last executing test programs: 9.407153024s ago: executing program 3 (id=3178): socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="034886dd120000000000140000006000000003088700fe88a43de1a400000000000000007d01ff0200000000000000000000000000013b"], 0xfdef) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000880)=[{{&(0x7f0000000480)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000440)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x1}], 0x1}}], 0x2, 0x8010) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000000)=[{{0x2, 0x0, 0x0, 0x1}, {0x4}}, {{0x4, 0x0, 0x1, 0x1}, {0x2, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x0, 0x1, 0x0, 0x1}}, {{0x0, 0x0, 0x1}, {0x2, 0x0, 0x0, 0x1}}], 0x20) 9.202481896s ago: executing program 3 (id=3182): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) mkdir(0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='+pids'], 0x6) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r2, &(0x7f00000000c0), 0x2, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x6) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 9.134580229s ago: executing program 3 (id=3183): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001800010301000d00000000000a410000ff0300060000000014000100fe"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa0009058202", @ANYRESOCT], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000200)={0x0, 0x8, 0x6, "1a3bd328b095"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) 6.770099726s ago: executing program 1 (id=3196): r0 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[], 0x0, 0x9, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, @fallback=0x4}, 0x94) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000001a00)=ANY=[], 0x610) r3 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000ac0)=ANY=[@ANYBLOB="03000000000000000a004e2300000009ff0100"/28], 0x90) socket$kcm(0x2, 0xa, 0x2) socket$kcm(0x2, 0xa, 0x2) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={'\x00', 0xfbff, 0x4053, 0x81, 0x2, 0x4, 0xffffffffffffffff}) getpgrp(r4) r5 = syz_open_procfs(r4, &(0x7f00000000c0)='net/igmp\x00') preadv(r5, &(0x7f0000000700)=[{&(0x7f0000000000)=""/42, 0x2a}, {&(0x7f0000000400)=""/91, 0x5b}], 0x2, 0x33, 0x2000051b) syz_open_dev$swradio(0x0, 0x1, 0x2) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r6, 0x707, &(0x7f00000000c0)={&(0x7f00000003c0)=[{0x1e, 0x0, 0x0, 0x0}, {0x6, 0x0, 0x0, 0x0}], 0x2}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4000200, 0x20000, 0x40000000000, 0x801, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x68956e34, 0x2, 0x0, 0x0, 0x6, 0x3, 0x0, 0x100000001]}) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0xa2000e79) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) r7 = syz_open_dev$video4linux(&(0x7f00000006c0), 0x3, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r7, 0xc0305602, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x20040841}, 0x0) openat$vimc0(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r8, 0x8983, &(0x7f0000000140)={0x0, 'geneve1\x00', {0x3}, 0x3}) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000080)={0x1, 0x100, 0x3, {0x4, 0x300, 0x0, 0x5}}) 5.087694317s ago: executing program 3 (id=3205): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4) write$P9_RREADLINK(r1, &(0x7f0000000040)={0x10, 0x17, 0x2, {0xffffffffffffffc1, './file0'}}, 0xfffffdab) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff0002}]}) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x80000007, 0x1}, 0x1c) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad7, 0x10000, 0x3}, &(0x7f0000000040), &(0x7f0000000280), &(0x7f0000000000)) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, 0x0) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) recvmmsg(r5, &(0x7f0000000400), 0x0, 0x0, 0x0) sendmsg$DCCPDIAG_GETSOCK(r5, 0x0, 0x800) close(r4) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, 0x0, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYBLOB="000000000000000014001280090001007665746800000000", @ANYRES32, @ANYBLOB="dc196c174c0f622e019df2d7fcc0c6e67e55dd353e5b54dbb5c89c1e1f4a22120475c8"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) recvmmsg$unix(r2, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000005c0)=""/227, 0xe3}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/156, 0x9c}], 0x1}}], 0x2, 0x40000000, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 4.54839651s ago: executing program 0 (id=3206): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="180000000002010400000000000000000a000004040002802425523286a650e3058123ccc5ed89d0675b2122966dfd3a192c3168d2d21255f664ef652daab6f02356a8de0d94bdcc2d4fc0a818908ad32ab40d6b8eebfae7bf36769b27db283a3c5cc7d9e4d4091d8cd494bc0fe1ccc6430e0f0834660f34423791c566f8b0568dce3a17362fe5b3f5120e9e29894c05c3507fa37474dd6c98a196597b483908462503426a807335f3e844176cbd86727ed9f5995ec1e70c3a0b5ba0983ce807cdda14839cb518bc5613f54376b05d8a384e7dd4ddbc5c9f4afeafeebb720d03ded7cd20126526d34df3bee20de4b4b50d04ad1b9ec3"], 0x18}, 0x1, 0x0, 0x0, 0x2000001}, 0x4040800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000400)={'#! ', './file0', [{0x20, '\x00'}]}, 0xd) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000180)=@known='security.apparmor\x00') 4.296341133s ago: executing program 0 (id=3207): preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x100000000000000d, 0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffe, @empty, 0x5e}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f00000006c0)={0xa, 0x4e21, 0x5, @ipv4}, 0x1c) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000ac0)="0be0e81856a4874abdcb8b57beac347970d96985a5ca6a1079278efea10ab39b9e73151b195e2d0a0000001e3149c114f0232b800a3d0b68f682f3d25f0292a2c5f05fffef661dd47bb8a2b2c7c9d43f3380c4ebcfb3868f79766dcbcf4efb31f21461901227e26a25ad5059ea97da3b1778fceaad145a751bfd9aba7b038b5e142a893abedd79985374efd79ccda506bb72e9f8d7", 0x95}, {&(0x7f0000000780)="d3130b24da6a524d8fb8577413b9109489238ae71bbc2a1ff09395463aa8bdd93d4813f1e74c012c15243e21570ffdf124e11099a60a6a202a3f4fd550a68d3dbd14d8568bd1086b56cf5ea2c59b979d939f199d3f280508939b91a22d80a62ab46fbba42ee821affb77ad7491b1f9a7752532eab159396e6519e4c8d9249447e043f2ca0b479f80e6d4a1dad2fc7739b594f0dc82d660f861bb850f9e88149b7a78cb310c87a85cd46724b1810be0b91a94348acdf6f041c2848ce1120358f1472b784908d2c491eb90753b85de183f54f7fca3643a2e9d4e867451cad0ad2e9f77f1ed8bfef23282e2c1135ec4ac58a4712c8992c59806", 0xf8}, {&(0x7f0000002200)="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", 0x1000}, {&(0x7f0000000880)="86ec4b2e8c95c1c9055fdc63bed2ab369caec75eb603c346e771b27e33161f302c29b685599cbcf53de5ba6b679fce8a4335376f7fb97fb8834ec057acf0f0311a937b705677f73e25eeb4d329badfab05af5baf6641e0823227ca08ba761fcd10296af926dbbbb94f98894c8c63926f7e62de2336c373000000", 0x7a}, {&(0x7f0000003200)="8bfc8c211096ad5b81e3f557afbd57ed5f13ce862f43028dd6375953234ad39a92218c39f598e53123e8582f5d1eefafd06d9250d84c9c09c5d49a8baf03c7420293b114ba18cb0108c5c290d152495aa4e7fe5fab8b4b8d786ba26bab93fb8a371b0eed250154da951e61086a6c6947cadb8f2c355c1b12c27efaae81d4894e31dc8066ba3737fcdcf89c9a7f2bccafb382f9ef0658d2d3d1c0b0c15dd877f2e8cf10a312f1cfe1d4d8ef4f577912b8de04eb8ca806ecb870422339743d39433b60a5b0711ddf2586a4a812475262493090a9fd7202b8e93f3894b95688dee7cb261b1c73fbef87475a63fe65516d83ff9f96f03e49115460036e862d4049bc18f52c28f7c45cfbfadec9514fef596f6433ec06290b290721a652ad1f722fdb995c066310fc39951265ac134f8d75e9a7df948829c0d02c220bb31e363b47ec68cf625a935475fa23cea80ac32a30ce9005be2f4bfb9696cfde86302de21c540e26681d9be61853e5b701f06696895182e082dc85b2fc5a2434262b2103a83ee90310828bc07ab05c5b171ee7a99be8ef94ddb45f31f4161df56f2258111b494884d45e2cf0ec3bad4426365317b00a744e23dce0a45ee1dfe05064b2c6a164eba5a1c708ed77c8a824cef905ba6bbec3d86686ed4e28a9e13a3810664c5dc337ab179549a08f4dab083df496ba47b09301c2c9e3d1b2f24a8e42d5b0e48584a230cbc0a7bceaa2daba9f2a7b6b2503278095fbb33bf9946a7a974809d33e1ac61023dd37439fa477781e49ec4561e4afc217e50e16ab944579a78d9681b53ff16255b35639e93a2649e66fd885d4d038f433f4c911b6531d5a911c26e923bccb1c26cec5f9561879c53636ee85d07c68dcad98609e73ee8a3e0a243b39311b720f1978756be41f437d64834a10b378ab7b54e8ce28ca3f84f6e7c621afeb9e7ca0a897cc2a33fcdce0854174a16cbf3047e380ea787e65a650afd2c94ea1e726823b49de357ef30041e9bbd11c0d6c407bd2d72323003947a2d34fcd8f099d9b443f20be244a04a27ed4b73b33fc1146319b1eee1c74610d5bca9bcc0dad3080a4a5d4bab2b386ca3add994ec29c63888ebc74c693755be4fdf31468b5ae6164cd31061992617f38128cdf9b6c1c6fab6f0e95e0ef2ddedd0c3275d2ca2d2c0acadf8ae0fd9df2eea8770dde0304b4de885394fd688e4a3d95cf13af2141edc6651d2ab8250cb131e7abe10c805887efb8224fd9ef0078bfcb7355a91d616ad96e3fbd959a34865437525ab2b022d9fa069842384598062bf69b9abe91fc1b480ed5e73d4422ed0d2d01aaf1527e7ba33ad0f49363c102db6310b32390f57ae699647f6602cb631ca840166852a024c8a95fc1fcdb8fa228266c0abf7a5bf67050fd5e989dd45c955ec0bbf86978f83179f89f51b33b68f911a02dc9577c44951b90c70fdb5722a534921db27c18217ea4818678199493671a9f905ff02788092955c4613d5c1d80b3f7f9ced374723aca531e54423c42b97123f32cf82f541bc30558366f3cd8e61a00c82f197bc12ecd93c25c92efe881317d27f16387a7e4a948fa51e80a6805ddbf4a7ed525696d5b61d066b1b9762bc930b4b44a9b1f9813955a92789478f0dd155f9a0a02102cf0534dd4402e7900fcc5e9db67ef143b50baee7c227fbe4f1165741f936135107b029ff8f3973f489f492893140e4998c90995ede97b3ac71199ff38f40d5e569331c51ed9f056a227cd7b4f996d1334e222d42ce0fbd3208ca9b71b72f20672c439cc8662dd58537c25e26ae407f598d910c4ca85af17487f5214ce3517ad8b799b7a3f8d40fe7254065b6c54643ea4baed5fbcf70c95d450d670ad6d5c6703db0179e86177a4c05302c589d7700fb67aea12439f46dec18e285f2628097685b6e1f374aad04a34b1b5cdd5dd49fb65d4a24e750f19b9225fcaccea8dc71035a01e0f8ec643ef65f8f128ff2d3789369e617b63c730f289b8a8cb21d0ba478ea7a97549bf5771842352e829c8370cdb0b7a344a71331d217809a3ecdf1bcd9d8ee5b8560a6dbd531e2515966180289b2da5bac405a5c926f38055a9ec9bfe01bb18e385ed623a063a67421c9a5ee6cc9651c75f5260458ef5817f2b72726819cc255a19c5e726cabc276848178d3b1548ab7610a850ea8654271634e960aa3068cda4288b878b7b593376a5c4b0fd46f0f9027c0bf05da7b36b6ead0c792ce7037bea3a4c9934bb415b95ea0863ccb801399917bcbe0c03810ffb2e01cfa288af193cc57e0840f061bbf2b6a36d9f91157df0cecccc757ec6ce684aeefec8a0e75a1b670aa280d4c1ef2abc1215d03a8b657f4deae3c3a25df2bffb749f71548abdb6bd9f0aea63adabd4c35024d50a94ffdfe586983e8c85eb8202a58965d96fced6c73a5ab44e9f9ffa077487ff77e68936a16173729a1369a3ebbbcbed83fcfe0c6c7e7cd19257a835a0440b34119715ab5b196553181c99024d1eaa8bd61fe425078ecb604153de5ce61b87aeb9d4bba17d99843737303047fbaa4d9db617e7a46aa8e8988acf7dbb2a4332f87439febb8ea3c64f9d14586c6ab322079178b617dc6d629284742fba081b20ad0f0ad8a8cb361fb9c165f87607dd0fd690f2cdc0fbf415118828637adf36f7687c9974e4c1759651c043758a28cd50f9182d8fbd7d0fca3fca85213bbcae2ca3828d461712749f76d1aa329c97187919ac3b044de1c48ea317a5227b966c8356ec3e9c0056037ecb798c0cd1fdcdc6aa8bec877489b5d0ccef4152c15f4ca1ee397cbd43e6e0f37d13196b8a88cf85bca095f517fce451d96a8b3c69d12245018ce47862d39d7005893a22c9065b8c9adbbb0c5e6bb38bea766a04c3ca842b869751532f963bacedd84bf7cb3c01e9243c9e8d12acea56d8555c45c7a97cd2e8cb5cd2acaa10710e8b0a2526a7c64234b38c1c84a8f0decc8a04577506c899ee9de23f166a3cb3f18806f35b2d7a843a7a3464f16db25ce975e9cd418e9518241e3c69de684cdf9b66b03f98633fe027d14a3d9c6f490011abf3b91b4ed8cb97ea112f0cc96e6d71f235f3cf4836db14a7fe788163aca95ab72c3f1da5fbe5321be6d41c0aa0d1922426a0507d660f0c05057b627e5f446e2c347ec3756b6c58c009dd5640562b4f93bdaa9daf5e1441d69497254e8861c83f0344289c9e9fbf4805154302e0a8f3365d4b38dd7094998c499b3501dd87d4b3340fe61a2b30972edb9af2e403f1177062ec066954ea05f565281b69f1f0fb8d7846ff3fc301600ac6d42e741f5cf1ebbf003182746956e5ca683e2a26e103663440c56bb3fb54cbc838789d0e43f6e92407a594b053700e820747a5359df4456663da76b4293e0e35d5e28bf2e99419a630c9ecdc33cf3b05e1d48650e4696be36b6adb95385460d005cb4036999e26045f24ce71df5c10a0290b792c01f2e621f0fcea68e3eb1e7fa743b882666bbfb0a247fbb4d17625e8a6d0101fb15abb88a1808674cf8ba579e93dd714b004b2a2bea791c564858550c75b660b95f6d4b5f8674cdc0197cf1daba99aedff327271a0db4116b74cfa4d52f7089183c09958d8e2a561c680d8294af1397fa80060bf060db3e0d5bc83b64f24a8b5d0e059c2234b520b432381b2a90efb5d6e0414f903cecec580a1f600ddd113c5f9c77d2828d153c876f63a5d2c3bdb9b2c6a3e88fd4620f74dd70fd827a32b29f9b961ede8d229bf37eac262b19e83512376403c31a0dc5fd865dc9b4882cce1ca3ff05f6dda45bfc5ff2b0db28be4f75f7074900912311dcaece17c54adbc1e0324a37d7965ed68607d3e50b793472d1d89f8da7c1d766fa25d1f837115f6146bdc548df131dd14d8efb28ec70f1cf0ba180afa2004c0679ba0d5e3165987d8255cf76cbd0d805d5c4f97b45c91c9d37d882cc884419d28f1a996479e0e564347b75eb28f45d72649d232cf695d97d923a8e739a85548b46dcc86538bc8507deed535df837b78203896c6600d907bd405649e0460d3aa674c19b819d8f7975d25ad075921a06c6e84c9a60b43dfb1bbb92f24c8600642e8620240d5932e19636fdf9f4e6e1771518f7cb3a9cb0ca71c41691c4df4522613c52c50ea7d1b8f734cb0ef863c7164dec0e22cb1cabca229d3b5fff190f04eaf15aaca934cdcb1c5fbc5a5b45675c62c7196b419f4f2bcff15ec48aa220d1640d86e0046975cc9e52162f05cb4f3d2a0adb093f566fc07dfa885828556dd0d10e314f593624d5f015925fb7665fc9af8bcfb71daaf569020764c6057908c7f60b96df0c0bfd6bdcac563aa1dc46fa980130f283d8a5791bcae076701fa8afaa89c6ebbd9a07a7c4934de3188b92fca17401346709163dd0182a177f4861441dda6bee68dbb739c10cada19976bacafabff1b3664c372e4968f981fa83562b624ba7e16f9034b70357c5287fdaa056709693a2b8ac7ccaec164cf9ea65b22f8470e123203cd73c278fd9a2c3f99475d693746dffaf87978fd7761a9f2540b36e57fb6e30982dd819bf050de28c3e4b8c4a64f08f6ce2878dd303a4ea2fb766d1304816edcbd201bb5b976da317d4ccd4d2b9ad1b1e41aadec5b619f21fc9152aa068a4cdb7733ded11f99e4f05f9c9cd2100e22a81f4745bf72cdb60589961964e49d78c5886b7593441ac9d9bc7df4dfddf8bda7530703da54be3d273a3bdf4bde32939a53816bfd9803945833d79ed3984ffd82e8bc6a37613ed8518c799665b815f75cca183c035d7a0d350207719e2c3d72431e85461999f7a39ed809d4a1559563d57319b62c4dee4aaeee0c8900f7ed4e7f579a2594dd638c3053f3bad5d5f08eb753184a9d9799af2222d44331ded4733f934947c8dc9b9f8c1343afa982f05fb7f18fd69dab7fbacb92c179baae26c226e933993bca15183e2e06cc1bc6e6259b25e78be7bdd089bdba6dc8fc90b72a3ae8643c5d1ed5c4ce83a36092797c854ecc748efa9d4ae8db93606f128d323b16971a5cb1871e8b74e1ad4cb27ddaa16e85d10d418417820c7b4fc38bfa99b76db8446b8a7f8dc5ece7d2becd4ede3f55031cec253c441af21a0cdb8cfc7128f9965a6014821b89eb3640e882e78ee360d047bec35d5cb43e4d2672526129f0a6b35a39b34fbdd19ec181672b0b1dfd311adc4f0c7d4314680d818ae7b07ed3ee2c04d66533b4f04538e8b5256fb2c6eef9d3e359720eeb46601d0afae81b601f1a301acc3e0e8e363663b2e9efc4622fb3305912a2f5320a38c3efaec5b854222ad6266635ca27ef2e49e63439c420c5715a69158d5212c343960f3655f271ed68d3a9efb75c77e5dfb3b5d60ec3baf8adabdc39f84b155d16e00d98d958767ec74572055c473d3de6c945eec9703bbef419b54d0265464e589a72f20186d17096fdaf3e7bd3ba7d83e863c70c6975748dd4fa240059be4239b520ea681f8f2370b1094787db6616836db7e116494da02c752c80ad660ce887d313f890093702a71507309113623ed4678b57f0d9ef781228ee7ecd19978d1cb6614524c9c450391eb6a4cabb6b4fa4edcd681a4418266f97016f68c70d241cd7bb4e746c35aeab640b44984b6078bff682c30fdf782b38563478464b43903da802df26620881b4fa49f30946940a130d644543298ec73ce0027454807815fcb749dd218844775f97ee4679198265b6fe6be426e3aac406b2704089677e99b923e593aa82024e41f473b9d597d728a1c58a8f883910670e9ee21d841712d0ff5f84f4158b", 0x1000}, {&(0x7f0000000900)="8d5580621aa4755425b539d92722f65822e56c0e059075eb4be4f37f37a35ed9ca3119fac42841e599479966ed6e5c97feaca69270b7f977f38045135260e5ba8927b49e38daed96d48591d23278bcd3b5568b48141fdd8d98f285f0a747a7bd7db26d0b92067e60da83af23631fc76d2544f3e8e4ad855c8079c9da423eaf81d0ab838bf2b344640459a3dd58cd06f66a2868a14d89ad9e3249e4ed00862b85710a833517ea0511a4d40dfc2494225d0406c7371eaea28c9ef515c31617bacc1245352945c5b1feb1dcb890e7763e4a42f06055", 0xd4}, {&(0x7f0000000a00)="a210eb91735048", 0x7}, {&(0x7f0000000a40)="3d340418e7ac064119e594beb83550097e5ba3e2d275dde80b635b0a2c4a158aca02129cc885ea6f29a022f3b63a305109b60429640f223e22f3", 0x3a}], 0x8}, 0x44081) close(r6) setsockopt$inet_udp_int(r4, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r4, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r7, 0x8940, &(0x7f0000000640)=@add_del={0x2, &(0x7f0000000680)='wg1\x00'}) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) sendto$inet(r4, &(0x7f00000000c0)="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", 0xffe3, 0x6000000000000000, 0x0, 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) migrate_pages(0x0, 0x5, 0x0, 0x0) 4.292835604s ago: executing program 1 (id=3208): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x5ba4, 0x101101) r3 = syz_open_dev$loop(&(0x7f00000001c0), 0xb8, 0x24400) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000003c0)={r3, 0x4, {0x0, 0x0, 0x0, 0x9, 0x400, 0x0, 0x4, 0x15, 0x0, "161aca016965bf2edb7d3fccc031d774ec39757b7f5c3ea0ca0dd45e7b6a366829537ae0958f4ab949bd5d1be95af17beb139c1d27ebca55215e476e3156864e", "611e520585f6daf9533eebca76d9f886a28e9563dd1a299bcb0a42734f0fa437bb157b0c1001e322af298851287b3513ea331ac537334ace467b81f96fc521a4", "0c8bb42dce6e8e6ed39f5c6b82eed0469e5764494b84dbaa06e18b6374c411ed", [0x5, 0x9]}}) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x240000d4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)={0xe4, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0xd0, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT_TUPLE={0xac, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x4}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x55080}, 0x4008000) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) r7 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000680)={0xa, 0x4e22, 0xfffffffd, @empty, 0x6}, 0x1c) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) close_range(r1, 0xffffffffffffffff, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r13 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newtfilter={0x7c, 0x2c, 0xca7, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r14, {0x4, 0x4}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x50, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x1, 0xffe0}}, @TCA_U32_SEL={0x44, 0x5, {0x44, 0xf, 0x3, 0x2, 0x7ae, 0x9, 0x8000, 0x65, [{0x7ffd, 0x20003fe, 0x80000000, 0x6}, {0x0, 0xe1, 0x8ad9, 0xfffffffd}, {0x3ff, 0xa, 0x76800, 0xd}]}}]}}]}, 0x7c}}, 0x20040054) 4.094332556s ago: executing program 1 (id=3209): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000000140)={&(0x7f00000002c0)=[{0x6, 0xc211, 0x0, 0x0}, {0x4, 0xca01, 0x0, 0x0}], 0x2}) 3.760083226s ago: executing program 3 (id=3210): syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @dev, @val={@val={0x88a8, 0x5, 0x0, 0x2}, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x2, 0x0, 0x1, 0x6, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0xc, 0xc, 0x1, 0xf, [{@local, 0x8001}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0) 3.672050022s ago: executing program 2 (id=3211): r0 = syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000080)={{}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@allow_other}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x1800}}, {@allow_other}, {@allow_other}, {}], [{@permit_directio}, {@obj_type={'obj_type', 0x3d, '{.