last executing test programs: 4m56.275574387s ago: executing program 0 (id=1560): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x1, 0x7ffc1ffb}]}) r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffe, r0, 0x1) clock_settime(0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000580)={0x1, @vbi={0x4, 0x80000000, 0x4, 0x34325258, [0x88000], [0xaf09, 0x7], 0x1}}) ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f0000000480)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x1) listxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) openat$vcsu(0xffffff9c, &(0x7f0000000100), 0x30403, 0x0) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100010001000080020001003020c3030000000000000000000000804671285e4db0db23e3234a62d0d8669669187b640a2e932a650e432fd28d800062ae74d8d165fa2f41b2db4c30b698a505bb48ed07e04707ad8797c9a76c3a2df51658d2f23786ab4cde63773e2d7bd57f5453e40a01ef1967723ce1789b4579b409feb387a9bd76cc4a0ae3aee87682036b95f9ec8fb2ab678101ed9064cfe7dd56292ce6ca0ac1d26dd28995ed26690b2a2523f3fd0acceaf7da335414b8e5c6ad70f6"], 0x30}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000001240)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r6, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x3, 0x80, 0x0, 0x0, 0x11}, @ipv4=@generic={{0x6, 0x4, 0x1, 0x2b, 0xfc0, 0x68, 0x0, 0x60, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@timestamp={0x44, 0x4, 0xf0, 0x0, 0x1}]}}, "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"}}, 0xfce) 4m54.875768105s ago: executing program 0 (id=1564): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f0000000640)={'fscrypt:', @desc1}, &(0x7f0000000740)={0x0, "df22554d4bd697d3b71dc97e79138e96dbcbc52c409800c99f3a9f47290000bbfd12bd472aba817ec68a73a0fe9244ecffb25b4e7fef00", 0x2080034}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x33, 0x65, 0x38, 0x36, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778803000000dfeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000680), &(0x7f0000000200)={'fscrypt:', @auto=[0x64, 0x30, 0x30, 0x61, 0x30, 0x39, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61, 0x30, 0x66, 0x30, 0x30, 0x63, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x35, 0x39, 0x62, 0x66, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63, 0x36]}, &(0x7f0000000100)={0x0, "0011228dc41c601f2399aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x39, 0x51, 0x64, 0x62, 0x30, 0x64, 0x30, 0x30, 0x37]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff000000000000000000003500", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x63, 0x30, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x62, 0x30, 0x36, 0x31, 0x30, 0x0, 0x30, 0x33, 0x30, 0x30, 0x30, 0x31, 0x38, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778819aabbccddeeff00112233445566778899aabbccd9eeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x61, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x66, 0x33, 0x62, 0x31, 0x6e, 0x35, 0x30, 0x30, 0x38, 0x30, 0x35, 0x30, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aa8fccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbffffffff00000000445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000006c0)={'fscrypt:', @auto=[0x64, 0x62, 0x30, 0x38, 0x30, 0x551ff9832d60eb03, 0x63, 0xc5, 0x30, 0x34, 0x0, 0x66, 0x30, 0x67, 0x38, 0xf]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbecddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233449e32778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x34, 0x64, 0x36, 0x30, 0x30, 0x31, 0x30]}, &(0x7f00000007c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000004c0), 0x0, &(0x7f0000000100)={0x0, "001122f649b657778899aabbcc5deeff001122334455667788b9aabbccddeeff001157a1000066778899aa000000000000000000000866578899aabbccddeeff"}, 0x48, r0) add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='c', 0x1, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x36, 0x64, 0x31, 0x3, 0x34, 0x34, 0x62, 0x36, 0x30, 0x63, 0x9c0ab4d12417f6d4, 0x30, 0x63, 0x61, 0x39]}, &(0x7f00000001c0)={0x0, "e9fc07c1d50135a0b736d87533c5799e064527252c7b54810a1501a7600733ea10dba9e42740c4f4d1d7ca77336ab2098626b979a876efcd4b87419c301bf79f", 0x3b}, 0x48, r0) 4m54.686108978s ago: executing program 0 (id=1566): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev\x00') read$FUSE(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0) recvmsg$unix(r0, &(0x7f0000001b40)={&(0x7f00000002c0)=@abs, 0x6e, &(0x7f00000019c0)=[{&(0x7f0000000340)=""/6, 0x6}, {&(0x7f0000000380)=""/150, 0x96}, {&(0x7f0000000480)=""/57, 0x39}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/15, 0xf}, {&(0x7f0000001880)=""/214, 0xd6}, {&(0x7f0000001980)=""/7, 0x7}], 0x7, &(0x7f0000001a00)=[@cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}], 0x11c}, 0x10023) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r4 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xa2) write$FUSE_INIT(r4, &(0x7f0000000140)={0x5e}, 0xffd3) write$FUSE_NOTIFY_INVAL_ENTRY(r4, 0x0, 0x2e) read$FUSE(r4, &(0x7f0000004ac0)={0x2020}, 0x2020) openat$kvm(0xffffffffffffff9c, 0x0, 0x101000, 0x0) unshare(0x28000600) r5 = socket$l2tp6(0xa, 0x2, 0x73) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4ea4, 0x10, @dev={0xfe, 0x80, '\x00', 0x37}, 0x8}, 0x1c) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000002, 0x200000005c832, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002180)=ANY=[@ANYBLOB="240000000f0601010000000000800000020000e75f309667432ffd36667be409000001002081804a5dbc76b4d8a7fb8800e6800a66ef481aed041295c09333d6845a9b02700cc51f1344ec6c3d12e9fc22779f2e5f2c6bf2e8053233196d4f9feeed7959e8c294cd042a8ef117673594e12e5b28fe25678c8e8a408f12d8f186cfc5a1409f9c7f809168467fb7d9f4915a7fc96500d01327152e81fe168ec03f82ac005169fb908331eeca90abc69f"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40040) syz_open_dev$mouse(&(0x7f0000000000), 0xff, 0x501002) 4m53.560457972s ago: executing program 0 (id=1569): openat$random(0xffffff9c, &(0x7f0000000000), 0x8000, 0x0) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xf7f0, 0x400, 0x2, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) io_uring_enter(r0, 0x4971, 0x7f55, 0x4b, 0x0, 0x0) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x1234, 0x0, @mcast1}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file0\x00', 0xc004, 0x0, 0x0, 0x0, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x100000, 0x0) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) setsockopt$inet6_int(r6, 0x29, 0x10, &(0x7f00000000c0)=0x40, 0x4) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r9, 0x5414, &(0x7f0000000000)={0x1, 0x84, 0xb, 0xa}) r10 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$inet(r10, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@ip_tos_int={{0x10, 0x110, 0xd}}, @ip_tos_u8={{0xd, 0x0, 0x1, 0xfa}}], 0x20, 0x4c00}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r12 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r12, &(0x7f0000000080)={0x1d, r11}, 0x10) r13 = socket(0x10, 0x3, 0x0) write(r13, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) r14 = openat$cgroup_int(r6, &(0x7f0000000040)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) r15 = socket$inet6(0xa, 0x1, 0x9) ppoll(&(0x7f00000001c0)=[{r7, 0x15}, {r14, 0x1014}, {r15}], 0x3, 0x0, 0x0, 0x0) r16 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000004a40), 0x2, 0x0) ioctl$VIDIOC_S_PARM(r16, 0xc0cc5616, &(0x7f0000004cc0)={0x4, @output={0x0, 0x1, {0xfffff000, 0x2}, 0xed8d, 0x8001}}) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f00000002c0)=0x20000001) 4m53.189856682s ago: executing program 0 (id=1571): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407c2c25010000000000010902270001010080fa0904000003ffffff0007058102000200070502020002000705830340"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r0, r2, 0x0) futex(&(0x7f00000000c0)=0x1, 0x8, 0x0, &(0x7f0000000100)={0x0, 0x989680}, &(0x7f0000000180), 0x1be) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in=@dev={0xac, 0x14, 0x14, 0x26}, 0x4, 0x79b0, 0x4e21, 0x2, 0x0, 0x0, 0xa0, 0x21, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x20}, 0x4d6, 0x32}, @in=@multicast2, {0x200, 0xe839, 0x0, 0x9, 0xffffffff00000001, 0x3, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x70}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {0x0, 0x7}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8000881}, 0x2014) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, &(0x7f0000000000)=0x6568, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}, 0x7fc00000}], 0x1, 0x102, 0x0) 4m53.064430786s ago: executing program 0 (id=1572): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="60040000", @ANYRES16=r1, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r2, @ANYBLOB="08000c006400000008000d0002000000080026006c09000028000e0080000000ffffffffffff020000000000020000000000000000000000000064003104000004043381", @ANYBLOB="040001000400010004000100040001"], 0x460}}, 0x0) 4m52.681286845s ago: executing program 32 (id=1572): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="60040000", @ANYRES16=r1, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r2, @ANYBLOB="08000c006400000008000d0002000000080026006c09000028000e0080000000ffffffffffff020000000000020000000000000000000000000064003104000004043381", @ANYBLOB="040001000400010004000100040001"], 0x460}}, 0x0) 7.383690766s ago: executing program 5 (id=3086): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) 7.174139128s ago: executing program 5 (id=3087): r0 = socket$alg(0x26, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x101002, 0x104) write(r1, &(0x7f0000000180)='10000', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x0, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000001000)={{0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x2}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x9, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0xb, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xffff}, {0x0, 0xffff}, 0x80000001}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000002000)={[], 0x0, 0x20002}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = fsopen(&(0x7f0000000000)='f2fs\x00', 0x1) close(r1) fsconfig$FSCONFIG_SET_BINARY(r6, 0x2, 0x0, &(0x7f0000000200)='\t', 0x1) write(r2, &(0x7f0000000200)='1', 0x1) socket$netlink(0x10, 0x3, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r7, &(0x7f0000000280)='0', 0x1) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r8 = accept4(r0, 0x0, 0x0, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r10, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r10, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r9, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r10, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmsg$alg(r8, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x71c6}], 0x18}, 0x2c000044) 6.608588358s ago: executing program 5 (id=3088): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x100) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3b, 0x301, 0x270bd24, 0xa5dfdbfa, {0xd}}, 0x14}}, 0x8) syz_emit_ethernet(0x3a9, &(0x7f0000000440)={@random="61fe71b72b5f", @link_local={0x17, 0x80, 0xc2, 0x2, 0x9}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d23396", 0x373, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2, 0x11, 0x0, [{0x3, 0xa, "a78ce5400659808000000003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42c60a5c15b37adac15084dbaf736b41e5af2602"}, {0x0, 0x1, "ffffffffffffff8026000400"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d036397a0acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x18, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a000023f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x5, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c764c2d227a83b89483b1084743474677e45e65eb27a5c8d989417019f619f91394c02bcfbbb7d71138537d68f2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x5, "fcc1876d4ec1876d4e6fa3ce2dfdb43a6f022059fe5c2d6b3d9363ed09bd9281c9fe68a3000000006f00"}, {0x5, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1eb91a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d96967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c000000000000000000"}, {0x0, 0x5, "090000000900000036da018dff16e70b8b1400000000e18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000400100018df0000a4e2000001000000", @ANYRES32, @ANYBLOB="803e4360d4ccc8a55d00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="080000000400"/27], 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000010c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000fedbdf254f00000008000300", @ANYRES32=r3, @ANYBLOB="04007a805c007a80140001000c4d2d65322892292fa97a71a9caa51c0c00030025477cf9d78492"], 0x7c}, 0x1, 0x0, 0x0, 0x2}, 0x20008000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x84000}, 0x40050) socket(0x2, 0x80000, 0x6) 6.039993604s ago: executing program 4 (id=3090): r0 = socket$alg(0x26, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x101002, 0x104) write(r1, &(0x7f0000000180)='10000', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x0, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000001000)={{0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x2}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x9, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0xb, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xffff}, {0x0, 0xffff}, 0x80000001}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000002000)={[], 0x0, 0x20002}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = fsopen(&(0x7f0000000000)='f2fs\x00', 0x1) close(r1) fsconfig$FSCONFIG_SET_BINARY(r6, 0x2, 0x0, &(0x7f0000000200)='\t', 0x1) write(r2, &(0x7f0000000200)='1', 0x1) socket$netlink(0x10, 0x3, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r7, &(0x7f0000000280)='0', 0x1) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r9, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r8, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r9, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r8, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 5.94989048s ago: executing program 5 (id=3091): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0xa, 0xfc, 0x0, 0x7, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in=@empty, @in=@rand_addr=0x64010100, 0x2c, 0x30}]}, 0x38}}, 0x40408c0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) openat$rfkill(0xffffff9c, &(0x7f00000002c0), 0x0, 0x0) unshare(0x20000400) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800, 0x8, 0x0, 0x4}, 0x0, &(0x7f0000000240)={0x1f, 0x3}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) syz_usb_connect$uac3(0x5, 0xba, &(0x7f0000000140)=ANY=[@ANYBLOB="12011001000000080c2018104000010203010902a8000301081001080b0001010130350904000000010130000a240108440005000000142402020404060409000000030080000200070013240303050404050200000000ff00ff037f00132403040304040410090000000600ff7f0d0009040100"], 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000060a010400004000000000000a0000010900010073797a3100000000200004801c000180090001007866726d000000000c00028008000240000000060900020073797a3200000000140000001100015c00000000000000000000000a"], 0x74}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) listen(r1, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r4, 0x18000000000002a0, 0x42, 0xfffffffffffffdf6, &(0x7f0000000500)="b9ff0300600d698cb89e14f086dd1f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x5c, 0xc0, &(0x7f0000000000), &(0x7f0000002c80)="8dc92a8ff39080a675b6565efa3ed46f2a2756e43abbfd8c44686c04d6a0c42f2599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc5d2d3fa40e054d38d49dfbebc2f137fc7110", 0x4}, 0x48) r5 = socket(0x40000000015, 0x805, 0x0) getsockopt(r5, 0x114, 0x2718, 0x0, &(0x7f00000000c0)) r6 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c7", 0x1}], 0x1, 0x0, 0x0, 0x8054}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000240)}], 0x1, 0x0, 0x0, 0x5c656f61393ffcde}}], 0x2, 0x4000045) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x2}, 0x8) close(r6) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) 5.24826761s ago: executing program 4 (id=3095): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev\x00') read$FUSE(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0) recvmsg$unix(r0, 0x0, 0x10023) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r4 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xa2) write$FUSE_INIT(r4, &(0x7f0000000140)={0x5e}, 0xffd3) write$FUSE_NOTIFY_INVAL_ENTRY(r4, 0x0, 0x2e) read$FUSE(r4, &(0x7f0000004ac0)={0x2020}, 0x2020) openat$kvm(0xffffffffffffff9c, 0x0, 0x101000, 0x0) unshare(0x28000600) r5 = socket$l2tp6(0xa, 0x2, 0x73) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4ea4, 0x10, @dev={0xfe, 0x80, '\x00', 0x37}, 0x8}, 0x1c) socket$inet6(0xa, 0x80000, 0x9) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000002, 0x200000005c832, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002180)=ANY=[@ANYBLOB="240000000f0601010000000000800000020000e75f309667432ffd36667be409000001002081804a5dbc76b4d8a7fb8800e6800a66ef481aed041295c09333d6845a9b02700cc51f1344ec6c3d12e9fc22779f2e5f2c6bf2e8053233196d4f9feeed7959e8c294cd042a8ef117673594e12e5b28fe25678c8e8a408f12d8f186cfc5a1409f9c7f809168467fb7d9f4915a7fc96500d01327152e81fe168ec03f82ac005169fb908331eeca90abc69f"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40040) syz_open_dev$mouse(&(0x7f0000000000), 0xff, 0x501002) 5.199480284s ago: executing program 2 (id=3096): openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x88a00, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) pselect6(0x40, &(0x7f0000000240)={0xffe0, 0x0, 0x1ff, 0x79, 0xfffffffffffffffc, 0x8000, 0x2, 0x10001}, 0x0, &(0x7f00000002c0)={0x3ff, 0xe, 0xffffffffffffffff, 0x9, 0x0, 0xd, 0x80000006}, 0x0, 0x0) 4.939727216s ago: executing program 3 (id=3097): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x38, r1, 0x1, 0x72bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1ef, 0x1, 0x1, 0xffff, 0x5, 0x2, 0x7, 0xb2a5]}}]}]}]}, 0x38}, 0x1, 0x300, 0x0, 0x40000}, 0x0) 4.886350801s ago: executing program 2 (id=3098): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) 4.76730004s ago: executing program 3 (id=3099): r0 = socket$alg(0x26, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x101002, 0x104) write(r1, &(0x7f0000000180)='10000', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x0, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000001000)={{0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x2}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x9, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0xb, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xffff}, {0x0, 0xffff}, 0x80000001}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000002000)={[], 0x0, 0x20002}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = fsopen(&(0x7f0000000000)='f2fs\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r6, 0x2, 0x0, &(0x7f0000000200)='\t', 0x1) write(r2, &(0x7f0000000200)='1', 0x1) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0600100003000000", @ANYRESDEC=r1, @ANYRES32=r4], 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x95) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r8, &(0x7f0000000280)='0', 0x1) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r9 = accept4(r0, 0x0, 0x0, 0x0) r10 = socket$pppl2tp(0x18, 0x1, 0x1) r11 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r11, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r11, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r10, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r11, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r10, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) sendmsg$alg(r9, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x71c6}], 0x18}, 0x2c000044) 4.689476555s ago: executing program 2 (id=3100): r0 = socket$alg(0x26, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x101002, 0x104) write(r1, &(0x7f0000000180)='10000', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x0, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000001000)={{0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x2}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x9, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0xb, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xffff}, {0x0, 0xffff}, 0x80000001}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000002000)={[], 0x0, 0x20002}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = fsopen(&(0x7f0000000000)='f2fs\x00', 0x1) close(r1) fsconfig$FSCONFIG_SET_BINARY(r6, 0x2, 0x0, &(0x7f0000000200)='\t', 0x1) write(r2, &(0x7f0000000200)='1', 0x1) socket$netlink(0x10, 0x3, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r7, &(0x7f0000000280)='0', 0x1) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r8 = accept4(r0, 0x0, 0x0, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r10, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r10, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r9, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r10, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmsg$alg(r8, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x71c6}], 