x319/0x380 [ 3094.551711][ T31] watchdog+0x1030/0x1030 [ 3094.556100][ T31] ? watchdog+0x1c7/0x1030 [ 3094.560658][ T31] kthread+0x388/0x470 [ 3094.564784][ T31] ? __pfx_watchdog+0x10/0x10 [ 3094.569509][ T31] ? __pfx_kthread+0x10/0x10 [ 3094.574154][ T31] ret_from_fork+0x514/0xb70 [ 3094.578808][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 3094.584149][ T31] ? __switch_to+0xc89/0x1420 [ 3094.588867][ T31] ? __pfx_kthread+0x10/0x10 [ 3094.593514][ T31] ret_from_fork_asm+0x1a/0x30 [ 3094.598374][ T31] [ 3094.602060][ T31] Kernel Offset: disabled [ 3094.606409][ T31] Rebooting in 86400 seconds..