*#&\x9c['}}, {@hash}, {@pcr={'pcr', 0x3d, 0x3f}}, {@hash}]}}, 0x0, 0x0, &(0x7f00000001c0)) file_setattr(r0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x508, 0x1, 0x7, 0x101, 0x1ff}, 0x18, 0x100) syz_create_resource$binfmt(&(0x7f0000000280)='./file0\x00') r1 = openat$fuse(0xffffff9c, &(0x7f00000002c0), 0x2, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000300), 0xfffffffc, 0x80000) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r2, 0xc0105866, &(0x7f0000000600)={&(0x7f0000000340)=0xd1, 0x7, &(0x7f0000000380)=[{}, {}, {}], &(0x7f00000005c0)}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, &(0x7f0000000640)=[0xa, 0x4], 0x2) statx(r0, &(0x7f00000006c0)='./file0\x00', 0x2000, 0x400, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000000680)=@md0, r3, &(0x7f0000000800)) renameat2(r0, &(0x7f0000000840)='./file0\x00', r0, &(0x7f0000000880)='./file0\x00', 0x6) faccessat2(r0, &(0x7f00000008c0)='./file0\x00', 0x22, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4038587a, &(0x7f0000000b00)={{r0, &(0x7f0000000900)='%{{(\x00', 0xe00, &(0x7f0000000940)={@align=0xa23f, {0x75, 0x2, 0x80000000, 0x2}}, 0x0, &(0x7f0000000980)={@_ha_fsid}, &(0x7f00000009c0)=0x1400000}, {[0x88, 0xaf, 0xb4, 0x8000]}, 0x4, 0xc5, &(0x7f0000000a00)=""/197}) ioctl$TIOCNOTTY(r4, 0x5422) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000b40)={0x1000, r2}, 0x0) r5 = socket(0x26, 0x2, 0x4) sendfile64(r2, r4, &(0x7f0000000b80)=0x2, 0x30) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000bc0)={r5}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000c00)) r7 = syz_open_dev$dvb_frontend(&(0x7f0000000c40), 0x5, 0x4000) ioctl$FE_SET_FRONTEND(r7, 0x40246f4c, &(0x7f0000000c80)={0x1, 0x1, @qpsk={0x8, 0x1f}}) socket$packet(0x11, 0x3, 0x300) r8 = socket$unix(0x1, 0x5, 0x0) recvmmsg(r8, &(0x7f0000008d00)=[{{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000cc0)=""/157, 0x9d}, {&(0x7f0000000d80)=""/224, 0xe0}, {&(0x7f0000000e80)=""/171, 0xab}, {&(0x7f0000000f40)=""/253, 0xfd}, {&(0x7f0000001040)=""/194, 0xc2}], 0x5, &(0x7f0000001180)=""/34, 0x22}, 0x9}, {{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f00000011c0)=""/44, 0x2c}, {&(0x7f0000001200)=""/247, 0xf7}, {&(0x7f0000001300)=""/8, 0x8}, {&(0x7f0000001340)=""/208, 0xd0}, {&(0x7f0000001440)=""/4096, 0x1000}], 0x5}, 0x9}, {{&(0x7f0000002480)=@generic, 0x80, &(0x7f0000003780)=[{&(0x7f0000002500)=""/4096, 0x1000}, {&(0x7f0000003500)=""/98, 0x62}, {&(0x7f0000003580)=""/55, 0x37}, {&(0x7f00000035c0)=""/155, 0x9b}, {&(0x7f0000003680)=""/150, 0x96}, {&(0x7f0000003740)=""/23, 0x17}], 0x6}, 0x1}, {{&(0x7f00000037c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000003b80)=[{&(0x7f0000003840)=""/101, 0x65}, {&(0x7f00000038c0)=""/254, 0xfe}, {&(0x7f00000039c0)=""/65, 0x41}, {&(0x7f0000003a40)=""/169, 0xa9}, {&(0x7f0000003b00)=""/94, 0x5e}], 0x5, &(0x7f0000003bc0)=""/255, 0xff}, 0x2}, {{&(0x7f0000003cc0)=@ieee802154, 0x80, &(0x7f0000004e00)=[{&(0x7f0000003d40)=""/4096, 0x1000}, {&(0x7f0000004d40)=""/84, 0x54}, {&(0x7f0000004dc0)=""/14, 0xe}], 0x3, &(0x7f0000004e40)=""/4096, 0x1000}, 0x10001}, {{&(0x7f0000005e40)=@isdn, 0x80, &(0x7f0000006340)=[{&(0x7f0000005ec0)=""/242, 0xf2}, {&(0x7f0000005fc0)=""/216, 0xd8}, {&(0x7f00000060c0)=""/166, 0xa6}, {&(0x7f0000006180)=""/182, 0xb6}, {&(0x7f0000006240)=""/225, 0xe1}], 0x5, &(0x7f0000006380)=""/145, 0x91}, 0x80000001}, {{&(0x7f0000006440)=@nfc, 0x80, &(0x7f00000077c0)=[{&(0x7f00000064c0)=""/31, 0x1f}, {&(0x7f0000006500)=""/100, 0x64}, {&(0x7f0000006580)=""/4096, 0x1000}, {&(0x7f0000007580)=""/194, 0xc2}, {&(0x7f0000007680)=""/134, 0x86}, {&(0x7f0000007740)=""/94, 0x5e}], 0x6}, 0x1000}, {{&(0x7f0000007800)=@l2tp, 0x80, &(0x7f0000007cc0)=[{&(0x7f0000007880)=""/58, 0x3a}, {&(0x7f00000078c0)=""/162, 0xa2}, {&(0x7f0000007980)=""/143, 0x8f}, {&(0x7f0000007a40)=""/208, 0xd0}, {&(0x7f0000007b40)=""/79, 0x4f}, {&(0x7f0000007bc0)=""/216, 0xd8}], 0x6, &(0x7f0000007d00)=""/4096, 0x1000}, 0x6}], 0x8, 0x10000, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000008e00)={r6}) ioctl$GIO_UNISCRNMAP(r4, 0x4b69, &(0x7f0000008e40)=""/83) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4014f50b, &(0x7f0000008ec0)={0x0, 0x7, 0x6e}) getsockopt$MRT(r5, 0x0, 0xcf, &(0x7f0000008f00), &(0x7f0000008f40)=0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000008fc0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000008f80), 0x104, 0x1}}, 0x20) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) openat$dlm_control(0xffffff9c, &(0x7f0000009000), 0x24e000, 0x0) 3.563362429s ago: executing program 3 (id=3212): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x118d7, 0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r3, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff8, @ipv4}, 0x1c) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a2", 0x85}], 0x1}, 0x0) sendmmsg$inet(r2, &(0x7f0000000600)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c844) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000640)=@generic={0x1, 0x5, 0x8000000000000001}) sendto$inet(r2, &(0x7f00000000c0)="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", 0xffe3, 0x6000000000000000, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000700), 0x9, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffff1b0, 0x4) unshare(0x62040200) syz_usb_connect(0x4, 0x4a, &(0x7f00000006c0)=ANY=[@ANYRESDEC=r6], 0x0) 3.48273166s ago: executing program 2 (id=3213): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00442b7410000080000000f0c4e7e3273f000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50) openat$pfkey(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e0, 0x10c, 0x940c, 0x3002, 0x0, 0x2c0, 0x30c, 0x3d8, 0x3d8, 0x30c, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa4, 0x10c}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1f, 0x7fff, 0x7, 0x8001, '\x00', 'syz1\x00', {0x1ff}}}}, {{@uncond, 0x0, 0xa4, 0x10c}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x2, 0x2, 0x4, 0x6, 'syz1\x00', 'syz1\x00', {0x1a0000}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x33c) 3.363342873s ago: executing program 4 (id=3214): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090527bd7000fcdbdf25021f00ff", @ANYRES32=r2, @ANYBLOB="0800040064010104080008000001000008000200e0000002080001040a0101020800090003000000080009"], 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) (fail_nth: 1) 3.293752698s ago: executing program 2 (id=3215): ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, &(0x7f00000000c0)={0x1, @pix_mp={0x0, 0x0, 0x35314142, 0x3, 0x0, [{0x0, 0xffffffff}, {}, {}, {0xffffffff}, {0x5}]}}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x88800, 0x0) syz_usbip_server_init(0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) move_pages(0x0, 0x0, 0x0, &(0x7f0000000540)=[0x1], &(0x7f0000000200), 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x183182, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x20202) r1 = syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x80000000, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0) ioctl$I2C_PEC(r1, 0x708, 0x7) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8000, 0x44, 0x18}, 0x18) 3.179750932s ago: executing program 4 (id=3216): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) io_submit(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000000080)={0x0, 0x0, 0x10, 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}]) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xa117}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv6_deladdrlabel={0x0, 0x49, 0x20, 0x70bd26, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, r5, 0xb}, [@IFAL_ADDRESS={0x0, 0x1, @mcast1}, @IFAL_ADDRESS={0x0, 0x1, @loopback}, @IFAL_ADDRESS={0x0, 0x1, @loopback}, @IFAL_LABEL={0x0, 0x2, 0x4}, @IFAL_LABEL, @IFAL_LABEL={0x0, 0x2, 0x4}, @IFAL_ADDRESS={0x0, 0x1, @local}, @IFAL_ADDRESS={0x0, 0x1, @loopback}, @IFAL_LABEL={0x0, 0x2, 0xb}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x0) 2.734261448s ago: executing program 4 (id=3217): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="180000000002010400000000000000000a000004040002802425523286a650e3058123ccc5ed89d0675b2122966dfd3a192c3168d2d21255f664ef652daab6f02356a8de0d94bdcc2d4fc0a818908ad32ab40d6b8eebfae7bf36769b27db283a3c5cc7d9e4d4091d8cd494bc0fe1ccc6430e0f0834660f34423791c566f8b0568dce3a17362fe5b3f5120e9e29894c05c3507fa37474dd6c98a196597b483908462503426a807335f3e844176cbd86727ed9f5995ec1e70c3a0b5ba0983ce807cdda14839cb518bc5613f54376b05d8a384e7dd4ddbc5c9f4afeafeebb720d03ded7cd20126526d34df3bee20de4b4b50d04ad1b9ec3"], 0x18}, 0x1, 0x0, 0x0, 0x2000001}, 0x4040800) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file0', [{0x20, '\x00'}]}, 0xd) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000180)=@known='security.apparmor\x00') 2.603189272s ago: executing program 4 (id=3218): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) r0 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20008811) r1 = socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00'}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001500e3352dbd7000fedbdf25023f"], 0x20}, 0x1, 0x0, 0x0, 0x40801}, 0x4) socket$kcm(0x2, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.stat\x00', 0x26e1, 0x0) sendmsg$IPSET_CMD_FLUSH(r3, 0x0, 0x804) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140), 0x4) ioctl$SNDCTL_TMR_TIMEBASE(r3, 0xc0045401, &(0x7f0000000040)=0x235) r4 = syz_open_dev$hiddev(&(0x7f00000001c0), 0x0, 0x101000) ioctl$HIDIOCGUCODE(r4, 0xc018480d, &(0x7f0000000200)={0x2, 0x3, 0x800, 0x6, 0x400, 0x5}) socket(0x840000000002, 0x3, 0xff) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={0xffffffffffffffff, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x3, 0x600}}, 0x20) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, 0x0) 2.555912492s ago: executing program 1 (id=3219): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x5ba4, 0x101101) r3 = syz_open_dev$loop(&(0x7f00000001c0), 0xb8, 0x24400) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000003c0)={r3, 0x4, {0x0, 0x0, 0x0, 0x9, 0x400, 0x0, 0x4, 0x15, 0x0, "161aca016965bf2edb7d3fccc031d774ec39757b7f5c3ea0ca0dd45e7b6a366829537ae0958f4ab949bd5d1be95af17beb139c1d27ebca55215e476e3156864e", "611e520585f6daf9533eebca76d9f886a28e9563dd1a299bcb0a42734f0fa437bb157b0c1001e322af298851287b3513ea331ac537334ace467b81f96fc521a4", "0c8bb42dce6e8e6ed39f5c6b82eed0469e5764494b84dbaa06e18b6374c411ed", [0x5, 0x9]}}) listen(r1, 0x5) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x240000d4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)={0xe4, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0xd0, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT_TUPLE={0xac, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x4}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x55080}, 0x4008000) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) r7 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000680)={0xa, 0x4e22, 0xfffffffd, @empty, 0x6}, 0x1c) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) close_range(r1, 0xffffffffffffffff, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r13 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@newtfilter={0x7c, 0x2c, 0xca7, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r14, {0x4, 0x4}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x50, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x1, 0xffe0}}, @TCA_U32_SEL={0x44, 0x5, {0x44, 0xf, 0x3, 0x2, 0x7ae, 0x9, 0x8000, 0x65, [{0x7ffd, 0x20003fe, 0x80000000, 0x6}, {0x0, 0xe1, 0x8ad9, 0xfffffffd}, {0x3ff, 0xa, 0x76800, 0xd}]}}]}}]}, 0x7c}}, 0x20040054) 2.400521113s ago: executing program 4 (id=3220): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_mr_cache\x00') lseek(r0, 0x401, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8082, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r4, 0x4068aea3, &(0x7f00000002c0)={0x74, 0x0, 0x30}) r5 = fsopen(&(0x7f0000000140)='ramfs\x00', 0x1) socket$unix(0x1, 0x5, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGSKNS(r6, 0x894c, 0x0) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f00000000c0)="240000005a001f001007f4f9002304000a04f51108000500020100020800038005000000", 0x24) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r8 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r8, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x3) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000240)={0x4, 0x0, [{0x1, 0x0, 0x8}, {0x334, 0x0, 0x5aa}, {0xbec, 0x0, 0xffffffffffffffff}, {0x949, 0x0, 0x1}]}) ioctl$KVM_SET_CPUID2(r9, 0x4008ae90, &(0x7f00000000c0)={0x22}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r10 = syz_usb_connect$cdc_ecm(0x5, 0x6b, &(0x7f0000000040)=ANY=[@ANYBLOB="1201ff03020000202505a1a440000102030109025900010106000109040006020206000a052406000005240040000d240f010002000000000300fd152412"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x25a2, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000e43000000018000180140002006e657464657673696d30000000000000080004000600000008000500000000000800030006", @ANYRES32, @ANYRESDEC=r11, @ANYBLOB="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", @ANYRESDEC=r8, @ANYRES16, @ANYRES64=r10, @ANYRES8=r3, @ANYRES64=r1, @ANYRES8, @ANYRES64=r3], 0x44}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) r13 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r14 = dup3(r13, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r14, 0xc0306201, 0x0) landlock_restrict_self(r14, 0x0) 2.33064421s ago: executing program 2 (id=3221): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="3402"], 0x234}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005200)={0x50, 0x44, 0x1, 0xfff7fffe, 0x25dfdbff, {0x2, 0x7c}, [@nested={0x4, 0x14f}, @nested={0x38, 0x1, 0x0, 0x1, [@nested={0x33, 0xde, 0x0, 0x1, [@typed={0xc, 0xaa, 0x0, 0x0, @u64=0xbe4}, @generic="d552488eaa3dac05f5e50de2e672dd5bcf70a27f570ed2bb6d4121bdd6643f5c046836"]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x48815}, 0xc840) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14) recvmmsg(r1, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000001580)=[{}, {&(0x7f0000000000)=""/53, 0x35}, {&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001640)=""/206, 0xce}, {&(0x7f0000001240)=""/249, 0xf9}, {0x0}, {&(0x7f0000001440)=""/112, 0x70}, {&(0x7f00000014c0)=""/140, 0x8c}], 0x8, &(0x7f00000000c0)=""/46, 0x2e}, 0x8}], 0x1, 0x10122, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket(0x2, 0x80805, 0x0) recvmsg(r5, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x2000) r6 = openat$nullb(0xffffff9c, &(0x7f00000023c0), 0x0, 0x0) fsopen(&(0x7f0000000000)='jffs2\x00', 0x1) r7 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) r8 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r9 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000840)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b1a03dc55ea62d43c809e0ed6e56163fdab317afd5c34d61436", 0x79, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r7, r8, r9}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}}) ioctl$BLKGETSIZE(r6, 0x1260, &(0x7f0000000040)) syz_usb_connect$uac1(0x5, 0x9d, &(0x7f0000000300)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8b, 0x3, 0x1, 0x1, 0x20, 0xf, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8000, 0x35}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x307, 0x3, 0x2, 0x3}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x306, 0x2, 0x6, 0x80}, @mixer_unit={0x8, 0x24, 0x4, 0x4, 0xa8, "88a70b"}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x401, 0x3, 0x1, 0x81}, @selector_unit={0x8, 0x24, 0x5, 0x4, 0xff, "a8ce24"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0xb, 0xb, 0x2, {0x7, 0x25, 0x1, 0xc, 0x7, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x7f, 0xf, 0x6, {0x7, 0x25, 0x1, 0xc, 0x6, 0x9}}}}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x250, 0xfa, 0x1, 0x9, 0x10, 0x5}, 0x10, &(0x7f0000000400)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x2, 0x8, 0x7, 0x7, 0x2, 0xff}]}, 0x8, [{0x4, &(0x7f0000000440)=@lang_id={0x4}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x411}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4}}, {0x60, &(0x7f0000000500)=@string={0x60, 0x3, "c386b039c1df290115cf326430d67ac0510c2db23609780b78d55f871da016b57bced445299d5c68fc6a48dfb4d7830c579a34a9fae7d7e7f8555d0ae86addb8086277e23f5c3009926d40cbb208aeb5f37bb994b36cdf4dcd311c6bee51"}}, {0xfffffffffffffe3b, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x44d}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x4001}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x42d}}, {0x52, &(0x7f0000000640)=@string={0x52, 0x3, "e1c1b211ef33203678a4d71f2f9fc448c2a56de3940e2148b346a7ddad8fe920ca43e26643be6281309471dee23d54f2853cee882cead429a0fe6962e47a264d758f9a676939a18dd7560dd8275afd8f"}}]}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r11, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd011100"], 0xfdef) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000020340)={0x24, r4, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x25, 0x4}]}, 0x24}}, 0x0) write$binfmt_script(r2, &(0x7f0000000240)={'#! ', '', [], 0xa, "667b64467e583d23a44175148d9f437e43c41d349c13564beeefc2308b2d9ad33a89ede59a08fd085d899367267fa4fa6a023033a2541770e4f9ddc526cf6be086c5cfb6583ead03ecbe36c4fbd8555fb1a91c392983e4aec5bdad3ba90f01e59be9e3e3c39864e7c297dad7efbee4651ccb578f5f3ebccf39e254f515db456cd66bf4c18276b863484c1f11e9c4cc"}, 0x93) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r12, 0x0, 0x483, 0x0, &(0x7f0000000880)) 2.27341269s ago: executing program 1 (id=3222): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$vimc1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendto$inet(r4, &(0x7f0000001ec0)="a2123fbbeb2facea9b49ad541c0fb431f1a4e22f3622fa6b258448f248fa363e4b72aebd8798fd4abe2260d9399163c8eeb56b28f49a6fa4160b012645eb92ad", 0x40, 0x90, 0x0, 0x0) recvmsg(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000005c0)=""/15, 0xf}, {&(0x7f0000000a40)=""/69, 0x45}], 0x2}, 0x101) ioctl$VIDIOC_TRY_FMT(r2, 0xc0cc5640, &(0x7f00000000c0)={0x2, @sdr={0x32314d54, 0x400ffff}}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000740)={&(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@gettaction={0x84, 0x32, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x30, 0x1, [{0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x478000}}]}, @action_gd=@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x25, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x14, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000200)={0x3, 0x80000, 0x4}) r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4040}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f0000000280)={0x3, r9, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) r10 = syz_open_dev$loop(&(0x7f0000000000), 0x8, 0x2082) ioctl$IOC_PR_REGISTER(r10, 0x401870c8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000e7ffffffce0000"], &(0x7f0000000040)='GPL\x00'}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) 959.399995ms ago: executing program 4 (id=3223): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2d, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002700)=ANY=[@ANYBLOB="a013000040000701fcffffff00000100017c0000040042800c00018006000600801c00007c13028078131480731306800c0001000000000000e000000e"], 0x13a0}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) syz_emit_ethernet(0x1f2, &(0x7f00000003c0)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd65ebfe7901bc08ff00000000000000000000000000000001fe80000000000000000000000000003b3303000000000000050200040718000000000405000406000000000000003cd7000000000000000032250000000000000502000000010005024e420738000000000c1002008000000000000000020000000000000006000000000000000800000000000000020000000000000006000000000000000105000000000004010200ad8997b75186fa8b623e6204e158a559b7683ad69eb8bf3aa30fdc100e8156a58a91eff66f6544ebad1afa0f44ffbadfadf8ecdd36da85c7440bad6acc3c52808de9045e36bdff6b03c4ea0b2e8840e83157692c8a985ae21c6578c6c108716dab3fb3dde92849a04e3995024542b26c48a1e57826a921ebf1e949cc90abd52d76adf02f869f6e62b7e4df6bdb5fcbe581e7e57da09e8c6d18dd9a947ce7ff958b07ce089aa0e34d0759f92fea94071000000000020a08000100000000000000c20400000004c910fe800000000000000000000000000012000000000000000090398681149a9d4464179aac94158f90d1ea02d5f0cc668953fbbe9a2427fa0723ac741ef5cf7efd20a3481be8cb41110edeea4cdf947c0f329a5f97af41c626e8c0dfab75862dcdd3b3b57284fc8dcdf0d81d6a930fd912c1000000cfde9a1b12"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$setown(r2, 0x8, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000004c80)) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000034276d20402003c68e010000000109021200010000000009040001"], 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) 871.444242ms ago: executing program 0 (id=3224): sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x20, 0x0, 0x1, 0x70bd2d, 0xfffffffc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}}, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3080000, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c3a2b0304000e0580a7b6070d63e286a5cefe", 0x5ac) (fail_nth: 1) 741.759301ms ago: executing program 2 (id=3225): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00442b7410000080000000f0c4e7e3273f000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50) openat$pfkey(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e0, 0x10c, 0x940c, 0x3002, 0x0, 0x2c0, 0x30c, 0x3d8, 0x3d8, 0x30c, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa4, 0x10c}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1f, 0x7fff, 0x7, 0x8001, '\x00', 'syz1\x00', {0x1ff}}}}, {{@uncond, 0x0, 0xa4, 0x10c}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x2, 0x2, 0x4, 0x6, 'syz1\x00', 'syz1\x00', {0x1a0000}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x33c) 355.807442ms ago: executing program 0 (id=3226): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r1, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) r2 = getpgid(0x0) syz_pidfd_open(r2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000019080)=@bridge_getneigh={0x9c, 0x1e, 0x3c964e403b131b43, 0x0, 0x2, {0x7, 0x0, 0x0, 0x0, 0x0, 0x28040}, [@IFLA_NET_NS_FD={0x8, 0x1c, r1}, @IFLA_EVENT={0x8, 0x2c, 0x4}, @IFLA_PHYS_PORT_ID={0x1f, 0x22, "6a887d632256551a881c935023673c844beb14ed3d25fd020bc7da"}, @IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_to_batadv\x00'}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x5}, @IFLA_NET_NS_PID={0x8, 0x13, r2}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x2}, @IFLA_MAP={0x20, 0xe, {0x1000, 0x6, 0x2, 0x1d, 0xff}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) 278.714082ms ago: executing program 2 (id=3227): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_connect$midi(0x0, 