last executing test programs: 9.496867117s ago: executing program 2 (id=673): ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(0xffffffffffffffff, 0xc0245720, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000140), &(0x7f00000001c0)=0x4) r2 = socket$netlink(0x10, 0x3, 0x4) syz_genetlink_get_family_id$tipc(0x0, r2) sendmsg$TIPC_CMD_SHOW_PORTS(r2, 0x0, 0x4000000) r3 = socket$igmp(0x2, 0x3, 0x2) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xc}, @hci_rp_le_read_supported_states={{0x3}, {0x40, "481a20001200"}}}}, 0xf) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}], {0x14}}, 0x74}}, 0x0) r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r6, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 1', 0x1b) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f00000008c0)={'filter\x00', 0x7, 0x4, 0x404, 0x0, 0x218, 0x10c, 0x324, 0x324, 0x324, 0x4, &(0x7f0000000280), {[{{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, 0xff000330, 0xffffffff, 0x4, 0x0, {@mac, {[0xff, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@local, {[0xff, 0x0, 0xff, 0xff, 0xff, 0xff]}}, 0xfff2, 0x101, 0x79, 0x1, 0x7ff, 0x8, '\x00', 'vcan0\x00', {0xff}, {0xff}, 0x0, 0x4}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @mac=@local, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x8, 0x1}}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="07aebe92cc85", @empty, @loopback, @broadcast, 0x8}}}, {{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x1, 0x1}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x450) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r7, 0x40405514, &(0x7f00000003c0)={0x9, 0x2, 0xfff, 0x5, '\x00', 0x13}) r8 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r8, 0xc4c85513, &(0x7f0000000680)={{0x9, 0x5, 0xf7, 0x5, 'syz1\x00'}, 0x0, [0x7f, 0x4, 0x400, 0x2, 0x9, 0x4, 0x3, 0x5, 0x3, 0x7fff, 0x0, 0x7, 0xd11c, 0x0, 0x29, 0x1eff400000000000, 0xc127, 0x10000000003, 0x400, 0xa7e7, 0x0, 0x28, 0x22, 0x4, 0x2b, 0x0, 0x100000000, 0x10, 0x5, 0x3, 0x2, 0x3, 0xffffffff, 0xe6, 0x90, 0x7fffffff, 0x3, 0xa, 0xfff, 0x6, 0xb5a, 0x0, 0x2, 0x0, 0x80, 0xf, 0x8000000000000001, 0x0, 0xa, 0x5, 0xb40, 0x2, 0x3, 0x3, 0x71, 0x8, 0x1, 0x200000000, 0x0, 0x9, 0x9, 0x3, 0x7fe, 0x4, 0x0, 0x8c, 0xffffffffffffffff, 0x2, 0x7f, 0x2, 0x6, 0x3, 0x9, 0x1, 0x9, 0x3, 0x800, 0x5, 0x3, 0xb947, 0x2, 0x8, 0x80000001, 0x2, 0x54, 0x3c, 0x5, 0x4, 0x3, 0x7fffffff, 0x26c9, 0x9, 0x10001, 0x8, 0x400, 0xf, 0xfffffffffffffff6, 0x10001, 0x14, 0xffffffffffffffff, 0x6, 0x6, 0xcb26, 0xa, 0x100000001, 0x3, 0x7fffffffffffffff, 0x2, 0x0, 0xf2, 0x9, 0xffff, 0x5, 0x76, 0x8, 0x8, 0x1ff, 0x6, 0xffff, 0xbe6, 0x9, 0x3, 0x3, 0x5, 0x2, 0x401, 0x6, 0x5]}) 6.625544343s ago: executing program 3 (id=691): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x438, 0xffffffff, 0x240, 0x240, 0x240, 0xfeffffff, 0xffffffff, 0x368, 0x368, 0x368, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@mcast2, @empty, [0x47e128f2bce82ddb, 0xff, 0x0, 0xffffffff], [0xff, 0xffffff00, 0xff, 0xffffff00], 'veth0_to_bond\x00', 'veth1_vlan\x00', {0xff}, {}, 0x6, 0x8, 0x1, 0x8}, 0x2f2, 0x138, 0x160, 0x0, {}, [@common=@hbh={{0x48}, {0x5e, 0xd, 0x0, [0x1868, 0x8, 0xfffd, 0x7, 0x8, 0x3, 0x5, 0x1ff, 0x0, 0xffff, 0x6, 0x7ff, 0x7, 0x6, 0x81, 0x2], 0x5}}, @common=@dst={{0x48}, {0xffffff80, 0x2, 0x1, [0x6, 0x1, 0xd, 0xc, 0x81, 0x7fff, 0x5, 0x0, 0x81, 0xda8, 0x9, 0x1, 0x8, 0x2, 0x9, 0x2], 0x6}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x1000000, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x4, 0x1}, {0x1, 0x6, 0x1}, {0x0, 0x2, 0x4}, 0x8ff, 0x3}}}, {{@ipv6={@private0, @loopback, [0xff], [0x0, 0xff, 0xff000000, 0xffffff00], 'veth1_virt_wifi\x00', 'batadv_slave_0\x00', {}, {}, 0xae, 0xe7, 0x4, 0x44}, 0x0, 0xf8, 0x128, 0x0, {}, [@common=@ipv6header={{0x28}, {0xc, 0x5c4274de50300c04}}, @common=@hl={{0x28}, {0x1, 0x5}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x3, 0x1}, {0x4, 0x0, 0x6}, 0x6, 0x817e}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) 6.614906775s ago: executing program 2 (id=692): syz_emit_ethernet(0x4f, &(0x7f00000000c0)=ANY=[@ANYBLOB="d8f09b7a6252460dd300000088a832008100220d884700"/38], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000a40)={'bridge_slave_1\x00'}) syz_usb_connect(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120150026ae63240cd0c800086b201020301090224000202ecb08d"], 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = socket$kcm(0x10, 0x2, 0x0) listen(r2, 0xfffffffd) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e020000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = syz_io_uring_setup(0x82e, &(0x7f0000000240)={0x0, 0x2457, 0x400, 0x1000002, 0x20000}, &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000000)) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000100)='wg0\x00', 0x4) syz_clone(0xa2000000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0xc1842, 0x0) syz_usb_disconnect(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4, 0x2}, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 6.436624281s ago: executing program 3 (id=695): socket(0x1e, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000600)={@local, @remote, @void, {@ipv4={0x800, @tipc={{0x17, 0x4, 0x1, 0x1, 0x7c, 0x60, 0x8000, 0x58, 0x6, 0x0, @multicast2, @multicast2, {[@ssrr={0x89, 0x7, 0x96, [@local]}, @timestamp_addr={0x44, 0x34, 0x3f, 0x1, 0x0, [{@dev={0xac, 0x14, 0x14, 0x36}, 0x7}, {@loopback}, {@local, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7ff}, {@multicast2, 0x8}, {@broadcast, 0xd9}]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xb2, [@rand_addr=0x64010101]}]}}, @payload_direct={{{{0x20, 0x0, 0x1, 0x0, 0x1, 0x8, 0x1, 0x2, 0x44, 0x0, 0x2, 0x7, 0x0, 0x3, 0x8, 0xc39, 0x3, 0x4e23, 0x4e25}, 0x1, 0x2}}}}}}}, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x420001, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000040)=0x3) set_mempolicy(0x8006, 0x0, 0x5) r1 = syz_open_dev$dri(&(0x7f0000000340), 0x0, 0x204003) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) socket(0x2, 0x80805, 0x0) close(0x3) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/sockstat\x00') getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000180)={@mcast2, 0x0}, 0x0) bind$packet(r4, &(0x7f00000002c0)={0x11, 0x0, r5, 0x1, 0x1, 0x6, @local}, 0x14) pread64(r4, &(0x7f0000000500)=""/31, 0x1f, 0x40000000009) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x4008, r1}, 0x18) bind$inet(r6, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000", @ANYRES32=r9, @ANYBLOB, @ANYRES32=r8, @ANYBLOB="0000000000000000b7050000080000004600000076000000bf98000000000000b5080000000000008500000007000000be00"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_ep_read(r3, 0xff, 0x0, 0x0) 5.075320305s ago: executing program 1 (id=701): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x226482, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/timer_list\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES8], 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x0) fcntl$getflags(r0, 0x401) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.7608059s ago: executing program 1 (id=702): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x4e, &(0x7f00000003c0), 0x0, 0xde01, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x8}, 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c0000001000ffff27bd7000fadbdf2500000000", @ANYRES32=0x0, @ANYBLOB="387a06002b9205003c0012800b000100697036746e6c00002c0002801400020000000000000000ff0000ffff64010102140003"], 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 4.426269073s ago: executing program 1 (id=703): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = fsopen(&(0x7f0000000600)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x1) fchdir(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x40d, 0x70bd2e, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x20841, 0x10}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0xdf}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x2}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}}, 0x8000) lseek(r3, 0x3, 0x1) pidfd_getfd(r2, r2, 0x0) unshare(0x400) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) ioctl$TIOCGPTLCK(r5, 0x80045439, 0xfffffffffffffffe) setsockopt$sock_int(r0, 0x1, 0x15, &(0x7f0000001e00)=0x5, 0x4) 4.152638121s ago: executing program 1 (id=704): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000034709d405f0530c6acb60102030109021200fd000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000005c0)=ANY=[@ANYBLOB="400d010000001dfc76e67209608393bc5163493b005249f6542a895c27f503d24c6518b754329b94ac486eb542befdc0893d031ba1aafec5413579809428a0cf46ee25b2da5aad17777836169e44874491bc8785c0e375934d0b3867e220d567a6147b51dca31373853496c793d281e03d0344a12ae684e2"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000a80)={0x34, &(0x7f00000004c0)=ANY=[@ANYBLOB="200d0007004f6b261d1c8f1ec20d356507"], 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000060000000800000008"], 0x50) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r1, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000180)=0xb27, 0x4) connect$inet(r1, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendmmsg(r1, &(0x7f0000004fc0)=[{{0x0, 0x0, &(0x7f0000001800)}}, {{0x0, 0x0, &(0x7f0000004e80)=[{&(0x7f0000000000)='\a', 0x1}], 0x1}}], 0x3ffff50, 0xc840) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000410000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="d2ff0600600100004199dec6aa4a", 0x0, 0x40d5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) setsockopt$MRT_TABLE(r5, 0x0, 0xcf, &(0x7f0000000200)=0xff, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000380)=r3, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa, 0x6}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xfff3}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x289, 0x80}, 0x20000800) sendto$inet(r1, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x5e, 0x0, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000040)={0x3, 0x2b, 0x4000007, 0x10, 0x4, 0x100, 0x0, 0xba, 0x1}) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 4.076200849s ago: executing program 4 (id=705): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x129240, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000540)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) ioctl$IOMMU_HWPT_ALLOC$TEST(r1, 0x3b89, &(0x7f00000001c0)={0x28, 0x2, r4, r2, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000180)}) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000600)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r1, 0x3ba0, &(0x7f0000000640)={0x48, 0xa, r6, 0x0, r7}) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$ocfs2_control(0xffffff9c, &(0x7f0000000040), 0x40000, 0x0) (async) r8 = syz_open_dev$evdev(&(0x7f000001fa80), 0x20000000, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r8, @ANYBLOB="03"], 0x0) (async) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r1, 0x3ba0, &(0x7f0000000000)={0x48, 0xa, r3, 0x0, r10}) 3.714259873s ago: executing program 4 (id=706): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x810}, 0x20004098) 3.57397479s ago: executing program 4 (id=708): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/timer_list\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES8], 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="640000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000002004400128009000100626f6e6400000000340002800800030081000000080005"], 0x64}}, 0x0) 3.542612375s ago: executing program 3 (id=709): getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@remote, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@private1}}, &(0x7f00000001c0)=0xe8) r1 = getegid() fstat(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_usb_connect$uac1(0x0, 0xb1, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000106b1d0101890edd00030109029f0000000000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c13070000000c24020201010608000010000c24020000000300000000000924060006010000000924030000000005000b2406050001", @ANYBLOB="80"], 0x0) syz_usb_control_io(r3, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000800)={0x84, &(0x7f0000000380)={0x40, 0xd, 0x5, "7bbf53881f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x40, 0x19, 0x2, "2e9e"}, 0x0, 0x0, 0x0, 0x0}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="560000007d020000003d000200060000000200000000000000000000000000002080ffffffff04000000050000000000e0000004002940265c0500252e7b2edd544d750000002673dab1847ae64f7185df8d48fc03", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r2], 0x56) listns(&(0x7f0000000080)={0x20, 0x0, 0x200000000001, 0x20000000}, 0x0, 0x0, 0x0) 3.147085404s ago: executing program 4 (id=711): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') r1 = openat$cgroup_ro(r0, 0x0, 0x275a, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000008c0)={'syztnl2\x00', &(0x7f0000000840)={'syztnl2\x00', 0x0, 0x2f, 0x8, 0x6, 0x5, 0x8, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x10, 0x5, 0x3}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000009c0)={0x100, 0x0}, 0x8) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000b00)={r3, &(0x7f0000000a00)='#*-\x00', 0x2, &(0x7f0000000a40)={@_ha_fsid={[0x400, 0x5]}, {0x8, 0x104e, 0xfffffff8, 0xff}}, 0xa, &(0x7f0000000a80), &(0x7f0000000ac0)=0x1000}) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000600)={r7, r4, 0x25, 0x10, @void}, 0x10) r8 = syz_open_dev$loop(&(0x7f0000000080), 0x80000001, 0x162842) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000001ac0)={r6, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59de9737f03f4c72a964a02447a75df8a67772fd29f35239d200000000000000000000000000000000ecff00", "24431a1e77a68e00000010e200", [0x0, 0x400]}}) ioctl$LOOP_CLR_FD(r8, 0x4c01) r9 = dup(r8) write$UHID_INPUT(r9, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x2, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="180000001000004d00feff1000000007122a00", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000065b90000ffffffff18120000", @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018240000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000008520000005000000185400000300000000000000000000001854000000000000000000000000000085100000fbffffff9500000000000000"], &(0x7f0000000780)='GPL\x00', 0x4, 0x76, &(0x7f00000007c0)=""/118, 0x0, 0x3a, '\x00', r4, @fallback=0xc, r3, 0x8, &(0x7f0000000900)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000980)={0x3, 0x2, 0x9, 0x4}, 0x10, r5, 0xffffffffffffffff, 0x3, &(0x7f0000000b40), &(0x7f0000000b80)=[{0x5, 0x4}, {0x4, 0x2, 0x2, 0xb}, {0x2, 0x4, 0x4, 0x4}], 0x10, 0x1}, 0x94) syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x0) epoll_create1(0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x111, 0x5}}, 0x20) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000078004800090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000002f34001280200001800e000100636f6e6e6c696d69740000000c00028008000140000007ff10000000000001006c6173740000000008000340000001", @ANYRES16=r11], 0xc0}}, 0x20050800) writev(r10, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) writev(r3, &(0x7f0000000580)=[{&(0x7f0000000140)="1556ea457195576920cd53b23832700932312b67f2e613a392414a3103cb616422747f74759971621c14989db4e5fab95e9ca02851b28dcf992f9ac6dd0373adba17e4a70957fdf46e637deb8b6cc27c72ff024a5ce596a6dca5a5aba6b2e1a866fa301c858dd19e412e316a22567ffe73ed1da8f21f97bad4df89b6b96ee12a28753a71b4f8cda058d17d41a6511a19ef07c271a9aeff1cc20103e2775819", 0x9f}, {&(0x7f0000000200)="e67762979bd436841a0cd54125ac55b08e8127a0c4d0a50593061c09830eef8b915615c6cf202e0cc2860be85c978b43dee4da6bcc311bc2cf0a3c8d999cdcc37f9fec6c4b28deb84fe8d5ad090cd97fc3311d59e2", 0x55}, {&(0x7f0000000340)="88a2a7dea40a0d11ffcb37b1d1a35f7e0c6f7024a9756f06da2f1094d70cbebbb1d52a4ef46cd773f3627c03dd72d6170add360cfb6e63fa9f36534273b7616cc54af067ef8fcac934b656c45f23598e7e60fc9719ae26e70c42a16b579541fb565c682cd7e1348ceb20395228158818c64105959fd81077617e9e83b9445dd3d1f45412c86f2f191652e1f99610ba8e33366cf7f6601ddab43b67970caa2f1205ca543614243c8bc32b684d701a9975fc8df07d2ce3ac0f74821b26360505ba126f94e113ad458dc287671a8070fd915c79c0886540f633d3ea69c38c62dc50389ca7f046507070de", 0xe9}, {&(0x7f0000000440)="afb3c288310e93c8210c35b040194a8f93b3f9", 0x13}, {&(0x7f0000000480)="2143af813dd22c2d317b5795117c889df9922315a0657a20988b6409d5d0873ea09c8b9c5b82a96c715bc6dbd72020d449aac26a0549d50f7614a09158d0d0697ad7344c20f1c93866ee0951bbd4198062d40ff8e7c7bea319d3b0ea8f1c0af15ffee17593bd8de9e84617fe4823a4bc5699495d6f062b2d4e6bbd4b6c08163a2f233e91f8a831365e283972b33ffdf9698e847c68fcba6e245e3a3d62d5a7233d2f689f0e1cf6763c6b79840249d1b3733bae76bbd860f9b0835a455cbf", 0xbe}], 0x5) 3.144176375s ago: executing program 2 (id=713): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x2, 0x7, 0x5, 0x10}]}) (async) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x2710}, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459ba", 0x54}], 0x3}], 0x1, 0x40800) r4 = syz_io_uring_setup(0x1940, &(0x7f0000000300)={0x0, 0x6, 0x20000, 0x2, 0x2dc}, &(0x7f0000000380), &(0x7f0000000440), &(0x7f0000000480)) fsetxattr$trusted_overlay_redirect(r4, &(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x8, 0x1) (async) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000780)=""/92, 0x5c}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x2121) listen(r1, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) accept4(r1, 0x0, 0x0, 0x0) (async) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r0, 0xc0205866, &(0x7f0000000200)={&(0x7f00000000c0), 0x1, &(0x7f0000000100)=[{}], &(0x7f00000001c0)}) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x101}]}) (async) getrusage(0xffffffffffffffff, &(0x7f0000000240)) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000319021508fd070100e56a0102030109022400010c0a40060904000702a35fc30309050803"], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) 2.919418452s ago: executing program 2 (id=715): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa, 0x6}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003180)=@newtfilter={0xe94, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe60, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xa797, 0xb, 0x20000000, 0x1000005}, 0x4f, 0x5}, [{0x0, 0x3, 0x9, 0x1, 0xf, 0x9}, {0x9, 0x3ff, 0x8, 0x1, 0xb5c, 0x3}, {0x8, 0x3ff, 0x7, 0x800, 0xe07, 0x4}, {0xffff93ee, 0x5dfd, 0x1, 0x2, 0xfffffffe, 0x39}, {0xd71, 0xff, 0x80000, 0x81, 0x3}, {0x4, 0x7, 0x7, 0xb, 0x8001, 0x8}, {0x9, 0x0, 0x4, 0x6, 0x7ff, 0xa1}, {0x6, 0x8, 0x4, 0x8, 0xc, 0x6}, {0x1, 0x6, 0xfffffffd, 0x9, 0x8, 0x6}, {0x81, 0x1, 0x3, 0x400, 0x7, 0xffffeffa}, {0x8, 0xf5, 0x8, 0x1000, 0x7, 0x9}, {0x5, 0x2, 0x3, 0x7, 0x96, 0x10000}, {0x1ff, 0x9, 0x79, 0x6, 0x5, 0xfffffff8}, {0xffff76f4, 0x1e, 0x3, 0x1, 0x8, 0xc0}, {0x89c, 0x0, 0x101, 0x3, 0xffff, 0xd}, {0x7fff, 0x2, 0xaf, 0x80000001, 0x6, 0x9}, {0x800, 0x7, 0xdfcb, 0x8, 0x7f72, 0x6}, {0x3, 0x6, 0x5, 0x3, 0x8, 0x7}, {0x1, 0xfffffffd, 0x7ffffffe, 0x800, 0x4, 0x5}, {0xfffffffa, 0x8, 0x9, 0x9, 0x6, 0x1bad}, {0x272, 0x800, 0x7, 0xffffffff, 0x80000000, 0x2}, {0x3, 0x9, 0x8, 0x1, 0x40, 0x7}, {0x6, 0x6, 0x5, 0x2, 0x3, 0x101}, {0x6, 0x8001, 0x8, 0x6, 0xf, 0xfffffffc}, {0x3, 0x9, 0xa, 0x101, 0x6, 0xd495}, {0x929, 0x5, 0x1, 0x400000, 0x6, 0x9}, {0x1ff, 0x8, 0x8, 0x1, 0x0, 0x3}, {0x2, 0x3, 0x7, 0x0, 0x2, 0xb}, {0xcd, 0x6, 0xa00000, 0x10001, 0x7, 0x1}, {0xfffffffa, 0x1, 0x2d, 0x3, 0x2, 0x2}, {0xb224, 0x8, 0x7, 0x509, 0x5, 0xfce9}, {0x4080, 0x61a0, 0x8, 0x5a4, 0x200, 0x10}, {0x2, 0x0, 0x4, 0x3, 0x9, 0x800}, {0x427d, 0x8d, 0x908d, 0xffffff9c, 0x3, 0x8}, {0xd6, 0x3ff, 0x2, 0x10001, 0x9, 0x6}, {0x5, 0x5, 0x3, 0x1000, 0x80000001, 0x7}, {0x4fe49d73, 0x3, 0x30000000, 0x101, 0x9130, 0x7}, {0x2, 0xfffffffe, 0xfe, 0x8a69, 0x1, 0xc36}, {0x5c0, 0x6436, 0x8, 0x1, 0x4, 0x5}, {0xe26f, 0x200, 0x3, 0x85a, 0x608, 0xfffffffa}, {0x3, 0x8, 0x1000, 0x1000, 0x9, 0x2}, {0xa, 0x3, 0x40, 0xb0e, 0xc9d3, 0x7fff}, {0x10, 0x0, 0x4, 0x2, 0x8002, 0x3}, {0x8, 0x4, 0x24050b64, 0x84, 0x5, 0x8}, {0x8, 0x5e5, 0x4f0155f4, 0x8, 0x8}, {0xa08, 0x7, 0x2, 0x9, 0xfffffe00}, {0x0, 0x100, 0x2, 0x2, 0x3, 0x5e4}, {0x9, 0x7, 0x6, 0x81, 0x1ff, 0x8}, {0x1, 0xb2bfc89, 0x3, 0x7f, 0x10001, 0x2}, {0x8, 0xea31, 0x81, 0x1, 0x5, 0x18b4}, {0x78b83211, 0x6, 0x36d, 0x1, 0xe1, 0x1}, {0x1400, 0x0, 0x1, 0x800, 0x6, 0x6294}, {0x100, 0x0, 0x6, 0x7d, 0x7fffffff, 0x18}, {0x3, 0x2, 0x5, 0x7, 0x8, 0x4}, {0x0, 0xffff7c05, 0x7, 0xe, 0x9}, {0x3, 