last executing test programs: 16.623766774s ago: executing program 2 (id=364): syz_usb_connect$midi(0x4, 0x98, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x499, 0x105b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x86, 0x1, 0x1, 0x8, 0xe0, 0x40, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0xa, [@ms_header={0x7, 0x24, 0x1, 0x1, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x9, 0xff}, @midi_out_jack={0x13, 0x24, 0x3, 0x3, 0x24, 0x6, [{0x8, 0x2}, {0x8, 0x1c}, {0xb5}, {0x3, 0x40}, {0xe, 0xe5}, {0x1a, 0x1}], 0x10}, @midi_out_jack={0x19, 0x24, 0x3, 0x2, 0x86, 0x9, [{0x10, 0xf0}, {0x29, 0xc}, {0xaf, 0x40}, {0x5, 0x7}, {0x1, 0x8}, {0x0, 0x9}, {0xb3}, {0xc, 0x41}, {0x8}], 0x4}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x0, 0x2}, @ms_header={0x7, 0x24, 0x1, 0x6, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x5, 0x7}, @midi_out_jack={0x13, 0x24, 0x3, 0x2, 0x4, 0x6, [{0x7, 0x5}, {0x2, 0xaf}, {0x6, 0xe}, {0xc0, 0x5}, {0xfc, 0x9}, {0x3, 0xb}], 0x1}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0xff, 0x44}], [{{0x9, 0x5, 0x2, 0x0, 0x200, 0x3, 0x9, 0x81, {0x5, 0x25, 0x1, 0x1, "c3"}}}]}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x1a, &(0x7f0000000100)=@string={0x1a, 0x3, "088c78daa744950800000000009dc7cbeab94225d5fe28e4"}}, {0x102, &(0x7f0000000240)=@string={0x102, 0x3, "6d2a0af97c016caaa8387652b3b803727db531f2f006729a4ad51f50c3bdfe76e8e08f5dbc08bc3809f9dcc356aa06a19ec1c2cfc346cc14121cfc05382ffbded07c50fd3a57c655f42abb02b1699a75a93bce81e4a1af637e403e4a5ef291b0aa519c20f2e28b626b1db9b8baa759000000000000f68e9ade757f9451da55e091206be33ad297ec74e9c9f52b975c998f73e075dcf5f7dfcb11de418c005b662b6d6e4b802890751956402c37cad28a5c2b4919faf0534795a6dc81e56f57fd2207337002f4a119713e9df23f7c65cf15f54cc2c46633393753820b1e852f830dd79f17c3dc5c48be45046c803b4f95dae600"/256}}]}) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$inet(0x2, 0xa, 0x262) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @multicast2}}) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000000)={{0x2, 0x4e22, @dev}, {0x0, @multicast}, 0x38, {0x2, 0x2, @broadcast}, 'syz_tun\x00'}) io_setup(0x7, &(0x7f0000000280)=0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, r3, 0x0, 0x300}]) sendmsg$netlink(r0, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)=[{&(0x7f0000002840)={0x10, 0x15, 0x1, 0x70bd26, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0x20040081}, 0x20004080) 15.915564859s ago: executing program 2 (id=373): r0 = openat$tun(0xffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$XFS_IOC_ERROR_CLEARALL(r0, 0x40085875) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x80000001}, 0x8) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) getsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000200)={@remote, 0x0}, &(0x7f00000003c0)=0x14) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x44, r4, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1c}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4400c051}, 0xc0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r2, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x6008850) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x2c, r6, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x9}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48001}, 0x1) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00', 0x9}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000200), 0x4d, 0x8020) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f00000000c0)={0x0, 0x7, 0x9}, 0x8) 15.778502834s ago: executing program 2 (id=374): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x162e02, 0x0) dup(r0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x100000}, 0x20) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$inet6(0xa, 0x3, 0xff) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x11) syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0xe8e80) r6 = fsopen(&(0x7f0000000100)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) syz_io_uring_setup(0x1e1e, &(0x7f0000000380)={0x0, 0x86f7, 0x20000, 0x2, 0x1}, 0x0, 0x0, &(0x7f0000000000)) syz_emit_ethernet(0x2a, 0x0, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000140), 0x2, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r7, 0xc0845657, &(0x7f0000000900)={0x0, @reserved}) connect$inet6(r5, &(0x7f0000000480)={0xa, 0x4e24, 0x336, @mcast2, 0x5}, 0x1c) syz_open_dev$vivid(&(0x7f0000000080), 0x0, 0x2) r8 = dup2(r5, r5) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000001c0)={@mcast1, 0x8000003, 0x1, 0x0, 0x2, 0x0, 0x400}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@dev={0xfe, 0x80, '\x00', 0x2a}, 0x8000000, 0x1, 0x0, 0xc, 0x4}, 0x20) sendmmsg$unix(r8, &(0x7f0000008380), 0x400000000000174, 0x4008890) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x200803, 0x0) 13.953309768s ago: executing program 2 (id=381): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r0, &(0x7f0000000a40)='\x00', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x7, 0x84, 0x2, 0x5, 0x5, 0xf2, 0x0, 0x0, 0xfa, 0x2, 0x3, 0x6, 0x2, 0x2}, 0xe) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000070e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) r2 = socket$igmp(0x2, 0x3, 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) socket$igmp(0x2, 0x3, 0x2) r4 = openat$vsock(0xffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000100)={0x0, 0x200, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000000500)={r5, 0x7, 0x6}) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='syz_tun\x00', 0x10) r6 = socket(0xa, 0x3, 0x3a) ioctl$KVM_RUN(r4, 0xae80, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r6, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, {0x14, 0x0, 0x0, @multicast1}}}}}, 0x0) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000300)=""/174, 0xae}], 0x1}, 0x6}], 0x1, 0x140, 0x0) 13.632075255s ago: executing program 2 (id=384): socket$pppl2tp(0x18, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) memfd_secret(0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f00000001c0)=0x2) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x6, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x6, 0xa, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0xffff1001, 0x4000}) syz_emit_ethernet(0x7e, &(0x7f0000000300)={@multicast, @random="cce390677742", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "b75b6e", 0x48, 0x3a, 0x1, @mcast2, @local, {[@hopopts={0x2b, 0x1, '\x00', [@jumbo, @enc_lim={0x4, 0x1, 0x2}, @ra={0x5, 0x2, 0x6}]}, @hopopts={0x5e, 0x1, '\x00', [@padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @empty}}}}}}, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r7, 0x4038ae7a, &(0x7f0000000100)={0x5, 0x40000105, 0x0, 0x0}) ioctl$KVM_RUN(r5, 0xae80, 0x0) unshare(0x8040480) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 6.904128523s ago: executing program 4 (id=407): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000200)="a414870c9ee38bd9b9f5575213cdede08b26fe8af4d639ae5a1aa6773c8dc50e1a5bf89c2759f258e04a18f67cc8b0e4ec76f32b00d9e568d9fb90e1ec5e47b5c37a3a152892045afc3daea8114f3522dd26f730ef9f15deec035550f27a8077ee29ce2d95b2bee69e1e42105d57bdcdd94f863c41c5e303254100fe23b8961ce03370e1980601c76a0b991af0faca273b3efdf1aa3637550ad6dda82f6491cabdc12f8ba176efe2f077da4b9ab2bdf716b822649553d6fb37eecb545c1896564eab2148d97097e79896c5f9602cb840ec97f3c327798dfb7dc053aa8854db9b5634ac1be3286fdf06419e363fdcd8de373eb9", 0xf3, 0x6000000, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 5.479465313s ago: executing program 4 (id=414): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r0) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000000d80)=[{{&(0x7f0000000280)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000880)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000900)=[{&(0x7f00000008c0)='w', 0x1}], 0x1}}], 0x2, 0x8080) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000040)={r2, 0x5400}, 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f0000000180)={r2, 0xd}, 0x8) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x60, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}, {0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x2}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb4}}, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000104000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x1, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x10) close_range(r5, 0xffffffffffffffff, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000000), 0xfea7) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r9, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r10, &(0x7f0000000380)=[{&(0x7f0000013580)='\r', 0x1}], 0x1, 0x7) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 5.276919254s ago: executing program 4 (id=416): ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x400854d6, 0x0) socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x4, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = socket(0x10, 0x803, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x54, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xf}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4000081) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000300)='source', &(0x7f00000000c0)='%(,:', 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{}, &(0x7f0000000000), &(0x7f0000000080)='%pK \x00'}, 0x1c) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)={0xf, 0x40, 0x6, 0x3, 0x4, "a0e1c6beeb439eff56c42676bae174bc012837"}) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = socket(0x840000000002, 0x3, 0xff) ioctl$BTRFS_IOC_SYNC(r2, 0x9408, 0x0) connect$inet(r5, &(0x7f0000000140)={0x2, 0x4e60, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) sendmmsg$inet(r5, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) syz_io_uring_setup(0x5c6f, &(0x7f0000000240)={0x0, 0x69db, 0x20, 0x0, 0x17e}, &(0x7f00000002c0), &(0x7f0000000340), &(0x7f0000000380)) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000001c40), 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='cmdline\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000006040)={0x2020}, 0x2020) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000), 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 5.204225942s ago: executing program 3 (id=417): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r3, &(0x7f0000000500)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) getpeername$unix(r3, 0x0, &(0x7f00000000c0)) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 4.894170416s ago: executing program 3 (id=418): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x0, 0x83, "00000000000000000000ffff00000000000002"}) r3 = syz_open_pts(r0, 0x0) r4 = dup3(r3, r0, 0x0) read$FUSE(r4, 0x0, 0x0) 4.698314498s ago: executing program 3 (id=419): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000007100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r2, {0x7, 0x2b, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, 0x50) read$FUSE(r0, &(0x7f000000cdc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r3}, 0x10) syz_fuse_handle_req(r0, &(0x7f0000004940)="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", 0x2000, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x3c}}) syz_fuse_handle_req(r0, &(0x7f0000002780)="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", 0x2000, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)={0x20, 0x0, 0x9, {0x7, 0x0, 0x3, 0xfff}}, 0x0}) ioctl$FS_IOC_RESVSP(r1, 0x40086602, &(0x7f0000002740)={0x0, 0xdaff}) 4.501298087s ago: executing program 1 (id=421): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000480)) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000010001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000200)=ANY=[@ANYBLOB="6e617400000000000000004d0000000000000000000000000000000000000000500000003c24f85347df2842a08cc2dfe839bffdebeedbb113524dfb1d1e072c9210414913f964ac25319c2555f19483f3a0b61a29e85db5ec8102ffe8b7d4499498f7e0f87f664408e6f5708129a5a436a79d8480539fdda8e03dd85845d1e05758a5a0c4bdfed277c51868aacdcdccccd8ebe8884b7ef74cf4d21123d23a95adef83527e6de849fe42071aa6b9bc0d6440de29015bfe8966c9b25ac901cda06a47e120638d7972"], &(0x7f0000000080)=0x74) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000400)=[{0x2, 0x0, {0x1, 0xf0, 0x7}, {0x1}, 0x2, 0xfe}], 0x1c) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10) read$dsp(r0, &(0x7f0000000100)=""/209, 0xd1) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000480)) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000010001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) (async) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000200)=ANY=[@ANYBLOB="6e617400000000000000004d0000000000000000000000000000000000000000500000003c24f85347df2842a08cc2dfe839bffdebeedbb113524dfb1d1e072c9210414913f964ac25319c2555f19483f3a0b61a29e85db5ec8102ffe8b7d4499498f7e0f87f664408e6f5708129a5a436a79d8480539fdda8e03dd85845d1e05758a5a0c4bdfed277c51868aacdcdccccd8ebe8884b7ef74cf4d21123d23a95adef83527e6de849fe42071aa6b9bc0d6440de29015bfe8966c9b25ac901cda06a47e120638d7972"], &(0x7f0000000080)=0x74) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000400)=[{0x2, 