0xcf, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x17cc, 0x1915, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbd, 0x1, 0x1, 0x20, 0x0, 0x81, "", {{{0x9, 0x4, 0x0, 0x0, 0x6, 0x1, 0x3, 0x0, 0x4, [@ms_header={0x7, 0x24, 0x1, 0x6, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x1000, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x2, 0x7}, @midi_out_jack={0x7, 0x24, 0x3, 0x0, 0x7, 0x0, [], 0x5b}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0xfb, 0x34}, @ms_header={0x7, 0x24, 0x1, 0x2, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x4}, @midi_in_jack={0x6, 0x24, 0x2, 0x3, 0x9, 0x2}, @ms_header={0x7, 0x24, 0x1, 0x1, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x6, 0x7}], [{{0x9, 0x5, 0x5, 0x3, 0x8, 0x11, 0x4, 0x8, {0x9, 0x25, 0x1, 0x5, "015941509a"}}}, {{0x9, 0x5, 0x6, 0x3, 0x10, 0x1f, 0x3, 0xd, {0x6, 0x25, 0x1, 0x2, "23f7"}}}, {{0x9, 0x5, 0x1, 0x0, 0x8, 0x3, 0x83, 0xfa, {0xa, 0x25, 0x1, 0x6, "d9cab3810599"}}}, {{0x9, 0x5, 0xa, 0x0, 0x8, 0x5, 0x8a, 0x6, {0x7, 0x25, 0x1, 0x3, "cf5d33"}}}, {{0x9, 0x5, 0x7, 0x0, 0x10, 0x8, 0x6, 0x1, {0xc, 0x25, 0x1, 0x8, "aac631f8bb471f42"}}}, {{0x9, 0x5, 0x0, 0x8, 0x200, 0x1, 0x1, 0x1, {0x6, 0x25, 0x1, 0x2, "9266"}}}]}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x201, 0x8, 0x0, 0x6, 0xff, 0x3}, 0x5, &(0x7f0000000180)={0x5, 0xf, 0x5}, 0x8, [{0x101, &(0x7f0000000a00)=@string={0x101, 0x3, "ef7311c01bd27913fbaf5651972831af3b51529835882aa78db370aae393886406c624bc6b518bb9e52c8c16078240bb090c2ee6b4ac0ada5d4081c9bfa2c182af57a9491fb49f6498fd5c9e5ee0f4a48a75cc79573c6e0ee8f4e036ba995d6af44ea0c4776ced7ac9fd62d9d3f8d6a4a7a60b241264cda01a53b3340efa8c4ad9a061b7d73bd58058207d19116a4f84261387ac6a188024a75dbed773054b6f6e67caed63c6cd42f39cad9fa7ce2533bbbc709de47b44e7549289d0b8abfd7836b76001aab52246c2ad397cf2091331f9e1a82e6d3340e342aae4e1dd23230487243eabd62e4b1e63f7cb7c0d6d034509cc11c389236c286d6604a29dd552"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x44f}}, {0x97, &(0x7f0000000300)=@string={0x97, 0x3, "35d4227c48bf1e8ba4ce7bf2d4f83893048f7eac9f2f25e31bb41914ccca295d8d4af2d853b5e5076eada66fad3e4aaad09558214726c04d690ded56663d2c27b1459dafa38817623dd80cf2fea9f8920f13d1e2803f8f5b7148cccfd21ccbfe6878b2dd3253fca86f28fdbbe5a71ae86100de84d1003d0f6ea3c7cb8b7974bfead60127fb56762c82bef55797ff25fa5148a29008"}}, {0x35, &(0x7f00000003c0)=@string={0x35, 0x3, "d63e56bdf463b1ee8053fe633ea966ca58ce195d730ef95df3ca96f7b3d29a265431456b166581978ff4e73cd03436c4d3957a"}}, {0x10, &(0x7f0000000400)=@string={0x10, 0x3, "c2f8fdd92c2a9d78c9a467af023c"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x414}}, {0xdf, &(0x7f0000000480)=@string={0xdf, 0x3, "821af5226ec2429d63bab7c4a41120ddb07baa31c2bbeb6a50da323d8025e4eff565186fb7345deaed29eb193d9d82b71c086c6411765d7d7ab2acf55dffb288433ab240e7492096d53dc98f3646a3d484601800631255d01c33c28754fb2861aed24c67a7a78c715da97a2805fabf49ce745bdfb35b1e67047a8e4c0ed82143662d216873ffc1ba037714f46885664338fd61b9a713238ebbf7d894ffef6d2c2e9e203488a54fde3d56b4c3f9f713ba710369221c52d5a0aeb21d04aa542db208747280afdd341dbe61f6e6ff1bd272846a8f9178e7c41174cf2f0ae4"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x3c01}}]}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003040)={0x1c, 0x2e, 0x9, 0x70bd25, 0x25dfdbfd, {0x6}, [@typed={0x8, 0xa, 0x0, 0x0, @pid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/cgroup\x00') syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/softnet_stat\x00') fchdir(r3) r4 = inotify_init() socket$nl_route(0x10, 0x3, 0x0) inotify_add_watch(r4, &(0x7f0000000000)='./file0\x00', 0xd00008c8) ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) r5 = syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r5, &(0x7f0000000800)={0xc, &(0x7f00000006c0)={0x40, 0x7, 0xd5, {0xd5, 0x4, "3cdfa50d81e9bc5f593f2032ea70a4d5b0dde828df3caff284f68679b1620757dff9a35cff53aba38a1da7ad28b97e267b9b62cf85d3fb4039bce215aea0858cb3f81a3b6d32857d618139bbf164ef5884bec7c9ed57d03fb32f47372a689c7bc908ba1cc706cdd476b21dc7acefe443d9cb07339f7268c2f1350f31577ff5bdf29a0eb85d1c63152cd6f076480b893d6c45d5e2b826fe0cddc3926bcb47e5ce43ff81c66e1601d20305b81bfbfb322f24b720ee427976f221fc85254070e82890114f125e9e5528188e572c8478f379c648e3"}}, &(0x7f00000007c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180c}}}, &(0x7f00000009c0)={0x18, &(0x7f0000000bc0)={0x40, 0x11, 0x74, "484ff13c64a5c525f9137274c51970e1aaee689219d7f67d8829f0246d2e8557af642ffd5a3a93e22d3b3992ebbbd6d7371d63c72917b2d1001144a55b12fde4edb31fdbc2d498fa076d7cb42fa9945fa6e19df965b732a53605a44f8b92ba892bbd6642c0547eb328fd721a4b356fc2713fc915"}, &(0x7f00000008c0)={0x0, 0xa, 0x1}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0xf9}, &(0x7f0000000940)={0xc0, 0x5, 0x4, "de0d8878"}, &(0x7f0000000b40)=ANY=[@ANYBLOB="005c9e5bd100002683706245f14be5806adc50935bc7d3c56e69f85cdd64f8e108190caa4718d522420ec4c840692f99b129ad4fd7d09b60ca2d81557fce361e0067ed76dd62ae7fd11d714709abbb094a76b852ce9872f2bc772921"]}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 225.173634ms ago: executing program 0 (id=3228): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0', [{0x20, '\x00'}]}, 0xd) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000180)=@known='security.apparmor\x00') 70.502728ms ago: executing program 0 (id=3229): r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000140)={&(0x7f00000002c0)=[{0x6, 0xc211, 0x0, 0x0}, {0x4, 0xca01, 0x0, 0x0}], 0x2}) 0s ago: executing program 1 (id=3230): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000180)={0x589f, 0x0, 0x3}, 0x18, 0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, 0x0) landlock_restrict_self(r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000900)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00'], 0xac}, 0x1, 0x0, 0x0, 0x8800}, 0x4040) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0xd7, &(0x7f0000000280)={0x0, 0x0, 0x40}, &(0x7f0000000080), 0x0, &(0x7f0000000000)) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f0000000140)='./cgroup\x00') r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r7 = syz_open_procfs$userns(r5, &(0x7f0000000240)) mount_setattr(r6, &(0x7f0000000300)='.\x00', 0x0, &(0x7f00000002c0)={0x100000, 0x0, 0x0, {r7}}, 0x20) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$VIDIOC_DQBUF(r8, 0xc04c5611, &(0x7f00000001c0)=@multiplanar_mmap={0x6, 0xb, 0x4, 0x0, 0x7, {0x0, 0xea60}, {0x5, 0x0, 0x4, 0xd, 0x3, 0x1, "b5d01829"}, 0x7, 0x1, {0x0}, 0x80000004}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x6a0040, 0x0) close_range(r10, r10, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200002, 0x0) flock(r10, 0x8) listen(r3, 0xfffffffa) sendmmsg$inet6(r9, &(0x7f0000008c00), 0x0, 0x20004810) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r12 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r12, r11, &(0x7f00000000c0)=0x58, 0x5) kernel console output (not intermixed with test programs): e-386/syz-executor" sig=0 arch=40000003 syscall=186 compat=1 ip=0xf7fd401c code=0x7ffc0000 [ 665.994368][ T30] audit: type=1326 audit(1778244625.140:25539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15805 comm="syz.1.3043" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd401c code=0x7ffc0000 [ 666.044237][ T30] audit: type=1326 audit(1778244625.140:25540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15805 comm="syz.1.3043" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd401c code=0x7ffc0000 [ 666.048038][T15811] CPU: 0 UID: 0 PID: 15811 Comm: syz.0.3042 Tainted: G L syzkaller #0 PREEMPT(full) [ 666.048066][T15811] Tainted: [L]=SOFTLOCKUP [ 666.048072][T15811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 666.048083][T15811] Call Trace: [ 666.048091][T15811] [ 666.048099][T15811] dump_stack_lvl+0xe8/0x150 [ 666.048129][T15811] should_fail_ex+0x412/0x560 [ 666.048157][T15811] _copy_to_user+0x31/0xb0 [ 666.048183][T15811] simple_read_from_buffer+0xe1/0x170 [ 666.048209][T15811] proc_fail_nth_read+0x1bb/0x230 [ 666.048234][T15811] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 666.048260][T15811] ? rw_verify_area+0x2a6/0x4d0 [ 666.048283][T15811] ? tun_chr_write_iter+0xe0/0x200 [ 666.048303][T15811] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 666.048327][T15811] vfs_read+0x20c/0xa70 [ 666.048355][T15811] ? __pfx___mutex_lock+0x10/0x10 [ 666.048380][T15811] ? __pfx_vfs_read+0x10/0x10 [ 666.048405][T15811] ? __fget_files+0x2a/0x420 [ 666.048429][T15811] ? __fget_files+0x3a0/0x420 [ 666.048449][T15811] ? __fget_files+0x2a/0x420 [ 666.048477][T15811] ksys_read+0x150/0x270 [ 666.048502][T15811] ? __pfx_ksys_read+0x10/0x10 [ 666.048530][T15811] ? asm_int80_emulation+0x1a/0x20 [ 666.048553][T15811] do_int80_emulation+0x181/0x530 [ 666.048578][T15811] ? trace_irq_disable+0x3b/0x140 [ 666.048602][T15811] ? asm_int80_emulation+0x1a/0x20 [ 666.048618][T15811] ? clear_bhb_loop+0x40/0x90 [ 666.048636][T15811] ? clear_bhb_loop+0x40/0x90 [ 666.048657][T15811] asm_int80_emulation+0x1a/0x20 [ 666.048674][T15811] RIP: 0023:0xf716616b [ 666.048690][T15811] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 666.048706][T15811] RSP: 002b:00000000f54264bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 666.048725][T15811] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54265d0 [ 666.048738][T15811] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 666.048754][T15811] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 666.048764][T15811] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 666.048775][T15811] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 666.048801][T15811] [ 666.316492][ T30] audit: type=1326 audit(1778244625.140:25541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15805 comm="syz.1.3043" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd401c code=0x7ffc0000 [ 666.379144][ T5717] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 666.408821][ T5722] go7007 5-1:9.182: probe with driver go7007 failed with error -12 [ 666.426862][ T30] audit: type=1326 audit(1778244625.140:25542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15805 comm="syz.1.3043" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7fd401c code=0x7ffc0000 [ 666.466046][ T5722] usb 5-1: USB disconnect, device number 84 [ 666.504448][ T30] audit: type=1326 audit(1778244625.140:25543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15805 comm="syz.1.3043" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7fd401c code=0x7ffc0000 [ 666.551073][ T5717] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 666.565785][ T5717] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 666.594368][ T5717] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 666.606140][ T30] audit: type=1326 audit(1778244625.140:25544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15805 comm="syz.1.3043" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7fd4047 code=0x7ffc0000 [ 666.671796][ T5717] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 666.694621][T14819] Bluetooth: hci3: command tx timeout [ 666.711152][ T5717] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 666.766239][ T5717] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 666.791160][ T5717] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 666.833235][ T5717] usb 4-1: Product: syz [ 666.845887][ T5717] usb 4-1: Manufacturer: syz [ 666.890497][ T5717] cdc_wdm 4-1:1.0: skipping garbage [ 666.896609][ T5722] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 666.909220][ T5717] cdc_wdm 4-1:1.0: skipping garbage [ 666.942002][ T5717] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 666.987296][ T5717] cdc_wdm 4-1:1.0: Unknown control protocol [ 666.991385][T10076] hsr_slave_0: left promiscuous mode [ 667.013434][T10076] hsr_slave_1: left promiscuous mode [ 667.035381][T10076] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 667.063208][T10076] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 667.073114][ T5722] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 667.095279][ T5722] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 667.125881][ T5722] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 667.148178][T10076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 667.163738][ T5722] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.175081][T10076] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 667.213925][ T5722] usb 5-1: config 0 descriptor?? [ 667.237387][T15837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 667.268528][T15837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 667.273135][T10076] veth1_macvtap: left promiscuous mode [ 667.302540][T10076] veth0_macvtap: left promiscuous mode [ 667.319787][T10076] veth1_vlan: left promiscuous mode [ 667.337171][T10076] veth0_vlan: left promiscuous mode [ 667.445815][T15824] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3047'. [ 667.701544][ T5722] cm6533_jd 0003:0D8C:0022.0014: unknown main item tag 0x0 [ 667.720750][ T5722] cm6533_jd 0003:0D8C:0022.0014: unknown main item tag 0x0 [ 667.758118][ T5722] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.0014/input/input123 [ 667.824864][ T5722] cm6533_jd 0003:0D8C:0022.0014: input,hiddev1,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 667.919371][ T5722] usb 5-1: USB disconnect, device number 85 [ 668.038974][T15845] fido_id[15845]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 668.171781][T15847] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 668.178335][T15847] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 668.218841][T15847] vhci_hcd vhci_hcd.0: Device attached [ 668.304663][T10076] team0 (unregistering): Port device team_slave_1 removed [ 668.319574][T15848] vhci_hcd: connection closed [ 668.319866][ T13] vhci_hcd vhci_hcd.1: stop threads [ 668.346198][ T13] vhci_hcd vhci_hcd.1: release socket [ 668.363309][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 668.375213][T10076] team0 (unregistering): Port device team_slave_0 removed [ 668.403663][ T10] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 668.757300][ T5696] usb 4-1: USB disconnect, device number 78 [ 668.774288][T14819] Bluetooth: hci3: command tx timeout [ 668.894668][T15857] fuse: Unknown parameter 'group_id00000000000000000000' [ 669.507724][T15750] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 669.551856][T15750] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 669.574850][T15750] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 669.610139][T15750] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 669.629215][T15750] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 669.667358][T15750] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 669.694116][T15750] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 669.731410][T15750] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 669.995459][T15750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 670.129161][T15750] 8021q: adding VLAN 0 to HW filter on device team0 [ 670.199422][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 670.206556][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 670.308033][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 670.315235][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 670.382492][ T10] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 670.491437][T15750] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 670.543670][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 670.578828][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 670.590750][T15750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 670.613723][ T10] usb 1-1: config 0 has an invalid interface number: 122 but max is 0 [ 670.630945][ T10] usb 1-1: config 0 has no interface number 0 [ 670.660438][ T10] usb 1-1: config 0 interface 122 altsetting 187 endpoint 0x82 has invalid maxpacket 59391, setting to 1024 [ 670.725401][ T10] usb 1-1: config 0 interface 122 altsetting 187 has an endpoint descriptor with address 0x95, changing to 0x85 [ 670.729799][T15750] veth0_vlan: entered promiscuous mode [ 670.774921][ T10] usb 1-1: config 0 interface 122 altsetting 187 endpoint 0x85 has invalid maxpacket 19271, setting to 1024 [ 670.832295][ T10] usb 1-1: config 0 interface 122 altsetting 187 bulk endpoint 0x85 has invalid maxpacket 1024 [ 670.833108][T15750] veth1_vlan: entered promiscuous mode [ 670.866453][T14819] Bluetooth: hci3: command tx timeout [ 670.881022][ T10] usb 1-1: config 0 interface 122 altsetting 187 bulk endpoint 0x6 has invalid maxpacket 91 [ 670.894519][ T10] usb 1-1: config 0 interface 122 has no altsetting 0 [ 670.909336][ T10] usb 1-1: New USB device found, idVendor=04b8, idProduct=0521, bcdDevice=15.4a [ 670.918821][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.939366][ T10] usb 1-1: Product: syz [ 670.943721][ T10] usb 1-1: Manufacturer: syz [ 670.948356][ T10] usb 1-1: SerialNumber: syz [ 670.960865][ T10] usb 1-1: config 0 descriptor?? [ 670.966714][T15901] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 670.974412][T15901] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 670.982037][T15901] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 671.140737][T15750] veth0_macvtap: entered promiscuous mode [ 671.196163][T15750] veth1_macvtap: entered promiscuous mode [ 671.254371][T15901] program syz.0.3056 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 671.316153][ T10] pl2303 1-1:0.122: pl2303 converter detected [ 671.365805][ T10] pl2303 1-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 671.396675][ T10] pl2303 1-1:0.122: pl2303_vendor_write - failed to write [0404]: -71 [ 671.418499][T15750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 671.458613][ T10] pl2303 1-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 671.490236][ T10] pl2303 1-1:0.122: pl2303_vendor_read - failed to read [8383]: -71 [ 671.510713][ T30] kauditd_printk_skb: 524 callbacks suppressed [ 671.510728][ T30] audit: type=1326 audit(1778244630.800:26069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15915 comm="syz.4.3057" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f01c code=0x7ffc0000 [ 671.545265][T15750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 671.573047][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.591643][ T30] audit: type=1326 audit(1778244630.800:26070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15915 comm="syz.4.3057" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f01c code=0x7ffc0000 [ 671.591669][ T10] pl2303 1-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 671.645808][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.703719][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.704511][ T30] audit: type=1326 audit(1778244630.800:26071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15915 comm="syz.4.3057" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f01c code=0x7ffc0000 [ 671.760093][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.783120][ T10] pl2303 1-1:0.122: pl2303_vendor_write - failed to write [0404]: -71 [ 671.806699][ T30] audit: type=1326 audit(1778244630.800:26072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15915 comm="syz.4.3057" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f01c code=0x7ffc0000 [ 671.857322][ T10] pl2303 1-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 671.864020][ T30] audit: type=1326 audit(1778244630.800:26073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15915 comm="syz.4.3057" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=186 compat=1 ip=0xf701f01c code=0x7ffc0000 [ 671.958107][ T10] pl2303 1-1:0.122: pl2303_vendor_read - failed to read [8383]: -71 [ 671.993465][ T30] audit: type=1326 audit(1778244630.800:26074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15915 comm="syz.4.3057" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f01c code=0x7ffc0000 [ 671.995279][ T10] pl2303 1-1:0.122: pl2303_vendor_write - failed to write [0000]: -71 [ 672.037803][ T30] audit: type=1326 audit(1778244630.800:26075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15915 comm="syz.4.3057" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f01c code=0x7ffc0000 [ 672.065742][ T30] audit: type=1326 audit(1778244630.800:26076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15915 comm="syz.4.3057" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f01c code=0x7ffc0000 [ 672.195040][ T3275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 672.213060][ T3275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 672.232487][ T10] pl2303 1-1:0.122: pl2303_vendor_write - failed to write [0001]: -71 [ 672.251041][ T30] audit: type=1326 audit(1778244630.800:26077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15915 comm="syz.4.3057" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f01c code=0x7ffc0000 [ 672.261699][ T10] pl2303 1-1:0.122: pl2303_vendor_write - failed to write [0002]: -71 [ 672.347586][ T10] usb 1-1: pl2303 converter now