0x18}, 0x2c000044) 4.39684507s ago: executing program 2 (id=3101): syz_emit_ethernet(0x17b, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6000000000000000000005000000000000000000000000bbff02000000000000000100004e227d3e0f1507"], 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xd1, 0x0, 0x0) r1 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000000c0)={0x3f, 0x0, 0x1}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000100), &(0x7f0000001140), 0x2, 0x2) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ipv6_route\x00') read$FUSE(r4, &(0x7f00000061c0)={0x2020}, 0x2020) pread64(r4, &(0x7f0000003b00)=""/195, 0xc3, 0x591f) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) unshare(0x2000200) unshare(0x40000200) recvmmsg(r2, &(0x7f0000006180)=[{{&(0x7f0000000380)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f00000034c0)=[{&(0x7f0000001600)=""/184, 0xb8}, {&(0x7f00000013c0)=""/148, 0x94}, {&(0x7f0000001480)=""/159, 0x9f}, {&(0x7f0000001840)=""/246, 0xf6}, {&(0x7f0000001700)=""/137, 0x89}, {&(0x7f0000002340)=""/4084, 0xff4}, {&(0x7f00000006c0)=""/215, 0xd7}, {&(0x7f0000000280)=""/98, 0x62}], 0x8}, 0x9}, {{&(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000004900), 0x0, &(0x7f0000004980)=""/64, 0x40}, 0xfffff33f}, {{&(0x7f0000005ec0)=@generic, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000300)=""/105, 0x69}], 0x1, &(0x7f0000006100)=""/81, 0x51}, 0x10}], 0x3, 0x12002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x6921, &(0x7f0000000640)={0x0, 0xe749, 0x400, 0xffffffff, 0xfffffffd}, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000000)) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect(0x6, 0x0, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r5, &(0x7f00000015c0), 0x0, 0xf2, 0x207fff) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r6, 0x0) ioctl$BLKZEROOUT(r6, 0x127f, &(0x7f0000000000)={0x600, 0x1000000}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000240), 0x3af4701e) r8 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r8, 0xc2c45512, &(0x7f0000000340)={{0x3, 0x0, 0x0, 0xfffffffc, 'syz0\x00'}, 0x0, [0x0, 0xffffffff, 0xffff, 0x0, 0xfffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4000, 0x200080, 0x4000, 0x3, 0x8, 0xfffffffc, 0xfffffffe, 0x5, 0x0, 0x0, 0x0, 0x1fb, 0x0, 0x0, 0xfffffffe, 0x0, 0x6, 0x0, 0x80000, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0xfffffffe, 0x1, 0x20, 0x401, 0x400, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffc, 0x0, 0xfffdffc7, 0x8, 0x0, 0x3, 0x401, 0x5, 0x3, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffc, 0xfffffffd, 0x3, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x65, 0x80000001, 0x0, 0x200, 0x5, 0xf1e9, 0x0, 0x0, 0x2147, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x800, 0x0, 0x0, 0x1ff, 0xfffffffc, 0x20000000, 0x0, 0x8, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0x800, 0x1, 0x0, 0x4, 0x0, 0x4000000, 0x0, 0x0, 0xfffffffe, 0x200040, 0x0, 0x0, 0xffffffff]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28012, r7, 0xffffc000) 4.279694732s ago: executing program 4 (id=3102): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x100) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3b, 0x301, 0x270bd24, 0xa5dfdbfa, {0xd}}, 0x14}}, 0x8) syz_emit_ethernet(0x3a9, &(0x7f0000000440)={@random="61fe71b72b5f", @link_local={0x17, 0x80, 0xc2, 0x2, 0x9}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d23396", 0x373, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2, 0x11, 0x0, [{0x3, 0xa, "a78ce5400659808000000003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42c60a5c15b37adac15084dbaf736b41e5af2602"}, {0x0, 0x1, "ffffffffffffff8026000400"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d036397a0acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x18, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a000023f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x5, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c764c2d227a83b89483b1084743474677e45e65eb27a5c8d989417019f619f91394c02bcfbbb7d71138537d68f2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x5, "fcc1876d4ec1876d4e6fa3ce2dfdb43a6f022059fe5c2d6b3d9363ed09bd9281c9fe68a3000000006f00"}, {0x5, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1eb91a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d96967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c000000000000000000"}, {0x0, 0x5, "090000000900000036da018dff16e70b8b1400000000e18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="010000000400100018df0000a4e2000001000000", @ANYRES32, @ANYBLOB="803e4360d4ccc8a55d00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="080000000400"/27], 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000010c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000fedbdf254f00000008000300", @ANYRES32=r3, @ANYBLOB="04007a805c007a80140001000c4d2d65322892292fa97a71a9caa51c0c00030025477cf9d78492"], 0x7c}, 0x1, 0x0, 0x0, 0x2}, 0x20008000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x84000}, 0x40050) socket(0x2, 0x80000, 0x6) 3.803193694s ago: executing program 4 (id=3103): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev\x00') read$FUSE(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0) recvmsg$unix(r0, &(0x7f0000001b40)={&(0x7f00000002c0)=@abs, 0x6e, &(0x7f00000019c0)=[{&(0x7f0000000340)=""/6, 0x6}, {&(0x7f0000000380)=""/150, 0x96}, {&(0x7f0000000480)=""/57, 0x39}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/15, 0xf}, {&(0x7f0000001980)=""/7, 0x7}], 0x6, &(0x7f0000001a00)=[@cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}], 0x11c}, 0x10023) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r4 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xa2) write$FUSE_INIT(r4, &(0x7f0000000140)={0x5e}, 0xffd3) write$FUSE_NOTIFY_INVAL_ENTRY(r4, 0x0, 0x2e) read$FUSE(r4, &(0x7f0000004ac0)={0x2020}, 0x2020) openat$kvm(0xffffffffffffff9c, 0x0, 0x101000, 0x0) unshare(0x28000600) r5 = socket$l2tp6(0xa, 0x2, 0x73) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4ea4, 0x10, @dev={0xfe, 0x80, '\x00', 0x37}, 0x8}, 0x1c) socket$inet6(0xa, 0x80000, 0x9) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000002, 0x200000005c832, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002180)=ANY=[@ANYBLOB="240000000f0601010000000000800000020000e75f309667432ffd36667be409000001002081804a5dbc76b4d8a7fb8800e6800a66ef481aed041295c09333d6845a9b02700cc51f1344ec6c3d12e9fc22779f2e5f2c6bf2e8053233196d4f9feeed7959e8c294cd042a8ef117673594e12e5b28fe25678c8e8a408f12d8f186cfc5a1409f9c7f809168467fb7d9f4915a7fc96500d01327152e81fe168ec03f82ac005169fb908331eeca90abc69f"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40040) syz_open_dev$mouse(&(0x7f0000000000), 0xff, 0x501002) 2.922531692s ago: executing program 4 (id=3104): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYBLOB='\a'], 0x0) 2.84107296s ago: executing program 5 (id=3105): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x3, 0x0) read$FUSE(r0, &(0x7f00000024c0)={0x2020}, 0xfffffec1) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xf88e470f}]}) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x101880, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000080)={[0xeeee0000, 0xeeef0000, 0xdddd0000, 0xb000], 0x2000000db, 0xc}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0x4000, 0x4, 0x5, 0x0, 0x8, 0x3, 0xa, 0x7e, 0x4, 0x11, 0x5, 0x80204}, {0x804, 0x1, 0x1, 0x45, 0x7, 0x2, 0x1, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0x1, 0x3, 0x38, 0x5, 0x84, 0x7, 0x3, 0x50, 0x0, 0x70, 0x4, 0x5}], 0xffffffff}) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x48000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x5, 0xfffffffffffffffd, 0xc595, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001d00070f00020000000000f307000000", @ANYRES32=r5, @ANYBLOB='\x00\x00g\x00\b\x00\b'], 0x24}, 0x1, 0x0, 0x0, 0x4040080}, 0x40800) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2.732499033s ago: executing program 5 (id=3108): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {}, {0x7, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_blackhole={0xe}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}]}, 0x3c}}, 0x4000010) r2 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000102505a1a44000000001010902440001010000"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac2(0xffffffffffffffff, &(0x7f0000000240)={0xc, &(0x7f0000000100)={0x20, 0x23, 0xd3, {0xd3, 0x22, "948c29da04698449ffea18eccfb8c1adaca7749123e37b4c663a419acbf2c79fea03551b54e8660e1fbb3d167211181c303b6793144248e74097b9af82a49a8e1a752b24608c0059de576cbaa1b6bb018c70fde4daa1ddbdf114d8723fc49516575415b7191838687c273d3408143fcb207da3c2fedf55e1dd1e2c4fff8a360c18df9d76c99e000000000000073f9992b189adc6a07ab3acec2ab72161d819c5f10b855116b77ac359cde158879b2639c4642a9c22b36ed11757c59a95a35a2dcc565fbf4f62d4052c4d636110c2a50cee"}}, &(0x7f0000000200)={0x0, 0x3, 0x1d, @string={0x1d, 0x3, "391b603d347603202234e1e19ab33036e8ba6cf28adb0372da7a03"}}}, &(0x7f00000005c0)={0x24, &(0x7f00000007c0)={0x0, 0x11}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x80}, &(0x7f00000003c0)={0x20, 0x81, 0x2, "e1b2"}, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, &(0x7f0000000540)={0x20, 0x84, 0x1, 'y'}, 0x0}) r3 = socket(0x10, 0x2, 0x0) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x3000000}, 0x8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @empty}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x60}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe800000000000000000000000000002080004", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c00010000020101"], 0x60}}, 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000500)={0x0, 0x3, 0x1a, {0xfffffffffffffea4}}}, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) poll(&(0x7f00000002c0)=[{r6}, {r5, 0x400}, {r4, 0x2002}, {r4, 0x6281}], 0x4, 0x8000007) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write(r2, 0x82, 0xfffffcc6, &(0x7f0000000400)="16688a4a3f1cd2db03000007000000000d7c36e51e67f08f961d2fc0c37d7c8c2136536697a794f470c5f44c560dedb1b190fa63c35a3c256fb8b4e2542f15f331") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x40400a0}, 0x40040) 2.337871347s ago: executing program 1 (id=3111): fcntl$setown(0xffffffffffffffff, 0x8, 0x0) (async, rerun: 32) tkill(0x0, 0x800) (async, rerun: 32) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000000440)=0x0) timer_settime(r1, 0x0, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) timer_gettime(r1, &(0x7f00000000c0)) (async, rerun: 64) timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000040)=0x0) (rerun: 64) r3 = memfd_secret(0x80000) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x26) ioctl$KVM_CAP_PMU_CAPABILITY(r4, 0x4068aea3, &(0x7f00000001c0)={0xd4, 0x0, 0x80000000040}) timer_settime(r2, 0x1, &(0x7f0000000140)={{}, {0x0, 0x989680}}, 0x0) (async) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000380)={{0x1, 0x7ff, 0x4b, 0x8009}, 'syz0\x00', 0x8}) (async) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) (async) ioctl$UI_SET_PHYS(r5, 0x4008556c, 0x0) unshare(0x64000600) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) (async, rerun: 64) close_range(r5, r4, 0x2) (async, rerun: 64) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 2.024876817s ago: executing program 1 (id=3112): r0 = socket$alg(0x26, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x101002, 0x104) write(r1, &(0x7f0000000180)='10000', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x0, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000001000)={{0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x2}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x9, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x3, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0xb, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xffff}, {0x0, 0xffff}, 0x80000001}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000002000)={[], 0x0, 0x20002}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = fsopen(&(0x7f0000000000)='f2fs\x00', 0x1) close(r1) fsconfig$FSCONFIG_SET_BINARY(r6, 0x2, 0x0, &(0x7f0000000200)='\t', 0x1) write(r2, &(0x7f0000000200)='1', 0x1) socket$netlink(0x10, 0x3, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r7, &(0x7f0000000280)='0', 0x1) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r8 = accept4(r0, 0x0, 0x0, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r10, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r10, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r9, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r10, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmsg$alg(r8, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x71c6}], 0x18}, 0x2c000044) 1.821998015s ago: executing program 1 (id=3113): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x2) syz_emit_ethernet(0x7a, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd61a7000200442f00fe8000000000000000000000000000bbfe80000000000000000000000000008a0c2088be0000000201009900000086dd080088be000000031c0885140100000000007b40080022eb0000000223022309020000008000000300ebb41b"], 0x0) r0 = syz_ublk_setup_io_uring(0x81d, &(0x7f0000000040)={0x0, 0x30b5, 0x100, 0x2, 0x373}, &(0x7f00000005c0)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe2a, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x100, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb351, 0x1400, 0x2103, 0x2bb, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x2000, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x5e8, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x6, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) close(0xffffffffffffffff) 1.723863783s ago: executing program 4 (id=3114): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {}, {0x7, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_blackhole={0xe}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}]}, 0x3c}}, 0x4000010) r2 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000102505a1a44000000001010902440001010000"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac2(0xffffffffffffffff, &(0x7f0000000240)={0xc, &(0x7f0000000100)={0x20, 0x23, 0xd3, {0xd3, 0x22, "948c29da04698449ffea18eccfb8c1adaca7749123e37b4c663a419acbf2c79fea03551b54e8660e1fbb3d167211181c303b6793144248e74097b9af82a49a8e1a752b24608c0059de576cbaa1b6bb018c70fde4daa1ddbdf114d8723fc49516575415b7191838687c273d3408143fcb207da3c2fedf55e1dd1e2c4fff8a360c18df9d76c99e000000000000073f9992b189adc6a07ab3acec2ab72161d819c5f10b855116b77ac359cde158879b2639c4642a9c22b36ed11757c59a95a35a2dcc565fbf4f62d4052c4d636110c2a50cee"}}, &(0x7f0000000200)={0x0, 0x3, 0x1d, @string={0x1d, 0x3, "391b603d347603202234e1e19ab33036e8ba6cf28adb0372da7a03"}}}, &(0x7f00000005c0)={0x24, &(0x7f00000007c0)={0x0, 0x11}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x80}, &(0x7f00000003c0)={0x20, 0x81, 0x2, "e1b2"}, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, &(0x7f0000000540)={0x20, 0x84, 0x1, 'y'}, 0x0}) r3 = socket(0x10, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x3000000}, 0x8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @empty}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c"], 0x60}}, 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000500)={0x0, 0x3, 0x1a, {0xfffffffffffffea4}}}, 0x0) 1.612741616s ago: executing program 1 (id=3115): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev\x00') read$FUSE(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0) recvmsg$unix(r0, &(0x7f0000001b40)={&(0x7f00000002c0)=@abs, 0x6e, &(0x7f00000019c0)=[{&(0x7f0000000340)=""/6, 0x6}, {&(0x7f0000000380)=""/150, 0x96}, {&(0x7f0000000480)=""/57, 0x39}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/15, 0xf}, {0x0}, {&(0x7f0000001980)=""/7, 0x7}], 0x7, &(0x7f0000001a00)=[@cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x18}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}, @cred={{0x18}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x18}}], 0x11c}, 0x10023) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r4 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xa2) write$FUSE_INIT(r4, &(0x7f0000000140)={0x5e}, 0xffd3) write$FUSE_NOTIFY_INVAL_ENTRY(r4, 0x0, 0x2e) read$FUSE(r4, &(0x7f0000004ac0)={0x2020}, 0x2020) openat$kvm(0xffffffffffffff9c, 0x0, 0x101000, 0x0) unshare(0x28000600) r5 = socket$l2tp6(0xa, 0x2, 0x73) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4ea4, 0x10, @dev={0xfe, 0x80, '\x00', 0x37}, 0x8}, 0x1c) socket$inet6(0xa, 0x80000, 0x9) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000002, 0x200000005c832, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002180)=ANY=[@ANYBLOB="240000000f0601010000000000800000020000e75f309667432ffd36667be409000001002081804a5dbc76b4d8a7fb8800e6800a66ef481aed041295c09333d6845a9b02700cc51f1344ec6c3d12e9fc22779f2e5f2c6bf2e8053233196d4f9feeed7959e8c294cd042a8ef117673594e12e5b28fe25678c8e8a408f12d8f186cfc5a1409f9c7f809168467fb7d9f4915a7fc96500d01327152e81fe168ec03f82ac005169fb908331eeca90abc69f"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40040) syz_open_dev$mouse(&(0x7f0000000000), 0xff, 0x501002) 1.572985618s ago: executing program 3 (id=3116): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x11, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x18}, 0xc044) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'pimreg1\x00', &(0x7f0000000100)=@ethtool_rxfh_indir={0x39, 0x4, [0x0, 0x0, 0x8b, 0xc]}}) r1 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x80081, 0x0) write$uinput_user_dev(r1, &(0x7f0000000840)={'syz0\x00', {0x1, 0x8000, 0x9, 0xac03}, 0x40, [0x10, 0x8000, 0x7, 0x7, 0xffcf, 0x7, 0x8, 0x1ff, 0xe95ab6b, 0x1, 0xfffffe5d, 0x0, 0x8001, 0x1, 0xfffffffd, 0x8000, 0x4, 0x1, 0x2, 0x6, 0x3, 0x4, 0x6a90, 0x0, 0x4e3, 0x1, 0x7fff, 0x5, 0x0, 0x2, 0x0, 0xe, 0x8000, 0x1, 0x9d, 0x10000080, 0x7, 0x3, 0xbc49, 0x696, 0x8000, 0x1, 0xb, 0x7, 0x7, 0x7, 0x2, 0x3, 0x3, 0xff, 0x1, 0x4, 0x5, 0xffffffff, 0x0, 0x8, 0x7ff, 0x4, 0x8, 0xfffff7fb, 0x3, 0x100, 0x5, 0xb], [0x7, 0x9d2, 0x7fffffff, 0x800, 0x3, 0x9, 0x7, 0x8, 0x5, 0x80000001, 0x80008, 0x40, 0x6, 0x8, 0x80001005, 0x4, 0x0, 0xd, 0xfffffff7, 0x3, 0x100000, 0x800, 0x2, 0x3, 0x7, 0x66fe, 0x6, 0x5, 0xe03, 0x3ff, 0x10004, 0xfffffc04, 0x1, 0x4, 0x3ff, 0x6, 0x7f, 0x3, 0xd08, 0x1, 0x1, 0x22, 0xfc000000, 0x0, 0x1, 0x4, 0xe37, 0x3, 0xfffffff8, 0x1, 0xe8, 0xffff8000, 0x2, 0xb, 0x4, 0x6, 0xbdc, 0x3e6, 0x2, 0x9, 0x0, 0x8, 0x7fffffff, 0x6], [0x1, 0xd, 0x7, 0x590, 0xfffffff, 0xb0, 0x8, 0x5, 0x2, 0x4, 0x9, 0x7, 0x7, 0x3, 0x4, 0xe, 0x8001, 0xfffffffe, 0x0, 0x9, 0x200, 0xbf1c, 0x79fc, 0x1, 0xf9, 0xffffff26, 0x0, 0xfffffff7, 0x9, 0x1, 0x391a0b76, 0x2, 0x8000, 0x10, 0x5, 0x7, 0x1, 0x10, 0xb8, 0x6, 0x80000001, 0x8001, 0x3, 0x1b9, 0x8a7, 0x1, 0x8, 0x3, 0x1, 0x1, 0x4, 0x3, 0x74da, 0xec9, 0x140, 0x5, 0x3, 0x6, 0x1, 0x7fff, 0xa, 0x86c, 0x7, 0x1], [0x0, 0x20f, 0x80000001, 0x200, 0x0, 0x3, 0xb, 0x2, 0xffff, 0x0, 0x9, 0x80000000, 0xffff, 0xb7, 0x6, 0xfffffff1, 0xffff, 0xc, 0x8000, 0xfffffffe, 0xe, 0x3ff, 0x1, 0xdf76, 0x63, 0xa, 0x7f, 0x100, 0x40, 0x3, 0x2, 0x8, 0x8, 0x7, 0x4, 0x2170, 0x0, 0x2, 0x6b2, 0x9, 0xcd5e, 0x59, 0x9, 0x400, 0x6, 0x6, 0x5, 0x1, 0x20, 0x4, 0xd, 0x6, 0x1, 0x6, 0x2, 0x2, 0x9, 0xfff, 0x5, 0x3, 0x8, 0x1, 0x5, 0xfffffffb]}, 0x45c) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r3, 0xae80, 0x2000) 1.140460806s ago: executing program 2 (id=3117): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@dellink={0x34, 0x11, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x8500, 0x2}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'syzkaller0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 988.733358ms ago: executing program 2 (id=3118): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) openat$rfkill(0xffffff9c, &(0x7f00000002c0), 0x0, 0x0) unshare(0x20000400) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800, 0x8, 0x0, 0x4}, 0x0, &(0x7f0000000240)={0x1f, 0x3}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) syz_usb_connect$uac3(0x5, 0xba, &(0x7f0000000140)=ANY=[@ANYBLOB="12011001000000080c2018104000010203010902a8000301081001080b0001010130350904000000010130000a240108440005000000142402020404060409000000030080000200070013240303050404050200000000ff00ff037f00132403040304040410090000000600ff7f0d0009040100"], 0x0) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000300)=ANY=[@ANYBLOB="12010003000000102505a8ea7d337ae4b6ae43eaa440000176030109651b000101afe003090400080107010300"], &(0x7f0000000440)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x310, 0x2, 0xce, 0x6, 0xff, 0xa}, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x1, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x40b}}]}) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000060a010400004000000000000a0000010900010073797a3100000000200004801c000180090001007866726d000000000c00028008000240000000060900020073797a3200000000140000001100015c00000000000000000000000a"], 0x74}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) listen(r0, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r3, 0x18000000000002a0, 0x42, 