0x0, {0x1, 0xf0, 0x7}, {0x1}, 0x2, 0xfe}], 0x1c) (async) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10) (async) read$dsp(r0, &(0x7f0000000100)=""/209, 0xd1) (async) 4.477839602s ago: executing program 4 (id=422): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000400)={0xfffc, 0x0, 0x0, 0x74}, 0x8) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x94, &(0x7f0000000000)={0xa, 0x4, 0x3, @private1, 0x8}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4e, 0x0, 0xffba) 4.251487179s ago: executing program 4 (id=423): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r2, 0x0, 0xa, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x10000008, 0x8001, 0x0, 0x9, 0x4e18, 0xfffffdffffffffff, 0x9, 0xffffffff}, 0x0) (async, rerun: 32) r3 = fsopen(&(0x7f0000000000)='hpfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000b00), 0x0) (async) unshare(0x24020400) syz_mount_image$fuse(0x0, 0x0, 0x20, 0x0, 0x4, 0x0, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r4, 0x0, 0x0}, 0x1c) (async) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000100), 0x18004a0, &(0x7f0000000240)=ANY=[]) (async) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="000000000000000000000000000000000000000000000000000000d455b4da00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bd1d8811cd8a942e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x2110029, 0x100, 0x0, 0x1, 0x57, 0x0, 0x0, 0x80, 0x4020}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0x81, &(0x7f0000000500)=ANY=[@ANYBLOB="39cb91fa507bffffffffffff0800451a007300640000000290780a010101ac14140a16819078ffffffffc914b7968b98103906df5b6b5ce4d6883327669e279e9d15ea79600000a569cca192037b0d4930fb71b4e1b9e6bafc70bf5c1190e1280c568af7350e94718ddcd3e06564717382e51f0d27b1aa046f606a00000000000000004e919d72caaa0f401100000000000000"], 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1\x00', 0x2000, 0x105) r6 = openat2(r5, &(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000080)={0x2800, 0x80, 0x28}, 0x18) unlinkat(r6, &(0x7f0000000180)='./file0\x00', 0x0) (async, rerun: 32) r7 = getpid() (rerun: 32) r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) (async) r9 = syz_clone(0x86051100, 0x0, 0x28, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xa3, 0x0, &(0x7f00000008c0)="e3ef7f673b3aec6789b4241544940000000000000000000000040033a42c9550f5a10011e0f0544b00aab00f00dc72ff6e8f62d070e87f2c73d153bf01de50151803c474719193467201bd7c0b9cad1d390aec6d1531001128afc5bbfcc20d431c6f04aa6846a184d8f21d2eed601ffcf943ac714f9b3e40dec9356cd7ad2e05636682aac21fdeb6ce215bed06b122adb3a923a73e056f745b132d0f57b0041e37a646", 0x0, 0x4, 0x0, 0x15, 0xfffffffffffffdf5, 0x0, 0x0, 0x2, 0x0, 0x3b2}, 0x4c) r10 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x88003) ioctl$FIBMAP(r10, 0x1, &(0x7f0000000040)=0x85) (async) creat(&(0x7f0000000300)='./file0\x00', 0x0) (async) syz_pidfd_open(r9, 0x0) 4.194021272s ago: executing program 0 (id=424): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0xf, {[@main=@item_012={0x0, 0x0, 0xb}, @local=@item_012={0x1, 0x2, 0x3, "d6"}, @main=@item_4={0x3, 0x0, 0x8, "4b191d8b"}, @local=@item_012={0x1, 0x2, 0x5, '!'}, @global=@item_4={0x3, 0x1, 0x6, 'On/\t'}]}}, 0x0}, 0x0) syz_usb_connect$printer(0x1, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, 0x0}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x0, 0x7fff8000}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r2, 0x501c4814, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) close(r3) socket(0x1d, 0x2, 0x6) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, 0x0, 0x801, {0x1, 0x1, 0x4}, 0xfd}, 0x18) 4.021123656s ago: executing program 1 (id=425): prlimit64(0x0, 0x8, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000200)={{0x7000, 0x41000, 0xe, 0x0, 0x8, 0xee, 0x11, 0x6, 0x0, 0x0, 0x7, 0xeb}, {0x4000, 0x10000, 0xc, 0x7, 0x41, 0x7, 0x4, 0x14, 0x0, 0x5, 0x8, 0x3}, {0x5000, 0x2000, 0xb, 0xc, 0x26, 0x7, 0x81, 0x3, 0x80, 0x4, 0x1, 0x73}, {0x5000, 0x6000, 0x0, 0xfe, 0x6, 0xaa, 0xc3, 0xfb, 0x0, 0x2, 0x5, 0xe}, {0xb000, 0x80a0000, 0xa, 0xff, 0xc, 0x9, 0x6, 0x7, 0x5, 0x6, 0x28, 0xfc}, {0xffff1000, 0x10000, 0x9, 0xb9, 0x5, 0x5, 0x42, 0x7, 0xac, 0x1, 0x0, 0x10}, {0x8080000, 0x0, 0xf, 0x1, 0xc, 0x8, 0x2, 0x62, 0xe4, 0x1, 0x14, 0x5}, {0xffff1000, 0xeeee8000, 0x8, 0x21, 0xc, 0x8, 0x9, 0x9, 0x6, 0x8, 0x43, 0x3}, {0x58000, 0x5}, {0x4000, 0x6}, 0x40000000, 0x0, 0xeeef0002, 0x200, 0x8, 0x801, 0xeeee0c00, [0x1, 0x1004, 0x5, 0x9]}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e22"], 0x0) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[], 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x10a, 0x0, 0x80000006}]}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902f3c8010000000009040000000206"], 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, &(0x7f00000000c0)={0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="401604000000f5ee1771"], 0x0, 0x0}) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x9) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@bridge_newvlan={0x24, 0x76, 0x709, 0x2, 0xfffffffd, {0x7, 0x2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0xd, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x4}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x40095) ioctl$KVM_SET_PIT(r6, 0x8048ae66, &(0x7f0000000040)={[{0x3ff, 0x8001, 0x4, 0x4c, 0x0, 0x8c, 0x7, 0x6, 0x8, 0x80, 0x4, 0x4, 0x4}, {0x1, 0x401, 0x81, 0xbf, 0x40, 0x6, 0x8, 0xfa, 0xfe, 0xb8, 0x7f, 0xff, 0x1}, {0x1, 0x4, 0xc, 0x8, 0x1, 0x3, 0x0, 0x9, 0x8, 0xc, 0xf3, 0x9, 0x1}], 0x4}) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="021406071300000025bd7000fcdbdf2502000b0001000000f101000000000000080008009801000921dd2ad54790f4e17146c823f4202fb7703556fcde9daa57f716ffa08459c5005e6e583e7da67656dda986a974a19763143d42000000000002001000000004d6000004d50000000005001a0064010101000000000000000000000000fc01000000000000000000000000000011001404"], 0x98}}, 0x40) r9 = accept4(r4, 0x0, 0x0, 0x80400) sendmmsg$alg(r9, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) 3.611568992s ago: executing program 3 (id=426): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x22, 0x2, @thr={&(0x7f0000000140)="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", &(0x7f0000000240)="f97d0359464c687bab69dcf9f36b99c2d62a98b6e6568c0d55fa69d13780605d4461eefa00d11e8364f478a9007462dc1b53562260f09e937eee8a1157e949de58bf7500cf0ee894de413e3e89e9296b76dea928c564eab6b2f8db4819e4207ce665ea396319cfbe008dc522b86a02404559fb681ea8a13ee139b6a7bd82448db535dc9e7773a3d2f8e7c43489ba9db9e97b13752736882cc55c82a64c7fbc180524abd5f0771b3f200ec6ca6a3764f0d49a24a2121e762c10652a58f8750f9a0d51080da374df86a2bbc14562cb6e358413e9d8dad0ef9c28d39520f8ada8556293ebef09875d15be86"}}, &(0x7f0000000100)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) getsockopt$bt_hci(r1, 0x0, 0x7, 0x0, &(0x7f0000000000)) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) 3.046545929s ago: executing program 4 (id=427): r0 = socket$inet_smc(0x2b, 0x1, 0x0) socket(0xa, 0x5, 0x400000) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'ip6gretap0\x00'}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x1, 0xb007}, 0x4) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902f3c8010000000009040000000206"], 0x0) r4 = openat$ttyprintk(0xffffff9c, &(0x7f0000000600), 0x20000, 0x0) ppoll(&(0x7f0000000680)=[{r4, 0x1724}], 0x1, 0x0, 0x0, 0x0) syz_usb_control_io$rtl8150(r3, 0x0, &(0x7f00000005c0)={0x18, &(0x7f0000000100)={0x40, 0x30}, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x14, 0x2, 0x2, 0x5, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0xff7ae0b95406984d}, 0x20004080) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="12010102000000402505a8a44000010203010902240001010280020904000b0107010102090501020800030300090582022000050b057af6b555c1c897bf541a1e34daf0d488dc83545a1854ba45ac145882f6731182ddce74ee47cf1556c2058a73ed2cd24ac3e5725d128a785454f260346c14b94db580c9bf50aa08a8d3a1dd4793393e9be52db9040d30f94821e1b85af5bb311c795a717dccd17c5369"], &(0x7f0000000440)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x110, 0x8, 0x1, 0xa, 0x0, 0x99}, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0x3, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x3009}}, {0x47, &(0x7f0000000300)=@string={0x47, 0x3, "4d2db3cbf54f0b6a4712daaff7f2cc30680c2c138a5e3f1ff7965f93569423e996b706eb82387649ead22b9b1dc0251f557c058f71464ff2f574707abb892d58ad6dbe1a98"}}, {0xb4, &(0x7f0000000380)=@string={0xb4, 0x3, "0c78e194ecdd728fcf7fe7564da95b35d97f259452cdf21836e654c356c3d45961282e0ca180d42452e2f2004dbaceedd8767f777771c3de1b9576d64b06e59ad40c44feeaef7492eae851a9e9642d798bcf952be5e03b69105534552fec1ad3f38a18982aefe17e8f7fe72e01b3a64fb19c9d7c92703bd2b4b5727bf40514db44c0b603ce7f372aaef8700d2697d147ff812ec1bb6e6de4d868963112af8363789d9abfd0867735c5d71236b147f5ff386d"}}]}) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x340) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) close(0x3) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000000)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x2}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0) r7 = gettid() syz_open_procfs$namespace(r7, &(0x7f00000000c0)='ns/pid_for_children\x00') r8 = syz_open_procfs(r7, &(0x7f0000000040)='net/udplite6\x00') getgroups(0x1, &(0x7f0000001080)=[0xee01]) userfaultfd(0x80800) keyctl$KEYCTL_MOVE(0x3, 0x0, 0x0, 0x0, 0x0) writev(r8, &(0x7f00000002c0)=[{&(0x7f0000000280)='3', 0x1}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94175000) connect$inet(r0, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) 2.1877362s ago: executing program 2 (id=384): socket$pppl2tp(0x18, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) memfd_secret(0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f00000001c0)=0x2) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x6, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x6, 0xa, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0xffff1001, 0x4000}) syz_emit_ethernet(0x7e, &(0x7f0000000300)={@multicast, @random="cce390677742", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "b75b6e", 0x48, 0x3a, 0x1, @mcast2, @local, {[@hopopts={0x2b, 0x1, '\x00', [@jumbo, @enc_lim={0x4, 0x1, 0x2}, @ra={0x5, 0x2, 0x6}]}, @hopopts={0x5e, 0x1, '\x00', [@padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @empty}}}}}}, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r7, 0x4038ae7a, &(0x7f0000000100)={0x5, 0x40000105, 0x0, 0x0}) ioctl$KVM_RUN(r5, 0xae80, 0x0) unshare(0x8040480) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 2.138156085s ago: executing program 0 (id=428): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0xffffffff) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x2, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @ioapic={0x1000, 0xc000000, 0xfffffffb, 0xaaf, 0x0, [{0x4, 0x6, 0x2, '\x00', 0xfe}, {0x4, 0xe7, 0x9, '\x00', 0x7}, {0xf7, 0x8, 0x0, '\x00', 0x1}, {0x1, 0x5, 0x6, '\x00', 0x1}, {0xd2, 0x2, 0x5, '\x00', 0x6}, {0xe, 0x50, 0x0, '\x00', 0x9}, {0x7, 0x6, 0x7c, '\x00', 0x3}, {0x81, 0x8, 0x8, '\x00', 0x2}, {0xb, 0x80, 0xa, '\x00', 0x7}, {0x2, 0x9, 0x8, '\x00', 0x7}, {0xe, 0x80, 0x0, '\x00', 0x3}, {0x6, 0x40, 0x3, '\x00', 0x5}, {0x81, 0x81, 0x6, '\x00', 0x6}, {0x3, 0x2, 0x6, '\x00', 0x8}, {0x4, 0x2, 0x81}, {0x5, 0x0, 0x9, '\x00', 0x4}, {0x2, 0x9, 0xc1, '\x00', 0x3}, {0x5, 0x7, 0x5, '\x00', 0x9}, {0x23, 0x6, 0xb6, '\x00', 0x2}, {0x88, 0x3, 0x3f, '\x00', 0x4}, {0x8, 0xc, 0x3, '\x00', 0x3}, {0x0, 0x8, 0x6, '\x00', 0x5}, {0x6, 0x0, 0x8, '\x00', 0x10}, {0x40, 0x5, 0x81, '\x00', 0x5}]}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x6, 0x7, 0x5, 0x180, 0x0, 0x0, 0xf1, 0x9, 0x8, 0x5, 0x0, 0x9, 0x0, 0x8, 0x0, 0xbd9], 0x1, 0x1c4292}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_MP_STATE(r3, 0x8004ae98, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYRES64, @ANYBLOB="057f7a72a9dfcc24b3399e4ffb9976a67940e3c4a3746f9c56a8eee083d72c2db13f257173838005d2a403c8aac83eaedddbf30f6e4dd46016bfce0569592d806700961aed771785e96b6b56b1b44e4edb1e87507b41efdf666ae8501ee8541c0a2bbfb8355c2ec869c989d1f754e39474533c5f3d18e6a27e7cc3e618c557", @ANYBLOB="0198000000000000cc04000000000000736974001400028006000e0006000000080001002ccb05b9ffa5caa57d6ab7b27a9406a1271b8c288a67c68ddd13b8e823e6bef4bda608c7d0bc7c1adfd6d3b379f3e220250a12ee607288f2d91fd92a96a71ece97d9524295bfb9f947cc2e5f82c2f365c7bf3b78e771666883934664bd3204d088a94a4830747e3a291ac04ab00f16f2c1ee30", @ANYRESHEX=r4], 0x40}, 0x1, 0x0, 0x0, 0x4180}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) ioctl$mixer_OSS_GETVERSION(r6, 