last executing test programs: 10.54035071s ago: executing program 4 (id=553): r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f00000010c0), 0x0, 0x0}) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) write$binfmt_elf32(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c4680400400050000000000000002000600c42f75405f000000380000004600000008000000010020000100050009000000000000000300000004000000050000000900000080"], 0xb0) close(r2) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000280)={"f6bb7a2e", 0x3c81, 0x93, 0x4, 0x24ea, 0x6, "2dcb8d734f2797bac21d593d2a4e4a", "2dd8c66c", "548a1a9b", '\f.B:', ["5830a2f41b297a2e9ab2744d", "a4f4f056c0be88313423e67f", "e86cfd507943bbd5b01ca7bc", "746c95f8bbceb03218e44c4c"]}) sched_setscheduler(0x0, 0x1, 0x0) sigaltstack(&(0x7f0000000000)={&(0x7f0000000280)=""/4124, 0x80000001, 0x101c}, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x400, 0x2) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x4, 0x1, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0xff, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0xfffffffe, 0x1000, 0x6, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x19}}}, 0xa0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x4d9b6eaf) 9.568729333s ago: executing program 4 (id=557): r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x6, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) (fail_nth: 21) 9.16057091s ago: executing program 4 (id=559): r0 = socket(0xa, 0x3, 0xff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000200), 0x0, 0x10020, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) unshare(0x40030880) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0xa, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0xb) close(r4) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r5, 0xc004562f, &(0x7f0000000000)=0x1) r6 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000140)={0x5, 0x7ef6, 0x8}) ioctl$VIDIOC_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x1, 0xdd9f83, 0x1, 0x400002f, 0xf3, 0x2, 0x8, 0x722, 0x6, 0x7, 0x7f, 0x27, 0x20, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r7 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x1}, 0x18, 0x0) r8 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r8, 0xc0347c03, &(0x7f0000000400)) landlock_restrict_self(r7, 0x0) symlinkat(&(0x7f00000001c0)='./file2\x00', 0xffffffffffffff9c, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r9 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b0001000000000904000001012900000905"], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[], 0x164}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4000824) 8.677607246s ago: executing program 1 (id=566): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket(0x1d, 0x2, 0x6) getpeername$packet(r1, 0x0, 0x0) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010101}, 0x10) r2 = socket$nl_rdma(0x10, 0x3, 0x14) fsetxattr(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="757365722eefff30e5762656d12759627f4a4c98523ecf1121f10590e63ef81310bdf02b315b37c3fc16f92d2ce2a485201ef9c49dfa49f55b4d88"], 0x0, 0x0, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x22020600) fcntl$lock(r3, 0x5, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) r5 = socket(0x40000000015, 0x5, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x1f0, 0x0, 0x11, 0x148, 0x90, 0x0, 0x15c, 0x2a8, 0x2a8, 0x15c, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010102, @rand_addr=0x64010102, 0xffffff00, 0xff000000, 'pim6reg0\x00', 'vlan1\x00', {}, {}, 0xd8, 0x1, 0x7}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0xffffffff, 'vcan0\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x1, 0x7a}, 0x0, 0x70, 0xcc}, @common=@inet=@HMARK={0x5c, 'HMARK\x00', 0x0, {@ipv4=@dev={0xac, 0x14, 0x14, 0x25}, [0xff000000, 0xff000000, 0xffffffff, 0xff000000], 0x4e21, 0x4e24, 0x4e24, 0x4e24, 0xe8c, 0x800, 0x3, 0x2, 0x4}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x24c) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x72}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x4e23, 0xffff, @local, 0x81}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0xfffffffc}, 0x1c) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) syz_usb_connect$cdc_ecm(0x3, 0x5e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024c00010100c08109040000fe03020000052406000005240002000d240f01bfffffff0000000000042413020424130109058103000407100709"], 0x0) 7.167795312s ago: executing program 2 (id=575): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x0, 0x0, 0xfffffffd, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20008084) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f907864010100000000002480655800000000000000001000"], 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r1) waitid(0x0, r1, 0x0, 0x8000000a, 0x0) wait4(r1, 0x0, 0x20000000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0102000000000000000001000000090001007379"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) socket$kcm(0x10, 0x2, 0x10) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000) 7.039034888s ago: executing program 1 (id=577): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x7, 0x2, 0x7fffffffffffffff, 0x7, 0x7fffffffffffffff, 0x2, 0x2, 0x6dd, 0xfffffffffffffff9, 0xb482, 0x9, 0xfffffffffffffffc, 0x7ff, 0xa, 0x0, 0x9], 0x80a0000, 0x148800}) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x67) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, r1, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x20}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 6.877580989s ago: executing program 1 (id=580): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000d03000028feffff620af0fff8ffffff61a4f0ff000000001d040000000000007f030100000000005504000017ffff162500000017ffff17ce040000000000007b0a00fe000000002d04000000000000d600f8ff000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee0104"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23}, 0x94) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4ca31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000b, 0x4031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x222, &(0x7f0000000180)=0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000044402, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) io_submit(r2, 0x2, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x6417, r3, &(0x7f00000002c0)="ab", 0x1, 0x4}, &(0x7f00000000c0)={0x0, 0x0, 0x1f, 0x7, 0x8bd9, r3, 0x0, 0x0, 0x4}]) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000440)=@file={0x1, './file0/../file0\x00'}, 0x6e) listen(r5, 0x0) socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000500)=@abs={0x0, 0x0, 0x6e24}, 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) r6 = signalfd4(r4, &(0x7f0000000000)={[0x2f]}, 0x8, 0x80000) name_to_handle_at(r6, &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="18000000020000000d00fdff0200000009000000070000000100ffff0600000053cd1e6e929effc0c1e41b3df74f49a4dd2fd68fd52e577d9a8a5dd40058e32a0a4016d06df877f99384c8e505c5888a52c76cf494cd147e5861d02edcd3ec929f9a09f72a8fd6c3999262cbbdcf56f691a35b96a3e12593446d5a544be207cd8264b3a3a05e68e4f34fcf8ae8c418"], 0x0, 0x400) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/4\x00') read$FUSE(r7, &(0x7f0000000a00)={0x2020}, 0x2020) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x10, r3, 0x10eca000) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000004c0)={'bond0\x00'}) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x101001a, &(0x7f0000000100)={{'fd', 0x3d, r9}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0xfd, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') 6.841902987s ago: executing program 2 (id=583): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) 6.718844844s ago: executing program 2 (id=585): r0 = openat$tcp_mem(0xffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82187201, &(0x7f00000002c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0x2, &(0x7f0000000140)=@raw=[@cb_func={0x18, 0x1}], &(0x7f0000000040)='GPL\x00', 0x6, 0x2d, &(0x7f0000000280)=""/45, 0x41000, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x3e, &(0x7f0000000180)=0x6121, 0x4) listen(r3, 0xffffff80) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) unshare(0x20000400) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r5, 0x1, 0x50, &(0x7f0000000100), 0x4) r6 = openat$cgroup_ro(r2, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000c, 0x28011, r6, 0x0) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) pwritev(r7, &(0x7f00000015c0)=[{&(0x7f0000000280)='~', 0x1}, {0x0}], 0x2, 0x0, 0x0) r8 = socket$rds(0x15, 0x5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="10"], 0x20) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r8, 0x114, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="0300d86a"], 0x4) 6.575834685s ago: executing program 2 (id=587): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket(0x1d, 0x2, 0x6) getpeername$packet(r1, 0x0, 0x0) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010101}, 0x10) r2 = socket$nl_rdma(0x10, 0x3, 0x14) fsetxattr(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="757365722eefff30e5762656d12759627f4a4c98523ecf1121f10590e63ef81310bdf02b315b37c3fc16f92d2ce2a485201ef9c49dfa49f55b4d88"], 0x0, 0x0, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x22020600) fcntl$lock(r3, 0x5, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) r5 = socket(0x40000000015, 0x5, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x1f0, 0x0, 0x11, 0x148, 0x90, 0x0, 0x15c, 0x2a8, 0x2a8, 0x15c, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010102, @rand_addr=0x64010102, 0xffffff00, 0xff000000, 'pim6reg0\x00', 'vlan1\x00', {}, {}, 0xd8, 0x1, 0x7}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0xffffffff, 'vcan0\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x1, 0x7a}, 0x0, 0x70, 0xcc}, @common=@inet=@HMARK={0x5c, 'HMARK\x00', 0x0, {@ipv4=@dev={0xac, 0x14, 0x14, 0x25}, [0xff000000, 0xff000000, 0xffffffff, 0xff000000], 0x4e21, 0x4e24, 0x4e24, 0x4e24, 0xe8c, 0x800, 0x3, 0x2, 0x4}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x24c) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x72}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x4e23, 0xffff, @local, 0x81}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0xfffffffc}, 0x1c) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) syz_usb_connect$cdc_ecm(0x3, 0x5e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024c00010100c08109040000fe03020000052406000005240002000d240f01bfffffff0000000000042413020424130109058103000407100709"], 0x0) 5.644446019s ago: executing program 1 (id=595): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x3fd, 0x0, 0xa9, 0x8000000000000000, 0x0, 0x7, 0xae0}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="91100400000000009500000000000000ab89becd60798ba0c7b340b02956c1c3822c3f572da76a3b992d243e0b89f6b734d5fdf6cb7955ac9702e4a18821040f9856a1bf21bf5e9b77a91e739c3ee223bb727fb18bc991da02854893b585f4465da763f2ac1d5e22ab728ef23681fe8fdf16f570082bdfadcd7f48aa86c2c12a78db90a7781fa547451f272ad46f8e5733fb606f040417634328cbf1b47957851ce3cbc4eb683cc45e48df30ead552a32564e7d1ab13b4aa22e4dd4970134ec08873d32468bed08369a2ec7cef09ea5af2dfc3dbf2f13954a41a3e02b5e2fd65c37b0f22ce"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x2f, 0x0, &(0x7f0000000180)="e30080670000ec67838717bd86dde148f0630962bb87dd44fe42904bcee14db4241544716b9ea42231ed3373a3e299", 0x0, 0xde0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xc}, 0x4c) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_open_dev$evdev(0x0, 0x2, 0x862b01) write$char_usb(r4, &(0x7f00000001c0)="cfa4e03216a3f1ecbface021d8cdb6d4815d2e4ef5543c418e3e21de381f35d5a49bd606391ccdefdf66406ca6c122f67240cbf07fac5a4decdd1905ae6b652347882bbb263263", 0x47) setrlimit(0x8, &(0x7f0000000300)={0x4, 0x7}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x44a202, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r2, 0xd0009412, &(0x7f0000001c40)) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) ioctl$BLKZEROOUT(r6, 0x127f, &(0x7f0000000100)={0xa00, 0x40a00}) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r7, 0x4068aea3, &(0x7f0000000080)={0x81, 0x0, 0x3}) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f0000000840)={"d28c6a32b1fbb2a4f3c68375204eb2ad26845c9eb25ff613938a1daeeb618f9c18bf473f8e92dfa778b445665b09c58e8e2455d29a302f3b794664935d5f901a0d4c8437e8a3f45f9a30121cd75709f205b0e6da79ee7c3f4eba3d6ea7a1cd1f8dc281bdb55efe3bd1c70de5ae98c5f4fbbee3042184e012647a59042c1d433c70b6e39032321d713b6433c83b7349c0a69f68e9804bea03e2f2aab3391bb649667eccd51ed7a27768125c40cab9a4312757c1977a4fd64d6a1d89a9404f575a2af8770171fed05807e63f00d42245ac19db7aeb987ed951c60966e2f4e265c5c579199dfc9357fc17e0f2d22a2bfad393ad9fc9f942364e9617df63fb95d23966e02e3795cd4b0a0b9187138b91ab1c926c09c471b5b365b20fae559845d3dd654a9d940e014ef62aa4de41a1f880fc1fe69568dcd523d3e518a4f3499e5dd23b5af3f2ed9673e14eb943776d3dce8b376d3b9961c36731f8de7a36a5aea8e1e728e4707e9d596b00757fed8282e74273bd82907619c636cfa8a5853faffc338fb0e6de763d55f8e239afa4f61dd1ba2ec34d409859f7bcb8a2a725ceb795cd8efb5b601ee99257f0ba3816296057d67c7940839839c6e082b8927f9a26b18a2da987e46de823bc11c94faa214635e3214441c4851d57f9cdebf6e6458ff3ab36439e9b4ca2166abe79a5f577955b02392b5b0c1e887bbf598e1b78bb344eb945701bf9abe9412d1c63addd85fda9a0c8b0aa711775c1e509f01b7e3c8c6960c43038c52aa88f47fd2c4d5d03b5c60388e0db50038d2ea18db14534c7aede0a56d1faf7f0b8e5e1572e69c847819a8e2b128b67493511a0abdea23a90f877a018a2a0ed9414675af77c549a84575bcf6544c797cf75b1ecf61d246a4e111f0002bafd102255c03feb150f018f053e8a57e583800fa579ce3f46cd0c048738de07b3fa36e48db891edcbbf7e7dd8a99b7d74d5d54e9b29e0122d29e0b8f77fe599fd36f6e2967497a88f9e4018601bad4810aea8684dfb88366bce7bc76583a59a04d573f7a38e925e00b431598e4f9a4a9e2d1ee637a6f95d682ddf112edfc280060079e3c000e4d1b5cee6315f667511070795488136ab4aa50ced2ddd57d4993fb11b6fe7cdc8cc48f1f0a18139833b3e1bd04404fa5550640e4140697b8c7ca17dd7e35b8a45817f837060c18172b7f69af33926077cf93791655d1aba016e5a49203594401c3132f22ecc3c15090c216612a24879196aa6d1eddf5734c11902d8d5981d6bdc91d45ec563cf0d3ee79723d9e64628a657900858a0edd77ae44bd771178286c88782be3b4ad212704c424c5bf94bbeb0706701642d25b990c362e45472a7062956911aab63a03af2a31b8eac0fa9cd44404e15def01494aa5e2fee24e6be46dec2e60fc499981fb168e8456eccee5f4735062583e9ef5bdd"}) ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @pic={0x2, 0x8, 0x0, 0xd1, 0x1, 0x35, 0x5, 0xa, 0x2, 0x32, 0x5, 0x7, 0xf6, 0xc, 0x0, 0x8}}) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r3, 0x0, 0x2c, 0x24044000, &(0x7f0000000380)={0x2, 0x4e22, @remote}, 0x10) r9 = shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) r10 = socket(0x2d, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r10, 0x8918, &(0x7f0000000080)={@empty, 0x57}) shmctl$IPC_RMID(r9, 0x0) 5.171105235s ago: executing program 2 (id=597): r0 = syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000b40)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x70, 0x8, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6, 0x24, 0x1a, 0x0, 0x8}}, {{0x9, 0x5, 0x81, 0x3, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x0, 0x7}}}}}}}]}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000300)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0xd, 0x4, 0x0, 0x0, 0x48, 0x65, 0x0, 0x2, 0x6, 0x0, @private=0xa010101, @local, {[@timestamp={0x44, 0xc, 0x5, 0x0, 0xf, [0x0, 0x2]}, @lsrr={0x83, 0xf, 0x61, [@private=0xa010101, @empty, @multicast1]}, @timestamp_prespec={0x44, 0x4, 0xc0, 0x3, 0x7}]}}, {{0x1, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff, 0x0, 0x3d}}}}}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0xfff5, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x9, 0x10, 0x5d, 0xfff9, 0x10, 0x80, 0x10, 0xe, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xbe83, 0x4000) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc2c45513, &(0x7f0000000440)={{0x0, 0x6, 0x0, 0xf9, '\x00', 0x1}, 0x0, [0x3, 0xfffffff6, 0x0, 0x3, 0x3, 0x0, 0x54a, 0xd1a1, 0x1, 0x5, 0x0, 0x6, 0xe49c, 0x7ff, 0x97, 0x2, 0xfffffff7, 0x200, 0xda2e, 0x200, 0x1b, 0x4, 0x80000000, 0x5, 0x9d9, 0x9, 0x5, 0xfffffffe, 0x80, 0xfffffffb, 0x8, 0x3ff, 0x2, 0x10000, 0x5, 0xe, 0xc, 0x7fff, 0xff, 0x2, 0x9, 0x6cf60fdb, 0x7, 0x9, 0x1, 0x4, 0x4, 0x3ca719bf, 0x6, 0x30, 0x7, 0x9, 0x1, 0xc7, 0x8, 0x84, 0x3ff, 0x7fff, 0x4, 0x4, 0x77, 0x4, 0x8, 0xa4, 0x5, 0xd2, 0x6, 0x8, 0x1ff, 0xa2, 0xe2e2, 0x3, 0x3, 0xffffff8f, 0x8, 0xfffffffe, 0x101, 0x6, 0x5, 0xff, 0x10000, 0x3, 0x5, 0x0, 0xfffffffb, 0xfff, 0x5, 0xfffffffa, 0x1, 0xffff, 0x83, 0x6, 0x8, 0x7fffffff, 0x4, 0x8, 0x5, 0x2, 0x7fff, 0x7, 0x8001, 0xfffffffe, 0x7, 0x7, 0x2, 0x6, 0x0, 0x400, 0x2, 0x10, 0x7, 0x3, 0x8, 0x4, 0x5, 0x7, 0x9, 0x3, 0x3, 0x3, 0x1, 0x80000000, 0x1ff, 0xb7, 0x2, 0x9, 0x1e0e, 0x7]}) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000400)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000e40)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)={0x20, 0x87, 0x2, 0xc751}, 0x0}) 5.044231984s ago: executing program 0 (id=598): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000003a80)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r2, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x7, 0x2}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 5.005994047s ago: executing program 0 (id=599): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)={0x0, 0xef, 0xffffffbc}) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) preadv(r1, &(0x7f00000010c0)=[{&(0x7f0000001600)=""/4095, 0xfff}], 0x1, 0x7, 0x401) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000440)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0xfffffffd, 0x0, 0x30, 0x0, @in6={0xa, 0x4e22, 0x3, @empty, 0x4}, @in={0x2, 0x4e21, @empty}}}, 0x118) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca419891400"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r8 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io$printer(r8, 0x0, 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r8, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r8, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x20, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, 0x0, &(0x7f0000000880)={0x18, &(0x7f0000000280)={0x40, 0x8, 0x5c, "5f2d08d63e583b209d56e45c92106f4a09058fb730f1efe7d3f86203cd7cf76ee1744bac2dc614dab8d5d9ab8adf757c0700000000000000784fc1a5d4017c15b3ca7fb3f0356dca1880412d76dd73de00594ad2de23f8effe360136"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r8, 0x0, 0x0) syz_usb_control_io$rtl8150(r8, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @fd={0x66642a85, 0x0, r4}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 4.92757348s ago: executing program 3 (id=600): socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = syz_clone(0x0, 0x0, 0xffffff36, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8005, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x8}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000000180)) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='net/dev_mcast\x00') lseek(r1, 0x800038, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)=ANY=[@ANYRESDEC=r0], 0x118}}, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) mount_setattr(0xffffffffffffffff, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x80000}, 0x20) sendfile(r5, r5, 0x0, 0x200000) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f00000000c0)=0x41) pwritev(r6, &(0x7f0000000040), 0x0, 0x80, 0x4) cachestat(r4, &(0x7f0000000200)={0x17a, 0x3}, &(0x7f0000000140), 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$can_raw(r7, &(0x7f00000001c0)={&(0x7f00000000c0), 0x10, &(0x7f0000000100)={0x0}, 0x2, 0x0, 0x0, 0x1}, 0x4040005) r8 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') preadv(r9, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) 4.099744104s ago: executing program 4 (id=601): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000100)=@add_del={0x2, &(0x7f0000000080)='hsr0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'dvmrp0\x00', 0x0}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$smc(&(0x7f00000001c0), 0xffffffffffffffff) (async, rerun: 32) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000042c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x4}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x9, 0x1, 'MARK\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) (async, rerun: 32) sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, r3, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0xfffffffffffffdb6, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x0, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8001}, 0x2040) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0431000000b401001c0012800b00010067726574617000000c00028008000100", @ANYRES32=r1, @ANYBLOB], 0x3c}}, 0x0) (async, rerun: 32) r5 = openat$incfs(r2, &(0x7f0000000300)='.log\x00', 0x401, 0x2) (rerun: 32) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000380)={0x3, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETENCODER(r5, 0xc01464a6, &(0x7f00000003c0)={r6}) 4.07424977s ago: executing program 1 (id=602): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000083c0)="4e5350994ebf71ce3049a58c5d050078bf16b0757a4c27b455e2a547739587dd3380b5df8f40a0696c5bd6cdb672cffe4d870c5c90ca92095b9ebf3e92fe31d8cd74275d857d34a74f7eecc7fac15e2f148d4e9d47bb45b858bbf078999970d180f28d7b2cefd92635d45a563d9229c9fd770efdc0848e52fa5efd9ada5c94a1ba94b4b7c7507f8b0819bb20910f9f50a83a010abbe126dd9f6a7b84eab6b0d5ce78d2ade77a5f7e4e997df1d03ffab4b4c945d803e4457909013127a98769c938c237f37263bc509a42bc56ff2dbf80e847e2c407009eef94f18e1e59069d62298fdbadae007ffbdf403c5049a4530ac0abecceb5608da02754c9a575af52c0b7e41226e2d642a814861c4310c935bcbae413516dde2132652b39c7aa0218a6ce65dabb4494965209ce879ba7e7e59039db5c1d36d6a7f86d72dd59954fd6f46124a2506b245a0db11aa89d2feb312a6596ea2fecaa7b6021f37a255f628da7ff6b6c36b514d3b6be34e505f9dac6acfb888198004699fb350ac93431533554658c4957df36703591438d6488bc03dd8290a75ebb367a481a50e79a46b04d005649cabd79e5c6326c066bc2b6fc5febb87ef66d832ef31a16c2a450a0b990fb549a5d810c928d1a81fa1dc795db2607ac7d46cb5716b68acdeb00987e429fe6a394632c83b43336e7b51d9cfdb50e83d8c6ba1784d9f74c16b476e048e65e7ac0af683b347d7377ac1795422e00e5bd8da9b313af83abb3348861116de7a99959169b7dff9f7d9b7a6d107f2e76670a6214a419bf8298f80eb570fa29264ba57a383c5ec5836ce33104ecaf1aec76e311280a1d2c8bd7abff3a5a242e6a637f7db63038ef5d78aca9c680d72b60da4dbeb0e1e683ddc82898647c589a81b8f92db06711d8a0af05560cd77fa7005283db71e8da21713fccd450822062b994d152aaed2cdcf0dec9c60617e15ba4df628da4e71279bf9d1eee5c7f055c27cddfdd45f9225d5d5529ef7119e2e3c9838e7362971e069be487797e949b24297de19c61340d1cd7a2bfa3880b91a71e934720a59e1e0ea992d2a1633a0852ad8addfcab73a291e35745e694a6471f429b124305886c1f79f67c78de3f3ec998c91e7fc59d26766cd446f6f0de603f2c6892e13cdaa37d9e8e118d098b6986ccd991993ec152193e7d77394b05b99e7d310c506707f1be52249438fba9615f6dad2ec7244fedf36e34ec311b7d6bee64271d6491079e161190ded7e28e2ada4307a9b2986c267b1a30d2f720ff23408011f1d589ce9ee77f981c7833656ccf7df5b3a87ec253ff7c7ef1e67ceeb10c93e3fa683cdadad65850ffbc402b7744e94cdecef9db9d264c755c53d36278df23d4c9685fdefa69f7588a33b8a64b35191ee81abcb9765577d175cb06e31c582807ff7243bfef44961fbc0f8a235242f51ee991ea621803d4dcfed90d26f004b299425bf219f6d185fe6e088ae44601b03defada18794feac93787696a5d419f09f769bc590f43d2df6a131f6895da2de120c2644685e57b1d476c6aba5881e954fb2575356452b118b942cb02b4ea0fcf8f1bbb9a23b6e32c9d0accd3dd861452a3ad77b38fe709e216974932deb5397fd8033ff0e073d93ac0b4be762bca0424d69bd57b22ba914133f87671a29498b268c2911e793215463ca2164e38059456107dcb29beedfd6277e2b41a11d1c6f1361b19875c9384f04f9c53c1856d71f360a8fafe05f7aef750ec0cf2bfcfa971c017ad071b69a18fdaf970b384d4c889cfa5a0397dbe89543a5c6302645d6edf959aa60709ce0225fe6c3266c7ef62157ac8e78fddcd8a1f2ca5b58128218d19276885515775326aeeee0006cc810843eb05144bf8e2fe3340cf60b32cafd96d23cd7d0d3adcbdfec9a2a3d88307c362633b1c5637608ea8476d900b3f836a9734bc5862ef52983577128d3f74b903b0e3bf64326c1b564ae42aeeb0c07702b63a9ff74a2af6b45e5185a53f36c17bc29dfbc0ea28ca5cca43a15d751e9887ad3e6a87faacb6a278c4c8a8d21b9a77b9776f33102a6e645e99cc5cbc543ed0674282c2b9f8e5d14c2599aa9ac8f81438c77f2b9368bdac82edcdc5366f39adec9e9a3fbd55b79abc16d2ebff26b7d0c88f18b486e5836333575e3fc7808cb423b44781c57965767862922b4ff32d9bae76296843a46f430211c27ef9db168430026a5691623284dfd459dbdd1f1a6ec9bfad666507e6eacb1e2a7866da2e12e6d596d0bbb150500590013d9288af20596447f97bf1744eb9cfb244d8fca269b1fb71e14de664be4e95d83fff1d7abcfebcf3e78c1c66d28f260fb0c19f9fbcd2abbdd7dd7246e49dc25d954bf25f810a2ff6f9069dfdc62e7170fe3b0964b2ac95024256dfa3e7a426be5bb5f707fd82c2b3afec5d5dcf5bbb8fcb6dbc1b59f6c5330966c70d8b016956903a4278817414ba3652a102d7e7e37ecc79400267fc3bf7601c0731f87d479c33f100735e748874155267f708cea49d549e93cf7a398b20373dc90ad9afd56d9c77cd24e2c4a18f7130b366c7fe5b26bc4d11ca1ed1b98fa0b4d7396f82ae6593f4575d19f4d8fd586c991129e5cbe15c8bacc89c3ee15ca471dea966b5c48ede0d3ba2a7e28c75c04e6a4aa49a61f4e391ffe78eb5e40a5ef349f3aa4d15f2291cc86ec7e47ae301bf0b6083dae44b695820a893d46732553ef15ed1c16d28268d52a7e3a7e7c009d0c0708a356d3310c1ebcbcca4d7acf433e34bfc9fc115498142dcc725e7a16879c75e4c2f01c6c98b39619f3248bf530e6ee593467e38cf4026cfdc4db6296560000d587f3c580750b1453ecc141c0461495551297d88ae034acbd4f5e80ce198e6640c4c1e9501529988109cef006eb2090a6fcd974d7f60290b78f1a8ce3051ac2d69636c3219f0a6ad8c254764396a1684b2fd9805b1853525f2e640e513197283cc4d4073ac033e0539a88f08aabe1423cd40b8a7e073437d812b57a5d39a0531dcbe13f4466e89efc66c2a1e4b39a3e0b3073c9d44e6cf9b85f4df5c4e03628d05bc0f94ec04234c9eca4ed17463f190406834b02888728f625371cda75d15ec19efebd59f00ab659eb94eb88bcb2110862a369ad599610c1530fcc118f5b82205bc5215fe3623ac8ec297d8ff4eee75ace20731c5d505e6605c26203b7f754164c9463f0a6eefe3a2880b8e06e7bc66bb2adcc1a3f9b0325f5ec31d12a25f1f73c2aa6bb3a7680d786a082a63b13cce1822fa6a4b085a871ae3409eecbc1fd8661b5d52bb2b8b72f23e24a225075f272ed2ba0c6c5c693811a0ef8db6da7cfe7c966c647f0187ad223eedb1012a5b7af103e98464ac768c79b21ca45b12a52cf261de0d367442cda71c4b8ee39c94ded1b22ba06c13836cb467ebab4efea07bdf1e3de8da56a0ee6d4f848011253cc21fac10700003513d3167b7a73e0d752b861c49814bc5410ebe53a0264f76068c91ee6ec9e2daa343482b2f0f06e605c5aaf81f2a3cd570efc2094b4bc452f9526f1bbe7b22b694fb8109a5a987fabf6250912d6099e67da9cac79e8b6f2cce4702d1f17cbc5d06c38b8a48155ec758369c185ded839fb58cd736fbb74105fe5baf44e7e3ed06843f23601b60a43b1f88fd29e9b3f58479f9b95392a39d5ba1a31ee4441ca2d1fb57c0a8678a07a724b7a65b2ab16d1da197f435bce3ef003fce27fa2f0a67c9dd6c930a4bcf59e79e57b010000006fe34972958c28b56642d14ea89bf4d7d6f7fcbcf4fd92bd08fc9fe424de4359112b11f81fbdc1505658363697713ff6e1f8ca3c4be34a79993a9091f6017cda6c7489ae5c07062555231427c3eb42a049f42d22a060983b044a7d34ab5d2b5386cca79af72396a48aad6b8dcd7855410fc6106e4a165994f26efff1e7ea0aa8f560333b5dfdb2a0d899b0fda955155f90c75effd3c9535d88508e836feb7807d57b2a57cca42d3d08fe7de60d2a33376f49bdacdd3f814bd0927f417f15ad62a10b302f46dc53a26fd997f3af46bbf990b6ada45ef83ce13029d167c65134e7b82b59ddfdc367e61c40defd2732ccebb1d4000f6c742df964e1fb390c255d2b1dfc745c6ab34af8096b5b67aa179e3f341854f7a69f7bf47664c832037ec7a78f8e27209e3f20f833fb6e8c0fc4a40920a5ad2b0618982ff72540009d5db82f0f5bcaed2a27f35d1e50eaa0cf8e48c7a2d43c25d0264db750a7f33b44a4bfaae576cf9ee7594ed204513899566564ed8bbc97ed18b1d8868f926a5c70ac06fbac1eade46792186be7bf8ffa3301239edd093449b7d77192782b5111c14169d2b4a1b3443ad62e4abdf11aac6a5b89a5b20ab0ad0abd949b9d64582c67ffce018e7e46de4091fcc77a65b971fc67c8d9cbf0c341ca764b1056ee5014d9865059616a525a1d46ae2fad159afe86dd1df9b8246411827e19535ca0aa9f83050b06e70aa2737f27e93d584a9cef878a642e9361efaa5d20bd8da901fa2e064656f686d3b3ea31d1d850ae9196b7764548f5c6450a32a717e09b6b7e75d43fbbda76e43a24f186d5578933f408bfa28e0435cde525fb91e71d92d704cc5a9b5e3db7aaec46d2b1f8dcb3f921f69bd7397c96a1e132c39c8f1656cea4365c779abf76199cb5b6aada022edec5c901cdafa2e7f3765af9c8b20cb1a6785085fcb0dc901367b89051bdfdc6b68c5215fd04e2b3c7e1c454a4d21132953b25c50995af0f7159a5a8d0a1621f4808f126a5bd40ddc79fed90f49925ee367a57a05c070fbe39fe2c213e7c1724a907ecfa69efe6e021c06a262471a4377f3c9809e9fee4f375e27c31b6afbb2151da86b7cab63c7b4fa4b77fb30172b9d0d78b1c0535ec0639c4910b5eeecbb5b8b5c8aa74c140e7ad347812e36db3097a7ff85c09ab2c0020202307f50efefcdb497b9c060ca68c4be54a9165b4cebc6b2e2e14e5ffb9213142418faedcdf26fd326b7672399e71cfffe3ed712ced5317c254f9199ee10c24c802d102bd8749513d3145201ca4e01bc7c8bbcf430afa541ec5665f86dfb143be648521bb0f2b029018201444787f644f8c88b79e754e6ea9c797babdaec72a9680abadf3a41684cdd57c2b6e833acc0846be5aa927f1b1b36562d2acb9ecfb758455230d050daec6748ba280a5edc86d48e3f8af0f8f4ffb18ae3cd3c19a82d504a4fd52bb62289ae8026572a497fe268f87ef4b4b5886aa07eeb698b7cbf99683f710afc9ed1f8a488883ce0eb8f7fd055b82a9fe21a409caa231c41ba151008e9658919c611e157d7f3926a5e4248532a6860e615b9c86e9fea212128d96ed58c9b84ef22706071eb69f492e4d8321ed9faf6c6a8928f86172bdc930244583ea15be497d9ce4ae79cb3e6293a8512ffaa9e8e358f3c7c7117001fb92891a40b84f9126cc3def5cde67f463bbac9668b9f56c3e4ee72fceebb47e52fc226bab213d8193516e7064459fd1365350a95c5a1c3ac44a73bbba2a4c17ebe49dd781bff1995cd706b77bb533117594ad63566f4c0730beab85ff4c713b7f10b95480fe99a0f676c51ca11116b21e87887b462aa9770e85509e4e60f198148115f0a3ce6028516a946178d1acacf7767f6be7277891369eff67762aa58f928d48b7231e44d899cea8289003349117a53d61bc27b207fdc91c9db61e677d1e1a1bc6a1b6e8564130b335233db4b5de8d62324e6d0ccb2b08c2ff922324eb8c506711142d4b8d7a21223ef0a3d534fdb0de58be95cd827152f71bdd0a82766b62b4c87536f0b7e7df343c4263187da887de6e65d11d0360e2376c1d71c367ae85edeed8f767d24c644b1a9b455ded1dc3cc224f99936a6ee66931c45e5e3db2427719ab2d5cd9c20d9bb0ec004b69bccb00649f3d8e34a3572c257de114b9f027d76bc7db9007175cc03b9e2061b6b3fe7409e009b5371544e56fe438cbd361e5b11efbf2d79d1c250a1e73ca8c601c4f4d1e3761290950421c48c7daa45965e472f5ef3c4b8597444dc5dc01cd25358055b5000617f3e7291da3413e3f0853b1271366612405c35ff1b785b984d921b518425628a533a29ab65d3c11f44c6daa86f8b6457ebb9419274c481aa6f3fa4547641670aff58b9cc62c0993d49a509f02dee755ee5f1fd2710c995c43a91c4f873afa1bbdff14427cba2641052a8f361ecbc72e8a6cf587e83f8bd3110c95fb080edc77a6d43cd58c447b0e02261e4109500c6458dce70acb17aa8f9dc1d15b94a61354164031b5d563c25d0246fc45e6401cefceb501e1468903e5d677759dbe3f24bd48ce55ff8b8f26529fb3b2d669202a1e8a498984b449b4830a0126b18f0e78182c9ce78fe0c448c0e27845b926cfde28fa85e156fa98fefaeb19ed1247c9643b447b4342c97cba5ca94ef1c555d5b49aa70e6aad45bfb557f15e8fdb2d6e3d10d8338a13fe3f187751985b37a5bb10b750f79e36fc2e2ee9bdecc3ed156e202ed7b45a94809d77edaa398042fc6a825a4848c334c557303d24eb3f8e01be06995ceb283c70272b00da61c3381628f0e372fe2fcc779ff7daf7e4b7f2686c39d3fab674b8867b62b0bf9d5cfd0c1d3b270521f55f147de75142ffd7fc9ac7e5dae7ca2fdf26a9222d060823852409dd040cfd1f66f218c6dbdaaacddab34b123af22f97384d64fac64d84fd638c96378c8f9532a11927d48440bc777ff8b8b9be88f930f3b579a713c0bc449dca3a3bd5f2efa98240ccc594299e44451dc60c6c5c9edd0d7b777912b3dc40c57e0ea5f4425cd7047e686c7304f04ba9f7b5de6ad2bd524f1d29f8802a524441fa286015adf4589431710aa4d76de8a956dc1d39c0a13abb7fc309d24222d036e204ab6bb46ef8a7595d9e4512e0b9d5f8fd719a4e3072e1d806967045789c67a1681f2a9f1f4b19f4f5e1afdafc17db7a6d5196161499e62ab4b0ec27648f3eeb1fb2b78f8ecf9b05cf9509a3b9e2a361238deb1c91bdbc8b1d11bbeb939fd9da811cd439069da0ecc00665d72357aac01f259a0325409b201859cc0569e0eba67a7a9ca7e8b78078d9370bd3e37f0571680ede60cb6bbfe69435d6ab5efd80cf051d119a7004fc0b600844d49218d844de8f521524a47ee50229c7da25e42a8639b5db225e7f23967f5d4f8a297aff04a3cbedc2985b6393a5ba0b26b6c7b4ca22d369b35b410799d1ad02825104d34f73408db1948438597931ed1c1c260e78340517bfa2f734537dbdf5ec303518ff4640efe7f7b1c2f46ba8b9ddb7a18d5e87ced554c9d6de78f85d293349590c6c32483534bc968b24a28eb54b9515589d6dd8eb51a5ad0b4d896ce92250397cbc404323fcdf0ee47ed634e0c58213bc5b35a72b21a098e11b79c061430dc817c1e0c79a5b6ed3b002979933f1b83a17f250b1bd5c4958df4d75531ca03efbda89f6a92fe08c23ad9014ff562a7f3dcde578d6825b9847b5df04dbca4f2aa52d8e0f4cf8183ce121e39b50358a9796acde0372a8ff97769874a80ab997cd889145aad4888c06963c2f5b82f53a748a6729fbc79d35c06d84e05c62e44ff78040e56ebfc6efcf0d8b49337d5a17c4041f0d5a8b616244d585a162b69db073accd9071d12df5b326a43b834bbffc2f2a60deafcbddf1c6438a1769d6fb09fbe1990e89da12164ef237f326edb5be64bb64b143a030de8a99b3c5e543c871cb581e2be090a92134aa587701f864907cadd7c1ce20fcf8f5dc7f7ecd06a6c19d89a92ca0ad4393c208b80bba990c7a3702a9c79bddde75d5db244719ac32191b6ceb041ab541fb47680a97dc0422b8a50d91e32cb08cd341b0b099aca5bd12b69d4f89d10b755b351a6489180b786a3bebac926532a4a2d85b07bce6c090d1aaaff079e36d5394a612f1351b90c13a0fa6bf9d188d548dfe6fa51a9026edb52009c03ed45ac51d05c58a957bcc67e05a588985ba00d79f33ae9cdd5f5721d9fdc72ee6e880708be87e8a60c3c035c146f2091d1b9a4c2cfa56f292fe1ba62290d4e56c05669291bbe917f3cac51802a2cc8e9c90dadfe666c233c5a5bb71ee17deec51ce60c73f57bf9ecb84873afcc44815131810c6c1217bea485ef9aa2785e859b25315ef8aa3a274982786e45d622ae831fb76010d69a181b069e4cc55d4436edb10d1119b0c6000c6d5cff7c72f740a59dc0507e7a952b69403c62673f122c9d1264fac6ce2262e86cd8d6a402672f88530fc2d16f31736dd497a4e853253ac8d5aff8d1376895e9f5519b2490cc2a2412ba0c99cec855f668837310035e92fb646486de1b0acffb91ae7516df3eeef381456b55e65baa58e71461c928687e699d2b21814805591382e95e1b970aaa53259917f070281f2336b7d570249d838b3f1a32753c336864e15f4561badf8fee034a29c52ff3fca7456ae140f83e3b2fd5b57c9aef3f20c664200d235f236ec47dd2fc20b14dc6000812237aea992d987e5460679e8c5b76d931ef6d951e6c7087e3106b6ce2db9de6f228fdf3ffc38710c0e8d5000a195a79d1fa2301038f5b27c40b09c34c025e5099d40c2204ea0eae985263c9101cab88d6857a320c9e497f22348a24861a5fb8d734e08cad09f9933748ff01eab22f17756f58688dc1b486a397563ee9ad0784b8833cdb5f7c6bcf76d9c1105f71c3c6aabefd70dc6cd5c66d31caf916145ac5ed7fa070b4277c0448ab1eb78c943be9aeab0587d321a4bcb7754f070881178f8be668b686124899fac252519f4b60ec42db766a908755040463125c26850177402a977246d36d23afac0a11889d54640bd8f6f670d686cfd33f6fc5d90cf6cbd63d9d0fd201dd4c74dbbab899f3c23c0b7e37ea0b2aff421327200d0da58b5893a4186ae3652cc6e11c2c2a0e52184a3872532acce98c94cebf4f31333663a620f0dba0ffd89c3124380075bd28caa6d449a050b3661b8fbaf4747b77c4928b1378fdc8c7a7b38ade1aeec44bdfacc8271d0b132b2029b0f3582f9919f5c8cd543abc9caf6b82b197cd482c3ef61a64743506342bf50a3c1ff544563bb8b2002911ee1fad698f4ac133ffed5bfe81239c918207a03c7a8bd71a0a502aea78d38e970e3ab2abf754b598acb79cf276792aa08724d0ba24f2a694912ab795b3f45f52dec50d9bfbc99ae27e1d2c2216afec6709d6513a64b29ef58255bbe18478c5d4f15f74ea63a1e15487752eec8fd019f1d4a7aa25277664754bd2d7cd3a7a018b92c56d965a1974885363757286da9e055ef7fac17876f0a64c1026a597733b897a9155ecbf420159ae8e5209aa83a3544fff1fb4566f2d54f95e3bbd30dcca5f24397e4bd47ff01292f0d6fe9dd47a810e0c25382fa69b4987d1afd9b69ef125110ad6b240eaa9c85829a2646f9ab7874bc02bfa8346cc9190943e9d46b44880670b1e2aa3a29e83be5472d7418885a353faade6e8b18f4b588607bbb758588d1e2f11a9dfa1c4d61be50249f1ee32e6ff8c0c7722aaec1bc79654a4772efc578bd6a14c79abcc77a4e09c8b6c6ea35cd3ab31e35268fb55db843176f8042f8ce7be0ddd4ead6dbdad0ef9e7cb2323db5cc48119a72b27306b8ff6366c0bc682a85ab9e2cf2238b6d6eb2e38a97d5577e6334cb2aa6e7c86e489e876f9d7053577a5cb57f52812fab7c4bd7b19a34c228ffb67dcac9281612f778b58c580c140542200fd00cb3ad81d93420df93c5af2493f646d8de797102fa0a650b2c7638623b823ff11444fdde453570f99f9099b60061a908b83383ba8b82bb78edd074dccf9342afdf8d11a6129ba6ea7030f3629056264f1736c2b926171b6dc7e1fa455a473de656390495f3b6ad2f9f46f35eacb075628ff739ef78f28ba683448068c7f18fb63f28ba7dbbb78999100dde0a94e8b8570817c7114c13e139ceb333782b29a84a5b19497fa785915c7680dd7f972cb59ba22161f60886e5cb3c3e808726cbf96bc4da78914eee565c6d9d18e70d22cf8c0244cf3cf488c3550eaa400bc0f26d64e0f1bc8d0301a841d954073a641f3ef883d81f4d5db8e9df708e64e640b38df7295f7fe573863653086bae5507c880ab7fdb7a6c5ce77027ffa7395233d3ce536d77ae6c2e9c8ffb6fee78a3bcb3b5f888bd595caa3a5586948776b950a89cde4db8247ffff27491c882b430afdd60e7a22324f6635a9aa7139f3e624c6d9ece60f7f8153b2080cf0544fbf8e1c436503766e670b902604ab521e11aa5a65cedd64cfaf898ac5f55c08c87693c323517bcb0d99c28f5e072d4f6540c7ead70138d47c1a67fd72bd6ef5613af33a0af311c3d0a631ca2a2dfbe35d1021eb610e40b9be128683235a788b5a4cacf99babee382458d59e8aa1dd7bba7e09dd30c055a3df8ed721a1778b2c6ed587a403566325cd19962edd7831caa44a6b716517bad502130e7cf6a5ce5288dc84c0170f622ae0b1e1166a9c2c0771d91df9f9dd82ae210469602ce38964746c1c1d04321aae7d464eb801dbea7ec39505457e778208774d72673626c998b002c46a9b4b1e390d9344f0c1043a2100b35196bce42d40caa0ea9a486bf8526fd1f0f0d362c2cac463ea7377a20b54b9435442ca529fc00da4fd7e27c4eaf14215a06857b54254c26346956fd7fe215a5ce57ec38cedf50a3c759e563a4fd87494f00e7bd9b44f3b7e99c6ef67187056a21d2fe1ac9d24125b1947eb293189fdc448b591af4d9b8eb091d6bbb5e50fae79d000044e282bb2ab6c63cc9562b151c214e45015354e62be63e1881238b907f7bdb791ff44a4e03fa29dbd26db2f49d0f4729b7cd9ba69a65b0b493466d35d09b3f590c67c31660d95e2ab4af2c9f1df91f04ce5a57dde2d75206b42e3423126774d76593c2f713ae279d7092506b513fd5b38f0f52d3fafd7141dfd4a0de1063754dba865faf8dc0f6be9d90ef21ec86a275533f6ad4b4e360dc775413f29eab8b3daac6279b9abfe163ea2f183e09ed91ef67fbb090875109288a182cfdcc46d90678efe5edceda6518335e678438cac4bb47d376f3f0e12aa55301735d7f42653c073d6a4a37b2e17d332dc1be6b50918c007b14886307cc39250e81efecd63d24067a49994572725a9df1760caac13a28f5255556b27ec245e93969b85cdec7cd1c2d2a433d3f9572b93054a7ce8adff81bc1d30884d5fc4791e251bd907e37af5bec74235c3e2f804e4e0450b715289942b7859ad207bafcfec1b586dc15e7911fe6d20aa3d02fcd47e9956780e300d7c53c17dfa15754deb4c20efebc7270bda0fa6b37fc88c6be4250cac38c1b8186b364482026ab52d65d3a691903fccc39772277011bfaa421adba76bed9731077be00000000d40f36bbd2a839c67dc4b862c968491b877d4fd13fc90f8da57a29121e12f78e85af765cd66e72ba513593fe1cdf20019985b065d828707d8e509c6834eab188deea5c9ee97955f4b07d37b6fc7beed73be94887d423a349f35bb8782bc654ceaec870d97f061bda02ae73f6d575f81e0b6326eae6c1b3085cc584686120e12dd9ad8ce44036bec8a189f900", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x1fffffffe, 0x8, 0x6, 0x8, 0x1, {0x1, 0x8010001, 0x4d0, 0x40d, 0x6, 0x0, 0xed1, 0x2, 0x5, 0xc000, 0x7ff, r2, r3, 0x3d5, 0x20000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f00000002c0)={0x50, 0x0, r1, {0x7, 0x26, 0x5, 0x6104583a, 0x0, 0xfffc, 0x3, 0x3, 0x0, 0x0, 0x1, 0x10001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004380)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa0, 0x0, 0x7, {{0x1000000000000002, 0x4, 0xfffffffffffffffe, 0x5, 0xfffffff8, 0x8003, {0x1000000002, 0x1, 0x5, 0x40000003, 0xfffffffffffffff7, 0x5, 0xfffffffb, 0x8, 0xfd55, 0x8000, 0x5, r2, 0x0, 0x1, 0xfffffdff}}, {0x0, 0x6}}}, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x60a41, 0xb3836f6d7a15f29) (fail_nth: 6) 3.878970111s ago: executing program 3 (id=603): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000000)={0x44, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x10004000) syz_usb_connect(0x0, 0x36, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000880)={[0x200000000]}, 0x8, 0x800) io_setup(0x206, &(0x7f0000000300)=0x0) io_submit(r3, 0x0, &(0x7f00000005c0)) syz_open_dev$char_usb(0xc, 0xb4, 0x0) futex(&(0x7f0000000140), 0x100, 0x2, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f00000001c0)=0x2, 0x1) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc01c5868, &(0x7f0000000100)={r2, &(0x7f0000000000)='\x00', 0x200000, &(0x7f0000000040)={@_ha_fsid={[0x0, 0xfffffff9]}, {0xa, 0x9, 0x7, 0x6}}, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x9}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000040601010000000000000000030000050500010007000000b450f7c0d008df52988ec0472e3e1b7b4c0792424480c425e94557162bc252f84e8a69bff8644653cb7d6ccf231d3e7b3540600f56538bf1"], 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x20000084) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r5, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x2c, r6, 0x1, 0x70bd28, 0x25dfdc03, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000300)={0x3, &(0x7f00000002c0)=[{0x3, 0x75, 0x3, 0x400}, {0xb, 0x5, 0x8, 0x6}, {0x1, 0x8, 0x8}]}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x42, 0x0) timerfd_gettime(r7, 0x0) write$cgroup_pid(r7, &(0x7f0000000500), 0x12) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 2.951724288s ago: executing program 1 (id=604): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x15, 0x5, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x10200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x4, 0xfa11, 0x10}, 0x0) r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffd, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') r6 = openat$dlm_control(0xffffff9c, 0x0, 0x400, 0x0) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r8 = getpid() sendmsg$nl_generic(r6, &(0x7f0000001580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001540)={&(0x7f0000000f00)={0x518, 0x27, 0x10, 0x70bd26, 0x25dfdbff, {0xc}, [@typed={0x73, 0x13a, 0x0, 0x0, @binary="807dcd2e1f85d95fd108e8ef0fead1fd2806e6775c22b6a7d997e1480282526c9ced4c844f7f6fa640524f53e7d05e03a7b83af77052ce732ff11ff8195af625ad943bb58739520133195cbaf2d916201dde47b2e644527cd1442f61ef7ca8166e11018dccb55c2d41eb23b3d108fa"}, @nested={0xd9, 0x14f, 0x0, 0x1, [@nested={0x4, 0x70}, @generic="6a23579c052efe948168933500683446f3e03d8b0909384dc85a855d1a4577fb2ba0b677a9fc33a880235f700553e4bd9436d81ce9d8d936b2a121651929d9bbfebf820ac79487c1d358d796b83be8c5f2ca96f48ee2a7618e571764fd7ca9d903a26de7281ff13006776bcd54fcd9d33bd544118b61e2271f4fd6244de63538d3b6812714a5a074efa3980c09f91c962a89f8590a9a29b29f0b8e686e694a652a31a52f7b681a0c90ca771e527531db935638e193fb2c7069ace061540d8acbc20d0b2ffe", @typed={0x8, 0x12f, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic, @nested={0x4, 0xdf}]}, @nested={0xec, 0xe0, 0x0, 0x1, [@nested={0x4, 0xd9}, @generic="9602e7fa7a1c5de84a9bba63b995fce7dea0325aa20a79452e900794739e5372830d01896dff7409aa297d502177c7ad0be574fde449ddb1685cf5caf90f3926f225a5b4d3dca5ec6bb0cf48204d5eb03f07986c6d74a77183f64f87a2fed70c6b62252ebc779c3d5c4eb2c2f2b258b82648f8167dd38e83fcd670b484d8c663f8fdcf73a49f5593f4278787269d5285174c58afe613eadb7d290db522a252502f48bded5493c8bb709c64c1e5237f459b85f85343b1bb71ce47750bf546b489a9693d71f67996bd814e76ef76de1329", @nested={0x4, 0x78}, @typed={0x8, 0x47, 0x0, 0x0, @pid=r8}, @typed={0x8, 0x52, 0x0, 0x0, @u32=0x7}]}, @typed={0x8, 0x6b, 0x0, 0x0, @fd=r5}, @typed={0x8, 0x13f, 0x0, 0x0, @ipv4=@private=0xa010102}, @nested={0x1a9, 0x69, 0x0, 0x1, [@nested={0x4, 0x10a}, @typed={0x8, 0xf8, 0x0, 0x0, @u32=0x3ff}, @generic="1504b89044654a9f072fcc4c9f37cb8c70bf1005b84aa1824b4f06d2156cd0898d471ac67cf3ba222c719df3b8ca8c845550c7b48f3092bb9792a6793cda75dadce271a82565976470639e3afa46a62eadbe5b50bd1a8fa8dc3fbc7d5accae43b077d7ab7015dbca06ed254d1906ec1b13845c21f02dd60270d6ae8fb6ea1bdabc807140d169e3d98043be17f9514de837b0e0498a64386c1845046b0762bc38459f6626b4779f1edf84dd68daffcd146e4f52bf0a74a893d4899ba4", @nested={0x4, 0x8}, @generic="9f413e5d8464b5c6c7b4c5e3e3844d3af6242f3df8469468e1a4eea5458e252def4f1d13cabed623239c971cbf938ca1f6ed93170c92ba878472e82fe10a", @typed={0x8, 0xb4, 0x0, 0x0, @str=')(\\\x00'}, @typed={0x10, 0xb3, 0x0, 0x0, @str='/dev/uinput\x00'}, @generic="3ffa715f7acc1f04909a9d22f34626c40a20392a0d942cbe8bca40e5004f65aeb8a4d5be1a701d813b704fdf786053f1bc6fe3f53d8c730ba9a1483fd5eab29634942535f8c9fc9ee93e4703a5a5aae16653ad9c02f236bc7082142df6173a9a2efdb2352e09d8be398b34ecc8efac2d7ca3d861608ff8fc72f121a9c1b4cd", @nested={0x4, 0x134}]}, @generic="6986bee4376198915c809e58fbf9c4adceb916d95b0d13e4544a319703e7f6907976a745319a3d961a07428fecdd056755c29c72ad1e83ab450d6a85fc16db7041b14b57f81d2ffbbbfa61e2a7e5b6a8f9c4add938e51b1c6bcac24b7a2eab30e325d3c1e934626773d41793f56a19ee3a5cad68e700ef926262d18815e0821ba20cafba82643316c187dbeaa4f409b2f74d976754f08a88e6e0b83cded8b9", @nested={0x6c, 