0x80, 0x7, 0x5, 0x714, 0x590}, {0x5, 0x8, 0xe, 0x8, 0x49a24dd3}, {0x7, 0x3, 0x4, 0xb3, 0x2, 0xfff}, {0x80000000, 0x7, 0x5, 0x30fd, 0x9, 0x7ff}, {0x8, 0xa, 0x1, 0x2, 0xc7e7, 0x1000}, {0x0, 0xffffffff, 0x4, 0x3, 0x157d, 0x7}, {0x6, 0x2, 0x6, 0x74f, 0x4, 0x4}, {0x20d, 0x6, 0x8, 0x3, 0x6, 0x4}, {0x4, 0xb, 0x3, 0xddd, 0x5, 0x5}, {0xd4f, 0x4, 0xffffffff, 0x7, 0x81, 0x200}, {0x7, 0x1, 0x0, 0x4, 0x80000000, 0xffff}, {0x88, 0x4, 0xe, 0x9, 0x8, 0x457}, {0x9, 0xb, 0x8, 0xff, 0xfffffffa, 0x3}, {0x7, 0x5, 0x9, 0x7, 0xf, 0x2}, {0x6, 0x8900, 0xcc, 0x100, 0xffffffe3, 0xff}, {0x8, 0x0, 0x6, 0x400, 0x80, 0xfffffffe}, {0x0, 0x8, 0x5, 0x1, 0xffffffff, 0x8}, {0xb00, 0x7, 0x3, 0x0, 0x7, 0x7}, {0xffff0001, 0xb1ee, 0x6, 0x5823, 0x5, 0x9d}, {0x1, 0x101, 0x80000001, 0x8, 0x46b45ec5, 0xda2}, {0x1, 0x140, 0x5, 0x6d, 0xe, 0x1000}, {0x6, 0x8, 0xfffffb89, 0xa0a0, 0x3, 0xffff}, {0x0, 0x8, 0x1, 0x6, 0x3, 0x3}, {0x400, 0x8, 0x800000, 0x8, 0x1}, {0x7, 0x80000001, 0x0, 0x7, 0x1, 0x100}, {0x9, 0x1, 0x9a, 0x5, 0x7, 0x6}, {0x6, 0x6, 0x3, 0x4, 0x2}, {0x1, 0x0, 0x800, 0x6, 0x4, 0x9}, {0x41, 0x3, 0x9cb8, 0x0, 0x14, 0x9}, {0x4, 0x6, 0x7, 0x71, 0x0, 0x5}, {0x27f6, 0xfffffff8, 0x80000000, 0x400, 0x9, 0x1000}, {0x5, 0x2, 0x6, 0xffffffba, 0x0, 0x2}, {0x5e70, 0x3, 0x7ff, 0x789, 0x5, 0x2}, {0x3db6, 0x9, 0xc, 0x8, 0x3, 0xdef}, {0xf3, 0x4, 0x4, 0x4, 0x5, 0x6}, {0xb57, 0x5, 0xb95, 0x9, 0xfff, 0x7}, {0x7, 0x200, 0x8, 0xfffeffff, 0x1ffc00, 0x8}, {0xfffffffe, 0x80d, 0x8, 0x7, 0x80a, 0x7}, {0x3, 0x81, 0x7, 0x4, 0x8, 0xcde5}, {0x572d, 0xb699, 0x5, 0x0, 0x8, 0xe}, {0x4bf, 0x3, 0x7, 0x1, 0x401}, {0x400, 0x0, 0x1, 0x0, 0x6, 0x3ff}, {0x101, 0x7, 0x4, 0x3c, 0x3, 0x1ff}, {0x4, 0x8, 0x4, 0xfff, 0x2, 0x1}, {0x3, 0x1, 0x1, 0x9, 0xffff, 0x7fff}, {0x9, 0x800, 0x40, 0x9, 0xffff, 0xbb9}, {0x7, 0x6, 0x9, 0x9, 0x9, 0xffff}, {0x7fff, 0xd8ac, 0x400000, 0x5, 0xbde}, {0x11, 0x9, 0x2ed6, 0x2, 0x0, 0x81}, {0x27d, 0xf, 0xcde, 0x6, 0x5, 0x114a}, {0x1, 0x8, 0x5, 0x8, 0x4, 0xa}, {0xd9, 0x47, 0x7e, 0x6, 0x401, 0x4}, {0xa, 0x7, 0xb69, 0x1, 0x1f, 0x80000000}, {0x10000, 0x6, 0x4, 0x10000, 0x2, 0xc4}, {0x7ff, 0x80, 0x6, 0xfffffff8, 0x3f7, 0x5}, {0x1198, 0x9, 0x5, 0x5, 0x8, 0x9}, {0x4, 0x6, 0xa, 0x6, 0x0, 0x3}, {0x3, 0xafb, 0x1, 0x7, 0x0, 0x4}, {0x1ff, 0x9, 0x2, 0x5, 0x7f, 0xc}, {0xffffffc0, 0x0, 0xb6, 0x3, 0xf000, 0x7}, {0x0, 0x62b, 0x8, 0x800, 0x0, 0x8}, {0x3, 0x3, 0x6, 0x57d, 0x7, 0xd5}, {0xe800, 0x5, 0x2, 0x211, 0x8, 0x1}, {0x3, 0x6, 0x6, 0x5, 0x8}, {0xffff, 0x7fffffff, 0x4c, 0x785, 0x3}, {0x9, 0x401, 0x5000, 0x0, 0x3, 0x1d7}, {0x3, 0x3, 0xf, 0xfddb, 0x6, 0x5}, {0x5, 0x0, 0x6, 0x9, 0x66, 0x4}, {0x8, 0x7, 0x4, 0x4, 0x2, 0x8}, {0x0, 0x6, 0x1, 0x5, 0x2, 0x9}, {0xe5, 0x43, 0x7ff, 0x2, 0x380, 0x2}, {0x8001, 0x5, 0x3, 0x8, 0xffffffff, 0x5}, {0x10000, 0x3, 0x400, 0xcb77, 0x2, 0xfe2a}], [{0x4}, {0x1}, {0x3}, {0x4, 0x1}, {0x3}, {0x2}, {0x5}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x2, 0x833b0195d0c1ead6}, {0x4, 0x1}, {0x2}, {0x2}, {}, {0x1}, {0x0, 0x1}, {0x6, 0x1}, {0x4}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {}, {0x5, 0x1}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5}, {0x1}, {0x4}, {0x2}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x3}, {0x3}, {0x4}, {0x4, 0xb0a1b2cb829f0c58}, {}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x6}, {0x2, 0x1}, {0x3}, {0x1}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x5}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x5}, {0x5}, {}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x4}, {0x4, 0x1}, {0x281f5cc8dc2390cd}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {0x1}, {0x44f390bc39b5fbbd, 0x1}, {0xb3ffe6e0e4e70638, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x3}, {0x5}, {0x4, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1}, {0x3}, {0x2, 0x2}, {0x4, 0x1}, {0x1, 0x3}, {0x5, 0x1}, {0x4}, {0x0, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0xe94}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.228130307s ago: executing program 2 (id=716): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x280, 0x1000, 0x0, 0x1, 0x0, {0x0, 0x0, 0x1}, {0x350, 0x20002, 0xfffffffd}, {0xf4ef}, {0x4, 0x0, 0x7fe}, 0x1, 0x100, 0x3e000000, 0xd614, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) 1.969968087s ago: executing program 4 (id=717): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x5, 0xfffffffb}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000901000000000000ffef05000000000800040001000000", 0x24) 1.888246245s ago: executing program 2 (id=718): socket(0x1e, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000600)={@local, @remote, @void, {@ipv4={0x800, @tipc={{0x17, 0x4, 0x1, 0x1, 0x7c, 0x60, 0x8000, 0x58, 0x6, 0x0, @multicast2, @multicast2, {[@ssrr={0x89, 0x7, 0x96, [@local]}, @timestamp_addr={0x44, 0x34, 0x3f, 0x1, 0x0, [{@dev={0xac, 0x14, 0x14, 0x36}, 0x7}, {@loopback}, {@local, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7ff}, {@multicast2, 0x8}, {@broadcast, 0xd9}]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xb2, [@rand_addr=0x64010101]}]}}, @payload_direct={{{{0x20, 0x0, 0x1, 0x0, 0x1, 0x8, 0x1, 0x2, 0x44, 0x0, 0x2, 0x7, 0x0, 0x3, 0x8, 0xc39, 0x3, 0x4e23, 0x4e25}, 0x1, 0x2}}}}}}}, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x420001, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000040)=0x3) set_mempolicy(0x8006, 0x0, 0x5) r1 = syz_open_dev$dri(&(0x7f0000000340), 0x0, 0x204003) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) socket(0x2, 0x80805, 0x0) close(0x3) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/sockstat\x00') getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000180)={@mcast2, 0x0}, 0x0) bind$packet(r3, &(0x7f00000002c0)={0x11, 0x0, r4, 0x1, 0x1, 0x6, @local}, 0x14) pread64(r3, &(0x7f0000000500)=""/31, 0x1f, 0x40000000009) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x4008, r1}, 0x18) bind$inet(r5, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000", @ANYRES32=r8, @ANYBLOB, @ANYRES32=r7, @ANYBLOB="0000000000000000b7050000080000004600000076000000bf98000000000000b5080000000000008500000007000000be00"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.695837071s ago: executing program 4 (id=719): socket(0x1e, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000600)={@local, @remote, @void, {@ipv4={0x800, @tipc={{0x17, 0x4, 0x1, 0x1, 0x7c, 0x60, 0x8000, 0x58, 0x6, 0x0, @multicast2, @multicast2, {[@ssrr={0x89, 0x7, 0x96, [@local]}, @timestamp_addr={0x44, 0x34, 0x3f, 0x1, 0x0, [{@dev={0xac, 0x14, 0x14, 0x36}, 0x7}, {@loopback}, {@local, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7ff}, {@multicast2, 0x8}, {@broadcast, 0xd9}]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xb2, [@rand_addr=0x64010101]}]}}, @payload_direct={{{{0x20, 0x0, 0x1, 0x0, 0x1, 0x8, 0x1, 0x2, 0x44, 0x0, 0x2, 0x7, 0x0, 0x3, 0x8, 0xc39, 0x3, 0x4e23, 0x4e25}, 0x1, 0x2}}}}}}}, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x420001, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000040)=0x3) set_mempolicy(0x8006, 0x0, 0x5) r1 = syz_open_dev$dri(&(0x7f0000000340), 0x0, 0x204003) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) socket(0x2, 0x80805, 0x0) close(0x3) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/sockstat\x00') getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000180)={@mcast2, 0x0}, 0x0) bind$packet(r3, &(0x7f00000002c0)={0x11, 0x0, r4, 0x1, 0x1, 0x6, @local}, 0x14) pread64(r3, &(0x7f0000000500)=""/31, 0x1f, 0x40000000009) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x4008, r1}, 0x18) bind$inet(r5, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000", @ANYRES32=r8, @ANYBLOB, @ANYRES32=r7, @ANYBLOB="0000000000000000b7050000080000004600000076000000bf98000000000000b5080000000000008500000007000000be00"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.422460581s ago: executing program 0 (id=721): socket$nl_netfilter(0x10, 0x3, 0xc) 1.2767459s ago: executing program 0 (id=722): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="40000000100001040000000000000000000005d6", @ANYRES32=0x0, @ANYBLOB="400d0000001200002000128008000100687372001400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x40010}, 0x4008044) 1.133994006s ago: executing program 3 (id=723): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400100001000010000000000000000000a010100000000000000000000000000e0000002000000000000001a0000000000000000fffe00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e00000010000000000000000000000000000000032000000fc010000000000000000000000000000030100000000000000000000140000000000000000000000000000000000000009000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000100008000000000fcffffff0000000000000020fcffffff0000000002000200cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000080016000062"], 0x140}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) 1.011123099s ago: executing program 3 (id=724): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuset.memory_pressure\x00', 0x275a, 0x0) writev(r1, &(0x7f0000001cc0)=[{&(0x7f0000001d00)="4673c875ca4d9cb6f1d39f116100f2510db1e88217a55acb8319f17ef647c524516c0e45ec91a98a614276cb3218541b012ff7c4500085a8a73f16de7d", 0x3d}, {&(0x7f0000001c00)="e146badcd6aca239c46b952e5dd493f4578940a27af1978ab8560c3b60f6060b76497e6650431a4ddd927750aae5b1792d322a1b3e349e18eb0d88e3ac7d84b4475809817555e4e5fef449336cea36e224bed5ca3cb833", 0x57}], 0x2) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000071ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) 750.908189ms ago: executing program 3 (id=725): r0 = syz_usb_connect(0x1, 0x51, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffe28, 0x0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) time(0x0) syz_usb_connect$uac1(0x5, 0x99, &(0x7f0000000180)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x87, 0x3, 0x1, 0x3, 0x20, 0x10}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x4, 0x78, &(0x7f0000000040)="a6625825eb1abb8c3440f3ada716b8834d194ee5ae4ca6289984d2b1a6cb32a48b87b44cb29d11df743043347ee096ec8d2df20b3951cde6e1609e5b887813ec50438554ceecedffc600cbf208a81b2e2912f67fd2e56479097477c9494b8af6530e481ff325d46c8c254fe367344c009e4175f471001b91") r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2}) r3 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r3, &(0x7f0000000000)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x20}}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000290000003b0000002f0000000000000018"], 0x30}, 0x40440c0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000001c0)=0x1135010, 0x4) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000000)=@attr_riscv64=@attr_ctrl={0x0, 0x1, 0x1, 0xfffffffffffffffe}) 502.21966ms ago: executing program 0 (id=726): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0xffffff, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_BITWISE_DATA={0xc, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "1f000000"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x114}}, 0x0) 426.461111ms ago: executing program 0 (id=727): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a005}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xa54, 0x18}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x50}, 0x1, 0xba01, 0xffffffc3}, 0x0) 346.242795ms ago: executing program 0 (id=728): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x4e, &(0x7f00000003c0), 0x0, 0xde01, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x8}, 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c0000001000ffff27bd7000fadbdf2500000000", @ANYRES32=0x0, @ANYBLOB="387a06002b9205003c0012800b000100697036746e6c00002c000280140002000000000000007fff0000ffff64010102140003"], 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 141.924489ms ago: executing program 0 (id=729): syz_usb_connect(0x0, 0x25c, 0x0, 0x0) r0 = socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0xeb) sendmmsg$unix(r2, &(0x7f000000ad00)=[{{&(0x7f0000000440)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000500)=[{&(0x7f00000004c0)="4d30995011cd33d1be1ee29fee73fe8396d94c4cdc5b1e0e6c5e", 0x1a}], 0x1, &(0x7f0000000780)=[@rights={{0x28, 0x1, 0x1, [r0, r1, r2, r0, r1, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [r2, r2, r2, r0, r1, r0, r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x98, 0x10}}, {{&(0x7f0000000840)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000c00)=[{&(0x7f00000008c0)="13ef858b976dda2e3f14728d4213e573f8f496ba7932e5fae1132881b4cbfce9de3d493c3f1a4522cd82f257b5955774d86b3d5f598311925f90bea2447e1c83251bf82fd952367e6a287690cb8d62b2a8fb7c062779ef4575254c3fa792d56532495d8972aa8336f2", 0x69}, {&(0x7f0000000940)}, {&(0x7f0000000980)="5ac294073666a42d88119770047e3645113c9b346757f5c492550c83c9544ad2eaa68ec628617e0046540f4b327877b35e094ce915724ab1f75d02e75c9fecaed480faead7cf2b3e656d23ba9a27aae1ac9a65fd47b421c81aa78753cd38b52b615f1840fa544ec6045f0afe983dc95046a0299e3f5ae73f38d8a11c2733d55f1eb30d282ea44f8c55caec8d5baf9c60bb874576043d048e42de16a8219c61b04fa2f70f6970086bd4787ee637276a4129d0f446517cd3f2961d4091995397cd5b5df7aa5a64dc96f4d683f5a28bf6f0d8a73f32b27ed4", 0xd7}, {&(0x7f0000000a80)="4482747bf276924610524e88870fbedb07548bbf7844e3edbdecb7367ce4ad5a", 0x20}, {&(0x7f0000000ac0)="c0c660f401f59aa7612b86275ffbe5ad1421c6c0963d4acce466a1c373ae63e51c6e64deab73a9f62a3c0fbe4fadd63f07906ea25eb397294e609735c7c066b1eebb96ecad91fe8cd369f0", 0x4b}, {&(0x7f0000000b40)="4b435f553c1ce8f23ea1609ea3b735473364718402a27ff16901b1207a20aad168083d2ef3a686b5a1b557c049e0d0f80311b1395aecfc86970a61eadc652bfd17666cf2d17ee9176c21632a2ff3089e59b92c0295d7300e2f4fe22aba0988851fe081c8294bcb7ea5b0a3a64351b5a3143fd38aca4063f8ad341483038950a98e6fed3e499a86e3e4422f5611a5fc1ef57945c0e91bfb0fbba3e93d423b8ac984e65bb45b8a81cb9ce9bb63b64ed34d94979ea5ec3cd7847766ea1c76", 0xbd}], 0x6, &(0x7f0000000d40)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r0]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, r2, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf0, 0x20040014}}, {{&(0x7f0000000e40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001140)=[{&(0x7f0000000ec0)="bee4fd59bb230d8e0dd6637155707c4a46b7a152a78b2fabb06a5b76d7fca5e86f8c54ef55b2ca07026e8f908bab1ce64c9660b4d5ca04d9259c51006608cf9cc5a7883612aae8708851a0f4ca46a428d54bc35599eb5175ee45235ab7ca90d70ccb0d92476fe08bfeb0deea344d0eb196ed0655896cc4992cf80900e0325f06a3de97cb7543b8d1118d84d8987be7f815faf1cf5b775acd8f4ca309e9753b9c440851412c43a8ea82cb92975842940302a2f96d921f9b0c84508b19226e8421680e2423149dcee17c344a96f4a15aad1d27351b9c7547d9cfdd55de7f5c02e2b9", 0xe1}, {&(0x7f0000000fc0)="81a325eb773354af8bb1a05762f30e05493af4c9ed7de5397f29b03fa39ff41b71fc6176cedf85ae0e2d238235de02a7e3d27db19d005348577a367c2900f72a6ccd3264de6e1cd810358f5ec0d6dce4f5ce7e5fb54fed1f8333b0818a9c68b76456b9f2d4c2b6aa2b3ec42251fdbd7b1c4f6b6b578a69e8c9bce4cfe363262cc4a40ea71de240c6f22642dad27ff0d68877d9578d49e04cc116879f0ec1704d19a6a1", 0xa3}, {&(0x7f0000001080)="35f217c76ee350bed6c7121a2ba433e8fca7bcea4f2c1f64a80293efe504e64e51882758337d42b149a4ce8843368b211e11a3edab85e1c256ea73cb48679480bc78844eb9641b9dd65d2f1fa6b66f09adea148edeb4d4c1ab00eff20659dd16802b4dbbb1a6e5daf7040e90ecba76111319b817430b5f6c6c4a519bad5cd025d88c844ad95745fa89a6f809dc0dc252f3a74cb6b4b430dce146f5dbb05be0e6ee1df7e2f9b1b0d1ef6a8a845c", 0xad}], 0x3, 0x0, 0x0, 0x8000}}, {{&(0x7f0000001180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f000000a4c0)=[{&(0x7f0000001200)="ddd193612b8c23d742504ff8b51b84b9fdfd1f82074e57799e29de7941bbfcbe5946072a8685b6ceb7f34fbf127859", 0x2f}, {&(0x7f00000083c0)="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", 0x1000}, {&(0x7f00000093c0)="6a166f58c5d724ab3d56ae025d9fac3dbdd64fc59a7bede4ba6271f25312886e4a47b3551cd754b580b31321d0e55e148dc996ae97ba8ed8540eef5ef7122a9946c029b9", 0x44}, {&(0x7f0000009440)="c1498cbdb69f019a5f3c0a11d005a3d838ba49aea60d9545158b9b82b6c33f9cddef41760f47b5b410c7f3713f1687e37323a32f2b8a0877788cdcfe6baa43fa0bbe6d15b2802b9a76582b5443babca284a566520559044f39a70914cdec9498094c64b3c3c0690e7e5cb651ca87ff3704c7b016c41b17a67c4885972dec0e06", 0x80}, {&(0x7f00000094c0)="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", 0x1000}], 0x5, &(0x7f000000a540)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18, 0x20000010}}, {{0x0, 0x0, &(0x7f000000a980)=[{&(0x7f000000a580)="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", 0xfa}, {&(0x7f000000a680)="0ce70c16fc2bd5217734d84b27c224e15710e1bfefdc18a22617a8ca669cd1e4cb94aee968e5fb7ac976b2bf651eaf318e4d9d12e0f00775874784f86fec5c408893299cbc602a6e6e2c43c5b14afbd386d51b1f3d2502349a2bdf1e298ed61aad6ec6cea7ad3435ae2647305195f2933abccca9a81c48ed0ffc86c68490fe6a67fcb9ce43186337227a049e8191cbb5b5e7cf77de1f4e049062d5a1eb4ae0a5114a81286de46fb0fe258b0707dd17c323c9303bb4e9af20b5fd943bd53f332c2a814a2632597a06ca1979b848004fc5a709262ec384058dddc91a94ee41a0", 0xdf}, {&(0x7f000000a780)="26088552625da2d020614c998e5e49d335f9897107bbdbae274646df3e1937daf9a506ac320a5d4496c2c99053c46cccbbcddef0ff65414fc959eb3787d57d250d48054b83ed9fe9a87d5851af3e75dea71300f39ac07b70c3dc90e8ead4970becc39ae238866cc19e538ba9c0810444b63cc6c94f9eb8a68a653e42caedad8077fe83e0bb329cf89b1a6bf6087f8ac08657638b8e87053d03ae08e3decd", 0x9e}, {&(0x7f000000a840)}, {&(0x7f000000a880)="b495160dd482f019e1a86b888d58c58160298fcfcd629e4b55b8110adcdbbdb4dab57709d20780589f7afbf4e9876fdc1dd8542eba97c4ae3f99d4d6e9d056b49a78901d058a904462f91a9ea36b113855b3481fc084c9dcb8940d475573cc34d012f2c1d5d2acfde95545dddaa43eb90aff61e7e7121766a7151bf88165da0414f2998575ffc2f974d3e444f2d3a00354c58582b6fdb8c614f5b74e868e4b9768304788360959eb4d7b62640213c8405adfa8ec59f394cad5453dfdc23fa8a0460bf47ac2b9e74f176ce7e9", 0xcc}], 0x5, &(0x7f000000ac40)=[@rights={{0x10}}, @rights={{0x28, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x90, 0x40}}], 0x5, 0x0) recvmmsg(r1, &(0x7f0000000000), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket(0x2000000000000021, 0x2, 0xfffffeff) connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r4, 0x0, 0x4, 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) sched_setattr(r5, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x52, 0xffffffff}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, 0x0) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newqdisc={0x14c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0xfff, 0x3ff, 0x3, 0x19, 0x6, 0x1f, 0x7}}]}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x803}, 0x20004004) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, 0x0) lsm_get_self_attr(0x67, 0x0, 0x0, 0x0) 134.90928ms ago: executing program 1 (id=730): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=ANY=[@ANYBLOB="000200002a00000728bd7000fbdbdf250800000008003b00", @ANYRES32, @ANYBLOB="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"], 0x200}, 0x1, 0x0, 0x0, 0x40006}, 0xe8e6034b79696ec6) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(r0, &(0x7f0000000480)=[{0x0}, {0x0}, {&(0x7f00000003c0)="77cccb0deedbb94f1afd3ccb469a6721cc637e9cbc7f0685c4ab02897a615638b1ba209474e485e5c676dab2f779fc45e14a15eb8cab8dce71eaea08ea87db5609774523b75431043e4a32f82c5b61bea2b9b0eff207d81c7b175cfcb3e448d7fcac8844402e9401582eeb4a08d247096e183b9b7de727a818150a153b9397c4cc61a6bd461f30fb84b679bca11d47c56904a9d359442a5c3693048b8aa179cf9385", 0xa2}, {0x0}, {&(0x7f0000000300)}], 0x5, 0x8, 0x20000006) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x52, 0x6, 0x40, '\x00', 0x10000}) ioctl$KVM_RUN(r2, 0xae80, 0x104000000000000) 0s ago: executing program 1 (id=731): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f00000002c0)={@dev={0xac, 0x14, 0x14, 0x19}, @remote}, 0x8) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc000, 0x0) ioctl$TUNSETGROUP(r2, 0x400454ce, 0xee00) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={&(0x7f0000000080)="14c1d057f65f2a57cabbe80c8cfc7f43c0617f19e9220beb48f211c2f45b85788ee38280b9113fb4cb0ebddd5c11bf8ef509cca2a4a3f21f70f6680a8a5a815c848cf060dc9f7c60148a94c7aabf19e16c4a356a22a4f1f56a39c1b0424dcabab9a6b384bfd9373de865f7985701f8b607", &(0x7f0000000100)=""/40, &(0x7f0000000140)="53811630a2d38bd8f9b62a0fc037e11067e4db345c5b6bcd4111c23fb6038bd60ecf2b95c2bdebf03621cc6f2c40dd61e0d338768fabd2d45644d8f57b40712890e56ac2bcd6bec447b179492d480e36f9333940554cc3ddcd187f6172e7f48cab0b42b45441ac0b72c0af4a7acbfce16258345fd85bb3622f9706a8181a8d982d105b42e08d712891315a041307fca822c232ef", &(0x7f0000000200)="4822571fae13b7df8774f350f981eda61d6d0e9cd1e3c401c374dc582bda0caff508cbb53df008bc69c07479a5a5d487e356b83e13476c30c7bca5140fea55e798c20b941c052cd83b8f169d892836a63a0867013ea1", 