0x80044d76, &(0x7f0000000200)) sendto$packet(r0, &(0x7f0000000600)="05d936277c6f54220002097844ffcf8bd1846f7f83477ca1b278e3e4018a34844b9d62cbd7cd2a62", 0x28, 0x8c1, &(0x7f00000000c0)={0x11, 0x86dd, r5, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 1.987452078s ago: executing program 1 (id=429): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = accept4$tipc(r0, &(0x7f0000000000)=@id, &(0x7f00000000c0)=0x10, 0x800) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 1.974314089s ago: executing program 0 (id=430): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x90, r0, 0x200, 0xfffffffd, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x72}}}}, [@NL80211_ATTR_TID_CONFIG={0x68, 0x11d, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x66}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x3a}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf9}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcd}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xbc}]}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000880}, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r0, 0x100, 0x70bd2d, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) r2 = io_uring_setup(0x2f4f, &(0x7f0000000280)={0x0, 0x10, 0x1, 0x0, 0xfb}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x240000c4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c000100", @ANYRES16=0x0, @ANYBLOB="02002dbd7000fddbdf2502000000080005000700000008000500af00000008000600ff0000000800040008000000080004007ee70000"], 0x3c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x8050) unshare(0x2c020400) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r5, 0x0, 0x61, 0x0, &(0x7f0000000080)=0x2c) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffffffc}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x4044090}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f00000002c0)) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="180126bd70000000"], 0x14}}, 0xc048090) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r9, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r7, &(0x7f0000000800)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xf8, 0x0, 0x10, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x4}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x1}, 0x2000) close_range(r2, 0xffffffffffffffff, 0x0) 1.781339331s ago: executing program 1 (id=431): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f515"], 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)={0x10000004}) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='bbr', 0x26) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback, 0x100}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r5 = fcntl$dupfd(r4, 0x0, r4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) sendmsg$TEAM_CMD_OPTIONS_GET(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000002c40)=ANY=[], 0x40c}, 0x1, 0x0, 0x0, 0x90}, 0x8000) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x304}, "95d5895bef35f68d", "1a95380ce173735dfa582d40b9875817be754eb2d37cd98195a24290b12fd34a", "7be81646", "b4040810007d4f34"}, 0x38) read$FUSE(r5, &(0x7f0000000b80)={0x2020}, 0x2020) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000040)=0x1) openat$vim2m(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="2800000010000108fdfffffffddbdf250000", @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) sendto$inet(r0, 0x0, 0x0, 0x4c041, 0x0, 0x0) memfd_create(&(0x7f0000000bc0)='\xff\x00l\x1e\xa00xffffffffffffffff, 0xffffffffffffffff}) fsopen(0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x600008d0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f0000000000)={0x5, 0x4}) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@private1, @in=@local, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x20, 0x11}, {0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x10, 0x9}, {}, 0x4, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x24d2, 0x33}, 0x0, @in=@loopback, 0x3506, 0x0, 0x2, 0xb7, 0x2, 0xfffffff9}}, 0xe8) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 535.779667ms ago: executing program 1 (id=435): r0 = socket$kcm(0x21, 0x2, 0xa) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x21}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000d67000/0x4000)=nil, 0x4000}) syz_emit_ethernet(0xd2, &(0x7f0000000d00)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x9c, 0x11, 0x0, @remote, @local, {[], {0xfffe, 0x4e21, 0x9c, 0x0, @wg=@initiation={0x1, 0x4000000, "9b92fc056f07d114fe3b41c776904545fb44d8e5dc0e57fdbba583dbc1bf026f", "ba38149afe78e80f44a98eddddbf2b6f237458668eb2461a95cd9a215310bae58679f26df35b2d9306a4a2e1dc85e86f", "6ba2c77aea3ef00f0ac8f0e3066b25082e39f5fb07fb432ca8f22890", {"e79710a9e57f1011496e538064796900", "f9d98c0072c691ce00"}}}}}}}}, 0x0) r2 = syz_open_dev$dvb_dvr(&(0x7f0000000040), 0x80000000, 0x54200) close_range(r2, r1, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)=[{0xc, 0x110, 0xb}], 0xc}, 0xfc40) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)) 433.953573ms ago: executing program 3 (id=436): syz_open_dev$usbmon(&(0x7f00000005c0), 0x3, 0x40) read$usbmon(0xffffffffffffffff, 0x0, 0x0) r0 = gettid() rt_sigqueueinfo(r0, 0x21, &(0x7f00000002c0)={0x0, 0x0, 0x19}) r1 = socket(0x18, 0x800, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000440)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @loopback}}, 0x24) setsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000040)=0x6, 0x4) r2 = syz_open_pts(0xffffffffffffffff, 0x2000) getcwd(&(0x7f00000001c0)=""/202, 0xca) ioctl$KDFONTOP_COPY(r2, 0x4b72, &(0x7f0000000a00)={0x3, 0x0, 0x16, 0x17, 0x135, &(0x7f0000000600)}) r3 = syz_open_procfs(r0, &(0x7f0000000000)='net/ip_mr_cache\x00') waitid$P_PIDFD(0x3, r3, &(0x7f0000000140), 0x2, &(0x7f00000000c0)) 220.385911ms ago: executing program 1 (id=437): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r0, 0x8931, &(0x7f00000002c0)={'dummy0\x00', @random}) (fail_nth: 6) 0s ago: executing program 3 (id=438): setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) unshare(0x400) bind$unix(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) ioctl$USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, &(0x7f0000000080)={0x8000000000000000, 0x8, 0x1, 0xc05}) mq_getsetattr(r1, &(0x7f0000000040)={0x0, 0x40, 0x4, 0x7ff}, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x103c00, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) r3 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) bind$inet6(r2, &(0x7f0000000140)={0xa, 0xce20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000240)={0x2, 0x4e21, @private=0xa010100}, 0x10) open$dir(&(0x7f0000000180)='./file0\x00', 0x4040, 0x2) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x4e, &(0x7f0000000400)=0x78, 0x4) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e20, 0x3ffd, @rand_addr=' \x01\x00', 0x4}, 0x1c) kernel console output (not intermixed with test programs): .564020][ T86] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.575110][ T86] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 102.590886][ T86] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 102.606665][ T86] usb 1-1: New USB device found, idVendor=2b73, idProduct=003c, bcdDevice= 0.40 [ 102.616666][ T86] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.624846][ T86] usb 1-1: Product: syz [ 102.630025][ T86] usb 1-1: Manufacturer: syz [ 102.638381][ T86] usb 1-1: SerialNumber: syz [ 102.837960][ T6248] netlink: 4 bytes leftover after parsing attributes in process `syz.4.132'. [ 102.849645][ T6248] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 103.045950][ T6250] netlink: 4 bytes leftover after parsing attributes in process `syz.4.133'. [ 103.071182][ T6250] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 103.485431][ T5713] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 103.653621][ T5713] usb 5-1: Using ep0 maxpacket: 8 [ 103.661692][ T5713] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 103.685548][ T5713] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 103.694065][ T6262] FAULT_INJECTION: forcing a failure. [ 103.694065][ T6262] name failslab, interval 1, probability 0, space 0, times 0 [ 103.702395][ T5713] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.720124][ T6262] CPU: 0 UID: 0 PID: 6262 Comm: syz.1.138 Tainted: G L syzkaller #0 PREEMPT(full) [ 103.720159][ T6262] Tainted: [L]=SOFTLOCKUP [ 103.720165][ T6262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 103.720175][ T6262] Call Trace: [ 103.720182][ T6262] [ 103.720189][ T6262] dump_stack_lvl+0xe8/0x150 [ 103.720216][ T6262] should_fail_ex+0x412/0x560 [ 103.720244][ T6262] ? __d_alloc+0x37/0x6f0 [ 103.720267][ T6262] should_failslab+0xa8/0x100 [ 103.720294][ T6262] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 103.720326][ T6262] __d_alloc+0x37/0x6f0 [ 103.720354][ T6262] d_alloc+0x4b/0x190 [ 103.720372][ T6262] ? lookup_one_qstr_excl+0xc4/0x360 [ 103.720397][ T6262] lookup_one_qstr_excl+0xd8/0x360 [ 103.720419][ T6262] ? lookup_noperm_common+0x245/0x430 [ 103.720443][ T6262] start_dirop+0x5c/0x90 [ 103.720464][ T6262] simple_start_creating+0xcc/0x110 [ 103.720488][ T6262] ? __pfx_simple_start_creating+0x10/0x10 [ 103.720511][ T6262] ? do_raw_spin_unlock+0xf5/0x210 [ 103.720535][ T6262] ? mntput+0x65/0xc0 [ 103.720565][ T6262] debugfs_start_creating+0xdb/0x1a0 [ 103.720586][ T6262] __debugfs_create_file+0x6f/0x400 [ 103.720608][ T6262] debugfs_create_file_full+0x3f/0x60 [ 103.720630][ T6262] ref_tracker_dir_debugfs+0x197/0x360 [ 103.720653][ T6262] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 103.720699][ T6262] ? __kvmalloc_node_noprof+0x545/0x8a0 [ 103.720721][ T6262] ? alloc_netdev_mqs+0xa8/0x1210 [ 103.720740][ T6262] ? __raw_spin_lock_init+0x45/0x100 [ 103.720765][ T6262] alloc_netdev_mqs+0x274/0x1210 [ 103.720781][ T6262] ? __pfx_vxlan_setup+0x10/0x10 [ 103.720811][ T6262] rtnl_create_link+0x31f/0xd70 [ 103.720837][ T6262] rtnl_newlink_create+0x277/0xb70 [ 103.720861][ T6262] ? __pfx___nla_validate_parse+0x10/0x10 [ 103.720897][ T6262] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 103.720924][ T6262] ? __pfx___mutex_lock+0x10/0x10 [ 103.720952][ T6262] ? ns_capable+0x89/0xe0 [ 103.720973][ T6262] rtnl_newlink+0x166a/0x1bb0 [ 103.720997][ T6262] ? unwind_next_frame+0xa6/0x2550 [ 103.721030][ T6262] ? __pfx_rtnl_newlink+0x10/0x10 [ 103.721057][ T6262] ? __lock_acquire+0x6b5/0x2cf0 [ 103.721079][ T6262] ? __lock_acquire+0x6b5/0x2cf0 [ 103.721107][ T6262] ? unwind_next_frame+0xa6/0x2550 [ 103.721134][ T6262] ? unwind_next_frame+0xa6/0x2550 [ 103.721164][ T6262] ? is_bpf_text_address+0x26/0x2b0 [ 103.721195][ T6262] ? is_bpf_text_address+0x26/0x2b0 [ 103.721217][ T6262] ? __lock_acquire+0x6b5/0x2cf0 [ 103.721239][ T6262] ? kernel_text_address+0xa5/0xe0 [ 103.721262][ T6262] ? __kernel_text_address+0xd/0x30 [ 103.721283][ T6262] ? unwind_get_return_address+0x4d/0x90 [ 103.721302][ T6262] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 103.721326][ T6262] ? arch_stack_walk+0xfb/0x150 [ 103.721357][ T6262] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 103.721394][ T6262] ? __pfx_rtnl_newlink+0x10/0x10 [ 103.721415][ T6262] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 103.721434][ T6262] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 103.721455][ T6262] ? netlink_sendmsg+0x5d4/0xb40 [ 103.721479][ T6262] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 103.721499][ T6262] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 103.721522][ T6262] ? __lock_acquire+0x6b5/0x2cf0 [ 103.721553][ T6262] netlink_rcv_skb+0x232/0x4b0 [ 103.721578][ T6262] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 103.721602][ T6262] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 103.721637][ T6262] ? netlink_deliver_tap+0x2e/0x1b0 [ 103.721659][ T6262] ? netlink_deliver_tap+0x2e/0x1b0 [ 103.721688][ T6262] netlink_unicast+0x75c/0x8e0 [ 103.721721][ T6262] netlink_sendmsg+0x813/0xb40 [ 103.721754][ T6262] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.721781][ T6262] ? aa_sock_msg_perm+0xf1/0x1b0 [ 103.721806][ T6262] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 103.721832][ T6262] ____sys_sendmsg+0x972/0x9f0 [ 103.721866][ T6262] ? __pfx_____sys_sendmsg+0x10/0x10 [ 103.721894][ T6262] ? kstrtoull+0x12f/0x1d0 [ 103.721923][ T6262] ___sys_sendmsg+0x2a5/0x360 [ 103.721945][ T6262] ? __lock_acquire+0x6b5/0x2cf0 [ 103.721967][ T6262] ? __pfx____sys_sendmsg+0x10/0x10 [ 103.721993][ T6262] ? get_pid_task+0x20/0x1f0 [ 103.722014][ T6262] ? get_pid_task+0x20/0x1f0 [ 103.722032][ T6262] ? get_pid_task+0x20/0x1f0 [ 103.722080][ T6262] ? __fget_files+0x2a/0x420 [ 103.722099][ T6262] ? __fget_files+0x3a0/0x420 [ 103.722129][ T6262] __sys_sendmsg+0x183/0x260 [ 103.722163][ T6262] ? __pfx___sys_sendmsg+0x10/0x10 [ 103.722209][ T6262] __do_fast_syscall_32+0x229/0x6e0 [ 103.722226][ T6262] ? do_fast_syscall_32+0x33/0x70 [ 103.722242][ T6262] ? lockdep_hardirqs_on+0x7a/0x110 [ 103.722265][ T6262] ? asm_int80_emulation+0x1a/0x20 [ 103.722281][ T6262] ? do_int80_emulation+0x286/0x530 [ 103.722302][ T6262] do_fast_syscall_32+0x33/0x70 [ 103.722319][ T6262] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 103.722339][ T6262] RIP: 0023:0xf70cf01c [ 103.722356][ T6262] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 103.722370][ T6262] RSP: 002b:00000000f54bd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 103.722388][ T6262] RAX: ffffffffffffffda RBX: 000000000000000f RCX: 00000000800000c0 [ 103.722399][ T6262] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 103.722408][ T6262] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 103.722417][ T6262] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 103.722426][ T6262] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 103.722454][ T6262] [ 103.731466][ T5713] usb 5-1: Product: syz [ 103.884779][ T2169] usb 4-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 103.891784][ T6262] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 104.219980][ T2169] usb 4-1: USB disconnect, device number 5 [ 104.222627][ T86] usb 1-1: 0:2 : does not exist [ 104.245883][ T35] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.246842][ T35] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.255690][ T5713] usb 5-1: Manufacturer: syz [ 104.330635][ T5713] usb 5-1: SerialNumber: syz [ 104.331938][ T86] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 104.338149][ T86] usb 1-1: unknown interface protocol 0x1, assuming v1 [ 104.338210][ T86] usb 1-1: cannot find UAC_HEADER [ 104.367071][ T5713] usb 5-1: config 0 descriptor?? [ 104.369141][ T35] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.369177][ T35] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 104.375053][ T5713] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 104.447211][ T86] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 104.456896][ T86] usb 1-1: USB disconnect, device number 4 [ 104.555286][ T5698] quatech2 3-1:86.62: Quatech 2nd gen USB to Serial Driver converter detected [ 104.557419][ T5698] usb 3-1: qt2_attach - failed to power on unit: -71 [ 104.557807][ T5698] quatech2 3-1:86.62: probe with driver quatech2 failed with error -71 [ 104.573244][ T5698] usb 3-1: USB disconnect, device number 5 [ 104.680296][ T5713] gspca_zc3xx: reg_w_i err -71 [ 104.723807][ T5625] udevd[5625]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 104.742763][ T6254] udevd[6254]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 104.935686][ T6288] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 105.030835][ T6291] IPVS: set_ctl: invalid protocol: 50 172.30.1.4:20002 [ 105.099353][ T86] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 105.154419][ T6297] netlink: 12 bytes leftover after parsing attributes in process `syz.3.146'. [ 105.213144][ T6301] netlink: 28 bytes leftover after parsing attributes in process `syz.3.146'. [ 105.220930][ T6297] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.231862][ T6301] bond1: entered promiscuous mode [ 105.237054][ T6301] bond1: entered allmulticast mode [ 105.263771][ T5713] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 105.272458][ T5713] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 105.286882][ T86] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 105.302319][ T6297] dummy0: entered allmulticast mode [ 105.311118][ T86] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 105.316394][ T6297] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 105.323213][ T5713] usb 5-1: USB disconnect, device number 9 [ 105.338089][ T86] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 105.352887][ T86] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 105.362334][ T86] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.377839][ T86] usb 1-1: Product: syz [ 105.390345][ T86] usb 1-1: Manufacturer: syz [ 105.397043][ T6297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.146'. [ 105.406541][ T86] usb 1-1: SerialNumber: syz [ 105.414994][ T86] usb 1-1: config 0 descriptor?? [ 105.426242][ T6297] bond1 (unregistering): (slave dummy0): Releasing backup interface [ 105.434815][ T6285] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 105.443105][ T6285] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 105.452685][ T6297] dummy0: left allmulticast mode [ 105.458771][ T86] usb 1-1: ucan: probing device on interface #0 [ 105.480375][ T6297] bond1 (unregistering): Released all slaves [ 105.736177][ T6313] kAFS: unable to lookup cell '(,' [ 105.998357][ T86] usb 1-1: ucan: failed to retrieve device info [ 106.019298][ T86] usb 1-1: ucan: probe failed; try to update the device firmware [ 106.035424][ T5684] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 106.090065][ T86] usb 1-1: USB disconnect, device number 5 [ 106.226528][ T5684] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.260291][ T5684] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 106.281865][ T5684] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 106.313290][ T5684] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.330092][ T5684] usb 4-1: config 0 descriptor?? [ 106.533580][ T2169] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 106.545125][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 106.709114][ T2169] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.727485][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.741680][ T2169] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 106.761742][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 106.777377][ T2169] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 106.787039][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 106.796943][ T2169] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.799504][ T6326] FAULT_INJECTION: forcing a failure. [ 106.799504][ T6326] name failslab, interval 1, probability 0, space 0, times 0 [ 106.805414][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.828344][ T6326] CPU: 0 UID: 0 PID: 6326 Comm: syz.0.157 Tainted: G L syzkaller #0 PREEMPT(full) [ 106.828368][ T6326] Tainted: [L]=SOFTLOCKUP [ 106.828373][ T6326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 106.828382][ T6326] Call Trace: [ 106.828387][ T6326] [ 106.828393][ T6326] dump_stack_lvl+0xe8/0x150 [ 106.828417][ T6326] should_fail_ex+0x412/0x560 [ 106.828444][ T6326] should_failslab+0xa8/0x100 [ 106.828467][ T6326] __kmalloc_cache_noprof+0x88/0x660 [ 106.828488][ T6326] ? tcf_proto_create+0x65/0x330 [ 106.828509][ T6326] tcf_proto_create+0x65/0x330 [ 106.828530][ T6326] tc_new_tfilter+0x12ff/0x1780 [ 106.828566][ T6326] ? __pfx_tc_new_tfilter+0x10/0x10 [ 106.828594][ T6326] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 106.828628][ T6326] ? __pfx_tc_new_tfilter+0x10/0x10 [ 106.828643][ T6326] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 106.828666][ T6326] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 106.828685][ T6326] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 106.828703][ T6326] ? ref_tracker_free+0x693/0x840 [ 106.828726][ T6326] ? __pfx_ref_tracker_free+0x10/0x10 [ 106.828745][ T6326] ? __asan_memcpy+0x40/0x70 [ 106.828763][ T6326] ? __skb_clone+0x63/0x7a0 [ 106.828794][ T6326] netlink_rcv_skb+0x232/0x4b0 [ 106.828818][ T6326] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 106.828841][ T6326] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 106.828872][ T6326] ? netlink_deliver_tap+0x2e/0x1b0 [ 106.828893][ T6326] ? netlink_deliver_tap+0x2e/0x1b0 [ 106.828920][ T6326] netlink_unicast+0x75c/0x8e0 [ 106.828952][ T6326] netlink_sendmsg+0x813/0xb40 [ 106.828983][ T6326] ? __pfx_netlink_sendmsg+0x10/0x10 [ 106.829009][ T6326] ? aa_sock_msg_perm+0xf1/0x1b0 [ 106.829038][ T6326] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 106.829068][ T6326] ____sys_sendmsg+0x972/0x9f0 [ 106.829101][ T6326] ? __pfx_____sys_sendmsg+0x10/0x10 [ 106.829144][ T6326] ? kstrtoull+0x12f/0x1d0 [ 106.829171][ T6326] ___sys_sendmsg+0x2a5/0x360 [ 106.829201][ T6326] ? __lock_acquire+0x6b5/0x2cf0 [ 106.829223][ T6326] ? __pfx____sys_sendmsg+0x10/0x10 [ 106.829249][ T6326] ? get_pid_task+0x20/0x1f0 [ 106.829270][ T6326] ? get_pid_task+0x20/0x1f0 [ 106.829289][ T6326] ? get_pid_task+0x20/0x1f0 [ 106.829333][ T6326] ? __fget_files+0x2a/0x420 [ 106.829352][ T6326] ? __fget_files+0x3a0/0x420 [ 106.829382][ T6326] __sys_sendmsg+0x183/0x260 [ 106.829408][ T6326] ? __pfx___sys_sendmsg+0x10/0x10 [ 106.829453][ T6326] __do_fast_syscall_32+0x229/0x6e0 [ 106.829471][ T6326] ? do_fast_syscall_32+0x33/0x70 [ 106.829486][ T6326] ? lockdep_hardirqs_on+0x7a/0x110 [ 106.829509][ T6326] ? asm_int80_emulation+0x1a/0x20 [ 106.829525][ T6326] ? do_int80_emulation+0x286/0x530 [ 106.829541][ T6326] ? trace_irq_disable+0x3b/0x140 [ 106.829568][ T6326] do_fast_syscall_32+0x33/0x70 [ 106.829585][ T6326] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 106.829605][ T6326] RIP: 0023:0xf7fd901c [ 106.829620][ T6326] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 106.829633][ T6326] RSP: 002b:00000000f549650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 106.829651][ T6326] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080006040 [ 106.829662][ T6326] RDX: 0000000020040054 RSI: 0000000000000000 RDI: 0000000000000000 [ 106.829672][ T6326] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 106.829681][ T6326] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 106.829690][ T6326] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 106.829715][ T6326] [ 106.910671][ T6332] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 106.940726][ T9] usb 2-1: config 0 descriptor?? [ 107.207161][ T2169] usb 3-1: config 0 descriptor?? [ 107.468449][ T6346] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 107.771644][ T6349] FAULT_INJECTION: forcing a failure. [ 107.771644][ T6349] name failslab, interval 1, probability 0, space 0, times 0 [ 107.785968][ T6349] CPU: 0 UID: 0 PID: 6349 Comm: syz.1.155 Tainted: G L syzkaller #0 PREEMPT(full) [ 107.785992][ T6349] Tainted: [L]=SOFTLOCKUP [ 107.785996][ T6349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 107.786001][ T6349] Call Trace: [ 107.786006][ T6349] [ 107.786010][ T6349] dump_stack_lvl+0xe8/0x150 [ 107.786027][ T6349] should_fail_ex+0x412/0x560 [ 107.786043][ T6349] should_failslab+0xa8/0x100 [ 107.786059][ T6349] __kmalloc_noprof+0xe8/0x760 [ 107.786072][ T6349] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 107.786100][ T6349] tomoyo_realpath_from_path+0xe3/0x5d0 [ 107.786114][ T6349] ? tomoyo_domain+0xd7/0x130 [ 107.786130][ T6349] ? tomoyo_path_number_perm+0x219/0x630 [ 107.786141][ T6349] tomoyo_path_number_perm+0x246/0x630 [ 107.786154][ T6349] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 107.786165][ T6349] ? __lock_acquire+0x6b5/0x2cf0 [ 107.786194][ T6349] ? __fget_files+0x2a/0x420 [ 107.786208][ T6349] ? __fget_files+0x3a0/0x420 [ 107.786218][ T6349] ? __fget_files+0x2a/0x420 [ 107.786231][ T6349] security_file_ioctl_compat+0xc3/0x2a0 [ 107.786243][ T6349] __ia32_compat_sys_ioctl+0x139/0x950 [ 107.786259][ T6349] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 107.786275][ T6349] ? __fget_files+0x3a0/0x420 [ 107.786289][ T6349] ? fput+0xa0/0xd0 [ 107.786300][ T6349] ? ksys_write+0x242/0x270 [ 107.786320][ T6349] __do_fast_syscall_32+0x229/0x6e0 [ 107.786330][ T6349] ? do_fast_syscall_32+0x33/0x70 [ 107.786338][ T6349] ? lockdep_hardirqs_on+0x7a/0x110 [ 107.786352][ T6349] ? asm_int80_emulation+0x1a/0x20 [ 107.786361][ T6349] ? do_int80_emulation+0x286/0x530 [ 107.786371][ T6349] ? trace_irq_disable+0x3b/0x140 [ 107.786397][ T6349] do_fast_syscall_32+0x33/0x70 [ 107.786410][ T6349] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 107.786422][ T6349] RIP: 0023:0xf70cf01c [ 107.786432][ T6349] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 107.786439][ T6349] RSP: 002b:00000000f549c50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 107.786450][ T6349] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000040045612 [ 107.786457][ T6349] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 107.786462][ T6349] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 107.786467][ T6349] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 107.786472][ T6349] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 107.786486][ T6349] [ 107.786499][ T6349] ERROR: Out of memory at tomoyo_realpath_from_path. [ 108.047599][ T9] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 108.183570][ T9] usb 1-1: device descriptor read/64, error -71 [ 108.423662][ T9] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 108.438317][ T6355] kAFS: unable to lookup cell '(,' [ 108.573726][ T9] usb 1-1: device descriptor read/64, error -71 [ 108.696010][ T9] usb usb1-port1: attempt power cycle [ 108.804049][ T86] usb 4-1: USB disconnect, device number 6 [ 109.033622][ T9] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 109.074031][ T9] usb 1-1: device descriptor read/8, error -71 [ 109.270277][ T86] usb 3-1: USB disconnect, device number 6 [ 109.343633][ T9] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 109.370904][ T5684] usb 2-1: USB disconnect, device number 2 [ 109.397922][ T9] usb 1-1: device descriptor read/8, error -71 [ 109.458977][ T6375] FAULT_INJECTION: forcing a failure. [ 109.458977][ T6375] name failslab, interval 1, probability 0, space 0, times 0 [ 109.509309][ T6375] CPU: 0 UID: 0 PID: 6375 Comm: syz.2.171 Tainted: G L syzkaller #0 PREEMPT(full) [ 109.509337][ T6375] Tainted: [L]=SOFTLOCKUP [ 109.509343][ T6375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 109.509353][ T6375] Call Trace: [ 109.509361][ T6375] [ 109.509369][ T6375] dump_stack_lvl+0xe8/0x150 [ 109.509395][ T6375] should_fail_ex+0x412/0x560 [ 109.509423][ T6375] should_failslab+0xa8/0x100 [ 109.509458][ T6375] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 109.509483][ T6375] ? __alloc_skb+0x1d0/0x7d0 [ 109.509504][ T6375] ? __local_bh_enable_ip+0xd0/0x130 [ 109.509527][ T6375] __alloc_skb+0x1d0/0x7d0 [ 109.509554][ T6375] tc_chain_notify+0x147/0x2e0 [ 109.509588][ T6375] __tcf_chain_get+0x2b7/0x3c0 [ 109.509614][ T6375] tc_new_tfilter+0x77e/0x1780 [ 109.509632][ T6375] ? kmem_cache_free+0x182/0x650 [ 109.509675][ T6375] ? __pfx_tc_new_tfilter+0x10/0x10 [ 109.509707][ T6375] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 109.509744][ T6375] ? __pfx_tc_new_tfilter+0x10/0x10 [ 109.509760][ T6375] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 109.509786][ T6375] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 109.509806][ T6375] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 109.509826][ T6375] ? ref_tracker_free+0x693/0x840 [ 109.509851][ T6375] ? __pfx_ref_tracker_free+0x10/0x10 [ 109.509873][ T6375] ? __asan_memcpy+0x40/0x70 [ 109.509892][ T6375] ? __skb_clone+0x63/0x7a0 [ 109.509924][ T6375] netlink_rcv_skb+0x232/0x4b0 [ 109.509950][ T6375] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 109.509974][ T6375] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 109.510009][ T6375] ? netlink_deliver_tap+0x2e/0x1b0 [ 109.510032][ T6375] ? netlink_deliver_tap+0x2e/0x1b0 [ 109.510061][ T6375] netlink_unicast+0x75c/0x8e0 [ 109.510093][ T6375] netlink_sendmsg+0x813/0xb40 [ 109.510129][ T6375] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.510157][ T6375] ? aa_sock_msg_perm+0xf1/0x1b0 [ 109.510181][ T6375] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 109.510206][ T6375] ____sys_sendmsg+0x972/0x9f0 [ 109.510239][ T6375] ? __pfx_____sys_sendmsg+0x10/0x10 [ 109.510266][ T6375] ? kstrtoull+0x12f/0x1d0 [ 109.510294][ T6375] ___sys_sendmsg+0x2a5/0x360 [ 109.510316][ T6375] ? __lock_acquire+0x6b5/0x2cf0 [ 109.510339][ T6375] ? __pfx____sys_sendmsg+0x10/0x10 [ 109.510365][ T6375] ? get_pid_task+0x20/0x1f0 [ 109.510385][ T6375] ? get_pid_task+0x20/0x1f0 [ 109.510404][ T6375] ? get_pid_task+0x20/0x1f0 [ 109.510456][ T6375] ? __fget_files+0x2a/0x420 [ 109.510473][ T6375] ? __fget_files+0x3a0/0x420 [ 109.510500][ T6375] __sys_sendmsg+0x183/0x260 [ 109.510524][ T6375] ? __pfx___sys_sendmsg+0x10/0x10 [ 109.510568][ T6375] __do_fast_syscall_32+0x229/0x6e0 [ 109.510585][ T6375] ? do_fast_syscall_32+0x33/0x70 [ 109.510600][ T6375] ? lockdep_hardirqs_on+0x7a/0x110 [ 109.510623][ T6375] ? asm_int80_emulation+0x1a/0x20 [ 109.510639][ T6375] ? do_int80_emulation+0x286/0x530 [ 109.510654][ T6375] ? trace_irq_disable+0x3b/0x140 [ 109.510680][ T6375] do_fast_syscall_32+0x33/0x70 [ 109.510698][ T6375] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 109.510718][ T6375] RIP: 0023:0xf708f01c [ 109.510733][ T6375] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 109.510747][ T6375] RSP: 002b:00000000f547d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 109.510765][ T6375] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800003c0 [ 109.510777][ T6375] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 109.510786][ T6375] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 109.510796][ T6375] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 109.510805][ T6375] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 109.510831][ T6375] [ 109.904354][ T9] usb usb1-port1: unable to enumerate USB device [ 110.750651][ T6404] netlink: 'syz.0.181': attribute type 1 has an invalid length. [ 110.904021][ T5698] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 111.063707][ T5698] usb 4-1: Using ep0 maxpacket: 16 [ 111.082498][ T5698] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.102413][ T5698] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 111.116625][ T5698] usb 4-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 111.126520][ T5698] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.139592][ T5698] usb 4-1: config 0 descriptor?? [ 111.357380][ T6418] faux_driver vkms: [drm] Unknown color mode 7; guessing buffer size. [ 111.704851][ T6422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.186'. [ 111.762579][ T5698] usbhid 4-1:0.0: can't add hid device: -71 [ 111.778974][ T5698] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 111.813044][ T5698] usb 4-1: USB disconnect, device number 7 [ 111.917409][ T6428] ALSA: mixer_oss: invalid OSS volume '' [ 111.984788][ T6433] netlink: 'syz.4.190': attribute type 1 has an invalid length. [ 112.019858][ T6433] 8021q: adding VLAN 0 to HW filter on device bond1 [ 112.047329][ T6433] netlink: 28 bytes leftover after parsing attributes in process `syz.4.190'. [ 112.068802][ T6433] bond1: entered promiscuous mode [ 112.077137][ T6433] bond1: entered allmulticast mode [ 112.095649][ T6433] bond1: (slave dummy0): making interface the new active one [ 112.103241][ T6433] dummy0: entered promiscuous mode [ 112.110723][ T6433] dummy0: entered allmulticast mode [ 112.123055][ T6433] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 112.182500][ T6433] bond1 (unregistering): (slave dummy0): Releasing active interface [ 112.193687][ T6433] dummy0: left promiscuous mode [ 112.203931][ T6433] dummy0: left allmulticast mode [ 112.218123][ T6433] bond1 (unregistering): Released all slaves [ 112.566800][ T6445] FAULT_INJECTION: forcing a failure. [ 112.566800][ T6445] name failslab, interval 1, probability 0, space 0, times 0 [ 112.615875][ T6445] CPU: 1 UID: 0 PID: 6445 Comm: syz.1.194 Tainted: G L syzkaller #0 PREEMPT(full) [ 112.615904][ T6445] Tainted: [L]=SOFTLOCKUP [ 112.615910][ T6445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 112.615920][ T6445] Call Trace: [ 112.615926][ T6445] [ 112.615933][ T6445] dump_stack_lvl+0xe8/0x150 [ 112.615958][ T6445] should_fail_ex+0x412/0x560 [ 112.615985][ T6445] should_failslab+0xa8/0x100 [ 112.616013][ T6445] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 112.616035][ T6445] ? __alloc_skb+0x186/0x7d0 [ 112.616055][ T6445] ? __alloc_skb+0x1d0/0x7d0 [ 112.616072][ T6445] ? __local_bh_enable_ip+0xd0/0x130 [ 112.616090][ T6445] __alloc_skb+0x1d0/0x7d0 [ 112.616116][ T6445] ? netlink_ack_tlv_len+0x6c/0x210 [ 112.616140][ T6445] netlink_ack+0x146/0xa50 [ 112.616177][ T6445] netlink_rcv_skb+0x2b6/0x4b0 [ 112.616199][ T6445] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 112.616220][ T6445] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 112.616250][ T6445] ? bpf_lsm_capable+0x9/0x20 [ 112.616266][ T6445] ? security_capable+0x7e/0x2c0 [ 112.616293][ T6445] nfnetlink_rcv+0x2c0/0x27b0 [ 112.616316][ T6445] ? kernel_text_address+0xa5/0xe0 [ 112.616341][ T6445] ? __kernel_text_address+0xd/0x30 [ 112.616363][ T6445] ? unwind_get_return_address+0x4d/0x90 [ 112.616383][ T6445] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 112.616409][ T6445] ? arch_stack_walk+0xfb/0x150 [ 112.616441][ T6445] ? stack_trace_save+0xa9/0x100 [ 112.616465][ T6445] ? __lock_acquire+0x6b5/0x2cf0 [ 112.616483][ T6445] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 112.616508][ T6445] ? kasan_save_track+0x4f/0x80 [ 112.616528][ T6445] ? kasan_save_track+0x3e/0x80 [ 112.616547][ T6445] ? __kasan_slab_alloc+0x6c/0x80 [ 112.616566][ T6445] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 112.616586][ T6445] ? __alloc_skb+0x27d/0x7d0 [ 112.616604][ T6445] ? netlink_sendmsg+0x5d4/0xb40 [ 112.616632][ T6445] ? __lock_acquire+0x6b5/0x2cf0 [ 112.616658][ T6445] ? __netlink_lookup+0xc6/0x8b0 [ 112.616689][ T6445] ? netlink_deliver_tap+0x2e/0x1b0 [ 112.616712][ T6445] ? netlink_deliver_tap+0x2e/0x1b0 [ 112.616739][ T6445] ? netlink_deliver_tap+0x2e/0x1b0 [ 112.616761][ T6445] ? netlink_deliver_tap+0x2e/0x1b0 [ 112.616788][ T6445] netlink_unicast+0x75c/0x8e0 [ 112.616816][ T6445] netlink_sendmsg+0x813/0xb40 [ 112.616847][ T6445] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.616874][ T6445] ? aa_sock_msg_perm+0xf1/0x1b0 [ 112.616901][ T6445] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 112.616926][ T6445] ____sys_sendmsg+0x972/0x9f0 [ 112.616959][ T6445] ? __pfx_____sys_sendmsg+0x10/0x10 [ 112.616987][ T6445] ? kstrtoull+0x12f/0x1d0 [ 112.617013][ T6445] ___sys_sendmsg+0x2a5/0x360 [ 112.617032][ T6445] ? __lock_acquire+0x6b5/0x2cf0 [ 112.617051][ T6445] ? __pfx____sys_sendmsg+0x10/0x10 [ 112.617073][ T6445] ? get_pid_task+0x20/0x1f0 [ 112.617092][ T6445] ? get_pid_task+0x20/0x1f0 [ 112.617117][ T6445] ? get_pid_task+0x20/0x1f0 [ 112.617152][ T6445] ? __fget_files+0x2a/0x420 [ 112.617166][ T6445] ? __fget_files+0x3a0/0x420 [ 112.617187][ T6445] __sys_sendmsg+0x183/0x260 [ 112.617206][ T6445] ? __pfx___sys_sendmsg+0x10/0x10 [ 112.617238][ T6445] __do_fast_syscall_32+0x229/0x6e0 [ 112.617251][ T6445] ? do_fast_syscall_32+0x33/0x70 [ 112.617261][ T6445] ? lockdep_hardirqs_on+0x7a/0x110 [ 112.617278][ T6445] ? asm_int80_emulation+0x1a/0x20 [ 112.617290][ T6445] ? do_int80_emulation+0x286/0x530 [ 112.617323][ T6445] ? trace_irq_disable+0x3b/0x140 [ 112.617345][ T6445] do_fast_syscall_32+0x33/0x70 [ 112.617357][ T6445] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 112.617373][ T6445] RIP: 0023:0xf70cf01c [ 112.617386][ T6445] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 112.617396][ T6445] RSP: 002b:00000000f54bd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 112.617427][ T6445] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 112.617437][ T6445] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 0000000000000000 [ 112.617445][ T6445] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 112.617453][ T6445] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 112.617461][ T6445] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 112.617482][ T6445] [ 113.174567][ T86] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 113.334246][ T86] usb 5-1: Using ep0 maxpacket: 16 [ 113.342569][ T86] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.353024][ T86] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 113.365304][ T86] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 113.374645][ T86] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.382648][ T86] usb 5-1: Product: syz [ 113.386931][ T86] usb 5-1: Manufacturer: syz [ 113.391517][ T86] usb 5-1: SerialNumber: syz [ 113.420138][ T86] usb 5-1: config 0 descriptor?? [ 113.425529][ T5698] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 113.433586][ T2169] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 113.446812][ T86] mcba_usb 5-1:0.0 can0: couldn't setup read URBs [ 113.453283][ T86] mcba_usb 5-1:0.0 can0: couldn't start device: -90 [ 113.525239][ T86] mcba_usb 5-1:0.0: probe with driver mcba_usb failed with error -90 [ 113.616056][ T5698] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.624253][ T6461] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.197' sets config #0 [ 113.653653][ T2169] usb 4-1: Invalid ep0 maxpacket: 16 [ 113.663299][ T5698] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.680522][ T5698] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 113.700162][ T5698] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 113.711601][ T5698] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.738129][ T5698] usb 2-1: config 0 descriptor?? [ 113.796295][ T2169] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 113.860483][ T6468] trusted_key: syz.2.200 sent an empty control message without MSG_MORE. [ 113.973564][ T2169] usb 4-1: Invalid ep0 maxpacket: 16 [ 113.979305][ T2169] usb usb4-port1: attempt power cycle [ 114.113601][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 114.190191][ T5361] usb 5-1: USB disconnect, device number 10 [ 114.274247][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 114.293308][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 114.319201][ T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 