0x88, 0x0, 0x1, [@typed={0x8, 0x14b, 0x0, 0x0, @u32=0x7}, @generic="6f1a05e67acf3159c5e2", @nested={0x4, 0xdd}, @generic="592416cb844772081186766f397a0f1d26b542820f571e36afc0aa61e27b7fdac807382449a232f9dcd6f234e0c0bb051bd1763d2f632a1ed4be1dcffbfede995ca1cb5d4b5d1610317a5f223563d4c47be2"]}]}, 0x518}, 0x1, 0x0, 0x0, 0x4008000}, 0x20044005) write$uinput_user_dev(r7, &(0x7f0000000a80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23d, 0x0, 0x0, 0x0, 0x3ff, 0x1, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0xfffffffc, 0xe0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffc, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x2], [0x4, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x95f, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xfffffffe, 0x0, 0x80000002, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x4, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x3, 0x3, 0x1010001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x3, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x3], [0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x4, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x10003, 0x0, 0x7, 0xab, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000]}, 0x45c) ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x2) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, 0x0, 0x2c000054) ioctl$UI_DEV_CREATE(r7, 0x5501) getsockname$packet(r5, &(0x7f0000000040), &(0x7f0000000100)=0x14) ioctl$UI_DEV_DESTROY(r7, 0x5502) bpf$MAP_CREATE(0x0, 0x0, 0x50) 2.93131299s ago: executing program 4 (id=605): r0 = openat$sndtimer(0xffffff9c, &(0x7f0000000280), 0x40081) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000002c0)={0x2, 0x2, 0x7, 0x3, 0x3}) 2.900294812s ago: executing program 3 (id=606): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x0, 0x84}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048c15}, 0x40848c0) syz_open_dev$char_usb(0xc, 0xb4, 0x7) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x12e1b, 0x1a001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}}, 0x20004000) 2.70421328s ago: executing program 3 (id=607): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket(0x1d, 0x2, 0x6) getpeername$packet(r1, 0x0, 0x0) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010101}, 0x10) r2 = socket$nl_rdma(0x10, 0x3, 0x14) fsetxattr(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="757365722eefff30e5762656d12759627f4a4c98523ecf1121f10590e63ef81310bdf02b315b37c3fc16f92d2ce2a485201ef9c49dfa49f55b4d88"], 0x0, 0x0, 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x22020600) fcntl$lock(r3, 0x5, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) r5 = socket(0x40000000015, 0x5, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x1f0, 0x0, 0x11, 0x148, 0x90, 0x0, 0x15c, 0x2a8, 0x2a8, 0x15c, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010102, @rand_addr=0x64010102, 0xffffff00, 0xff000000, 'pim6reg0\x00', 'vlan1\x00', {}, {}, 0xd8, 0x1, 0x7}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0xffffffff, 'vcan0\x00', 'netdevsim0\x00', {}, {}, 0x0, 0x1, 0x7a}, 0x0, 0x70, 0xcc}, @common=@inet=@HMARK={0x5c, 'HMARK\x00', 0x0, {@ipv4=@dev={0xac, 0x14, 0x14, 0x25}, [0xff000000, 0xff000000, 0xffffffff, 0xff000000], 0x4e21, 0x4e24, 0x4e24, 0x4e24, 0xe8c, 0x800, 0x3, 0x2, 0x4}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x24c) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x72}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x4e23, 0xffff, @local, 0x81}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0xfffffffc}, 0x1c) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) syz_usb_connect$cdc_ecm(0x3, 0x5e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024c00010100c08109040000fe03020000052406000005240002000d240f01bfffffff0000000000042413020424130109058103000407100709"], 0x0) 2.062297416s ago: executing program 2 (id=608): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103", @ANYRESHEX=0x0], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="ad5a97"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000002000/0x4000)=nil, 0x4000}, 0x1}) syz_genetlink_get_family_id$batadv(&(0x7f0000002100), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f00000020c0), 0xffffffffffffffff) syz_open_dev$vcsu(&(0x7f0000002080), 0x68b5, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r2, &(0x7f0000000040)={0x2020}, 0x2020) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="200103"], 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000880)={0x2c, &(0x7f0000000600)=ANY=[@ANYBLOB="400c0e00009b17ce11f61e86500bbb65ef3df46e"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000500)={&(0x7f00000018c0)=[{0x1, 0x103d, 0x0, 0x0}], 0x1}) 1.898322854s ago: executing program 0 (id=609): r0 = openat$vicodec1(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc04c5609, &(0x7f0000000100)={0x5, 0x5, 0x4, 0x0, 0xd, {}, {0x2, 0x1, 0x8, 0xa, 0x4, 0x0, "9ab9160c"}, 0x2800000, 0x4, {}, 0xc5}) timer_create(0x7, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000003a80)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, 0x0, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x7, 0x2}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 1.52220151s ago: executing program 0 (id=610): r0 = syz_open_procfs(0x0, &(0x7f0000001180)='status\x00') (async) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x18, 0x0, 0x50000) futex_waitv(&(0x7f0000001240)=[{0x1, &(0x7f0000000100)=0x7fff, 0x86}], 0x1, 0x0, 0x0, 0x1) readv(r0, 0x0, 0x0) (async, rerun: 64) openat$ocfs2_control(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 64) r2 = socket(0x400000000010, 0x3, 0x0) write(r2, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030011000500e1000c0400030080000300", 0x33a) (async) r3 = openat$cgroup_ro(r0, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r3, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xff5, &(0x7f0000001840)=""/4085}, 0x94) 1.384560854s ago: executing program 0 (id=611): syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0xc45, 0x5112, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x7, 0x19, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x200, 0x3, 0x1, {0x22, 0x2d}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0xff, 0x3}}}}}]}}]}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, 0x0, 0x0) openat$6lowpan_control(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r3, 0x0) mknodat$loop(r3, &(0x7f0000000100)='./file0\x00', 0x2000, 0x1) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, &(0x7f0000000080)={@hyper, 0x2}) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close_range(r0, 0xffffffffffffffff, 0x0) 1.204448432s ago: executing program 3 (id=612): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000b80)="d800000019008111e00212ba0d8105040a610200ff0f040b067c55a1bc000900b800069903000000b0000500808178a8001500030001400200070901ac040000d69b6f94007100a007a290457f0189b316277ce06bbace8017cbec4c0000001fb791643a5ee4b11602b2a10c11ce1b25d6d9300000730d7a5025ccca262f2240fad95667e04adcdf634c1f215ce3bb9ad809d5e15de6ccd40dd6e4edef3d93452a9230000e9703000000000000000000000000129ae100000000000000000000080000000000000000000000000080b6fcdb2ab01ec2bb13", 0xd8}], 0x1}, 0x8040150) 1.033506214s ago: executing program 3 (id=613): syz_usb_connect$uac1(0x1, 0x79, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x103d, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x67, 0x3, 0x1, 0xf, 0x50, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x6, 0x9, 0x1001}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x5, 0x7, 0x1, {0x7, 0x25, 0x1, 0x8, 0xec, 0x1e0}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xff, 0x9, 0x1, {0x7, 0x25, 0x1, 0x8, 0x9, 0x7ff}}}}}}}}]}}, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) r5 = syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00') pread64(r5, &(0x7f0000000080)=""/102356, 0x18fd4, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r4, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500"], 0x3}, 0x1, 0x0, 0x0, 0x40900}, 0x0) splice(r1, 0x0, r3, 0x0, 0x10d00, 0xf) r6 = fsmount(r0, 0x0, 0x0) fchdir(r6) ioctl$KVM_SET_MP_STATE(r6, 0x4004ae99, &(0x7f0000000080)) 578.674108ms ago: executing program 4 (id=614): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="12010601bc3bd020402012c651e50102030109021200017b63200909040002"], 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x18, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x81, @string={0x81, 0x3, "7e52c17c177bec307d9704428313010719a81c15828b9e3798cdc2e767c264c9e9bc04722ebecf6d8f892334b8b7a35d9ac58a408f435724b40d87fb232187c99d09cf37c6beb87cb54906c60ddd1c2ba92f84bb7d473b6158ee960ab94da290cf6226d70ac904a593a993cdbdc12a67379d73dacebb45712b2799b52377fc"}}, 0x0, 0x0, 0x0}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, &(0x7f0000000040)) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="12010601bc3bd020402012c651e50102030109021200017b63200909040002"], 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000b00)={0x18, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x81, @string={0x81, 0x3, "7e52c17c177bec307d9704428313010719a81c15828b9e3798cdc2e767c264c9e9bc04722ebecf6d8f892334b8b7a35d9ac58a408f435724b40d87fb232187c99d09cf37c6beb87cb54906c60ddd1c2ba92f84bb7d473b6158ee960ab94da290cf6226d70ac904a593a993cdbdc12a67379d73dacebb45712b2799b52377fc"}}, 0x0, 0x0, 0x0}, 0x0) (async) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, &(0x7f0000000040)) (async) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) (async) 0s ago: executing program 0 (id=615): syz_usb_connect(0x6, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="120110031ecd2b20101401a05b"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)={0x8000000, 0xffff1000, 0x1, 0x1, 0x999}) kernel console output (not intermixed with test programs): 103162][ T5705] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 118.114155][ T5705] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 118.123601][ T5705] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 118.131925][ T5705] usb 4-1: Product: syz [ 118.136746][ T5705] usb 4-1: Manufacturer: syz [ 118.141379][ T5705] usb 4-1: SerialNumber: syz [ 118.357360][ T5705] usb 4-1: Invalid connection information received from device [ 118.584342][ T6433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.637216][ T6433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.845244][ T6441] fuse: Bad value for 'group_id' [ 118.880510][ T6441] fuse: Bad value for 'group_id' [ 119.501581][ T6450] FAULT_INJECTION: forcing a failure. [ 119.501581][ T6450] name failslab, interval 1, probability 0, space 0, times 0 [ 119.514427][ T6450] CPU: 0 UID: 0 PID: 6450 Comm: syz.0.227 Not tainted syzkaller #0 PREEMPT(full) [ 119.514449][ T6450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 119.514460][ T6450] Call Trace: [ 119.514466][ T6450] [ 119.514474][ T6450] dump_stack_lvl+0xe8/0x150 [ 119.514519][ T6450] should_fail_ex+0x412/0x560 [ 119.514548][ T6450] should_failslab+0xa8/0x100 [ 119.514575][ T6450] ? io_submit_one+0x130/0x14c0 [ 119.514592][ T6450] kmem_cache_alloc_noprof+0x87/0x650 [ 119.514624][ T6450] io_submit_one+0x130/0x14c0 [ 119.514643][ T6450] ? irqentry_exit+0x218/0x760 [ 119.514661][ T6450] ? lockdep_hardirqs_on+0x7a/0x110 [ 119.514678][ T6450] ? irqentry_exit+0x218/0x760 [ 119.514699][ T6450] ? __pfx_io_submit_one+0x10/0x10 [ 119.514718][ T6450] ? __might_fault+0xaf/0x130 [ 119.514758][ T6450] ? __might_fault+0xaf/0x130 [ 119.514783][ T6450] __ia32_compat_sys_io_submit+0x1e1/0x390 [ 119.514810][ T6450] ? __pfx___ia32_compat_sys_io_submit+0x10/0x10 [ 119.514849][ T6450] __do_fast_syscall_32+0x229/0x6e0 [ 119.514868][ T6450] ? do_fast_syscall_32+0x33/0x70 [ 119.514886][ T6450] ? lockdep_hardirqs_on+0x7a/0x110 [ 119.514902][ T6450] ? asm_int80_emulation+0x1a/0x20 [ 119.514919][ T6450] ? do_int80_emulation+0x286/0x530 [ 119.514937][ T6450] ? trace_irq_disable+0x3b/0x140 [ 119.514967][ T6450] do_fast_syscall_32+0x33/0x70 [ 119.514987][ T6450] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 119.515008][ T6450] RIP: 0023:0xf7fb901c [ 119.515032][ T6450] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 119.515051][ T6450] RSP: 002b:00000000f547650c EFLAGS: 00000206 ORIG_RAX: 00000000000000f8 [ 119.515073][ T6450] RAX: ffffffffffffffda RBX: 00000000f7fb0000 RCX: 0000000000000001 [ 119.515085][ T6450] RDX: 00000000800029c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 119.515095][ T6450] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 119.515104][ T6450] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 119.515114][ T6450] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 119.515139][ T6450] [ 119.963108][ T6454] faux_driver vgem: [drm] Unknown color mode 55545; guessing buffer size. [ 120.756421][ T5705] usb 4-1: USB disconnect, device number 13 [ 121.174987][ T5705] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 121.334864][ T5705] usb 4-1: Using ep0 maxpacket: 8 [ 121.341856][ T5705] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 121.349902][ T5705] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 121.361376][ T5705] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 121.373015][ T5705] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 121.385228][ T5705] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 121.397790][ T5705] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 121.415844][ T5705] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 121.430321][ T5705] usb 4-1: config 168 interface 0 has no altsetting 0 [ 121.438292][ T5705] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 121.446077][ T5705] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 121.457415][ T5705] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 121.468943][ T5705] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 121.480905][ T5705] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 121.492377][ T5705] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 121.504105][ T5705] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 121.519095][ T5705] usb 4-1: config 168 interface 0 has no altsetting 0 [ 121.527571][ T5705] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 121.536024][ T5705] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 121.547380][ T5705] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 121.558925][ T5705] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 121.571047][ T5705] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 121.582591][ T5705] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 121.594220][ T5705] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 121.607876][ T5705] usb 4-1: config 168 interface 0 has no altsetting 0 [ 121.618147][ T5705] usb 4-1: string descriptor 0 read error: -22 [ 121.624661][ T5705] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 121.636234][ T5705] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.673207][ T5705] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 121.879667][ T6466] ip6tnl1: entered allmulticast mode [ 121.906622][ T9] usb 4-1: USB disconnect, device number 14 [ 121.988224][ T29] audit: type=1326 audit(1779700287.323:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6467 comm="syz.2.233" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=354 compat=1 ip=0xf708f01c code=0x0 [ 122.494876][ T5729] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 122.656399][ T5729] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 122.664674][ T5729] usb 5-1: config 0 has no interface number 0 [ 122.670974][ T5729] usb 5-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 122.682150][ T5729] usb 5-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 39717, setting to 64 [ 122.694316][ T5729] usb 5-1: config 0 interface 2 has no altsetting 0 [ 122.720982][ T5729] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 122.730294][ T5729] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.741377][ T5729] usb 5-1: Product: syz [ 122.745932][ T5729] usb 5-1: Manufacturer: syz [ 122.750706][ T5729] usb 5-1: SerialNumber: syz [ 122.761937][ T5729] usb 5-1: config 0 descriptor?? [ 122.768134][ T6478] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 122.775632][ T6478] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 122.785635][ T5729] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 123.103512][ T10] usb 5-1: USB disconnect, device number 14 [ 123.124993][ T5705] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 123.161455][ T6496] x_tables: ip6_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 123.240005][ T6498] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 123.248125][ T5729] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 123.259971][ T6498] syzkaller0: entered promiscuous mode [ 123.265626][ T6498] syzkaller0: entered allmulticast mode [ 123.274850][ T5705] usb 3-1: Using ep0 maxpacket: 16 [ 123.282246][ T5705] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 123.291268][ T5705] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 123.300342][ T5705] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.310405][ T5705] usb 3-1: config 0 descriptor?? [ 123.404859][ T5729] usb 4-1: Using ep0 maxpacket: 32 [ 123.414418][ T5729] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 12336, setting to 1024 [ 123.425684][ T5729] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 123.438664][ T5729] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 123.447764][ T5729] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 123.456428][ T5729] usb 4-1: Product: syz [ 123.460586][ T5729] usb 4-1: Manufacturer: syz [ 123.465218][ T5729] usb 4-1: SerialNumber: syz [ 123.471628][ T5729] usb 4-1: config 0 descriptor?? [ 123.477355][ T6487] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 123.514853][ T5691] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 123.664838][ T5691] usb 1-1: Using ep0 maxpacket: 8 [ 123.671273][ T5691] usb 1-1: config 0 has an invalid interface number: 137 but max is 0 [ 123.679658][ T5691] usb 1-1: config 0 has no interface number 0 [ 123.685875][ T5691] usb 1-1: config 0 interface 137 altsetting 1 has an endpoint descriptor with address 0x11, changing to 0x1 [ 123.697536][ T5691] usb 1-1: config 0 interface 137 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 11 [ 123.708803][ T5691] usb 1-1: config 0 interface 137 altsetting 1 endpoint 0x1 has invalid maxpacket 59391, setting to 1024 [ 123.720049][ T5691] usb 1-1: config 0 interface 137 has no altsetting 0 [ 123.729053][ T5691] usb 1-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=32.10 [ 123.738238][ T5691] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.746256][ T5691] usb 1-1: Product: syz [ 123.750404][ T5691] usb 1-1: Manufacturer: syz [ 123.755073][ T5691] usb 1-1: SerialNumber: syz [ 123.762794][ T5691] usb 1-1: config 0 descriptor?? [ 123.773489][ T6498] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 123.784419][ T5691] xbox_remote_probe: Unexpected endpoint_in [ 123.867911][ T6501] netlink: 'syz.4.246': attribute type 13 has an invalid length. [ 123.878147][ T6502] netlink: 'syz.2.242': attribute type 1 has an invalid length. [ 123.933500][ T6502] 8021q: adding VLAN 0 to HW filter on device bond1 [ 124.038388][ T5738] usb 1-1: USB disconnect, device number 16 [ 124.594697][ T6506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.247'. [ 125.619252][ T10] usb 4-1: USB disconnect, device number 15 [ 125.754175][ T6525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.254'. [ 125.896079][ T5738] usb 3-1: USB disconnect, device number 12 [ 125.938996][ T6529] veth1_to_batadv: entered promiscuous mode [ 126.219041][ T6538] capability: warning: `syz.3.259' uses deprecated v2 capabilities in a way that may be insecure [ 127.037869][ T6550] i2c i2c-0: dtv_property_process_set: SET cmd 0x80000000 undefined [ 127.454879][ T10] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 127.575167][ T5738] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 127.606507][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 127.616974][ T10] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 127.627717][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.637923][ T10] usb 3-1: config 0 descriptor?? [ 127.744829][ T5738] usb 4-1: Using ep0 maxpacket: 16 [ 127.751624][ T5738] usb 4-1: too many configurations: 71, using maximum allowed: 8 [ 127.761855][ T5738] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 127.769642][ T5738] usb 4-1: can't read configurations, error -61 [ 127.850652][ T6554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.263'. [ 127.916612][ T5738] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 128.084831][ T5738] usb 4-1: Using ep0 maxpacket: 16 [ 128.099987][ T5738] usb 4-1: too many configurations: 71, using maximum allowed: 8 [ 128.111432][ T5738] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 128.119187][ T5738] usb 4-1: can't read configurations, error -61 [ 128.126716][ T5738] usb usb4-port1: attempt power cycle [ 128.465833][ T5738] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 128.499301][ T5738] usb 4-1: Using ep0 maxpacket: 16 [ 128.509203][ T5738] usb 4-1: too many configurations: 71, using maximum allowed: 8 [ 128.521198][ T5738] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 128.530076][ T5738] usb 4-1: can't read configurations, error -61 [ 128.664851][ T5738] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 128.685145][ T10] ath6kl: Failed to submit usb control message: -110 [ 