0x3, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4, r0}, 0x38) kernel console output (not intermixed with test programs): umber=3 [ 161.306829][ T5691] usb 4-1: Product: syz [ 161.314749][ T5691] usb 4-1: Manufacturer: syz [ 161.319542][ T5691] usb 4-1: SerialNumber: syz [ 161.339180][ T5691] usb 4-1: config 0 descriptor?? [ 161.352373][ T5691] hub 4-1:0.132: bad descriptor, ignoring hub [ 161.374705][ T5691] hub 4-1:0.132: probe with driver hub failed with error -5 [ 161.404050][ T5691] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.132/input/input11 [ 161.433072][ T7040] syzkaller0: entered promiscuous mode [ 161.440725][ T7040] syzkaller0: entered allmulticast mode [ 161.451564][ T7040] tipc: Started in network mode [ 161.458704][ T7040] tipc: Node identity a2531f9dab1b, cluster identity 4711 [ 161.458842][ T5718] usb 5-1: config 213 has an invalid interface number: 27 but max is 0 [ 161.484565][ T7040] tipc: Enabled bearer , priority 0 [ 161.488216][ T5718] usb 5-1: config 213 has no interface number 0 [ 161.506289][ T7039] tipc: Resetting bearer [ 161.525708][ T11] usb 2-1: USB disconnect, device number 17 [ 161.536391][ T5718] usb 5-1: config 213 interface 27 has no altsetting 0 [ 161.587121][ T5718] usb 5-1: New USB device found, idVendor=0921, idProduct=1200, bcdDevice=d6.6b [ 161.605648][ T7039] tipc: Disabling bearer [ 161.623033][ T5718] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.660283][ T5718] usb 5-1: Product: syz [ 161.675045][ T5718] usb 5-1: Manufacturer: syz [ 161.699833][ T5718] usb 5-1: SerialNumber: syz [ 161.852553][ T7050] FAULT_INJECTION: forcing a failure. [ 161.852553][ T7050] name failslab, interval 1, probability 0, space 0, times 0 [ 161.887567][ T7050] CPU: 0 UID: 0 PID: 7050 Comm: syz.0.404 Tainted: G L syzkaller #0 PREEMPT(full) [ 161.887600][ T7050] Tainted: [L]=SOFTLOCKUP [ 161.887607][ T7050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 161.887618][ T7050] Call Trace: [ 161.887625][ T7050] [ 161.887633][ T7050] dump_stack_lvl+0xe8/0x150 [ 161.887659][ T7050] should_fail_ex+0x40c/0x560 [ 161.887698][ T7050] should_failslab+0xa8/0x100 [ 161.887721][ T7050] __kmalloc_cache_noprof+0xa8/0x660 [ 161.887752][ T7050] ? hash_ip_create+0x6fe/0x14f0 [ 161.887775][ T7050] ? hash_ip_create+0x6fe/0x14f0 [ 161.887803][ T7050] hash_ip_create+0x6fe/0x14f0 [ 161.887839][ T7050] ? __pfx_hash_ip_create+0x10/0x10 [ 161.887863][ T7050] ? __nla_parse+0x40/0x60 [ 161.887888][ T7050] ? __pfx_hash_ip_create+0x10/0x10 [ 161.887912][ T7050] ip_set_create+0xae2/0x1a40 [ 161.887940][ T7050] ? ip_set_create+0x4e9/0x1a40 [ 161.887980][ T7050] ? __pfx_ip_set_create+0x10/0x10 [ 161.888041][ T7050] nfnetlink_rcv_msg+0xcc2/0x12b0 [ 161.888072][ T7050] ? unwind_get_return_address+0x4d/0x90 [ 161.888098][ T7050] ? nfnetlink_rcv_msg+0x228/0x12b0 [ 161.888143][ T7050] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 161.888215][ T7050] netlink_rcv_skb+0x226/0x4a0 [ 161.888238][ T7050] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 161.888268][ T7050] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 161.888298][ T7050] ? bpf_lsm_capable+0x9/0x20 [ 161.888316][ T7050] ? security_capable+0x7e/0x2c0 [ 161.888344][ T7050] nfnetlink_rcv+0x2b9/0x28c0 [ 161.888375][ T7050] ? __dev_queue_xmit+0x29b/0x37f0 [ 161.888400][ T7050] ? __local_bh_enable_ip+0xd0/0x130 [ 161.888427][ T7050] ? lockdep_hardirqs_on+0x7a/0x110 [ 161.888452][ T7050] ? __dev_queue_xmit+0x29b/0x37f0 [ 161.888472][ T7050] ? __local_bh_enable_ip+0xd0/0x130 [ 161.888495][ T7050] ? __dev_queue_xmit+0x29b/0x37f0 [ 161.888513][ T7050] ? __dev_queue_xmit+0x1ed7/0x37f0 [ 161.888533][ T7050] ? do_syscall_64+0x174/0x580 [ 161.888558][ T7050] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.888588][ T7050] ? __dev_queue_xmit+0x29b/0x37f0 [ 161.888630][ T7050] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 161.888666][ T7050] ? __pfx___dev_queue_xmit+0x10/0x10 [ 161.888703][ T7050] ? ref_tracker_free+0x689/0x830 [ 161.888731][ T7050] ? __pfx_ref_tracker_free+0x10/0x10 [ 161.888755][ T7050] ? __asan_memcpy+0x40/0x70 [ 161.888779][ T7050] ? __skb_clone+0x5c/0x6c0 [ 161.888802][ T7050] ? __skb_clone+0x449/0x6c0 [ 161.888826][ T7050] ? skb_clone+0x246/0x3a0 [ 161.888848][ T7050] ? __netlink_deliver_tap+0x811/0x860 [ 161.888866][ T7050] ? netlink_deliver_tap+0x2e/0x1b0 [ 161.888891][ T7050] ? netlink_deliver_tap+0x2e/0x1b0 [ 161.888913][ T7050] ? netlink_deliver_tap+0x2e/0x1b0 [ 161.888939][ T7050] netlink_unicast+0x7bb/0x940 [ 161.888981][ T7050] netlink_sendmsg+0x813/0xb40 [ 161.889012][ T7050] ? __pfx_netlink_sendmsg+0x10/0x10 [ 161.889039][ T7050] ? aa_sock_msg_perm+0xf1/0x1b0 [ 161.889069][ T7050] ? __pfx_netlink_sendmsg+0x10/0x10 [ 161.889089][ T7050] sock_sendmsg_nosec+0x13a/0x180 [ 161.889118][ T7050] ____sys_sendmsg+0x54e/0x850 [ 161.889146][ T7050] ? __pfx_____sys_sendmsg+0x10/0x10 [ 161.889177][ T7050] ? import_iovec+0x73/0xa0 [ 161.889202][ T7050] ___sys_sendmsg+0x2a5/0x360 [ 161.889233][ T7050] ? __lock_acquire+0x683/0x2cf0 [ 161.889256][ T7050] ? __pfx____sys_sendmsg+0x10/0x10 [ 161.889310][ T7050] ? __fget_files+0x2a/0x420 [ 161.889328][ T7050] ? __fget_files+0x3a2/0x420 [ 161.889357][ T7050] __x64_sys_sendmsg+0x1b1/0x290 [ 161.889379][ T7050] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 161.889416][ T7050] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.889437][ T7050] do_syscall_64+0x174/0x580 [ 161.889462][ T7050] ? trace_irq_disable+0x3b/0x140 [ 161.889489][ T7050] ? clear_bhb_loop+0x40/0x90 [ 161.889513][ T7050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.889531][ T7050] RIP: 0033:0x7fd54af9ce59 [ 161.889549][ T7050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.889565][ T7050] RSP: 002b:00007fd54be00028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 161.889585][ T7050] RAX: ffffffffffffffda RBX: 00007fd54b215fa0 RCX: 00007fd54af9ce59 [ 161.889600][ T7050] RDX: 0000000020004098 RSI: 0000200000000040 RDI: 0000000000000003 [ 161.889612][ T7050] RBP: 00007fd54be00090 R08: 0000000000000000 R09: 0000000000000000 [ 161.889623][ T7050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.889634][ T7050] R13: 00007fd54b216038 R14: 00007fd54b215fa0 R15: 00007fd54b33fa48 [ 161.889664][ T7050] [ 162.779001][ T24] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 162.816719][ T7060] loop5: detected capacity change from 0 to 7 [ 162.838726][ T7060] Dev loop5: unable to read RDB block 7 [ 162.856934][ T7060] loop5: unable to read partition table [ 162.867778][ T7060] loop5: partition table beyond EOD, truncated [ 162.880617][ T7060] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 162.973396][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 162.984179][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.995682][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 163.007122][ T24] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 163.017327][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.026390][ T24] usb 2-1: Product: syz [ 163.030801][ T24] usb 2-1: Manufacturer: syz [ 163.035937][ T24] usb 2-1: SerialNumber: syz [ 163.056893][ T24] usb 2-1: config 0 descriptor?? [ 163.352993][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 163.353011][ T30] audit: type=1400 audit(1782415245.304:55): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A21D01A0B978D2F2F262D2A83D1 pid=7044 comm="syz.1.403" [ 163.454585][ T5725] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 163.593533][ T5725] usb 1-1: device descriptor read/64, error -71 [ 163.843842][ T5725] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 163.923997][ T11] usb 4-1: USB disconnect, device number 35 [ 163.993496][ T5725] usb 1-1: device descriptor read/64, error -71 [ 164.046024][ T5718] belkin_sa 5-1:213.27: Belkin / Peracom / GoHubs USB Serial Adapter converter detected [ 164.062472][ T5718] usb 5-1: bcdDevice: d66b, bfc: 0 [ 164.094130][ T5718] usb 5-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0 [ 164.124021][ T5725] usb usb1-port1: attempt power cycle [ 164.149845][ T5718] usb 5-1: USB disconnect, device number 24 [ 164.236472][ T5718] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0 [ 164.249707][ T5718] belkin_sa 5-1:213.27: device disconnected [ 164.493463][ T5725] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 164.525063][ T5725] usb 1-1: device descriptor read/8, error -71 [ 164.573816][ T5718] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 164.763707][ T5718] usb 5-1: Using ep0 maxpacket: 16 [ 164.773403][ T5725] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 164.784198][ T5718] usb 5-1: config 9 has an invalid interface number: 162 but max is 2 [ 164.801621][ T5718] usb 5-1: config 9 has an invalid interface number: 121 but max is 2 [ 164.814246][ T5725] usb 1-1: device descriptor read/8, error -71 [ 164.830130][ T5718] usb 5-1: config 9 has an invalid interface number: 255 but max is 2 [ 164.850933][ T5718] usb 5-1: config 9 contains an unexpected descriptor of type 0x2, skipping [ 164.905742][ T5718] usb 5-1: config 9 has an invalid interface number: 4 but max is 2 [ 164.941203][ T5725] usb usb1-port1: unable to enumerate USB device [ 164.972078][ T5718] usb 5-1: config 9 has 4 interfaces, different from the descriptor's value: 3 [ 165.001879][ T5718] usb 5-1: config 9 has no interface number 0 [ 165.018518][ T7089] netlink: 8 bytes leftover after parsing attributes in process `syz.3.415'. [ 165.023938][ T24] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 165.046308][ T5718] usb 5-1: config 9 has no interface number 1 [ 165.059087][ T24] imon 2-1:0.0: unable to initialize intf0, err -19 [ 165.064560][ T5718] usb 5-1: config 9 has no interface number 2 [ 165.095237][ T5718] usb 5-1: config 9 has no interface number 3 [ 165.106760][ T24] imon:imon_probe: failed to initialize context! [ 165.115842][ T5718] usb 5-1: config 9 interface 162 altsetting 9 bulk endpoint 0x3 has invalid maxpacket 16 [ 165.141906][ T24] imon 2-1:0.0: unable to register, err -19 [ 165.159910][ T5718] usb 5-1: config 9 interface 162 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 165.188152][ T24] usb 2-1: USB disconnect, device number 18 [ 165.206957][ T5718] usb 5-1: config 9 interface 162 altsetting 9 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 165.233925][ T5718] usb 5-1: config 9 interface 162 altsetting 9 endpoint 0xC has invalid maxpacket 447, setting to 64 [ 165.267966][ T5718] usb 5-1: config 9 interface 121 altsetting 1 has a duplicate endpoint with address 0x2, skipping [ 165.303048][ T5718] usb 5-1: config 9 interface 255 altsetting 11 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 165.351966][ T5718] usb 5-1: config 9 interface 255 altsetting 11 has a duplicate endpoint with address 0x84, skipping [ 165.377778][ T5691] usb 4-1: new low-speed USB device number 36 using dummy_hcd [ 165.392071][ T5718] usb 5-1: config 9 interface 255 altsetting 11 endpoint 0x9 has invalid maxpacket 1152, setting to 64 [ 165.442551][ T5718] usb 5-1: config 9 interface 255 altsetting 11 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 165.469198][ T5718] usb 5-1: config 9 interface 255 altsetting 11 has a duplicate endpoint with address 0x9, skipping [ 165.502419][ T5718] usb 5-1: config 9 interface 255 altsetting 11 has a duplicate endpoint with address 0xD, skipping [ 165.528545][ T5718] usb 5-1: config 9 interface 255 altsetting 11 has 8 endpoint descriptors, different from the interface descriptor's value: 9 [ 165.559352][ T5718] usb 5-1: too many endpoints for config 9 interface 4 altsetting 126: 129, using maximum allowed: 30 [ 165.584813][ T5691] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 165.596183][ T5718] usb 5-1: config 9 interface 4 altsetting 126 has a duplicate endpoint with address 0x4, skipping [ 165.608531][ T5691] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 165.629748][ T5718] usb 5-1: config 9 interface 4 altsetting 126 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 165.646274][ T5691] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 165.670224][ T5718] usb 5-1: config 9 interface 162 has no altsetting 0 [ 165.677304][ T5691] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 165.703424][ T5718] usb 5-1: config 9 interface 121 has no altsetting 0 [ 165.710252][ T5691] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 165.721568][ T5718] usb 5-1: config 9 interface 255 has no altsetting 0 [ 165.733641][ T5718] usb 5-1: config 9 interface 4 has no altsetting 0 [ 165.747168][ T5691] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 165.755286][ T5691] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 165.766463][ T5691] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 165.779822][ T5718] usb 5-1: New USB device found, idVendor=0f11, idProduct=1210, bcdDevice=d8.7b [ 165.789738][ T5718] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.798107][ T5691] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 165.809373][ T5718] usb 5-1: Product: syz [ 165.813894][ T5718] usb 5-1: Manufacturer: syz [ 165.818590][ T5718] usb 5-1: SerialNumber: syz [ 165.823327][ T5691] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 165.840731][ T7079] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 165.857812][ T5691] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 165.879182][ T5691] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 165.902395][ T5691] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 165.915265][ T5691] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 165.927614][ T5691] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 166.001091][ T5691] usb 4-1: string descriptor 0 read error: -22 [ 166.015132][ T5691] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 166.030826][ T5691] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.107759][ T7096] loop9: detected capacity change from 0 to 2640 [ 166.120115][ T5691] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 166.134231][ T7096] Buffer I/O error on dev loop9, logical block 0, async page read [ 166.150135][ T7096] Buffer I/O error on dev loop9, logical block 0, async page read [ 166.160161][ T7096] Buffer I/O error on dev loop9, logical block 0, async page read [ 166.168503][ T7096] Buffer I/O error on dev loop9, logical block 0, async page read [ 166.202256][ T7096] Buffer I/O error on dev loop9, logical block 0, async page read [ 166.220476][ T7096] Buffer I/O error on dev loop9, logical block 0, async page read [ 166.234122][ T7096] Buffer I/O error on dev loop9, logical block 0, async page read [ 166.245058][ T7096] Buffer I/O error on dev loop9, logical block 0, async page read [ 166.253851][ T7096] ldm_validate_partition_table(): Disk read failed. [ 166.262309][ T7096] Buffer I/O error on dev loop9, logical block 0, async page read [ 166.280414][ T5718] ldusb 5-1:9.162: Interrupt in endpoint not found [ 166.294230][ T7096] Buffer I/O error on dev loop9, logical block 0, async page read [ 166.341769][ T7096] Dev loop9: unable to read RDB block 0 [ 166.347957][ T5718] ldusb 5-1:9.121: Interrupt in endpoint not found [ 166.366973][ T7089] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 166.400035][ T5718] ldusb 5-1:9.255: Interrupt in endpoint not found [ 166.421199][ T7096] loop9: unable to read partition table [ 166.430904][ T5718] ldusb 5-1:9.4: Interrupt in endpoint not found [ 166.464560][ T5718] usb 5-1: USB disconnect, device number 25 [ 166.492709][ T7096] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 166.649586][ T7097] netlink: 12 bytes leftover after parsing attributes in process `syz.0.417'. [ 166.916659][ T7111] netlink: 8 bytes leftover after parsing attributes in process `syz.4.422'. [ 166.920214][ T5691] usb 4-1: USB disconnect, device number 36 [ 166.988652][ T7105] bridge_slave_0: left allmulticast mode [ 167.011106][ T7105] bridge_slave_0: left promiscuous mode [ 167.030299][ T7105] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.060191][ T7105] bridge_slave_1: left allmulticast mode [ 167.069000][ T7105] bridge_slave_1: left promiscuous mode [ 167.077908][ T7105] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.101496][ T7105] veth0_to_bond: left allmulticast mode [ 167.107961][ T7105] veth0_to_bond: left promiscuous mode [ 167.115180][ T7105] bridge1: port 2(veth0_to_bond) entered disabled state [ 167.161163][ T7105] bond0: (slave bond_slave_0): Releasing backup interface [ 167.185256][ T5624] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 167.214871][ T7105] bond0: (slave bond_slave_1): Releasing backup interface [ 167.230980][ T7117] kvm: pic: non byte write [ 167.248362][ T7105] team0: Port device team_slave_0 removed [ 167.257075][ T7105] team0: Port device team_slave_1 removed [ 167.258604][ T7105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.258625][ T7105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.261244][ T7105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.261937][ T7105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.268334][ T7105] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 167.324461][ T5624] usb 5-1: device descriptor read/64, error -71 [ 167.524598][ T7123] FAULT_INJECTION: forcing a failure. [ 167.524598][ T7123] name failslab, interval 1, probability 0, space 0, times 0 [ 167.552578][ T7123] CPU: 1 UID: 0 PID: 7123 Comm: syz.1.427 Tainted: G L syzkaller #0 PREEMPT(full) [ 167.552610][ T7123] Tainted: [L]=SOFTLOCKUP [ 167.552617][ T7123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 167.552629][ T7123] Call Trace: [ 167.552655][ T7123] [ 167.552664][ T7123] dump_stack_lvl+0xe8/0x150 [ 167.552697][ T7123] should_fail_ex+0x40c/0x560 [ 167.552728][ T7123] ? hash_ip_create+0x7b3/0x14f0 [ 167.552755][ T7123] should_failslab+0xa8/0x100 [ 167.552781][ T7123] __kvmalloc_node_noprof+0x176/0x860 [ 167.552803][ T7123] ? __kmalloc_cache_noprof+0x32d/0x660 [ 167.552835][ T7123] ? __kmalloc_cache_noprof+0x150/0x660 [ 167.552867][ T7123] ? hash_ip_create+0x7b3/0x14f0 [ 167.552899][ T7123] hash_ip_create+0x7b3/0x14f0 [ 167.552942][ T7123] ? __pfx_hash_ip_create+0x10/0x10 [ 167.552972][ T7123] ? __nla_parse+0x40/0x60 [ 167.553003][ T7123] ? __pfx_hash_ip_create+0x10/0x10 [ 167.553031][ T7123] ip_set_create+0xae2/0x1a40 [ 167.553063][ T7123] ? ip_set_create+0x4e9/0x1a40 [ 167.553106][ T7123] ? __pfx_ip_set_create+0x10/0x10 [ 167.553175][ T7123] nfnetlink_rcv_msg+0xcc2/0x12b0 [ 167.553210][ T7123] ? nfnetlink_rcv_msg+0x228/0x12b0 [ 167.553261][ T7123] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 167.553351][ T7123] netlink_rcv_skb+0x226/0x4a0 [ 167.553376][ T7123] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 167.553410][ T7123] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 167.553445][ T7123] ? bpf_lsm_capable+0x9/0x20 [ 167.553463][ T7123] ? security_capable+0x7e/0x2c0 [ 167.553495][ T7123] nfnetlink_rcv+0x2b9/0x28c0 [ 167.553530][ T7123] ? kernel_text_address+0xa5/0xe0 [ 167.553556][ T7123] ? __kernel_text_address+0xd/0x30 [ 167.553580][ T7123] ? unwind_get_return_address+0x4d/0x90 [ 167.553607][ T7123] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 167.553638][ T7123] ? arch_stack_walk+0xfb/0x150 [ 167.553677][ T7123] ? stack_trace_save+0xa9/0x100 [ 167.553710][ T7123] ? __lock_acquire+0x683/0x2cf0 [ 167.553733][ T7123] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 167.553768][ T7123] ? kasan_save_track+0x4f/0x80 [ 167.553787][ T7123] ? kasan_save_track+0x3e/0x80 [ 167.553805][ T7123] ? __kasan_slab_alloc+0x6c/0x80 [ 167.553836][ T7123] ? kmem_cache_alloc_node_noprof+0x355/0x610 [ 167.553864][ T7123] ? __alloc_skb+0x276/0x7a0 [ 167.553891][ T7123] ? netlink_sendmsg+0x5d4/0xb40 [ 167.553911][ T7123] ? sock_sendmsg_nosec+0x13a/0x180 [ 167.553934][ T7123] ? ____sys_sendmsg+0x54e/0x850 [ 167.553962][ T7123] ? __lock_acquire+0x683/0x2cf0 [ 167.554005][ T7123] ? __netlink_lookup+0xc6/0x8b0 [ 167.554036][ T7123] ? netlink_deliver_tap+0x2e/0x1b0 [ 167.554057][ T7123] ? netlink_deliver_tap+0x2e/0x1b0 [ 167.554082][ T7123] ? netlink_deliver_tap+0x2e/0x1b0 [ 167.554102][ T7123] ? netlink_deliver_tap+0x2e/0x1b0 [ 167.554127][ T7123] netlink_unicast+0x7bb/0x940 [ 167.554164][ T7123] netlink_sendmsg+0x813/0xb40 [ 167.554194][ T7123] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.554218][ T7123] ? aa_sock_msg_perm+0xf1/0x1b0 [ 167.554246][ T7123] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.554265][ T7123] sock_sendmsg_nosec+0x13a/0x180 [ 167.554301][ T7123] ____sys_sendmsg+0x54e/0x850 [ 167.554326][ T7123] ? __pfx_____sys_sendmsg+0x10/0x10 [ 167.554355][ T7123] ? import_iovec+0x73/0xa0 [ 167.554378][ T7123] ___sys_sendmsg+0x2a5/0x360 [ 167.554396][ T7123] ? __lock_acquire+0x683/0x2cf0 [ 167.554418][ T7123] ? __pfx____sys_sendmsg+0x10/0x10 [ 167.554472][ T7123] ? __fget_files+0x2a/0x420 [ 167.554490][ T7123] ? __fget_files+0x3a2/0x420 [ 167.554517][ T7123] __x64_sys_sendmsg+0x1b1/0x290 [ 167.554539][ T7123] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 167.554577][ T7123] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.554597][ T7123] do_syscall_64+0x174/0x580 [ 167.554622][ T7123] ? trace_irq_disable+0x3b/0x140 [ 167.554651][ T7123] ? clear_bhb_loop+0x40/0x90 [ 167.554693][ T7123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.554712][ T7123] RIP: 0033:0x7f5d4819ce59 [ 167.554731][ T7123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.554748][ T7123] RSP: 002b:00007f5d463f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 167.554769][ T7123] RAX: ffffffffffffffda RBX: 00007f5d48415fa0 RCX: 00007f5d4819ce59 [ 167.554783][ T7123] RDX: 0000000020004098 RSI: 0000200000000040 RDI: 0000000000000003 [ 167.554797][ T7123] RBP: 00007f5d463f6090 R08: 0000000000000000 R09: 0000000000000000 [ 167.554808][ T7123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.554820][ T7123] R13: 00007f5d48416038 R14: 00007f5d48415fa0 R15: 00007f5d4853fa48 [ 167.554852][ T7123] [ 168.026575][ T5624] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 168.163626][ T11] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 168.201408][ T7129] bond0: entered promiscuous mode [ 168.208951][ T7129] batadv0: entered promiscuous mode [ 168.216948][ T7129] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 168.229341][ T7129] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 168.234052][ T5624] usb 5-1: device descriptor read/64, error -71 [ 168.244716][ T7129] bond0: left promiscuous mode [ 168.250296][ T7129] batadv0: left promiscuous mode [ 168.313336][ T11] usb 4-1: Using ep0 maxpacket: 8 [ 168.325044][ T11] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 168.338831][ T11] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.365567][ T11] usb 4-1: Product: syz [ 168.371672][ T11] usb 4-1: Manufacturer: syz [ 168.379381][ T11] usb 4-1: SerialNumber: syz [ 168.399670][ T11] usb 4-1: config 0 descriptor?? [ 168.413828][ T5624] usb usb5-port1: attempt power cycle [ 168.424376][ T11] gspca_main: se401-2.14.0 probing 047d:5003 [ 168.635585][ T7124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.664007][ T7124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.753485][ T5624] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 168.775574][ T7136] CUSE: unknown device info "n¸Þ|’zQC*¯" [ 168.785145][ T5624] usb 5-1: device descriptor read/8, error -71 [ 168.801739][ T7136] CUSE: unknown device info ">2¢“‰a"ëî V­Ä|ÿ#Úyï€S—ioåLåÎà”¢8†9ÔIÿèܥѮžÃ‡Å[¥<^ÎQÎÓ>”nHw Ý×'0KVÆ,†¹${\d+" [ 168.834302][ T7136] CUSE: unknown device info "Ýÿÿÿ" [ 168.889635][ T7136] CUSE: unknown device info "ÙLÐP§ô¿’t|%Í€IŸ¸èžOØÙäKu GìÂÏǪ|ÜQüUËœDv…F‰Ý,*pá(o9Ð{uáöº[§èµ¨‘²égIÁPÌÍYV" [ 168.912863][ T11] gspca_se401: ExtraFeatures: 4 [ 168.919225][ T11] gspca_se401: Frame size: 64x0 bayer [ 168.925443][ T7136] CUSE: DEVNAME unspecified [ 168.930233][ T11] gspca_se401: Frame size: 0x0 1/16th janggu [ 168.937115][ T11] gspca_se401: Frame size: 0x0 1/16th janggu [ 168.943954][ T11] gspca_se401: Frame size: 0x0 1/16th janggu [ 168.950845][ T11] gspca_se401: Frame size: 0x0 1/16th janggu [ 169.036980][ T5624] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 169.074989][ T5624] usb 5-1: device descriptor read/8, error -71 [ 169.109568][ T7142] netlink: 12 bytes leftover after parsing attributes in process `syz.2.433'. [ 169.130828][ T7124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.140114][ T7124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.216110][ T5624] usb usb5-port1: unable to enumerate USB device [ 169.237844][ T7145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.277366][ T7143] xt_CT: You must specify a L4 protocol and not use inversions on it [ 169.283708][ T7145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.396821][ T11] input: se401 as /devices/platform/dummy_hcd.3/usb4/4-1/input/input12 [ 169.424636][ T11] usb 4-1: USB disconnect, device number 37 [ 169.453778][ T5691] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 169.613373][ T5691] usb 3-1: Using ep0 maxpacket: 32 [ 169.631478][ T5691] usb 3-1: unable to get BOS descriptor or descriptor too short [ 169.664277][ T5691] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 169.669884][ T7138] netlink: 24 bytes leftover after parsing attributes in process `syz.0.431'. [ 169.730830][ T5691] usb 3-1: config 1 has an invalid descriptor of length 29, skipping remainder of the config [ 169.792303][ T5691] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 169.848194][ T5691] usb 3-1: New USB device found, idVendor=2a39, idProduct=3fb0, bcdDevice= 0.40 [ 169.877536][ T5691] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.897915][ T5691] usb 3-1: Product: syz [ 169.902219][ T5691] usb 3-1: Manufacturer: syz [ 169.907608][ T5691] usb 3-1: SerialNumber: syz [ 170.154496][ T5691] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 170.171633][ T5691] usb 3-1: MIDIStreaming interface descriptor not found [ 170.429283][ T5691] usb 3-1: USB disconnect, device number 17 [ 170.592709][ T5683] udevd[5683]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 170.963725][ T5624] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 170.979802][ T7193] netlink: 4 bytes leftover after parsing attributes in process `syz.0.448'. [ 171.127793][ T7197] netlink: 4 bytes leftover after parsing attributes in process `syz.1.450'. [ 171.141398][ T5624] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.178595][ T5624] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 171.188788][ T7197] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 171.196099][ T5624] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.215710][ T5624] usb 4-1: config 0 descriptor?? [ 171.243669][ T11] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 171.307649][ T7190] netlink: 40 bytes leftover after parsing attributes in process `syz.2.447'. [ 171.405574][ T11] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 171.423811][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.441521][ T5624] usbhid 4-1:0.0: can't add hid device: -71 [ 171.454484][ T5624] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 171.466343][ T11] usb 1-1: config 0 descriptor?? [ 171.481740][ T5624] usb 4-1: USB disconnect, device number 38 [ 171.513877][ T11] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 171.618931][ T7209] netlink: 12 bytes leftover after parsing attributes in process `syz.1.455'. [ 171.698451][ T11] gp8psk: usb in 128 operation failed. [ 171.864060][ T5718] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 171.879706][ T7216] FAULT_INJECTION: forcing a failure. [ 171.879706][ T7216] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.895399][ T7216] CPU: 0 UID: 0 PID: 7216 Comm: syz.1.457 Tainted: G L syzkaller #0 PREEMPT(full) [ 171.895420][ T7216] Tainted: [L]=SOFTLOCKUP [ 171.895425][ T7216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 171.895432][ T7216] Call Trace: [ 171.895444][ T7216] [ 171.895449][ T7216] dump_stack_lvl+0xe8/0x150 [ 171.895470][ T7216] should_fail_ex+0x40c/0x560 [ 171.895492][ T7216] _copy_to_user+0x31/0xb0 [ 171.895507][ T7216] simple_read_from_buffer+0xe1/0x170 [ 171.895527][ T7216] proc_fail_nth_read+0x1bb/0x230 [ 171.895544][ T7216] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 171.895559][ T7216] ? rw_verify_area+0x24a/0x4c0 [ 171.895576][ T7216] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 171.895589][ T7216] vfs_read+0x213/0xa80 [ 171.895607][ T7216] ? __pfx___mutex_lock+0x10/0x10 [ 171.895627][ T7216] ? __pfx_vfs_read+0x10/0x10 [ 171.895644][ T7216] ? __fget_files+0x2a/0x420 [ 171.895659][ T7216] ? __fget_files+0x3a2/0x420 [ 171.895671][ T7216] ? __fget_files+0x2a/0x420 [ 171.895689][ T7216] ksys_read+0x150/0x270 [ 171.895705][ T7216] ? __pfx_ksys_read+0x10/0x10 [ 171.895720][ T7216] ? __pfx_ppp_ioctl+0x10/0x10 [ 171.895739][ T7216] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.895754][ T7216] do_syscall_64+0x174/0x580 [ 171.895772][ T7216] ? trace_irq_disable+0x3b/0x140 [ 171.895804][ T7216] ? clear_bhb_loop+0x40/0x90 [ 171.895819][ T7216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.895831][ T7216] RIP: 0033:0x7f5d4815d68e [ 171.895843][ T7216] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 171.895853][ T7216] RSP: 002b:00007f5d463f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 171.895866][ T7216] RAX: ffffffffffffffda RBX: 00007f5d463f66c0 RCX: 00007f5d4815d68e [ 171.895875][ T7216] RDX: 000000000000000f RSI: 00007f5d463f60a0 RDI: 0000000000000004 [ 171.895883][ T7216] RBP: 00007f5d463f6090 R08: 0000000000000000 R09: 0000000000000000 [ 171.895890][ T7216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.895898][ T7216] R13: 00007f5d48416038 R14: 00007f5d48415fa0 R15: 00007f5d4853fa48 [ 171.895918][ T7216] [ 172.125048][ T11] gp8psk: FW Version = 0.00.0 (0x0) Build 2000/00/00 [ 172.173363][ T5624] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 172.197314][ T5718] usb 3-1: config 253 has an invalid interface number: 82 but max is 0 [ 172.205803][ T5718] usb 3-1: config 253 has no interface number 0 [ 172.212146][ T5718] usb 3-1: config 253 interface 82 has no altsetting 0 [ 172.231644][ T5718] usb 3-1: New USB device found, idVendor=0586, idProduct=401a, bcdDevice=ec.7d [ 172.232525][ T7218] FAULT_INJECTION: forcing a failure. [ 172.232525][ T7218] name failslab, interval 1, probability 0, space 0, times 0 [ 172.241815][ T5718] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.262335][ T5718] usb 3-1: Product: syz [ 172.266603][ T5718] usb 3-1: Manufacturer: syz [ 172.271234][ T5718] usb 3-1: SerialNumber: syz [ 172.284140][ T7218] CPU: 1 UID: 0 PID: 7218 Comm: syz.4.458 Tainted: G L syzkaller #0 PREEMPT(full) [ 172.284167][ T7218] Tainted: [L]=SOFTLOCKUP [ 172.284174][ T7218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 172.284185][ T7218] Call Trace: [ 172.284191][ T7218] [ 172.284198][ T7218] dump_stack_lvl+0xe8/0x150 [ 172.284223][ T7218] should_fail_ex+0x40c/0x560 [ 172.284251][ T7218] should_failslab+0xa8/0x100 [ 172.284272][ T7218] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 172.284298][ T7218] ? skb_clone+0x212/0x3a0 [ 172.284317][ T7218] ? skb_clone+0x212/0x3a0 [ 172.284341][ T7218] skb_clone+0x212/0x3a0 [ 172.284362][ T7218] __netlink_deliver_tap+0x413/0x860 [ 172.284391][ T7218] ? netlink_deliver_tap+0x2e/0x1b0 [ 172.284411][ T7218] netlink_deliver_tap+0x19c/0x1b0 [ 172.284431][ T7218] netlink_unicast+0x77f/0x940 [ 172.284469][ T7218] netlink_sendmsg+0x813/0xb40 [ 172.284496][ T7218] ? __pfx_netlink_sendmsg+0x10/0x10 [ 172.284520][ T7218] ? aa_sock_msg_perm+0xf1/0x1b0 [ 172.284545][ T7218] ? __pfx_netlink_sendmsg+0x10/0x10 [ 172.284573][ T7218] sock_sendmsg_nosec+0x13a/0x180 [ 172.284600][ T7218] ____sys_sendmsg+0x54e/0x850 [ 172.284622][ T7218] ? __pfx_____sys_sendmsg+0x10/0x10 [ 172.284646][ T7218] ? import_iovec+0x73/0xa0 [ 172.284666][ T7218] ___sys_sendmsg+0x2a5/0x360 [ 172.284682][ T7218] ? __lock_acquire+0x683/0x2cf0 [ 172.284702][ T7218] ? __pfx____sys_sendmsg+0x10/0x10 [ 172.284750][ T7218] ? __fget_files+0x2a/0x420 [ 172.284768][ T7218] ? __fget_files+0x3a2/0x420 [ 172.284792][ T7218] __x64_sys_sendmsg+0x1b1/0x290 [ 172.284812][ T7218] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 172.284843][ T7218] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.284862][ T7218] do_syscall_64+0x174/0x580 [ 172.284887][ T7218] ? trace_irq_disable+0x3b/0x140 [ 172.284919][ T7218] ? clear_bhb_loop+0x40/0x90 [ 172.284940][ T7218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.284956][ T7218] RIP: 0033:0x7f344cf9ce59 [ 172.284971][ T7218] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.284985][ T7218] RSP: 002b:00007f344de72028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 172.285022][ T7218] RAX: ffffffffffffffda RBX: 00007f344d215fa0 RCX: 00007f344cf9ce59 [ 172.285035][ T7218] RDX: 0000000000000040 RSI: 00002000000000c0 RDI: 0000000000000003 [ 172.285046][ T7218] RBP: 00007f344de72090 R08: 0000000000000000 R09: 0000000000000000 [ 172.285057][ T7218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.285067][ T7218] R13: 00007f344d216038 R14: 00007f344d215fa0 R15: 00007f344d33fa48 [ 172.285095][ T7218] [ 172.575072][ T5718] rtl8150 3-1:253.82: couldn't find required endpoints [ 172.587119][ T7193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.598658][ T5624] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.610953][ T5624] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 172.614971][ T5718] rtl8150 3-1:253.82: probe with driver rtl8150 failed with error -5 [ 172.620547][ T5624] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.629048][ T7193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.652049][ T5624] usb 4-1: config 0 descriptor?? [ 172.804951][ T5718] usb 3-1: USB disconnect, device number 18 [ 172.817497][ T7222] syzkaller0: entered promiscuous mode [ 172.833101][ T7222] syzkaller0: entered allmulticast mode [ 172.881981][ T7222] tipc: Enabled bearer , priority 0 [ 172.914447][ T7221] tipc: Resetting bearer [ 172.965537][ T7221] tipc: Disabling bearer [ 173.127097][ T11] gp8psk: usb in 149 operation failed. [ 173.142227][ T11] gp8psk: failed to get FPGA version [ 173.158436][ T11] gp8psk: usb in 138 operation failed. [ 173.173601][ T11] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 173.191227][ T11] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 173.225131][ T11] usb 1-1: USB disconnect, device number 20 [ 173.250094][ T7235] loop5: detected capacity change from 0 to 2 [ 173.262840][ T7235] Dev loop5: unable to read RDB block 2 [ 173.269198][ T7235] loop5: unable to read partition table [ 173.275207][ T7235] loop5: partition table beyond EOD, truncated [ 173.281610][ T7235] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 173.423380][ T24] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 173.523942][ T5624] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 173.532456][ T5624] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input15 [ 173.574782][ T7230] mmap: syz.4.463 (7230) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 173.595880][ T24] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 173.622392][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.694469][ T24] usb 2-1: config 0 descriptor?? [ 173.751466][ T24] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 173.938635][ T7240] fuse: Unknown parameter 'dont_hash' [ 173.943858][ T24] gp8psk: usb in 128 operation failed. [ 173.962327][ T24] gp8psk: usb in 137 operation failed. [ 173.989607][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 174.030732][ T24] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 174.054736][ T24] usb 2-1: media controller created [ 174.120319][ T7244] hfs: unable to load iocharset "io#harset" [ 174.138845][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 174.183657][ T24] gp8psk_fe: Frontend attached [ 174.188848][ T24] usb 2-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 174.197939][ T24] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 174.274185][ T5624] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 174.289393][ T5637] Bluetooth: hci1: unexpected event for opcode 0x201c [ 174.348409][ T24] gp8psk: usb in 138 operation failed. [ 174.354091][ T24] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 174.363827][ T24] gp8psk: found Genpix USB device pID = 203 (hex) [ 174.373959][ T24] usb 2-1: USB disconnect, device number 19 [ 174.453421][ T5624] usb 1-1: device descriptor read/64, error -71 [ 174.615989][ T7251] FAULT_INJECTION: forcing a failure. [ 174.615989][ T7251] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.663810][ T7251] CPU: 0 UID: 0 PID: 7251 Comm: syz.1.469 Tainted: G L syzkaller #0 PREEMPT(full) [ 174.663853][ T7251] Tainted: [L]=SOFTLOCKUP [ 174.663860][ T7251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 174.663872][ T7251] Call Trace: [ 174.663879][ T7251] [ 174.663888][ T7251] dump_stack_lvl+0xe8/0x150 [ 174.663917][ T7251] should_fail_ex+0x40c/0x560 [ 174.663950][ T7251] _copy_to_user+0x31/0xb0 [ 174.663973][ T7251] simple_read_from_buffer+0xe1/0x170 [ 174.663999][ T7251] proc_fail_nth_read+0x1bb/0x230 [ 174.664024][ T7251] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 174.664048][ T7251] ? rw_verify_area+0x24a/0x4c0 [ 174.664074][ T7251] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 174.664095][ T7251] vfs_read+0x213/0xa80 [ 174.664133][ T7251] ? __pfx___mutex_lock+0x10/0x10 [ 174.664160][ T7251] ? __pfx_vfs_read+0x10/0x10 [ 174.664182][ T7251] ? __fget_files+0x2a/0x420 [ 174.664226][ T7251] ? __fget_files+0x3a2/0x420 [ 174.664244][ T7251] ? __fget_files+0x2a/0x420 [ 174.664269][ T7251] ksys_read+0x150/0x270 [ 174.664294][ T7251] ? __pfx_ksys_read+0x10/0x10 [ 174.664321][ T7251] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.664335][ T7251] do_syscall_64+0x174/0x580 [ 174.664354][ T7251] ? trace_irq_disable+0x3b/0x140 [ 174.664393][ T7251] ? clear_bhb_loop+0x40/0x90 [ 174.664416][ T7251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.664434][ T7251] RIP: 0033:0x7f5d4815d68e [ 174.664453][ T7251] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 174.664465][ T7251] RSP: 002b:00007f5d463f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 174.664479][ T7251] RAX: ffffffffffffffda RBX: 00007f5d463f66c0 RCX: 00007f5d4815d68e [ 174.664489][ T7251] RDX: 000000000000000f RSI: 00007f5d463f60a0 RDI: 0000000000000004 [ 174.664497][ T7251] RBP: 00007f5d463f6090 R08: 0000000000000000 R09: 0000000000000000 [ 174.664516][ T7251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.664527][ T7251] R13: 00007f5d48416038 R14: 00007f5d48415fa0 R15: 00007f5d4853fa48 [ 174.664558][ T7251] [ 174.734103][ T5624] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 174.918203][ T24] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 175.064939][ T11] usb 4-1: USB disconnect, device number 39 [ 175.064958][ C1] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 175.365871][ T7257] netlink: 28 bytes leftover after parsing attributes in process `syz.1.471'. [ 175.453454][ T5624] usb 1-1: device descriptor read/64, error -71 [ 175.506245][ T7269] FAULT_INJECTION: forcing a failure. [ 175.506245][ T7269] name failslab, interval 1, probability 0, space 0, times 0 [ 175.536279][ T7269] CPU: 0 UID: 0 PID: 7269 Comm: syz.4.475 Tainted: G L syzkaller #0 PREEMPT(full) [ 175.536308][ T7269] Tainted: [L]=SOFTLOCKUP [ 175.536315][ T7269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 175.536325][ T7269] Call Trace: [ 175.536332][ T7269] [ 175.536339][ T7269] dump_stack_lvl+0xe8/0x150 [ 175.536366][ T7269] should_fail_ex+0x40c/0x560 [ 175.536395][ T7269] should_failslab+0xa8/0x100 [ 175.536417][ T7269] __kmalloc_cache_noprof+0xa8/0x660 [ 175.536446][ T7269] ? __vb2_init_fileio+0x1e2/0x1040 [ 175.536466][ T7269] ? __vb2_init_fileio+0x1e2/0x1040 [ 175.536488][ T7269] ? __bitmap_weight+0xe2/0x100 [ 175.536511][ T7269] __vb2_init_fileio+0x1e2/0x1040 [ 175.536540][ T7269] ? __bitmap_weight+0xe2/0x100 [ 175.536563][ T7269] vb2_core_poll+0x4b0/0x830 [ 175.536588][ T7269] vb2_fop_poll+0x196/0x310 [ 175.536632][ T7269] ? __pfx_vb2_fop_poll+0x10/0x10 [ 175.536654][ T7269] v4l2_poll+0x147/0x2c0 [ 175.536675][ T7269] ? __pfx_v4l2_poll+0x10/0x10 [ 175.536696][ T7269] do_sys_poll+0x990/0x1110 [ 175.536730][ T7269] ? do_sys_poll+0x491/0x1110 [ 175.536764][ T7269] ? __pfx_do_sys_poll+0x10/0x10 [ 175.536797][ T7269] ? aa_file_perm+0x18b/0x15f0 [ 175.536829][ T7269] ? __pfx_pollwake+0x10/0x10 [ 175.536859][ T7269] ? __pfx_pollwake+0x10/0x10 [ 175.536889][ T7269] ? __pfx_pollwake+0x10/0x10 [ 175.536919][ T7269] ? __pfx_pollwake+0x10/0x10 [ 175.536948][ T7269] ? __pfx_pollwake+0x10/0x10 [ 175.536978][ T7269] ? __pfx_pollwake+0x10/0x10 [ 175.537008][ T7269] ? __pfx_pollwake+0x10/0x10 [ 175.537044][ T7269] ? __pfx_pollwake+0x10/0x10 [ 175.537074][ T7269] ? __pfx_pollwake+0x10/0x10 [ 175.537138][ T7269] ? set_user_sigmask+0xcd/0x1c0 [ 175.537164][ T7269] ? __pfx_set_user_sigmask+0x10/0x10 [ 175.537192][ T7269] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 175.537237][ T7269] __se_sys_ppoll+0x209/0x2b0 [ 175.537262][ T7269] ? fput+0xa0/0xd0 [ 175.537290][ T7269] ? __pfx___se_sys_ppoll+0x10/0x10 [ 175.537334][ T7269] ? __pfx_ksys_write+0x10/0x10 [ 175.537361][ T7269] ? __x64_sys_ppoll+0x20/0xc0 [ 175.537387][ T7269] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.537408][ T7269] do_syscall_64+0x174/0x580 [ 175.537433][ T7269] ? trace_irq_disable+0x3b/0x140 [ 175.537462][ T7269] ? clear_bhb_loop+0x40/0x90 [ 175.537486][ T7269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.537504][ T7269] RIP: 0033:0x7f344cf9ce59 [ 175.537521][ T7269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.537537][ T7269] RSP: 002b:00007f344de72028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 175.537557][ T7269] RAX: ffffffffffffffda RBX: 00007f344d215fa0 RCX: 00007f344cf9ce59 [ 175.537571][ T7269] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 175.537584][ T7269] RBP: 00007f344de72090 R08: 0000000000000000 R09: 0000000000000000 [ 175.537598][ T7269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.537609][ T7269] R13: 00007f344d216038 R14: 00007f344d215fa0 R15: 00007f344d33fa48 [ 175.537640][ T7269] [ 175.608648][ T5624] usb usb1-port1: attempt power cycle [ 175.963654][ T24] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 176.034872][ T7271] ip6tnl1: entered allmulticast mode [ 176.137456][ T24] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 176.148024][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.163354][ T24] usb 2-1: Product: syz [ 176.168180][ T24] usb 2-1: Manufacturer: syz [ 176.176996][ T24] usb 2-1: SerialNumber: syz [ 176.200733][ T24] usb 2-1: config 0 descriptor?? [ 176.302502][ T5624] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 176.347125][ T5624] usb 1-1: device descriptor read/8, error -71 [ 176.433440][ T5725] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 176.517612][ T7280] netlink: 12 bytes leftover after parsing attributes in process `syz.2.480'. [ 176.553902][ T7280] bridge2: port 1(veth7) entered blocking state [ 176.560425][ T7280] bridge2: port 1(veth7) entered disabled state [ 176.568411][ T7280] veth7: entered allmulticast mode [ 176.575165][ T7280] veth7: entered promiscuous mode [ 176.583375][ T5725] usb 5-1: device descriptor read/64, error -71 [ 176.593840][ T5624] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 176.599689][ T7280] bridge2: port 2(veth0_to_bond) entered blocking state [ 176.609336][ T7280] bridge2: port 2(veth0_to_bond) entered disabled state [ 176.616560][ T7280] veth0_to_bond: entered allmulticast mode [ 176.624071][ T5624] usb 1-1: device descriptor read/8, error -71 [ 176.625875][ T7280] veth0_to_bond: entered promiscuous mode [ 176.650853][ T24] usb 2-1: Firmware version (0.0) predates our first public release. [ 176.667192][ T24] usb 2-1: Please update to version 0.2 or newer [ 176.690449][ T7280] bridge2: port 3(veth9) entered blocking state [ 176.706135][ T7280] bridge2: port 3(veth9) entered disabled state [ 176.713577][ T7280] veth9: entered allmulticast mode [ 176.720259][ T7280] veth9: entered promiscuous mode [ 176.735730][ T5624] usb usb1-port1: unable to enumerate USB device [ 176.808831][ T24] usb 2-1: USB disconnect, device number 20 [ 176.836645][ T5725] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 176.983937][ T5725] usb 5-1: device descriptor read/64, error -71 [ 177.048147][ T7291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.483'. [ 177.103920][ T5725] usb usb5-port1: attempt power cycle [ 177.231141][ T7298] netlink: 'syz.3.486': attribute type 1 has an invalid length. [ 177.249121][ T7300] netlink: 4 bytes leftover after parsing attributes in process `syz.1.487'. [ 177.267174][ T7300] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 177.347288][ T7304] FAULT_INJECTION: forcing a failure. [ 177.347288][ T7304] name failslab, interval 1, probability 0, space 0, times 0 [ 177.363038][ T7304] CPU: 1 UID: 0 PID: 7304 Comm: syz.3.488 Tainted: G L syzkaller #0 PREEMPT(full) [ 177.363069][ T7304] Tainted: [L]=SOFTLOCKUP [ 177.363076][ T7304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 177.363089][ T7304] Call Trace: [ 177.363101][ T7304] [ 177.363109][ T7304] dump_stack_lvl+0xe8/0x150 [ 177.363141][ T7304] should_fail_ex+0x40c/0x560 [ 177.363173][ T7304] should_failslab+0xa8/0x100 [ 177.363198][ T7304] __kmalloc_noprof+0xfe/0x720 [ 177.363233][ T7304] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 177.363283][ T7304] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 177.363320][ T7304] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 177.363358][ T7304] genl_family_rcv_msg_doit+0xda/0x340 [ 177.363394][ T7304] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 177.363426][ T7304] ? __pfx_genl_get_cmd+0x10/0x10 [ 177.363451][ T7304] ? __pfx_ethnl_default_doit+0x10/0x10 [ 177.363482][ T7304] ? __pfx_ethnl_default_start+0x10/0x10 [ 177.363505][ T7304] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 177.363529][ T7304] ? __pfx_ethnl_default_done+0x10/0x10 [ 177.363554][ T7304] ? __dev_queue_xmit+0x29b/0x37f0 [ 177.363587][ T7304] genl_rcv_msg+0x614/0x7a0 [ 177.363619][ T7304] ? __pfx_genl_rcv_msg+0x10/0x10 [ 177.363646][ T7304] ? __pfx_ethnl_default_doit+0x10/0x10 [ 177.363671][ T7304] ? __pfx_ref_tracker_free+0x10/0x10 [ 177.363711][ T7304] netlink_rcv_skb+0x226/0x4a0 [ 177.363734][ T7304] ? __pfx_genl_rcv_msg+0x10/0x10 [ 177.363762][ T7304] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 177.363799][ T7304] ? down_read+0x2be/0x330 [ 177.363824][ T7304] genl_rcv+0x28/0x40 [ 177.363848][ T7304] netlink_unicast+0x7bb/0x940 [ 177.363902][ T7304] netlink_sendmsg+0x813/0xb40 [ 177.363943][ T7304] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.363967][ T7304] ? aa_sock_msg_perm+0xf1/0x1b0 [ 177.363994][ T7304] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.364013][ T7304] sock_sendmsg_nosec+0x13a/0x180 [ 177.364035][ T7304] ____sys_sendmsg+0x54e/0x850 [ 177.364054][ T7304] ? __pfx_____sys_sendmsg+0x10/0x10 [ 177.364076][ T7304] ? import_iovec+0x73/0xa0 [ 177.364093][ T7304] ___sys_sendmsg+0x2a5/0x360 [ 177.364107][ T7304] ? __lock_acquire+0x683/0x2cf0 [ 177.364126][ T7304] ? __pfx____sys_sendmsg+0x10/0x10 [ 177.364166][ T7304] ? __fget_files+0x2a/0x420 [ 177.364180][ T7304] ? __fget_files+0x3a2/0x420 [ 177.364202][ T7304] __x64_sys_sendmsg+0x1b1/0x290 [ 177.364219][ T7304] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 177.364247][ T7304] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.364263][ T7304] do_syscall_64+0x174/0x580 [ 177.364286][ T7304] ? clear_bhb_loop+0x40/0x90 [ 177.364304][ T7304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.364319][ T7304] RIP: 0033:0x7ffa29b9ce59 [ 177.364333][ T7304] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 177.364346][ T7304] RSP: 002b:00007ffa2a9a4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.364379][ T7304] RAX: ffffffffffffffda RBX: 00007ffa29e15fa0 RCX: 00007ffa29b9ce59 [ 177.364391][ T7304] RDX: 0000000000000040 RSI: 00002000000000c0 RDI: 0000000000000003 [ 177.364401][ T7304] RBP: 00007ffa2a9a4090 R08: 0000000000000000 R09: 0000000000000000 [ 177.364411][ T7304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.364420][ T7304] R13: 00007ffa29e16038 R14: 00007ffa29e15fa0 R15: 00007ffa29f3fa48 [ 177.364445][ T7304] [ 177.705866][ T24] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 177.774238][ T5725] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 177.804205][ T5725] usb 5-1: device descriptor read/8, error -71 [ 177.865163][ T24] usb 1-1: config 0 has an invalid interface number: 69 but max is 0 [ 177.875288][ T24] usb 1-1: config 0 has no interface number 0 [ 177.881373][ T24] usb 1-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 177.893539][ T24] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 177.907661][ T24] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 177.917441][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.925492][ T24] usb 1-1: Product: syz [ 177.930727][ T24] usb 1-1: Manufacturer: syz [ 177.935508][ T24] usb 1-1: SerialNumber: syz [ 177.942876][ T24] usb 1-1: config 0 descriptor?? [ 177.948495][ T7296] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 177.957980][ T24] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 177.971613][ T24] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 178.034383][ T5624] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 178.053342][ T5725] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 178.064514][ T7310] syzkaller0: entered promiscuous mode [ 178.070041][ T7310] syzkaller0: entered allmulticast mode [ 178.076369][ T5725] usb 5-1: device descriptor read/8, error -71 [ 178.088383][ T7310] tipc: Enabled bearer , priority 0 [ 178.098012][ T7309] tipc: Resetting bearer [ 178.125580][ T7309] tipc: Disabling bearer [ 178.161497][ T7296] syz_tun: entered allmulticast mode [ 178.169336][ T7296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.182464][ T7296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.193838][ T5725] usb usb5-port1: unable to enumerate USB device [ 178.200690][ T7296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.484'. [ 178.210855][ T5624] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 178.228000][ T5624] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.237017][ T7296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.238136][ T5624] usb 4-1: Product: syz [ 178.249843][ T5624] usb 4-1: Manufacturer: syz [ 178.256167][ T7296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.264648][ T5624] usb 4-1: SerialNumber: syz [ 178.383666][ T5718] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 178.488289][ T7293] syz_tun: left allmulticast mode [ 178.505303][ T11] usb 1-1: USB disconnect, device number 25 [ 178.542381][ T11] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 178.567161][ T11] cyberjack 1-1:0.69: device disconnected [ 178.573071][ T5718] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.594771][ T5718] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 178.615727][ T5718] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 178.644441][ T5718] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 178.655530][ T5718] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 178.686157][ T5718] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 178.703601][ T5718] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 178.713177][ T5718] usb 3-1: Manufacturer: syz [ 178.727738][ T5718] usb 3-1: config 0 descriptor?? [ 179.005845][ T5718] usb 3-1: USB disconnect, device number 19 [ 179.122045][ T5624] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 179.140337][ T5624] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 179.155367][ T5624] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 179.173907][ T5624] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 179.208181][ T5624] usb 4-1: USB disconnect, device number 40 [ 179.304781][ T7327] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 179.380156][ T7325] netlink: 12 bytes leftover after parsing attributes in process `syz.1.497'. [ 179.607397][ T7339] tipc: Enabling of bearer rejected, failed to enable media [ 180.063739][ T11] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 180.233537][ T11] usb 2-1: Using ep0 maxpacket: 8 [ 180.257826][ T11] usb 2-1: unable to get BOS descriptor or descriptor too short [ 180.280033][ T11] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1023 [ 180.299557][ T11] usb 2-1: language id specifier not provided by device, defaulting to English [ 180.328892][ T11] usb 2-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 180.340767][ T11] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.349493][ T11] usb 2-1: Product: 첒ﷲᬟ裦⯛팦쀂䩑 [ 180.355968][ T11] usb 2-1: SerialNumber: syz [ 180.367429][ T7350] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 180.533387][ T5725] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 180.590396][ T7350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.611384][ T7350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.633969][ T7350] netlink: 12 bytes leftover after parsing attributes in process `syz.1.505'. [ 180.672865][ T11] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 180.705441][ T5725] usb 1-1: Using ep0 maxpacket: 8 [ 180.717129][ T5725] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 180.726283][ T5725] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 180.739210][ T5725] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 180.751659][ T5725] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 180.789066][ T5725] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 180.801446][ T5725] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 180.814068][ T5725] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 180.833972][ T11] usb 2-1: USB disconnect, device number 21 [ 180.866832][ T5725] usb 1-1: config 168 interface 0 has no altsetting 0 [ 180.878523][ T5725] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 180.887140][ T5725] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 180.899083][ T5725] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 180.910885][ T5725] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 180.923142][ T5725] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 180.936186][ T5725] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 180.958127][ T5725] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 180.993386][ T5725] usb 1-1: config 168 interface 0 has no altsetting 0 [ 181.009007][ T5725] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 181.016660][ T5725] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 181.035744][ T5725] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 181.053603][ T5725] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 181.074413][ T5725] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 181.090624][ T5787] udevd[5787]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 181.134967][ T5725] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 181.161793][ T5725] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 181.210200][ T7371] capability: warning: `syz.4.513' uses deprecated v2 capabilities in a way that may be insecure [ 181.225928][ T5725] usb 1-1: config 168 interface 0 has no altsetting 0 [ 181.226785][ T7375] FAULT_INJECTION: forcing a failure. [ 181.226785][ T7375] name failslab, interval 1, probability 0, space 0, times 0 [ 181.253972][ T7371] fuse: Bad value for 'fd' [ 181.260684][ T5725] usb 1-1: string descriptor 0 read error: -22 [ 181.271208][ T5725] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 181.297616][ T5725] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.323419][ T7375] CPU: 1 UID: 0 PID: 7375 Comm: syz.3.514 Tainted: G L syzkaller #0 PREEMPT(full) [ 181.323451][ T7375] Tainted: [L]=SOFTLOCKUP [ 181.323459][ T7375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 181.323475][ T7375] Call Trace: [ 181.323484][ T7375] [ 181.323493][ T7375] dump_stack_lvl+0xe8/0x150 [ 181.323535][ T7375] should_fail_ex+0x40c/0x560 [ 181.323569][ T7375] should_failslab+0xa8/0x100 [ 181.323594][ T7375] __kmalloc_cache_noprof+0xa8/0x660 [ 181.323629][ T7375] ? __vb2_init_fileio+0x1e2/0x1040 [ 181.323653][ T7375] ? __vb2_init_fileio+0x1e2/0x1040 [ 181.323685][ T7375] __vb2_init_fileio+0x1e2/0x1040 [ 181.323726][ T7375] vb2_core_poll+0x4b0/0x830 [ 181.323756][ T7375] vb2_fop_poll+0x196/0x310 [ 181.323787][ T7375] ? __pfx_vb2_fop_poll+0x10/0x10 [ 181.323812][ T7375] v4l2_poll+0x147/0x2c0 [ 181.323847][ T7375] ? __pfx_v4l2_poll+0x10/0x10 [ 181.323870][ T7375] do_sys_poll+0x990/0x1110 [ 181.323916][ T7375] ? do_sys_poll+0x491/0x1110 [ 181.323948][ T7375] ? __pfx_do_sys_poll+0x10/0x10 [ 181.323979][ T7375] ? aa_file_perm+0x18b/0x15f0 [ 181.324010][ T7375] ? __pfx_pollwake+0x10/0x10 [ 181.324038][ T7375] ? __pfx_pollwake+0x10/0x10 [ 181.324066][ T7375] ? __pfx_pollwake+0x10/0x10 [ 181.324095][ T7375] ? __pfx_pollwake+0x10/0x10 [ 181.324123][ T7375] ? __pfx_pollwake+0x10/0x10 [ 181.324151][ T7375] ? __pfx_pollwake+0x10/0x10 [ 181.324180][ T7375] ? __pfx_pollwake+0x10/0x10 [ 181.324207][ T7375] ? __pfx_pollwake+0x10/0x10 [ 181.324236][ T7375] ? __pfx_pollwake+0x10/0x10 [ 181.324295][ T7375] ? set_user_sigmask+0xcd/0x1c0 [ 181.324321][ T7375] ? __pfx_set_user_sigmask+0x10/0x10 [ 181.324347][ T7375] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 181.324380][ T7375] __se_sys_ppoll+0x209/0x2b0 [ 181.324405][ T7375] ? fput+0xa0/0xd0 [ 181.324433][ T7375] ? __pfx___se_sys_ppoll+0x10/0x10 [ 181.324458][ T7375] ? __pfx_ksys_write+0x10/0x10 [ 181.324485][ T7375] ? __x64_sys_ppoll+0x20/0xc0 [ 181.324509][ T7375] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.324536][ T7375] do_syscall_64+0x174/0x580 [ 181.324561][ T7375] ? trace_irq_disable+0x3b/0x140 [ 181.324589][ T7375] ? clear_bhb_loop+0x40/0x90 [ 181.324611][ T7375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.324629][ T7375] RIP: 0033:0x7ffa29b9ce59 [ 181.324645][ T7375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.324661][ T7375] RSP: 002b:00007ffa2a9a4028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 181.324680][ T7375] RAX: ffffffffffffffda RBX: 00007ffa29e15fa0 RCX: 00007ffa29b9ce59 [ 181.324693][ T7375] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 181.324705][ T7375] RBP: 00007ffa2a9a4090 R08: 0000000000000000 R09: 0000000000000000 [ 181.324716][ T7375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.324726][ T7375] R13: 00007ffa29e16038 R14: 00007ffa29e15fa0 R15: 00007ffa29f3fa48 [ 181.324755][ T7375] [ 181.644815][ T7378] FAULT_INJECTION: forcing a failure. [ 181.644815][ T7378] name failslab, interval 1, probability 0, space 0, times 0 [ 181.659598][ T7378] CPU: 0 UID: 0 PID: 7378 Comm: syz.2.515 Tainted: G L syzkaller #0 PREEMPT(full) [ 181.659630][ T7378] Tainted: [L]=SOFTLOCKUP [ 181.659638][ T7378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 181.659650][ T7378] Call Trace: [ 181.659659][ T7378] [ 181.659667][ T7378] dump_stack_lvl+0xe8/0x150 [ 181.659695][ T7378] should_fail_ex+0x40c/0x560 [ 181.659727][ T7378] should_failslab+0xa8/0x100 [ 181.659751][ T7378] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 181.659781][ T7378] ? skb_clone+0x212/0x3a0 [ 181.659801][ T7378] ? skb_clone+0x212/0x3a0 [ 181.659829][ T7378] skb_clone+0x212/0x3a0 [ 181.659854][ T7378] __netlink_deliver_tap+0x413/0x860 [ 181.659888][ T7378] ? netlink_deliver_tap+0x2e/0x1b0 [ 181.659911][ T7378] netlink_deliver_tap+0x19c/0x1b0 [ 181.659934][ T7378] netlink_dump+0x95b/0xee0 [ 181.659966][ T7378] ? __pfx_netlink_dump+0x10/0x10 [ 181.659983][ T7378] ? security_capable+0x7e/0x2c0 [ 181.660027][ T7378] __netlink_dump_start+0x589/0x7b0 [ 181.660055][ T7378] inet_diag_handler_cmd+0x1df/0x2c0 [ 181.660083][ T7378] ? sock_diag_lock_handler+0x19/0x290 [ 181.660114][ T7378] ? __pfx_inet_diag_handler_cmd+0x10/0x10 [ 181.660141][ T7378] ? __pfx_inet_diag_dump_start+0x10/0x10 [ 181.660178][ T7378] ? __pfx_inet_diag_dump+0x10/0x10 [ 181.660201][ T7378] ? __pfx_inet_diag_dump_done+0x10/0x10 [ 181.660230][ T7378] ? sock_diag_lock_handler+0x19/0x290 [ 181.660257][ T7378] ? sock_diag_lock_handler+0x19/0x290 [ 181.660288][ T7378] sock_diag_rcv_msg+0x4b0/0x5f0 [ 181.660319][ T7378] netlink_rcv_skb+0x226/0x4a0 [ 181.660339][ T7378] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 181.660368][ T7378] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 181.660400][ T7378] ? netlink_deliver_tap+0x2e/0x1b0 [ 181.660419][ T7378] ? netlink_deliver_tap+0x2e/0x1b0 [ 181.660443][ T7378] netlink_unicast+0x7bb/0x940 [ 181.660482][ T7378] netlink_sendmsg+0x813/0xb40 [ 181.660502][ T7378] ? aa_file_perm+0x18b/0x15f0 [ 181.660541][ T7378] ? __pfx_netlink_sendmsg+0x10/0x10 [ 181.660566][ T7378] ? aa_sock_msg_perm+0xf1/0x1b0 [ 181.660594][ T7378] ? __pfx_netlink_sendmsg+0x10/0x10 [ 181.660613][ T7378] sock_sendmsg_nosec+0x13a/0x180 [ 181.660640][ T7378] sock_write_iter+0x2de/0x3e0 [ 181.660665][ T7378] ? __pfx_sock_write_iter+0x10/0x10 [ 181.660704][ T7378] do_iter_readv_writev+0x612/0x8c0 [ 181.660731][ T7378] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 181.660759][ T7378] ? bpf_lsm_file_permission+0x9/0x20 [ 181.660784][ T7378] ? security_file_permission+0x75/0x260 [ 181.660815][ T7378] ? rw_verify_area+0x203/0x4c0 [ 181.660841][ T7378] vfs_writev+0x343/0x990 [ 181.660878][ T7378] ? __pfx_vfs_writev+0x10/0x10 [ 181.660916][ T7378] ? __fget_files+0x2a/0x420 [ 181.660979][ T7378] ? __fget_files+0x3a2/0x420 [ 181.660996][ T7378] ? __fget_files+0x2a/0x420 [ 181.661022][ T7378] do_writev+0x154/0x2e0 [ 181.661052][ T7378] ? __pfx_do_writev+0x10/0x10 [ 181.661086][ T7378] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.661107][ T7378] do_syscall_64+0x174/0x580 [ 181.661134][ T7378] ? trace_irq_disable+0x3b/0x140 [ 181.661163][ T7378] ? clear_bhb_loop+0x40/0x90 [ 181.661185][ T7378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.661204][ T7378] RIP: 0033:0x7f66a819ce59 [ 181.661222][ T7378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.661238][ T7378] RSP: 002b:00007f66a906d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 181.661258][ T7378] RAX: ffffffffffffffda RBX: 00007f66a8415fa0 RCX: 00007f66a819ce59 [ 181.661272][ T7378] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000d [ 181.661284][ T7378] RBP: 00007f66a906d090 R08: 0000000000000000 R09: 0000000000000000 [ 181.661295][ T7378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.661306][ T7378] R13: 00007f66a8416038 R14: 00007f66a8415fa0 R15: 00007f66a853fa48 [ 181.661334][ T7378] [ 182.073338][ T5725] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 182.095169][ T5725] usb 1-1: USB disconnect, device number 26 [ 182.218392][ T7390] netlink: 'syz.1.519': attribute type 13 has an invalid length. [ 182.305383][ T24] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 182.464204][ T24] usb 4-1: device descriptor read/64, error -71 [ 182.621961][ T7400] 8021q: adding VLAN 0 to HW filter on device ipvlan4 [ 182.733516][ T24] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 182.763709][ T5691] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 182.873416][ T24] usb 4-1: device descriptor read/64, error -71 [ 182.935634][ T5691] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 182.954676][ T5691] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 182.992248][ T5691] usb 3-1: config 0 has no interface number 0 [ 182.994402][ T24] usb usb4-port1: attempt power cycle [ 182.998598][ T5718] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 183.051925][ T5691] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 183.104127][ T5691] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.130426][ T5691] usb 3-1: Product: syz [ 183.144096][ T5691] usb 3-1: Manufacturer: syz [ 183.160395][ T5691] usb 3-1: SerialNumber: syz [ 183.188208][ T5718] usb 2-1: Using ep0 maxpacket: 32 [ 183.209027][ T5718] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.223777][ T5691] usb 3-1: config 0 descriptor?? [ 183.233159][ T5718] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.253595][ T5718] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 183.268018][ T5718] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 183.280531][ T5718] usb 2-1: Product: syz [ 183.285577][ T5718] usb 2-1: Manufacturer: syz [ 183.302139][ T5718] hub 2-1:4.0: USB hub found [ 183.353352][ T24] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 183.385642][ T24] usb 4-1: device descriptor read/8, error -71 [ 183.583350][ T5624] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 183.633397][ T24] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 183.664054][ T24] usb 4-1: device descriptor read/8, error -71 [ 183.704956][ T5718] hub 2-1:4.0: config failed, can't read hub descriptor (err -22) [ 183.743335][ T5624] usb 5-1: Using ep0 maxpacket: 16 [ 183.747249][ T5718] usb 2-1: USB disconnect, device number 22 [ 183.764113][ T5624] usb 5-1: too many configurations: 138, using maximum allowed: 8 [ 183.784844][ T24] usb usb4-port1: unable to enumerate USB device [ 183.801135][ T5624] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 183.814740][ T5624] usb 5-1: can't read configurations, error -61 [ 183.954455][ T5624] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 184.130186][ T5624] usb 5-1: Using ep0 maxpacket: 16 [ 184.152194][ T5624] usb 5-1: too many configurations: 138, using maximum allowed: 8 [ 184.177651][ T5624] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 184.196092][ T5624] usb 5-1: can't read configurations, error -61 [ 184.218683][ T5624] usb usb5-port1: attempt power cycle [ 184.377606][ T7422] netlink: 12 bytes leftover after parsing attributes in process `syz.1.529'. [ 184.574217][ T5624] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 184.626156][ T5624] usb 5-1: Using ep0 maxpacket: 16 [ 184.641294][ T5624] usb 5-1: too many configurations: 138, using maximum allowed: 8 [ 184.679342][ T5624] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 184.705527][ T5624] usb 5-1: can't read configurations, error -61 [ 184.853512][ T5624] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 184.894829][ T5624] usb 5-1: Using ep0 maxpacket: 16 [ 184.925298][ T5624] usb 5-1: too many configurations: 138, using maximum allowed: 8 [ 184.965804][ T5624] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 185.000089][ T5624] usb 5-1: can't read configurations, error -61 [ 185.031400][ T5624] usb usb5-port1: unable to enumerate USB device [ 185.197262][ T7436] FAULT_INJECTION: forcing a failure. [ 185.197262][ T7436] name failslab, interval 1, probability 0, space 0, times 0 [ 185.307133][ T7436] CPU: 0 UID: 0 PID: 7436 Comm: syz.3.532 Tainted: G L syzkaller #0 PREEMPT(full) [ 185.307167][ T7436] Tainted: [L]=SOFTLOCKUP [ 185.307174][ T7436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 185.307185][ T7436] Call Trace: [ 185.307192][ T7436] [ 185.307199][ T7436] dump_stack_lvl+0xe8/0x150 [ 185.307233][ T7436] should_fail_ex+0x40c/0x560 [ 185.307263][ T7436] should_failslab+0xa8/0x100 [ 185.307285][ T7436] __kmalloc_cache_noprof+0xa8/0x660 [ 185.307311][ T7436] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 185.307334][ T7436] ? __kmalloc_cache_noprof+0x150/0x660 [ 185.307359][ T7436] ? sctp_add_bind_addr+0x8c/0x370 [ 185.307380][ T7436] ? sctp_add_bind_addr+0x8c/0x370 [ 185.307408][ T7436] sctp_add_bind_addr+0x8c/0x370 [ 185.307435][ T7436] sctp_copy_local_addr_list+0x31a/0x4e0 [ 185.307461][ T7436] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 185.307486][ T7436] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 185.307529][ T7436] ? sctp_v6_is_any+0x64/0x80 [ 185.307556][ T7436] ? sctp_copy_one_addr+0x93/0x360 [ 185.307583][ T7436] sctp_bind_addr_copy+0xb3/0x3c0 [ 185.307609][ T7436] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 185.307635][ T7436] sctp_connect_new_asoc+0x2ff/0x6b0 [ 185.307657][ T7436] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 185.307683][ T7436] ? __local_bh_enable_ip+0xd0/0x130 [ 185.307708][ T7436] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 185.307735][ T7436] ? security_sctp_bind_connect+0x7e/0x2c0 [ 185.307768][ T7436] sctp_sendmsg+0x159b/0x2d00 [ 185.307811][ T7436] ? __pfx_sctp_sendmsg+0x10/0x10 [ 185.307847][ T7436] ? aa_sk_perm+0x6d5/0x900 [ 185.307880][ T7436] ? sock_rps_record_flow+0x19/0x350 [ 185.307921][ T7436] ? inet_sendmsg+0x298/0x320 [ 185.307947][ T7436] ? __pfx_inet_sendmsg+0x10/0x10 [ 185.307971][ T7436] sock_sendmsg_nosec+0x10e/0x180 [ 185.307997][ T7436] ____sys_sendmsg+0x54e/0x850 [ 185.308020][ T7436] ? __pfx_____sys_sendmsg+0x10/0x10 [ 185.308048][ T7436] ? import_iovec+0x73/0xa0 [ 185.308069][ T7436] ___sys_sendmsg+0x2a5/0x360 [ 185.308086][ T7436] ? __lock_acquire+0x683/0x2cf0 [ 185.308109][ T7436] ? __pfx____sys_sendmsg+0x10/0x10 [ 185.308161][ T7436] ? __fget_files+0x2a/0x420 [ 185.308178][ T7436] ? __fget_files+0x3a2/0x420 [ 185.308212][ T7436] __x64_sys_sendmsg+0x1b1/0x290 [ 185.308234][ T7436] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 185.308270][ T7436] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.308289][ T7436] do_syscall_64+0x174/0x580 [ 185.308314][ T7436] ? trace_irq_disable+0x3b/0x140 [ 185.308341][ T7436] ? clear_bhb_loop+0x40/0x90 [ 185.308362][ T7436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.308379][ T7436] RIP: 0033:0x7ffa29b9ce59 [ 185.308396][ T7436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.308411][ T7436] RSP: 002b:00007ffa2a983028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 185.308430][ T7436] RAX: ffffffffffffffda RBX: 00007ffa29e16090 RCX: 00007ffa29b9ce59 [ 185.308442][ T7436] RDX: 00000000240280d1 RSI: 0000200000002dc0 RDI: 0000000000000005 [ 185.308454][ T7436] RBP: 00007ffa2a983090 R08: 0000000000000000 R09: 0000000000000000 [ 185.308464][ T7436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 185.308474][ T7436] R13: 00007ffa29e16128 R14: 00007ffa29e16090 R15: 00007ffa29f3fa48 [ 185.308502][ T7436] [ 186.757468][ T7462] netlink: 8 bytes leftover after parsing attributes in process `syz.3.537'. [ 187.017796][ T5718] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 187.074889][ T5691] uvcvideo 3-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 187.100597][ T5691] uvcvideo 3-1:0.64: No valid video chain found. [ 187.151362][ T5691] usb 3-1: USB disconnect, device number 20 [ 187.213991][ T5718] usb 5-1: Using ep0 maxpacket: 32 [ 187.244637][ T5718] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 187.273884][ T5718] usb 5-1: config 0 has no interface number 0 [ 187.302493][ T5718] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 187.333930][ T5718] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.362288][ T5718] usb 5-1: Product: syz [ 187.373402][ T187] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 187.381047][ T5718] usb 5-1: Manufacturer: syz [ 187.400324][ T5718] usb 5-1: SerialNumber: syz [ 187.427614][ T5718] usb 5-1: config 0 descriptor?? [ 187.476282][ T5718] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 187.548783][ T187] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 187.585798][ T7476] netlink: 8 bytes leftover after parsing attributes in process `syz.2.542'. [ 187.598872][ T187] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.627812][ T187] usb 4-1: Product: syz [ 187.642217][ T187] usb 4-1: Manufacturer: syz [ 187.642494][ T7476] netlink: 8 bytes leftover after parsing attributes in process `syz.2.542'. [ 187.679590][ T187] usb 4-1: SerialNumber: syz [ 187.692860][ T5718] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 187.714809][ T187] usb 4-1: config 0 descriptor?? [ 187.743614][ T7476] netlink: 8 bytes leftover after parsing attributes in process `syz.2.542'. [ 187.755918][ T7469] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 187.762553][ T7469] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 187.772684][ T5718] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 187.800074][ T7469] vhci_hcd vhci_hcd.0: Device attached [ 187.820317][ T7480] vhci_hcd: connection closed [ 187.820928][ T62] vhci_hcd vhci_hcd.0: stop threads [ 187.833887][ T7476] netlink: 8 bytes leftover after parsing attributes in process `syz.2.542'. [ 187.853954][ T62] vhci_hcd vhci_hcd.0: release socket [ 187.875151][ T62] vhci_hcd vhci_hcd.0: disconnect device [ 187.899399][ T7476] netlink: 8 bytes leftover after parsing attributes in process `syz.2.542'. [ 188.033617][ T24] usb 3-1: new low-speed USB device number 21 using dummy_hcd [ 188.078057][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 188.079528][ T5624] usb 5-1: USB disconnect, device number 39 [ 188.126819][ T187] usb 4-1: USB disconnect, device number 45 [ 188.182182][ T5624] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 188.232018][ T24] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 188.257979][ T5624] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 188.273317][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 188.299158][ T5624] quatech2 5-1:0.51: device disconnected [ 188.310869][ T24] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 188.350140][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 188.393327][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 188.420678][ T24] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 188.441638][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 188.468669][ T24] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 188.501327][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 188.530940][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 188.556303][ T24] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 188.573213][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 188.608717][ T24] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 188.650707][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 188.708723][ T24] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 188.762288][ T24] usb 3-1: string descriptor 0 read error: -22 [ 188.788016][ T24] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 188.833796][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.896503][ T24] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 189.022048][ T7497] netlink: 32 bytes leftover after parsing attributes in process `syz.0.547'. [ 189.032573][ T7497] ip6tnl1: entered promiscuous mode [ 189.046690][ T7487] kvm: pic: non byte write [ 189.062682][ T7494] kvm: pic: non byte write [ 189.082596][ T24] usb 3-1: USB disconnect, device number 21 [ 189.093346][ T5624] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 189.253328][ T5624] usb 5-1: Using ep0 maxpacket: 16 [ 189.261718][ T5624] usb 5-1: config 0 has no interfaces? [ 189.274767][ T5624] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 189.284770][ T5624] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.292989][ T5624] usb 5-1: Product: syz [ 189.298675][ T5624] usb 5-1: Manufacturer: syz [ 189.303663][ T5624] usb 5-1: SerialNumber: syz [ 189.316746][ T5624] usb 5-1: config 0 descriptor?? [ 189.444663][ T7508] ip6tnl2: entered allmulticast mode [ 189.528021][ T7510] netlink: 'syz.0.550': attribute type 1 has an invalid length. [ 189.543973][ T5624] usb 5-1: USB disconnect, device number 40 [ 189.989670][ T7516] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 190.273391][ T5624] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 190.527491][ T7522] netlink: 'syz.3.555': attribute type 2 has an invalid length. [ 190.541683][ T7522] netlink: 'syz.3.555': attribute type 8 has an invalid length. [ 190.557121][ T7522] netlink: 132 bytes leftover after parsing attributes in process `syz.3.555'. [ 191.257916][ T7541] bond0: entered promiscuous mode [ 191.264701][ T7541] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 191.283085][ T7541] bond0: left promiscuous mode [ 191.295150][ T7541] netdevsim netdevsim2 netdevsim1: left promiscuous mode [ 191.471970][ T7554] tipc: Enabling of bearer rejected, already enabled [ 191.633347][ T5691] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 191.743349][ T5725] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 191.783606][ T5691] usb 1-1: Using ep0 maxpacket: 8 [ 191.788741][ T5718] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 191.798739][ T5691] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 191.807707][ T5691] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.818379][ T5691] usb 1-1: config 0 has no interface number 0 [ 191.825000][ T5691] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 191.836300][ T5691] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 191.851070][ T5691] usb 1-1: config 0 interface 255 has no altsetting 0 [ 191.860282][ T5691] usb 1-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= d.68 [ 191.870258][ T5691] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.878433][ T5691] usb 1-1: Product: syz [ 191.882957][ T5691] usb 1-1: Manufacturer: syz [ 191.888607][ T5691] usb 1-1: SerialNumber: syz [ 191.895934][ T5691] usb 1-1: config 0 descriptor?? [ 191.926316][ T5725] usb 3-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 191.939687][ T5725] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 191.954121][ T5725] usb 3-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 191.954636][ T5718] usb 2-1: Using ep0 maxpacket: 16 [ 191.967441][ T5725] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.978091][ T5725] usb 3-1: Product: syz [ 191.982369][ T5725] usb 3-1: Manufacturer: syz [ 191.993312][ T5725] usb 3-1: SerialNumber: syz [ 191.999285][ T5718] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 192.016847][ T5725] usb 3-1: config 0 descriptor?? [ 192.027631][ T5718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.046311][ T5718] usb 2-1: config 0 descriptor?? [ 192.054718][ T5725] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 192.064311][ T5718] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 192.112954][ T5691] usb 1-1: USB disconnect, device number 27 [ 192.265307][ T5718] gspca_sonixj: reg_w1 err -71 [ 192.271160][ T5718] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 192.285700][ T5718] usb 2-1: USB disconnect, device number 23 [ 192.974859][ T5725] gspca_sunplus: reg_r err -110 [ 192.979970][ T5725] sunplus 3-1:0.0: probe with driver sunplus failed with error -110 [ 193.044788][ T5624] usb 4-1: unable to get BOS descriptor or descriptor too short [ 193.062502][ T5624] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 193.073346][ T5624] usb 4-1: can't read configurations, error -71 [ 193.871739][ T7592] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 194.047521][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.057906][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.470718][ T7603] loop5: detected capacity change from 0 to 7 [ 194.492524][ T7603] Dev loop5: unable to read RDB block 7 [ 194.512945][ T7603] loop5: unable to read partition table [ 194.528471][ T7603] loop5: partition table beyond EOD, truncated [ 194.540223][ T7603] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 194.596884][ T5691] usb 3-1: USB disconnect, device number 22 [ 194.974635][ T7611] netlink: 848 bytes leftover after parsing attributes in process `syz.2.584'. [ 195.071759][ T7613] ip6tnl2: entered allmulticast mode [ 195.416518][ T7617] kvm: apic: phys broadcast and lowest prio [ 195.516415][ T7605] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 195.688093][ T7629] netlink: 12 bytes leftover after parsing attributes in process `syz.0.591'. [ 195.874567][ T7630] bridge1: port 1(veth5) entered blocking state [ 195.900870][ T7630] bridge1: port 1(veth5) entered disabled state [ 195.923945][ T7630] veth5: entered allmulticast mode [ 195.973386][ T7630] veth5: entered promiscuous mode [ 196.021163][ T7629] bridge1: port 2(veth0_to_bond) entered blocking state [ 196.051740][ T7629] bridge1: port 2(veth0_to_bond) entered disabled state [ 196.095365][ T7629] veth0_to_bond: entered allmulticast mode [ 196.144485][ T7629] veth0_to_bond: entered promiscuous mode [ 196.251106][ T7633] bridge1: port 3(veth7) entered blocking state [ 196.269337][ T7633] bridge1: port 3(veth7) entered disabled state [ 196.286090][ T7633] veth7: entered allmulticast mode [ 196.303381][ T7633] veth7: entered promiscuous mode [ 196.329089][ T30] audit: type=1326 audit(1782415278.284:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7604 comm="syz.3.581" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffa29b9ce59 code=0x0 [ 196.440217][ T7642] bond0: entered promiscuous mode [ 196.450140][ T7642] bond0: left promiscuous mode [ 196.672615][ T7643] syzkaller0: entered promiscuous mode [ 196.733164][ T7643] syzkaller0: entered allmulticast mode [ 196.785838][ T7646] netlink: 52 bytes leftover after parsing attributes in process `syz.2.594'. [ 197.964262][ T7674] netlink: 12 bytes leftover after parsing attributes in process `syz.0.603'. [ 198.436009][ T7685] netlink: 48 bytes leftover after parsing attributes in process `syz.3.607'. [ 198.470904][ T7685] netlink: 48 bytes leftover after parsing attributes in process `syz.3.607'. [ 198.776282][ T7690] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 199.571915][ T7707] team0: left allmulticast mode [ 199.583387][ T7707] team_slave_0: left allmulticast mode [ 199.601185][ T7707] team_slave_1: left allmulticast mode [ 199.607783][ T7707] team0: left promiscuous mode [ 199.617743][ T7707] team_slave_0: left promiscuous mode [ 199.624379][ T7707] team_slave_1: left promiscuous mode [ 199.630701][ T7706] fuse: Unknown parameter '¬+é