attached to ttyUSB0 [ 672.362328][ T3275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 672.377338][ T3275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 672.399744][ T30] audit: type=1326 audit(1778244630.800:26079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15915 comm="syz.4.3057" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf701f01c code=0x7ffc0000 [ 672.411315][ T10] usb 1-1: USB disconnect, device number 106 [ 672.455178][T15936] FAULT_INJECTION: forcing a failure. [ 672.455178][T15936] name failslab, interval 1, probability 0, space 0, times 0 [ 672.490976][T15936] CPU: 1 UID: 0 PID: 15936 Comm: syz.0.3061 Tainted: G L syzkaller #0 PREEMPT(full) [ 672.491003][T15936] Tainted: [L]=SOFTLOCKUP [ 672.491010][T15936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 672.491021][T15936] Call Trace: [ 672.491029][T15936] [ 672.491037][T15936] dump_stack_lvl+0xe8/0x150 [ 672.491063][T15936] should_fail_ex+0x412/0x560 [ 672.491092][T15936] should_failslab+0xa8/0x100 [ 672.491121][T15936] __kmalloc_noprof+0xe8/0x760 [ 672.491153][T15936] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 672.491184][T15936] tomoyo_realpath_from_path+0xe3/0x5d0 [ 672.491211][T15936] ? tomoyo_domain+0xd7/0x130 [ 672.491241][T15936] ? tomoyo_path_number_perm+0x219/0x630 [ 672.491263][T15936] tomoyo_path_number_perm+0x246/0x630 [ 672.491287][T15936] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 672.491307][T15936] ? __lock_acquire+0x6b5/0x2cf0 [ 672.491361][T15936] ? __fget_files+0x2a/0x420 [ 672.491386][T15936] ? __fget_files+0x3a0/0x420 [ 672.491405][T15936] ? __fget_files+0x2a/0x420 [ 672.491428][T15936] security_file_ioctl_compat+0xc3/0x2a0 [ 672.491450][T15936] __ia32_compat_sys_ioctl+0x139/0x950 [ 672.491480][T15936] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 672.491509][T15936] ? __fget_files+0x3a0/0x420 [ 672.491536][T15936] ? fput+0xa0/0xd0 [ 672.491557][T15936] ? ksys_write+0x242/0x270 [ 672.491592][T15936] __do_fast_syscall_32+0x229/0x6e0 [ 672.491619][T15936] ? do_fast_syscall_32+0x33/0x70 [ 672.491643][T15936] ? lockdep_hardirqs_on+0x7a/0x110 [ 672.491666][T15936] ? asm_int80_emulation+0x1a/0x20 [ 672.491684][T15936] ? do_int80_emulation+0x286/0x530 [ 672.491707][T15936] ? trace_irq_disable+0x3b/0x140 [ 672.491735][T15936] do_fast_syscall_32+0x33/0x70 [ 672.491759][T15936] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 672.491781][T15936] RIP: 0023:0xf7f6501c [ 672.491798][T15936] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 672.491814][T15936] RSP: 002b:00000000f542650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 672.491832][T15936] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0cc5615 [ 672.491845][T15936] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 672.491856][T15936] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 672.491867][T15936] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 672.491879][T15936] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 672.491905][T15936] [ 672.491912][T15936] ERROR: Out of memory at tomoyo_realpath_from_path. [ 672.583272][ T10] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 672.783777][ T10] pl2303 1-1:0.122: device disconnected [ 672.811601][T15940] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 672.818139][T15940] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 672.843747][T15940] vhci_hcd vhci_hcd.0: Device attached [ 672.857697][T15942] vhci_hcd: connection closed [ 672.863353][ T137] vhci_hcd vhci_hcd.3: stop threads [ 672.899799][ T137] vhci_hcd vhci_hcd.3: release socket [ 672.932358][ T137] vhci_hcd vhci_hcd.3: disconnect device [ 673.088293][T15939] binder: 15931:15939 ioctl 4018620d 0 returned -22 [ 673.151953][T15939] binder: 15931:15939 ioctl c0306201 0 returned -14 [ 673.223638][ T10] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 673.272060][ T4943] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 673.284026][ T4943] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 673.293342][ T4943] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 673.301915][ T4943] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 673.309926][ T4943] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 673.376043][ T10] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 673.406850][ T10] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 673.454638][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 673.478566][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 673.512942][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 673.553924][ T10] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 673.571687][ T10] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 673.594711][ T10] usb 1-1: Product: syz [ 673.601533][ T10] usb 1-1: Manufacturer: syz [ 673.704852][ T10] cdc_wdm 1-1:1.0: skipping garbage [ 673.716332][ T5643] syz_tun (unregistering): left allmulticast mode [ 673.728032][ T10] cdc_wdm 1-1:1.0: skipping garbage [ 673.753279][ T10] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 673.775576][ T10] cdc_wdm 1-1:1.0: Unknown control protocol [ 673.884816][ T5689] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 673.980529][ T3275] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 674.016004][ T3275] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.068146][ T5689] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 674.106577][ T5689] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 674.139484][ T5689] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 674.139976][T15967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 674.188201][ T5689] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.204422][ T5689] usb 4-1: config 0 descriptor?? [ 674.239195][ T3275] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 674.240119][T15967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 674.252484][ T3275] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.404238][ T3275] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 674.419028][T15959] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3065'. [ 674.441057][ T3275] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.644625][ T5689] cm6533_jd 0003:0D8C:0022.0015: unknown main item tag 0x0 [ 674.657941][ T5689] cm6533_jd 0003:0D8C:0022.0015: unknown main item tag 0x0 [ 674.669629][T15956] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.686503][ T5689] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0D8C:0022.0015/input/input124 [ 674.693598][T15956] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.726783][T15939] syz.1.3060 (15939): drop_caches: 2 [ 674.741019][ T9] usb 1-1: USB disconnect, device number 107 [ 674.769682][T15956] bridge_slave_0: entered allmulticast mode [ 674.787717][ T5689] cm6533_jd 0003:0D8C:0022.0015: input,hiddev1,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 674.806463][T15956] bridge_slave_0: entered promiscuous mode [ 674.926669][ T5689] usb 4-1: USB disconnect, device number 79 [ 675.054871][ T3275] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 675.082951][ T3275] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.149578][T15956] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.167930][T15956] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.189268][T15956] bridge_slave_1: entered allmulticast mode [ 675.206619][T15956] bridge_slave_1: entered promiscuous mode [ 675.304917][T15956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 675.333662][T14819] Bluetooth: hci4: command tx timeout [ 675.337528][T15956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 675.468781][T15979] kvm: kvm [15978]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60000000200 [ 675.499165][T15956] team0: Port device team_slave_0 added [ 675.517227][T15982] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3069'. [ 675.546864][T15982] netdevsim netdevsim3 netdevsim0: Unsupported IPsec algorithm - please use rfc4106(gcm(aes)) [ 675.683998][T15956] team0: Port device team_slave_1 added [ 675.900957][T15956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 675.935750][T15956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 676.020815][T15956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 676.066014][T15956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 676.079365][T15956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 676.155314][T15956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 676.270560][T15998] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 676.277123][T15998] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 676.325904][T15998] vhci_hcd vhci_hcd.0: Device attached [ 676.335257][ T3275] bridge_slave_1: left allmulticast mode [ 676.358138][ T3275] bridge_slave_1: left promiscuous mode [ 676.375739][ T3275] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.403722][ T3275] bridge_slave_0: left allmulticast mode [ 676.424430][T16003] vhci_hcd: connection closed [ 676.430407][ T3275] bridge_slave_0: left promiscuous mode [ 676.442636][ T13] vhci_hcd vhci_hcd.3: stop threads [ 676.465699][ T13] vhci_hcd vhci_hcd.3: release socket [ 676.478756][ T3275] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.491078][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 676.530949][ T30] kauditd_printk_skb: 620 callbacks suppressed [ 676.530966][ T30] audit: type=1326 audit(1778244635.820:26699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16009 comm="syz.1.3076" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7fd401c code=0x7ffc0000 [ 676.629076][ T30] audit: type=1326 audit(1778244635.860:26700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16009 comm="syz.1.3076" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7fd4047 code=0x7ffc0000 [ 676.655766][ T30] audit: type=1326 audit(1778244635.860:26701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16009 comm="syz.1.3076" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7fd401c code=0x7ffc0000 [ 676.689643][ T30] audit: type=1326 audit(1778244635.860:26702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16009 comm="syz.1.3076" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7fd4047 code=0x7ffc0000 [ 676.782174][ T30] audit: type=1326 audit(1778244635.860:26703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16009 comm="syz.1.3076" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7fd401c code=0x7ffc0000 [ 676.814705][ T30] audit: type=1326 audit(1778244635.860:26704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16009 comm="syz.1.3076" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7fd4047 code=0x7ffc0000 [ 676.840428][T16000] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3072'. [ 676.867166][ T30] audit: type=1326 audit(1778244635.860:26705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16009 comm="syz.1.3076" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7fd401c code=0x7ffc0000 [ 676.892166][ T30] audit: type=1326 audit(1778244635.860:26706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16009 comm="syz.1.3076" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7fd4047 code=0x7ffc0000 [ 676.919330][ T30] audit: type=1326 audit(1778244635.860:26707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16009 comm="syz.1.3076" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7fd401c code=0x7ffc0000 [ 676.946534][ T30] audit: type=1326 audit(1778244635.860:26708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16009 comm="syz.1.3076" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7fd4047 code=0x7ffc0000 [ 677.016361][ T10] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 677.206457][ T10] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 677.220625][ T10] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 677.247240][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 677.276774][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 677.310623][ T10] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 677.350861][ T10] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 677.362664][ T10] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 677.373455][ T10] usb 1-1: Product: syz [ 677.382619][ T10] usb 1-1: Manufacturer: syz [ 677.412820][ T10] cdc_wdm 1-1:1.0: skipping garbage [ 677.418318][T14819] Bluetooth: hci4: command tx timeout [ 677.429910][ T10] cdc_wdm 1-1:1.0: skipping garbage [ 677.435330][ T5737] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 677.449854][ T10] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 677.456643][ T10] cdc_wdm 1-1:1.0: Unknown control protocol [ 677.575069][ T3275] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 677.599520][ T3275] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 677.626524][ T5737] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 677.643620][ T5737] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 677.655570][ T3275] bond0 (unregistering): Released all slaves [ 677.680592][ T3275] bond1 (unregistering): Released all slaves [ 677.698755][ T5737] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 677.725442][ T5737] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.756480][ T5737] usb 4-1: config 0 descriptor?? [ 677.822973][T16035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 677.882745][T16035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 677.982494][T16026] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3078'. [ 678.049356][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 678.098266][T15956] hsr_slave_0: entered promiscuous mode [ 678.117499][T15956] hsr_slave_1: entered promiscuous mode [ 678.134667][T15956] debugfs: 'hsr0' already exists in 'hsr' [ 678.145612][T15956] Cannot create hsr debugfs directory [ 678.157656][ T3275] tipc: Disabling bearer [ 678.163492][ T3275] tipc: Left network mode [ 678.226683][ T5737] cm6533_jd 0003:0D8C:0022.0016: unknown main item tag 0x0 [ 678.264667][ T5737] cm6533_jd 0003:0D8C:0022.0016: unknown main item tag 0x0 [ 678.297475][T12937] usb 1-1: USB disconnect, device number 108 [ 678.336557][ T5737] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0D8C:0022.0016/input/input125 [ 678.429044][ T5737] cm6533_jd 0003:0D8C:0022.0016: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 678.532155][T16040] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3080'. [ 678.566083][ T5737] usb 4-1: USB disconnect, device number 80 [ 678.580337][T16040] netdevsim netdevsim2 netdevsim0: Unsupported IPsec algorithm - please use rfc4106(gcm(aes)) [ 678.729651][T16039] fido_id[16039]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 679.087199][T16055] FAULT_INJECTION: forcing a failure. [ 679.087199][T16055] name failslab, interval 1, probability 0, space 0, times 0 [ 679.115985][T16055] CPU: 0 UID: 0 PID: 16055 Comm: syz.3.3084 Tainted: G L syzkaller #0 PREEMPT(full) [ 679.116014][T16055] Tainted: [L]=SOFTLOCKUP [ 679.116021][T16055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 679.116032][T16055] Call Trace: [ 679.116039][T16055] [ 679.116047][T16055] dump_stack_lvl+0xe8/0x150 [ 679.116074][T16055] should_fail_ex+0x412/0x560 [ 679.116107][T16055] should_failslab+0xa8/0x100 [ 679.116138][T16055] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 679.116164][T16055] ? dup_task_struct+0x52/0x840 [ 679.116188][T16055] dup_task_struct+0x52/0x840 [ 679.116210][T16055] ? _raw_spin_unlock_irq+0x23/0x50 [ 679.116237][T16055] copy_process+0x89b/0x4440 [ 679.116258][T16055] ? _parse_integer_limit+0x1ae/0x1f0 [ 679.116297][T16055] ? get_pid_task+0x20/0x1f0 [ 679.116321][T16055] ? __pfx_copy_process+0x10/0x10 [ 679.116341][T16055] ? get_pid_task+0x20/0x1f0 [ 679.116370][T16055] kernel_clone+0x284/0x8f0 [ 679.116394][T16055] ? __pfx_kernel_clone+0x10/0x10 [ 679.116431][T16055] __ia32_compat_sys_ia32_clone+0x1b4/0x230 [ 679.116457][T16055] ? __pfx___ia32_compat_sys_ia32_clone+0x10/0x10 [ 679.116489][T16055] ? ksys_write+0x242/0x270 [ 679.116531][T16055] __do_fast_syscall_32+0x229/0x6e0 [ 679.116557][T16055] ? do_fast_syscall_32+0x33/0x70 [ 679.116581][T16055] ? lockdep_hardirqs_on+0x7a/0x110 [ 679.116604][T16055] ? asm_int80_emulation+0x1a/0x20 [ 679.116621][T16055] ? do_int80_emulation+0x286/0x530 [ 679.116644][T16055] ? trace_irq_disable+0x3b/0x140 [ 679.116671][T16055] do_fast_syscall_32+0x33/0x70 [ 679.116696][T16055] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 679.116716][T16055] RIP: 0023:0xf707f01c [ 679.116733][T16055] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 679.116747][T16055] RSP: 002b:00000000f546d4bc EFLAGS: 00000206 ORIG_RAX: 0000000000000078 [ 679.116765][T16055] RAX: ffffffffffffffda RBX: 0000000080001000 RCX: 0000000000000000 [ 679.116776][T16055] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 679.116787][T16055] RBP: 00000000f7474f80 R08: 0000000000000000 R09: 0000000000000000 [ 679.116802][T16055] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 679.116813][T16055] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 679.116839][T16055] [ 679.428626][ T3275] hsr_slave_0: left promiscuous mode [ 679.446098][ T3275] hsr_slave_1: left promiscuous mode [ 679.462529][ T3275] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 679.487359][ T3275] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 679.498383][T14819] Bluetooth: hci4: command tx timeout [ 679.511321][T16064] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 679.517867][T16064] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 679.527849][T16064] vhci_hcd vhci_hcd.0: Device attached [ 679.567784][ T3275] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 679.608041][T16067] vhci_hcd: connection closed [ 679.608446][ T137] vhci_hcd vhci_hcd.3: stop threads [ 679.620041][ T3275] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 679.661094][ T3275] veth1_macvtap: left promiscuous mode [ 679.665147][ T137] vhci_hcd vhci_hcd.3: release socket [ 679.677274][ T3275] veth0_macvtap: left promiscuous mode [ 679.693210][ T137] vhci_hcd vhci_hcd.3: disconnect device [ 679.693288][ T3275] veth1_vlan: left promiscuous mode [ 679.976090][T16086] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3090'. [ 679.992591][T16086] netdevsim netdevsim2 netdevsim0: Unsupported IPsec algorithm - please use rfc4106(gcm(aes)) [ 680.356653][ T3275] team0 (unregistering): Port device team_slave_1 removed [ 680.386845][ T3275] team0 (unregistering): Port device team_slave_0 removed [ 680.557121][T12937] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 680.587991][T16094] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3092'. [ 680.629480][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 680.746418][T12937] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 680.768504][T12937] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 680.789686][T12937] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 680.808051][T12937] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 680.842173][T12937] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 680.890019][T12937] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 680.899262][T12937] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 680.954150][T12937] usb 1-1: Product: syz [ 680.981647][T12937] usb 1-1: Manufacturer: syz [ 681.012592][T12937] cdc_wdm 1-1:1.0: skipping garbage [ 681.021941][T12937] cdc_wdm 1-1:1.0: skipping garbage [ 681.034036][T12937] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 681.040178][T12937] cdc_wdm 1-1:1.0: Unknown control protocol [ 681.260078][T16110] FAULT_INJECTION: forcing a failure. [ 681.260078][T16110] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 681.279874][T16090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 681.292550][T16090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 681.366258][T16110] CPU: 0 UID: 0 PID: 16110 Comm: syz.2.3095 Tainted: G L syzkaller #0 PREEMPT(full) [ 681.366285][T16110] Tainted: [L]=SOFTLOCKUP [ 681.366292][T16110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 681.366302][T16110] Call Trace: [ 681.366310][T16110] [ 681.366318][T16110] dump_stack_lvl+0xe8/0x150 [ 681.366341][T16110] should_fail_ex+0x412/0x560 [ 681.366366][T16110] _copy_from_user+0x2d/0xb0 [ 681.366391][T16110] get_compat_msghdr+0xb3/0x4c0 [ 681.366415][T16110] ? _parse_integer_limit+0x1ae/0x1f0 [ 681.366435][T16110] ? __pfx_get_compat_msghdr+0x10/0x10 [ 681.366461][T16110] ? kstrtoull+0x12f/0x1d0 [ 681.366486][T16110] ___sys_sendmsg+0x201/0x360 [ 681.366509][T16110] ? __lock_acquire+0x6b5/0x2cf0 [ 681.366530][T16110] ? __pfx____sys_sendmsg+0x10/0x10 [ 681.366555][T16110] ? get_pid_task+0x20/0x1f0 [ 681.366575][T16110] ? get_pid_task+0x20/0x1f0 [ 681.366595][T16110] ? get_pid_task+0x20/0x1f0 [ 681.366637][T16110] ? __fget_files+0x2a/0x420 [ 681.366655][T16110] ? __fget_files+0x3a0/0x420 [ 681.366673][T16110] __sys_sendmsg+0x183/0x260 [ 