128.699946][ T5738] usb 4-1: Using ep0 maxpacket: 16 [ 128.701965][ T10] ath6kl: unable to send the bmi data to the device: -110 [ 128.717908][ T5738] usb 4-1: too many configurations: 71, using maximum allowed: 8 [ 128.731060][ T5738] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 128.739001][ T10] ath6kl: Unable to send get target info: -110 [ 128.739105][ T5738] usb 4-1: can't read configurations, error -61 [ 128.751932][ T5738] usb usb4-port1: unable to enumerate USB device [ 128.762164][ T10] ath6kl: Failed to init ath6kl core: -110 [ 128.775738][ T10] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 130.222643][ T5738] usb 3-1: USB disconnect, device number 13 [ 130.399131][ T6574] netlink: 8 bytes leftover after parsing attributes in process `syz.3.268'. [ 130.429519][ T6574] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.437570][ T6574] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.010134][ T6609] FAULT_INJECTION: forcing a failure. [ 131.010134][ T6609] name failslab, interval 1, probability 0, space 0, times 0 [ 131.030422][ T6609] CPU: 1 UID: 0 PID: 6609 Comm: syz.2.275 Not tainted syzkaller #0 PREEMPT(full) [ 131.030448][ T6609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 131.030458][ T6609] Call Trace: [ 131.030465][ T6609] [ 131.030473][ T6609] dump_stack_lvl+0xe8/0x150 [ 131.030498][ T6609] should_fail_ex+0x412/0x560 [ 131.030525][ T6609] ? __d_alloc+0x37/0x6f0 [ 131.030549][ T6609] should_failslab+0xa8/0x100 [ 131.030578][ T6609] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 131.030605][ T6609] ? add_lock_to_list+0xc7/0x100 [ 131.030631][ T6609] __d_alloc+0x37/0x6f0 [ 131.030660][ T6609] d_alloc_parallel+0xe6/0x1610 [ 131.030687][ T6609] ? __d_lookup+0x66/0x780 [ 131.030715][ T6609] ? __d_lookup+0x66/0x780 [ 131.030753][ T6609] ? __d_lookup+0x66/0x780 [ 131.030782][ T6609] ? __pfx_d_alloc_parallel+0x10/0x10 [ 131.030807][ T6609] ? d_lookup+0x1f/0xa0 [ 131.030833][ T6609] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 131.030865][ T6609] path_openat+0xca8/0x3860 [ 131.030903][ T6609] ? __pfx_stack_trace_save+0x10/0x10 [ 131.030945][ T6609] ? __pfx_path_openat+0x10/0x10 [ 131.030968][ T6609] ? __ia32_compat_sys_openat+0x131/0x160 [ 131.031009][ T6609] do_file_open+0x23e/0x4a0 [ 131.031039][ T6609] ? __pfx_do_file_open+0x10/0x10 [ 131.031084][ T6609] ? _raw_spin_unlock+0x28/0x50 [ 131.031109][ T6609] ? alloc_fd+0x64b/0x6c0 [ 131.031140][ T6609] do_sys_openat2+0x113/0x200 [ 131.031161][ T6609] ? __fget_files+0x3a0/0x420 [ 131.031187][ T6609] ? __pfx_do_sys_openat2+0x10/0x10 [ 131.031211][ T6609] ? fput+0xa0/0xd0 [ 131.031231][ T6609] ? ksys_write+0x242/0x270 [ 131.031260][ T6609] __ia32_compat_sys_openat+0x131/0x160 [ 131.031287][ T6609] __do_fast_syscall_32+0x229/0x6e0 [ 131.031307][ T6609] ? do_fast_syscall_32+0x33/0x70 [ 131.031324][ T6609] ? lockdep_hardirqs_on+0x7a/0x110 [ 131.031341][ T6609] ? asm_int80_emulation+0x1a/0x20 [ 131.031357][ T6609] ? do_int80_emulation+0x286/0x530 [ 131.031375][ T6609] ? trace_irq_disable+0x3b/0x140 [ 131.031404][ T6609] do_fast_syscall_32+0x33/0x70 [ 131.031423][ T6609] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 131.031444][ T6609] RIP: 0023:0xf708f01c [ 131.031460][ T6609] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 131.031474][ T6609] RSP: 002b:00000000f543b50c EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 131.031492][ T6609] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000800013c0 [ 131.031505][ T6609] RDX: 0000000000060a41 RSI: 00000000d7a15f29 RDI: 0000000000000000 [ 131.031515][ T6609] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 131.031525][ T6609] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 131.031535][ T6609] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 131.031562][ T6609] [ 131.399748][ T6612] fuse: Unknown parameter '0x000000000000000b' [ 131.505849][ T6613] fuse: Bad value for 'source' [ 132.371853][ T6635] fuse: Unknown parameter '0x000000000000000b' [ 132.686822][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.693357][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.054122][ T6640] input: syz1 as /devices/virtual/input/input14 [ 133.171537][ T6642] netlink: 28 bytes leftover after parsing attributes in process `syz.3.288'. [ 133.432597][ T6648] netlink: 28 bytes leftover after parsing attributes in process `syz.2.289'. [ 133.615173][ T5740] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 133.657403][ T6650] ptrace attach of "ci-upstream-kasan-gce-386/syz-executor exec"[6651] was attempted by "ci-upstream-kasan-gce-386/syz-executor exec"[6650] [ 133.924941][ T5740] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 133.944872][ T5740] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.969220][ T5740] usb 5-1: Product: syz [ 133.985362][ T5740] usb 5-1: Manufacturer: syz [ 133.999884][ T5740] usb 5-1: SerialNumber: syz [ 134.029781][ T5740] usb 5-1: config 0 descriptor?? [ 134.085675][ T6659] netlink: 92 bytes leftover after parsing attributes in process `syz.3.294'. [ 134.253555][ T29] audit: type=1326 audit(1779700299.583:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6658 comm="syz.3.294" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f5301c code=0x7fc00000 [ 134.315633][ T29] audit: type=1326 audit(1779700299.633:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6658 comm="syz.3.294" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f5301c code=0x7fc00000 [ 134.401874][ T5740] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 134.527415][ T6666] FAULT_INJECTION: forcing a failure. [ 134.527415][ T6666] name failslab, interval 1, probability 0, space 0, times 0 [ 134.552354][ T6666] CPU: 0 UID: 0 PID: 6666 Comm: syz.2.296 Not tainted syzkaller #0 PREEMPT(full) [ 134.552378][ T6666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 134.552387][ T6666] Call Trace: [ 134.552393][ T6666] [ 134.552400][ T6666] dump_stack_lvl+0xe8/0x150 [ 134.552427][ T6666] should_fail_ex+0x412/0x560 [ 134.552455][ T6666] should_failslab+0xa8/0x100 [ 134.552484][ T6666] __kmalloc_noprof+0xe8/0x760 [ 134.552509][ T6666] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 134.552541][ T6666] tomoyo_realpath_from_path+0xe3/0x5d0 [ 134.552568][ T6666] ? tomoyo_domain+0xd7/0x130 [ 134.552598][ T6666] ? tomoyo_path_number_perm+0x219/0x630 [ 134.552619][ T6666] tomoyo_path_number_perm+0x246/0x630 [ 134.552644][ T6666] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 134.552665][ T6666] ? __lock_acquire+0x6b5/0x2cf0 [ 134.552713][ T6666] ? __fget_files+0x2a/0x420 [ 134.552749][ T6666] ? __fget_files+0x3a0/0x420 [ 134.552770][ T6666] ? __fget_files+0x2a/0x420 [ 134.552796][ T6666] security_file_ioctl_compat+0xc3/0x2a0 [ 134.552820][ T6666] __ia32_compat_sys_ioctl+0x139/0x950 [ 134.552851][ T6666] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 134.552883][ T6666] ? __fget_files+0x3a0/0x420 [ 134.552911][ T6666] ? fput+0xa0/0xd0 [ 134.552932][ T6666] ? ksys_write+0x242/0x270 [ 134.552969][ T6666] __do_fast_syscall_32+0x229/0x6e0 [ 134.552989][ T6666] ? do_fast_syscall_32+0x33/0x70 [ 134.553007][ T6666] ? lockdep_hardirqs_on+0x7a/0x110 [ 134.553024][ T6666] ? asm_int80_emulation+0x1a/0x20 [ 134.553041][ T6666] ? do_int80_emulation+0x286/0x530 [ 134.553059][ T6666] ? trace_irq_disable+0x3b/0x140 [ 134.553089][ T6666] do_fast_syscall_32+0x33/0x70 [ 134.553109][ T6666] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 134.553130][ T6666] RIP: 0023:0xf708f01c [ 134.553147][ T6666] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 134.553162][ T6666] RSP: 002b:00000000f547d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 134.553202][ T6666] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000004020aea5 [ 134.553215][ T6666] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 134.553225][ T6666] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 134.553236][ T6666] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 134.553246][ T6666] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 134.553271][ T6666] [ 134.553279][ T6666] ERROR: Out of memory at tomoyo_realpath_from_path. [ 135.064839][ T10] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 135.216721][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 135.229735][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 135.245393][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 135.272796][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 135.282114][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.290647][ T10] usb 4-1: Product: syz [ 135.298489][ T10] usb 4-1: Manufacturer: syz [ 135.303124][ T10] usb 4-1: SerialNumber: syz [ 135.313561][ T10] usb 4-1: config 0 descriptor?? [ 135.323270][ T6670] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 135.435882][ T6681] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 135.548466][ T6670] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 136.886169][ T5740] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 136.903684][ T5740] usb 5-1: USB disconnect, device number 15 [ 137.270217][ T6696] x_tables: ip6_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 137.524506][ T10] usb 4-1: USB disconnect, device number 20 [ 138.471406][ T6714] netlink: 3758 bytes leftover after parsing attributes in process `syz.1.307'. [ 138.524884][ T10] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 138.835828][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 138.884311][ T10] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.985684][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 139.108477][ T10] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 139.183530][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.220605][ T6714] netlink: 'syz.1.307': attribute type 29 has an invalid length. [ 139.268099][ T10] usb 4-1: config 0 descriptor?? [ 139.385821][ T6720] netlink: 'syz.2.310': attribute type 21 has an invalid length. [ 139.827224][ T10] nzxt-smart2 0003:1E71:2009.0005: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 140.321805][ T6729] bridge0: port 3(syz_tun) entered blocking state [ 140.351012][ T6729] bridge0: port 3(syz_tun) entered disabled state [ 140.428178][ T6729] syz_tun: entered allmulticast mode [ 140.477362][ T6729] syz_tun: entered promiscuous mode [ 140.498220][ T6729] bridge0: port 3(syz_tun) entered blocking state [ 140.505720][ T6729] bridge0: port 3(syz_tun) entered forwarding state [ 140.887213][ T6704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.028713][ T10] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 141.046003][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 141.053906][ T6704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.206618][ T10] usb 5-1: device descriptor read/64, error -32 [ 141.465200][ T10] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 141.624881][ T10] usb 5-1: device descriptor read/64, error -71 [ 141.650062][ T6747] netlink: 12 bytes leftover after parsing attributes in process `syz.2.318'. [ 141.779438][ T10] usb usb5-port1: attempt power cycle [ 142.128106][ T10] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 142.188508][ T6747] netlink: 12 bytes leftover after parsing attributes in process `syz.2.318'. [ 142.200071][ T10] usb 5-1: device descriptor read/8, error -71 [ 142.245113][ T5740] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 142.356546][ T808] usb 4-1: USB disconnect, device number 21 [ 142.454965][ T10] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 142.485457][ T10] usb 5-1: device descriptor read/8, error -71 [ 142.582616][ T6755] FAULT_INJECTION: forcing a failure. [ 142.582616][ T6755] name failslab, interval 1, probability 0, space 0, times 0 [ 142.606599][ T10] usb usb5-port1: unable to enumerate USB device [ 142.622199][ T6755] CPU: 0 UID: 0 PID: 6755 Comm: syz.0.320 Tainted: G L syzkaller #0 PREEMPT(full) [ 142.622227][ T6755] Tainted: [L]=SOFTLOCKUP [ 142.622233][ T6755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 142.622243][ T6755] Call Trace: [ 142.622250][ T6755] [ 142.622258][ T6755] dump_stack_lvl+0xe8/0x150 [ 142.622283][ T6755] should_fail_ex+0x412/0x560 [ 142.622313][ T6755] should_failslab+0xa8/0x100 [ 142.622343][ T6755] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 142.622369][ T6755] ? __alloc_skb+0x186/0x7d0 [ 142.622393][ T6755] ? __alloc_skb+0x1d0/0x7d0 [ 142.622415][ T6755] ? __local_bh_enable_ip+0xd0/0x130 [ 142.622438][ T6755] __alloc_skb+0x1d0/0x7d0 [ 142.622472][ T6755] netlink_sendmsg+0x5d4/0xb40 [ 142.622496][ T6755] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.622527][ T6755] ? aa_sock_msg_perm+0xf1/0x1b0 [ 142.622554][ T6755] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 142.622583][ T6755] ____sys_sendmsg+0x972/0x9f0 [ 142.622607][ T6755] ? __pfx_____sys_sendmsg+0x10/0x10 [ 142.622640][ T6755] ? kstrtoull+0x12f/0x1d0 [ 142.622669][ T6755] ___sys_sendmsg+0x2a5/0x360 [ 142.622686][ T6755] ? __lock_acquire+0x6b5/0x2cf0 [ 142.622709][ T6755] ? __pfx____sys_sendmsg+0x10/0x10 [ 142.622728][ T6755] ? get_pid_task+0x20/0x1f0 [ 142.622757][ T6755] ? get_pid_task+0x20/0x1f0 [ 142.622777][ T6755] ? get_pid_task+0x20/0x1f0 [ 142.622820][ T6755] ? __fget_files+0x2a/0x420 [ 142.622840][ T6755] ? __fget_files+0x3a0/0x420 [ 142.622869][ T6755] __sys_sendmsg+0x183/0x260 [ 142.622888][ T6755] ? __pfx___sys_sendmsg+0x10/0x10 [ 142.622924][ T6755] __do_fast_syscall_32+0x229/0x6e0 [ 142.622944][ T6755] ? do_fast_syscall_32+0x33/0x70 [ 142.622961][ T6755] ? lockdep_hardirqs_on+0x7a/0x110 [ 142.622977][ T6755] ? asm_int80_emulation+0x1a/0x20 [ 142.622992][ T6755] ? do_int80_emulation+0x286/0x530 [ 142.623009][ T6755] ? trace_irq_disable+0x3b/0x140 [ 142.623037][ T6755] do_fast_syscall_32+0x33/0x70 [ 142.623056][ T6755] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 142.623076][ T6755] RIP: 0023:0xf7fb901c [ 142.623092][ T6755] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 142.623107][ T6755] RSP: 002b:00000000f547650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 142.623125][ T6755] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000080000200 [ 142.623136][ T6755] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 142.623147][ T6755] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 142.623157][ T6755] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 142.623168][ T6755] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 142.623193][ T6755] [ 142.922983][ T6747] netlink: 12 bytes leftover after parsing attributes in process `syz.2.318'. [ 143.013500][ T6764] Invalid logical block size (8704) [ 143.365171][ T5705] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 143.526544][ T5705] usb 1-1: config 2 has an invalid interface number: 174 but max is 0 [ 143.545208][ T5705] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 143.555652][ T5705] usb 1-1: config 2 has no interface number 0 [ 143.561869][ T5705] usb 1-1: config 2 interface 174 altsetting 0 has an endpoint descriptor with address 0x9E, changing to 0x8E [ 143.575463][ T5705] usb 1-1: config 2 interface 174 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 143.589376][ T5705] usb 1-1: config 2 interface 174 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 143.610095][ T5705] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 143.621514][ T5705] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.634804][ T5705] usb 1-1: Product: syz [ 143.639008][ T5705] usb 1-1: Manufacturer: syz [ 143.643788][ T5705] usb 1-1: SerialNumber: syz [ 143.774700][ T6773] netlink: 292 bytes leftover after parsing attributes in process `syz.3.325'. [ 143.794577][ T6773] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 143.876033][ T5705] usb 1-1: probing VID:PID(0424:012C) [ 143.895091][ T5705] usb 1-1: vub300 testing UNKNOWN EndPoint(0) 8E [ 143.913015][ T5705] usb 1-1: vub300 ignoring EndPoint(0) 8E [ 143.922084][ T5705] usb 1-1: Could not find two sets of bulk-in/out endpoint pairs [ 143.942196][ T5705] vub300 1-1:2.174: probe with driver vub300 failed with error -22 [ 143.958277][ T5705] usb 1-1: USB disconnect, device number 17 [ 144.214841][ T10] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 144.368941][ T10] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 144.380500][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.389235][ T10] usb 4-1: Product: syz [ 144.393532][ T10] usb 4-1: Manufacturer: syz [ 144.398658][ T10] usb 4-1: SerialNumber: syz [ 144.638050][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 144.653893][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 144.739436][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 144.752347][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 144.792014][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 144.839660][ T10] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 144.883649][ T10] usb 4-1: USB disconnect, device number 22 [ 145.306258][ T5740] usb 3-1: device descriptor read/64, error -71 [ 145.544838][ T5740] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 145.708919][ T5740] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 145.727830][ T5740] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.744895][ T5740] usb 3-1: Product: syz [ 145.754969][ T5740] usb 3-1: Manufacturer: syz [ 145.764867][ T5740] usb 3-1: SerialNumber: syz [ 146.195374][ T6796] netlink: 'syz.0.334': attribute type 4 has an invalid length. [ 146.203966][ T5740] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 146.217381][ T5740] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 146.614826][ T5705] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 146.774900][ T5705] usb 1-1: Using ep0 maxpacket: 16 [ 146.782185][ T5705] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 146.806874][ T5705] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 146.820297][ T5705] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.828719][ T5705] usb 1-1: Product: syz [ 146.832913][ T5705] usb 1-1: Manufacturer: syz [ 146.840334][ T5705] usb 1-1: SerialNumber: syz [ 146.849668][ T5705] usb 1-1: config 0 descriptor?? [ 146.857878][ T5705] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 146.867267][ T5705] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 147.350171][ T6811] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 147.356941][ T6811] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 147.368830][ T6811] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 147.377623][ T6811] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 147.383674][ T6811] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 147.392926][ T6811] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 147.401675][ T6811] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 147.408923][ T6811] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 147.416905][ T6811] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 147.424059][ T6811] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 147.430629][ T6811] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 147.439291][ T6811] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 147.447234][ T6811] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 147.453211][ T6811] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 147.462766][ T6811] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 147.469191][ T5705] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 147.883717][ T6826] syzkaller0: entered promiscuous mode [ 147.889590][ T6826] syzkaller0: entered allmulticast mode [ 147.899305][ T6826] netlink: 'syz.3.345': attribute type 21 has an invalid length. [ 147.907480][ T6826] netlink: 156 bytes leftover after parsing attributes in process `syz.3.345'. [ 148.124167][ T5705] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 148.139461][ T5705] em28xx 1-1:0.0: board has no eeprom [ 148.205076][ T5705] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 148.215997][ T5705] em28xx 1-1:0.0: dvb set to bulk mode. [ 148.223340][ T5738] em28xx 1-1:0.0: Binding DVB extension [ 148.241074][ T5705] usb 1-1: USB disconnect, device number 18 [ 148.257073][ T5705] em28xx 1-1:0.0: Disconnecting em28xx [ 148.330616][ T5738] em28xx 1-1:0.0: Registering input extension [ 148.342894][ T5705] em28xx 1-1:0.0: Closing input extension [ 148.351056][ T6835] FAULT_INJECTION: forcing a failure. [ 148.351056][ T6835] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 148.404504][ T6835] CPU: 1 UID: 0 PID: 6835 Comm: syz.3.347 Tainted: G L syzkaller #0 PREEMPT(full) [ 148.404535][ T6835] Tainted: [L]=SOFTLOCKUP [ 148.404542][ T6835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 148.404552][ T6835] Call Trace: [ 148.404558][ T6835] [ 148.404565][ T6835] dump_stack_lvl+0xe8/0x150 [ 148.404592][ T6835] should_fail_ex+0x412/0x560 [ 148.404621][ T6835] prepare_alloc_pages+0x22a/0x650 [ 148.404654][ T6835] __alloc_frozen_pages_noprof+0x12f/0x380 [ 148.404673][ T6835] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 148.404691][ T6835] ? __pfx_policy_nodemask+0x10/0x10 [ 148.404706][ T6835] ? __folio_batch_add_and_move+0x11a/0xc50 [ 148.404720][ T6835] ? lock_acquire+0x106/0x350 [ 148.404738][ T6835] alloc_pages_mpol+0x235/0x490 [ 148.404758][ T6835] folio_alloc_mpol_noprof+0x39/0x160 [ 148.404788][ T6835] vma_alloc_folio_noprof+0xe1/0x1e0 [ 148.404807][ T6835] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 148.404833][ T6835] do_wp_page+0x118a/0x4cc0 [ 148.404861][ T6835] ? __pte_offset_map+0x29/0x240 [ 148.404881][ T6835] ? __pfx_do_wp_page+0x10/0x10 [ 148.404891][ T6835] ? do_raw_spin_lock+0x12b/0x2f0 [ 148.404907][ T6835] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 148.404926][ T6835] handle_mm_fault+0x151f/0x3170 [ 148.404946][ T6835] ? handle_mm_fault+0xee/0x3170 [ 148.404961][ T6835] ? __pfx_handle_mm_fault+0x10/0x10 [ 148.404974][ T6835] ? follow_page_pte+0xbb7/0xe50 [ 148.404990][ T6835] ? __pfx_follow_page_pte+0x10/0x10 [ 148.405010][ T6835] __get_user_pages+0x1683/0x2720 [ 148.405038][ T6835] __gup_longterm_locked+0xdcf/0x1630 [ 148.405056][ T6835] ? sanity_check_pinned_pages+0x7af/0x870 [ 148.405072][ T6835] gup_fast_fallback+0x1d84/0x20d0 [ 148.405099][ T6835] ? __pfx_gup_fast_fallback+0x10/0x10 [ 148.405109][ T6835] ? ____sys_recvmsg+0x1e6/0x4a0 [ 148.405119][ T6835] ? __sys_recvmsg+0x180/0x250 [ 148.405128][ T6835] ? __do_fast_syscall_32+0x229/0x6e0 [ 148.405139][ T6835] ? do_fast_syscall_32+0x33/0x70 [ 148.405152][ T6835] ? pin_user_pages_fast+0x4d/0xb0 [ 148.405165][ T6835] iov_iter_extract_pages+0x37b/0x5f0 [ 148.405186][ T6835] extract_iter_to_sg+0xefb/0x25d0 [ 148.405207][ T6835] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 148.405219][ T6835] ? rcu_is_watching+0x15/0xb0 [ 148.405232][ T6835] ? trace_kmalloc+0x2a/0xf0 [ 148.405256][ T6835] ? __kmalloc_noprof+0x1b8/0x760 [ 148.405272][ T6835] ? __asan_memset+0x22/0x50 [ 148.405286][ T6835] af_alg_get_rsgl+0x4b6/0x8e0 [ 148.405310][ T6835] skcipher_recvmsg+0x392/0x1140 [ 148.405334][ T6835] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 148.405349][ T6835] ? aa_sock_msg_perm+0xf1/0x1b0 [ 148.405365][ T6835] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 148.405379][ T6835] ? security_socket_recvmsg+0x7e/0x2c0 [ 148.405389][ T6835] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 148.405404][ T6835] sock_recvmsg+0x172/0x1b0 [ 148.405418][ T6835] ____sys_recvmsg+0x1e6/0x4a0 [ 148.405433][ T6835] ? __pfx_____sys_recvmsg+0x10/0x10 [ 148.405441][ T6835] ? get_compat_msghdr+0x34b/0x4c0 [ 148.405458][ T6835] ? __lock_acquire+0x6b5/0x2cf0 [ 148.405472][ T6835] ___sys_recvmsg+0x215/0x590 [ 148.405482][ T6835] ? get_pid_task+0x20/0x1f0 [ 148.405497][ T6835] ? __pfx____sys_recvmsg+0x10/0x10 [ 148.405509][ T6835] ? __fget_files+0x2a/0x420 [ 148.405531][ T6835] ? __fget_files+0x3a0/0x420 [ 148.405548][ T6835] __sys_recvmsg+0x180/0x250 [ 148.405559][ T6835] ? __pfx___sys_recvmsg+0x10/0x10 [ 148.405580][ T6835] __do_fast_syscall_32+0x229/0x6e0 [ 148.405590][ T6835] ? do_fast_syscall_32+0x33/0x70 [ 148.405600][ T6835] ? lockdep_hardirqs_on+0x7a/0x110 [ 148.405610][ T6835] ? asm_int80_emulation+0x1a/0x20 [ 148.405619][ T6835] ? do_int80_emulation+0x286/0x530 [ 148.405632][ T6835] do_fast_syscall_32+0x33/0x70 [ 148.405642][ T6835] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 148.405655][ T6835] RIP: 0023:0xf7f5301c [ 148.405665][ T6835] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 148.405673][ T6835] RSP: 002b:00000000f541650c EFLAGS: 00000206 ORIG_RAX: 0000000000000174 [ 148.405685][ T6835] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800005c0 [ 148.405692][ T6835] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 148.405698][ T6835] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 148.405703][ T6835] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 148.405709][ T6835] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 148.405723][ T6835] [ 148.845137][ T5705] em28xx 1-1:0.0: Freeing device [ 148.944425][ T5632] Bluetooth: hci1: command 0x0c1a tx timeout [ 149.047549][ T29] audit: type=1326 audit(1779700314.383:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6823 comm="syz.1.344" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f4901c code=0x7ffc0000 [ 149.073924][ T5740] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -EPROTO [ 149.086485][ T5740] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 149.096062][ T5740] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 149.109088][ T6831] pim6reg: entered allmulticast mode [ 149.119553][ T29] audit: type=1326 audit(1779700314.383:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6823 comm="syz.1.344" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f4901c code=0x7ffc0000 [ 149.143902][ T29] audit: type=1326 audit(1779700314.383:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6823 comm="syz.1.344" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f4901c code=0x7ffc0000 [ 149.168661][ T29] audit: type=1326 audit(1779700314.383:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6823 comm="syz.1.344" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f4901c code=0x7ffc0000 [ 149.193105][ T29] audit: type=1326 audit(1779700314.383:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6823 comm="syz.1.344" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f4901c code=0x7ffc0000 [ 149.217720][ T29] audit: type=1326 audit(1779700314.383:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6823 comm="syz.1.344" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f4901c code=0x7ffc0000 [ 149.241927][ T29] audit: type=1326 audit(1779700314.413:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6823 comm="syz.1.344" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f4901c code=0x7ffc0000 [ 149.267199][ T29] audit: type=1326 audit(1779700314.413:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6823 comm="syz.1.344" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=14 compat=1 ip=0xf7f4901c code=0x7ffc0000 [ 149.291523][ T29] audit: type=1326 audit(1779700314.413:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6823 comm="syz.1.344" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f4901c code=0x7ffc0000 [ 149.317710][ T5740] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 149.327022][ T29] audit: type=1326 audit(1779700314.413:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6823 comm="syz.1.344" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f4901c code=0x7ffc0000 [ 149.359802][ T5740] usb 3-1: USB disconnect, device number 15 [ 149.406544][ T5632] Bluetooth: hci2: command 0x0c1a tx timeout [ 149.412964][ T5632] Bluetooth: hci0: command 0x0c1a tx timeout [ 149.433627][ T6842] netlink: 4 bytes leftover after parsing attributes in process `syz.2.350'. [ 149.485794][ T5632] Bluetooth: hci4: command 0x0c1a tx timeout [ 149.490495][ T6842] netlink: 173 bytes leftover after parsing attributes in process `syz.2.350'. [ 149.491845][ T4945] Bluetooth: hci3: command 0x0c1a tx timeout [ 149.760948][ T6856] input: syz1 as /devices/virtual/input/input17 [ 149.844939][ T5740] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 149.874848][ T24] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 150.014818][ T5740] usb 1-1: Using ep0 maxpacket: 8 [ 150.024884][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 150.034441][ T5740] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 150.046814][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 150.056862][ T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 150.071798][ T5740] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 150.090921][ T24] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 150.100503][ T24] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 150.113100][ T24] usb 4-1: Product: syz [ 150.119492][ T5740] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 150.134414][ T24] usb 4-1: Manufacturer: syz [ 150.143688][ T24] usb 4-1: SerialNumber: syz [ 150.152890][ T5740] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 150.169706][ T24] usb 4-1: config 0 descriptor?? [ 150.197830][ T5740] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 150.228976][ T5740] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 150.255385][ T5740] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 150.284711][ T5740] usb 1-1: config 168 interface 0 has no altsetting 0 [ 150.301853][ T5740] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 150.321884][ T5740] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 150.347893][ T5740] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 150.368121][ T5740] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 150.400555][ T5740] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 150.428956][ T5740] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 150.459900][ T5740] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 150.489954][ T5740] usb 1-1: config 168 interface 0 has no altsetting 0 [ 150.506139][ T5740] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 150.524845][ T5740] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 150.551237][ T5740] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 150.578591][ T5740] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 150.602821][ T5740] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 150.630656][ T5740] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 150.655745][ T5740] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 150.684150][ T5740] usb 1-1: config 168 interface 0 has no altsetting 0 [ 150.703036][ T5740] usb 1-1: string descriptor 0 read error: -22 [ 150.709938][ T5740] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 150.729418][ T5740] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.764652][ T5740] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 150.897093][ T5729] usb 4-1: USB disconnect, device number 23 [ 151.004914][ T4945] Bluetooth: hci1: command 0x0c1a tx timeout [ 151.064450][ T10] usb 1-1: USB disconnect, device number 19 [ 151.178554][ T6866] loop2: detected capacity change from 0 to 7 [ 151.203886][ T6866] Dev loop2: unable to read RDB block 7 [ 151.210162][ T6866] loop2: unable to read partition table [ 151.216665][ T6866] loop2: partition table beyond EOD, truncated [ 151.230017][ T6866] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 151.381387][ T6873] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 151.393580][ T6874] loop5: detected capacity change from 0 to 7 [ 151.411511][ T6874] Dev loop5: unable to read RDB block 7 [ 151.419619][ T6874] loop5: AHDI p1 p3 p4 [ 151.423823][ T6874] loop5: partition table partially beyond EOD, truncated [ 151.432820][ T6874] loop5: p1 size 100663296 extends beyond EOD, truncated [ 151.443907][ T6874] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 151.495398][ T4945] Bluetooth: hci0: command 0x0c1a tx timeout [ 151.502189][ T5632] Bluetooth: hci2: command 0x0c1a tx timeout [ 151.564846][ T4945] Bluetooth: hci3: command 0x0c1a tx timeout [ 151.570926][ T5632] Bluetooth: hci4: command 0x0c1a tx timeout [ 152.324842][ T10] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 152.364856][ T5740] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 152.477305][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.490487][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 152.503856][ T10] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 152.516532][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 152.531790][ T10] usb 1-1: SerialNumber: syz [ 152.546088][ T5740] usb 5-1: Using ep0 maxpacket: 32 [ 152.557480][ T5740] usb 5-1: unable to get BOS descriptor or descriptor too short [ 152.573755][ T5740] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7 [ 152.597499][ T5740] usb 5-1: string descriptor 0 read error: -22 [ 152.606978][ T5740] usb 5-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 152.626872][ T5740] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.854669][ T6902] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(14) [ 152.861436][ T6902] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 152.893719][ T6902] vhci_hcd vhci_hcd.0: Device attached [ 152.903971][ T6906] vhci_hcd vhci_hcd.0: port 0 already used [ 152.905184][ T6907] xt_CT: You must specify a L4 protocol and not use inversions on it [ 152.937341][ T6903] vhci_hcd: connection closed [ 152.949611][ T75] vhci_hcd vhci_hcd.0: stop threads [ 152.972705][ T75] vhci_hcd vhci_hcd.0: release socket [ 152.987519][ T75] vhci_hcd vhci_hcd.0: disconnect device [ 153.095326][ T4945] Bluetooth: hci1: command 0x0c1a tx timeout [ 153.179334][ T5740] usb 5-1: 1:1: invalid format type 0x1001 is detected, processed as PCM [ 153.195099][ T5740] usb 5-1: 1:1 : unsupported sample bitwidth 0 in 7 bytes [ 153.204152][ T5740] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 153.288592][ T10] usb 1-1: 0:2 : does not exist [ 153.316512][ T5740] usb 5-1: USB disconnect, device number 20 [ 153.433301][ T10] usb 1-1: USB disconnect, device number 20 [ 153.565788][ T5632] Bluetooth: hci2: command 0x0c1a tx timeout [ 153.571946][ T4945] Bluetooth: hci0: command 0x0c1a tx timeout [ 153.644863][ T5632] Bluetooth: hci4: command 0x0c1a tx timeout [ 153.650987][ T4945] Bluetooth: hci3: command 0x0c1a tx timeout [ 153.825320][ T6922] syzkaller0: entered promiscuous mode [ 153.834025][ T6922] syzkaller0: entered allmulticast mode [ 153.911845][ T6926] netlink: 'syz.3.379': attribute type 1 has an invalid length. [ 153.949690][ T6926] 8021q: adding VLAN 0 to HW filter on device bond1 [ 154.146006][ T6926] bond1: (slave veth3): Enslaving as an active interface with a down link [ 154.175439][ T6928] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 154.232573][ T6928] bond1: (slave batadv1): making interface the new active one [ 154.246240][ T6928] batadv1: entered promiscuous mode [ 154.252504][ T6928] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 154.293149][ T6926] bond1 (unregistering): (slave veth3): Releasing active interface [ 154.332148][ T6926] bond1 (unregistering): (slave batadv1): Releasing active interface [ 154.357305][ T6926] bond1 (unregistering): Released all slaves [ 154.399736][ T6932] input: syz1 as /devices/virtual/input/input18 [ 154.689689][ T6935] wg2: entered allmulticast mode [ 155.377746][ T6947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.386'. [ 155.498407][ T6949] input: syz1 as /devices/virtual/input/input19 [ 156.358011][ T6964] netlink: 'syz.0.391': attribute type 4 has an invalid length. [ 156.366797][ T6964] netlink: 17 bytes leftover after parsing attributes in process `syz.0.391'. [ 156.696755][ T5705] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 156.854851][ T5705] usb 1-1: Using ep0 maxpacket: 32 [ 156.862155][ T5705] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 156.871547][ T5705] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.888549][ T5705] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 157.285792][ T5705] gspca_nw80x: reg_w err -71 [ 157.295216][ T5705] nw80x 1-1:3.0: probe with driver nw80x failed with error -71 [ 157.306232][ T5705] usb 1-1: USB disconnect, device number 21 [ 157.492926][ T6985] binder_alloc: 6984: pid 6984 spamming oneway? 1 buffers allocated for a total size of 4096 [ 157.507738][ T6985] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 157.699780][ T6990] netlink: 16 bytes leftover after parsing attributes in process `syz.1.400'. [ 157.783071][ T6987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.796787][ T6987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.844912][ T5729] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 157.935333][ T6993] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 158.217949][ T6999] FAULT_INJECTION: forcing a failure. [ 158.217949][ T6999] name failslab, interval 1, probability 0, space 0, times 0 [ 158.249200][ T6999] CPU: 1 UID: 0 PID: 6999 Comm: syz.1.402 Tainted: G L syzkaller #0 PREEMPT(full) [ 158.249230][ T6999] Tainted: [L]=SOFTLOCKUP [ 158.249237][ T6999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 158.249248][ T6999] Call Trace: [ 158.249255][ T6999] [ 158.249263][ T6999] dump_stack_lvl+0xe8/0x150 [ 158.249289][ T6999] should_fail_ex+0x412/0x560 [ 158.249320][ T6999] should_failslab+0xa8/0x100 [ 158.249354][ T6999] __kmalloc_noprof+0xe8/0x760 [ 158.249376][ T6999] ? tomoyo_encode+0x28b/0x550 [ 158.249394][ T6999] tomoyo_encode+0x28b/0x550 [ 158.249411][ T6999] tomoyo_realpath_from_path+0x58d/0x5d0 [ 158.249440][ T6999] tomoyo_check_open_permission+0x229/0x470 [ 158.249465][ T6999] ? tomoyo_check_open_permission+0x1d3/0x470 [ 158.249487][ T6999] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 158.249536][ T6999] security_file_open+0xa9/0x240 [ 158.249549][ T6999] do_dentry_open+0x384/0x14e0 [ 158.249564][ T6999] ? vfs_open+0x31/0x340 [ 158.249578][ T6999] vfs_open+0x3b/0x340 [ 158.249594][ T6999] ? path_openat+0x2df0/0x3860 [ 158.249622][ T6999] path_openat+0x2e08/0x3860 [ 158.249658][ T6999] ? __pfx_stack_trace_save+0x10/0x10 [ 158.249690][ T6999] ? stack_depot_save_flags+0x33/0x810 [ 158.249724][ T6999] ? __pfx_path_openat+0x10/0x10 [ 158.249741][ T6999] ? __ia32_compat_sys_openat+0x131/0x160 [ 158.249767][ T6999] ? __lock_acquire+0x6b5/0x2cf0 [ 158.249798][ T6999] do_file_open+0x23e/0x4a0 [ 158.249830][ T6999] ? __pfx_do_file_open+0x10/0x10 [ 158.249858][ T6999] ? _raw_spin_unlock+0x28/0x50 [ 158.249872][ T6999] ? alloc_fd+0x64b/0x6c0 [ 158.249889][ T6999] do_sys_openat2+0x113/0x200 [ 158.249908][ T6999] ? __pfx_do_sys_openat2+0x10/0x10 [ 158.249930][ T6999] ? exc_page_fault+0x6a/0xc0 [ 158.249951][ T6999] ? do_user_addr_fault+0xc6f/0x1340 [ 158.249975][ T6999] __ia32_compat_sys_openat+0x131/0x160 [ 158.249999][ T6999] do_int80_emulation+0x181/0x530 [ 158.250010][ T6999] ? trace_irq_disable+0x3b/0x140 [ 158.250024][ T6999] ? asm_int80_emulation+0x1a/0x20 [ 158.250035][ T6999] ? clear_bhb_loop+0x40/0x90 [ 158.250044][ T6999] ? clear_bhb_loop+0x40/0x90 [ 158.250061][ T6999] asm_int80_emulation+0x1a/0x20 [ 158.250079][ T6999] RIP: 0023:0xf71461ab [ 158.250096][ T6999] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 158.250112][ T6999] RSP: 002b:00000000f540438c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 158.250132][ T6999] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f721030d [ 158.250144][ T6999] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 158.250150][ T6999] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 158.250155][ T6999] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 158.250161][ T6999] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 158.250175][ T6999] [ 158.252285][ T6999] ERROR: Out of memory at tomoyo_realpath_from_path. [ 158.720664][ T7005] batadv_slave_1: entered promiscuous mode [ 158.734424][ T7005] batadv_slave_1: left promiscuous mode [ 159.074867][ T5705] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 159.224917][ T5705] usb 4-1: Using ep0 maxpacket: 32 [ 159.236696][ T5705] usb 4-1: config index 0 descriptor too short (expected 22528, got 36) [ 159.249579][ T5705] usb 4-1: config 186 has too many interfaces: 34, using maximum allowed: 32 [ 159.262299][ T5705] usb 4-1: config 186 has an invalid descriptor of length 0, skipping remainder of the config [ 159.274883][ T5705] usb 4-1: config 186 has 0 interfaces, different from the descriptor's value: 34 [ 159.289800][ T5705] usb 4-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 159.299039][ T5705] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.309341][ T5705] usb 4-1: Product: syz [ 159.314367][ T5705] usb 4-1: Manufacturer: syz [ 159.332235][ T5705] usb 4-1: SerialNumber: syz [ 159.377133][ T7023] tipc: Invalid UDP bearer configuration [ 159.377183][ T7023] tipc: Enabling of bearer rejected, failed to enable media [ 159.379896][ T7013] input: syz1 as /devices/virtual/input/input20 [ 159.457224][ T10] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 159.498755][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 159.498770][ T29] audit: type=1326 audit(1779700324.833:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7024 comm="syz.2.412" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708f01c code=0x7ffc0000 [ 159.536140][ T7025] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 159.545084][ T29] audit: type=1326 audit(1779700324.833:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7024 comm="syz.2.412" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708f01c code=0x7ffc0000 [ 159.600184][ T29] audit: type=1326 audit(1779700324.833:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7024 comm="syz.2.412" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=377 compat=1 ip=0xf708f01c code=0x7ffc0000 [ 159.631585][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 159.634955][ T29] audit: type=1326 audit(1779700324.833:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7024 comm="syz.2.412" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708f01c code=0x7ffc0000 [ 159.660989][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 159.689236][ T29] audit: type=1326 audit(1779700324.833:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7024 comm="syz.2.412" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708f01c code=0x7ffc0000 [ 159.689779][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 159.726375][ T10] usb 1-1: Product: syz [ 159.730584][ T10] usb 1-1: Manufacturer: syz [ 159.735421][ T10] usb 1-1: SerialNumber: syz [ 159.740057][ T29] audit: type=1326 audit(1779700324.863:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7024 comm="syz.2.412" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf708f01c code=0x7ffc0000 [ 159.770469][ T29] audit: type=1326 audit(1779700324.863:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7024 comm="syz.2.412" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708f01c code=0x7ffc0000 [ 159.776811][ T5729] usb 4-1: USB disconnect, device number 24 [ 159.802100][ T29] audit: type=1326 audit(1779700324.863:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7024 comm="syz.2.412" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708f01c code=0x7ffc0000 [ 159.837952][ T29] audit: type=1326 