åÒõÊÑœ©ö)“O¢`‡EYé' [ 199.637977][ T7707] bridge0: port 3(team0) entered disabled state [ 199.786554][ T7707] bond0: (slave bond_slave_0): Releasing backup interface [ 199.798036][ T7712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.616'. [ 199.892986][ T7707] bond0: (slave bond_slave_1): Releasing backup interface [ 200.055207][ T7707] team0: Port device team_slave_0 removed [ 200.154523][ T7707] team0: Port device team_slave_1 removed [ 200.201756][ T7722] netlink: 28 bytes leftover after parsing attributes in process `syz.1.620'. [ 200.212584][ T7707] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.258960][ T7707] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.289543][ T7707] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.328891][ T7707] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.370065][ T7707] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 200.410152][ T7727] netlink: 848 bytes leftover after parsing attributes in process `syz.0.622'. [ 200.730708][ T7737] sg_write: data in/out 426048/136 bytes for SCSI command 0x0-- guessing data in; [ 200.730708][ T7737] program syz.4.624 not setting count and/or reply_len properly [ 201.237229][ T7747] netlink: 4 bytes leftover after parsing attributes in process `syz.3.628'. [ 201.265497][ T5691] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 201.433341][ T5691] usb 3-1: Using ep0 maxpacket: 32 [ 201.441435][ T5691] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 201.474301][ T5691] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 201.509436][ T5691] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 201.523624][ T11] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 201.568669][ T5691] usb 3-1: Product: syz [ 201.580841][ T5691] usb 3-1: Manufacturer: syz [ 201.586933][ T7749] bond0: entered promiscuous mode [ 201.592105][ T7749] bond_slave_0: entered promiscuous mode [ 201.594405][ T5691] usb 3-1: SerialNumber: syz [ 201.601806][ T7749] bond_slave_1: entered promiscuous mode [ 201.610362][ T7749] bond0: left promiscuous mode [ 201.619710][ T7749] bond_slave_0: left promiscuous mode [ 201.631623][ T5691] usb 3-1: config 0 descriptor?? [ 201.638202][ T7744] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 201.641694][ T7749] bond_slave_1: left promiscuous mode [ 201.651877][ T5691] hub 3-1:0.0: bad descriptor, ignoring hub [ 201.686162][ T5691] hub 3-1:0.0: probe with driver hub failed with error -5 [ 201.704777][ T11] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 201.721743][ T11] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.747615][ T11] usb 4-1: config 0 descriptor?? [ 201.765449][ T11] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 201.800848][ T7751] netlink: 60 bytes leftover after parsing attributes in process `syz.1.630'. [ 201.969416][ T11] gp8psk: usb in 128 operation failed. [ 202.186504][ T11] gp8psk: FW Version = 0.00.0 (0x0) Build 2000/00/00 [ 202.408048][ T7747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.429666][ T7747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.469229][ T7754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.506969][ T7754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.546018][ T7754] binder: 7743:7754 ioctl c0405602 200000000100 returned -22 [ 202.744269][ T968] raw-gadget.0 gadget.2: failed to queue suspend event [ 202.763836][ T5725] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 202.803694][ T5718] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 202.833967][ T7744] raw-gadget.0 gadget.2: failed to queue resume event [ 202.867936][ T968] raw-gadget.0 gadget.2: failed to queue suspend event [ 202.925146][ T5725] usb 1-1: Using ep0 maxpacket: 8 [ 202.942064][ T5725] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 202.951330][ T7744] raw-gadget.0 gadget.2: failed to queue resume event [ 202.969217][ T5725] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.978450][ T5718] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 202.980938][ T7754] raw-gadget.0 gadget.2: failed to queue suspend event [ 203.001187][ T5725] usb 1-1: Product: syz [ 203.007430][ T11] gp8psk: usb in 149 operation failed. [ 203.008191][ T5725] usb 1-1: Manufacturer: syz [ 203.018538][ T7754] raw-gadget.0 gadget.2: failed to queue disconnect event [ 203.025949][ T5725] usb 1-1: SerialNumber: syz [ 203.028208][ T5718] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 203.040722][ T11] gp8psk: failed to get FPGA version [ 203.047832][ T5725] usb 1-1: config 0 descriptor?? [ 203.059458][ T11] gp8psk: usb in 138 operation failed. [ 203.066660][ T11] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 203.076972][ T5725] gspca_main: se401-2.14.0 probing 047d:5003 [ 203.086329][ T11] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 203.096772][ T5718] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 203.109356][ T5718] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.121815][ T11] usb 4-1: USB disconnect, device number 48 [ 203.130373][ T5718] usb 2-1: Product: syz [ 203.137048][ T5718] usb 2-1: Manufacturer: syz [ 203.141795][ T5718] usb 2-1: SerialNumber: syz [ 203.151588][ T5718] usb 2-1: config 0 descriptor?? [ 203.175372][ T5718] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 203.269690][ T7766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.278717][ T7766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.433337][ T187] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 203.488398][ T5725] gspca_se401: ExtraFeatures: 4 [ 203.493466][ T5725] gspca_se401: Frame size: 64x0 bayer [ 203.498902][ T5725] gspca_se401: Frame size: 0x0 1/16th janggu [ 203.505238][ T5725] gspca_se401: Frame size: 0x0 1/16th janggu [ 203.511247][ T5725] gspca_se401: Frame size: 0x0 1/16th janggu [ 203.517880][ T5725] gspca_se401: Frame size: 0x0 1/16th janggu [ 203.583613][ T187] usb 5-1: Using ep0 maxpacket: 16 [ 203.599192][ T187] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 203.611886][ T187] usb 5-1: config 0 has no interface number 0 [ 203.622681][ T187] usb 5-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 203.632504][ T187] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.641309][ T187] usb 5-1: Product: syz [ 203.648469][ T187] usb 5-1: Manufacturer: syz [ 203.653172][ T187] usb 5-1: SerialNumber: syz [ 203.662152][ T187] usb 5-1: config 0 descriptor?? [ 203.672492][ T187] hub 5-1:0.132: bad descriptor, ignoring hub [ 203.679510][ T187] hub 5-1:0.132: probe with driver hub failed with error -5 [ 203.692228][ T187] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.132/input/input16 [ 203.736355][ T7766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.755420][ T7766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.841022][ T5691] usb 3-1: USB disconnect, device number 23 [ 203.970710][ T5725] input: se401 as /devices/platform/dummy_hcd.0/usb1/1-1/input/input17 [ 203.988362][ T5725] videodev: could not get a free minor [ 203.996794][ T5725] gspca_main: video_register_device err -23 [ 204.011785][ T5725] se401 1-1:0.0: probe with driver se401 failed with error -23 [ 204.028969][ T5725] usb 1-1: USB disconnect, device number 28 [ 204.467978][ T30] audit: type=1326 audit(1782415286.424:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7790 comm="syz.2.642" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a819ce59 code=0x7ffc0000 [ 204.497508][ T30] audit: type=1326 audit(1782415286.424:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7790 comm="syz.2.642" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a819ce59 code=0x7ffc0000 [ 204.535708][ T30] audit: type=1326 audit(1782415286.434:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7790 comm="syz.2.642" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a819ce59 code=0x7ffc0000 [ 204.561317][ T30] audit: type=1326 audit(1782415286.434:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7790 comm="syz.2.642" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a819ce59 code=0x7ffc0000 [ 204.661228][ T30] audit: type=1326 audit(1782415286.434:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7790 comm="syz.2.642" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f66a819ce59 code=0x7ffc0000 [ 204.738115][ T30] audit: type=1326 audit(1782415286.444:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7790 comm="syz.2.642" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a819ce59 code=0x7ffc0000 [ 204.836729][ T30] audit: type=1326 audit(1782415286.444:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7790 comm="syz.2.642" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a819ce59 code=0x7ffc0000 [ 204.939843][ T30] audit: type=1326 audit(1782415286.444:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7790 comm="syz.2.642" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a819ce59 code=0x7ffc0000 [ 204.993822][ T30] audit: type=1326 audit(1782415286.444:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7790 comm="syz.2.642" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a819ce59 code=0x7ffc0000 [ 205.038024][ T30] audit: type=1326 audit(1782415286.444:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7790 comm="syz.2.642" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f66a819ce59 code=0x7ffc0000 [ 205.161900][ T7795] netlink: 84 bytes leftover after parsing attributes in process `syz.0.643'. [ 205.717000][ T5702] usb 2-1: USB disconnect, device number 24 [ 205.826422][ T5691] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 205.993366][ T5691] usb 3-1: Using ep0 maxpacket: 8 [ 206.014506][ T5691] usb 3-1: config 1 has an invalid interface number: 32 but max is 6 [ 206.038042][ T5691] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 206.056764][ T5691] usb 3-1: config 1 has no interface number 0 [ 206.080134][ T5691] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 206.100054][ T5691] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 206.142884][ T5691] usb 3-1: Product: syz [ 206.167105][ T5691] usb 3-1: Manufacturer: syz [ 206.185217][ T5691] usb 3-1: SerialNumber: syz [ 206.384823][ T11] usb 5-1: USB disconnect, device number 41 [ 206.410015][ T7819] netlink: 8 bytes leftover after parsing attributes in process `syz.4.649'. [ 206.445288][ T5691] usb 3-1: Handspring Visor / Palm OS: No valid connect info available [ 206.486727][ T5691] usb 3-1: Handspring Visor / Palm OS: port 6, is for Remote File System use [ 206.528286][ T5691] usb 3-1: Handspring Visor / Palm OS: port 217, is for unknown use [ 206.558499][ T5691] usb 3-1: Handspring Visor / Palm OS: Number of ports: 2 [ 206.611158][ T7821] netlink: 4 bytes leftover after parsing attributes in process `syz.4.650'. [ 206.646487][ T5691] usb 3-1: palm_os_3_probe - error -71 getting bytes available request [ 206.682031][ T5691] visor 3-1:1.32: Handspring Visor / Palm OS converter detected [ 206.710984][ T5691] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 206.738347][ T5691] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 206.780384][ T5691] usb 3-1: USB disconnect, device number 24 [ 206.829392][ T5691] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 206.893389][ T11] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 206.901475][ T5691] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 206.952253][ T5691] visor 3-1:1.32: device disconnected [ 207.075607][ T11] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 207.097804][ T11] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.114853][ T11] usb 5-1: config 0 descriptor?? [ 207.120149][ T7826] FAULT_INJECTION: forcing a failure. [ 207.120149][ T7826] name failslab, interval 1, probability 0, space 0, times 0 [ 207.152199][ T11] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 207.179953][ T7826] CPU: 0 UID: 0 PID: 7826 Comm: syz.3.651 Tainted: G L syzkaller #0 PREEMPT(full) [ 207.179981][ T7826] Tainted: [L]=SOFTLOCKUP [ 207.179988][ T7826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 207.179998][ T7826] Call Trace: [ 207.180005][ T7826] [ 207.180012][ T7826] dump_stack_lvl+0xe8/0x150 [ 207.180038][ T7826] should_fail_ex+0x40c/0x560 [ 207.180069][ T7826] should_failslab+0xa8/0x100 [ 207.180092][ T7826] __kmalloc_cache_noprof+0xa8/0x660 [ 207.180119][ T7826] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 207.180142][ T7826] ? __kmalloc_cache_noprof+0x150/0x660 [ 207.180168][ T7826] ? sctp_add_bind_addr+0x8c/0x370 [ 207.180190][ T7826] ? sctp_add_bind_addr+0x8c/0x370 [ 207.180218][ T7826] sctp_add_bind_addr+0x8c/0x370 [ 207.180245][ T7826] sctp_copy_local_addr_list+0x31a/0x4e0 [ 207.180270][ T7826] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 207.180293][ T7826] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 207.180326][ T7826] ? sctp_v6_is_any+0x64/0x80 [ 207.180352][ T7826] ? sctp_copy_one_addr+0x93/0x360 [ 207.180378][ T7826] sctp_bind_addr_copy+0xb3/0x3c0 [ 207.180402][ T7826] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 207.180427][ T7826] sctp_connect_new_asoc+0x2ff/0x6b0 [ 207.180448][ T7826] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 207.180471][ T7826] ? __local_bh_enable_ip+0xd0/0x130 [ 207.180495][ T7826] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 207.180519][ T7826] ? security_sctp_bind_connect+0x7e/0x2c0 [ 207.180550][ T7826] sctp_sendmsg+0x159b/0x2d00 [ 207.180590][ T7826] ? __pfx_sctp_sendmsg+0x10/0x10 [ 207.180623][ T7826] ? aa_sk_perm+0x6d5/0x900 [ 207.180655][ T7826] ? sock_rps_record_flow+0x19/0x350 [ 207.180683][ T7826] ? inet_sendmsg+0x298/0x320 [ 207.180710][ T7826] ? __pfx_inet_sendmsg+0x10/0x10 [ 207.180733][ T7826] sock_sendmsg_nosec+0x10e/0x180 [ 207.180759][ T7826] ____sys_sendmsg+0x54e/0x850 [ 207.180783][ T7826] ? __pfx_____sys_sendmsg+0x10/0x10 [ 207.180811][ T7826] ? import_iovec+0x73/0xa0 [ 207.180832][ T7826] ___sys_sendmsg+0x2a5/0x360 [ 207.180849][ T7826] ? __lock_acquire+0x683/0x2cf0 [ 207.180871][ T7826] ? __pfx____sys_sendmsg+0x10/0x10 [ 207.180923][ T7826] ? __fget_files+0x2a/0x420 [ 207.180940][ T7826] ? __fget_files+0x3a2/0x420 [ 207.180965][ T7826] __x64_sys_sendmsg+0x1b1/0x290 [ 207.180986][ T7826] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 207.181020][ T7826] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.181040][ T7826] do_syscall_64+0x174/0x580 [ 207.181065][ T7826] ? trace_irq_disable+0x3b/0x140 [ 207.181092][ T7826] ? clear_bhb_loop+0x40/0x90 [ 207.181108][ T7826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.181120][ T7826] RIP: 0033:0x7ffa29b9ce59 [ 207.181132][ T7826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.181143][ T7826] RSP: 002b:00007ffa2a983028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 207.181157][ T7826] RAX: ffffffffffffffda RBX: 00007ffa29e16090 RCX: 00007ffa29b9ce59 [ 207.181166][ T7826] RDX: 00000000240280d1 RSI: 0000200000002dc0 RDI: 0000000000000005 [ 207.181174][ T7826] RBP: 00007ffa2a983090 R08: 0000000000000000 R09: 0000000000000000 [ 207.181182][ T7826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 207.181189][ T7826] R13: 00007ffa29e16128 R14: 00007ffa29e16090 R15: 00007ffa29f3fa48 [ 207.181208][ T7826] [ 207.670727][ T11] gp8psk: usb in 128 operation failed. [ 207.863838][ T7834] futex_wake_op: syz.1.655 tries to shift op by 32; fix this program [ 207.889778][ T11] gp8psk: FW Version = 0.00.0 (0x0) Build 2000/00/00 [ 208.145610][ T7821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.173821][ T7821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.243644][ T5691] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 208.358669][ T7860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.659'. [ 208.413662][ T5691] usb 1-1: Using ep0 maxpacket: 8 [ 208.429624][ T5691] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 208.441497][ T5691] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.450446][ T5691] usb 1-1: Product: syz [ 208.455967][ T5691] usb 1-1: Manufacturer: syz [ 208.463945][ T5691] usb 1-1: SerialNumber: syz [ 208.476276][ T5691] usb 1-1: config 0 descriptor?? [ 208.623541][ T5718] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 208.693963][ T5691] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 208.793396][ T5718] usb 3-1: Using ep0 maxpacket: 8 [ 208.805118][ T5718] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 208.816421][ T5718] usb 3-1: config 16 has an invalid descriptor of length 97, skipping remainder of the config [ 208.829451][ T5718] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 208.841036][ T5718] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 208.852942][ T5718] usb 3-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 208.868550][ T5718] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 208.877910][ T5718] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.894625][ T11] gp8psk: usb in 149 operation failed. [ 208.907311][ T5691] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 208.922089][ T11] gp8psk: failed to get FPGA version [ 208.934260][ T5718] usbtmc 3-1:16.0: bulk endpoints not found [ 208.950598][ T11] gp8psk: usb in 138 operation failed. [ 208.957769][ T5691] usb 1-1: USB disconnect, device number 29 [ 208.965135][ T11] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 208.981289][ T11] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 209.002892][ T11] usb 5-1: USB disconnect, device number 42 [ 209.180223][ T5637] Bluetooth: hci0: unexpected event for opcode 0x201c [ 209.323349][ T5702] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 209.500204][ T5702] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 209.540248][ T5702] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.589761][ T5702] usb 4-1: config 0 has no interface number 0 [ 209.630255][ T7869] loop5: detected capacity change from 0 to 7 [ 209.641751][ T7869] Dev loop5: unable to read RDB block 7 [ 209.647619][ T5702] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 209.647652][ T5702] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.647673][ T5702] usb 4-1: Product: syz [ 209.647687][ T5702] usb 4-1: Manufacturer: syz [ 209.647701][ T5702] usb 4-1: SerialNumber: syz [ 209.706218][ T5702] usb 4-1: config 0 descriptor?? [ 209.794980][ T7869] loop5: unable to read partition table [ 209.803531][ T7869] loop5: partition table beyond EOD, truncated [ 209.823013][ T7869] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 209.916935][ T11] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 210.174904][ T11] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 210.185722][ T11] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 210.198942][ T11] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 210.208414][ T11] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.216664][ T11] usb 1-1: Product: syz [ 210.220848][ T11] usb 1-1: Manufacturer: syz [ 210.225838][ T11] usb 1-1: SerialNumber: syz [ 210.234351][ T11] usb 1-1: config 0 descriptor?? [ 210.253056][ T11] usb 1-1: 0:0 : invalid sync pipe. is_playback 1, ep 0a, bSynchAddress 07 [ 210.276466][ T5624] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 210.300854][ T7875] netlink: 64 bytes leftover after parsing attributes in process `syz.1.664'. [ 210.317148][ T7875] syzkaller1: entered promiscuous mode [ 210.322661][ T7875] syzkaller1: entered allmulticast mode [ 210.446653][ T7871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.460347][ T5624] usb 5-1: unable to get BOS descriptor or descriptor too short [ 210.468519][ T7871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.478692][ T5624] usb 5-1: not running at top speed; connect to a high speed hub [ 210.487908][ T5624] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 210.492916][ T7877] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 210.499312][ T5624] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 210.521830][ T7871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.661'. [ 210.535173][ T5624] usb 5-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 210.546819][ T5624] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.555006][ T5624] usb 5-1: Product: syz [ 210.559287][ T5624] usb 5-1: Manufacturer: syz [ 210.564115][ T5624] usb 5-1: SerialNumber: syz [ 210.614913][ T7879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.666'. [ 210.768008][ T24] usb 1-1: USB disconnect, device number 30 [ 210.817063][ T5624] usb 5-1: unit 3 not found! [ 210.875850][ T5624] usb 5-1: USB disconnect, device number 43 [ 