114.330698][ T2169] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 114.348923][ T9] usb 3-1: New USB device found, idVendor=0a92, idProduct=1020, bcdDevice= 0.40 [ 114.358686][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.366965][ T2169] usb 4-1: Invalid ep0 maxpacket: 16 [ 114.375001][ T9] usb 3-1: Product: syz [ 114.379843][ T9] usb 3-1: Manufacturer: syz [ 114.387152][ T9] usb 3-1: SerialNumber: syz [ 114.406821][ T6468] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 114.503935][ T2169] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 114.554236][ T2169] usb 4-1: Invalid ep0 maxpacket: 16 [ 114.576313][ T2169] usb usb4-port1: unable to enumerate USB device [ 114.641923][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 114.649830][ T9] usb 3-1: MIDIStreaming interface descriptor not found [ 114.794569][ T9] usb 3-1: USB disconnect, device number 7 [ 114.943575][ T5684] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 115.085422][ T5698] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 115.113628][ T5684] usb 1-1: Using ep0 maxpacket: 32 [ 115.125229][ T5684] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.154486][ T5684] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.200710][ T5684] usb 1-1: New USB device found, idVendor=25dd, idProduct=f3d2, bcdDevice=d2.37 [ 115.233936][ T5684] usb 1-1: New USB device strings: Mfr=84, Product=45, SerialNumber=0 [ 115.252363][ T5684] usb 1-1: Product: syz [ 115.257977][ T5684] usb 1-1: Manufacturer: syz [ 115.279481][ T5684] usb 1-1: config 0 descriptor?? [ 115.307331][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 115.307346][ T29] audit: type=1326 audit(1779212239.190:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6452 comm="syz.1.196" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70cf01c code=0x0 [ 115.381176][ T6480] syzkaller0: entered promiscuous mode [ 115.391348][ T5699] usb 2-1: USB disconnect, device number 3 [ 115.408474][ T6480] syzkaller0: entered allmulticast mode [ 115.721186][ T6475] ipvlan2: entered promiscuous mode [ 115.757329][ T6475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.775618][ T6475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.803200][ T6475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.826915][ T6475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.839998][ T6487] netlink: 28 bytes leftover after parsing attributes in process `syz.2.206'. [ 115.864135][ T6475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.898414][ T6475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.951809][ T5684] usbhid 1-1:0.0: can't add hid device: -71 [ 115.959566][ T5684] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 116.008989][ T5684] usb 1-1: USB disconnect, device number 10 [ 116.636381][ T6500] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 116.710469][ T6500] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 116.784070][ T6506] netlink: 28 bytes leftover after parsing attributes in process `syz.1.211'. [ 117.198615][ T6507] hub 9-0:1.0: USB hub found [ 117.263094][ T6507] hub 9-0:1.0: 1 port detected [ 117.388622][ T6498] netlink: 96 bytes leftover after parsing attributes in process `syz.4.209'. [ 117.567983][ T5699] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 117.744184][ T5699] usb 2-1: Using ep0 maxpacket: 16 [ 117.754600][ T5699] usb 2-1: config 251 has an invalid interface number: 202 but max is 0 [ 117.764911][ T5699] usb 2-1: config 251 has no interface number 0 [ 117.780328][ T5699] usb 2-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 117.814483][ T5699] usb 2-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 117.830921][ T6524] fuse: Unknown parameter '0x00000000000000040x0000000000000005' [ 117.841866][ T5699] usb 2-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 117.862208][ T5699] usb 2-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 117.885487][ T5699] usb 2-1: config 251 interface 202 altsetting 1 endpoint 0x81 has an invalid bInterval 118, changing to 7 [ 117.911687][ T5699] usb 2-1: config 251 interface 202 altsetting 1 endpoint 0x81 has invalid maxpacket 10102, setting to 1024 [ 117.938966][ T5699] usb 2-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 117.974229][ T5699] usb 2-1: config 251 interface 202 has no altsetting 0 [ 117.999034][ T5699] usb 2-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 118.023745][ T5699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.059171][ T5699] usb 2-1: Product: syz [ 118.072409][ T5699] usb 2-1: Manufacturer: syz [ 118.099086][ T5699] usb 2-1: SerialNumber: syz [ 118.135652][ T6519] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 118.178000][ T6528] netlink: 84 bytes leftover after parsing attributes in process `syz.2.216'. [ 118.253974][ T6528] netlink: 76 bytes leftover after parsing attributes in process `syz.2.216'. [ 118.411085][ T6535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.460096][ T6535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.564988][ T5699] cxacru 2-1:251.202: cxacru_bind: interface has incorrect endpoints [ 118.598030][ T5699] cxacru 2-1:251.202: usbatm_usb_probe: bind failed: -19! [ 118.662774][ T5699] usb 2-1: USB disconnect, device number 4 [ 118.870413][ T6545] netlink: 4 bytes leftover after parsing attributes in process `syz.4.222'. [ 119.611503][ T6560] netlink: 'syz.1.227': attribute type 11 has an invalid length. [ 120.260496][ T6575] fuse: Bad value for 'user_id' [ 120.282085][ T6575] fuse: Bad value for 'user_id' [ 120.303459][ T6577] FAULT_INJECTION: forcing a failure. [ 120.303459][ T6577] name failslab, interval 1, probability 0, space 0, times 0 [ 120.322965][ T6577] CPU: 1 UID: 0 PID: 6577 Comm: syz.1.233 Tainted: G L syzkaller #0 PREEMPT(full) [ 120.322992][ T6577] Tainted: [L]=SOFTLOCKUP [ 120.322998][ T6577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 120.323008][ T6577] Call Trace: [ 120.323014][ T6577] [ 120.323021][ T6577] dump_stack_lvl+0xe8/0x150 [ 120.323053][ T6577] should_fail_ex+0x412/0x560 [ 120.323077][ T6577] ? ip6mr_mfc_add+0x1e7/0x2880 [ 120.323099][ T6577] should_failslab+0xa8/0x100 [ 120.323122][ T6577] ? ip6mr_mfc_add+0x66e/0x2880 [ 120.323141][ T6577] kmem_cache_alloc_noprof+0x87/0x650 [ 120.323165][ T6577] ? ip6mr_mfc_add+0x1e7/0x2880 [ 120.323184][ T6577] ip6mr_mfc_add+0x66e/0x2880 [ 120.323207][ T6577] ? ip6mr_mfc_add+0x1e7/0x2880 [ 120.323232][ T6577] ? __pfx_ip6mr_mfc_add+0x10/0x10 [ 120.323250][ T6577] ? __mutex_lock+0x608/0x1550 [ 120.323268][ T6577] ? ip6_mroute_setsockopt+0x945/0xf90 [ 120.323287][ T6577] ? __pfx___mutex_lock+0x10/0x10 [ 120.323317][ T6577] ip6_mroute_setsockopt+0xd94/0xf90 [ 120.323343][ T6577] ? __pfx_ip6_mroute_setsockopt+0x10/0x10 [ 120.323391][ T6577] ? rep_movs_alternative+0xf/0x90 [ 120.323413][ T6577] do_ipv6_setsockopt+0x37f/0x3150 [ 120.323445][ T6577] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 120.323474][ T6577] ? kstrtouint+0x6e/0xe0 [ 120.323490][ T6577] ? aa_label_sk_perm+0x532/0x6e0 [ 120.323511][ T6577] ? get_pid_task+0x20/0x1f0 [ 120.323531][ T6577] ? get_pid_task+0x20/0x1f0 [ 120.323551][ T6577] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 120.323574][ T6577] ? get_pid_task+0x20/0x1f0 [ 120.323594][ T6577] ? get_pid_task+0x20/0x1f0 [ 120.323613][ T6577] ? get_pid_task+0x20/0x1f0 [ 120.323639][ T6577] ? __lock_acquire+0x6b5/0x2cf0 [ 120.323682][ T6577] ipv6_setsockopt+0x59/0x170 [ 120.323701][ T6577] rawv6_setsockopt+0x276/0x5f0 [ 120.323729][ T6577] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 120.323752][ T6577] ? aa_sock_opt_perm+0xff/0x1a0 [ 120.323777][ T6577] ? sock_common_setsockopt+0x36/0xc0 [ 120.323797][ T6577] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 120.323819][ T6577] do_sock_setsockopt+0x17c/0x1b0 [ 120.323846][ T6577] __ia32_sys_setsockopt+0x13d/0x1b0 [ 120.323874][ T6577] __do_fast_syscall_32+0x229/0x6e0 [ 120.323891][ T6577] ? do_fast_syscall_32+0x33/0x70 [ 120.323906][ T6577] ? lockdep_hardirqs_on+0x7a/0x110 [ 120.323930][ T6577] ? asm_int80_emulation+0x1a/0x20 [ 120.323946][ T6577] ? do_int80_emulation+0x286/0x530 [ 120.323961][ T6577] ? trace_irq_disable+0x3b/0x140 [ 120.323988][ T6577] do_fast_syscall_32+0x33/0x70 [ 120.324005][ T6577] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 120.324024][ T6577] RIP: 0023:0xf70cf01c [ 120.324051][ T6577] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 120.324065][ T6577] RSP: 002b:00000000f549c50c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 120.324087][ T6577] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000029 [ 120.324099][ T6577] RDX: 00000000000000d2 RSI: 0000000080000300 RDI: 000000000000005c [ 120.324110][ T6577] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 120.324120][ T6577] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 120.324130][ T6577] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 120.324158][ T6577] [ 120.414133][ T6586] kAFS: unable to lookup cell '(,' [ 120.549234][ T6580] netlink: 140 bytes leftover after parsing attributes in process `syz.0.236'. [ 120.847198][ T6596] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 121.243238][ T6605] netlink: 'syz.3.240': attribute type 11 has an invalid length. [ 121.299275][ T6605] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 121.813706][ T6620] netlink: 44 bytes leftover after parsing attributes in process `syz.1.245'. [ 122.118615][ T6629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.249'. [ 122.368280][ T6635] kAFS: unable to lookup cell '(,' [ 122.867844][ T6644] team0: entered promiscuous mode [ 122.879160][ T6644] team_slave_0: entered promiscuous mode [ 122.895602][ T6644] team_slave_1: entered promiscuous mode [ 122.913368][ T6644] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 123.019473][ T6647] netlink: 4 bytes leftover after parsing attributes in process `syz.3.255'. [ 123.354405][ T5699] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 123.504424][ T5699] usb 2-1: device descriptor read/64, error -71 [ 123.753922][ T5699] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 123.764699][ T86] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 123.916825][ T5699] usb 2-1: device descriptor read/64, error -71 [ 123.934858][ T86] usb 1-1: Using ep0 maxpacket: 16 [ 123.944609][ T86] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.973958][ T86] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.986812][ T86] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 124.000424][ T86] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 124.011104][ T86] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.045839][ T5699] usb usb2-port1: attempt power cycle [ 124.078409][ T86] usb 1-1: config 0 descriptor?? [ 124.196783][ T6674] FAULT_INJECTION: forcing a failure. [ 124.196783][ T6674] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 124.242641][ T6674] CPU: 1 UID: 0 PID: 6674 Comm: syz.4.265 Tainted: G L syzkaller #0 PREEMPT(full) [ 124.242670][ T6674] Tainted: [L]=SOFTLOCKUP [ 124.242676][ T6674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 124.242686][ T6674] Call Trace: [ 124.242692][ T6674] [ 124.242700][ T6674] dump_stack_lvl+0xe8/0x150 [ 124.242724][ T6674] should_fail_ex+0x412/0x560 [ 124.242754][ T6674] _copy_from_user+0x2d/0xb0 [ 124.242778][ T6674] kstrtouint_from_user+0xd6/0x180 [ 124.242796][ T6674] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 124.242816][ T6674] proc_fail_nth_write+0x8e/0x210 [ 124.242830][ T6674] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 124.242845][ T6674] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 124.242875][ T6674] vfs_write+0x29a/0xb90 [ 124.242894][ T6674] ? __pfx_vfs_write+0x10/0x10 [ 124.242908][ T6674] ? __fget_files+0x2a/0x420 [ 124.242922][ T6674] ? __fget_files+0x3a0/0x420 [ 124.242932][ T6674] ? __fget_files+0x2a/0x420 [ 124.242947][ T6674] ksys_write+0x150/0x270 [ 124.242961][ T6674] ? __pfx_ksys_write+0x10/0x10 [ 124.242980][ T6674] ? asm_int80_emulation+0x1a/0x20 [ 124.243001][ T6674] do_int80_emulation+0x181/0x530 [ 124.243017][ T6674] ? asm_int80_emulation+0x1a/0x20 [ 124.243026][ T6674] ? clear_bhb_loop+0x40/0x90 [ 124.243035][ T6674] ? clear_bhb_loop+0x40/0x90 [ 124.243047][ T6674] asm_int80_emulation+0x1a/0x20 [ 124.243056][ T6674] RIP: 0023:0xf71761ab [ 124.243066][ T6674] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 124.243074][ T6674] RSP: 002b:00000000f54364bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 124.243086][ T6674] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54365d0 [ 124.243092][ T6674] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 124.243097][ T6674] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 124.243103][ T6674] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 124.243109][ T6674] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 