681.366687][T16110] ? __pfx___sys_sendmsg+0x10/0x10 [ 681.366711][T16110] __do_fast_syscall_32+0x229/0x6e0 [ 681.366733][T16110] ? do_fast_syscall_32+0x33/0x70 [ 681.366756][T16110] ? lockdep_hardirqs_on+0x7a/0x110 [ 681.366778][T16110] ? asm_int80_emulation+0x1a/0x20 [ 681.366788][T16110] ? do_int80_emulation+0x286/0x530 [ 681.366801][T16110] ? trace_irq_disable+0x3b/0x140 [ 681.366818][T16110] do_fast_syscall_32+0x33/0x70 [ 681.366832][T16110] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 681.366844][T16110] RIP: 0023:0xf7fd401c [ 681.366855][T16110] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 681.366864][T16110] RSP: 002b:00000000f549650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 681.366875][T16110] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000000 [ 681.366887][T16110] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 681.366898][T16110] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 681.366910][T16110] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 681.366920][T16110] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 681.366942][T16110] [ 681.573760][T14819] Bluetooth: hci4: command tx timeout [ 682.161470][ T5689] usb 1-1: USB disconnect, device number 109 [ 682.697474][T15956] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 682.715787][T15956] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 682.740067][T15956] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 682.766562][T15956] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 682.796139][T15956] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 682.821735][T15956] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 682.846010][T15956] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 682.881449][T16138] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 682.887958][T16138] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 682.904379][T15956] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 682.913015][T16139] FAULT_INJECTION: forcing a failure. [ 682.913015][T16139] name failslab, interval 1, probability 0, space 0, times 0 [ 682.940054][T16138] vhci_hcd vhci_hcd.0: Device attached [ 682.979195][T16139] CPU: 1 UID: 0 PID: 16139 Comm: syz.3.3100 Tainted: G L syzkaller #0 PREEMPT(full) [ 682.979223][T16139] Tainted: [L]=SOFTLOCKUP [ 682.979231][T16139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 682.979241][T16139] Call Trace: [ 682.979249][T16139] [ 682.979257][T16139] dump_stack_lvl+0xe8/0x150 [ 682.979281][T16139] should_fail_ex+0x412/0x560 [ 682.979309][T16139] should_failslab+0xa8/0x100 [ 682.979336][T16139] ? do_getname+0x2e/0x250 [ 682.979355][T16139] kmem_cache_alloc_noprof+0x87/0x650 [ 682.979379][T16139] ? lock_vma_under_rcu+0x45a/0x500 [ 682.979410][T16139] do_getname+0x2e/0x250 [ 682.979427][T16139] ? getname_flags+0x11/0x20 [ 682.979447][T16139] do_sys_openat2+0xca/0x200 [ 682.979470][T16139] ? __pfx_do_sys_openat2+0x10/0x10 [ 682.979490][T16139] ? exc_page_fault+0x6a/0xc0 [ 682.979517][T16139] ? do_user_addr_fault+0xc6f/0x1340 [ 682.979540][T16139] __ia32_compat_sys_openat+0x131/0x160 [ 682.979567][T16139] do_int80_emulation+0x181/0x530 [ 682.979592][T16139] ? trace_irq_disable+0x3b/0x140 [ 682.979615][T16139] ? asm_int80_emulation+0x1a/0x20 [ 682.979632][T16139] ? clear_bhb_loop+0x40/0x90 [ 682.979649][T16139] ? clear_bhb_loop+0x40/0x90 [ 682.979670][T16139] asm_int80_emulation+0x1a/0x20 [ 682.979688][T16139] RIP: 0023:0xf71b616b [ 682.979704][T16139] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 682.979721][T16139] RSP: 002b:00000000f544c03c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 682.979740][T16139] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f544c100 [ 682.979753][T16139] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 682.979763][T16139] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 682.979774][T16139] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 682.979785][T16139] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 682.979811][T16139] [ 683.470956][T16140] vhci_hcd: connection closed [ 683.471281][ T36] vhci_hcd vhci_hcd.0: stop threads [ 683.497794][ T36] vhci_hcd vhci_hcd.0: release socket [ 683.516000][ T5689] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 683.530551][ T36] vhci_hcd vhci_hcd.0: disconnect device [ 683.538061][T15956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 683.617789][T15956] 8021q: adding VLAN 0 to HW filter on device team0 [ 683.629440][T16137] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3099'. [ 683.680188][T10076] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.687317][T10076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 683.852376][T16162] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3103'. [ 683.904804][T16162] netdevsim netdevsim3 netdevsim0: Unsupported IPsec algorithm - please use rfc4106(gcm(aes)) [ 683.979071][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.986210][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 684.319397][T15956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 684.549148][T15956] veth0_vlan: entered promiscuous mode [ 684.596560][T15956] veth1_vlan: entered promiscuous mode [ 684.696147][T15956] veth0_macvtap: entered promiscuous mode [ 684.709040][T15956] veth1_macvtap: entered promiscuous mode [ 684.758442][T15956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 684.805284][T15956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 684.874112][T10076] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.884636][T12937] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 684.898015][T10076] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.925728][T10076] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.963716][T10076] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.077404][T12937] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 685.132928][T12937] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 685.178454][T12937] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 685.198742][T12937] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 685.257872][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 685.279327][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 685.287185][T12937] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 685.338593][T12937] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 685.370618][T12937] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 685.386599][T12937] usb 3-1: Product: syz [ 685.391663][T12937] usb 3-1: Manufacturer: syz [ 685.407973][T12937] cdc_wdm 3-1:1.0: skipping garbage [ 685.419081][T12937] cdc_wdm 3-1:1.0: skipping garbage [ 685.425215][T16206] FAULT_INJECTION: forcing a failure. [ 685.425215][T16206] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 685.440946][T12937] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 685.447577][T12937] cdc_wdm 3-1:1.0: Unknown control protocol [ 685.453956][T16206] CPU: 1 UID: 0 PID: 16206 Comm: syz.0.3113 Tainted: G L syzkaller #0 PREEMPT(full) [ 685.453984][T16206] Tainted: [L]=SOFTLOCKUP [ 685.453991][T16206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 685.454002][T16206] Call Trace: [ 685.454010][T16206] [ 685.454018][T16206] dump_stack_lvl+0xe8/0x150 [ 685.454044][T16206] should_fail_ex+0x412/0x560 [ 685.454071][T16206] _copy_from_user+0x2d/0xb0 [ 685.454097][T16206] get_compat_msghdr+0xb3/0x4c0 [ 685.454123][T16206] ? _parse_integer_limit+0x1ae/0x1f0 [ 685.454146][T16206] ? __pfx_get_compat_msghdr+0x10/0x10 [ 685.454173][T16206] ? kstrtoull+0x12f/0x1d0 [ 685.454201][T16206] ___sys_sendmsg+0x201/0x360 [ 685.454225][T16206] ? __lock_acquire+0x6b5/0x2cf0 [ 685.454250][T16206] ? __pfx____sys_sendmsg+0x10/0x10 [ 685.454277][T16206] ? get_pid_task+0x20/0x1f0 [ 685.454299][T16206] ? get_pid_task+0x20/0x1f0 [ 685.454320][T16206] ? get_pid_task+0x20/0x1f0 [ 685.454366][T16206] ? __fget_files+0x2a/0x420 [ 685.454386][T16206] ? __fget_files+0x3a0/0x420 [ 685.454417][T16206] __sys_sendmsg+0x183/0x260 [ 685.454443][T16206] ? __pfx___sys_sendmsg+0x10/0x10 [ 685.454487][T16206] __do_fast_syscall_32+0x229/0x6e0 [ 685.454513][T16206] ? do_fast_syscall_32+0x33/0x70 [ 685.454537][T16206] ? lockdep_hardirqs_on+0x7a/0x110 [ 685.454560][T16206] ? asm_int80_emulation+0x1a/0x20 [ 685.454578][T16206] ? do_int80_emulation+0x286/0x530 [ 685.454601][T16206] ? trace_irq_disable+0x3b/0x140 [ 685.454629][T16206] do_fast_syscall_32+0x33/0x70 [ 685.454654][T16206] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 685.454675][T16206] RIP: 0023:0xf7f6501c [ 685.454700][T16206] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 685.454716][T16206] RSP: 002b:00000000f540550c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 685.454735][T16206] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001ac0 [ 685.454749][T16206] RDX: 0000000000000880 RSI: 0000000000000000 RDI: 0000000000000000 [ 685.454760][T16206] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 685.454771][T16206] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 685.454783][T16206] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 685.454810][T16206] [ 685.712598][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.719005][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.867473][ T3275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 685.885602][ T3275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 685.944604][T16211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 686.004585][T16211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 686.203398][ T9] usb 3-1: USB disconnect, device number 83 [ 686.566052][ T4943] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 686.580395][ T4943] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 686.594617][ T4943] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 686.605132][ T4943] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 686.612825][ T4943] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 686.709028][T16226] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3115'. [ 686.754366][T16226] netdevsim netdevsim4 netdevsim0: Unsupported IPsec algorithm - please use rfc4106(gcm(aes)) [ 686.948092][T16233] FAULT_INJECTION: forcing a failure. [ 686.948092][T16233] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 687.040186][T16233] CPU: 0 UID: 0 PID: 16233 Comm: syz.3.3117 Tainted: G L syzkaller #0 PREEMPT(full) [ 687.040216][T16233] Tainted: [L]=SOFTLOCKUP [ 687.040223][T16233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 687.040234][T16233] Call Trace: [ 687.040241][T16233] [ 687.040250][T16233] dump_stack_lvl+0xe8/0x150 [ 687.040277][T16233] should_fail_ex+0x412/0x560 [ 687.040305][T16233] strncpy_from_user+0x36/0x2b0 [ 687.040332][T16233] path_setxattrat+0x191/0x440 [ 687.040367][T16233] ? __pfx_path_setxattrat+0x10/0x10 [ 687.040415][T16233] ? fput+0xa0/0xd0 [ 687.040436][T16233] ? ksys_write+0x242/0x270 [ 687.040464][T16233] __ia32_sys_lsetxattr+0xbf/0xe0 [ 687.040491][T16233] __do_fast_syscall_32+0x229/0x6e0 [ 687.040526][T16233] ? do_fast_syscall_32+0x33/0x70 [ 687.040550][T16233] ? lockdep_hardirqs_on+0x7a/0x110 [ 687.040573][T16233] ? asm_int80_emulation+0x1a/0x20 [ 687.040591][T16233] ? do_int80_emulation+0x286/0x530 [ 687.040613][T16233] ? trace_irq_disable+0x3b/0x140 [ 687.040641][T16233] do_fast_syscall_32+0x33/0x70 [ 687.040666][T16233] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 687.040685][T16233] RIP: 0023:0xf707f01c [ 687.040700][T16233] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 687.040715][T16233] RSP: 002b:00000000f546d50c EFLAGS: 00000206 ORIG_RAX: 00000000000000e3 [ 687.040734][T16233] RAX: ffffffffffffffda RBX: 00000000800001c0 RCX: 0000000080000080 [ 687.040747][T16233] RDX: 0000000080000240 RSI: 0000000000000024 RDI: 0000000000000003 [ 687.040758][T16233] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 687.040769][T16233] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 687.040780][T16233] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 687.040807][T16233] [ 687.804462][T16253] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3121'. [ 687.939372][T16245] gtp0: entered allmulticast mode [ 688.615150][ T5689] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 688.694486][ T4943] Bluetooth: hci2: command tx timeout [ 688.823321][T16223] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.881406][T16223] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.918272][T16223] bridge_slave_0: entered allmulticast mode [ 688.938593][T16285] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 688.963026][T16223] bridge_slave_0: entered promiscuous mode [ 688.994650][T16223] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.048086][T16223] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.071616][T16223] bridge_slave_1: entered allmulticast mode [ 689.102282][T16223] bridge_slave_1: entered promiscuous mode [ 689.201267][T16223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 689.248920][T16223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 689.379978][T16223] team0: Port device team_slave_0 added [ 689.415884][T16223] team0: Port device team_slave_1 added [ 689.486288][T16223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 689.502923][T16223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 689.567660][T16223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 689.607712][T16223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 689.631374][T16223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 689.661546][ T5717] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 689.688131][T16223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 689.693596][ T5722] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 689.785901][T16223] hsr_slave_0: entered promiscuous mode [ 689.806544][T16223] hsr_slave_1: entered promiscuous mode [ 689.822387][T16223] debugfs: 'hsr0' already exists in 'hsr' [ 689.840002][T16223] Cannot create hsr debugfs directory [ 689.847268][ T5717] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 689.863743][ T5722] usb 3-1: Using ep0 maxpacket: 8 [ 689.865656][ T5717] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 689.912783][ T5717] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 689.915926][ T5722] usb 3-1: unable to get BOS descriptor or descriptor too short [ 689.952804][ T5717] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 689.977730][ T5722] usb 3-1: config 0 has an invalid interface number: 122 but max is 0 [ 689.993814][ T5722] usb 3-1: config 0 has no interface number 0 [ 689.995397][ T5717] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 690.038498][ T5722] usb 3-1: config 0 interface 122 altsetting 187 endpoint 0x82 has invalid maxpacket 59391, setting to 1024 [ 690.064491][ T5717] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 690.075964][ T5722] usb 3-1: config 0 interface 122 altsetting 187 has an endpoint descriptor with address 0x95, changing to 0x85 [ 690.104706][ T5717] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 690.130386][ T5717] usb 4-1: Product: syz [ 690.141201][ T5717] usb 4-1: Manufacturer: syz [ 690.167698][ T5717] cdc_wdm 4-1:1.0: skipping garbage [ 690.188713][ T5717] cdc_wdm 4-1:1.0: skipping garbage [ 690.199127][ T5722] usb 3-1: config 0 interface 122 altsetting 187 endpoint 0x85 has invalid maxpacket 19271, setting to 1024 [ 690.241334][ T5722] usb 3-1: config 0 interface 122 altsetting 187 bulk endpoint 0x85 has invalid maxpacket 1024 [ 690.245938][ T5717] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 690.287989][ T5717] cdc_wdm 4-1:1.0: Unknown control protocol [ 690.292747][ T5722] usb 3-1: config 0 interface 122 altsetting 187 bulk endpoint 0x6 has invalid maxpacket 91 [ 690.332096][T16297] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3128'. [ 690.356559][ T5722] usb 3-1: config 0 interface 122 has no altsetting 0 [ 690.399916][T16297] netdevsim netdevsim4 netdevsim0: Unsupported IPsec algorithm - please use rfc4106(gcm(aes)) [ 690.424919][ T5722] usb 3-1: New USB device found, idVendor=04b8, idProduct=0521, bcdDevice=15.4a [ 690.428664][T16223] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 690.448345][T16223] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.483406][ T5722] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.502513][ T5722] usb 3-1: Product: syz [ 690.520969][ T5722] usb 3-1: Manufacturer: syz [ 690.532276][T16294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 690.540999][ T5722] usb 3-1: SerialNumber: syz [ 690.608953][T16294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 690.609629][ T5722] usb 3-1: config 0 descriptor?? [ 690.641840][T16223] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 690.654664][T16223] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.671395][T16295] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 690.693781][T16295] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 690.723856][T16295] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 690.785272][ T4943] Bluetooth: hci2: command tx timeout [ 690.787085][ T5689] usb 4-1: USB disconnect, device number 81 [ 690.862646][T16223] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 690.907584][T16223] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.981472][T16295] program syz.2.3126 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 691.023241][ T5722] pl2303 3-1:0.122: pl2303 converter detected [ 691.040817][ T5722] pl2303 3-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 691.056920][ T5722] pl2303 3-1:0.122: pl2303_vendor_write - failed to write [0404]: -71 [ 691.069076][ T5722] pl2303 3-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 691.098591][ T5722] pl2303 3-1:0.122: pl2303_vendor_read - failed to read [8383]: -71 [ 691.110260][ T5722] pl2303 3-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 691.125605][T16223] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 691.136370][T16223] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.146934][ T5722] pl2303 3-1:0.122: pl2303_vendor_write - failed to write [0404]: -71 [ 691.156064][ T5722] pl2303 3-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 691.172734][ T5722] pl2303 3-1:0.122: pl2303_vendor_read - failed to read [8383]: -71 [ 691.185147][ T5689] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 691.186642][ T5722] pl2303 3-1:0.122: pl2303_vendor_write - failed to write [0000]: -71 [ 691.212829][ T5722] pl2303 3-1:0.122: pl2303_vendor_write - failed to write [0001]: -71 [ 691.236183][ T5722] pl2303 3-1:0.122: pl2303_vendor_write - failed to write [0002]: -71 [ 691.260948][ T5722] usb 3-1: pl2303 converter now attached to ttyUSB0 [ 691.295972][ T5722] usb 3-1: USB disconnect, device number 84 [ 691.355883][ T5689] usb 5-1: config 0 has no interfaces? [ 691.371699][ T5689] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 691.387974][ T5689] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.397563][ T5689] usb 5-1: Product: syz [ 691.402843][ T5689] usb 5-1: Manufacturer: syz [ 691.406663][ T5722] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 691.416671][ T5689] usb 5-1: SerialNumber: syz [ 691.449999][ T5689] usb 5-1: config 0 descriptor?? [ 691.451584][ T5722] pl2303 3-1:0.122: device disconnected [ 691.567585][T16223] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 691.587549][T16223] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 691.603364][T16223] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 691.670798][T16223] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 691.683729][T16223] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 691.694260][T16223] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 691.714495][T15207] usb 5-1: USB disconnect, device number 86 [ 691.722929][T16223] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 691.762006][T16223] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 691.897915][T16223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 691.940548][T16223] 8021q: adding VLAN 0 to HW filter on device team0 [ 691.964745][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 691.971854][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 692.034449][ T137] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.041643][ T137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 692.439704][T16223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 692.678149][T16223] veth0_vlan: entered promiscuous mode [ 692.713480][T16223] veth1_vlan: entered promiscuous mode [ 692.828559][T16223] veth0_macvtap: entered promiscuous mode [ 692.857499][T16223] veth1_macvtap: entered promiscuous mode [ 692.863696][ T4943] Bluetooth: hci2: command tx timeout [ 692.912622][T16334] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3132'. [ 692.940498][T16223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 