0xfffffffffffffdf6, &(0x7f0000000500)="b9ff0300600d698cb89e14f086dd1f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa5", 0x0, 0x100, 0x60000000, 0x5c, 0xc0, &(0x7f0000000000), &(0x7f0000002c80)="8dc92a8ff39080a675b6565efa3ed46f2a2756e43abbfd8c44686c04d6a0c42f2599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc5d2d3fa40e054d38d49dfbebc2f137fc7110", 0x4}, 0x48) r4 = socket(0x40000000015, 0x805, 0x0) getsockopt(r4, 0x114, 0x2718, 0x0, &(0x7f00000000c0)) r5 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c7", 0x1}], 0x1, 0x0, 0x0, 0x8054}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000240)}], 0x1, 0x0, 0x0, 0x5c656f61393ffcde}}], 0x2, 0x4000045) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x2}, 0x8) close(r5) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000019200)=ANY=[@ANYBLOB="3c0000006800010000000000fddbdf25020002000000000006001200040000000c000880050004000100000008000600f2000000080005"], 0x3c}, 0x1, 0x0, 0x0, 0x4044c02}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) clock_settime(0x2, &(0x7f00000001c0)) 912.218959ms ago: executing program 3 (id=3119): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x3, 0x0) read$FUSE(r0, &(0x7f00000024c0)={0x2020}, 0xfffffec1) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xf88e470f}]}) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x101880, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000080)={[0xeeee0000, 0xeeef0000, 0xdddd0000, 0xb000], 0x2000000db, 0xc}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0x4000, 0x4, 0x5, 0x0, 0x8, 0x3, 0xa, 0x7e, 0x4, 0x11, 0x5, 0x80204}, {0x804, 0x1, 0x1, 0x45, 0x7, 0x2, 0x1, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0x1, 0x3, 0x38, 0x5, 0x84, 0x7, 0x3, 0x50, 0x0, 0x70, 0x4, 0x5}], 0xffffffff}) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x48000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x5, 0xfffffffffffffffd, 0xc595, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000], 0xeeee8000, 0x2010d3}) r4 = socket$netlink(0x10, 0x3, 0x8) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001d00070f00020000000000f307000000", @ANYRES32=r5, @ANYBLOB='\x00\x00g\x00\b\x00\b'], 0x24}, 0x1, 0x0, 0x0, 0x4040080}, 0x40800) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) 638.256024ms ago: executing program 3 (id=3120): r0 = socket(0x10, 0x80002, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000003c0)={{0x10b, 0x0, 0xa8, 0x256, 0x3a1, 0x100, 0x12d, 0x800}, "4e4867bfcb64df481cd19cdc1c5328e3b87bd19cae087488e22364d7acf68e91fd146b74aaeee32bba289ced2534b5ff6a2d74ba993b4db3cd71c7373b73b529b8c85b65699292a002c78c12082ecfc379da349d2dbd876754b0d8b5f15b2c5abdd8fcfcafccdac50d6539e4d131fb9d8129c99c9ec360be8c41c3e935ea74fcacee79b677ea10ddc128585bccb7d91f80c8a7c66ad0da667a286db5a7cb9591f2308a798c2b4c1d99cc2e810789c3049a4ea8fdbfc095740f3e94677a7f1156bebf4a5f47dc", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x8e6) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, &(0x7f0000000280)={0x4, 0x0, [{0x0, 0xffffffff, 0x2, 0xffffff89, 0x6, 0x7, 0x2}, {0x1, 0x4, 0x6, 0x8000, 0x27, 0x7, 0x9}, {0xb, 0x8, 0x3, 0x3ff, 0x7ffffdff, 0x8003, 0xffff}, {0x80000019, 0xe5f, 0x0, 0x7, 0xdf3, 0x6, 0x3}, {0x80000000, 0x2bb, 0x1, 0xd, 0x3, 0x7fd, 0x400}, {0x80000000, 0x100, 0x4, 0x6, 0x3, 0x2, 0x3}, {0x80000001, 0xffffffee, 0x3, 0xfffffff7, 0xfffffff9, 0xff, 0x6}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 610.038783ms ago: executing program 1 (id=3121): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000080)}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) 524.159137ms ago: executing program 1 (id=3122): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r3 = syz_io_uring_complete(0x0, 0x0) close(0x3) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0xa) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_ublk_setup_queues(r4, 0x0, &(0x7f0000000540)={0x0, 0x1aa5, 0x80, 0x2, 0x20000}, 0x0, 0x1, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) openat$fuse(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x300) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0xca, 0xac2) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x2b}, 0x0, 0x0, 0x0, 0x0}, 0x58) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10) 0s ago: executing program 3 (id=3123): r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32=0x4}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r1}]}]}, 0x28}}, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00', 0x7f}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x2000, 0x1) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, 0x0, 0x0) kernel console output (not intermixed with test programs): T59] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 651.859132][ T5616] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 652.011950][ T5616] usb 3-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 652.013418][ T5616] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 652.013462][ T5616] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 652.015073][ T5616] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 652.015095][ T5616] usb 3-1: Product: syz [ 652.015109][ T5616] usb 3-1: Manufacturer: syz [ 652.039172][ T5705] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 652.113952][ T31] audit: type=1800 audit(1790328621.667:2926): pid=15816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2777" name="nullb0" dev="devtmpfs" ino=4708 res=0 errno=0 [ 652.198999][ T5705] usb 2-1: Using ep0 maxpacket: 16 [ 652.199546][ T5705] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 652.200559][ T5705] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 652.200571][ T5705] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 652.201517][ T5705] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 652.201530][ T5705] usb 2-1: SerialNumber: syz [ 652.334053][T15799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 652.334620][T15799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 652.357615][ T5616] usb 3-1: USB disconnect, device number 11 [ 652.952841][T15830] syz.3.2782 (15830): /proc/15829/oom_adj is deprecated, please use /proc/15829/oom_score_adj instead. [ 653.036485][T15835] FAULT_INJECTION: forcing a failure. [ 653.036485][T15835] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 653.036505][T15835] CPU: 0 UID: 0 PID: 15835 Comm: syz.3.2783 Not tainted syzkaller #0 PREEMPT(full) [ 653.036517][T15835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 653.036524][T15835] Call Trace: [ 653.036528][T15835] [ 653.036534][T15835] dump_stack_lvl+0xe8/0x150 [ 653.036553][T15835] should_fail_ex+0x410/0x560 [ 653.036568][T15835] _copy_from_iter+0x1d3/0x1660 [ 653.036581][T15835] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 653.036599][T15835] ? __pfx__copy_from_iter+0x10/0x10 [ 653.036613][T15835] ? dev_get_by_index+0x22/0x2d0 [ 653.036623][T15835] ? dev_get_by_index+0x22/0x2d0 [ 653.036636][T15835] packet_sendmsg+0x3088/0x5150 [ 653.036655][T15835] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 653.036672][T15835] ? __lock_acquire+0x747/0x2de0 [ 653.036687][T15835] ? __lock_acquire+0x747/0x2de0 [ 653.036701][T15835] ? kstrtouint+0x6e/0xe0 [ 653.036713][T15835] ? __pfx_packet_sendmsg+0x10/0x10 [ 653.036723][T15835] ? aa_sk_perm+0x713/0x900 [ 653.036738][T15835] ? percpu_is_read_locked+0x130/0x190 [ 653.036752][T15835] ? __pfx_aa_sk_perm+0x10/0x10 [ 653.036765][T15835] ? aa_sock_msg_perm+0x144/0x210 [ 653.036780][T15835] ? apparmor_socket_sendmsg+0x98/0x360 [ 653.036793][T15835] ? __pfx_packet_sendmsg+0x10/0x10 [ 653.036803][T15835] sock_sendmsg_nosec+0x13a/0x180 [ 653.036816][T15835] __sys_sendto+0x408/0x5a0 [ 653.036832][T15835] ? __pfx___sys_sendto+0x10/0x10 [ 653.036850][T15835] ? __fget_files+0x3a2/0x420 [ 653.036870][T15835] ? ksys_write+0x242/0x270 [ 653.036888][T15835] __ia32_sys_sendto+0xdd/0x100 [ 653.036903][T15835] __do_fast_syscall_32+0x27a/0x6a0 [ 653.036921][T15835] ? do_fast_syscall_32+0x33/0x70 [ 653.036935][T15835] ? asm_int80_emulation+0x1a/0x20 [ 653.036945][T15835] ? do_int80_emulation+0x299/0x500 [ 653.036957][T15835] ? trace_irq_disable+0x3b/0x140 [ 653.036970][T15835] do_fast_syscall_32+0x33/0x70 [ 653.036983][T15835] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 653.036995][T15835] RIP: 0023:0xf7fd40ec [ 653.037005][T15835] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 653.037014][T15835] RSP: 002b:00000000f549650c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 653.037026][T15835] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 653.037033][T15835] RDX: 000000000000fd1e RSI: 0000000000000004 RDI: 0000000080000140 [ 653.037040][T15835] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000000 [ 653.037046][T15835] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 653.037052][T15835] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 653.037067][T15835] [ 653.296612][T15836] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2781'. [ 654.804744][ T10] usb 2-1: USB disconnect, device number 3 [ 655.259817][T11045] IPVS: starting estimator thread 0... [ 655.361516][T15873] IPVS: using max 53 ests per chain, 127200 per kthread [ 655.394711][T15865] netlink: 'syz.2.2790': attribute type 11 has an invalid length. [ 655.417269][T15876] IPVS: set_ctl: invalid protocol: 1 172.20.20.27:20001 [ 655.599723][ T10] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 655.620166][ T10] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 655.749275][T11045] net_ratelimit: 34 callbacks suppressed [ 655.749296][T11045] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 655.999557][T11045] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 656.015059][T15892] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 656.109925][T12870] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 656.219066][T11045] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 656.329141][ T1161] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 656.449415][ T1167] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 656.561767][T11045] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 656.669072][ T73] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 656.779039][T11045] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 656.890231][T11045] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 656.890407][T15907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 656.890732][T15907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 656.893444][T15907] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2800'. [ 657.876805][T15920] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 658.343368][ T5616] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 658.343625][ T5616] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 658.343816][ T5616] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 658.344000][ T5616] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 658.344010][ T5616] rtc rtc0: __rtc_set_alarm: err=-22 [ 658.438938][T11431] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 658.599161][T11431] usb 3-1: Using ep0 maxpacket: 32 [ 658.600382][T11431] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 658.601427][T11431] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 658.601464][T11431] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 658.601483][T11431] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 658.601499][T11431] usb 3-1: config 1 has no interface number 0 [ 658.601522][T11431] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 658.601535][T11431] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 658.601557][T11431] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.700905][T11431] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 658.807512][ T31] audit: type=1326 audit(1790328628.357:2927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15926 comm="syz.2.2807" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f070ec code=0x7ffc0000 [ 658.807688][ T31] audit: type=1326 audit(1790328628.357:2928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15926 comm="syz.2.2807" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f070ec code=0x7ffc0000 [ 658.808030][ T31] audit: type=1326 audit(1790328628.357:2929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15926 comm="syz.2.2807" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=328 compat=1 ip=0xf7f070ec code=0x7ffc0000 [ 658.808199][ T31] audit: type=1326 audit(1790328628.357:2930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15926 comm="syz.2.2807" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f070ec code=0x7ffc0000 [ 658.808371][ T31] audit: type=1326 audit(1790328628.357:2931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15926 comm="syz.2.2807" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f070ec code=0x7ffc0000 [ 658.808577][ T31] audit: type=1326 audit(1790328628.357:2932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15926 comm="syz.2.2807" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf7f070ec code=0x7ffc0000 [ 658.808696][ T31] audit: type=1326 audit(1790328628.357:2933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15926 comm="syz.2.2807" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f070ec code=0x7ffc0000 [ 658.819000][ T31] audit: type=1326 audit(1790328628.357:2934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15926 comm="syz.2.2807" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f070ec code=0x7ffc0000 [ 658.859523][T11431] snd_usb_pod 3-1:1.1: set_interface failed [ 658.859880][T11431] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 658.860075][T11431] snd_usb_pod 3-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 659.030922][T11431] usb 3-1: USB disconnect, device number 12 [ 659.142838][ T1161] IPVS: starting estimator thread 0... [ 659.228962][T15933] IPVS: using max 30 ests per chain, 72000 per kthread [ 659.250241][T15932] IPVS: set_ctl: invalid protocol: 1 172.20.20.27:20001 [ 660.112433][T15955] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2817'. [ 660.258952][T11431] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 660.409008][T11431] usb 3-1: Using ep0 maxpacket: 16 [ 660.409869][T11431] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 660.414347][T11431] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 660.414371][T11431] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 660.416653][T11431] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 660.416676][T11431] usb 3-1: SerialNumber: syz [ 660.615461][T15958] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2815'. [ 660.658153][ T31] audit: type=1800 audit(1790328630.207:2935): pid=15965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2818" name="nullb0" dev="devtmpfs" ino=4708 res=0 errno=0 [ 660.759067][ T73] net_ratelimit: 31 callbacks suppressed [ 660.759085][ T73] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 660.869210][ T1167] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 660.979528][ T1167] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 661.092125][ T73] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 661.123150][T15973] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2820'. [ 661.205905][ T59] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 661.329445][ T59] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 661.422973][T15984] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2825'. [ 661.441150][ T1167] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 661.549778][ T59] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 661.622204][T15986] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 661.659254][ T73] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 661.770437][ T73] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 663.032462][T11431] usb 3-1: USB disconnect, device number 13 [ 663.224253][ T31] audit: type=1800 audit(1790328632.777:2936): pid=16008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2830" name="nullb0" dev="devtmpfs" ino=4708 res=0 errno=0 [ 664.326170][ T31] audit: type=1800 audit(1790328633.877:2937): pid=16024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2834" name="nullb0" dev="devtmpfs" ino=4708 res=0 errno=0 [ 665.840607][ T59] net_ratelimit: 31 callbacks suppressed [ 665.840629][ T59] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 665.950373][ T73] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 666.059429][T12870] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 666.060259][T16056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 666.061767][T16056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 666.066065][T16056] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2841'. [ 666.088615][T16058] openvswitch: netlink: IP tunnel dst address not specified [ 666.240146][ T1167] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 666.348980][ T59] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 666.469703][T12870] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 666.579660][ T59] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 666.689559][ T59] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 666.800472][ T1167] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 667.303572][T16078] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2845'. [ 667.941657][T16088] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 668.875310][T16108] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2852'. [ 668.971967][ T31] audit: type=1800 audit(1790328638.527:2938): pid=16109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2853" name="nullb0" dev="devtmpfs" ino=4708 res=0 errno=0 [ 669.101607][T16112] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2854'. [ 669.179076][ T5616] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 669.247324][T16114] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2856'. [ 669.329084][ T5616] usb 2-1: Using ep0 maxpacket: 32 [ 669.333390][ T5616] usb 2-1: unable to get BOS descriptor or descriptor too short [ 669.333436][ T5616] usb 2-1: New USB device found, idVendor=0979, idProduct=0270, bcdDevice=ed.31 [ 669.334566][ T5616] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 669.334588][ T5616] usb 2-1: config 7 has 0 interfaces, different from the descriptor's value: 1 [ 669.338380][ T5616] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.338403][ T5616] usb 2-1: Product: syz [ 669.338418][ T5616] usb 2-1: Manufacturer: syz [ 669.338431][ T5616] usb 2-1: SerialNumber: syz [ 669.412541][T16120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 669.413132][T16120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 669.964683][T16122] tipc: Resetting bearer [ 669.987535][T16122] tipc: Disabling bearer [ 670.930562][ T1167] net_ratelimit: 35 callbacks suppressed [ 670.930581][ T1167] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 671.040252][ T1167] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 671.150526][ T1161] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 671.259370][ T1161] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 671.269025][ T5704] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 671.369413][ T1167] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 671.421682][ T5704] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 671.423185][ T5704] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.426569][ T5704] usb 3-1: config 0 descriptor?? [ 671.479532][ T1161] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 671.508377][T16137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 671.508673][T16137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 671.517890][ T31] audit: type=1326 audit(1790328641.067:2939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16136 comm="syz.3.2864" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd40ec code=0x7ffc0000 [ 671.522984][ T31] audit: type=1326 audit(1790328641.077:2940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16136 comm="syz.3.2864" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd40ec code=0x7ffc0000 [ 671.523932][ T31] audit: type=1326 audit(1790328641.077:2941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16136 comm="syz.3.2864" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf7fd40ec code=0x7ffc0000 [ 671.524301][ T31] audit: type=1326 audit(1790328641.077:2942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16136 comm="syz.3.2864" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd40ec code=0x7ffc0000 [ 671.525268][ T31] audit: type=1326 audit(1790328641.077:2943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16136 comm="syz.3.2864" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd40ec code=0x7ffc0000 [ 671.589100][ T1167] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 671.662077][T16133] batman_adv: batadv0: Adding interface: macvtap1 [ 671.662089][T16133] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 671.662102][T16133] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 671.716302][T16133] batman_adv: batadv0: Removing interface: macvtap1 [ 671.759121][ T73] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 671.812353][ T5704] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 671.812821][ T5704] [drm:udl_init] *ERROR* Selecting channel failed [ 671.880756][ T5704] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 1 [ 671.880807][ T5704] [drm] Initialized udl on minor 1 [ 671.902166][ T5616] usb 2-1: USB disconnect, device number 4 [ 671.914372][ T5704] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 671.928476][ T5704] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 671.941438][ T5690] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 671.949449][T12871] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 671.953581][ T5704] usb 3-1: USB disconnect, device number 14 [ 671.961967][ T5690] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 671.962187][ T5690] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 672.101270][T12871] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 672.179054][ T5705] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 672.241592][ T5615] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 672.249105][ T5615] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 672.265869][ T5615] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 672.274054][ T5615] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 672.283537][ T5615] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 672.304869][ T5626] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 672.307823][ T5626] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 672.315932][ T5626] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 672.332027][ T5626] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 672.340839][ T5626] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 672.369805][ T5705] usb 5-1: Using ep0 maxpacket: 16 [ 672.370490][ T5705] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 672.375686][ T5705] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 672.375710][ T5705] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 672.412146][ T5705] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 672.412180][ T5705] usb 5-1: SerialNumber: syz [ 672.896699][ T5616] usb 4-1: USB disconnect, device number 49 [ 673.029292][ T5690] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 673.180970][ T5690] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 673.182512][ T5690] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 673.182558][ T5690] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 673.182583][ T5690] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 673.182606][ T5690] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 673.182630][ T5690] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 673.183585][ T5690] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 673.183628][ T5690] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 673.183653][ T5690] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 673.183683][ T5690] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 673.183706][ T5690] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 673.184645][ T5690] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 673.184696][ T5690] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 673.184721][ T5690] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 673.184744][ T5690] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 673.184768][ T5690] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 673.187545][ T5690] usb 2-1: string descriptor 0 read error: -22 [ 673.187682][ T5690] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.214529][ T5690] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 673.412703][T16167] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2865'. [ 673.453651][T16149] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.453816][T16149] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.453935][T16149] bridge_slave_0: entered allmulticast mode [ 673.455587][T16149] bridge_slave_0: entered promiscuous mode [ 673.507447][T16149] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.507531][T16149] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.507604][T16149] bridge_slave_1: entered allmulticast mode [ 673.508557][T16149] bridge_slave_1: entered promiscuous mode [ 673.552396][T16149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 673.561737][T16149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 673.645987][T16149] team0: Port device team_slave_0 added [ 673.650998][T16149] team0: Port device team_slave_1 added [ 673.698399][T16149] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 673.698414][T16149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 673.698438][T16149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 673.758724][T16149] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 673.761179][T16149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 673.761310][T16149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 674.043824][T16149] hsr_slave_0: entered promiscuous mode [ 674.044989][T16149] hsr_slave_1: entered promiscuous mode [ 674.045803][T16149] debugfs: 'hsr0' already exists in 'hsr' [ 674.045821][T16149] Cannot create hsr debugfs directory [ 674.148141][ T73] bridge_slave_1: left allmulticast mode [ 674.148165][ T73] bridge_slave_1: left promiscuous mode [ 674.148412][ T73] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.162538][ T73] bridge_slave_0: left allmulticast mode [ 674.162560][ T73] bridge_slave_0: left promiscuous mode [ 674.162750][ T73] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.254522][ T73] ip6gretap0 (unregistering): left promiscuous mode [ 674.366986][ T73] gretap0 (unregistering): left promiscuous mode [ 674.401036][ T5626] Bluetooth: hci2: command tx timeout [ 674.422927][ T73] bridge0 (unregistering): left promiscuous mode [ 674.476023][ T73] bond0 (unregistering): (slave 30): Releasing backup interface [ 674.485576][ T73] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 674.496248][ T73] bond0 (unregistering): Released all slaves [ 674.637973][ T73] tipc: Disabling bearer [ 674.646392][ T73] tipc: Left network mode [ 674.905754][ T73] hsr_slave_0: left promiscuous mode [ 674.915394][ T73] hsr_slave_1: left promiscuous mode [ 674.992286][ T5690] usb 5-1: USB disconnect, device number 68 [ 675.467886][ T73] team0 (unregistering): Port device team_slave_1 removed [ 675.722241][ T5279] 8021q: adding VLAN 0 to HW filter on device eth5 [ 676.049116][T11045] net_ratelimit: 13 callbacks suppressed [ 676.049136][T11045] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 676.075032][ T73] IPVS: stop unused estimator thread 0... [ 676.077002][ T5705] usb 2-1: USB disconnect, device number 5 [ 676.160013][ T1161] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 676.269517][ T1161] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 676.479090][ T5626] Bluetooth: hci2: command tx timeout [ 676.479203][ T73] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 676.508526][ T31] audit: type=1800 audit(1790328646.057:2944): pid=16211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2877" name="nullb0" dev="devtmpfs" ino=4841 res=0 errno=0 [ 676.589749][T11045] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 676.622167][T16219] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2878'. [ 676.860939][T11045] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 676.949068][ T5690] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 677.100628][ T5690] usb 3-1: Using ep0 maxpacket: 32 [ 677.108710][ T5690] usb 3-1: unable to get BOS descriptor or descriptor too short [ 677.108747][ T5690] usb 3-1: New USB device found, idVendor=0979, idProduct=0270, bcdDevice=ed.31 [ 677.112211][ T5690] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 677.112234][ T5690] usb 3-1: config 7 has 0 interfaces, different from the descriptor's value: 1 [ 677.153379][ T5690] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.153393][ T5690] usb 3-1: Product: syz [ 677.153401][ T5690] usb 3-1: Manufacturer: syz [ 677.153408][ T5690] usb 3-1: SerialNumber: syz [ 677.389201][ T73] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 677.438530][T16149] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 677.474868][T16149] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 677.476362][T16149] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 677.497886][T16229] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 677.506342][T16149] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 677.516804][T16149] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 677.553500][T16149] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 677.559515][T16149] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 677.579710][T16149] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 677.721163][T12871] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 677.878150][T16149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 677.890481][T11045] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 677.957961][T16149] 8021q: adding VLAN 0 to HW filter on device team0 [ 677.976741][T11045] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.976845][T11045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 678.001514][ T73] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 678.020762][T11045] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.020840][T11045] bridge0: port 2(bridge_slave_1) entered forwarding state [ 678.205478][T16149] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 678.336994][T16149] veth0_vlan: entered promiscuous mode [ 678.361177][T16149] veth1_vlan: entered promiscuous mode [ 678.456898][T16149] veth0_macvtap: entered promiscuous mode [ 678.478047][T16149] veth1_macvtap: entered promiscuous mode [ 678.510584][T16149] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 678.533671][T16149] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 678.559331][ T5626] Bluetooth: hci2: command tx timeout [ 678.625011][ T73] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.626066][ T73] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.626375][ T73] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.671585][ T73] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.804359][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 678.804377][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 678.879314][ T5724] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 678.906375][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 678.906393][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 679.034376][ T5724] usb 5-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 679.036955][ T5724] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 679.036998][ T5724] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 679.056659][ T5724] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 679.056682][ T5724] usb 5-1: Product: syz [ 679.056696][ T5724] usb 5-1: Manufacturer: syz [ 679.264435][T16259] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2882'. [ 679.559422][ T5690] usb 3-1: USB disconnect, device number 15 [ 679.612704][T16251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 679.617669][T16251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 679.692322][ T5724] usb 5-1: USB disconnect, device number 69 [ 680.159150][ T25] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 680.310636][ T25] usb 3-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 680.311618][ T25] usb 3-1: config 0 has an invalid interface number: 143 but max is 0 [ 680.311633][ T25] usb 3-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 680.311643][ T25] usb 3-1: config 0 has no interface number 0 [ 680.311663][ T25] usb 3-1: too many endpoints for config 0 interface 143 altsetting 112: 149, using maximum allowed: 30 [ 680.311682][ T25] usb 3-1: config 0 interface 143 altsetting 112 has 0 endpoint descriptors, different from the interface descriptor's value: 149 [ 680.311696][ T25] usb 3-1: config 0 interface 143 has no altsetting 0 [ 680.321634][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.321657][ T25] usb 3-1: Product: syz [ 680.321671][ T25] usb 3-1: Manufacturer: syz [ 680.321684][ T25] usb 3-1: SerialNumber: syz [ 680.333856][ T25] usb 3-1: config 0 descriptor?? [ 680.549362][T16304] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 680.576269][ T25] usb 3-1: USB disconnect, device number 16 [ 680.640183][ T5626] Bluetooth: hci2: command tx timeout [ 681.075909][T16317] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2889'. [ 681.115481][T12866] net_ratelimit: 11 callbacks suppressed [ 681.115496][T12866] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 681.149048][ T5724] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 681.222630][T12866] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 681.299908][ T5724] usb 3-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice=34.b1 [ 681.300963][ T5724] usb 3-1: config index 0 descriptor too short (expected 36, got 27) [ 681.300988][ T5724] usb 3-1: config 0 has an invalid interface number: 143 but max is 0 [ 681.301006][ T5724] usb 3-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 681.301024][ T5724] usb 3-1: config 0 has no interface number 0 [ 681.301051][ T5724] usb 3-1: too many endpoints for config 0 interface 143 altsetting 112: 149, using maximum allowed: 30 [ 681.301086][ T5724] usb 3-1: config 0 interface 143 altsetting 112 has 0 endpoint descriptors, different from the interface descriptor's value: 149 [ 681.301110][ T5724] usb 3-1: config 0 interface 143 has no altsetting 0 [ 681.304504][ T5724] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.304527][ T5724] usb 3-1: Product: syz [ 681.304540][ T5724] usb 3-1: Manufacturer: syz [ 681.304554][ T5724] usb 3-1: SerialNumber: syz [ 681.306883][ T5724] usb 3-1: config 0 descriptor?? [ 681.329035][T12866] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 681.440514][T12866] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 681.549990][ T1167] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 681.627747][T16284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 681.630557][T16284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 681.659728][ T1167] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 681.772565][ T59] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 681.879593][T12866] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 681.989073][ T1167] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 682.099772][T12866] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 682.830631][ T5724] bfusb 3-1:0.143: probe with driver bfusb failed with error -5 [ 682.841702][ T5724] usb 3-1: USB disconnect, device number 17 [ 683.259501][ T31] audit: type=1800 audit(1790328652.807:2945): pid=16340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2894" name="nullb0" dev="devtmpfs" ino=4850 res=0 errno=0 [ 683.339453][ T5724] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 683.491446][ T5724] usb 3-1: New USB device found, idVendor=046d, idProduct=c134, bcdDevice= 0.00 [ 683.494564][ T5724] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 683.494605][ T5724] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 683.494642][ T5724] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.501474][ T5724] usb 3-1: config 0 descriptor?? [ 683.899893][ T5724] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 683.902396][T16355] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2897'. [ 683.957480][ T25] usb 3-1: USB disconnect, device number 18 [ 684.049800][ T5724] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 684.052897][ T5724] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.052919][ T5724] usb 5-1: Product: syz [ 684.052932][ T5724] usb 5-1: Manufacturer: syz [ 684.052946][ T5724] usb 5-1: SerialNumber: syz [ 684.057536][ T5724] usb 5-1: config 0 descriptor?? [ 684.066777][ T5724] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 684.083309][ T5724] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 684.084091][ T5724] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 684.084139][ T5724] usb 5-1: media controller created [ 684.097018][ T5724] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 684.181226][ T5724] DVB: Unable to find symbol mt352_attach() [ 684.207769][ T5724] DVB: Unable to find symbol nxt6000_attach() [ 684.207778][ T5724] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 684.218630][ T5724] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input119 [ 684.223257][ T5724] dvb-usb: schedule remote query interval to 1000 msecs. [ 684.223274][ T5724] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 684.223289][ T5724] dvb-usb: bulk message failed: -22 (7/0) [ 684.223302][ T5724] dvb-usb: bulk message failed: -22 (7/0) [ 684.283143][T16353] dvb-usb: bulk message failed: -22 (7/0) [ 684.283925][ T5724] usb 5-1: USB disconnect, device number 70 [ 684.334594][ T5724] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 684.431726][T16366] FAULT_INJECTION: forcing a failure. [ 684.431726][T16366] name failslab, interval 1, probability 0, space 0, times 0 [ 684.431755][T16366] CPU: 1 UID: 0 PID: 16366 Comm: syz.1.2901 Not tainted syzkaller #0 PREEMPT(full) [ 684.431775][T16366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 684.431787][T16366] Call Trace: [ 684.431795][T16366] [ 684.431803][T16366] dump_stack_lvl+0xe8/0x150 [ 684.431835][T16366] should_fail_ex+0x410/0x560 [ 684.431864][T16366] should_failslab+0xa8/0x100 [ 684.431890][T16366] __kvmalloc_node_noprof+0x176/0x820 [ 684.431915][T16366] ? alloc_netdev_mqs+0x8fb/0x12a0 [ 684.431933][T16366] ? alloc_netdev_mqs+0x8fb/0x12a0 [ 684.431961][T16366] alloc_netdev_mqs+0x8fb/0x12a0 [ 684.431981][T16366] ? __pfx_macsec_setup+0x10/0x10 [ 684.432008][T16366] rtnl_create_link+0x321/0xd70 [ 684.432035][T16366] rtnl_newlink_create+0x258/0x7b0 [ 684.432068][T16366] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 684.432099][T16366] ? __pfx___mutex_lock+0x10/0x10 [ 684.432135][T16366] ? ns_capable+0x89/0xe0 [ 684.432164][T16366] rtnl_newlink+0x166d/0x1c30 [ 684.432204][T16366] ? __pfx_rtnl_newlink+0x10/0x10 [ 684.432226][T16366] ? __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 684.432245][T16366] ? __do_fast_syscall_32+0x27a/0x6a0 [ 684.432270][T16366] ? do_fast_syscall_32+0x33/0x70 [ 684.432293][T16366] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 684.432353][T16366] ? kasan_quarantine_put+0xbb/0x1f0 [ 684.432374][T16366] ? lockdep_hardirqs_on+0x7b/0x110 [ 684.432402][T16366] ? nlmon_xmit+0xb0/0x100 [ 684.432422][T16366] ? kmem_cache_free+0x182/0x650 [ 684.432452][T16366] ? __lock_acquire+0x747/0x2de0 [ 684.432483][T16366] ? __local_bh_enable_ip+0xd6/0x140 [ 684.432508][T16366] ? lockdep_hardirqs_on+0x7b/0x110 [ 684.432530][T16366] ? __dev_queue_xmit+0x29b/0x3820 [ 684.432557][T16366] ? __local_bh_enable_ip+0xd6/0x140 [ 684.432580][T16366] ? __dev_queue_xmit+0x29b/0x3820 [ 684.432616][T16366] ? lock_acquire+0x115/0x350 [ 684.432651][T16366] ? __pfx_rtnl_newlink+0x10/0x10 [ 684.432674][T16366] rtnetlink_rcv_msg+0x802/0xc00 [ 684.432708][T16366] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 684.432731][T16366] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 684.432753][T16366] ? ref_tracker_free+0x689/0x830 [ 684.432779][T16366] ? __pfx_ref_tracker_free+0x10/0x10 [ 684.432803][T16366] ? __asan_memcpy+0x40/0x70 [ 684.432820][T16366] ? __skb_clone+0x5c/0x6c0 [ 684.432853][T16366] netlink_rcv_skb+0x226/0x4a0 [ 684.432884][T16366] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 684.432911][T16366] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 684.432953][T16366] ? netlink_deliver_tap+0x2e/0x1b0 [ 684.432971][T16366] ? netlink_deliver_tap+0x2e/0x1b0 [ 684.432995][T16366] netlink_unicast+0x7bd/0x940 [ 684.433030][T16366] netlink_sendmsg+0x813/0xb40 [ 684.433057][T16366] ? __pfx_netlink_sendmsg+0x10/0x10 [ 684.433084][T16366] ? apparmor_socket_sendmsg+0x98/0x360 [ 684.433109][T16366] ? __pfx_netlink_sendmsg+0x10/0x10 [ 684.433127][T16366] sock_sendmsg_nosec+0x13a/0x180 [ 684.433151][T16366] ____sys_sendmsg+0x54e/0x850 [ 684.433183][T16366] ? __pfx_____sys_sendmsg+0x10/0x10 [ 684.433226][T16366] ___sys_sendmsg+0x2a5/0x360 [ 684.433250][T16366] ? __lock_acquire+0x747/0x2de0 [ 684.433274][T16366] ? __pfx____sys_sendmsg+0x10/0x10 [ 684.433306][T16366] ? kstrtoull+0x137/0x1d0 [ 684.433354][T16366] ? __fget_files+0x2a/0x420 [ 684.433379][T16366] ? __fget_files+0x3a2/0x420 [ 684.433414][T16366] __sys_sendmmsg+0x2de/0x4d0 [ 684.433446][T16366] ? __pfx___sys_sendmmsg+0x10/0x10 [ 684.433501][T16366] ? fput+0xa0/0xd0 [ 684.433524][T16366] ? ksys_write+0x242/0x270 [ 684.433560][T16366] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 684.433581][T16366] __do_fast_syscall_32+0x27a/0x6a0 [ 684.433607][T16366] ? do_fast_syscall_32+0x33/0x70 [ 684.433631][T16366] ? asm_int80_emulation+0x1a/0x20 [ 684.433649][T16366] ? do_int80_emulation+0x299/0x500 [ 684.433673][T16366] ? trace_irq_disable+0x3b/0x140 [ 684.433704][T16366] do_fast_syscall_32+0x33/0x70 [ 684.433730][T16366] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 684.433753][T16366] RIP: 0023:0xf7fe70ec [ 684.433770][T16366] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 684.433786][T16366] RSP: 002b:00000000f54a650c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 684.433806][T16366] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000 [ 684.433819][T16366] RDX: 00000000000001f2 RSI: 0000000000000000 RDI: 0000000000000000 [ 684.433831][T16366] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 684.433842][T16366] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 684.433853][T16366] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 684.433884][T16366] [ 685.083750][T16382] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2903'. [ 685.419080][T11431] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 685.591809][T11431] usb 5-1: Using ep0 maxpacket: 32 [ 685.601813][T11431] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 685.603920][T11431] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 685.603935][T11431] usb 5-1: config 0 has no interface number 0 [ 685.603957][T11431] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 685.603970][T11431] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 685.603981][T11431] usb 5-1: config 0 interface 85 has no altsetting 0 [ 685.608170][T11431] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.608192][T11431] usb 5-1: Product: syz [ 685.608206][T11431] usb 5-1: Manufacturer: syz [ 685.608220][T11431] usb 5-1: SerialNumber: syz [ 685.629673][T11431] usb 5-1: config 0 descriptor?? [ 685.685530][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.685591][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.851401][T11431] appletouch 5-1:0.85: Failed to read mode from device. [ 685.851524][T11431] appletouch 5-1:0.85: probe with driver appletouch failed with error -5 [ 685.879943][T11431] usb 5-1: USB disconnect, device number 71 [ 686.143727][ T73] net_ratelimit: 32 callbacks suppressed [ 686.143747][ T73] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 686.186436][ T5705] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 686.259678][ T73] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 686.348936][ T5705] usb 2-1: Using ep0 maxpacket: 32 [ 686.349470][ T5705] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 686.350465][ T5705] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 686.350487][ T5705] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 686.350506][ T5705] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 686.350525][ T5705] usb 2-1: config 1 has no interface number 0 [ 686.350562][ T5705] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 686.350576][ T5705] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 686.350597][ T5705] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.371056][ T5705] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 686.379426][ T73] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 686.488997][T12871] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 686.572804][ T31] audit: type=1326 audit(1790328656.127:2946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16389 comm="syz.1.2906" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe70ec code=0x7ffc0000 [ 686.573205][ T31] audit: type=1326 audit(1790328656.127:2947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16389 comm="syz.1.2906" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf7fe70ec code=0x7ffc0000 [ 686.573391][ T31] audit: type=1326 audit(1790328656.127:2948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16389 comm="syz.1.2906" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe70ec code=0x7ffc0000 [ 686.573660][ T31] audit: type=1326 audit(1790328656.127:2949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16389 comm="syz.1.2906" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe70ec code=0x7ffc0000 [ 686.578026][ T5705] snd_usb_pod 2-1:1.1: set_interface failed [ 686.578149][ T5705] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 686.578255][ T5705] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 686.597064][ T5705] usb 2-1: USB disconnect, device number 6 [ 686.608964][ T73] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 686.719506][ T73] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 686.738337][T16398] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 686.858990][ T73] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 686.970657][ T59] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 687.084767][T12866] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 687.112538][T16412] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2913'. [ 687.190037][T12866] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 687.241736][T16413] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2910'. [ 687.478990][T11431] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 687.640476][T11431] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 687.643335][T11431] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.643359][T11431] usb 2-1: Product: syz [ 687.643372][T11431] usb 2-1: Manufacturer: syz [ 687.643386][T11431] usb 2-1: SerialNumber: syz [ 687.645844][T11431] usb 2-1: config 0 descriptor?? [ 687.685862][T11431] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 687.687838][T11431] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 687.688361][T11431] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 687.688391][T11431] usb 2-1: media controller created [ 687.728020][T11431] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 687.789208][T11431] DVB: Unable to find symbol mt352_attach() [ 687.864417][T16417] dvb-usb: bulk message failed: -22 (7/0) [ 687.875872][T11431] DVB: Unable to find symbol nxt6000_attach() [ 687.875885][T11431] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 687.901760][T11431] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input121 [ 687.922196][T11431] dvb-usb: schedule remote query interval to 1000 msecs. [ 687.922214][T11431] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 687.922230][T11431] dvb-usb: bulk message failed: -22 (7/0) [ 687.922244][T11431] dvb-usb: bulk message failed: -22 (7/0) [ 687.959929][T11431] usb 2-1: USB disconnect, device number 7 [ 688.081727][T11431] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 688.529073][ T25] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 688.679197][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 688.680002][ T25] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 688.681547][ T25] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 688.681568][ T25] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 688.685210][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 688.685233][ T25] usb 4-1: SerialNumber: syz [ 688.855858][ T31] audit: type=1800 audit(1790328658.407:2950): pid=16439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2919" name="nullb0" dev="devtmpfs" ino=4850 res=0 errno=0 [ 689.406814][T16452] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2921'. [ 689.686462][T16456] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2918'. [ 690.659358][ T25] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 690.811163][ T25] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 690.830006][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.830021][ T25] usb 5-1: Product: syz [ 690.830029][ T25] usb 5-1: Manufacturer: syz [ 690.830036][ T25] usb 5-1: SerialNumber: syz [ 690.840527][ T25] usb 5-1: config 0 descriptor?? [ 690.869791][ T25] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 690.876640][ T25] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 690.880264][ T25] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 690.880313][ T25] usb 5-1: media controller created [ 690.930282][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 691.007694][ T25] DVB: Unable to find symbol mt352_attach() [ 691.054521][ T25] DVB: Unable to find symbol nxt6000_attach() [ 691.054532][ T25] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 691.058227][ T25] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input122 [ 691.061101][ T25] dvb-usb: schedule remote query interval to 1000 msecs. [ 691.061120][ T25] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 691.061134][ T25] dvb-usb: bulk message failed: -22 (7/0) [ 691.061148][ T25] dvb-usb: bulk message failed: -22 (7/0) [ 691.132299][T16470] dvb-usb: bulk message failed: -22 (7/0) [ 691.145919][ T1221] usb 5-1: USB disconnect, device number 72 [ 691.202053][T12866] net_ratelimit: 34 callbacks suppressed [ 691.202071][T12866] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 691.239719][ T1221] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 691.310091][T12866] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 691.311831][T11431] usb 4-1: USB disconnect, device number 50 [ 691.419976][T11045] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 691.479326][ T5705] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 691.632579][ T5705] usb 3-1: Using ep0 maxpacket: 8 [ 691.633316][ T5705] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 691.637617][ T5705] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.637640][ T5705] usb 3-1: Product: syz [ 691.637652][ T5705] usb 3-1: Manufacturer: syz [ 691.637666][ T5705] usb 3-1: SerialNumber: syz [ 691.684906][ T5705] usb 3-1: config 0 descriptor?? [ 691.729089][T11045] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 691.842304][T12871] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 691.910743][ T5705] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 691.949023][ T1167] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 692.059904][ T73] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 692.169496][T11045] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 692.282524][T12866] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 692.343772][ T5705] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 692.359580][ T5705] usb 3-1: USB disconnect, device number 19 [ 692.390994][ T73] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 692.518693][T16494] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 692.700747][T16505] FAULT_INJECTION: forcing a failure. [ 692.700747][T16505] name failslab, interval 1, probability 0, space 0, times 0 [ 692.700778][T16505] CPU: 0 UID: 0 PID: 16505 Comm: syz.3.2938 Not tainted syzkaller #0 PREEMPT(full) [ 692.700799][T16505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 692.700810][T16505] Call Trace: [ 692.700819][T16505] [ 692.700827][T16505] dump_stack_lvl+0xe8/0x150 [ 692.700858][T16505] should_fail_ex+0x410/0x560 [ 692.700886][T16505] should_failslab+0xa8/0x100 [ 692.700911][T16505] __kmalloc_cache_noprof+0xa3/0x600 [ 692.700932][T16505] ? __kmalloc_cache_noprof+0x14d/0x600 [ 692.700950][T16505] ? alloc_netdev_mqs+0xca0/0x12a0 [ 692.700967][T16505] ? alloc_netdev_mqs+0xca0/0x12a0 [ 692.700992][T16505] alloc_netdev_mqs+0xca0/0x12a0 [ 692.701018][T16505] tun_set_iff+0x51d/0xf20 [ 692.701047][T16505] __tun_chr_ioctl+0x7e5/0x1e70 [ 692.701079][T16505] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 692.701101][T16505] ? __fget_files+0x2a/0x420 [ 692.701131][T16505] ? __fget_files+0x3a2/0x420 [ 692.701161][T16505] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 692.701192][T16505] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 692.701217][T16505] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 692.701239][T16505] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 692.701266][T16505] ? __fget_files+0x3a2/0x420 [ 692.701297][T16505] ? fput+0xa0/0xd0 [ 692.701319][T16505] ? ksys_write+0x242/0x270 [ 692.701359][T16505] __do_fast_syscall_32+0x27a/0x6a0 [ 692.701386][T16505] ? do_fast_syscall_32+0x33/0x70 [ 692.701411][T16505] ? asm_int80_emulation+0x1a/0x20 [ 692.701429][T16505] ? do_int80_emulation+0x299/0x500 [ 692.701453][T16505] ? trace_irq_disable+0x3b/0x140 [ 692.701476][T16505] do_fast_syscall_32+0x33/0x70 [ 692.701509][T16505] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 692.701532][T16505] RIP: 0023:0xf7f440ec [ 692.701549][T16505] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 692.701564][T16505] RSP: 002b:00000000f540650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 692.701585][T16505] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000400454ca [ 692.701598][T16505] RDX: 0000000080000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 692.701609][T16505] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 692.701621][T16505] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 692.701632][T16505] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 692.701662][T16505] [ 692.976063][T16507] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2939'. [ 693.429012][ T5616] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 693.579190][ T5616] usb 5-1: Using ep0 maxpacket: 16 [ 693.580003][ T5616] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 693.580947][ T5616] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 693.580967][ T5616] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 693.581947][ T5616] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 693.581970][ T5616] usb 5-1: SerialNumber: syz [ 693.590015][ T5724] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 693.739129][ T5724] usb 2-1: Using ep0 maxpacket: 32 [ 693.739621][ T5724] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 693.741518][ T5724] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 693.741541][ T5724] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 693.741559][ T5724] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 693.741578][ T5724] usb 2-1: config 1 has no interface number 0 [ 693.741603][ T5724] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 693.741617][ T5724] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 693.741638][ T5724] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.821880][ T5724] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 693.952239][ T31] audit: type=1326 audit(1790328663.507:2951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16518 comm="syz.1.2945" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe70ec code=0x7ffc0000 [ 693.953287][ T31] audit: type=1326 audit(1790328663.507:2952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16518 comm="syz.1.2945" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe70ec code=0x7ffc0000 [ 693.954218][ T31] audit: type=1326 audit(1790328663.507:2953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16518 comm="syz.1.2945" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf7fe70ec code=0x7ffc0000 [ 693.954288][ T31] audit: type=1326 audit(1790328663.507:2954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16518 comm="syz.1.2945" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe70ec code=0x7ffc0000 [ 693.954329][ T31] audit: type=1326 audit(1790328663.507:2955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16518 comm="syz.1.2945" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe70ec code=0x7ffc0000 [ 693.955994][ T5724] snd_usb_pod 2-1:1.1: set_interface failed [ 693.956211][ T5724] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 693.956378][ T5724] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 693.989990][ T5724] usb 2-1: USB disconnect, device number 8 [ 694.389048][ T5616] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 694.537043][T16532] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2942'. [ 694.538907][ T5616] usb 4-1: Using ep0 maxpacket: 8 [ 694.549619][ T5616] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 694.565942][ T5616] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 694.565983][ T5616] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.573312][ T5616] usb 4-1: config 0 descriptor?? [ 694.786949][ T5616] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 694.867529][T16536] syzkaller1: entered promiscuous mode [ 694.867551][T16536] syzkaller1: entered allmulticast mode [ 695.056968][T16541] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2952'. [ 695.402496][ T5724] usb 4-1: USB disconnect, device number 51 [ 695.526544][T16556] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 695.783908][T16564] sctp: [Deprecated]: syz.5.2959 (pid 16564) Use of struct sctp_assoc_value in delayed_ack socket option. [ 695.783908][T16564] Use struct sctp_sack_info instead [ 695.786462][T16564] sctp: [Deprecated]: syz.5.2959 (pid 16564) Use of struct sctp_assoc_value in delayed_ack socket option. [ 695.786462][T16564] Use struct sctp_sack_info instead [ 695.987706][ T5669] dvb-usb: did not find the firmware file 'dvb-usb-wt220u-fc03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 696.000528][ T5669] dvb-usb: found a 'WideView WT-220U PenType Receiver (Typhoon/Freecom)' in cold state, will try to load a firmware [ 696.002886][ T5669] usb 6-1: Direct firmware load for dvb-usb-wt220u-fc03.fw failed with error -2 [ 696.002920][ T5669] usb 6-1: Falling back to sysfs fallback for: dvb-usb-wt220u-fc03.fw [ 696.262735][ T73] net_ratelimit: 34 callbacks suppressed [ 696.262755][ T73] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 696.298642][ T1221] usb 5-1: USB disconnect, device number 73 [ 696.378205][T12866] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 696.479475][T12871] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 696.591222][T12866] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 696.699863][T12871] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 696.819099][ T1167] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 696.888988][ T1221] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 696.929944][T12866] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 697.043207][ T1167] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 697.063614][ T1221] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 697.067129][ T1221] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 697.067152][ T1221] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 697.067169][ T1221] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 697.067186][ T1221] usb 5-1: config 220 has no interface number 2 [ 697.067247][ T1221] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 697.067271][ T1221] usb 5-1: config 220 interface 0 has no altsetting 0 [ 697.067288][ T1221] usb 5-1: config 220 interface 76 has no altsetting 0 [ 697.067305][ T1221] usb 5-1: config 220 interface 1 has no altsetting 0 [ 697.071545][ T1221] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.071566][ T1221] usb 5-1: Product: syz [ 697.071579][ T1221] usb 5-1: Manufacturer: syz [ 697.071593][ T1221] usb 5-1: SerialNumber: syz [ 697.150369][T12866] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 697.255093][T16593] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 697.259214][ T73] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 697.329681][ T1221] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 697.329700][ T1221] uvcvideo 5-1:220.0: No valid video chain found. [ 697.329731][ T1221] usb 5-1: selecting invalid altsetting 0 [ 697.360257][ T1221] usb 5-1: selecting invalid altsetting 0 [ 697.360281][ T1221] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 697.378624][ T1221] usb 5-1: USB disconnect, device number 74 [ 697.512711][T16596] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 698.053267][T16606] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2970'. [ 698.084725][T16614] FAULT_INJECTION: forcing a failure. [ 698.084725][T16614] name failslab, interval 1, probability 0, space 0, times 0 [ 698.084755][T16614] CPU: 0 UID: 0 PID: 16614 Comm: syz.5.2975 Not tainted syzkaller #0 PREEMPT(full) [ 698.084776][T16614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 698.084788][T16614] Call Trace: [ 698.084796][T16614] [ 698.084805][T16614] dump_stack_lvl+0xe8/0x150 [ 698.084836][T16614] should_fail_ex+0x410/0x560 [ 698.084864][T16614] should_failslab+0xa8/0x100 [ 698.084889][T16614] __kmalloc_noprof+0xfe/0x720 [ 698.084908][T16614] ? rcu_is_watching+0x16/0xb0 [ 698.084931][T16614] ? tomoyo_realpath_from_path+0xef/0x640 [ 698.084955][T16614] ? tomoyo_realpath_from_path+0xef/0x640 [ 698.084988][T16614] tomoyo_realpath_from_path+0xef/0x640 [ 698.085023][T16614] ? tomoyo_path_number_perm+0x219/0x5f0 [ 698.085045][T16614] tomoyo_path_number_perm+0x246/0x5f0 [ 698.085070][T16614] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 698.085095][T16614] ? __lock_acquire+0x747/0x2de0 [ 698.085130][T16614] ? hook_file_ioctl_compat+0x1f2/0x600 [ 698.085181][T16614] ? __fget_files+0x2a/0x420 [ 698.085215][T16614] ? __fget_files+0x3a2/0x420 [ 698.085237][T16614] ? __fget_files+0x2a/0x420 [ 698.085264][T16614] security_file_ioctl_compat+0xc3/0x2a0 [ 698.085286][T16614] __ia32_compat_sys_ioctl+0x139/0x950 [ 698.085310][T16614] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 698.085332][T16614] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 