124.243123][ T6674] [ 124.583570][ T5699] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 124.604235][ T5699] usb 2-1: device descriptor read/8, error -71 [ 124.853803][ T5699] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 124.892655][ T5699] usb 2-1: device descriptor read/8, error -71 [ 124.954145][ T5698] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 125.013984][ T5699] usb usb2-port1: unable to enumerate USB device [ 125.129742][ T5698] usb 5-1: unable to get BOS descriptor or descriptor too short [ 125.151490][ T5698] usb 5-1: config 117 has an invalid interface number: 156 but max is 0 [ 125.170956][ T5698] usb 5-1: config 117 has no interface number 0 [ 125.183825][ T5698] usb 5-1: config 117 interface 156 has no altsetting 0 [ 126.200596][ T6694] FAULT_INJECTION: forcing a failure. [ 126.200596][ T6694] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 126.231279][ T6694] CPU: 1 UID: 0 PID: 6694 Comm: syz.3.274 Tainted: G L syzkaller #0 PREEMPT(full) [ 126.231305][ T6694] Tainted: [L]=SOFTLOCKUP [ 126.231311][ T6694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 126.231320][ T6694] Call Trace: [ 126.231327][ T6694] [ 126.231334][ T6694] dump_stack_lvl+0xe8/0x150 [ 126.231362][ T6694] should_fail_ex+0x412/0x560 [ 126.231390][ T6694] _copy_to_iter+0x404/0x17d0 [ 126.231412][ T6694] ? mr_mfc_seq_idx+0x304/0x340 [ 126.231444][ T6694] ? __pfx__copy_to_iter+0x10/0x10 [ 126.231465][ T6694] ? traverse+0x544/0x580 [ 126.231490][ T6694] seq_read_iter+0x2e9/0xe10 [ 126.231516][ T6694] ? __asan_memset+0x22/0x50 [ 126.231541][ T6694] seq_read+0x367/0x480 [ 126.231564][ T6694] ? __pfx_seq_read+0x10/0x10 [ 126.231588][ T6694] ? apparmor_file_permission+0x1f4/0x300 [ 126.231614][ T6694] ? __pfx_seq_read+0x10/0x10 [ 126.231628][ T6694] proc_reg_read+0x1e9/0x2e0 [ 126.231650][ T6694] vfs_readv+0x587/0x840 [ 126.231663][ T6694] ? __pfx_proc_reg_read+0x10/0x10 [ 126.231678][ T6694] ? __pfx_vfs_readv+0x10/0x10 [ 126.231700][ T6694] ? __fget_files+0x2a/0x420 [ 126.231714][ T6694] ? __fget_files+0x3a0/0x420 [ 126.231725][ T6694] ? __fget_files+0x2a/0x420 [ 126.231740][ T6694] __ia32_compat_sys_preadv+0x1c6/0x2c0 [ 126.231751][ T6694] ? __pfx___ia32_compat_sys_preadv+0x10/0x10 [ 126.231767][ T6694] __do_fast_syscall_32+0x229/0x6e0 [ 126.231781][ T6694] ? do_fast_syscall_32+0x33/0x70 [ 126.231790][ T6694] ? lockdep_hardirqs_on+0x7a/0x110 [ 126.231804][ T6694] ? asm_int80_emulation+0x1a/0x20 [ 126.231813][ T6694] ? do_int80_emulation+0x286/0x530 [ 126.231824][ T6694] do_fast_syscall_32+0x33/0x70 [ 126.231834][ T6694] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 126.231845][ T6694] RIP: 0023:0xf704f01c [ 126.231855][ T6694] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 126.231863][ T6694] RSP: 002b:00000000f543d50c EFLAGS: 00000206 ORIG_RAX: 000000000000014d [ 126.231875][ T6694] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000300 [ 126.231882][ T6694] RDX: 0000000000000001 RSI: 0000000000000006 RDI: 0000000000000000 [ 126.231887][ T6694] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 126.231893][ T6694] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 126.231898][ T6694] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 126.231913][ T6694] [ 126.524267][ T86] usbhid 1-1:0.0: can't add hid device: -71 [ 126.530443][ T86] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 126.547525][ T86] usb 1-1: USB disconnect, device number 11 [ 126.898027][ T6707] netlink: 3 bytes leftover after parsing attributes in process `syz.1.279'. [ 126.952710][ T6713] binder: 6710:6713 ioctl 4018620d 0 returned -22 [ 126.960128][ T6713] netlink: 44 bytes leftover after parsing attributes in process `syz.0.280'. [ 127.165999][ T86] hid_parser_main: 70 callbacks suppressed [ 127.166014][ T86] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 127.234236][ T86] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 127.493655][ T6726] team0: entered promiscuous mode [ 127.520549][ T6726] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 127.624734][ T6719] FAULT_INJECTION: forcing a failure. [ 127.624734][ T6719] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.725208][ T5698] usb 5-1: string descriptor 0 read error: -71 [ 127.743867][ T6719] CPU: 1 UID: 0 PID: 6719 Comm: syz.0.284 Tainted: G L syzkaller #0 PREEMPT(full) [ 127.743896][ T6719] Tainted: [L]=SOFTLOCKUP [ 127.743902][ T6719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 127.743912][ T6719] Call Trace: [ 127.743919][ T6719] [ 127.743926][ T6719] dump_stack_lvl+0xe8/0x150 [ 127.743951][ T6719] should_fail_ex+0x412/0x560 [ 127.743979][ T6719] _copy_from_user+0x2d/0xb0 [ 127.744005][ T6719] ia32_restore_sigcontext+0xf2/0x560 [ 127.744026][ T6719] ? __pfx_ia32_restore_sigcontext+0x10/0x10 [ 127.744059][ T6719] ? _raw_spin_unlock_irq+0x23/0x50 [ 127.744086][ T6719] __ia32_compat_sys_rt_sigreturn+0x1ad/0x270 [ 127.744106][ T6719] ? __task_pid_nr_ns+0x28/0x470 [ 127.744129][ T6719] ? __pfx___ia32_compat_sys_rt_sigreturn+0x10/0x10 [ 127.744198][ T6719] ? asm_int80_emulation+0x1a/0x20 [ 127.744220][ T6719] do_int80_emulation+0x181/0x530 [ 127.744237][ T6719] ? asm_int80_emulation+0x1a/0x20 [ 127.744253][ T6719] ? clear_bhb_loop+0x40/0x90 [ 127.744270][ T6719] ? clear_bhb_loop+0x40/0x90 [ 127.744291][ T6719] asm_int80_emulation+0x1a/0x20 [ 127.744311][ T6719] RIP: 0023:0xf7fd9047 [ 127.744327][ T6719] Code: 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad 00 00 00 cd 80 <0f> 0b 62 e7 ff ff 68 01 00 00 82 02 00 00 05 05 54 e7 ff ff 5f 01 [ 127.744341][ T6719] RSP: 002b:00000000f5496040 EFLAGS: 00000286 ORIG_RAX: 00000000000000ad [ 127.744360][ T6719] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f54960cc [ 127.744371][ T6719] RDX: 00000000f549604c RSI: 0000000000000007 RDI: 0000000004000803 [ 127.744382][ T6719] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 127.744392][ T6719] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 127.744402][ T6719] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 127.744428][ T6719] [ 127.752466][ T5698] usb 5-1: New USB device found, idVendor=19d2, idProduct=0396, bcdDevice=cd.e7 [ 128.104732][ T5698] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.153374][ T5698] usb 5-1: can't set config #117, error -71 [ 128.176132][ T5698] usb 5-1: USB disconnect, device number 11 [ 128.662077][ T6757] FAULT_INJECTION: forcing a failure. [ 128.662077][ T6757] name failslab, interval 1, probability 0, space 0, times 0 [ 128.725170][ T6757] CPU: 1 UID: 0 PID: 6757 Comm: syz.0.293 Tainted: G L syzkaller #0 PREEMPT(full) [ 128.725201][ T6757] Tainted: [L]=SOFTLOCKUP [ 128.725208][ T6757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 128.725218][ T6757] Call Trace: [ 128.725226][ T6757] [ 128.725234][ T6757] dump_stack_lvl+0xe8/0x150 [ 128.725260][ T6757] should_fail_ex+0x412/0x560 [ 128.725289][ T6757] should_failslab+0xa8/0x100 [ 128.725317][ T6757] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 128.725342][ T6757] ? __alloc_skb+0x1d0/0x7d0 [ 128.725363][ T6757] ? __local_bh_enable_ip+0xd0/0x130 [ 128.725387][ T6757] __alloc_skb+0x1d0/0x7d0 [ 128.725415][ T6757] netlink_dump+0x1d8/0xe10 [ 128.725451][ T6757] ? __pfx_netlink_dump+0x10/0x10 [ 128.725491][ T6757] ? genl_start+0x499/0x6c0 [ 128.725518][ T6757] __netlink_dump_start+0x5cb/0x7e0 [ 128.725547][ T6757] genl_family_rcv_msg_dumpit+0x213/0x310 [ 128.725570][ T6757] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 128.725588][ T6757] ? genl_get_cmd+0x82e/0x960 [ 128.725610][ T6757] ? __pfx_genl_start+0x10/0x10 [ 128.725625][ T6757] ? __pfx_genl_dumpit+0x10/0x10 [ 128.725641][ T6757] ? __pfx_genl_done+0x10/0x10 [ 128.725671][ T6757] genl_rcv_msg+0x5e8/0x7a0 [ 128.725697][ T6757] ? __pfx_genl_rcv_msg+0x10/0x10 [ 128.725715][ T6757] ? __pfx_nl80211_dump_station+0x10/0x10 [ 128.725742][ T6757] ? __pfx_ref_tracker_free+0x10/0x10 [ 128.725763][ T6757] ? __asan_memcpy+0x40/0x70 [ 128.725783][ T6757] ? __skb_clone+0x63/0x7a0 [ 128.725816][ T6757] netlink_rcv_skb+0x232/0x4b0 [ 128.725840][ T6757] ? __pfx_genl_rcv_msg+0x10/0x10 [ 128.725861][ T6757] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 128.725899][ T6757] ? down_read+0x270/0x2e0 [ 128.725916][ T6757] ? genl_rcv+0xd/0x40 [ 128.725936][ T6757] genl_rcv+0x28/0x40 [ 128.725953][ T6757] netlink_unicast+0x75c/0x8e0 [ 128.725986][ T6757] netlink_sendmsg+0x813/0xb40 [ 128.726020][ T6757] ? __pfx_netlink_sendmsg+0x10/0x10 [ 128.726056][ T6757] ? aa_sock_msg_perm+0xf1/0x1b0 [ 128.726081][ T6757] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 128.726107][ T6757] ____sys_sendmsg+0x972/0x9f0 [ 128.726140][ T6757] ? __pfx_____sys_sendmsg+0x10/0x10 [ 128.726167][ T6757] ? kstrtoull+0x12f/0x1d0 [ 128.726194][ T6757] ___sys_sendmsg+0x2a5/0x360 [ 128.726217][ T6757] ? __lock_acquire+0x6b5/0x2cf0 [ 128.726241][ T6757] ? __pfx____sys_sendmsg+0x10/0x10 [ 128.726267][ T6757] ? get_pid_task+0x20/0x1f0 [ 128.726288][ T6757] ? get_pid_task+0x20/0x1f0 [ 128.726307][ T6757] ? get_pid_task+0x20/0x1f0 [ 128.726354][ T6757] ? __fget_files+0x2a/0x420 [ 128.726374][ T6757] ? __fget_files+0x3a0/0x420 [ 128.726405][ T6757] __sys_sendmsg+0x183/0x260 [ 128.726431][ T6757] ? __pfx___sys_sendmsg+0x10/0x10 [ 128.726478][ T6757] __do_fast_syscall_32+0x229/0x6e0 [ 128.726496][ T6757] ? do_fast_syscall_32+0x33/0x70 [ 128.726512][ T6757] ? lockdep_hardirqs_on+0x7a/0x110 [ 128.726535][ T6757] ? asm_int80_emulation+0x1a/0x20 [ 128.726551][ T6757] ? do_int80_emulation+0x286/0x530 [ 128.726572][ T6757] do_fast_syscall_32+0x33/0x70 [ 128.726589][ T6757] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 128.726609][ T6757] RIP: 0023:0xf7fd901c [ 128.726626][ T6757] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 128.726640][ T6757] RSP: 002b:00000000f549650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 128.726658][ T6757] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0 [ 128.726669][ T6757] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 128.726679][ T6757] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 128.726688][ T6757] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 128.726697][ T6757] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 128.726723][ T6757] [ 129.938696][ T6775] kAFS: unable to lookup cell '(,' [ 130.183593][ T86] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 130.345389][ T86] usb 3-1: Using ep0 maxpacket: 32 [ 130.365847][ T86] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 130.388461][ T86] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.405871][ T86] usb 3-1: Product: syz [ 130.415679][ T86] usb 3-1: Manufacturer: syz [ 130.424988][ T86] usb 3-1: SerialNumber: syz [ 130.463143][ T86] usb 3-1: config 0 descriptor?? [ 130.490405][ T86] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 130.502606][ T86] dvb-usb: bulk message failed: -22 (4/0) [ 130.525179][ T86] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 130.548896][ T86] dvb-usb: bulk message failed: -22 (5/0) [ 130.566388][ T86] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 130.721805][ T86] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 130.738435][ T6789] binder: 6788:6789 ioctl c020aa08 80000080 returned -22 [ 130.752015][ T86] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 130.779966][ T86] usb 3-1: media controller created [ 130.780497][ T6776] dvb-usb: bulk message failed: -22 (7/0) [ 130.811106][ T6776] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 130.846710][ T86] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 130.899599][ T6794] team0: Caught tx_queue_len zero misconfig [ 130.935655][ T6776] ttusb2: i2c transfer failed. [ 130.947238][ T86] usb 3-1: selecting invalid altsetting 3 [ 130.961407][ T86] ttusb2: set interface to alts=3 failed [ 131.198445][ T86] DVB: Unable to find symbol tda10086_attach() [ 131.204701][ T86] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 131.214784][ T86] dvb-usb: bulk message failed: -22 (4/0) [ 131.221303][ T86] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 131.232123][ T86] dvb-usb: bulk message failed: -22 (5/0) [ 131.238191][ T86] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 131.330642][ T86] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 131.785542][ T6807] FAULT_INJECTION: forcing a failure. [ 131.785542][ T6807] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 131.826223][ T6807] CPU: 1 UID: 0 PID: 6807 Comm: syz.0.308 Tainted: G L syzkaller #0 PREEMPT(full) [ 131.826249][ T6807] Tainted: [L]=SOFTLOCKUP [ 131.826254][ T6807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 131.826264][ T6807] Call Trace: [ 131.826269][ T6807] [ 131.826275][ T6807] dump_stack_lvl+0xe8/0x150 [ 131.826299][ T6807] should_fail_ex+0x412/0x560 [ 131.826327][ T6807] _copy_from_user+0x2d/0xb0 [ 131.826353][ T6807] get_compat_msghdr+0xb3/0x4c0 [ 