692.998506][ T10] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 693.203776][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 693.216236][ T10] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 693.231288][ T10] usb 5-1: config 0 has no interface number 0 [ 693.259567][ T10] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 693.276144][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.287332][ T10] usb 5-1: Product: syz [ 693.293047][ T10] usb 5-1: Manufacturer: syz [ 693.306489][ T10] usb 5-1: SerialNumber: syz [ 693.363353][ T10] usb 5-1: config 0 descriptor?? [ 693.370195][T16223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 693.388707][ T10] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 693.421985][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.431903][ T10] usb 5-1: selecting invalid altsetting 1 [ 693.438602][ T10] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 693.448749][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.522471][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.540029][ T10] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 693.552003][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.600720][T16339] usb 5-1: dvb_usb_ce6230: I2C read not implemented [ 693.621886][ T10] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 693.673584][ T10] usb 5-1: media controller created [ 693.709903][ T137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 693.739526][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 693.759806][ T137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 693.809424][ T10] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 693.816592][ T10] zl10353_read_register: readreg error (reg=127, ret==-71) [ 693.849452][ T10] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 693.859771][ T3275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 693.886937][ T3275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 694.046319][ T10] usb 5-1: USB disconnect, device number 87 [ 694.113418][T16350] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 694.119977][T16350] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 694.247644][T16350] vhci_hcd vhci_hcd.0: Device attached [ 694.368175][T16352] vhci_hcd: connection closed [ 694.368485][ T47] vhci_hcd vhci_hcd.0: stop threads [ 694.379974][ T5696] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 694.409065][ T47] vhci_hcd vhci_hcd.0: release socket [ 694.421932][ T47] vhci_hcd vhci_hcd.0: disconnect device [ 694.546058][ T5696] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 694.558121][ T5696] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 694.591846][ T5696] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 694.628393][ T5696] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 694.642546][ T30] kauditd_printk_skb: 2306 callbacks suppressed [ 694.642561][ T30] audit: type=1326 audit(1778244653.930:29015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16359 comm="syz.3.3142" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f01c code=0x7ffc0000 [ 694.685617][ T5696] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 694.728398][ T5696] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 694.740443][ T30] audit: type=1326 audit(1778244653.940:29016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16359 comm="syz.3.3142" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f01c code=0x7ffc0000 [ 694.765119][ T5696] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 694.777661][ T5696] usb 2-1: Product: syz [ 694.781874][ T5696] usb 2-1: Manufacturer: syz [ 694.816939][ T5696] cdc_wdm 2-1:1.0: skipping garbage [ 694.835339][ T30] audit: type=1326 audit(1778244653.940:29017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16359 comm="syz.3.3142" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71b616b code=0x7ffc0000 [ 694.862372][ T5696] cdc_wdm 2-1:1.0: skipping garbage [ 694.869536][ T5696] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 694.876528][ T5696] cdc_wdm 2-1:1.0: Unknown control protocol [ 694.895893][ T30] audit: type=1326 audit(1778244653.940:29018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16359 comm="syz.3.3142" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71b616b code=0x7ffc0000 [ 694.933776][ T4943] Bluetooth: hci2: command tx timeout [ 694.943355][ T30] audit: type=1326 audit(1778244653.940:29019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16359 comm="syz.3.3142" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f01c code=0x7ffc0000 [ 694.970167][ T30] audit: type=1326 audit(1778244653.940:29020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16359 comm="syz.3.3142" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f01c code=0x7ffc0000 [ 695.002480][ T30] audit: type=1326 audit(1778244653.940:29021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16359 comm="syz.3.3142" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=291 compat=1 ip=0xf707f01c code=0x7ffc0000 [ 695.029320][ T30] audit: type=1326 audit(1778244653.940:29022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16359 comm="syz.3.3142" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f01c code=0x7ffc0000 [ 695.056866][ T30] audit: type=1326 audit(1778244653.940:29023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16359 comm="syz.3.3142" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=292 compat=1 ip=0xf707f01c code=0x7ffc0000 [ 695.096901][T16354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 695.118856][ T30] audit: type=1326 audit(1778244653.940:29024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16359 comm="syz.3.3142" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f01c code=0x7ffc0000 [ 695.131567][T16354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 695.203682][ T5689] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 695.299548][ T5696] usb 2-1: USB disconnect, device number 102 [ 695.363942][ T5689] usb 4-1: Using ep0 maxpacket: 16 [ 695.372337][ T5689] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 695.383974][ T5717] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 695.397773][ T5689] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 695.428183][ T5689] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 695.445609][ T5689] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 695.465270][ T5689] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 695.496440][ T5689] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 695.513762][ T5689] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 695.524656][ T5689] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 695.537600][ T5689] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 695.548538][ T5689] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 695.565741][ T5717] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 695.586019][ T5717] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 695.601950][ T5689] usb 4-1: string descriptor 0 read error: -71 [ 695.609285][ T5717] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 695.618962][ T5689] usb 4-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice=e2.32 [ 695.628441][ T5717] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.638099][ T5689] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.659587][ T5717] usb 1-1: config 0 descriptor?? [ 695.672729][ T5689] usb 4-1: rejected 5 configurations due to insufficient available bus power [ 695.686586][ T5689] usb 4-1: no configuration chosen from 5 choices [ 695.708579][ T5689] usb 4-1: USB disconnect, device number 82 [ 695.886975][T16368] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3145'. [ 695.963481][T16378] syzkaller0: entered promiscuous mode [ 695.985529][T16378] syzkaller0: entered allmulticast mode [ 696.021612][T16378] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3149'. [ 696.064642][T16378] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3149'. [ 696.131082][ T5717] cm6533_jd 0003:0D8C:0022.0017: unknown main item tag 0x0 [ 696.167101][ T5717] cm6533_jd 0003:0D8C:0022.0017: unknown main item tag 0x0 [ 696.201061][ T5717] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.0017/input/input126 [ 696.251590][T16381] 0: reclassify loop, rule prio 0, protocol 800 [ 696.280922][ T5717] cm6533_jd 0003:0D8C:0022.0017: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 696.440791][ T5689] usb 1-1: USB disconnect, device number 110 [ 696.473691][T15207] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 696.502839][T16384] fido_id[16384]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 696.639300][T15207] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 696.658775][T15207] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 696.686463][T15207] usb 4-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 696.707549][T15207] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.729288][T15207] usb 4-1: config 0 descriptor?? [ 696.852167][T16390] syzkaller0: entered promiscuous mode [ 696.860506][T16390] syzkaller0: entered allmulticast mode [ 696.869601][T16390] FAULT_INJECTION: forcing a failure. [ 696.869601][T16390] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 696.883654][T16390] CPU: 0 UID: 0 PID: 16390 Comm: syz.2.3152 Tainted: G L syzkaller #0 PREEMPT(full) [ 696.883683][T16390] Tainted: [L]=SOFTLOCKUP [ 696.883690][T16390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 696.883701][T16390] Call Trace: [ 696.883708][T16390] [ 696.883715][T16390] dump_stack_lvl+0xe8/0x150 [ 696.883741][T16390] should_fail_ex+0x412/0x560 [ 696.883768][T16390] _copy_from_user+0x2d/0xb0 [ 696.883793][T16390] get_compat_msghdr+0xb3/0x4c0 [ 696.883819][T16390] ? _parse_integer_limit+0x1ae/0x1f0 [ 696.883841][T16390] ? __pfx_get_compat_msghdr+0x10/0x10 [ 696.883867][T16390] ? kstrtoull+0x12f/0x1d0 [ 696.883894][T16390] ___sys_sendmsg+0x201/0x360 [ 696.883918][T16390] ? __lock_acquire+0x6b5/0x2cf0 [ 696.883940][T16390] ? __pfx____sys_sendmsg+0x10/0x10 [ 696.883965][T16390] ? get_pid_task+0x20/0x1f0 [ 696.883986][T16390] ? get_pid_task+0x20/0x1f0 [ 696.884004][T16390] ? get_pid_task+0x20/0x1f0 [ 696.884050][T16390] ? __fget_files+0x2a/0x420 [ 696.884071][T16390] ? __fget_files+0x3a0/0x420 [ 696.884099][T16390] __sys_sendmsg+0x183/0x260 [ 696.884124][T16390] ? __pfx___sys_sendmsg+0x10/0x10 [ 696.884167][T16390] __do_fast_syscall_32+0x229/0x6e0 [ 696.884193][T16390] ? do_fast_syscall_32+0x33/0x70 [ 696.884216][T16390] ? lockdep_hardirqs_on+0x7a/0x110 [ 696.884239][T16390] ? asm_int80_emulation+0x1a/0x20 [ 696.884257][T16390] ? do_int80_emulation+0x286/0x530 [ 696.884280][T16390] ? trace_irq_disable+0x3b/0x140 [ 696.884308][T16390] do_fast_syscall_32+0x33/0x70 [ 696.884334][T16390] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 696.884355][T16390] RIP: 0023:0xf7fd401c [ 696.884371][T16390] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 696.884387][T16390] RSP: 002b:00000000f549650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 696.884406][T16390] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800000c0 [ 696.884419][T16390] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 696.884430][T16390] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 696.884441][T16390] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 696.884452][T16390] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 696.884478][T16390] [ 696.948453][T15207] usb 4-1: string descriptor 0 read error: -71 [ 697.113682][ T5722] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 697.171313][T16395] openvswitch: netlink: IP tunnel dst address not specified [ 697.230633][T15207] usb 4-1: USB disconnect, device number 83 [ 697.344533][ T5722] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 697.358698][ T5722] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.387877][T16399] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 697.394406][T16399] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 697.408418][ T5722] usb 2-1: config 0 descriptor?? [ 697.425949][ T5722] cp210x 2-1:0.0: cp210x converter detected [ 697.442179][T16399] vhci_hcd vhci_hcd.0: Device attached [ 697.490660][T16400] vhci_hcd: connection closed [ 697.492139][ T13] vhci_hcd vhci_hcd.2: stop threads [ 697.534908][ T13] vhci_hcd vhci_hcd.2: release socket [ 697.549722][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 697.613773][ T5696] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 697.834162][ T5722] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 697.861977][ T5722] usb 2-1: cp210x converter now attached to ttyUSB0 [ 698.191014][T16414] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3160'. [ 698.205258][T16414] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3160'. [ 698.219677][T16414] bond0: option resend_igmp: invalid value (3131) [ 698.226242][T16414] bond0: option resend_igmp: allowed values 0 - 255 [ 698.324752][ T5717] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 698.365987][T16416] FAULT_INJECTION: forcing a failure. [ 698.365987][T16416] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 698.393664][T15207] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 698.415298][T16416] CPU: 1 UID: 0 PID: 16416 Comm: syz.2.3161 Tainted: G L syzkaller #0 PREEMPT(full) [ 698.415321][T16416] Tainted: [L]=SOFTLOCKUP [ 698.415326][T16416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 698.415332][T16416] Call Trace: [ 698.415337][T16416] [ 698.415342][T16416] dump_stack_lvl+0xe8/0x150 [ 698.415358][T16416] should_fail_ex+0x412/0x560 [ 698.415375][T16416] _copy_from_user+0x2d/0xb0 [ 698.415390][T16416] get_compat_msghdr+0xb3/0x4c0 [ 698.415406][T16416] ? _parse_integer_limit+0x1ae/0x1f0 [ 698.415422][T16416] ? __pfx_get_compat_msghdr+0x10/0x10 [ 698.415439][T16416] ? kstrtoull+0x12f/0x1d0 [ 698.415454][T16416] ___sys_sendmsg+0x201/0x360 [ 698.415468][T16416] ? __lock_acquire+0x6b5/0x2cf0 [ 698.415481][T16416] ? __pfx____sys_sendmsg+0x10/0x10 [ 698.415496][T16416] ? get_pid_task+0x20/0x1f0 [ 698.415508][T16416] ? get_pid_task+0x20/0x1f0 [ 698.415519][T16416] ? get_pid_task+0x20/0x1f0 [ 698.415543][T16416] ? __fget_files+0x2a/0x420 [ 698.415555][T16416] ? __fget_files+0x3a0/0x420 [ 698.415571][T16416] __sys_sendmsg+0x183/0x260 [ 698.415585][T16416] ? __pfx___sys_sendmsg+0x10/0x10 [ 698.415608][T16416] __do_fast_syscall_32+0x229/0x6e0 [ 698.415624][T16416] ? do_fast_syscall_32+0x33/0x70 [ 698.415637][T16416] ? lockdep_hardirqs_on+0x7a/0x110 [ 698.415650][T16416] ? asm_int80_emulation+0x1a/0x20 [ 698.415660][T16416] ? do_int80_emulation+0x286/0x530 [ 698.415673][T16416] ? trace_irq_disable+0x3b/0x140 [ 698.415704][T16416] do_fast_syscall_32+0x33/0x70 [ 698.415728][T16416] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 698.415747][T16416] RIP: 0023:0xf7fd401c [ 698.415763][T16416] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 698.415775][T16416] RSP: 002b:00000000f549650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 698.415788][T16416] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000480 [ 698.415800][T16416] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 698.415811][T16416] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 698.415821][T16416] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 698.415831][T16416] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 698.415856][T16416] [ 698.701966][ T5717] usb 4-1: unable to get BOS descriptor or descriptor too short [ 698.710770][ T5717] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 698.720938][ T5717] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 698.732962][ T5717] usb 4-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 698.742123][ T5717] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.750264][ T5717] usb 4-1: Product: syz [ 698.754452][ T5717] usb 4-1: Manufacturer: syz [ 698.759027][ T5717] usb 4-1: SerialNumber: syz [ 698.795562][T15207] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 698.804717][T15207] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 698.815057][T15207] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 698.824675][T15207] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 698.835712][T15207] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 698.849571][T15207] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 698.858900][T15207] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 698.867734][T15207] usb 1-1: Product: syz [ 698.873804][T15207] usb 1-1: Manufacturer: syz [ 698.891964][T15207] cdc_wdm 1-1:1.0: skipping garbage [ 698.897206][T15207] cdc_wdm 1-1:1.0: skipping garbage [ 698.904921][T15207] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 698.905695][T16418] kvm: kvm [16417]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60000000200 [ 698.910867][T15207] cdc_wdm 1-1:1.0: Unknown control protocol [ 698.969659][T16418] kvm: kvm [16417]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60000000200 [ 698.985682][T16410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3158'. [ 699.007249][T16410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3158'. [ 699.020472][T16418] kvm: kvm [16417]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60000000200 [ 699.025780][T16410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 699.043214][T16410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 699.056094][T16418] kvm: kvm [16417]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60000000200 [ 699.126534][T16418] kvm: kvm [16417]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60000000200 [ 699.144307][T16423] FAULT_INJECTION: forcing a failure. [ 699.144307][T16423] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 699.152032][T16412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 699.180310][T16418] kvm: kvm [16417]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60000000200 [ 699.185494][T16412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 699.190419][T16423] CPU: 0 UID: 0 PID: 16423 Comm: syz.4.3163 Tainted: G L syzkaller #0 PREEMPT(full) [ 699.190445][T16423] Tainted: [L]=SOFTLOCKUP [ 699.190452][T16423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 699.190463][T16423] Call Trace: [ 699.190470][T16423] [ 699.190478][T16423] dump_stack_lvl+0xe8/0x150 [ 699.190504][T16423] should_fail_ex+0x412/0x560 [ 699.190532][T16423] _copy_to_user+0x31/0xb0 [ 699.190559][T16423] simple_read_from_buffer+0xe1/0x170 [ 699.190585][T16423] proc_fail_nth_read+0x1bb/0x230 [ 699.190610][T16423] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 699.190634][T16423] ? rw_verify_area+0x2a6/0x4d0 [ 699.190658][T16423] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 699.190681][T16423] vfs_read+0x20c/0xa70 [ 699.190710][T16423] ? __pfx___mutex_lock+0x10/0x10 [ 699.190734][T16423] ? __pfx_vfs_read+0x10/0x10 [ 699.190758][T16423] ? __fget_files+0x2a/0x420 [ 699.190783][T16423] ? __fget_files+0x3a0/0x420 [ 699.190802][T16423] ? __fget_files+0x2a/0x420 [ 699.190830][T16423] ksys_read+0x150/0x270 [ 699.190855][T16423] ? __pfx_ksys_read+0x10/0x10 [ 699.190882][T16423] ? asm_int80_emulation+0x1a/0x20 [ 699.190905][T16423] do_int80_emulation+0x181/0x530 [ 699.190929][T16423] ? asm_int80_emulation+0x1a/0x20 [ 699.190946][T16423] ? clear_bhb_loop+0x40/0x90 [ 699.190963][T16423] ? clear_bhb_loop+0x40/0x90 [ 699.190984][T16423] asm_int80_emulation+0x1a/0x20 [ 699.191001][T16423] RIP: 0023:0xf710616b [ 699.191018][T16423] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 699.191032][T16423] RSP: 002b:00000000f539c4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 699.191051][T16423] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f539c5d0 [ 699.191064][T16423] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 699.191074][T16423] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 699.191084][T16423] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 699.191094][T16423] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 699.191120][T16423] [ 699.430789][ T5717] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 699.461374][ T5717] usb 4-1: USB disconnect, device number 84 [ 699.505225][T16418] kvm: kvm [16417]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60000000200 [ 699.532166][T10931] udevd[10931]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 699.613487][ T5722] usb 1-1: USB disconnect, device number 111 [ 699.731827][ T10] usb 2-1: USB disconnect, device number 103 [ 699.737856][T16431] FAULT_INJECTION: forcing a failure. [ 699.737856][T16431] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 699.737887][T16431] CPU: 1 UID: 0 PID: 16431 Comm: syz.4.3166 Tainted: G L syzkaller #0 PREEMPT(full) [ 699.737910][T16431] Tainted: [L]=SOFTLOCKUP [ 699.737917][T16431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 699.737927][T16431] Call Trace: [ 