698.085358][T16614] ? __fget_files+0x3a2/0x420 [ 698.085387][T16614] ? fput+0xa0/0xd0 [ 698.085410][T16614] ? ksys_write+0x242/0x270 [ 698.085450][T16614] __do_fast_syscall_32+0x27a/0x6a0 [ 698.085476][T16614] ? do_fast_syscall_32+0x33/0x70 [ 698.085501][T16614] ? asm_int80_emulation+0x1a/0x20 [ 698.085518][T16614] ? do_int80_emulation+0x299/0x500 [ 698.085540][T16614] ? trace_irq_disable+0x3b/0x140 [ 698.085562][T16614] do_fast_syscall_32+0x33/0x70 [ 698.085586][T16614] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 698.085608][T16614] RIP: 0023:0xf708f0ec [ 698.085625][T16614] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 698.085640][T16614] RSP: 002b:00000000f547d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 698.085660][T16614] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040246f4c [ 698.085673][T16614] RDX: 0000000080000340 RSI: 0000000000000000 RDI: 0000000000000000 [ 698.085685][T16614] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 698.085697][T16614] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 698.085708][T16614] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 698.085736][T16614] [ 698.090750][T16614] ERROR: Out of memory at tomoyo_realpath_from_path. [ 698.319558][ T5616] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 698.354948][ T5615] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 698.371879][ T5615] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 698.377903][ T5615] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 698.379267][ T5615] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 698.379850][ T5615] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 698.519812][ T5616] usb 5-1: Using ep0 maxpacket: 16 [ 698.542787][ T5616] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 698.544377][ T5616] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 698.544399][ T5616] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 698.578373][ T5616] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 698.578397][ T5616] usb 5-1: SerialNumber: syz [ 698.991691][T16630] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 699.142517][T16620] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.142621][T16620] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.142761][T16620] bridge_slave_0: entered allmulticast mode [ 699.146220][T16620] bridge_slave_0: entered promiscuous mode [ 699.153702][T16620] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.155299][T16620] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.155744][T16620] bridge_slave_1: entered allmulticast mode [ 699.161412][T16620] bridge_slave_1: entered promiscuous mode [ 699.263289][T16620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 699.272314][T16620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 699.275779][T16641] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 699.344802][T16620] team0: Port device team_slave_0 added [ 699.354923][T16620] team0: Port device team_slave_1 added [ 699.410491][T16620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 699.410506][T16620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 699.410528][T16620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 699.412551][T16620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 699.412565][T16620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 699.412587][T16620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 699.547500][T16620] hsr_slave_0: entered promiscuous mode [ 699.556498][T16620] hsr_slave_1: entered promiscuous mode [ 699.558804][T16620] debugfs: 'hsr0' already exists in 'hsr' [ 699.558824][T16620] Cannot create hsr debugfs directory [ 699.571081][T16645] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2974'. [ 699.580430][T16644] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 700.059448][T16620] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 700.059484][T16620] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.180745][T16620] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 700.180778][T16620] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.346652][T16620] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 700.346687][T16620] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.474384][ T1221] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 700.480276][ T5626] Bluetooth: hci1: command tx timeout [ 700.500420][T16620] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 700.500451][T16620] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.630817][ T1221] usb 4-1: Using ep0 maxpacket: 16 [ 700.631612][ T1221] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 700.632648][ T1221] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 700.632675][ T1221] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 700.632695][ T1221] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 700.632731][ T1221] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.635583][ T1221] usb 4-1: config 0 descriptor?? [ 700.967814][T16620] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 700.978447][T16620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 700.987033][T16620] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 700.997664][T16620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 701.006456][T16620] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 701.041949][T16620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 701.043161][T16620] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 701.059924][T16620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 701.082925][ T5616] usb 5-1: USB disconnect, device number 75 [ 701.123290][ T1221] microsoft 0003:045E:07DA.0014: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 701.269994][ T73] net_ratelimit: 21 callbacks suppressed [ 701.270013][ T73] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 701.332417][T16656] syzkaller0: entered promiscuous mode [ 701.332437][T16656] syzkaller0: entered allmulticast mode [ 701.421871][ T73] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 701.559456][T16620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 701.586477][ T1221] usb 4-1: USB disconnect, device number 52 [ 701.599998][ T73] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 701.604149][T16620] 8021q: adding VLAN 0 to HW filter on device team0 [ 701.668162][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 701.668277][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 701.704178][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 701.704236][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 701.839795][ T1167] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 701.950637][T12866] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 701.973352][T16620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 702.059323][T12866] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 702.085520][T16620] veth0_vlan: entered promiscuous mode [ 702.106447][T16620] veth1_vlan: entered promiscuous mode [ 702.155465][T16620] veth0_macvtap: entered promiscuous mode [ 702.172480][T16620] veth1_macvtap: entered promiscuous mode [ 702.188607][ T73] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 702.224268][T16620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 702.272834][T16620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 702.312001][ T1167] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.312042][ T1167] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.370179][ T1161] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.412702][ T1167] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.412741][ T1167] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 702.476090][T16698] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 702.572614][ T5626] Bluetooth: hci1: command tx timeout [ 702.606607][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 702.606618][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 702.763560][T12866] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 702.763581][T12866] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 702.769916][ T1167] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 702.882214][ T73] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 704.067094][T16736] FAULT_INJECTION: forcing a failure. [ 704.067094][T16736] name failslab, interval 1, probability 0, space 0, times 0 [ 704.067156][T16736] CPU: 0 UID: 0 PID: 16736 Comm: syz.2.3003 Not tainted syzkaller #0 PREEMPT(full) [ 704.067178][T16736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 704.067189][T16736] Call Trace: [ 704.067198][T16736] [ 704.067206][T16736] dump_stack_lvl+0xe8/0x150 [ 704.067240][T16736] should_fail_ex+0x410/0x560 [ 704.067266][T16736] should_failslab+0xa8/0x100 [ 704.067291][T16736] __kmalloc_noprof+0xfe/0x720 [ 704.067311][T16736] ? tomoyo_encode+0x2ad/0x570 [ 704.067332][T16736] ? tomoyo_encode+0x2ad/0x570 [ 704.067355][T16736] tomoyo_encode+0x2ad/0x570 [ 704.067378][T16736] tomoyo_realpath_from_path+0x5fa/0x640 [ 704.067405][T16736] ? tomoyo_path_number_perm+0x219/0x5f0 [ 704.067422][T16736] tomoyo_path_number_perm+0x246/0x5f0 [ 704.067440][T16736] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 704.067457][T16736] ? __lock_acquire+0x747/0x2de0 [ 704.067484][T16736] ? hook_file_ioctl_compat+0x1f2/0x600 [ 704.067518][T16736] ? __fget_files+0x2a/0x420 [ 704.067541][T16736] ? __fget_files+0x3a2/0x420 [ 704.067559][T16736] ? __fget_files+0x2a/0x420 [ 704.067582][T16736] security_file_ioctl_compat+0xc3/0x2a0 [ 704.067600][T16736] __ia32_compat_sys_ioctl+0x139/0x950 [ 704.067619][T16736] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 704.067636][T16736] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 704.067657][T16736] ? __fget_files+0x3a2/0x420 [ 704.067681][T16736] ? fput+0xa0/0xd0 [ 704.067699][T16736] ? ksys_write+0x242/0x270 [ 704.067734][T16736] __do_fast_syscall_32+0x27a/0x6a0 [ 704.067755][T16736] ? do_fast_syscall_32+0x33/0x70 [ 704.067774][T16736] ? asm_int80_emulation+0x1a/0x20 [ 704.067787][T16736] ? do_int80_emulation+0x299/0x500 [ 704.067806][T16736] ? trace_irq_disable+0x3b/0x140 [ 704.067824][T16736] do_fast_syscall_32+0x33/0x70 [ 704.067844][T16736] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 704.067862][T16736] RIP: 0023:0xf7f070ec [ 704.067875][T16736] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 704.067887][T16736] RSP: 002b:00000000f538450c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 704.067904][T16736] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000008946 [ 704.067915][T16736] RDX: 00000000800002c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 704.067925][T16736] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 704.067933][T16736] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 704.067942][T16736] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 704.067965][T16736] [ 704.071203][T16736] ERROR: Out of memory at tomoyo_realpath_from_path. [ 704.118981][T16736] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3003'. [ 704.311312][ T5616] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 704.439419][ T10] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 704.470345][ T5616] usb 2-1: Using ep0 maxpacket: 16 [ 704.471884][ T5616] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 704.472922][ T5616] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 704.472949][ T5616] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 704.472971][ T5616] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 704.472991][ T5616] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 704.474670][ T5616] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 704.474685][ T5616] usb 2-1: SerialNumber: syz [ 704.478599][T16734] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 704.478736][T16734] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 704.570175][ T5616] hub 2-1:1.0: bad descriptor, ignoring hub [ 704.570201][ T5616] hub 2-1:1.0: probe with driver hub failed with error -5 [ 704.611578][ T10] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 704.614883][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.619487][ T10] usb 3-1: config 0 descriptor?? [ 704.647658][ T10] hub 3-1:0.0: bad descriptor, ignoring hub [ 704.647673][ T10] hub 3-1:0.0: probe with driver hub failed with error -5 [ 704.649139][ T5626] Bluetooth: hci1: command tx timeout [ 704.654928][ T10] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 704.774114][T16734] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 704.774216][T16734] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 705.203647][T16734] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3004'. [ 705.218460][ T5616] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 705.260643][ T5616] usb 2-1: USB disconnect, device number 9 [ 706.351230][ T1161] net_ratelimit: 30 callbacks suppressed [ 706.351252][ T1161] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 706.459831][T12866] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 706.570068][T12866] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 706.679073][ T1167] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 706.719125][ T5626] Bluetooth: hci1: command tx timeout [ 706.789733][ T1161] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 706.880232][ T10] gp8psk: usb in 128 operation failed. [ 706.880521][ T10] gp8psk: usb in 137 operation failed. [ 706.880531][ T10] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 706.880552][ T10] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 706.910137][T12871] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 707.014513][ T1167] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 707.130308][ T1167] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 707.247252][T12871] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 707.342091][T16776] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 707.359106][T12871] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 707.539007][ T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 707.559270][ T25] usb 3-1: USB disconnect, device number 20 [ 707.690417][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 707.691264][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 707.692491][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 707.692512][ T10] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 707.694560][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 707.694582][ T10] usb 2-1: SerialNumber: syz [ 707.853320][ T5616] hsr0: entered promiscuous mode [ 707.857118][T16790] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3019'. [ 707.888379][T16782] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3018'. [ 708.408480][T16802] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 708.612384][T16804] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3016'. [ 709.469055][ T5616] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 709.618949][ T5616] usb 4-1: Using ep0 maxpacket: 16 [ 709.619450][ T5616] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 709.620416][ T5616] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 709.620444][ T5616] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 709.620465][ T5616] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 709.620486][ T5616] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 709.621388][ T5616] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 709.621409][ T5616] usb 4-1: SerialNumber: syz [ 709.624059][T16816] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 709.624188][T16816] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 709.625953][ T5616] hub 4-1:1.0: bad descriptor, ignoring hub [ 709.625975][ T5616] hub 4-1:1.0: probe with driver hub failed with error -5 [ 709.827109][T16816] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 709.827176][T16816] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 710.233816][T16816] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3027'. [ 710.236345][ T5616] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 710.260765][ T5616] usb 4-1: USB disconnect, device number 53 [ 710.292835][ T5724] usb 2-1: USB disconnect, device number 10 [ 710.826975][T16837] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3035'. [ 710.849460][ T5724] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 710.872451][T16835] syzkaller0: entered promiscuous mode [ 710.872470][T16835] syzkaller0: entered allmulticast mode [ 710.905914][T16837] block device autoloading is deprecated and will be removed. [ 710.999148][ T5724] usb 2-1: Using ep0 maxpacket: 16 [ 711.001363][ T5724] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 711.002268][ T5724] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 711.002290][ T5724] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 711.009571][ T5724] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 711.009592][ T5724] usb 2-1: SerialNumber: syz [ 711.145458][T16843] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3037'. [ 711.277020][T16849] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3038'. [ 711.279235][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 711.449147][ T5724] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 711.449273][T12866] net_ratelimit: 36 callbacks suppressed [ 711.449287][T12866] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 711.452334][T16852] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 711.479434][T16852] socket: no more sockets [ 711.519013][ T5704] usb 5-1: new full-speed USB device number 76 using dummy_hcd [ 711.559382][T12870] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 711.598918][ T5724] usb 4-1: Using ep0 maxpacket: 16 [ 711.599615][ T5724] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 711.600421][ T5724] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 711.600434][ T5724] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 711.601221][ T5724] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 711.601242][ T5724] usb 4-1: SerialNumber: syz [ 711.669626][ T1161] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 711.671128][ T5704] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 711.672098][ T5704] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.674022][ T5704] usb 5-1: config 0 descriptor?? [ 711.696378][ T5704] hub 5-1:0.0: bad descriptor, ignoring hub [ 711.696402][ T5704] hub 5-1:0.0: probe with driver hub failed with error -5 [ 711.724204][ T5704] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 711.781041][T12866] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 711.889208][T12866] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 711.929783][T16857] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3033'. [ 712.013970][ T5705] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 712.016849][T12870] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 712.122245][ T1161] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 712.230072][ T1161] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 712.339226][T12871] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 712.514756][T16871] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3039'. [ 713.039212][ T10] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 713.626363][ T10] usb 2-1: USB disconnect, device number 11 [ 713.692424][T16874] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3046'. [ 713.745362][T16876] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3046'. [ 713.920538][ T5704] gp8psk: usb in 128 operation failed. [ 713.923192][ T5704] gp8psk: usb in 137 operation failed. [ 713.923208][ T5704] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 713.923246][ T5704] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 714.079119][ T10] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 714.280269][ T5705] usb 4-1: USB disconnect, device number 54 [ 714.321623][ T10] usb 5-1: USB disconnect, device number 76 [ 714.579504][ T10] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 714.729442][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 714.731496][ T10] usb 5-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 714.733262][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 714.733283][ T10] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 714.735163][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.735184][ T10] usb 5-1: Product: syz [ 714.735198][ T10] usb 5-1: Manufacturer: syz [ 714.735210][ T10] usb 5-1: SerialNumber: syz [ 714.897478][T16894] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3051'. [ 714.976349][ T10] usb 5-1: unit 5 not found! [ 714.976379][ T10] usb 5-1: unit 16 not found! [ 715.067455][ T10] usb 5-1: USB disconnect, device number 77 [ 715.116690][ T5620] udevd[5620]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 715.136682][ T5705] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 715.549012][ T5724] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 715.685839][T16908] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3054'. [ 