audit(1779700324.863:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7024 comm="syz.2.412" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf708f01c code=0x7ffc0000 [ 159.871039][ T29] audit: type=1326 audit(1779700324.863:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7024 comm="syz.2.412" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708f01c code=0x7ffc0000 [ 160.057978][ T10] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 22 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 160.082909][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807a06dc00: rx timeout, send abort [ 160.092751][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807a06dc00: 0x3f000: (3) A timeout occurred and this is the connection abort to close the session. [ 160.363604][ T7037] netlink: 12 bytes leftover after parsing attributes in process `syz.1.415'. [ 160.438857][ T24] usb 1-1: USB disconnect, device number 22 [ 160.450618][ T24] usblp0: removed [ 160.648569][ T7046] netlink: 'syz.0.416': attribute type 3 has an invalid length. [ 160.656398][ T7046] netlink: 8 bytes leftover after parsing attributes in process `syz.0.416'. [ 160.724302][ T24] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 160.833037][ T24] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 161.097959][ T7052] FAULT_INJECTION: forcing a failure. [ 161.097959][ T7052] name failslab, interval 1, probability 0, space 0, times 0 [ 161.184660][ T7052] CPU: 0 UID: 0 PID: 7052 Comm: syz.3.419 Tainted: G L syzkaller #0 PREEMPT(full) [ 161.184691][ T7052] Tainted: [L]=SOFTLOCKUP [ 161.184697][ T7052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 161.184708][ T7052] Call Trace: [ 161.184715][ T7052] [ 161.184727][ T7052] dump_stack_lvl+0xe8/0x150 [ 161.184753][ T7052] should_fail_ex+0x412/0x560 [ 161.184781][ T7052] should_failslab+0xa8/0x100 [ 161.184811][ T7052] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 161.184838][ T7052] ? __alloc_skb+0x1d0/0x7d0 [ 161.184869][ T7052] ? __local_bh_enable_ip+0xd0/0x130 [ 161.184892][ T7052] __alloc_skb+0x1d0/0x7d0 [ 161.184917][ T7052] ? netlink_ack_tlv_len+0x6c/0x210 [ 161.184947][ T7052] netlink_ack+0x146/0xa50 [ 161.184976][ T7052] ? trace_contention_end+0x3d/0x140 [ 161.185012][ T7052] netlink_rcv_skb+0x2b6/0x4b0 [ 161.185040][ T7052] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 161.185064][ T7052] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 161.185106][ T7052] ? netlink_deliver_tap+0x2e/0x1b0 [ 161.185131][ T7052] ? netlink_deliver_tap+0x2e/0x1b0 [ 161.185160][ T7052] xfrm_netlink_rcv+0x79/0x90 [ 161.185182][ T7052] netlink_unicast+0x75c/0x8e0 [ 161.185216][ T7052] netlink_sendmsg+0x813/0xb40 [ 161.185242][ T7052] ? __pfx_netlink_sendmsg+0x10/0x10 [ 161.185272][ T7052] ? aa_sock_msg_perm+0xf1/0x1b0 [ 161.185299][ T7052] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 161.185327][ T7052] ____sys_sendmsg+0x972/0x9f0 [ 161.185353][ T7052] ? __pfx_____sys_sendmsg+0x10/0x10 [ 161.185385][ T7052] ? kstrtoull+0x12f/0x1d0 [ 161.185412][ T7052] ___sys_sendmsg+0x2a5/0x360 [ 161.185429][ T7052] ? __lock_acquire+0x6b5/0x2cf0 [ 161.185452][ T7052] ? __pfx____sys_sendmsg+0x10/0x10 [ 161.185471][ T7052] ? get_pid_task+0x20/0x1f0 [ 161.185494][ T7052] ? get_pid_task+0x20/0x1f0 [ 161.185514][ T7052] ? get_pid_task+0x20/0x1f0 [ 161.185562][ T7052] ? __fget_files+0x2a/0x420 [ 161.185584][ T7052] ? __fget_files+0x3a0/0x420 [ 161.185616][ T7052] __sys_sendmsg+0x183/0x260 [ 161.185636][ T7052] ? __pfx___sys_sendmsg+0x10/0x10 [ 161.185674][ T7052] __do_fast_syscall_32+0x229/0x6e0 [ 161.185695][ T7052] ? do_fast_syscall_32+0x33/0x70 [ 161.185712][ T7052] ? lockdep_hardirqs_on+0x7a/0x110 [ 161.185729][ T7052] ? asm_int80_emulation+0x1a/0x20 [ 161.185747][ T7052] ? do_int80_emulation+0x286/0x530 [ 161.185765][ T7052] ? trace_irq_disable+0x3b/0x140 [ 161.185794][ T7052] do_fast_syscall_32+0x33/0x70 [ 161.185814][ T7052] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 161.185836][ T7052] RIP: 0023:0xf7f5301c [ 161.185852][ T7052] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 161.185876][ T7052] RSP: 002b:00000000f541650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 161.185895][ T7052] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800035c0 [ 161.185907][ T7052] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 161.185918][ T7052] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 161.185928][ T7052] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 161.185938][ T7052] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 161.185965][ T7052] [ 161.887028][ T7057] syzkaller0: entered promiscuous mode [ 161.942431][ T7057] syzkaller0: entered allmulticast mode [ 161.986171][ T7060] netlink: 4 bytes leftover after parsing attributes in process `syz.2.422'. [ 162.862647][ T7085] FAULT_INJECTION: forcing a failure. [ 162.862647][ T7085] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.880958][ T7085] CPU: 1 UID: 0 PID: 7085 Comm: syz.3.430 Tainted: G L syzkaller #0 PREEMPT(full) [ 162.880987][ T7085] Tainted: [L]=SOFTLOCKUP [ 162.880993][ T7085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 162.881003][ T7085] Call Trace: [ 162.881010][ T7085] [ 162.881017][ T7085] dump_stack_lvl+0xe8/0x150 [ 162.881042][ T7085] should_fail_ex+0x412/0x560 [ 162.881073][ T7085] _copy_to_user+0x31/0xb0 [ 162.881103][ T7085] simple_read_from_buffer+0xe1/0x170 [ 162.881131][ T7085] proc_fail_nth_read+0x1bb/0x230 [ 162.881158][ T7085] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 162.881185][ T7085] ? rw_verify_area+0x2a6/0x4d0 [ 162.881210][ T7085] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 162.881235][ T7085] vfs_read+0x20c/0xa70 [ 162.881265][ T7085] ? __pfx___mutex_lock+0x10/0x10 [ 162.881290][ T7085] ? __pfx_vfs_read+0x10/0x10 [ 162.881316][ T7085] ? __fget_files+0x2a/0x420 [ 162.881342][ T7085] ? __fget_files+0x3a0/0x420 [ 162.881363][ T7085] ? __fget_files+0x2a/0x420 [ 162.881393][ T7085] ksys_read+0x150/0x270 [ 162.881420][ T7085] ? __pfx_ksys_read+0x10/0x10 [ 162.881457][ T7085] do_int80_emulation+0x181/0x530 [ 162.881477][ T7085] ? trace_irq_disable+0x3b/0x140 [ 162.881503][ T7085] ? asm_int80_emulation+0x1a/0x20 [ 162.881520][ T7085] ? clear_bhb_loop+0x40/0x90 [ 162.881538][ T7085] ? clear_bhb_loop+0x40/0x90 [ 162.881560][ T7085] asm_int80_emulation+0x1a/0x20 [ 162.881578][ T7085] RIP: 0023:0xf71561ab [ 162.881595][ T7085] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 162.881611][ T7085] RSP: 002b:00000000f54164bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 162.881630][ T7085] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54165d0 [ 162.881641][ T7085] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 162.881651][ T7085] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 162.881660][ T7085] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 162.881670][ T7085] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 162.881695][ T7085] [ 163.317321][ T7086] netlink: 12 bytes leftover after parsing attributes in process `syz.0.429'. [ 163.329263][ T7086] netlink: 12 bytes leftover after parsing attributes in process `syz.0.429'. [ 163.409069][ T5740] IPVS: starting estimator thread 0... [ 163.514881][ T7096] IPVS: using max 57 ests per chain, 136800 per kthread [ 163.620997][ T5705] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 163.741750][ T7104] syzkaller0: entered promiscuous mode [ 163.747513][ T7104] syzkaller0: entered allmulticast mode [ 163.774852][ T5705] usb 3-1: Using ep0 maxpacket: 32 [ 163.782013][ T5705] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 163.790211][ T5705] usb 3-1: config 0 has no interface number 0 [ 163.796641][ T5705] usb 3-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 163.809431][ T5705] usb 3-1: config 0 interface 89 has no altsetting 0 [ 163.819002][ T5705] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 163.828740][ T5705] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.837013][ T5705] usb 3-1: Product: syz [ 163.841370][ T5705] usb 3-1: Manufacturer: syz [ 163.846434][ T5705] usb 3-1: SerialNumber: syz [ 163.855289][ T5705] usb 3-1: config 0 descriptor?? [ 163.886008][ T5705] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 163.905990][ T5705] em28xx 3-1:0.89: Video interface 89 found: [ 164.057809][ T7108] FAULT_INJECTION: forcing a failure. [ 164.057809][ T7108] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 164.072255][ T7108] CPU: 0 UID: 0 PID: 7108 Comm: syz.0.439 Tainted: G L syzkaller #0 PREEMPT(full) [ 164.072284][ T7108] Tainted: [L]=SOFTLOCKUP [ 164.072291][ T7108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 164.072302][ T7108] Call Trace: [ 164.072309][ T7108] [ 164.072317][ T7108] dump_stack_lvl+0xe8/0x150 [ 164.072343][ T7108] should_fail_ex+0x412/0x560 [ 164.072373][ T7108] _copy_to_user+0x31/0xb0 [ 164.072402][ T7108] snd_pcm_oss_read2+0x341/0x420 [ 164.072427][ T7108] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 164.072453][ T7108] ? __pfx_snd_pcm_oss_read2+0x10/0x10 [ 164.072476][ T7108] ? __pfx_snd_pcm_post_prepare+0x10/0x10 [ 164.072502][ T7108] ? snd_pcm_action_nonatomic+0x25c/0x2b0 [ 164.072532][ T7108] snd_pcm_oss_read+0x628/0x8e0 [ 164.072569][ T7108] vfs_readv+0x587/0x840 [ 164.072591][ T7108] ? __pfx_snd_pcm_oss_read+0x10/0x10 [ 164.072617][ T7108] ? __pfx_vfs_readv+0x10/0x10 [ 164.072656][ T7108] ? __pfx_vfs_write+0x10/0x10 [ 164.072697][ T7108] do_readv+0x154/0x2e0 [ 164.072720][ T7108] ? __pfx_do_readv+0x10/0x10 [ 164.072746][ T7108] __do_fast_syscall_32+0x229/0x6e0 [ 164.072766][ T7108] ? do_fast_syscall_32+0x33/0x70 [ 164.072784][ T7108] ? lockdep_hardirqs_on+0x7a/0x110 [ 164.072799][ T7108] ? asm_int80_emulation+0x1a/0x20 [ 164.072816][ T7108] ? do_int80_emulation+0x286/0x530 [ 164.072834][ T7108] ? trace_irq_disable+0x3b/0x140 [ 164.072863][ T7108] do_fast_syscall_32+0x33/0x70 [ 164.072881][ T7108] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 164.072901][ T7108] RIP: 0023:0xf7fb901c [ 164.072916][ T7108] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 164.072931][ T7108] RSP: 002b:00000000f547650c EFLAGS: 00000206 ORIG_RAX: 0000000000000091 [ 164.072950][ T7108] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 164.072963][ T7108] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 164.072974][ T7108] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 164.072985][ T7108] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 164.072995][ T7108] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 164.073022][ T7108] [ 164.374764][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 164.828003][ T5705] em28xx 3-1:0.89: unknown em28xx chip ID (64) [ 165.102355][ T5705] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 165.110635][ T5705] em28xx 3-1:0.89: board has no eeprom [ 165.176375][ T5705] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 165.194693][ T5705] em28xx 3-1:0.89: analog set to bulk mode. [ 165.207002][ T24] em28xx 3-1:0.89: Registering V4L2 extension [ 165.229311][ T5705] usb 3-1: USB disconnect, device number 17 [ 165.254981][ T5705] em28xx 3-1:0.89: Disconnecting em28xx [ 165.300362][ T24] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 165.309840][ T24] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 165.318229][ T24] em28xx 3-1:0.89: No AC97 audio processor [ 165.372242][ T24] usb 3-1: Decoder not found [ 165.387854][ T24] em28xx 3-1:0.89: failed to create media graph [ 165.404381][ T24] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 165.436205][ T24] em28xx 3-1:0.89: Registering snapshot button... [ 165.453155][ T24] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input21 [ 165.477476][ T24] em28xx 3-1:0.89: Remote control support is not available for this card. [ 165.487025][ T5705] em28xx 3-1:0.89: Closing input extension [ 165.495610][ T5705] em28xx 3-1:0.89: Deregistering snapshot button [ 165.601500][ T5705] em28xx 3-1:0.89: Freeing device [ 165.656732][ T7136] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 165.818305][ T7141] geneve0: entered promiscuous mode [ 165.832696][ T7141] geneve0: left promiscuous mode [ 165.960651][ T7146] tipc: Started in network mode [ 165.971176][ T7146] tipc: Node identity 7f000001, cluster identity 4711 [ 165.980676][ T7146] tipc: Enabling of bearer rejected, failed to enable media [ 166.044878][ T5705] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 166.204923][ T5705] usb 3-1: Using ep0 maxpacket: 16 [ 166.228996][ T5705] usb 3-1: unable to get BOS descriptor or descriptor too short [ 166.247502][ T5705] usb 3-1: config 4 has an invalid interface number: 127 but max is 0 [ 166.258228][ T5705] usb 3-1: config 4 has no interface number 0 [ 166.269693][ T5705] usb 3-1: config 4 interface 127 has no altsetting 0 [ 166.289963][ T5705] usb 3-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=2b.48 [ 166.302372][ T5705] usb 3-1: New USB device strings: Mfr=19, Product=2, SerialNumber=3 [ 166.311911][ T5705] usb 3-1: Product: syz [ 166.318702][ T5705] usb 3-1: Manufacturer: syz [ 166.326603][ T5705] usb 3-1: SerialNumber: syz [ 166.565619][ T7139] netlink: 12 bytes leftover after parsing attributes in process `syz.2.448'. [ 166.644160][ T5705] usbhid 3-1:4.127: couldn't find an input interrupt endpoint [ 166.668968][ T5705] usb 3-1: USB disconnect, device number 18 [ 166.875290][ T7152] netlink: 4 bytes leftover after parsing attributes in process `syz.3.452'. [ 166.945514][ T7152] netlink: 4 bytes leftover after parsing attributes in process `syz.3.452'. [ 166.982096][ T7155] xt_connbytes: Forcing CT accounting to be enabled [ 167.588575][ T7158] program syz.2.454 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 167.685458][ T5729] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 167.728355][ T7166] tipc: Started in network mode [ 167.733618][ T7166] tipc: Node identity ac14140f, cluster identity 4711 [ 167.745150][ T10] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 167.753392][ T7166] tipc: New replicast peer: 255.255.255.255 [ 167.772204][ T7166] tipc: Enabled bearer , priority 10 [ 167.856404][ T5729] usb 1-1: config 0 has an invalid interface number: 176 but max is 2 [ 167.867578][ T5729] usb 1-1: config 0 has an invalid interface number: 9 but max is 2 [ 167.876401][ T5729] usb 1-1: config 0 has no interface number 0 [ 167.882742][ T5729] usb 1-1: config 0 has no interface number 1 [ 167.889883][ T5729] usb 1-1: too many endpoints for config 0 interface 9 altsetting 255: 255, using maximum allowed: 30 [ 167.903977][ T5729] usb 1-1: config 0 interface 9 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 167.920439][ T5729] usb 1-1: config 0 interface 9 has no altsetting 0 [ 167.927324][ T5729] usb 1-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 167.936481][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 167.942388][ T5729] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.952425][ T10] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 167.966166][ T10] usb 4-1: config 0 has no interface number 0 [ 167.972610][ T10] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 167.989610][ T5729] usb 1-1: config 0 descriptor?? [ 168.002339][ T10] usb 4-1: config 0 interface 85 has no altsetting 0 [ 168.023596][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 168.039966][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.050603][ T10] usb 4-1: Product: syz [ 168.060251][ T10] usb 4-1: Manufacturer: syz [ 168.066757][ T10] usb 4-1: SerialNumber: syz [ 168.078226][ T10] usb 4-1: config 0 descriptor?? [ 168.228619][ T5729] usb 1-1: Could not set interface, error -71 [ 168.270687][ T5729] usb 1-1: selecting invalid altsetting 0 [ 168.291342][ T5729] usb 1-1: Could not set interface, error -22 [ 168.321131][ T5729] usb 1-1: USB disconnect, device number 23 [ 168.374428][ T7161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.413192][ T7161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.471403][ T7188] tipc: Enabled bearer , priority 10 [ 168.487768][ T5705] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 168.532276][ T5690] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 168.569554][ T5690] dvb_usb_az6027 2-1:64.0: probe with driver dvb_usb_az6027 failed with error -110 [ 168.603044][ T5690] usb 2-1: USB disconnect, device number 8 [ 168.644191][ T7161] xt_CT: No such helper "snmp" [ 168.751515][ T7199] FAULT_INJECTION: forcing a failure. [ 168.751515][ T7199] name failslab, interval 1, probability 0, space 0, times 0 [ 168.765705][ T7199] CPU: 1 UID: 0 PID: 7199 Comm: syz.1.466 Tainted: G L syzkaller #0 PREEMPT(full) [ 168.765734][ T7199] Tainted: [L]=SOFTLOCKUP [ 168.765740][ T7199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 168.765751][ T7199] Call Trace: [ 168.765757][ T7199] [ 168.765762][ T7199] dump_stack_lvl+0xe8/0x150 [ 168.765778][ T7199] should_fail_ex+0x412/0x560 [ 168.765797][ T7199] should_failslab+0xa8/0x100 [ 168.765813][ T7199] ? ipmr_mfc_add+0x412/0x24a0 [ 168.765838][ T7199] kmem_cache_alloc_noprof+0x87/0x650 [ 168.765870][ T7199] ? ipmr_mfc_add+0x105/0x24a0 [ 168.765894][ T7199] ipmr_mfc_add+0x412/0x24a0 [ 168.765919][ T7199] ? ipmr_mfc_add+0x105/0x24a0 [ 168.765933][ T7199] ? __might_fault+0xaf/0x130 [ 168.765948][ T7199] ? __pfx_ipmr_mfc_add+0x10/0x10 [ 168.765962][ T7199] ? __pfx___mutex_lock+0x10/0x10 [ 168.765995][ T7199] ip_mroute_setsockopt+0xe5b/0x10d0 [ 168.766030][ T7199] ? __pfx_ip_mroute_setsockopt+0x10/0x10 [ 168.766055][ T7199] ? get_pid_task+0x20/0x1f0 [ 168.766076][ T7199] ? get_pid_task+0x20/0x1f0 [ 168.766087][ T7199] ? get_pid_task+0x20/0x1f0 [ 168.766102][ T7199] ? __lock_acquire+0x6b5/0x2cf0 [ 168.766115][ T7199] do_ip_setsockopt+0xf1e/0x2ea0 [ 168.766142][ T7199] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 168.766170][ T7199] ? aa_sk_perm+0x6d5/0x900 [ 168.766208][ T7199] ? __pfx_aa_sk_perm+0x10/0x10 [ 168.766224][ T7199] ? aa_sock_opt_perm+0xff/0x1a0 [ 168.766240][ T7199] ip_setsockopt+0x66/0x110 [ 168.766252][ T7199] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 168.766267][ T7199] do_sock_setsockopt+0x17c/0x1b0 [ 168.766296][ T7199] __ia32_sys_setsockopt+0x13d/0x1b0 [ 168.766329][ T7199] __do_fast_syscall_32+0x229/0x6e0 [ 168.766349][ T7199] ? do_fast_syscall_32+0x33/0x70 [ 168.766366][ T7199] ? lockdep_hardirqs_on+0x7a/0x110 [ 168.766375][ T7199] ? asm_int80_emulation+0x1a/0x20 [ 168.766385][ T7199] ? do_int80_emulation+0x286/0x530 [ 168.766395][ T7199] ? trace_irq_disable+0x3b/0x140 [ 168.766413][ T7199] do_fast_syscall_32+0x33/0x70 [ 168.766423][ T7199] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 168.766445][ T7199] RIP: 0023:0xf7f4901c [ 168.766461][ T7199] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 168.766477][ T7199] RSP: 002b:00000000f53c450c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 168.766496][ T7199] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000000000 [ 168.766508][ T7199] RDX: 00000000000000d2 RSI: 0000000080000200 RDI: 000000000000003c [ 168.766518][ T7199] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 168.766524][ T7199] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 168.766529][ T7199] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 168.766544][ T7199] [ 169.058006][ T5705] usb 5-1: Using ep0 maxpacket: 32 [ 169.102917][ T5705] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 132, changing to 7 [ 169.118410][ T5705] usb 5-1: New USB device found, idVendor=09e8, idProduct=0021, bcdDevice= 0.40 [ 169.130890][ T5705] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.139182][ T5705] usb 5-1: Product: syz [ 169.143358][ T5705] usb 5-1: Manufacturer: syz [ 169.148459][ T5705] usb 5-1: SerialNumber: syz [ 169.210974][ T7202] netlink: 12 bytes leftover after parsing attributes in process `syz.0.468'. [ 169.295833][ T10] appletouch 4-1:0.85: Geyser mode initialized. [ 169.309553][ T10] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input22 [ 169.472516][ T5690] tipc: Node number set to 2886997007 [ 169.608351][ T4945] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 169.674503][ T5690] usb 4-1: USB disconnect, device number 25 [ 169.680565][ C1] appletouch 4-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 169.780025][ T5690] appletouch 4-1:0.85: input: appletouch disconnected [ 169.891995][ T5705] usb 5-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 169.915572][ T5705] usb 5-1: MIDIStreaming interface descriptor not found [ 169.943900][ T7221] binder: 7220:7221 ioctl 801c581f 0 returned -22 [ 170.090594][ T7224] x_tables: ip6_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 170.104174][ T5705] usb 5-1: USB disconnect, device number 21 [ 170.207007][ T5634] udevd[5634]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 170.981411][ T7238] FAULT_INJECTION: forcing a failure. [ 170.981411][ T7238] name failslab, interval 1, probability 0, space 0, times 0 [ 171.013504][ T7238] CPU: 1 UID: 0 PID: 7238 Comm: syz.3.482 Tainted: G L syzkaller #0 PREEMPT(full) [ 171.013533][ T7238] Tainted: [L]=SOFTLOCKUP [ 171.013539][ T7238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 171.013550][ T7238] Call Trace: [ 171.013557][ T7238] [ 171.013565][ T7238] dump_stack_lvl+0xe8/0x150 [ 171.013592][ T7238] should_fail_ex+0x412/0x560 [ 171.013623][ T7238] should_failslab+0xa8/0x100 [ 171.013652][ T7238] __kvmalloc_node_noprof+0x178/0x8a0 [ 171.013679][ T7238] ? nf_hook_entries_grow+0x288/0x720 [ 171.013706][ T7238] nf_hook_entries_grow+0x288/0x720 [ 171.013738][ T7238] __nf_register_net_hook+0x2c9/0x930 [ 171.013764][ T7238] nf_register_net_hook+0xb2/0x190 [ 171.013782][ T7238] nf_register_net_hooks+0x44/0x1b0 [ 171.013803][ T7238] nf_ct_netns_do_get+0x3bf/0x5c0 [ 171.013822][ T7238] ? rcu_is_watching+0x15/0xb0 [ 171.013843][ T7238] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 171.013863][ T7238] ? __kmalloc_noprof+0x37d/0x760 [ 171.013887][ T7238] ? nf_ct_netns_get+0xe9/0x320 [ 171.013905][ T7238] nf_tables_newrule+0x17ac/0x28b0 [ 171.013938][ T7238] ? __pfx_nf_tables_newrule+0x10/0x10 [ 171.013956][ T7238] ? nfnl_pernet+0x23/0x240 [ 171.013978][ T7238] ? nfnl_pernet+0x23/0x240 [ 171.014007][ T7238] ? __nla_parse+0x40/0x60 [ 171.014044][ T7238] nfnetlink_rcv+0x123e/0x27b0 [ 171.014094][ T7238] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 171.014131][ T7238] ? ref_tracker_free+0x693/0x840 [ 171.014183][ T7238] ? __netlink_deliver_tap+0x807/0x850 [ 171.014217][ T7238] ? netlink_deliver_tap+0x2e/0x1b0 [ 171.014243][ T7238] ? netlink_deliver_tap+0x2e/0x1b0 [ 171.014273][ T7238] netlink_unicast+0x75c/0x8e0 [ 171.014304][ T7238] netlink_sendmsg+0x813/0xb40 [ 171.014330][ T7238] ? __pfx_netlink_sendmsg+0x10/0x10 [ 171.014360][ T7238] ? aa_sock_msg_perm+0xf1/0x1b0 [ 171.014387][ T7238] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 171.014416][ T7238] ____sys_sendmsg+0x972/0x9f0 [ 171.014443][ T7238] ? __pfx_____sys_sendmsg+0x10/0x10 [ 171.014477][ T7238] ? kstrtoull+0x12f/0x1d0 [ 171.014507][ T7238] ___sys_sendmsg+0x2a5/0x360 [ 171.014524][ T7238] ? __lock_acquire+0x6b5/0x2cf0 [ 171.014549][ T7238] ? __pfx____sys_sendmsg+0x10/0x10 [ 171.014569][ T7238] ? get_pid_task+0x20/0x1f0 [ 171.014592][ T7238] ? get_pid_task+0x20/0x1f0 [ 171.014612][ T7238] ? get_pid_task+0x20/0x1f0 [ 171.014660][ T7238] ? __fget_files+0x2a/0x420 [ 171.014683][ T7238] ? __fget_files+0x3a0/0x420 [ 171.014716][ T7238] __sys_sendmsg+0x183/0x260 [ 171.014739][ T7238] ? __pfx___sys_sendmsg+0x10/0x10 [ 171.014776][ T7238] __do_fast_syscall_32+0x229/0x6e0 [ 171.014796][ T7238] ? do_fast_syscall_32+0x33/0x70 [ 171.014813][ T7238] ? lockdep_hardirqs_on+0x7a/0x110 [ 171.014831][ T7238] ? asm_int80_emulation+0x1a/0x20 [ 171.014848][ T7238] ? do_int80_emulation+0x286/0x530 [ 171.014865][ T7238] ? trace_irq_disable+0x3b/0x140 [ 171.014896][ T7238] do_fast_syscall_32+0x33/0x70 [ 171.014915][ T7238] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 171.014937][ T7238] RIP: 0023:0xf7f5301c [ 171.014954][ T7238] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 171.014970][ T7238] RSP: 002b:00000000f541650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 171.014989][ T7238] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 171.015002][ T7238] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 171.015012][ T7238] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 171.015030][ T7238] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 171.015041][ T7238] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 171.015069][ T7238] [ 171.386138][ T7241] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 171.773431][ T7258] x_tables: ip6_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 172.106407][ T7272] netlink: 72 bytes leftover after parsing attributes in process `syz.3.492'. [ 172.375028][ T5690] usb 3-1: new low-speed USB device number 19 using dummy_hcd [ 172.514837][ T5690] usb 3-1: device descriptor read/64, error -71 [ 172.774813][ T5690] usb 3-1: new low-speed USB device number 20 using dummy_hcd [ 172.914828][ T5690] usb 3-1: device descriptor read/64, error -71 [ 173.026954][ T5690] usb usb3-port1: attempt power cycle [ 173.126125][ T7289] netlink: 'syz.3.500': attribute type 16 has an invalid length. [ 173.160265][ T7289] netlink: 'syz.3.500': attribute type 17 has an invalid length. [ 173.182602][ T7291] netlink: 20 bytes leftover after parsing attributes in process `syz.3.500'. [ 173.200698][ T7289] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.207841][ T7289] bridge0: port 2(bridge_slave_1) entered listening state [ 173.215120][ T7289] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.222193][ T7289] bridge0: port 1(bridge_slave_0) entered listening state [ 173.229930][ T24] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 173.338447][ T7287] xt_bpf: check failed: parse error [ 173.359573][ T7289] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 173.387816][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 173.395924][ T5690] usb 3-1: new low-speed USB device number 21 using dummy_hcd [ 173.404592][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 173.416212][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 173.425172][ T5690] usb 3-1: device descriptor read/8, error -71 [ 173.436883][ T24] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 173.447153][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.455599][ T24] usb 5-1: Product: syz [ 173.476469][ T24] usb 5-1: Manufacturer: syz [ 173.485131][ T24] usb 5-1: SerialNumber: syz [ 173.508405][ T24] usb 5-1: selecting invalid altsetting 1 [ 173.516727][ T24] usb 5-1: unit 6 not found! [ 173.589586][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 173.589602][ T29] audit: type=1326 audit(1779700338.923:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7293 comm="syz.3.501" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f5301c code=0x0 [ 173.633879][ T7297] x_tables: ip6_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 173.684893][ T5690] usb 3-1: new low-speed USB device number 22 using dummy_hcd [ 173.717860][ T5690] usb 3-1: device descriptor read/8, error -71 [ 173.837134][ T5690] usb usb3-port1: unable to enumerate USB device [ 173.924850][ T5729] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 174.055135][ T5729] usb 2-1: device descriptor read/64, error -71 [ 174.138946][ T24] usb 5-1: 2:0: failed to get current value for ch 0 (-71) [ 174.181912][ T24] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 174.195403][ T24] usb 5-1: USB disconnect, device number 22 [ 174.219517][ T5630] udevd[5630]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 174.295311][ T5729] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 174.424977][ T5729] usb 2-1: device descriptor read/64, error -71 [ 174.535832][ T5729] usb usb2-port1: attempt power cycle [ 174.747990][ T7314] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 174.874801][ T5729] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 174.895811][ T5729] usb 2-1: device descriptor read/8, error -71 [ 175.168888][ T5729] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 175.199073][ T5729] usb 2-1: device descriptor read/8, error -71 [ 175.321834][ T5729] usb usb2-port1: unable to enumerate USB device [ 175.345684][ T5690] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 175.506957][ T5690] usb 4-1: config 0 has no interfaces? [ 175.515594][ T5690] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 175.534961][ T5690] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 175.554841][ T5690] usb 4-1: Product: syz [ 175.560778][ T5690] usb 4-1: Manufacturer: syz [ 175.575785][ T5690] usb 4-1: config 0 descriptor?? [ 175.706558][ T9] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 175.832164][ T7332] x_tables: ip6_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 175.875106][ T10] usb 4-1: USB disconnect, device number 26 [ 175.884944][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 175.912217][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 175.935999][ T9] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 175.949407][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 175.972272][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 175.992976][ T7337] netlink: 292 bytes leftover after parsing attributes in process `syz.0.515'. [ 176.003532][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 176.022272][ T9] usb 3-1: SerialNumber: syz [ 176.414898][ T10] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 176.568139][ T10] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 176.577458][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.585706][ T10] usb 1-1: Product: syz [ 176.590108][ T10] usb 1-1: Manufacturer: syz [ 176.594909][ T10] usb 1-1: SerialNumber: syz [ 176.613696][ T10] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 176.647952][ T5729] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 176.933123][ T7351] ipip0: entered promiscuous mode [ 176.938328][ T7351] ipip0: entered allmulticast mode [ 177.013961][ T7351] netlink: 88 bytes leftover after parsing attributes in process `syz.1.519'. [ 177.096330][ T7342] blktrace: Concurrent blktraces are not allowed on nullb0 [ 177.640621][ T5705] usb 1-1: USB disconnect, device number 24 [ 177.966035][ T5729] usb 1-1: Service connection timeout for: 256 [ 177.972689][ T5729] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 177.984663][ T5729] ath9k_htc: Failed to initialize the device [ 177.993935][ T5705] usb 1-1: ath9k_htc: USB layer deinitialized [ 178.248849][ T9] usb 3-1: USB disconnect, device number 23 [ 178.367277][ T7367] netlink: 292 bytes leftover after parsing attributes in process `syz.2.526'. [ 178.480899][ T7370] x_tables: ip6_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 178.634264][ T7373] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3069583262 (392906657536 ns) > initial count (296724835072 ns). Using initial count to start timer. [ 179.006472][ T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 179.176471][ T9] usb 3-1: config 0 has no interfaces? [ 179.183846][ T9] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 179.193468][ T9] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 179.201788][ T9] usb 3-1: Product: syz [ 179.206651][ T9] usb 3-1: Manufacturer: syz [ 179.217085][ T9] usb 3-1: config 0 descriptor?? [ 179.414876][ T5729] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 179.429735][ T24] usb 3-1: USB disconnect, device number 24 [ 179.583504][ T5729] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 179.593012][ T5729] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.610519][ T5729] usb 1-1: Product: syz [ 179.628732][ T5729] usb 1-1: Manufacturer: syz [ 179.639770][ T5729] usb 1-1: SerialNumber: syz [ 179.663918][ T5729] usb 1-1: config 0 descriptor?? [ 180.052539][ T7395] netlink: 24 bytes leftover after parsing attributes in process `syz.3.533'. [ 180.466860][ T9] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 180.647906][ T9] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 180.656457][ T9] usb 3-1: config 0 has no interface number 0 [ 180.670335][ T9] usb 3-1: too many endpoints for config 0 interface 255 altsetting 0: 130, using maximum allowed: 30 [ 180.698400][ T9] usb 3-1: config 0 interface 255 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.717371][ T9] usb 3-1: config 0 interface 255 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.729457][ T9] usb 3-1: config 0 interface 255 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 180.745034][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 180.754818][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.774872][ T9] usb 3-1: config 0 descriptor?? [ 180.824925][ T10] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 180.863769][ T7406] syzkaller1: entered promiscuous mode [ 180.870674][ T7406] syzkaller1: entered allmulticast mode [ 180.901358][ T7408] netlink: 8 bytes leftover after parsing attributes in process `syz.4.539'. [ 180.916054][ T7408] vlan2: entered allmulticast mode [ 180.921289][ T7408] veth0_to_bond: entered allmulticast mode [ 180.994949][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 181.002103][ T10] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 181.012548][ T5729] usb 1-1: Firmware version (0.0) predates our first public release. [ 181.020707][ T5729] usb 1-1: Please update to version 0.2 or newer [ 181.027529][ T10] usb 4-1: config 0 has no interface number 0 [ 181.037858][ T10] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 181.050550][ T10] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 181.069264][ T10] usb 4-1: config 0 interface 85 has no altsetting 0 [ 181.090886][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 181.102001][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.111421][ T10] usb 4-1: Product: syz [ 181.115887][ T10] usb 4-1: Manufacturer: syz [ 181.122299][ T10] usb 4-1: SerialNumber: syz [ 181.133572][ T10] usb 4-1: config 0 descriptor?? [ 181.164954][ T24] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 181.188806][ T9] microsoft 0003:045E:009D.0007: unknown main item tag 0x0 [ 181.196580][ T9] microsoft 0003:045E:009D.0007: unknown main item tag 0x0 [ 181.203929][ T9] microsoft 0003:045E:009D.0007: unknown main item tag 0x0 [ 181.211745][ T9] microsoft 0003:045E:009D.0007: unknown main item tag 0x0 [ 181.219477][ T9] microsoft 0003:045E:009D.0007: unknown main item tag 0x0 [ 181.227861][ T9] microsoft 0003:045E:009D.0007: unknown main item tag 0x0 [ 181.235732][ T9] microsoft 0003:045E:009D.0007: unknown main item tag 0x0 [ 181.243148][ T9] microsoft 0003:045E:009D.0007: unknown main item tag 0x0 [ 181.251343][ T9] microsoft 0003:045E:009D.0007: unknown main item tag 0x0 [ 181.259170][ T9] microsoft 0003:045E:009D.0007: unknown main item tag 0x0 [ 181.274406][ T9] microsoft 0003:045E:009D.0007: hidraw0: USB HID v6f.fd Device [HID 045e:009d] on usb-dummy_hcd.2-1/input255 [ 181.287973][ T9] microsoft 0003:045E:009D.0007: no inputs found [ 181.294413][ T9] microsoft 0003:045E:009D.0007: could not initialize ff, continuing anyway [ 181.355246][ T24] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 181.372907][ T24] usb 5-1: config 1 has no interface number 0 [ 181.393572][ T24] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 181.408780][ T9] usb 3-1: USB disconnect, device number 25 [ 181.418344][ T24] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 181.447751][ T24] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 248, changing to 7 [ 181.516823][ T24] usb 5-1: New USB device found, idVendor=0e41, idProduct=5058, bcdDevice= 0.40 [ 181.531031][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.545385][ T24] usb 5-1: Product: syz [ 181.549569][ T24] usb 5-1: Manufacturer: syz [ 181.554146][ T24] usb 5-1: SerialNumber: syz [ 181.738731][ T10] appletouch 4-1:0.85: Failed to request geyser raw mode [ 181.753542][ T10] appletouch 4-1:0.85: probe with driver appletouch failed with error -5 [ 181.773094][ T10] usb 4-1: USB disconnect, device number 27 [ 182.117678][ T7421] x_tables: ip6_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 182.485999][ T5704] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 182.648168][ T5704] usb 3-1: config 0 has no interfaces? [ 182.656610][ T5704] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 182.667540][ T5704] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 182.678541][ T5704] usb 3-1: Product: syz [ 182.682839][ T5704] usb 3-1: Manufacturer: syz [ 182.692693][ T5704] usb 3-1: config 0 descriptor?? [ 182.867849][ T24] usb 5-1: 1:0 : does not exist [ 182.874919][ T24] usb 5-1: 2:1 : incorrect wMaxPacketSize for BADD profile [ 182.883943][ T24] usb 5-1: 1:3 : does not exist [ 182.890496][ T24] usb 5-1: incorrect wMaxPacketSize 0x210 for BADD profile [ 182.908479][ T5704] usb 3-1: USB disconnect, device number 26 [ 182.950534][ T24] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 182.960644][ T24] snd_usb_podhd 5-1:1.1: Line 6 POD HD400 found [ 182.967021][ T24] usb 5-1: selecting invalid altsetting 5 [ 182.973064][ T24] snd_usb_podhd 5-1:1.1: set_interface failed [ 182.980131][ T24] snd_usb_podhd 5-1:1.1: Line 6 POD HD400 now disconnected [ 182.987656][ T24] snd_usb_podhd 5-1:1.1: probe with driver snd_usb_podhd failed with error -22 [ 183.002137][ T24] usb 5-1: USB disconnect, device number 23 [ 183.032409][ T5630] udevd[5630]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 183.294192][ T5705] usb 1-1: USB disconnect, device number 25 [ 183.444914][ T24] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 183.573349][ T7446] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 183.604877][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 183.614858][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.625954][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 183.636912][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 183.650147][ T24] usb 4-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 183.659325][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.673693][ T24] usb 4-1: config 0 descriptor?? [ 184.096229][ T7459] x_tables: ip6_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 184.137143][ T24] nintendo 0003:057E:2019.0008: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.3-1/input0 [ 184.165167][ T5738] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 184.304828][ T5738] usb 3-1: device descriptor read/64, error -71 [ 184.555015][ T5738] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 184.579978][ T24] nintendo 0003:057E:2019.0008: Failed to get joycon info; ret=-71 [ 184.588577][ T24] nintendo 0003:057E:2019.0008: Failed to retrieve controller info; ret=-71 [ 184.597672][ T24] nintendo 0003:057E:2019.0008: Failed to initialize controller; ret=-71 [ 184.615297][ T24] nintendo 0003:057E:2019.0008: probe - fail = -71 [ 184.632202][ T24] nintendo 0003:057E:2019.0008: probe with driver nintendo failed with error -71 [ 184.684936][ T5738] usb 3-1: device descriptor read/64, error -71 [ 184.740669][ T24] usb 4-1: USB disconnect, device number 28 [ 184.817073][ T5738] usb usb3-port1: attempt power cycle [ 184.996417][ T7469] FAULT_INJECTION: forcing a failure. [ 184.996417][ T7469] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.009710][ T7469] CPU: 0 UID: 0 PID: 7469 Comm: syz.4.557 Tainted: G L syzkaller #0 PREEMPT(full) [ 185.009737][ T7469] Tainted: [L]=SOFTLOCKUP [ 185.009744][ T7469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 185.009754][ T7469] Call Trace: [ 185.009761][ T7469] [ 185.009768][ T7469] dump_stack_lvl+0xe8/0x150 [ 185.009793][ T7469] should_fail_ex+0x412/0x560 [ 185.009821][ T7469] _copy_from_user+0x2d/0xb0 [ 185.009849][ T7469] get_compat_msghdr+0xb3/0x4c0 [ 185.009872][ T7469] ? __pfx_get_compat_msghdr+0x10/0x10 [ 185.009892][ T7469] ? kfree+0x4d/0x640 [ 185.009918][ T7469] ___sys_recvmsg+0x1dd/0x590 [ 185.009935][ T7469] ? __lock_acquire+0x6b5/0x2cf0 [ 185.009958][ T7469] ? __pfx____sys_recvmsg+0x10/0x10 [ 185.009981][ T7469] ? __fget_files+0x2a/0x420 [ 185.010034][ T7469] do_recvmmsg+0x3a5/0x800 [ 185.010058][ T7469] ? __pfx_do_recvmmsg+0x10/0x10 [ 185.010086][ T7469] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 185.010111][ T7469] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 185.010134][ T7469] __sys_recvmmsg+0x1a5/0x290 [ 185.010153][ T7469] ? __pfx___sys_recvmmsg+0x10/0x10 [ 185.010170][ T7469] ? ksys_write+0x242/0x270 [ 185.010200][ T7469] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 185.010223][ T7469] __do_fast_syscall_32+0x229/0x6e0 [ 185.010243][ T7469] ? do_fast_syscall_32+0x33/0x70 [ 185.010260][ T7469] ? lockdep_hardirqs_on+0x7a/0x110 [ 185.010276][ T7469] ? asm_int80_emulation+0x1a/0x20 [ 185.010294][ T7469] ? do_int80_emulation+0x286/0x530 [ 185.010311][ T7469] ? trace_irq_disable+0x3b/0x140 [ 185.010340][ T7469] do_fast_syscall_32+0x33/0x70 [ 185.010358][ T7469] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 185.010378][ T7469] RIP: 0023:0xf70af01c [ 185.010393][ T7469] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 185.010408][ T7469] RSP: 002b:00000000f549d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 185.010426][ T7469] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800066c0 [ 185.010438][ T7469] RDX: 0000000000000a0d RSI: 0000000000000000 RDI: 0000000000000000 [ 185.010448][ T7469] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 185.010457][ T7469] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 185.010467][ T7469] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 185.010491][ T7469] [ 185.011623][ T7467] syzkaller0: entered promiscuous mode [ 185.154856][ T5738] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 185.155807][ T7467] syzkaller0: entered allmulticast mode [ 185.201109][ T5738] usb 3-1: device descriptor read/8, error -71 [ 185.515543][ T5738] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 185.546353][ T5738] usb 3-1: device descriptor read/8, error -71 [ 185.655287][ T5738] usb usb3-port1: unable to enumerate USB device [ 185.744830][ T24] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 185.844204][ T7493] x_tables: ip6_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 185.909781][ T24] usb 1-1: config 0 has no interfaces? [ 185.917291][ T24] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 185.926594][ T24] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 185.935243][ T24] usb 1-1: Product: syz [ 185.939892][ T24] usb 1-1: Manufacturer: syz [ 185.944874][ T9] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 185.953598][ T24] usb 1-1: config 0 descriptor?? [ 186.004836][ T5738] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 186.146565][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD4, changing to 0x84 [ 186.154879][ T5738] usb 4-1: Using ep0 maxpacket: 32 [ 186.158186][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 51544, setting to 1024 [ 186.165307][ T5738] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 186.174568][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 186.183734][ T5738] usb 4-1: config 0 has no interface number 0 [ 186.201838][ T5738] usb 4-1: config 0 interface 12 has no altsetting 0 [ 