699.737933][T16431] [ 699.737941][T16431] dump_stack_lvl+0xe8/0x150 [ 699.737964][T16431] should_fail_ex+0x412/0x560 [ 699.737991][T16431] _copy_from_user+0x2d/0xb0 [ 699.738016][T16431] get_compat_msghdr+0xb3/0x4c0 [ 699.738044][T16431] ? _parse_integer_limit+0x1ae/0x1f0 [ 699.738064][T16431] ? __pfx_get_compat_msghdr+0x10/0x10 [ 699.738087][T16431] ? kstrtoull+0x12f/0x1d0 [ 699.738114][T16431] ___sys_sendmsg+0x201/0x360 [ 699.738135][T16431] ? __lock_acquire+0x6b5/0x2cf0 [ 699.738157][T16431] ? __pfx____sys_sendmsg+0x10/0x10 [ 699.738183][T16431] ? get_pid_task+0x20/0x1f0 [ 699.738205][T16431] ? get_pid_task+0x20/0x1f0 [ 699.738224][T16431] ? get_pid_task+0x20/0x1f0 [ 699.738269][T16431] ? __fget_files+0x2a/0x420 [ 699.738293][T16431] ? __fget_files+0x3a0/0x420 [ 699.738329][T16431] __sys_sendmsg+0x183/0x260 [ 699.738356][T16431] ? __pfx___sys_sendmsg+0x10/0x10 [ 699.738399][T16431] __do_fast_syscall_32+0x229/0x6e0 [ 699.738425][T16431] ? do_fast_syscall_32+0x33/0x70 [ 699.738449][T16431] ? lockdep_hardirqs_on+0x7a/0x110 [ 699.738471][T16431] ? asm_int80_emulation+0x1a/0x20 [ 699.738488][T16431] ? do_int80_emulation+0x286/0x530 [ 699.738511][T16431] ? trace_irq_disable+0x3b/0x140 [ 699.738539][T16431] do_fast_syscall_32+0x33/0x70 [ 699.738564][T16431] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 699.738585][T16431] RIP: 0023:0xf6fcf01c [ 699.738601][T16431] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 699.738617][T16431] RSP: 002b:00000000f53bd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 699.738636][T16431] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080001bc0 [ 699.738649][T16431] RDX: 0000000000002002 RSI: 0000000000000000 RDI: 0000000000000000 [ 699.738660][T16431] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 699.738670][T16431] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 699.738680][T16431] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 699.738705][T16431] [ 699.913618][T16435] FAULT_INJECTION: forcing a failure. [ 699.913618][T16435] name failslab, interval 1, probability 0, space 0, times 0 [ 699.921805][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 699.949259][T16435] CPU: 1 UID: 0 PID: 16435 Comm: syz.4.3167 Tainted: G L syzkaller #0 PREEMPT(full) [ 699.949295][T16435] Tainted: [L]=SOFTLOCKUP [ 699.949303][T16435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 699.949315][T16435] Call Trace: [ 699.949322][T16435] [ 699.949330][T16435] dump_stack_lvl+0xe8/0x150 [ 699.949356][T16435] should_fail_ex+0x412/0x560 [ 699.949385][T16435] should_failslab+0xa8/0x100 [ 699.949413][T16435] __kmalloc_noprof+0xe8/0x760 [ 699.949438][T16435] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 699.949469][T16435] tomoyo_realpath_from_path+0xe3/0x5d0 [ 699.949495][T16435] ? tomoyo_domain+0xd7/0x130 [ 699.949525][T16435] ? tomoyo_path_number_perm+0x219/0x630 [ 699.949547][T16435] tomoyo_path_number_perm+0x246/0x630 [ 699.949570][T16435] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 699.949590][T16435] ? __lock_acquire+0x6b5/0x2cf0 [ 699.949641][T16435] ? __fget_files+0x2a/0x420 [ 699.949665][T16435] ? __fget_files+0x3a0/0x420 [ 699.949684][T16435] ? __fget_files+0x2a/0x420 [ 699.949709][T16435] security_file_ioctl_compat+0xc3/0x2a0 [ 699.949732][T16435] __ia32_compat_sys_ioctl+0x139/0x950 [ 699.949760][T16435] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 699.949789][T16435] ? __fget_files+0x3a0/0x420 [ 699.949815][T16435] ? fput+0xa0/0xd0 [ 699.949835][T16435] ? ksys_write+0x242/0x270 [ 699.949870][T16435] __do_fast_syscall_32+0x229/0x6e0 [ 699.949895][T16435] ? do_fast_syscall_32+0x33/0x70 [ 699.949918][T16435] ? lockdep_hardirqs_on+0x7a/0x110 [ 699.949939][T16435] ? asm_int80_emulation+0x1a/0x20 [ 699.949956][T16435] ? do_int80_emulation+0x286/0x530 [ 699.949979][T16435] ? trace_irq_disable+0x3b/0x140 [ 699.950006][T16435] do_fast_syscall_32+0x33/0x70 [ 699.950031][T16435] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 699.950051][T16435] RIP: 0023:0xf6fcf01c [ 699.950068][T16435] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 699.950082][T16435] RSP: 002b:00000000f53bd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 699.950100][T16435] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c08c5336 [ 699.950113][T16435] RDX: 0000000080000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 699.950123][T16435] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 699.950134][T16435] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 699.950144][T16435] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 699.950171][T16435] [ 699.950178][T16435] ERROR: Out of memory at tomoyo_realpath_from_path. [ 699.996887][ T10] cp210x 2-1:0.0: device disconnected [ 700.164936][ T5717] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 700.339857][T16445] FAULT_INJECTION: forcing a failure. [ 700.339857][T16445] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 700.386049][T16445] CPU: 0 UID: 0 PID: 16445 Comm: syz.4.3172 Tainted: G L syzkaller #0 PREEMPT(full) [ 700.386078][T16445] Tainted: [L]=SOFTLOCKUP [ 700.386085][T16445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 700.386095][T16445] Call Trace: [ 700.386102][T16445] [ 700.386110][T16445] dump_stack_lvl+0xe8/0x150 [ 700.386137][T16445] should_fail_ex+0x412/0x560 [ 700.386164][T16445] _copy_from_user+0x2d/0xb0 [ 700.386190][T16445] get_compat_msghdr+0xb3/0x4c0 [ 700.386217][T16445] ? _parse_integer_limit+0x1ae/0x1f0 [ 700.386237][T16445] ? __pfx_get_compat_msghdr+0x10/0x10 [ 700.386262][T16445] ? kstrtoull+0x12f/0x1d0 [ 700.386289][T16445] ___sys_sendmsg+0x201/0x360 [ 700.386312][T16445] ? __lock_acquire+0x6b5/0x2cf0 [ 700.386335][T16445] ? __pfx____sys_sendmsg+0x10/0x10 [ 700.386360][T16445] ? get_pid_task+0x20/0x1f0 [ 700.386382][T16445] ? get_pid_task+0x20/0x1f0 [ 700.386402][T16445] ? get_pid_task+0x20/0x1f0 [ 700.386447][T16445] ? __fget_files+0x2a/0x420 [ 700.386468][T16445] ? __fget_files+0x3a0/0x420 [ 700.386499][T16445] __sys_sendmsg+0x183/0x260 [ 700.386531][T16445] ? __pfx___sys_sendmsg+0x10/0x10 [ 700.386574][T16445] __do_fast_syscall_32+0x229/0x6e0 [ 700.386600][T16445] ? do_fast_syscall_32+0x33/0x70 [ 700.386623][T16445] ? lockdep_hardirqs_on+0x7a/0x110 [ 700.386645][T16445] ? asm_int80_emulation+0x1a/0x20 [ 700.386663][T16445] ? do_int80_emulation+0x286/0x530 [ 700.386686][T16445] ? trace_irq_disable+0x3b/0x140 [ 700.386715][T16445] do_fast_syscall_32+0x33/0x70 [ 700.386744][T16445] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 700.386766][T16445] RIP: 0023:0xf6fcf01c [ 700.386783][T16445] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 700.386799][T16445] RSP: 002b:00000000f53bd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 700.386818][T16445] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0 [ 700.386830][T16445] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 700.386840][T16445] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 700.386850][T16445] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 700.386861][T16445] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 700.386887][T16445] [ 700.717613][ T5717] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 700.736039][ T5717] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 700.748594][ T5717] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 700.773139][ T5717] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 700.828003][ T5717] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 700.842476][ T5717] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.871790][ T5717] usb 3-1: config 0 descriptor?? [ 700.903810][ T5722] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 701.067635][ T5722] usb 4-1: config 9 has an invalid interface number: 182 but max is 0 [ 701.076227][ T5722] usb 4-1: config 9 has no interface number 0 [ 701.100747][ T5722] usb 4-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.10 [ 701.113564][ T5722] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.132233][ T5722] usb 4-1: Product: syz [ 701.148066][ T5722] usb 4-1: Manufacturer: syz [ 701.162840][ T5722] usb 4-1: SerialNumber: syz [ 701.212614][T16459] kvm: kvm [16458]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60000000200 [ 701.248660][T16457] FAULT_INJECTION: forcing a failure. [ 701.248660][T16457] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 701.254573][T16459] kvm: kvm [16458]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60000000200 [ 701.297441][T16457] CPU: 1 UID: 0 PID: 16457 Comm: syz.0.3176 Tainted: G L syzkaller #0 PREEMPT(full) [ 701.297471][T16457] Tainted: [L]=SOFTLOCKUP [ 701.297478][T16457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 701.297488][T16457] Call Trace: [ 701.297496][T16457] [ 701.297504][T16457] dump_stack_lvl+0xe8/0x150 [ 701.297530][T16457] should_fail_ex+0x412/0x560 [ 701.297557][T16457] _copy_to_user+0x31/0xb0 [ 701.297583][T16457] simple_read_from_buffer+0xe1/0x170 [ 701.297610][T16457] proc_fail_nth_read+0x1bb/0x230 [ 701.297636][T16457] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 701.297662][T16457] ? rw_verify_area+0x2a6/0x4d0 [ 701.297685][T16457] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 701.297709][T16457] vfs_read+0x20c/0xa70 [ 701.297735][T16457] ? __pfx___mutex_lock+0x10/0x10 [ 701.297761][T16457] ? __pfx_vfs_read+0x10/0x10 [ 701.297785][T16457] ? __fget_files+0x2a/0x420 [ 701.297810][T16457] ? __fget_files+0x3a0/0x420 [ 701.297829][T16457] ? __fget_files+0x2a/0x420 [ 701.297858][T16457] ksys_read+0x150/0x270 [ 701.297884][T16457] ? __pfx_ksys_read+0x10/0x10 [ 701.297909][T16457] ? ksys_read+0x11/0x270 [ 701.297938][T16457] do_int80_emulation+0x181/0x530 [ 701.297962][T16457] ? trace_irq_disable+0x3b/0x140 [ 701.297985][T16457] ? asm_int80_emulation+0x1a/0x20 [ 701.298002][T16457] ? clear_bhb_loop+0x40/0x90 [ 701.298019][T16457] ? clear_bhb_loop+0x40/0x90 [ 701.298041][T16457] asm_int80_emulation+0x1a/0x20 [ 701.298058][T16457] RIP: 0023:0xf719616b [ 701.298076][T16457] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 701.298089][T16457] RSP: 002b:00000000f544d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 701.298107][T16457] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f544d5d0 [ 701.298119][T16457] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 701.298128][T16457] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 701.298140][T16457] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 701.298160][T16457] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 701.298185][T16457] [ 701.494780][T16459] kvm: kvm [16458]: vcpu0, guest rIP: 0x208 Unhandled WRMSR(0xc2) = 0x60000000200 [ 701.569305][T16449] tipc: Started in network mode [ 701.574255][T16449] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 701.583157][T16449] tipc: Enabling of bearer rejected, failed to enable media [ 701.597901][T16433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 701.606654][T16433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 701.618947][ T5717] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 701.951996][T16466] Invalid argument reading file caps for ./file0 [ 702.134288][ T5722] go7007 4-1:9.182: probe with driver go7007 failed with error -12 [ 702.167948][ T5722] usb 4-1: USB disconnect, device number 85 [ 702.583618][ T5717] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 702.683664][ T5689] usb 4-1: new full-speed USB device number 86 using dummy_hcd [ 702.756100][ T5717] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 702.769381][ T5717] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 702.790858][ T5717] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 702.805019][ T5717] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 702.823168][ T5717] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 702.836891][ T5689] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 702.846452][ T5689] usb 4-1: config 0 has no interface number 0 [ 702.858066][ T5689] usb 4-1: config 0 interface 41 altsetting 2 endpoint 0x82 has invalid maxpacket 12592, setting to 64 [ 702.875504][ T5717] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 702.888431][ T5717] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 702.896618][ T5689] usb 4-1: config 0 interface 41 has no altsetting 0 [ 702.905972][ T5717] usb 2-1: Product: syz [ 702.921410][ T5689] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 702.936966][ T5717] usb 2-1: Manufacturer: syz [ 702.942978][ T5689] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.962939][ T5717] cdc_wdm 2-1:1.0: skipping garbage [ 702.971575][ T5717] cdc_wdm 2-1:1.0: skipping garbage [ 702.978876][ T5689] usb 4-1: Product: syz [ 702.988659][ T5689] usb 4-1: Manufacturer: syz [ 702.994053][ T5717] cdc_wdm 2-1:1.0: cdc-wdm1: USB WDM device [ 703.011745][ T5689] usb 4-1: SerialNumber: syz [ 703.021593][ T5722] usb 3-1: USB disconnect, device number 85 [ 703.031578][ T5717] cdc_wdm 2-1:1.0: Unknown control protocol [ 703.062608][ T5689] usb 4-1: config 0 descriptor?? [ 703.085021][T16480] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 703.190849][T16484] FAULT_INJECTION: forcing a failure. [ 703.190849][T16484] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 703.231671][T16474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 703.243865][T16484] CPU: 1 UID: 0 PID: 16484 Comm: syz.2.3184 Tainted: G L syzkaller #0 PREEMPT(full) [ 703.243891][T16484] Tainted: [L]=SOFTLOCKUP [ 703.243897][T16484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 703.243908][T16484] Call Trace: [ 703.243915][T16484] [ 703.243921][T16484] dump_stack_lvl+0xe8/0x150 [ 703.243944][T16484] should_fail_ex+0x412/0x560 [ 703.243965][T16484] _copy_from_user+0x2d/0xb0 [ 703.243987][T16484] get_compat_msghdr+0xb3/0x4c0 [ 703.244009][T16484] ? _parse_integer_limit+0x1ae/0x1f0 [ 703.244026][T16484] ? __pfx_get_compat_msghdr+0x10/0x10 [ 703.244045][T16484] ? kstrtoull+0x12f/0x1d0 [ 703.244065][T16484] ___sys_sendmsg+0x201/0x360 [ 703.244084][T16484] ? __lock_acquire+0x6b5/0x2cf0 [ 703.244101][T16484] ? __pfx____sys_sendmsg+0x10/0x10 [ 703.244121][T16484] ? get_pid_task+0x20/0x1f0 [ 703.244138][T16484] ? get_pid_task+0x20/0x1f0 [ 703.244154][T16484] ? get_pid_task+0x20/0x1f0 [ 703.244189][T16484] ? __fget_files+0x2a/0x420 [ 703.244206][T16484] ? __fget_files+0x3a0/0x420 [ 703.244238][T16484] __sys_sendmsg+0x183/0x260 [ 703.244259][T16484] ? __pfx___sys_sendmsg+0x10/0x10 [ 703.244294][T16484] __do_fast_syscall_32+0x229/0x6e0 [ 703.244315][T16484] ? do_fast_syscall_32+0x33/0x70 [ 703.244334][T16484] ? lockdep_hardirqs_on+0x7a/0x110 [ 703.244352][T16484] ? asm_int80_emulation+0x1a/0x20 [ 703.244366][T16484] ? do_int80_emulation+0x286/0x530 [ 703.244386][T16484] ? trace_irq_disable+0x3b/0x140 [ 703.244409][T16484] do_fast_syscall_32+0x33/0x70 [ 703.244430][T16484] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 703.244448][T16484] RIP: 0023:0xf7fd401c [ 703.244464][T16484] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 703.244478][T16484] RSP: 002b:00000000f549650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 703.244495][T16484] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001080 [ 703.244505][T16484] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 703.244512][T16484] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 703.244520][T16484] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 703.244528][T16484] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 703.244547][T16484] [ 703.606000][T16474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 703.622603][T16480] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 703.771066][ T5722] usb 2-1: USB disconnect, device number 104 [ 704.193680][ T9] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 704.253392][ T5689] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 704.349709][T16502] FAULT_INJECTION: forcing a failure. [ 704.349709][T16502] name failslab, interval 1, probability 0, space 0, times 0 [ 704.353637][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 704.363047][T16502] CPU: 1 UID: 0 PID: 16502 Comm: syz.4.3192 Tainted: G L syzkaller #0 PREEMPT(full) [ 704.363074][T16502] Tainted: [L]=SOFTLOCKUP [ 704.363081][T16502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 704.363095][T16502] Call Trace: [ 704.363111][T16502] [ 704.363120][T16502] dump_stack_lvl+0xe8/0x150 [ 704.363146][T16502] should_fail_ex+0x412/0x560 [ 704.363175][T16502] should_failslab+0xa8/0x100 [ 704.363200][T16502] ? vm_area_dup+0x2b/0x680 [ 704.363224][T16502] kmem_cache_alloc_noprof+0x87/0x650 [ 704.363255][T16502] vm_area_dup+0x2b/0x680 [ 704.363282][T16502] __split_vma+0x1dc/0xa40 [ 704.363301][T16502] ? process_measurement+0x451/0x1c80 [ 704.363328][T16502] ? __pfx___split_vma+0x10/0x10 [ 704.363367][T16502] vms_gather_munmap_vmas+0x32d/0x1380 [ 704.363386][T16502] ? process_measurement+0x371/0x1c80 [ 704.363415][T16502] ? __pfx_process_measurement+0x10/0x10 [ 704.363432][T16502] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 704.363449][T16502] ? tomoyo_check_open_permission+0x38e/0x470 [ 704.363476][T16502] ? __lock_acquire+0x6b5/0x2cf0 [ 704.363505][T16502] do_vmi_align_munmap+0x2b4/0x4b0 [ 704.363522][T16502] ? __lock_acquire+0x6b5/0x2cf0 [ 704.363557][T16502] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 704.363604][T16502] do_vmi_munmap+0x252/0x2d0 [ 704.363628][T16502] do_munmap+0xf9/0x170 [ 704.363652][T16502] ? __pfx_do_munmap+0x10/0x10 [ 704.363690][T16502] mremap_to+0x353/0x880 [ 704.363714][T16502] ? mtree_load+0x12a/0x780 [ 704.363737][T16502] ? __pfx_mremap_to+0x10/0x10 [ 704.363756][T16502] ? may_expand_vm+0x24d/0x390 [ 704.363781][T16502] ? check_prep_vma+0x8b6/0xb00 [ 704.363809][T16502] __se_sys_mremap+0xe6d/0x11d0 [ 704.363848][T16502] ? __pfx___se_sys_mremap+0x10/0x10 [ 704.363866][T16502] ? __fget_files+0x3a0/0x420 [ 704.363892][T16502] ? fput+0xa0/0xd0 [ 704.363912][T16502] ? ksys_write+0x242/0x270 [ 704.363942][T16502] ? __ia32_sys_mremap+0x20/0xc0 [ 704.363962][T16502] __do_fast_syscall_32+0x229/0x6e0 [ 704.363987][T16502] ? do_fast_syscall_32+0x33/0x70 [ 704.364010][T16502] ? lockdep_hardirqs_on+0x7a/0x110 [ 704.364032][T16502] ? asm_int80_emulation+0x1a/0x20 [ 704.364049][T16502] ? do_int80_emulation+0x286/0x530 [ 704.364072][T16502] ? trace_irq_disable+0x3b/0x140 [ 704.364105][T16502] do_fast_syscall_32+0x33/0x70 [ 704.364130][T16502] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 704.364151][T16502] RIP: 0023:0xf6fcf01c [ 704.364168][T16502] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 704.364183][T16502] RSP: 002b:00000000f53bd50c EFLAGS: 00000206 ORIG_RAX: 00000000000000a3 [ 704.364202][T16502] RAX: ffffffffffffffda RBX: 0000000080064000 RCX: 0000000000003000 [ 704.364215][T16502] RDX: 0000000000600000 RSI: 0000000000000003 RDI: 0000000080a00000 [ 704.364226][T16502] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 704.364236][T16502] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 704.364247][T16502] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 704.364274][T16502] [ 704.581348][T16508] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3194'. [ 704.588550][ T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 704.638984][T16506] trusted_key: encrypted_key: insufficient parameters specified [ 704.646491][ T9] usb 3-1: config 0 has no interface number 0 [ 704.721010][ T9] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 704.730982][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.739251][ T9] usb 3-1: Product: syz [ 704.743884][ T9] usb 3-1: Manufacturer: syz [ 704.748555][ T9] usb 3-1: SerialNumber: syz [ 704.758117][ T9] usb 3-1: config 0 descriptor?? [ 704.770845][ T9] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 704.780772][ T9] usb 3-1: selecting invalid altsetting 1 [ 704.787062][ T9] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 704.797449][ T9] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 704.811220][ T9] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 704.819906][ T9] usb 3-1: media controller created [ 704.843284][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 704.971306][ T9] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 704.978460][ T9] zl10353_read_register: readreg error (reg=127, ret==-71) [ 704.986131][ T9] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 705.028084][ T9] usb 3-1: USB disconnect, device number 86 [ 705.065502][ T5717] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 705.223581][ T5717] usb 2-1: Using ep0 maxpacket: 32 [ 705.230278][ T5717] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 705.238372][ T5717] usb 2-1: config 0 has no interface number 0 [ 705.246739][ T5717] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 705.255939][ T5717] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.264389][ T5717] usb 