715.699809][ T5724] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 715.705742][ T5724] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.705766][ T5724] usb 3-1: Product: syz [ 715.705780][ T5724] usb 3-1: Manufacturer: syz [ 715.705794][ T5724] usb 3-1: SerialNumber: syz [ 715.743166][ T5724] usb 3-1: config 0 descriptor?? [ 715.754614][ T5724] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 715.785866][ T5724] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 715.787012][ T5724] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 715.787063][ T5724] usb 3-1: media controller created [ 715.832919][ T5724] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 715.849068][ T10] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 715.916747][ T5724] DVB: Unable to find symbol mt352_attach() [ 715.959061][ T5616] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 716.003238][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 716.004301][ T10] usb 4-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=aa.0e [ 716.009365][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 716.012930][ T10] usb 4-1: New USB device strings: Mfr=111, Product=145, SerialNumber=147 [ 716.012952][ T10] usb 4-1: Product: syz [ 716.012966][ T10] usb 4-1: Manufacturer: syz [ 716.012979][ T10] usb 4-1: SerialNumber: syz [ 716.024569][ T10] usb 4-1: config 0 descriptor?? [ 716.034631][ T10] rndis_host 4-1:0.0: rndis: master #0/ffff888031a07000 slave #1/0000000000000000 [ 716.063131][T16919] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3057'. [ 716.085713][ T5724] DVB: Unable to find symbol nxt6000_attach() [ 716.085727][ T5724] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 716.107312][ T5724] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input124 [ 716.121111][ T5724] dvb-usb: schedule remote query interval to 1000 msecs. [ 716.121129][ T5724] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 716.121144][ T5724] dvb-usb: bulk message failed: -22 (7/0) [ 716.121171][ T5724] dvb-usb: bulk message failed: -22 (7/0) [ 716.125946][ T5724] usb 3-1: USB disconnect, device number 21 [ 716.159265][ T5616] usb 5-1: Using ep0 maxpacket: 16 [ 716.174457][ T5616] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 716.175729][ T10] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 716.195106][ T5616] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 716.195128][ T5616] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 716.198096][ T5616] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 716.198118][ T5616] usb 5-1: SerialNumber: syz [ 716.326050][ T5724] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 716.399140][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 716.403845][T12870] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 716.509750][T12870] net_ratelimit: 36 callbacks suppressed [ 716.509769][T12870] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 716.618948][ T73] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 716.636580][T16928] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3061'. [ 716.738992][ T1161] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 716.834872][ T5616] usb 4-1: USB disconnect, device number 55 [ 716.848258][ T5724] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 716.849170][ T73] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 716.909039][ T5705] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 716.969391][T12866] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 717.008952][ T5724] usb 2-1: Using ep0 maxpacket: 8 [ 717.009465][ T5724] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 717.010418][ T5724] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 717.010445][ T5724] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 717.010468][ T5724] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 717.010488][ T5724] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 717.010511][ T5724] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.051748][ T5705] usb 3-1: device descriptor read/64, error -71 [ 717.092528][ T1161] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 717.159511][T16931] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3056'. [ 717.200390][T12870] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 717.220580][ T5724] usb 2-1: GET_CAPABILITIES returned 0 [ 717.220606][ T5724] usbtmc 2-1:16.0: can't read capabilities [ 717.280584][ T5705] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 717.309026][ T1161] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 717.419065][ T5705] usb 3-1: device descriptor read/64, error -71 [ 717.420980][T12870] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 717.426326][ T10] usb 2-1: USB disconnect, device number 12 [ 717.452714][ T5613] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 717.529313][ T5705] usb usb3-port1: attempt power cycle [ 717.530450][ T1161] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 717.792640][T16940] FAULT_INJECTION: forcing a failure. [ 717.792640][T16940] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 717.792686][T16940] CPU: 0 UID: 0 PID: 16940 Comm: syz.3.3063 Not tainted syzkaller #0 PREEMPT(full) [ 717.792707][T16940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 717.792719][T16940] Call Trace: [ 717.792727][T16940] [ 717.792735][T16940] dump_stack_lvl+0xe8/0x150 [ 717.792766][T16940] should_fail_ex+0x410/0x560 [ 717.792792][T16940] copy_fpstate_to_sigframe+0xa12/0xd20 [ 717.792822][T16940] ? copy_fpstate_to_sigframe+0x188/0xd20 [ 717.792852][T16940] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 717.792880][T16940] ? ktime_get+0x45/0x220 [ 717.792901][T16940] ? ktime_get+0x45/0x220 [ 717.792935][T16940] ? fpu__alloc_mathframe+0xac/0x130 [ 717.792964][T16940] get_sigframe+0x603/0x830 [ 717.792999][T16940] ? __pfx_get_sigframe+0x10/0x10 [ 717.793036][T16940] ia32_setup_rt_frame+0x110/0xae0 [ 717.793061][T16940] ? _raw_spin_unlock_irq+0x2e/0x50 [ 717.793082][T16940] ? get_signal+0x10dd/0x12c0 [ 717.793113][T16940] ? __pfx_ia32_setup_rt_frame+0x10/0x10 [ 717.793144][T16940] arch_do_signal_or_restart+0x48e/0x860 [ 717.793173][T16940] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 717.793208][T16940] ? __ia32_compat_sys_rt_sigreturn+0x237/0x270 [ 717.793237][T16940] exit_to_user_mode_loop+0x10e/0x770 [ 717.793258][T16940] ? rcu_is_watching+0x16/0xb0 [ 717.793288][T16940] ? asm_int80_emulation+0x1a/0x20 [ 717.793309][T16940] ? asm_int80_emulation+0x1a/0x20 [ 717.793328][T16940] do_int80_emulation+0x314/0x500 [ 717.793353][T16940] ? trace_irq_disable+0x3b/0x140 [ 717.793372][T16940] ? asm_int80_emulation+0x1a/0x20 [ 717.793389][T16940] ? clear_bhb_loop+0x70/0xc0 [ 717.793408][T16940] ? clear_bhb_loop+0x70/0xc0 [ 717.793430][T16940] asm_int80_emulation+0x1a/0x20 [ 717.793448][T16940] RIP: 0023:0xf7f440ec [ 717.793465][T16940] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 717.793482][T16940] RSP: 002b:00000000f53e550c EFLAGS: 00000206 [ 717.793500][T16940] RAX: 00000000fffffff2 RBX: 0000000000000004 RCX: 0000000080000380 [ 717.793513][T16940] RDX: 0000000000000042 RSI: 0000000000000000 RDI: 0000000000000000 [ 717.793525][T16940] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 717.793536][T16940] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 717.793547][T16940] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 717.793575][T16940] [ 717.888965][ T5705] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 717.909547][ T5705] usb 3-1: device descriptor read/8, error -71 [ 718.096699][T16943] netlink: 'syz.1.3064': attribute type 8 has an invalid length. [ 718.128137][T16943] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3064'. [ 718.148941][ T5705] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 718.170705][ T5705] usb 3-1: device descriptor read/8, error -71 [ 718.275780][T16945] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 718.290350][ T5705] usb usb3-port1: unable to enumerate USB device [ 718.310013][ T31] audit: type=1326 audit(1790328687.867:2956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16944 comm="syz.1.3065" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 718.310058][ T31] audit: type=1326 audit(1790328687.867:2957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16944 comm="syz.1.3065" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 718.310457][ T31] audit: type=1326 audit(1790328687.867:2958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16944 comm="syz.1.3065" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 718.310665][ T31] audit: type=1326 audit(1790328687.867:2959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16944 comm="syz.1.3065" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 718.311524][ T31] audit: type=1326 audit(1790328687.867:2960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16944 comm="syz.1.3065" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 718.311567][ T31] audit: type=1326 audit(1790328687.867:2961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16944 comm="syz.1.3065" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 718.311607][ T31] audit: type=1326 audit(1790328687.867:2962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16944 comm="syz.1.3065" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 718.312009][ T31] audit: type=1326 audit(1790328687.867:2963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16944 comm="syz.1.3065" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 718.312289][ T31] audit: type=1326 audit(1790328687.867:2964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16944 comm="syz.1.3065" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 718.314151][ T31] audit: type=1326 audit(1790328687.867:2965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16944 comm="syz.1.3065" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fdf0ec code=0x7ffc0000 [ 718.332202][ T5613] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 718.519390][ T5705] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 718.699502][ T5616] usb 5-1: USB disconnect, device number 78 [ 718.894919][T16958] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3066'. [ 718.949324][ T5705] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 719.078912][ T5705] usb 4-1: device descriptor read/64, error -71 [ 719.088946][ T5616] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 719.248939][ T5616] usb 5-1: Using ep0 maxpacket: 16 [ 719.249618][ T5616] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 719.250902][ T5616] usb 5-1: config index 0 descriptor too short (expected 51443, got 18) [ 719.253432][ T5616] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.253454][ T5616] usb 5-1: Product: syz [ 719.253468][ T5616] usb 5-1: Manufacturer: syz [ 719.253481][ T5616] usb 5-1: SerialNumber: syz [ 719.257826][ T5616] r8152-cfgselector 5-1: Unknown version 0x0000 [ 719.257854][ T5616] r8152-cfgselector 5-1: config 0 descriptor?? [ 719.318965][ T5705] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 719.450574][ T5705] usb 4-1: device descriptor read/64, error -71 [ 719.559737][ T5705] usb usb4-port1: attempt power cycle [ 719.599745][ T5616] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 719.600054][ T10] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 719.602539][ T1161] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 719.723565][T16967] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 719.764478][ T1221] r8152-cfgselector 5-1: USB disconnect, device number 79 [ 719.920245][ T5705] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 719.949403][ T5705] usb 4-1: device descriptor read/8, error -71 [ 720.028973][ T5613] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 720.178964][ T5613] usb 3-1: Using ep0 maxpacket: 8 [ 720.179735][ T5613] usb 3-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 720.181025][ T5613] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 720.181046][ T5613] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 720.183390][ T5613] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.183413][ T5613] usb 3-1: Product: syz [ 720.183426][ T5613] usb 3-1: Manufacturer: syz [ 720.183440][ T5613] usb 3-1: SerialNumber: syz [ 720.194746][ T5705] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 720.238040][ T5705] usb 4-1: device descriptor read/8, error -71 [ 720.350401][ T5705] usb usb4-port1: unable to enumerate USB device [ 720.551649][T16978] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3076'. [ 720.640451][ T5705] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration Stopping sshd: stopped /usr/sbin/sshd (pid 5371) OK [ 721.068667][ T5613] usb 3-1: unit 5 not found! [ 721.068696][ T5613] usb 3-1: unit 16 not found! Stopping crond: stopped /usr/sbin/crond (pid 5353) OK [ 721.199510][ T5613] usb 3-1: USB disconnect, device number 26 [ 721.259973][ T5620] udevd[5620]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 721.379928][ T5616] usb 2-1: new high-speed USB device number 13 using dummy_hcd Stopping dhcpcd... stopped /sbin/dhcpcd (pid 5278) [ 721.532096][ T5616] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 721.538667][ T5616] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.538690][ T5616] usb 2-1: Product: syz [ 721.538703][ T5616] usb 2-1: Manufacturer: syz [ 721.538716][ T5616] usb 2-1: SerialNumber: syz [ 721.547307][ T5616] usb 2-1: config 0 descriptor?? [ 721.561235][ T1167] net_ratelimit: 35 callbacks suppressed [ 721.561252][ T1167] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 721.576185][ T5616] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 721.592301][ T5616] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 721.593383][ T5616] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 721.593430][ T5616] usb 2-1: media controller created [ 721.656813][ T5616] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 721.671677][T12866] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 721.725223][ T5613] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 721.781647][T12871] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 721.891708][T12871] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 721.957382][ T5616] DVB: Unable to find symbol mt352_attach() [ 722.001021][T12871] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 722.086076][ T5616] DVB: Unable to find symbol nxt6000_attach() [ 722.086086][ T5616] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 722.105085][ T5616] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input125 [ 722.112972][ T1161] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 722.124232][ T5616] dvb-usb: schedule remote query interval to 1000 msecs. [ 722.124251][ T5616] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 722.124265][ T5616] dvb-usb: bulk message failed: -22 (7/0) [ 722.124279][ T5616] dvb-usb: bulk message failed: -22 (7/0) [ 722.135778][ T5616] usb 2-1: USB disconnect, device number 13 [ 722.160269][ T1167] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration Stopping network[ 722.168601][T17023] kvm: requested 6704 ns i8254 timer period limited to 200000 ns : [ 722.220144][ T1167] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 722.260989][ T5616] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 722.320272][ T5690] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 722.335217][T12866] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 722.441211][ T1167] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 722.469985][ T5690] usb 4-1: Using ep0 maxpacket: 16 [ 722.474954][ T5690] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 722.480172][ T5690] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 722.480193][ T5690] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 722.487079][ T5690] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 722.487101][ T5690] usb 4-1: SerialNumber: syz [ 722.550727][ T1167] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 723.130686][T17041] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3084'. [ 723.174062][T17044] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 723.200267][ T5613] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 723.441763][T17054] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3083'. OK Stopping iptables: OK [ 724.240191][ T5613] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration Stopping system message bus: [ 724.382011][T17072] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 724.489211][T17083] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3093'. [ 724.489232][T17083] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3093'. [ 724.525687][T17082] 8021q: adding VLAN 0 to HW filter on device bond2 [ 724.577368][T17085] bond2: (slave bridge5): making interface the new active one [ 724.583297][T17085] bond2: (slave bridge5): Enslaving as an active interface with an up link [ 724.609083][ T5704] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 724.645364][T17083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 724.661534][T17083] bond2: (slave bond0): making interface the new active one [ 724.683249][T17083] bond0: entered promiscuous mode [ 724.683279][T17083] bond_slave_0: entered promiscuous mode [ 724.684040][T17083] bond2: (slave bond0): Enslaving as an active interface with an up link [ 724.719482][T12870] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 724.739293][ T5704] usb 2-1: device descriptor read/64, error -71 [ 724.819863][T12870] bond2: (slave bridge5): link status definitely down, disabling slave [ 724.981950][ T5704] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 725.109913][ T5704] usb 2-1: device descriptor read/64, error -71 [ 725.135202][ T5616] usb 4-1: USB disconnect, device number 60 [ 725.219641][ T5704] usb usb2-port1: attempt power cycle [ 725.280564][ T5613] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration done [ 725.361332][ T5613] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 725.518109][T17109] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 725.554310][T17105] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 725.559056][ T5704] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 725.583176][ T5704] usb 2-1: device descriptor read/8, error -71 [ 725.613038][T17095] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3095'. [ 725.824796][ T5704] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 725.841650][ T5704] usb 2-1: device descriptor read/8, error -71 [ 725.949362][ T5704] usb usb2-port1: unable to enumerate USB device [ 726.004909][ T31] kauditd_printk_skb: 60 callbacks suppressed [ 726.004927][ T31] audit: type=1800 audit(1790328695.557:3026): pid=17118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3101" name="nullb0" dev="devtmpfs" ino=4850 res=0 errno=0 [ 726.066100][T17120] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3102'. [ 726.322281][ T5613] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration Stopping klogd: OK Stopping acpid: [ 726.613862][T17132] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3103'. [ 726.642225][T12871] net_ratelimit: 32 callbacks suppressed [ 726.642244][T12871] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 726.759111][ T1161] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 726.869275][T12866] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 726.979995][ T1167] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 727.089870][T12871] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 727.200139][ T1167] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 727.279628][ T1167] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 727.311743][ T1161] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 727.420126][T12871] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 727.428988][ T5613] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 727.530221][ T1161] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 727.589049][ T5613] usb 5-1: Using ep0 maxpacket: 16 [ 727.589759][ T5613] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 727.590729][ T5613] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 727.590832][ T5613] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 727.592815][ T5613] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.592836][ T5613] usb 5-1: Product: syz [ 727.592850][ T5613] usb 5-1: Manufacturer: syz [ 727.592864][ T5613] usb 5-1: SerialNumber: syz [ 727.602405][ T5613] usb 5-1: 0:2 : does not exist [ 727.642493][ T1167] bond2: (slave ip6gretap1): failed to get link speed/duplex OK Stopping syslogd: [ 727.805165][T17157] input: syz0 as /devices/virtual/input/input126 [ 727.808742][ T5613] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 727.876916][ T5613] usb 5-1: USB disconnect, device number 80 stopped /sbin/syslogd (pid 4966) OK [ 728.120869][T17166] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. umount: can't remount debugfs read-only umount: tmpfs busy - remounted read-only [ 728.319141][ T5613] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 