211.083622][ T5691] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 211.243784][ T5691] usb 2-1: Using ep0 maxpacket: 8 [ 211.252256][ T5691] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 211.261469][ T5691] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.269966][ T5691] usb 2-1: Product: syz [ 211.274818][ T5691] usb 2-1: Manufacturer: syz [ 211.279628][ T5691] usb 2-1: SerialNumber: syz [ 211.286576][ T5691] usb 2-1: config 0 descriptor?? [ 211.296716][ T5691] gspca_main: se401-2.14.0 probing 047d:5003 [ 211.374969][ T11] usb 3-1: USB disconnect, device number 25 [ 211.504012][ T7883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.526127][ T7883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.545726][ T7890] netlink: 848 bytes leftover after parsing attributes in process `syz.2.671'. [ 211.651109][ T7893] netlink: 12 bytes leftover after parsing attributes in process `syz.0.672'. [ 211.658628][ T7888] kvm: pic: non byte write [ 211.665664][ T7893] netlink: 11 bytes leftover after parsing attributes in process `syz.0.672'. [ 211.755495][ T5691] gspca_se401: ExtraFeatures: 4 [ 211.762865][ T5691] gspca_se401: Frame size: 64x0 bayer [ 211.773607][ T5691] gspca_se401: Frame size: 0x0 1/16th janggu [ 211.785967][ T5691] gspca_se401: Frame size: 0x0 1/16th janggu [ 211.799120][ T5691] gspca_se401: Frame size: 0x0 1/16th janggu [ 211.809029][ T5691] gspca_se401: Frame size: 0x0 1/16th janggu [ 211.978682][ T7883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.005909][ T7883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.139462][ T24] usb 4-1: USB disconnect, device number 49 [ 212.229075][ T5691] input: se401 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input18 [ 212.311221][ T5691] usb 2-1: USB disconnect, device number 25 [ 212.588378][ T5637] Bluetooth: hci1: unexpected event for opcode 0x201c [ 213.375165][ T7937] netlink: 40 bytes leftover after parsing attributes in process `syz.0.683'. [ 214.203358][ T7963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.686'. [ 214.223918][ T7963] netlink: 28 bytes leftover after parsing attributes in process `syz.0.686'. [ 214.257069][ T7963] netlink: 28 bytes leftover after parsing attributes in process `syz.0.686'. [ 214.306949][ T7963] netlink: 44 bytes leftover after parsing attributes in process `syz.0.686'. [ 214.521934][ T7973] kvm: pic: non byte write [ 214.715981][ T7986] xt_hashlimit: size too large, truncated to 1048576 [ 214.875319][ T5624] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 214.955943][ T7985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.693'. [ 215.055937][ T7979] netlink: 'syz.2.692': attribute type 2 has an invalid length. [ 215.072054][ T7979] netlink: 'syz.2.692': attribute type 8 has an invalid length. [ 215.090234][ T7979] netlink: 132 bytes leftover after parsing attributes in process `syz.2.692'. [ 215.471429][ T7997] syzkaller1: entered promiscuous mode [ 215.511058][ T7997] syzkaller1: entered allmulticast mode [ 215.777121][ T7988] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 216.521414][ T8019] ip6tnl2: entered allmulticast mode [ 217.168387][ T8026] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 217.224644][ T8026] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 217.355271][ T24] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 217.493818][ T8033] __nla_validate_parse: 3 callbacks suppressed [ 217.493838][ T8033] netlink: 12 bytes leftover after parsing attributes in process `syz.0.707'. [ 217.533851][ T8033] netlink: 11 bytes leftover after parsing attributes in process `syz.0.707'. [ 217.573486][ T24] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 217.582468][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 217.603894][ T24] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 217.621404][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.654230][ T24] usb 2-1: Product: syz [ 217.665715][ T8035] netlink: 16 bytes leftover after parsing attributes in process `syz.4.708'. [ 217.670155][ T24] usb 2-1: Manufacturer: syz [ 217.711819][ T8035] bond1: down delay (3) is not a multiple of miimon (129), value rounded to 0 ms [ 217.721523][ T24] usb 2-1: SerialNumber: syz [ 217.728213][ T8035] bond1: option arp_all_targets: invalid value (255) [ 217.741029][ T8035] bond1 (unregistering): Released all slaves [ 217.755531][ T8038] netlink: 156 bytes leftover after parsing attributes in process `syz.0.710'. [ 217.772285][ T24] usb 2-1: config 0 descriptor?? [ 217.786513][ T24] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 217.818075][ T5624] usb 3-1: unable to get BOS descriptor or descriptor too short [ 217.829545][ T8038] netlink: 'syz.0.710': attribute type 1 has an invalid length. [ 217.864681][ T5624] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 217.879222][ T8040] netlink: 'syz.0.710': attribute type 1 has an invalid length. [ 217.887558][ T5624] usb 3-1: can't read configurations, error -71 [ 218.035569][ T30] kauditd_printk_skb: 148 callbacks suppressed [ 218.035585][ T30] audit: type=1326 audit(1782415299.994:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8047 comm="syz.2.713" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f66a819ce59 code=0x0 [ 218.055767][ T8046] netlink: 56 bytes leftover after parsing attributes in process `syz.0.712'. [ 218.087124][ T5725] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 218.098247][ T8048] loop9: detected capacity change from 0 to 2640 [ 218.107494][ T8048] buffer_io_error: 332 callbacks suppressed [ 218.107510][ T8048] Buffer I/O error on dev loop9, logical block 0, async page read [ 218.142130][ T8048] Buffer I/O error on dev loop9, logical block 0, async page read [ 218.162404][ T8048] Buffer I/O error on dev loop9, logical block 0, async page read [ 218.199519][ T8048] Buffer I/O error on dev loop9, logical block 0, async page read [ 218.222640][ T8048] Buffer I/O error on dev loop9, logical block 0, async page read [ 218.258865][ T8048] Buffer I/O error on dev loop9, logical block 0, async page read [ 218.267462][ T5725] usb 4-1: Using ep0 maxpacket: 16 [ 218.272834][ T8048] loop9: unable to read partition table [ 218.282044][ T8060] FAULT_INJECTION: forcing a failure. [ 218.282044][ T8060] name failslab, interval 1, probability 0, space 0, times 0 [ 218.301006][ T5725] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 218.305640][ T8048] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 218.323588][ T8060] CPU: 0 UID: 0 PID: 8060 Comm: syz.0.714 Tainted: G L syzkaller #0 PREEMPT(full) [ 218.323619][ T8060] Tainted: [L]=SOFTLOCKUP [ 218.323627][ T8060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 218.323639][ T8060] Call Trace: [ 218.323648][ T8060] [ 218.323656][ T8060] dump_stack_lvl+0xe8/0x150 [ 218.323686][ T8060] should_fail_ex+0x40c/0x560 [ 218.323721][ T8060] should_failslab+0xa8/0x100 [ 218.323746][ T8060] __kmalloc_cache_noprof+0xa8/0x660 [ 218.323777][ T8060] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 218.323805][ T8060] ? __kmalloc_cache_noprof+0x150/0x660 [ 218.323834][ T8060] ? sctp_add_bind_addr+0x8c/0x370 [ 218.323859][ T8060] ? sctp_add_bind_addr+0x8c/0x370 [ 218.323917][ T8060] sctp_add_bind_addr+0x8c/0x370 [ 218.323947][ T8060] sctp_copy_local_addr_list+0x31a/0x4e0 [ 218.323974][ T8060] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 218.324000][ T8060] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 218.324027][ T8060] ? sctp_v6_is_any+0x64/0x80 [ 218.324054][ T8060] ? sctp_copy_one_addr+0x93/0x360 [ 218.324083][ T8060] sctp_bind_addr_copy+0xb3/0x3c0 [ 218.324109][ T8060] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 218.324135][ T8060] sctp_connect_new_asoc+0x2ff/0x6b0 [ 218.324157][ T8060] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 218.324182][ T8060] ? __local_bh_enable_ip+0xd0/0x130 [ 218.324209][ T8060] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 218.324236][ T8060] ? security_sctp_bind_connect+0x7e/0x2c0 [ 218.324269][ T8060] sctp_sendmsg+0x159b/0x2d00 [ 218.324311][ T8060] ? __pfx_sctp_sendmsg+0x10/0x10 [ 218.324346][ T8060] ? aa_sk_perm+0x6d5/0x900 [ 218.324387][ T8060] ? sock_rps_record_flow+0x19/0x350 [ 218.324421][ T8060] ? inet_sendmsg+0x298/0x320 [ 218.324450][ T8060] ? __pfx_inet_sendmsg+0x10/0x10 [ 218.324475][ T8060] sock_sendmsg_nosec+0x10e/0x180 [ 218.324504][ T8060] ____sys_sendmsg+0x54e/0x850 [ 218.324530][ T8060] ? __pfx_____sys_sendmsg+0x10/0x10 [ 218.324554][ T8060] ? import_iovec+0x73/0xa0 [ 218.324575][ T8060] ___sys_sendmsg+0x2a5/0x360 [ 218.324594][ T8060] ? __lock_acquire+0x683/0x2cf0 [ 218.324619][ T8060] ? __pfx____sys_sendmsg+0x10/0x10 [ 218.324673][ T8060] ? __fget_files+0x2a/0x420 [ 218.324691][ T8060] ? __fget_files+0x3a2/0x420 [ 218.324720][ T8060] __x64_sys_sendmsg+0x1b1/0x290 [ 218.324743][ T8060] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 218.324781][ T8060] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.324802][ T8060] do_syscall_64+0x174/0x580 [ 218.324829][ T8060] ? trace_irq_disable+0x3b/0x140 [ 218.324857][ T8060] ? clear_bhb_loop+0x40/0x90 [ 218.324880][ T8060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.324900][ T8060] RIP: 0033:0x7fd54af9ce59 [ 218.324917][ T8060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.324933][ T8060] RSP: 002b:00007fd54bddf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 218.324953][ T8060] RAX: ffffffffffffffda RBX: 00007fd54b216090 RCX: 00007fd54af9ce59 [ 218.324967][ T8060] RDX: 00000000240280d1 RSI: 0000200000002dc0 RDI: 0000000000000005 [ 218.324979][ T8060] RBP: 00007fd54bddf090 R08: 0000000000000000 R09: 0000000000000000 [ 218.324991][ T8060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 218.325002][ T8060] R13: 00007fd54b216128 R14: 00007fd54b216090 R15: 00007fd54b33fa48 [ 218.325032][ T8060] [ 218.330617][ T8054] Buffer I/O error on dev loop9, logical block 0, lost async page write [ 218.333047][ T5725] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.379540][ T8054] Buffer I/O error on dev loop9, logical block 1, lost async page write [ 218.427529][ T5725] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 218.488317][ T5725] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= e.89 [ 218.527445][ T8054] Buffer I/O error on dev loop9, logical block 2, lost async page write [ 218.529535][ T5725] usb 4-1: New USB device strings: Mfr=221, Product=0, SerialNumber=3 [ 218.617023][ T8054] Buffer I/O error on dev loop9, logical block 3, lost async page write [ 218.748401][ T24] gspca_sunplus: reg_r err -110 [ 218.755553][ T24] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 218.802008][ T5725] usb 4-1: Manufacturer: syz [ 218.816244][ T5725] usb 4-1: SerialNumber: syz [ 218.853517][ T5725] usb 4-1: config 0 descriptor?? [ 218.897380][ T5725] usb 4-1: 0:2 : does not exist [ 219.335391][ T5725] usb 4-1: 5:0: cannot get min/max values for control 8 (id 5) [ 219.513508][ T5725] usb 4-1: USB disconnect, device number 50 [ 219.592245][ T5798] udevd[5798]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 219.608180][ T8087] veth0_to_bond: left allmulticast mode [ 219.608204][ T8087] veth0_to_bond: left promiscuous mode [ 219.608387][ T8087] bridge2: port 2(veth0_to_bond) entered disabled state [ 219.842724][ T8087] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 219.909893][ T8098] bond0: entered promiscuous mode [ 219.928124][ T8098] bond0: left promiscuous mode [ 219.986996][ T8101] netlink: 8 bytes leftover after parsing attributes in process `syz.3.723'. [ 220.141455][ T8090] bridge_slave_0: left allmulticast mode [ 220.163313][ T8090] bridge_slave_0: left promiscuous mode [ 220.182952][ T8090] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.198325][ T8104] loop8: detected capacity change from 0 to 8 [ 220.215921][ T8104] Dev loop8: unable to read RDB block 8 [ 220.252942][ T8104] loop8: unable to read partition table [ 220.263894][ T8104] loop8: partition table beyond EOD, truncated [ 220.270427][ T8104] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 220.463428][ T8090] bridge_slave_1: left allmulticast mode [ 220.501087][ T8090] bridge_slave_1: left promiscuous mode [ 220.527985][ T8090] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.612504][ T8090] bond0: (slave bond_slave_0): Releasing backup interface [ 220.697722][ T8090] bond0: (slave bond_slave_1): Releasing backup interface [ 220.713325][ T5718] usb 4-1: new low-speed USB device number 51 using dummy_hcd [ 220.772739][ T8090] team0: Port device team_slave_0 removed [ 220.797146][ T8090] team0: Port device team_slave_1 removed [ 220.806999][ T8090] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.814743][ T8090] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.826850][ T8090] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.834408][ T8090] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.842997][ T8090] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 220.861935][ T5718] usb 4-1: device descriptor read/64, error -71 [ 220.878697][ T8112] ip6tnl3: entered allmulticast mode [ 220.948398][ T5624] usb 2-1: USB disconnect, device number 26 [ 221.124336][ T5718] usb 4-1: new low-speed USB device number 52 using dummy_hcd [ 221.141522][ T8118] BUG: using smp_processor_id() in preemptible [00000000] code: syz.1.731/8118 [ 221.150890][ T8118] caller is bpf_mem_cache_free_rcu+0x48/0xc0 [ 221.157097][ T8118] CPU: 0 UID: 0 PID: 8118 Comm: syz.1.731 Tainted: G L syzkaller #0 PREEMPT(full) [ 221.157131][ T8118] Tainted: [L]=SOFTLOCKUP [ 221.157144][ T8118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 221.157152][ T8118] Call Trace: [ 221.157157][ T8118] [ 221.157162][ T8118] dump_stack_lvl+0xe8/0x150 [ 221.157181][ T8118] check_preemption_disabled+0xd3/0xe0 [ 221.157205][ T8118] bpf_mem_cache_free_rcu+0x48/0xc0 [ 221.157223][ T8118] rhtab_delete_elem+0x185a/0x1b30 [ 221.157243][ T8118] ? rhtab_delete_elem+0x15c/0x1b30 [ 221.157259][ T8118] ? check_and_init_map_value+0x57/0x410 [ 221.157281][ T8118] __rhtab_map_lookup_and_delete_batch+0x935/0xcb0 [ 221.157309][ T8118] ? __pfx_rhtab_map_lookup_and_delete_batch+0x10/0x10 [ 221.157325][ T8118] bpf_map_do_batch+0x445/0x630 [ 221.157342][ T8118] __sys_bpf+0x906/0xd90 [ 221.157358][ T8118] ? __pfx___sys_bpf+0x10/0x10 [ 221.157372][ T8118] ? do_futex+0x3e7/0x4e0 [ 221.157402][ T8118] ? __fget_files+0x2a/0x420 [ 221.157414][ T8118] ? __pfx___se_sys_futex+0x10/0x10 [ 221.157428][ T8118] ? __fget_files+0x2a/0x420 [ 221.157445][ T8118] __x64_sys_bpf+0xba/0xd0 [ 221.157463][ T8118] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.157477][ T8118] do_syscall_64+0x174/0x580 [ 221.157494][ T8118] ? trace_irq_disable+0x3b/0x140 [ 221.157514][ T8118] ? clear_bhb_loop+0x40/0x90 [ 221.157530][ T8118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.157542][ T8118] RIP: 0033:0x7f5d4819ce59 [ 221.157553][ T8118] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.157564][ T8118] RSP: 002b:00007f5d463f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 221.157577][ T8118] RAX: ffffffffffffffda RBX: 00007f5d48415fa0 RCX: 00007f5d4819ce59 [ 221.157586][ T8118] RDX: 0000000000000038 RSI: 0000200000000000 RDI: 0000000000000019 [ 221.157594][ T8118] RBP: 00007f5d48232e6f R08: 0000000000000000 R09: 0000000000000000 [ 221.157602][ T8118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.157609][ T8118] R13: 00007f5d48416038 R14: 00007f5d48415fa0 R15: 00007f5d4853fa48 [ 221.157630][ T8118] [ 221.378407][ T8118] BUG: using smp_processor_id() in preemptible [00000000] code: syz.1.731/8118 [ 221.387690][ T8118] caller is bpf_mem_cache_free_rcu+0x48/0xc0 [ 221.393802][ T8118] CPU: 0 UID: 0 PID: 8118 Comm: syz.1.731 Tainted: G L syzkaller #0 PREEMPT(full) [ 221.393843][ T8118] Tainted: [L]=SOFTLOCKUP [ 221.393850][ T8118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 221.393872][ T8118] Call Trace: [ 221.393879][ T8118] [ 221.393886][ T8118] dump_stack_lvl+0xe8/0x150 [ 221.393914][ T8118] check_preemption_disabled+0xd3/0xe0 [ 221.393947][ T8118] bpf_mem_cache_free_rcu+0x48/0xc0 [ 221.393973][ T8118] rhtab_delete_elem+0x185a/0x1b30 [ 221.394003][ T8118] ? rhtab_delete_elem+0x15c/0x1b30 [ 221.394025][ T8118] ? check_and_init_map_value+0x57/0x410 [ 221.394055][ T8118] __rhtab_map_lookup_and_delete_batch+0x935/0xcb0 [ 221.394096][ T8118] ? __pfx_rhtab_map_lookup_and_delete_batch+0x10/0x10 [ 221.394125][ T8118] bpf_map_do_batch+0x445/0x630 [ 221.394151][ T8118] __sys_bpf+0x906/0xd90 [ 221.394177][ T8118] ? __pfx___sys_bpf+0x10/0x10 [ 221.394198][ T8118] ? do_futex+0x3e7/0x4e0 [ 221.394242][ T8118] ? __fget_files+0x2a/0x420 [ 221.394261][ T8118] ? __pfx___se_sys_futex+0x10/0x10 [ 221.394280][ T8118] ? __fget_files+0x2a/0x420 [ 221.394305][ T8118] __x64_sys_bpf+0xba/0xd0 [ 221.394332][ T8118] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.394352][ T8118] do_syscall_64+0x174/0x580 [ 221.394377][ T8118] ? trace_irq_disable+0x3b/0x140 [ 221.394403][ T8118] ? clear_bhb_loop+0x40/0x90 [ 221.394426][ T8118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.394443][ T8118] RIP: 0033:0x7f5d4819ce59 [ 221.394460][ T8118] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.394475][ T8118] RSP: 002b:00007f5d463f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 221.394494][ T8118] RAX: ffffffffffffffda RBX: 00007f5d48415fa0 RCX: 00007f5d4819ce59 [ 221.394508][ T8118] RDX: 0000000000000038 RSI: 0000200000000000 RDI: 0000000000000019 [ 221.394520][ T8118] RBP: 00007f5d48232e6f R08: 0000000000000000 R09: 0000000000000000 [ 221.394532][ T8118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.394542][ T8118] R13: 00007f5d48416038 R14: 00007f5d48415fa0 R15: 00007f5d4853fa48 [ 221.394572][ T8118] [ 221.394585][ T8118] BUG: using smp_processor_id() in preemptible [00000000] code: syz.1.731/8118 [ 221.624245][ T8118] caller is bpf_mem_cache_free_rcu+0x48/0xc0 [ 221.630309][ T8118] CPU: 0 UID: 0 PID: 8118 Comm: syz.1.731 Tainted: G L syzkaller #0 PREEMPT(full) [ 221.630339][ T8118] Tainted: [L]=SOFTLOCKUP [ 221.630347][ T8118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 221.630359][ T8118] Call Trace: [ 221.630367][ T8118] [ 221.630376][ T8118] dump_stack_lvl+0xe8/0x150 [ 221.630403][ T8118] check_preemption_disabled+0xd3/0xe0 [ 221.630438][ T8118] bpf_mem_cache_free_rcu+0x48/0xc0 [ 221.630464][ T8118] rhtab_delete_elem+0x185a/0x1b30 [ 221.630495][ T8118] ? rhtab_delete_elem+0x15c/0x1b30 [ 221.630519][ T8118] ? check_and_init_map_value+0x57/0x410 [ 221.630551][ T8118] __rhtab_map_lookup_and_delete_batch+0x935/0xcb0 [ 221.630593][ T8118] ? __pfx_rhtab_map_lookup_and_delete_batch+0x10/0x10 [ 221.630617][ T8118] bpf_map_do_batch+0x445/0x630 [ 221.630644][ T8118] __sys_bpf+0x906/0xd90 [ 221.630671][ T8118] ? __pfx___sys_bpf+0x10/0x10 [ 221.630693][ T8118] ? do_futex+0x3e7/0x4e0 [ 221.630739][ T8118] ? __fget_files+0x2a/0x420 [ 221.630758][ T8118] ? __pfx___se_sys_futex+0x10/0x10 [ 221.630779][ T8118] ? __fget_files+0x2a/0x420 [ 221.630805][ T8118] __x64_sys_bpf+0xba/0xd0 [ 221.630833][ T8118] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.630854][ T8118] do_syscall_64+0x174/0x580 [ 221.630881][ T8118] ? trace_irq_disable+0x3b/0x140 [ 221.630909][ T8118] ? clear_bhb_loop+0x40/0x90 [ 221.630933][ T8118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.630953][ T8118] RIP: 0033:0x7f5d4819ce59 [ 221.630970][ T8118] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.630986][ T8118] RSP: 002b:00007f5d463f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 221.631007][ T8118] RAX: ffffffffffffffda RBX: 00007f5d48415fa0 RCX: 00007f5d4819ce59 [ 221.631021][ T8118] RDX: 0000000000000038 RSI: 0000200000000000 RDI: 0000000000000019 [ 221.631034][ T8118] RBP: 00007f5d48232e6f R08: 0000000000000000 R09: 0000000000000000 [ 221.631063][ T8118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.631075][ T8118] R13: 00007f5d48416038 R14: 00007f5d48415fa0 R15: 00007f5d4853fa48 [ 221.631115][ T8118] [ 221.654103][ T5718] usb 4-1: device descriptor read/64, error -71 [ 221.774034][ T5718] usb usb4-port1: attempt power cycle [ 222.113386][ T5718] usb 4-1: new low-speed USB device number 53 using dummy_hcd [ 222.133729][ T5718] usb 4-1: device descriptor read/8, error -71 [ 222.373343][ T5718] usb 4-1: new low-speed USB device number 54 using dummy_hcd [ 222.395710][ T5718] usb 4-1: device descriptor read/8, error -71 [ 222.504332][ T5718] usb usb4-port1: unable to enumerate USB device