186.201885][ T5729] usb 1-1: USB disconnect, device number 26 [ 186.212324][ T5738] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 186.215126][ T5704] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 186.224388][ T5738] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.248450][ T5738] usb 4-1: Product: syz [ 186.254137][ T5738] usb 4-1: Manufacturer: syz [ 186.259792][ T5738] usb 4-1: SerialNumber: syz [ 186.273906][ T5738] usb 4-1: config 0 descriptor?? [ 186.287857][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 186.297230][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.306800][ T9] usb 5-1: Product: syz [ 186.311060][ T9] usb 5-1: Manufacturer: syz [ 186.316286][ T9] usb 5-1: SerialNumber: syz [ 186.323345][ T9] usb 5-1: config 0 descriptor?? [ 186.329211][ T7480] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 186.404886][ T5704] usb 2-1: Using ep0 maxpacket: 16 [ 186.411913][ T5704] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.423608][ T5704] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 186.434497][ T5704] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 186.453847][ T5704] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 186.462970][ T5704] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 186.471047][ T5704] usb 2-1: SerialNumber: syz [ 186.538798][ T7480] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 186.693475][ T5704] usb 2-1: USB disconnect, device number 13 [ 186.727922][ T5738] f81534 4-1:0.12: f81534_set_register: reg: 1003 data: 28 failed: -71 [ 186.744947][ T5738] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 186.754564][ T5738] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 186.771486][ T5738] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 186.802558][ T5738] usb 4-1: USB disconnect, device number 29 [ 186.930868][ T7505] FAULT_INJECTION: forcing a failure. [ 186.930868][ T7505] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.948833][ T7505] CPU: 1 UID: 0 PID: 7505 Comm: syz.3.569 Tainted: G L syzkaller #0 PREEMPT(full) [ 186.948863][ T7505] Tainted: [L]=SOFTLOCKUP [ 186.948870][ T7505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 186.948881][ T7505] Call Trace: [ 186.948888][ T7505] [ 186.948895][ T7505] dump_stack_lvl+0xe8/0x150 [ 186.948921][ T7505] should_fail_ex+0x412/0x560 [ 186.948952][ T7505] _copy_to_user+0x31/0xb0 [ 186.948981][ T7505] simple_read_from_buffer+0xe1/0x170 [ 186.949009][ T7505] proc_fail_nth_read+0x1bb/0x230 [ 186.949035][ T7505] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 186.949060][ T7505] ? rw_verify_area+0x2a6/0x4d0 [ 186.949084][ T7505] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 186.949108][ T7505] vfs_read+0x20c/0xa70 [ 186.949139][ T7505] ? __pfx___mutex_lock+0x10/0x10 [ 186.949161][ T7505] ? __pfx_vfs_read+0x10/0x10 [ 186.949187][ T7505] ? __fget_files+0x2a/0x420 [ 186.949213][ T7505] ? __fget_files+0x3a0/0x420 [ 186.949234][ T7505] ? __fget_files+0x2a/0x420 [ 186.949264][ T7505] ksys_read+0x150/0x270 [ 186.949292][ T7505] ? __pfx_ksys_read+0x10/0x10 [ 186.949323][ T7505] ? asm_int80_emulation+0x1a/0x20 [ 186.949346][ T7505] do_int80_emulation+0x181/0x530 [ 186.949366][ T7505] ? trace_irq_disable+0x3b/0x140 [ 186.949392][ T7505] ? asm_int80_emulation+0x1a/0x20 [ 186.949408][ T7505] ? clear_bhb_loop+0x40/0x90 [ 186.949427][ T7505] ? clear_bhb_loop+0x40/0x90 [ 186.949449][ T7505] asm_int80_emulation+0x1a/0x20 [ 186.949467][ T7505] RIP: 0023:0xf71561ab [ 186.949484][ T7505] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 186.949500][ T7505] RSP: 002b:00000000f54164bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 186.949519][ T7505] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54165d0 [ 186.949532][ T7505] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 186.949543][ T7505] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 186.949553][ T7505] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 186.949564][ T7505] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 186.949592][ T7505] [ 187.250679][ T7511] netlink: 24 bytes leftover after parsing attributes in process `syz.2.571'. [ 187.287916][ T7507] netlink: 28 bytes leftover after parsing attributes in process `syz.0.570'. [ 187.300914][ T7511] netlink: 12 bytes leftover after parsing attributes in process `syz.2.571'. [ 187.423870][ T7517] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 187.478988][ T7519] x_tables: ip6_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 187.908262][ T7540] openvswitch: netlink: IP tunnel TTL not specified. [ 188.284961][ T5738] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 188.370921][ T7560] netlink: 4 bytes leftover after parsing attributes in process `syz.0.592'. [ 188.400237][ T7560] team0: Port device team_slave_0 removed [ 188.434900][ T5738] usb 3-1: Using ep0 maxpacket: 16 [ 188.441588][ T5738] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 188.451846][ T5738] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 188.471818][ T5738] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 188.490677][ T5738] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 188.543735][ T5738] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 188.552391][ T5738] usb 3-1: SerialNumber: syz [ 188.774774][ T5738] usb 3-1: USB disconnect, device number 31 [ 189.573878][ T7586] program syz.0.599 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 189.654813][ T5704] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 189.813425][ T5704] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 189.824847][ T5705] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 189.828618][ T5704] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 189.849325][ T5704] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 189.867974][ T5704] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 189.877314][ T5704] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.892579][ T5704] usb 3-1: Product: syz [ 189.898901][ T5704] usb 3-1: Manufacturer: syz [ 189.903515][ T5704] usb 3-1: SerialNumber: syz [ 189.985379][ T5705] usb 1-1: Using ep0 maxpacket: 16 [ 189.995567][ T5705] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 190.010971][ T5705] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 190.022462][ T5729] usb 5-1: USB disconnect, device number 24 [ 190.043653][ T5705] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 190.053545][ T5705] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.072278][ T5705] usb 1-1: Product: syz [ 190.079191][ T5705] usb 1-1: Manufacturer: syz [ 190.084858][ T5705] usb 1-1: SerialNumber: syz [ 190.121266][ T5705] usb 1-1: config 0 descriptor?? [ 190.135365][ T5705] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 190.145399][ T5705] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 190.191997][ T7582] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 190.202757][ T7582] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 190.736614][ T5705] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 190.743855][ T5705] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 190.855814][ T7598] FAULT_INJECTION: forcing a failure. [ 190.855814][ T7598] name failslab, interval 1, probability 0, space 0, times 0 [ 190.888031][ T7598] CPU: 1 UID: 0 PID: 7598 Comm: syz.1.602 Tainted: G L syzkaller #0 PREEMPT(full) [ 190.888061][ T7598] Tainted: [L]=SOFTLOCKUP [ 190.888069][ T7598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 190.888080][ T7598] Call Trace: [ 190.888087][ T7598] [ 190.888095][ T7598] dump_stack_lvl+0xe8/0x150 [ 190.888122][ T7598] should_fail_ex+0x412/0x560 [ 190.888156][ T7598] should_failslab+0xa8/0x100 [ 190.888186][ T7598] __kmalloc_cache_noprof+0x88/0x660 [ 190.888211][ T7598] ? __d_alloc+0x37/0x6f0 [ 190.888235][ T7598] ? fuse_dentry_init+0x51/0x100 [ 190.888256][ T7598] ? kmem_cache_alloc_lru_noprof+0x303/0x640 [ 190.888309][ T7598] fuse_dentry_init+0x51/0x100 [ 190.888332][ T7598] __d_alloc+0x47b/0x6f0 [ 190.888363][ T7598] d_alloc_parallel+0xe6/0x1610 [ 190.888391][ T7598] ? __d_lookup+0x66/0x780 [ 190.888420][ T7598] ? __d_lookup+0x66/0x780 [ 190.888450][ T7598] ? __d_lookup+0x66/0x780 [ 190.888479][ T7598] ? __pfx_d_alloc_parallel+0x10/0x10 [ 190.888506][ T7598] ? d_lookup+0x1f/0xa0 [ 190.888533][ T7598] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 190.888565][ T7598] path_openat+0xca8/0x3860 [ 190.888605][ T7598] ? __pfx_stack_trace_save+0x10/0x10 [ 190.888648][ T7598] ? __pfx_path_openat+0x10/0x10 [ 190.888670][ T7598] ? __ia32_compat_sys_openat+0x131/0x160 [ 190.888710][ T7598] do_file_open+0x23e/0x4a0 [ 190.888738][ T7598] ? __pfx_do_file_open+0x10/0x10 [ 190.888781][ T7598] ? _raw_spin_unlock+0x28/0x50 [ 190.888805][ T7598] ? alloc_fd+0x64b/0x6c0 [ 190.888836][ T7598] do_sys_openat2+0x113/0x200 [ 190.888858][ T7598] ? __fget_files+0x3a0/0x420 [ 190.888881][ T7598] ? __pfx_do_sys_openat2+0x10/0x10 [ 190.888906][ T7598] ? fput+0xa0/0xd0 [ 190.888928][ T7598] ? ksys_write+0x242/0x270 [ 190.888958][ T7598] __ia32_compat_sys_openat+0x131/0x160 [ 190.888987][ T7598] __do_fast_syscall_32+0x229/0x6e0 [ 190.889008][ T7598] ? do_fast_syscall_32+0x33/0x70 [ 190.889025][ T7598] ? lockdep_hardirqs_on+0x7a/0x110 [ 190.889043][ T7598] ? asm_int80_emulation+0x1a/0x20 [ 190.889060][ T7598] ? do_int80_emulation+0x286/0x530 [ 190.889079][ T7598] ? trace_irq_disable+0x3b/0x140 [ 190.889109][ T7598] do_fast_syscall_32+0x33/0x70 [ 190.889129][ T7598] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 190.889150][ T7598] RIP: 0023:0xf7f4901c [ 190.889166][ T7598] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 190.889182][ T7598] RSP: 002b:00000000f53c450c EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 190.889200][ T7598] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000800013c0 [ 190.889213][ T7598] RDX: 0000000000060a41 RSI: 00000000d7a15f29 RDI: 0000000000000000 [ 190.889224][ T7598] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 190.889235][ T7598] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 190.889246][ T7598] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 190.889272][ T7598] [ 191.973621][ T7611] input: syz1 as /devices/virtual/input/input24 [ 192.234822][ T9] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 192.285991][ T5705] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 192.293342][ T5705] em28xx 1-1:0.0: No AC97 audio processor [ 192.385099][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 192.395873][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 192.413736][ T9] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 192.442878][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 192.459523][ T5704] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 192.470776][ T5704] cdc_ncm 3-1:1.0: bind() failure [ 192.480005][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 192.499581][ T5704] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 192.506682][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 192.521488][ T5704] cdc_ncm 3-1:1.1: bind() failure [ 192.527713][ T9] usb 4-1: SerialNumber: syz [ 192.552417][ T5704] usb 3-1: USB disconnect, device number 32 [ 192.631328][ T5729] usb 1-1: USB disconnect, device number 27 [ 192.666805][ T5729] em28xx 1-1:0.0: Disconnecting em28xx [ 192.677962][ T5729] em28xx 1-1:0.0: Freeing device [ 192.934823][ T5704] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 193.100324][ T5704] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 193.139536][ T5704] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 193.165309][ T5704] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 193.175997][ T5704] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.187855][ T5704] usb 3-1: config 0 descriptor?? [ 193.322462][ T9] usb 4-1: USB disconnect, device number 30 [ 193.425326][ T5738] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 193.585158][ T5738] usb 1-1: Using ep0 maxpacket: 16 [ 193.594517][ T5738] usb 1-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.614887][ T5738] usb 1-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 193.635361][ T5738] usb 1-1: config 0 interface 0 has no altsetting 0 [ 193.648788][ T5704] hid_parser_main: 220 callbacks suppressed [ 193.648807][ T5704] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 193.664025][ T5738] usb 1-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 193.664052][ T5704] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 193.684846][ T5704] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 193.693374][ T5738] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.693394][ T5704] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 193.713424][ T5704] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 193.721894][ T5704] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 193.729288][ T5704] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 193.730141][ T5738] usb 1-1: config 0 descriptor?? [ 193.752328][ T5704] cp2112 0003:10C4:EA90.0009: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 193.834948][ T9] usb 4-1: new low-speed USB device number 31 using dummy_hcd [ 193.997551][ T5738] usbhid 1-1:0.0: can't add hid device: -71 [ 194.004413][ T5738] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 194.014809][ T9] usb 4-1: Invalid ep0 maxpacket: 32 [ 194.036461][ T5738] usb 1-1: USB disconnect, device number 28 [ 194.043681][ T5704] cp2112 0003:10C4:EA90.0009: Part Number: 0x00 Device Version: 0x00 [ 194.132620][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.139088][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.154871][ T9] usb 4-1: new low-speed USB device number 32 using dummy_hcd [ 194.255118][ T5704] cp2112 0003:10C4:EA90.0009: error requesting SMBus config [ 194.266455][ T5704] cp2112 0003:10C4:EA90.0009: probe with driver cp2112 failed with error -5 [ 194.314932][ T9] usb 4-1: Invalid ep0 maxpacket: 32 [ 194.320734][ T9] usb usb4-port1: attempt power cycle [ 194.404937][ T10] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 194.564830][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 194.572611][ T10] usb 5-1: config 123 interface 0 has no altsetting 0 [ 194.587767][ T10] usb 5-1: New USB device found, idVendor=2040, idProduct=c612, bcdDevice=e5.51 [ 194.597271][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.606186][ T10] usb 5-1: Product: syz [ 194.611184][ T10] usb 5-1: Manufacturer: syz [ 194.616565][ T10] usb 5-1: SerialNumber: syz [ 194.684838][ T9] usb 4-1: new low-speed USB device number 33 using dummy_hcd [ 194.715574][ T9] usb 4-1: Invalid ep0 maxpacket: 32 [ 194.830307][ T10] usb 5-1: dvb_usb_v2: found a 'Hauppauge 126xxx' in warm state [ 194.841347][ T10] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 194.852560][ T10] dvbdev: DVB: registering new adapter (Hauppauge 126xxx) [ 194.860071][ T10] usb 5-1: media controller created [ 194.865548][ T9] usb 4-1: new low-speed USB device number 34 using dummy_hcd [ 194.881372][ T7644] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000018: 0000 [#1] SMP KASAN PTI [ 194.893256][ T7644] KASAN: null-ptr-deref in range [0x00000000000000c0-0x00000000000000c7] [ 194.901649][ T7644] CPU: 0 UID: 0 PID: 7644 Comm: syz.2.608 Tainted: G L syzkaller #0 PREEMPT(full) [ 194.912388][ T7644] Tainted: [L]=SOFTLOCKUP [ 194.916690][ T7644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 194.926729][ T7644] RIP: 0010:__mutex_lock+0x14e/0x1550 [ 194.932088][ T7644] Code: e0 f3 44 9a 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 40 12 00 00 83 3d 90 18 9a 0e 00 75 23 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 74 05 e8 56 1f 86 f6 4d 39 64 24 58 0f 85 6c 11 00 [ 194.951680][ T7644] RSP: 0018:ffffc90005a6f240 EFLAGS: 00010206 [ 194.957751][ T7644] RAX: 0000000000000018 RBX: 0000000000000000 RCX: ffffffff9a44f303 [ 194.965714][ T7644] RDX: 0000000000000000 RSI: ffffffff8e220c4d RDI: 00000000000000c0 [ 194.973673][ T7644] RBP: ffffc90005a6f3f8 R08: ffffc90005a6f367 R09: 0000000000000000 [ 194.981634][ T7644] R10: ffffc90005a6f340 R11: fffff52000b4de6d R12: 0000000000000068 [ 194.989596][ T7644] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff92000b4de60 [ 194.997558][ T7644] FS: 0000000000000000(0000) GS:ffff888125287000(0063) knlGS:00000000f4bf5b40 [ 195.006474][ T7644] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 195.013042][ T7644] CR2: 00000000800018c0 CR3: 0000000075ab8000 CR4: 00000000003526f0 [ 195.021007][ T7644] Call Trace: [ 195.024278][ T7644] [ 195.027276][ T7644] ? __mutex_lock+0x319/0x1550 [ 195.032052][ T7644] ? __mutex_trylock_common+0x158/0x260 [ 195.037597][ T7644] ? dvb_usbv2_generic_write+0x26/0x60 [ 195.043056][ T7644] ? __pfx___mutex_lock+0x10/0x10 [ 195.048072][ T7644] ? __pfx___mutex_lock+0x10/0x10 [ 195.053090][ T7644] ? __mutex_lock+0x319/0x1550 [ 195.057842][ T7644] dvb_usbv2_generic_write+0x26/0x60 [ 195.063118][ T7644] mxl111sf_ctrl_msg+0x160/0x2f0 [ 195.068058][ T7644] mxl111sf_write_reg+0xa9/0x1b0 [ 195.072991][ T7644] ? __pfx_mxl111sf_write_reg+0x10/0x10 [ 195.078528][ T7644] ? __ww_mutex_wound+0x7a/0x2e0 [ 195.083468][ T7644] mxl111sf_i2c_xfer+0x496/0x5100 [ 195.088477][ T7644] ? unwind_next_frame+0xa6/0x2550 [ 195.093585][ T7644] ? __pfx_mxl111sf_i2c_xfer+0x10/0x10 [ 195.099113][ T7644] ? is_bpf_text_address+0x292/0x2b0 [ 195.104385][ T7644] ? is_bpf_text_address+0x26/0x2b0 [ 195.109567][ T7644] ? kernel_text_address+0xa5/0xe0 [ 195.114671][ T7644] ? __kernel_text_address+0xd/0x30 [ 195.119861][ T7644] ? do_raw_spin_lock+0x12b/0x2f0 [ 195.124882][ T7644] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 195.130679][ T7644] ? __bfs+0x153/0x290 [ 195.134737][ T7644] ? __pfx_hlock_conflict+0x10/0x10 [ 195.139925][ T7644] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 195.145722][ T7644] ? check_path+0x21/0x40 [ 195.150042][ T7644] ? check_noncircular+0xda/0x150 [ 195.155059][ T7644] ? lockdep_unlock+0x5d/0xd0 [ 195.159718][ T7644] ? __lock_acquire+0x146e/0x2cf0 [ 195.164743][ T7644] __i2c_transfer+0x79a/0x1f70 [ 195.169495][ T7644] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 195.175290][ T7644] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 195.181088][ T7644] ? i2c_transfer+0xc8/0x2d0 [ 195.185666][ T7644] i2c_transfer+0x1cc/0x2d0 [ 195.190158][ T7644] i2cdev_ioctl_rdwr+0x460/0x740 [ 195.195085][ T7644] compat_i2cdev_ioctl+0x59f/0x5c0 [ 195.200186][ T7644] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 195.205809][ T7644] ? __fget_files+0x3a0/0x420 [ 195.210474][ T7644] ? __fget_files+0x2a/0x420 [ 195.215055][ T7644] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 195.220600][ T7644] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 195.226050][ T7644] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 195.232021][ T7644] ? kmem_cache_free+0x182/0x650 [ 195.236951][ T7644] ? __se_sys_futex_time32+0x3ab/0x440 [ 195.242403][ T7644] ? __pfx_do_sys_openat2+0x10/0x10 [ 195.247587][ T7644] ? __pfx___se_sys_futex_time32+0x10/0x10 [ 195.253379][ T7644] ? exc_page_fault+0x6a/0xc0 [ 195.258045][ T7644] __do_fast_syscall_32+0x229/0x6e0 [ 195.263228][ T7644] ? do_fast_syscall_32+0x33/0x70 [ 195.268235][ T7644] ? lockdep_hardirqs_on+0x7a/0x110 [ 195.273415][ T7644] ? asm_int80_emulation+0x1a/0x20 [ 195.278513][ T7644] ? do_int80_emulation+0x286/0x530 [ 195.283697][ T7644] ? trace_irq_disable+0x3b/0x140 [ 195.288712][ T7644] do_fast_syscall_32+0x33/0x70 [ 195.293547][ T7644] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 195.299862][ T7644] RIP: 0023:0xf708f01c [ 195.303915][ T7644] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 195.323501][ T7644] RSP: 002b:00000000f4bf550c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 195.331900][ T7644] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000000707 [ 195.339855][ T7644] RDX: 0000000080000500 RSI: 0000000000000000 RDI: 0000000000000000 [ 195.347810][ T7644] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 195.355763][ T7644] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 195.363718][ T7644] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 195.371677][ T7644] [ 195.374678][ T7644] Modules linked in: [ 195.379297][ T7644] ---[ end trace 0000000000000000 ]--- [ 195.389326][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 195.428436][ T9] usb 4-1: Invalid ep0 maxpacket: 32 [ 195.433995][ T9] usb usb4-port1: unable to enumerate USB device [ 195.441022][ T7644] RIP: 0010:__mutex_lock+0x14e/0x1550 [ 195.446609][ T7644] Code: e0 f3 44 9a 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 40 12 00 00 83 3d 90 18 9a 0e 00 75 23 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 74 05 e8 56 1f 86 f6 4d 39 64 24 58 0f 85 6c 11 00 [ 195.467880][ T7644] RSP: 0018:ffffc90005a6f240 EFLAGS: 00010206 [ 195.473956][ T7644] RAX: 0000000000000018 RBX: 0000000000000000 RCX: ffffffff9a44f303 [ 195.482038][ T7644] RDX: 0000000000000000 RSI: ffffffff8e220c4d RDI: 00000000000000c0 [ 195.490251][ T7644] RBP: ffffc90005a6f3f8 R08: ffffc90005a6f367 R09: 0000000000000000 [ 195.498332][ T7644] R10: ffffc90005a6f340 R11: fffff52000b4de6d R12: 0000000000000068 [ 195.506437][ T7644] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff92000b4de60 [ 195.514518][ T7644] FS: 0000000000000000(0000) GS:ffff888125387000(0063) knlGS:00000000f4bf5b40 [ 195.523630][ T7644] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 195.530323][ T7644] CR2: 00000000f547a4d8 CR3: 0000000075ab8000 CR4: 00000000003526f0 [ 195.538337][ T7644] Kernel panic - not syncing: Fatal exception [ 195.544711][ T7644] Kernel Offset: disabled [ 195.549016][ T7644] Rebooting in 86400 seconds..