2-1: Product: syz [ 705.268628][ T5717] usb 2-1: Manufacturer: syz [ 705.273244][ T5717] usb 2-1: SerialNumber: syz [ 705.280522][ T5717] usb 2-1: config 0 descriptor?? [ 705.288551][ T5717] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 705.298596][ T5717] usb 2-1: selecting invalid altsetting 1 [ 705.304790][ T5717] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 705.326037][ T5717] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 705.337198][ T5717] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 705.351090][ T5717] usb 2-1: media controller created [ 705.371094][ T5717] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 705.493128][T16518] ucma_write: process 81 (syz.4.3198) changed security contexts after opening file descriptor, this is not allowed. [ 705.547803][T16519] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3196'. [ 705.602932][T16521] FAULT_INJECTION: forcing a failure. [ 705.602932][T16521] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 705.617245][T16521] CPU: 1 UID: 0 PID: 16521 Comm: syz.2.3199 Tainted: G L syzkaller #0 PREEMPT(full) [ 705.617274][T16521] Tainted: [L]=SOFTLOCKUP [ 705.617281][T16521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 705.617292][T16521] Call Trace: [ 705.617303][T16521] [ 705.617311][T16521] dump_stack_lvl+0xe8/0x150 [ 705.617339][T16521] should_fail_ex+0x412/0x560 [ 705.617368][T16521] _copy_from_user+0x2d/0xb0 [ 705.617394][T16521] get_compat_msghdr+0xb3/0x4c0 [ 705.617422][T16521] ? _parse_integer_limit+0x1ae/0x1f0 [ 705.617444][T16521] ? __pfx_get_compat_msghdr+0x10/0x10 [ 705.617470][T16521] ? kstrtoull+0x12f/0x1d0 [ 705.617497][T16521] ___sys_sendmsg+0x201/0x360 [ 705.617521][T16521] ? __lock_acquire+0x6b5/0x2cf0 [ 705.617545][T16521] ? __pfx____sys_sendmsg+0x10/0x10 [ 705.617571][T16521] ? get_pid_task+0x20/0x1f0 [ 705.617593][T16521] ? get_pid_task+0x20/0x1f0 [ 705.617613][T16521] ? get_pid_task+0x20/0x1f0 [ 705.617658][T16521] ? __fget_files+0x2a/0x420 [ 705.617679][T16521] ? __fget_files+0x3a0/0x420 [ 705.617706][T16521] __sys_sendmsg+0x183/0x260 [ 705.617733][T16521] ? __pfx___sys_sendmsg+0x10/0x10 [ 705.617775][T16521] __do_fast_syscall_32+0x229/0x6e0 [ 705.617801][T16521] ? do_fast_syscall_32+0x33/0x70 [ 705.617823][T16521] ? lockdep_hardirqs_on+0x7a/0x110 [ 705.617846][T16521] ? asm_int80_emulation+0x1a/0x20 [ 705.617863][T16521] ? do_int80_emulation+0x286/0x530 [ 705.617892][T16521] do_fast_syscall_32+0x33/0x70 [ 705.617917][T16521] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 705.617938][T16521] RIP: 0023:0xf7fd401c [ 705.617955][T16521] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 705.617969][T16521] RSP: 002b:00000000f549650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 705.617988][T16521] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800008c0 [ 705.618007][T16521] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 705.618016][T16521] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 705.618024][T16521] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 705.618034][T16521] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 705.618055][T16521] [ 705.864771][ T5689] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 705.875509][ T5689] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 705.885078][ T5689] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 705.897775][ T5689] usb 4-1: USB disconnect, device number 86 [ 705.997805][T16523] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 706.007247][T16523] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 706.348735][T16537] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3204'. [ 706.383652][T12937] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 706.454569][ T5717] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 706.462117][ T5717] zl10353_read_register: readreg error (reg=127, ret==-110) [ 706.479524][ T5717] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 706.562998][ T5717] usb 2-1: USB disconnect, device number 105 [ 706.585480][T12937] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 706.618697][T12937] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 706.643104][T16541] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3205'. [ 706.657019][T12937] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 706.710391][T12937] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 706.725143][T12937] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 706.740834][T12937] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 706.750509][T12937] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 706.761157][T12937] usb 3-1: Product: syz [ 706.765654][T12937] usb 3-1: Manufacturer: syz [ 706.789678][T12937] cdc_wdm 3-1:1.0: skipping garbage [ 706.795246][T12937] cdc_wdm 3-1:1.0: skipping garbage [ 706.806353][T12937] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 706.812313][T12937] cdc_wdm 3-1:1.0: Unknown control protocol [ 707.035466][T16533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 707.054078][T16533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 707.306624][ T10] usb 3-1: USB disconnect, device number 87 [ 707.561288][T16552] validate_nla: 45 callbacks suppressed [ 707.561512][T16552] netlink: 'syz.0.3207': attribute type 4 has an invalid length. [ 707.746246][ T5689] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 707.905558][T16557] fuse: Bad value for 'fd' [ 707.924863][ T5689] usb 2-1: Using ep0 maxpacket: 32 [ 707.931780][ T5689] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 707.944124][ T5689] usb 2-1: config 0 has no interface number 0 [ 707.969807][ T5689] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 707.998201][ T5689] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.019514][ T5689] usb 2-1: Product: syz [ 708.041451][ T5689] usb 2-1: Manufacturer: syz [ 708.063683][ T5722] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 708.073648][ T5689] usb 2-1: SerialNumber: syz [ 708.103109][ T5689] usb 2-1: config 0 descriptor?? [ 708.126380][ T5689] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 708.145777][ T5689] usb 2-1: selecting invalid altsetting 1 [ 708.181750][ T5689] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 708.224199][ T5722] usb 1-1: Using ep0 maxpacket: 16 [ 708.237769][T16565] netlink: 27 bytes leftover after parsing attributes in process `syz.4.3214'. [ 708.250050][ T5722] usb 1-1: config 0 has no interfaces? [ 708.256533][ T5689] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 708.284473][ T5722] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 708.308026][ T5722] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 708.322293][ T5689] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 708.342103][ T5722] usb 1-1: Manufacturer: syz [ 708.367111][ T5689] usb 2-1: media controller created [ 708.377548][T16566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3212'. [ 708.403309][ T5722] usb 1-1: config 0 descriptor?? [ 708.408090][T16566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3212'. [ 708.427834][ T5689] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 708.443192][T16568] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 708.449717][T16568] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 708.487387][T16568] vhci_hcd vhci_hcd.0: Device attached [ 708.505657][ T5689] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 708.528829][ T5689] zl10353_read_register: readreg error (reg=127, ret==-71) [ 708.573396][ T5689] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 708.610153][T16569] vhci_hcd: connection closed [ 708.610412][ T13] vhci_hcd vhci_hcd.2: stop threads [ 708.645884][ T13] vhci_hcd vhci_hcd.2: release socket [ 708.660029][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 708.767371][ T5689] usb 2-1: USB disconnect, device number 106 [ 709.035137][T16582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3218'. [ 709.494186][ T10] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 709.624013][ T5689] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 709.677679][ T10] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 709.694808][ T10] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 709.714503][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 709.739215][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 709.762478][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 709.777890][ T10] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 709.787813][ T10] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 709.798649][ T10] usb 3-1: Product: syz [ 709.814204][ T10] usb 3-1: Manufacturer: syz [ 709.814861][ T5689] usb 5-1: Using ep0 maxpacket: 32 [ 709.841517][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 709.852490][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 709.865997][ T10] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 709.872809][ T10] cdc_wdm 3-1:1.0: Unknown control protocol [ 709.872831][ T5689] usb 5-1: unable to get BOS descriptor or descriptor too short [ 709.944874][ T5689] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 709.991519][ T5689] usb 5-1: config 1 interface 0 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 710.033156][ T5689] usb 5-1: config 1 interface 0 has no altsetting 0 [ 710.075736][ T5689] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 710.095491][ T5689] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.107521][T16586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 710.128976][T16586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 710.141950][ T5689] usb 5-1: Product: syz [ 710.152814][ T5689] usb 5-1: Manufacturer: syz [ 710.172789][ T5689] usb 5-1: SerialNumber: syz [ 710.256737][ T5717] usb 3-1: USB disconnect, device number 88 [ 710.421288][ T5689] cdc_ether 5-1:1.0: GUID doesn't match [ 710.476042][ T5689] usb 5-1: USB disconnect, device number 88 [ 710.626836][ T10] usb 1-1: USB disconnect, device number 112 [ 710.644518][T16595] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 710.741504][T16597] FAULT_INJECTION: forcing a failure. [ 710.741504][T16597] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 710.796311][T16597] CPU: 0 UID: 0 PID: 16597 Comm: syz.0.3224 Tainted: G L syzkaller #0 PREEMPT(full) [ 710.796340][T16597] Tainted: [L]=SOFTLOCKUP [ 710.796347][T16597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 710.796358][T16597] Call Trace: [ 710.796365][T16597] [ 710.796372][T16597] dump_stack_lvl+0xe8/0x150 [ 710.796399][T16597] should_fail_ex+0x412/0x560 [ 710.796423][T16597] _copy_from_iter+0x1d3/0x1670 [ 710.796439][T16597] ? txopt_get+0x79/0x3f0 [ 710.796454][T16597] ? txopt_get+0x79/0x3f0 [ 710.796466][T16597] ? txopt_get+0x79/0x3f0 [ 710.796480][T16597] ? __pfx__copy_from_iter+0x10/0x10 [ 710.796491][T16597] ? txopt_get+0x343/0x3f0 [ 710.796504][T16597] ? txopt_get+0x79/0x3f0 [ 710.796523][T16597] ? __pfx_txopt_get+0x10/0x10 [ 710.796537][T16597] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 710.796553][T16597] rawv6_sendmsg+0xbbd/0x18e0 [ 710.796573][T16597] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 710.796597][T16597] ? aa_sk_perm+0x6d5/0x900 [ 710.796613][T16597] ? __pfx_aa_sk_perm+0x10/0x10 [ 710.796625][T16597] ? __pfx_aa_file_perm+0x10/0x10 [ 710.796638][T16597] ? sock_rps_record_flow+0x19/0x350 [ 710.796655][T16597] ? inet_sendmsg+0x2f4/0x370 [ 710.796664][T16597] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 710.796679][T16597] ? __pfx_inet_sendmsg+0x10/0x10 [ 710.796687][T16597] sock_write_iter+0x406/0x4f0 [ 710.796700][T16597] ? __pfx_sock_write_iter+0x10/0x10 [ 710.796716][T16597] ? bpf_lsm_file_permission+0x9/0x20 [ 710.796730][T16597] ? security_file_permission+0x75/0x260 [ 710.796745][T16597] vfs_write+0x61d/0xb90 [ 710.796763][T16597] ? __pfx_vfs_write+0x10/0x10 [ 710.796781][T16597] ? __fget_files+0x2a/0x420 [ 710.796797][T16597] ksys_write+0x150/0x270 [ 710.796811][T16597] ? __pfx_ksys_write+0x10/0x10 [ 710.796829][T16597] __do_fast_syscall_32+0x229/0x6e0 [ 710.796844][T16597] ? do_fast_syscall_32+0x33/0x70 [ 710.796857][T16597] ? lockdep_hardirqs_on+0x7a/0x110 [ 710.796870][T16597] ? asm_int80_emulation+0x1a/0x20 [ 710.796880][T16597] ? do_int80_emulation+0x286/0x530 [ 710.796893][T16597] ? trace_irq_disable+0x3b/0x140 [ 710.796909][T16597] do_fast_syscall_32+0x33/0x70 [ 710.796923][T16597] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 710.796935][T16597] RIP: 0023:0xf705f01c [ 710.796945][T16597] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 710.796954][T16597] RSP: 002b:00000000f544d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 710.796966][T16597] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 710.796973][T16597] RDX: 00000000000005ac RSI: 0000000000000000 RDI: 0000000000000000 [ 710.796979][T16597] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 710.796984][T16597] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 710.796990][T16597] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 710.797004][T16597] [ 711.113599][ T5689] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 711.293881][ T5689] usb 5-1: Using ep0 maxpacket: 32 [ 711.320608][ T5689] usb 5-1: config 0 interface 0 has no altsetting 0 [ 711.355715][ T5689] usb 5-1: New USB device found, idVendor=2040, idProduct=c603, bcdDevice= 1.8e [ 711.402087][ T5689] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.446715][ T5689] usb 5-1: config 0 descriptor?? [ 711.484238][ T5689] usb 5-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC+' in warm state [ 711.549852][ T5689] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 711.580948][ T5689] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC+) [ 711.600673][ T5689] usb 5-1: media controller created [ 711.612836][T16607] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000018: 0000 [#1] SMP KASAN PTI [ 711.617608][ T5689] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 711.624738][T16607] KASAN: null-ptr-deref in range [0x00000000000000c0-0x00000000000000c7] SYZFAIL: failed to recv rpc [ 711.624763][T16607] CPU: 0 UID: 0 PID: 16607 Comm: syz.0.3229 Tainted: G L syzkaller #0 PREEMPT(full) [ 711.652390][T16607] Tainted: [L]=SOFTLOCKUP [ 711.656718][T16607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 711.666771][T16607] RIP: 0010:__mutex_lock+0x14e/0x1550 [ 711.672156][T16607] Code: e0 93 44 9a 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 40 12 00 00 83 3d b0 79 9a 0e 00 75 23 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 74 05 e8 96 e0 86 f6 4d 39 64 24 58 0f 85 6c 11 00 [ 711.691765][T16607] RSP: 0018:ffffc900034ef240 EFLAGS: 00010206 [ 711.697832][T16607] RAX: 0000000000000018 RBX: 0000000000000000 RCX: ffffffff9a449303 [ 711.705796][T16607] RDX: 0000000000000000 RSI: ffffffff8e219861 RDI: 00000000000000c0 [ 711.713764][T16607] RBP: ffffc900034ef3f8 R08: ffffc900034ef367 R09: 0000000000000000 [ 711.721726][T16607] R10: ffffc900034ef340 R11: fffff5200069de6d R12: 0000000000000068 [ 711.729685][T16607] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff9200069de60 [ 711.737647][T16607] FS: 0000000000000000(0000) GS:ffff88812528d000(0063) knlGS:00000000f544db40 [ 711.746571][T16607] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 711.753142][T16607] CR2: 0000000032623ffc CR3: 000000005fd90000 CR4: 00000000003526f0 [ 711.761115][T16607] Call Trace: [ 711.764389][T16607] [ 711.767311][T16607] ? __mutex_lock+0x319/0x1550 [ 711.772080][T16607] ? __lock_acquire+0x6b5/0x2cf0 [ 711.777022][T16607] ? __mutex_trylock_common+0x158/0x260 [ 711.782567][T16607] ? dvb_usbv2_generic_write+0x26/0x60 [ 711.788021][T16607] ? __pfx___mutex_lock+0x10/0x10 [ 711.793057][T16607] ? __pfx___mutex_lock+0x10/0x10 [ 711.798077][T16607] ? __mutex_lock+0x319/0x1550 [ 711.802836][T16607] dvb_usbv2_generic_write+0x26/0x60 [ 711.808118][T16607] mxl111sf_ctrl_msg+0x160/0x2f0 [ 711.813061][T16607] mxl111sf_write_reg+0xa9/0x1b0 [ 711.817995][T16607] ? __pfx_mxl111sf_write_reg+0x10/0x10 [ 711.823531][T16607] ? trace_raw_output_lock_acquire+0x8a/0x150 [ 711.829592][T16607] mxl111sf_i2c_xfer+0x496/0x5100 [ 711.834601][T16607] ? unwind_next_frame+0xa6/0x2550 [ 711.839710][T16607] ? __pfx_mxl111sf_i2c_xfer+0x10/0x10 [ 711.845159][T16607] ? is_bpf_text_address+0x292/0x2b0 [ 711.850438][T16607] ? is_bpf_text_address+0x26/0x2b0 [ 711.855624][T16607] ? kernel_text_address+0xa5/0xe0 [ 711.860729][T16607] ? __kernel_text_address+0xd/0x30 [ 711.865920][T16607] ? unwind_get_return_address+0x4d/0x90 [ 711.871547][T16607] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 711.877696][T16607] ? arch_stack_walk+0xfb/0x150 [ 711.882541][T16607] ? stack_trace_save+0xa9/0x100 [ 711.887474][T16607] ? __pfx_stack_trace_save+0x10/0x10 [ 711.892841][T16607] ? stack_depot_save_flags+0x33/0x810 [ 711.898292][T16607] ? look_up_lock_class+0x57/0x110 [ 711.903398][T16607] ? register_lock_class+0x31/0x2e0 [ 711.908588][T16607] ? __lock_acquire+0x6b5/0x2cf0 [ 711.913527][T16607] __i2c_transfer+0x79a/0x1f70 [ 711.918276][T16607] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 711.924076][T16607] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 711.929875][T16607] ? i2c_transfer+0xc8/0x2d0 [ 711.934453][T16607] i2c_transfer+0x1cc/0x2d0 [ 711.938948][T16607] i2cdev_ioctl_rdwr+0x460/0x740 [ 711.943872][T16607] compat_i2cdev_ioctl+0x59f/0x5c0 [ 711.948971][T16607] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 711.954588][T16607] ? __fget_files+0x3a0/0x420 [ 711.959255][T16607] ? __fget_files+0x2a/0x420 [ 711.963842][T16607] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 711.969386][T16607] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 711.974840][T16607] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 711.980817][T16607] ? kmem_cache_free+0x182/0x650 [ 711.985751][T16607] ? __se_sys_futex_time32+0x3ab/0x440 [ 711.991208][T16607] ? rcu_is_watching+0x15/0xb0 [ 711.995965][T16607] __do_fast_syscall_32+0x229/0x6e0 [ 712.001173][T16607] ? do_fast_syscall_32+0x33/0x70 [ 712.006211][T16607] ? lockdep_hardirqs_on+0x7a/0x110 [ 712.011408][T16607] ? asm_int80_emulation+0x1a/0x20 [ 712.016512][T16607] ? do_int80_emulation+0x286/0x530 [ 712.021709][T16607] ? trace_irq_disable+0x3b/0x140 [ 712.026737][T16607] do_fast_syscall_32+0x33/0x70 [ 712.031587][T16607] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 712.037908][T16607] RIP: 0023:0xf705f01c [ 712.041967][T16607] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 712.061571][T16607] RSP: 002b:00000000f544d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 712.070001][T16607] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000707 [ 712.077975][T16607] RDX: 0000000080000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 712.085943][T16607] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 712.093910][T16607] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 712.101873][T16607] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 712.109842][T16607] [ 712.112860][T16607] Modules linked in: [ 712.118295][T16607] ---[ end trace 0000000000000000 ]--- [ 712.123807][ T5717] usb 3-1: new full-speed USB device number 89 using dummy_hcd fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 712.168950][T16607] RIP: 0010:__mutex_lock+0x14e/0x1550 [ 712.182569][T16607] Code: e0 93 44 9a 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 40 12 00 00 83 3d b0 79 9a 0e 00 75 23 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 74 05 e8 96 e0 86 f6 4d 39 64 24 58 0f 85 6c 11 00 [ 712.261612][T16607] RSP: 0018:ffffc900034ef240 EFLAGS: 00010206 [ 712.301901][T16607] RAX: 0000000000000018 RBX: 0000000000000000 RCX: ffffffff9a449303 [ 712.341621][ T5717] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 712.355446][ T5717] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.402314][ T5717] usb 3-1: Product: syz [ 712.427165][ T5717] usb 3-1: Manufacturer: syz [ 712.437778][T16607] RDX: 0000000000000000 RSI: ffffffff8e219861 RDI: 00000000000000c0 [ 712.452443][ T5717] usb 3-1: SerialNumber: syz [ 712.475526][ T5717] usb 3-1: config 0 descriptor?? [ 712.498485][T16607] RBP: ffffc900034ef3f8 R08: ffffc900034ef367 R09: 0000000000000000 [ 712.534904][T16607] R10: ffffc900034ef340 R11: fffff5200069de6d R12: 0000000000000068 [ 712.556028][T16607] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff9200069de60 [ 712.605246][T16607] FS: 0000000000000000(0000) GS:ffff88812528d000(0063) knlGS:00000000f544db40 [ 712.645598][T16607] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 712.661403][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 712.694341][T16607] CR2: 00000000f7495014 CR3: 000000005fd90000 CR4: 00000000003526f0 [ 712.710794][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.716094][T16607] Kernel panic - not syncing: Fatal exception [ 712.721372][T16607] Kernel Offset: disabled