728.582160][T17178] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 728.621519][ T31] audit: type=1326 audit(1790328698.177:3027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17177 comm="syz.3.3116" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f440ec code=0x7ffc0000 [ 728.622124][ T31] audit: type=1326 audit(1790328698.177:3028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17177 comm="syz.3.3116" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f440ec code=0x7ffc0000 [ 728.622350][ T31] audit: type=1326 audit(1790328698.177:3029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17177 comm="syz.3.3116" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f440ec code=0x7ffc0000 [ 728.622597][ T31] audit: type=1326 audit(1790328698.177:3030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17177 comm="syz.3.3116" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f440ec code=0x7ffc0000 [ 728.623220][ T31] audit: type=1326 audit(1790328698.177:3031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17177 comm="syz.3.3116" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f440ec code=0x7ffc0000 [ 728.623429][ T31] audit: type=1326 audit(1790328698.177:3032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17177 comm="syz.3.3116" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f440ec code=0x7ffc0000 [ 728.623793][ T31] audit: type=1326 audit(1790328698.177:3033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17177 comm="syz.3.3116" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f440ec code=0x7ffc0000 [ 728.624084][ T31] audit: type=1326 audit(1790328698.177:3034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17177 comm="syz.3.3116" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f440ec code=0x7ffc0000 [ 728.624419][ T31] audit: type=1326 audit(1790328698.177:3035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17177 comm="syz.3.3116" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f440ec code=0x7ffc0000 [ 728.682207][ T5705] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 728.964406][ T5705] usb 5-1: Using ep0 maxpacket: 16 [ 728.997570][ T5705] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 729.002145][ T5705] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 729.002166][ T5705] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 729.004079][ T5705] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 729.004100][ T5705] usb 5-1: SerialNumber: syz [ 729.190316][T17182] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3115'. [ 729.218148][ T5616] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 729.361653][ T5705] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 729.511591][T17194] bridge_slave_0: left allmulticast mode [ 729.511617][T17194] bridge_slave_0: left promiscuous mode [ 729.511911][T17194] bridge0: port 1(bridge_slave_0) entered disabled state [ 729.544750][T17194] bridge_slave_1: left allmulticast mode [ 729.544774][T17194] bridge_slave_1: left promiscuous mode [ 729.544986][T17194] bridge0: port 2(bridge_slave_1) entered disabled state [ 729.599560][T17194] bond0: (slave bond_slave_0): Releasing backup interface [ 729.609353][ T5613] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 729.613579][T17194] bond0: (slave bond_slave_1): Releasing backup interface [ 729.667151][T17194] team0: Port device team_slave_0 removed [ 729.726595][T17194] team0: Port device team_slave_1 removed [ 729.733797][T17194] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 729.733818][T17194] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 729.740757][T17194] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 729.740776][T17194] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 729.769528][ T5613] usb 3-1: Using ep0 maxpacket: 8 [ 729.771555][ T5613] usb 3-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 729.774103][ T5613] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 729.774124][ T5613] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 729.782923][ T5613] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.782945][ T5613] usb 3-1: Product: syz [ 729.782959][ T5613] usb 3-1: Manufacturer: syz [ 729.782972][ T5613] usb 3-1: SerialNumber: syz [ 729.990070][T17206] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3114'. [ 730.018332][T17189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 730.018754][T17189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 730.174478][ T5613] usb 3-1: unit 5 not found! [ 730.174505][ T5613] usb 3-1: unit 16 not found! umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes Connection to 10.128.0.249 closed by remote host. [ 730.330976][ T4984] udevd[4984]: could not touch /run/udev/queue: Read-only file system [ 730.469052][ T5613] usb 3-1: USB disconnect, device number 27 [ 730.478258][ T5705] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 730.487305][ T1161] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 730.569216][ T5705] usb 5-1: USB disconnect, device number 81 [ 731.481100][ T1161] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.521097][ T5705] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 731.595432][ T1161] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.684064][ T1161] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 Sent SIGKILL to all processes Requesting system poweroff [ 731.763604][ T1167] net_ratelimit: 24 callbacks suppressed [ 731.763625][ T1167] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 731.764200][ T25] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 731.827726][ T1161] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.869833][ T1167] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 731.971419][ T1161] bridge_slave_1: left allmulticast mode [ 731.971442][ T1161] bridge_slave_1: left promiscuous mode [ 731.971640][ T1161] bridge0: port 2(bridge_slave_1) entered disabled state [ 731.976161][ T1161] bridge_slave_0: left allmulticast mode [ 731.976179][ T1161] bridge_slave_0: left promiscuous mode [ 731.976360][ T1161] bridge0: port 1(bridge_slave_0) entered disabled state [ 732.186473][ T1161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 732.188524][ T1161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 732.190565][ T1161] bond0 (unregistering): Released all slaves [ 732.219097][T12870] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 732.333286][T12870] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 732.365127][ T1161] hsr_slave_0: left promiscuous mode [ 732.365583][ T1161] hsr_slave_1: left promiscuous mode [ 732.366089][ T1161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 732.366118][ T1161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 732.366632][ T1161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 732.366648][ T1161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 732.407256][ T1161] veth1_macvtap: left promiscuous mode [ 732.407302][ T1161] veth0_macvtap: left promiscuous mode [ 732.407473][ T1161] veth1_vlan: left promiscuous mode [ 732.407548][ T1161] veth0_vlan: left promiscuous mode [ 732.414116][ T5705] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 732.562164][ T1221] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 732.605861][ T1161] team0 (unregistering): Port device team_slave_1 removed [ 732.618572][ T1161] team0 (unregistering): Port device team_slave_0 removed [ 732.709040][T12871] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 732.744151][T17209] smc: removing smcd device lo [ 732.754993][ T5669] dvb-usb: did not find the firmware file 'dvb-usb-wt220u-fc03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 732.758483][ T5669] dvb-usb: found a 'WideView WT-220U PenType Receiver (Typhoon/Freecom)' in cold state, will try to load a firmware [ 732.798188][ ** replaying previous printk message ** [ 732.798188][ T5669] usb 6-1: Direct firmware load for dvb-usb-wt220u-fc03.fw failed with error -2 [ 732.798212][ T5669] usb 6-1: Falling back to sysfs fallback for: dvb-usb-wt220u-fc03.fw [ 732.800070][ T5669] ------------[ cut here ]------------ [ 732.800081][ T5669] ret [ 732.800092][ T5669] WARNING: drivers/base/firmware_loader/fallback.c:158 at firmware_fallback_sysfs+0x76d/0xa50, CPU#0: kworker/0:4/5669 [ 732.822970][T12870] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 732.853226][ T5669] Modules linked in: [ 732.857112][ T5669] CPU: 0 UID: 0 PID: 5669 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT(full) [ 732.866481][ T5669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 732.876554][ T5669] Workqueue: usb_hub_wq hub_event [ 732.881641][ T5669] RIP: 0010:firmware_fallback_sysfs+0x76d/0xa50 [ 732.887886][ T5669] Code: 8e fb e9 48 fc ff ff e8 21 77 8e fb c6 05 e0 7f 2a 0a 01 48 c7 c7 a0 11 98 8c e8 ae 5a ee fa e9 70 fc ff ff e8 04 77 8e fb 90 <0f> 0b 90 4c 89 f7 48 c7 c6 a0 12 98 8c 4c 89 e2 e8 fe d4 f2 fa e9 [ 732.908054][ T5669] RSP: 0018:ffffc9000435e8c0 EFLAGS: 00010287 [ 732.914601][ T5669] RAX: ffffffff863964fc RBX: dffffc0000000000 RCX: 0000000000100000 [ 732.922619][ T5669] RDX: ffffc9001c08b000 RSI: 000000000004c3ef RDI: 000000000004c3f0 [ 732.928989][T12870] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 732.937990][ T5669] RBP: 0000000000000001 R08: ffffffff907a5f7f R09: 1ffffffff20f4bef [ 732.945964][ T5669] R10: dffffc0000000000 R11: fffffbfff20f4bf0 R12: ffffffff8ce47880 [ 732.953944][ T5669] R13: 0000000000001770 R14: ffff888033a940b0 R15: 00000000fffffff5 [ 732.961930][ T5669] FS: 0000000000000000(0000) GS:ffff888124cca000(0000) knlGS:0000000000000000 [ 732.970860][ T5669] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 732.977422][ T5669] CR2: 000000005715920c CR3: 000000000eb48000 CR4: 00000000003526f0 [ 732.985410][ T5669] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 732.993382][ T5669] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 733.001362][ T5669] Call Trace: [ 733.004621][ T5669] [ 733.007532][ T5669] ? kfree+0x1c5/0x650 [ 733.012162][ T5669] _request_firmware+0x1049/0x1780 [ 733.017279][ T5669] ? __pfx__request_firmware+0x10/0x10 [ 733.023277][ T5669] ? lock_acquire+0x115/0x350 [ 733.027972][ T5669] request_firmware+0x36/0x50 [ 733.032655][ T5669] dvb_usb_download_firmware+0xb5/0x270 [ 733.038182][ T5669] ? __pfx__printk+0x10/0x10 [ 733.039508][T12871] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 733.039950][T12870] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 733.064481][ T5669] ? __pfx_dvb_usb_download_firmware+0x10/0x10 [ 733.070640][ T5669] ? trace_kmalloc+0x2a/0xf0 [ 733.075212][ T5669] ? dvb_usb_device_init+0x148/0x2570 [ 733.080592][ T5669] dvb_usb_device_init+0xddf/0x2570 [ 733.085785][ T5669] ? do_raw_spin_lock+0x12b/0x2f0 [ 733.090816][ T5669] ? __pfx_dvb_usb_device_init+0x10/0x10 [ 733.096436][ T5669] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 733.102269][ T5669] ? __pm_runtime_set_status+0x994/0xc80 [ 733.107890][ T5669] dtt200u_usb_probe+0x8a/0x120 [ 733.113219][ T5669] usb_probe_interface+0x788/0xe50 [ 733.118341][ T5669] ? __pfx_usb_probe_interface+0x10/0x10 [ 733.124451][ T5669] ? sysfs_do_create_link_sd+0xe0/0x110 [ 733.130058][ T5669] ? driver_sysfs_add+0x1fe/0x210 [ 733.135067][ T5669] ? __pfx_usb_probe_interface+0x10/0x10 [ 733.140704][ T5669] really_probe+0x254/0xae0 [ 733.145195][ T5669] __driver_probe_device+0x1e8/0x360 [ 733.148997][T12866] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 733.157825][ T5669] driver_probe_device+0x4f/0x240 [ 733.162875][ T5669] __device_attach_driver+0x270/0x410 [ 733.168235][ T5669] bus_for_each_drv+0x258/0x2f0 [ 733.173089][ T5669] ? __pfx___device_attach_driver+0x10/0x10 [ 733.178985][ T5669] ? __pfx_bus_for_each_drv+0x10/0x10 [ 733.184346][ T5669] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 733.190156][ T5669] __device_attach+0x2c4/0x450 [ 733.194904][ T5669] ? __pfx___device_attach+0x10/0x10 [ 733.200384][ T5669] ? do_raw_spin_unlock+0xf5/0x200 [ 733.205507][ T5669] ? _raw_spin_unlock+0x28/0x50 [ 733.210364][ T5669] device_initial_probe+0xa1/0xd0 [ 733.215830][ T5669] bus_probe_device+0x12a/0x220 [ 733.221164][ T5669] device_add+0x7d7/0xb80 [ 733.225506][ T5669] usb_set_configuration+0x1ad8/0x2180 [ 733.230987][ T5669] usb_generic_driver_probe+0x8d/0x150 [ 733.236432][ T5669] usb_probe_device+0x1c3/0x3b0 [ 733.241284][ T5669] ? __pfx_usb_probe_device+0x10/0x10 [ 733.246654][ T5669] really_probe+0x254/0xae0 [ 733.251168][ T5669] __driver_probe_device+0x1e8/0x360 [ 733.256436][ T5669] driver_probe_device+0x4f/0x240 [ 733.258949][T12870] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 733.268843][ T5669] __device_attach_driver+0x270/0x410 [ 733.274306][ T5669] bus_for_each_drv+0x258/0x2f0 [ 733.279195][ T5669] ? __pfx___device_attach_driver+0x10/0x10 [ 733.285092][ T5669] ? __pfx_bus_for_each_drv+0x10/0x10 [ 733.290471][ T5669] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 733.296262][ T5669] __device_attach+0x2c4/0x450 [ 733.301029][ T5669] ? __pfx___device_attach+0x10/0x10 [ 733.306314][ T5669] ? do_raw_spin_unlock+0xf5/0x200 [ 733.311430][ T5669] ? _raw_spin_unlock+0x28/0x50 [ 733.316708][ T5669] device_initial_probe+0xa1/0xd0 [ 733.322204][ T5669] bus_probe_device+0x12a/0x220 [ 733.327086][ T5669] device_add+0x7d7/0xb80 [ 733.331421][ T5669] usb_new_device+0x9aa/0x1690 [ 733.336186][ T5669] ? __pfx_usb_new_device+0x10/0x10 [ 733.341399][ T5669] ? _raw_spin_unlock_irq+0x23/0x50 [ 733.346584][ T5669] hub_event+0x28e8/0x4d30 [ 733.351025][ T5669] ? do_raw_spin_unlock+0xf5/0x200 [ 733.356155][ T5669] ? __pfx_hub_event+0x10/0x10 [ 733.360944][ T5669] ? rcu_is_watching+0x16/0xb0 [ 733.365710][ T5669] ? process_scheduled_works+0x97a/0x1630 [ 733.371432][ T5669] process_scheduled_works+0xc3d/0x1630 [ 733.376983][ T5669] ? __pfx_process_scheduled_works+0x10/0x10 [ 733.382982][ T5669] ? assign_work+0x3cf/0x5d0 [ 733.387578][ T5669] worker_thread+0xa47/0xfb0 [ 733.392178][ T5669] ? __kthread_parkme+0x71/0x1f0 [ 733.397110][ T5669] kthread+0x38b/0x480 [ 733.401180][ T5669] ? __pfx_worker_thread+0x10/0x10 [ 733.406270][ T5669] ? __pfx_kthread+0x10/0x10 [ 733.410853][ T5669] ret_from_fork+0x514/0xb70 [ 733.415442][ T5669] ? __pfx_ret_from_fork+0x10/0x10 [ 733.421026][ T5669] ? __switch_to+0xc89/0x1420 [ 733.425695][ T5669] ? __pfx_kthread+0x10/0x10 [ 733.430699][ T5669] ret_from_fork_asm+0x1a/0x30 [ 733.435480][ T5669] [ 733.438490][ T5669] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 733.445768][ T5669] CPU: 0 UID: 0 PID: 5669 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT(full) [ 733.455124][ T5669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 733.465159][ T5669] Workqueue: usb_hub_wq hub_event [ 733.470188][ T5669] Call Trace: [ 733.473451][ T5669] [ 733.476362][ T5669] vpanic+0x56d/0xa60 [ 733.480329][ T5669] ? __pfx__printk+0x10/0x10 [ 733.484898][ T5669] ? __pfx_vpanic+0x10/0x10 [ 733.489389][ T5669] ? is_bpf_text_address+0x292/0x2b0 [ 733.494674][ T5669] ? is_bpf_text_address+0x26/0x2b0 [ 733.499872][ T5669] panic+0xc5/0xd0 [ 733.503603][ T5669] ? __pfx_panic+0x10/0x10 [ 733.508024][ T5669] ? ret_from_fork_asm+0x1a/0x30 [ 733.512949][ T5669] __warn+0x315/0x4c0 [ 733.516913][ T5669] ? firmware_fallback_sysfs+0x76d/0xa50 [ 733.522534][ T5669] ? firmware_fallback_sysfs+0x76d/0xa50 [ 733.528146][ T5669] __report_bug+0x276/0x570 [ 733.532634][ T5669] ? firmware_fallback_sysfs+0x76d/0xa50 [ 733.538246][ T5669] ? __pfx___report_bug+0x10/0x10 [ 733.543251][ T5669] ? lockdep_hardirqs_on+0x7b/0x110 [ 733.548430][ T5669] ? irqentry_exit+0x218/0x910 [ 733.553169][ T5669] ? trace_irq_disable+0x3b/0x140 [ 733.558178][ T5669] ? firmware_fallback_sysfs+0x76f/0xa50 [ 733.563794][ T5669] ? firmware_fallback_sysfs+0x76d/0xa50 [ 733.569411][ T5669] report_bug+0x16b/0x220 [ 733.573727][ T5669] ? firmware_fallback_sysfs+0x76d/0xa50 [ 733.579340][ T5669] ? firmware_fallback_sysfs+0x76f/0xa50 [ 733.584975][ T5669] handle_bug+0x9c/0x200 [ 733.589205][ T5669] exc_invalid_op+0x1a/0x50 [ 733.593692][ T5669] asm_exc_invalid_op+0x1a/0x20 [ 733.598518][ T5669] RIP: 0010:firmware_fallback_sysfs+0x76d/0xa50 [ 733.604738][ T5669] Code: 8e fb e9 48 fc ff ff e8 21 77 8e fb c6 05 e0 7f 2a 0a 01 48 c7 c7 a0 11 98 8c e8 ae 5a ee fa e9 70 fc ff ff e8 04 77 8e fb 90 <0f> 0b 90 4c 89 f7 48 c7 c6 a0 12 98 8c 4c 89 e2 e8 fe d4 f2 fa e9 [ 733.624323][ T5669] RSP: 0018:ffffc9000435e8c0 EFLAGS: 00010287 [ 733.630372][ T5669] RAX: ffffffff863964fc RBX: dffffc0000000000 RCX: 0000000000100000 [ 733.638336][ T5669] RDX: ffffc9001c08b000 RSI: 000000000004c3ef RDI: 000000000004c3f0 [ 733.646283][ T5669] RBP: 0000000000000001 R08: ffffffff907a5f7f R09: 1ffffffff20f4bef [ 733.654249][ T5669] R10: dffffc0000000000 R11: fffffbfff20f4bf0 R12: ffffffff8ce47880 [ 733.662201][ T5669] R13: 0000000000001770 R14: ffff888033a940b0 R15: 00000000fffffff5 [ 733.670176][ T5669] ? firmware_fallback_sysfs+0x76c/0xa50 [ 733.675795][ T5669] ? kfree+0x1c5/0x650 [ 733.679857][ T5669] _request_firmware+0x1049/0x1780 [ 733.684988][ T5669] ? __pfx__request_firmware+0x10/0x10 [ 733.690435][ T5669] ? lock_acquire+0x115/0x350 [ 733.695095][ T5669] request_firmware+0x36/0x50 [ 733.699754][ T5669] dvb_usb_download_firmware+0xb5/0x270 [ 733.705279][ T5669] ? __pfx__printk+0x10/0x10 [ 733.709854][ T5669] ? __pfx_dvb_usb_download_firmware+0x10/0x10 [ 733.716006][ T5669] ? trace_kmalloc+0x2a/0xf0 [ 733.720580][ T5669] ? dvb_usb_device_init+0x148/0x2570 [ 733.725963][ T5669] dvb_usb_device_init+0xddf/0x2570 [ 733.731158][ T5669] ? do_raw_spin_lock+0x12b/0x2f0 [ 733.736172][ T5669] ? __pfx_dvb_usb_device_init+0x10/0x10 [ 733.741785][ T5669] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 733.747568][ T5669] ? __pm_runtime_set_status+0x994/0xc80 [ 733.753197][ T5669] dtt200u_usb_probe+0x8a/0x120 [ 733.758029][ T5669] usb_probe_interface+0x788/0xe50 [ 733.763129][ T5669] ? __pfx_usb_probe_interface+0x10/0x10 [ 733.768764][ T5669] ? sysfs_do_create_link_sd+0xe0/0x110 [ 733.774298][ T5669] ? driver_sysfs_add+0x1fe/0x210 [ 733.779313][ T5669] ? __pfx_usb_probe_interface+0x10/0x10 [ 733.784956][ T5669] really_probe+0x254/0xae0 [ 733.789445][ T5669] __driver_probe_device+0x1e8/0x360 [ 733.794714][ T5669] driver_probe_device+0x4f/0x240 [ 733.799717][ T5669] __device_attach_driver+0x270/0x410 [ 733.805068][ T5669] bus_for_each_drv+0x258/0x2f0 [ 733.809970][ T5669] ? __pfx___device_attach_driver+0x10/0x10 [ 733.815854][ T5669] ? __pfx_bus_for_each_drv+0x10/0x10 [ 733.821220][ T5669] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 733.827017][ T5669] __device_attach+0x2c4/0x450 [ 733.831766][ T5669] ? __pfx___device_attach+0x10/0x10 [ 733.837033][ T5669] ? do_raw_spin_unlock+0xf5/0x200 [ 733.842129][ T5669] ? _raw_spin_unlock+0x28/0x50 [ 733.846964][ T5669] device_initial_probe+0xa1/0xd0 [ 733.851972][ T5669] bus_probe_device+0x12a/0x220 [ 733.856807][ T5669] device_add+0x7d7/0xb80 [ 733.861128][ T5669] usb_set_configuration+0x1ad8/0x2180 [ 733.866598][ T5669] usb_generic_driver_probe+0x8d/0x150 [ 733.872039][ T5669] usb_probe_device+0x1c3/0x3b0 [ 733.876876][ T5669] ? __pfx_usb_probe_device+0x10/0x10 [ 733.882238][ T5669] really_probe+0x254/0xae0 [ 733.886726][ T5669] __driver_probe_device+0x1e8/0x360 [ 733.891994][ T5669] driver_probe_device+0x4f/0x240 [ 733.897003][ T5669] __device_attach_driver+0x270/0x410 [ 733.902357][ T5669] bus_for_each_drv+0x258/0x2f0 [ 733.907208][ T5669] ? __pfx___device_attach_driver+0x10/0x10 [ 733.913094][ T5669] ? __pfx_bus_for_each_drv+0x10/0x10 [ 733.918452][ T5669] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 733.924241][ T5669] __device_attach+0x2c4/0x450 [ 733.929001][ T5669] ? __pfx___device_attach+0x10/0x10 [ 733.934284][ T5669] ? do_raw_spin_unlock+0xf5/0x200 [ 733.939388][ T5669] ? _raw_spin_unlock+0x28/0x50 [ 733.944245][ T5669] device_initial_probe+0xa1/0xd0 [ 733.949252][ T5669] bus_probe_device+0x12a/0x220 [ 733.954089][ T5669] device_add+0x7d7/0xb80 [ 733.958403][ T5669] usb_new_device+0x9aa/0x1690 [ 733.963149][ T5669] ? __pfx_usb_new_device+0x10/0x10 [ 733.968325][ T5669] ? _raw_spin_unlock_irq+0x23/0x50 [ 733.973510][ T5669] hub_event+0x28e8/0x4d30 [ 733.977915][ T5669] ? do_raw_spin_unlock+0xf5/0x200 [ 733.983033][ T5669] ? __pfx_hub_event+0x10/0x10 [ 733.987781][ T5669] ? rcu_is_watching+0x16/0xb0 [ 733.992526][ T5669] ? process_scheduled_works+0x97a/0x1630 [ 733.998226][ T5669] process_scheduled_works+0xc3d/0x1630 [ 734.003772][ T5669] ? __pfx_process_scheduled_works+0x10/0x10 [ 734.009737][ T5669] ? assign_work+0x3cf/0x5d0 [ 734.014312][ T5669] worker_thread+0xa47/0xfb0 [ 734.018918][ T5669] ? __kthread_parkme+0x71/0x1f0 [ 734.023855][ T5669] kthread+0x38b/0x480 [ 734.027905][ T5669] ? __pfx_worker_thread+0x10/0x10 [ 734.033015][ T5669] ? __pfx_kthread+0x10/0x10 [ 734.037587][ T5669] ret_from_fork+0x514/0xb70 [ 734.042167][ T5669] ? __pfx_ret_from_fork+0x10/0x10 [ 734.047260][ T5669] ? __switch_to+0xc89/0x1420 [ 734.051919][ T5669] ? __pfx_kthread+0x10/0x10 [ 734.056492][ T5669] ret_from_fork_asm+0x1a/0x30 [ 734.061247][ T5669] [ 734.064508][ T5669] Kernel Offset: disabled [ 734.068822][ T5669] Rebooting in 86400 seconds..