131.826382][ T6807] ? _parse_integer_limit+0x1ae/0x1f0 [ 131.826403][ T6807] ? __pfx_get_compat_msghdr+0x10/0x10 [ 131.826430][ T6807] ? kstrtoull+0x12f/0x1d0 [ 131.826457][ T6807] ___sys_sendmsg+0x201/0x360 [ 131.826481][ T6807] ? __lock_acquire+0x6b5/0x2cf0 [ 131.826504][ T6807] ? __pfx____sys_sendmsg+0x10/0x10 [ 131.826546][ T6807] ? get_pid_task+0x20/0x1f0 [ 131.826567][ T6807] ? get_pid_task+0x20/0x1f0 [ 131.826584][ T6807] ? get_pid_task+0x20/0x1f0 [ 131.826623][ T6807] ? __fget_files+0x2a/0x420 [ 131.826640][ T6807] ? __fget_files+0x3a0/0x420 [ 131.826664][ T6807] __sys_sendmsg+0x183/0x260 [ 131.826688][ T6807] ? __pfx___sys_sendmsg+0x10/0x10 [ 131.826728][ T6807] __do_fast_syscall_32+0x229/0x6e0 [ 131.826745][ T6807] ? do_fast_syscall_32+0x33/0x70 [ 131.826769][ T6807] ? lockdep_hardirqs_on+0x7a/0x110 [ 131.826793][ T6807] ? asm_int80_emulation+0x1a/0x20 [ 131.826809][ T6807] ? do_int80_emulation+0x286/0x530 [ 131.826824][ T6807] ? trace_irq_disable+0x3b/0x140 [ 131.826854][ T6807] do_fast_syscall_32+0x33/0x70 [ 131.826871][ T6807] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 131.826892][ T6807] RIP: 0023:0xf7fd901c [ 131.826908][ T6807] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 131.826922][ T6807] RSP: 002b:00000000f549650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 131.826940][ T6807] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000240 [ 131.826952][ T6807] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 131.826962][ T6807] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 131.826972][ T6807] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 131.826982][ T6807] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 131.827008][ T6807] [ 132.177756][ T6817] kAFS: unable to lookup cell '(,' [ 132.271291][ T6820] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 132.278979][ T6820] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 132.623698][ T86] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 132.670019][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.676620][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.803828][ T86] usb 4-1: unable to get BOS descriptor or descriptor too short [ 132.831829][ T86] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.855226][ T86] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 132.891836][ T86] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 132.919087][ T86] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.947677][ T86] usb 4-1: Product: syz [ 132.956389][ T86] usb 4-1: Manufacturer: syz [ 133.003843][ T86] usb 4-1: SerialNumber: syz [ 133.072082][ T86] usb 4-1: selecting invalid altsetting 1 [ 133.103371][ T86] usb 4-1: unit 6 not found! [ 133.117523][ T6771] syz.2.298 (6771): drop_caches: 2 [ 133.191251][ T5684] usb 3-1: USB disconnect, device number 8 [ 133.365130][ T5684] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 133.868480][ T6825] netlink: 'syz.3.313': attribute type 1 has an invalid length. [ 133.877473][ T6825] netlink: 5 bytes leftover after parsing attributes in process `syz.3.313'. [ 133.922718][ T6847] fuse: Bad value for 'group_id' [ 133.941963][ T6847] fuse: Bad value for 'group_id' [ 134.223655][ T5698] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 134.314513][ T6853] binder_alloc: 6852: binder_alloc_buf, no vma [ 134.394022][ T5698] usb 2-1: Using ep0 maxpacket: 32 [ 134.410532][ T5698] usb 2-1: config 1 has an invalid descriptor of length 144, skipping remainder of the config [ 134.450789][ T5698] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 134.503369][ T5698] usb 2-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice= 0.40 [ 134.530926][ T5698] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.579262][ T5698] usb 2-1: Product: syz [ 134.621822][ T5698] usb 2-1: Manufacturer: syz [ 134.627134][ T5698] usb 2-1: SerialNumber: syz [ 134.628879][ T6861] kAFS: unable to lookup cell '(,' [ 135.081839][ T6871] syzkaller1: entered promiscuous mode [ 135.091956][ T6871] syzkaller1: entered allmulticast mode [ 135.157630][ T6875] netlink: 48 bytes leftover after parsing attributes in process `syz.0.328'. [ 135.170601][ T6875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.328'. [ 135.459378][ T86] usb 4-1: 2:0: failed to get current value for ch 0 (-71) [ 135.551099][ T6884] FAULT_INJECTION: forcing a failure. [ 135.551099][ T6884] name failslab, interval 1, probability 0, space 0, times 0 [ 135.603292][ T86] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 135.623776][ T6884] CPU: 1 UID: 0 PID: 6884 Comm: syz.0.334 Tainted: G L syzkaller #0 PREEMPT(full) [ 135.623805][ T6884] Tainted: [L]=SOFTLOCKUP [ 135.623812][ T6884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 135.623822][ T6884] Call Trace: [ 135.623829][ T6884] [ 135.623837][ T6884] dump_stack_lvl+0xe8/0x150 [ 135.623862][ T6884] should_fail_ex+0x412/0x560 [ 135.623890][ T6884] should_failslab+0xa8/0x100 [ 135.623918][ T6884] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 135.623942][ T6884] ? __alloc_skb+0x1d0/0x7d0 [ 135.623963][ T6884] ? __local_bh_enable_ip+0xd0/0x130 [ 135.623986][ T6884] __alloc_skb+0x1d0/0x7d0 [ 135.624008][ T6884] ? netlink_ack_tlv_len+0x6c/0x210 [ 135.624035][ T6884] netlink_ack+0x146/0xa50 [ 135.624055][ T6884] ? __pfx_genl_rcv_msg+0x10/0x10 [ 135.624074][ T6884] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 135.624096][ T6884] ? __pfx_nl80211_post_doit+0x10/0x10 [ 135.624117][ T6884] ? __pfx_ref_tracker_free+0x10/0x10 [ 135.624140][ T6884] ? __asan_memcpy+0x40/0x70 [ 135.624159][ T6884] ? __skb_clone+0x63/0x7a0 [ 135.624191][ T6884] netlink_rcv_skb+0x2b6/0x4b0 [ 135.624224][ T6884] ? __pfx_genl_rcv_msg+0x10/0x10 [ 135.624244][ T6884] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 135.624282][ T6884] ? down_read+0x270/0x2e0 [ 135.624298][ T6884] ? genl_rcv+0xd/0x40 [ 135.624314][ T6884] genl_rcv+0x28/0x40 [ 135.624330][ T6884] netlink_unicast+0x75c/0x8e0 [ 135.624357][ T6884] netlink_sendmsg+0x813/0xb40 [ 135.624386][ T6884] ? __pfx_netlink_sendmsg+0x10/0x10 [ 135.624408][ T6884] ? aa_sock_msg_perm+0xf1/0x1b0 [ 135.624431][ T6884] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 135.624456][ T6884] ____sys_sendmsg+0x972/0x9f0 [ 135.624488][ T6884] ? __pfx_____sys_sendmsg+0x10/0x10 [ 135.624515][ T6884] ? kstrtoull+0x12f/0x1d0 [ 135.624546][ T6884] ___sys_sendmsg+0x2a5/0x360 [ 135.624570][ T6884] ? __lock_acquire+0x6b5/0x2cf0 [ 135.624593][ T6884] ? __pfx____sys_sendmsg+0x10/0x10 [ 135.624619][ T6884] ? get_pid_task+0x20/0x1f0 [ 135.624640][ T6884] ? get_pid_task+0x20/0x1f0 [ 135.624659][ T6884] ? get_pid_task+0x20/0x1f0 [ 135.624706][ T6884] ? __fget_files+0x2a/0x420 [ 135.624725][ T6884] ? __fget_files+0x3a0/0x420 [ 135.624755][ T6884] __sys_sendmsg+0x183/0x260 [ 135.624782][ T6884] ? __pfx___sys_sendmsg+0x10/0x10 [ 135.624829][ T6884] __do_fast_syscall_32+0x229/0x6e0 [ 135.624846][ T6884] ? do_fast_syscall_32+0x33/0x70 [ 135.624862][ T6884] ? lockdep_hardirqs_on+0x7a/0x110 [ 135.624885][ T6884] ? asm_int80_emulation+0x1a/0x20 [ 135.624902][ T6884] ? do_int80_emulation+0x286/0x530 [ 135.624917][ T6884] ? trace_irq_disable+0x3b/0x140 [ 135.624945][ T6884] do_fast_syscall_32+0x33/0x70 [ 135.624962][ T6884] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 135.624983][ T6884] RIP: 0023:0xf7fd901c [ 135.624998][ T6884] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 135.625012][ T6884] RSP: 002b:00000000f549650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 135.625032][ T6884] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000480 [ 135.625044][ T6884] RDX: 0000000006008040 RSI: 0000000000000000 RDI: 0000000000000000 [ 135.625055][ T6884] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 135.625065][ T6884] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 135.625075][ T6884] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 135.625103][ T6884] [ 135.642372][ T29] audit: type=1326 audit(1779212259.520:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6882 comm="syz.1.333" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70cf01c code=0x0 [ 135.659164][ T86] usb 4-1: USB disconnect, device number 12 [ 135.756188][ T29] audit: type=1326 audit(1779212259.620:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6882 comm="syz.1.333" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70cf01c code=0x0 [ 135.988883][ T6254] udevd[6254]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 136.059525][ T5698] usb 2-1: USB disconnect, device number 9 [ 136.121599][ T5932] udevd[5932]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 136.587024][ T86] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 136.765319][ T86] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 136.774687][ T86] usb 3-1: config 1 has no interface number 0 [ 136.782751][ T86] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.795967][ T86] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 136.813974][ T86] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.847680][ T86] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 136.858587][ T86] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.869696][ T86] usb 3-1: Product: syz [ 136.878703][ T86] usb 3-1: Manufacturer: syz [ 136.884623][ T86] usb 3-1: SerialNumber: syz [ 137.306844][ T6898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.324187][ T6898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.351068][ T86] cdc_ncm 3-1:1.1: bind() failure [ 137.391386][ T86] usb 3-1: USB disconnect, device number 9 [ 138.084742][ T5713] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 138.247869][ T6918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.345'. [ 138.256866][ T5713] usb 5-1: Using ep0 maxpacket: 8 [ 138.275783][ T5713] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 138.297008][ T5713] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 138.316426][ T5713] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.346215][ T5713] usb 5-1: Product: syz [ 138.359966][ T5713] usb 5-1: Manufacturer: syz [ 138.377537][ T5713] usb 5-1: SerialNumber: syz [ 138.398885][ T5713] usb 5-1: config 0 descriptor?? [ 138.415773][ T5713] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 138.435973][ T5713] usb 5-1: setting power ON [ 138.464013][ T5713] dvb-usb: bulk message failed: -22 (2/0) [ 138.501027][ T5713] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 138.521782][ T5713] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 138.545359][ T5713] usb 5-1: media controller created [ 138.589852][ T5713] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 138.617063][ T6910] dvb-usb: bulk message failed: -22 (3/0) [ 138.652199][ T6910] cxusb: i2c wr: len=79 is too big! [ 138.652199][ T6910] [ 138.698192][ T5713] usb 5-1: selecting invalid altsetting 6 [ 138.704297][ T5713] usb 5-1: digital interface selection failed (-22) [ 138.712187][ T5713] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 138.733684][ T5713] usb 5-1: setting power OFF [ 138.749918][ T5713] dvb-usb: bulk message failed: -22 (2/0) [ 138.786699][ T5713] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 138.810410][ T5713] (NULL device *): no alternate interface [ 138.890990][ T6940] sock: sock_set_timeout: `syz.3.352' (pid 6940) tries to set negative timeout [ 139.273419][ T5713] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 139.331784][ T5713] usb 5-1: USB disconnect, device number 12 [ 139.473200][ T6969] FAULT_INJECTION: forcing a failure. [ 139.473200][ T6969] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.501840][ T6970] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 139.527497][ T6969] CPU: 1 UID: 0 PID: 6969 Comm: syz.4.357 Tainted: G L syzkaller #0 PREEMPT(full) [ 139.527527][ T6969] Tainted: [L]=SOFTLOCKUP [ 139.527533][ T6969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 139.527543][ T6969] Call Trace: [ 139.527549][ T6969] [ 139.527556][ T6969] dump_stack_lvl+0xe8/0x150 [ 139.527581][ T6969] should_fail_ex+0x412/0x560 [ 139.527608][ T6969] _copy_from_user+0x2d/0xb0 [ 139.527632][ T6969] get_compat_msghdr+0xb3/0x4c0 [ 139.527659][ T6969] ? _parse_integer_limit+0x1ae/0x1f0 [ 139.527683][ T6969] ? __pfx_get_compat_msghdr+0x10/0x10 [ 139.527707][ T6969] ? kstrtoull+0x12f/0x1d0 [ 139.527732][ T6969] ___sys_sendmsg+0x201/0x360 [ 139.527755][ T6969] ? __lock_acquire+0x6b5/0x2cf0 [ 139.527776][ T6969] ? __pfx____sys_sendmsg+0x10/0x10 [ 139.527809][ T6969] ? get_pid_task+0x20/0x1f0 [ 139.527829][ T6969] ? get_pid_task+0x20/0x1f0 [ 139.527846][ T6969] ? get_pid_task+0x20/0x1f0 [ 139.527888][ T6969] ? __fget_files+0x2a/0x420 [ 139.527908][ T6969] ? __fget_files+0x3a0/0x420 [ 139.527935][ T6969] __sys_sendmsg+0x183/0x260 [ 139.527958][ T6969] ? __pfx___sys_sendmsg+0x10/0x10 [ 139.527999][ T6969] __do_fast_syscall_32+0x229/0x6e0 [ 139.528016][ T6969] ? do_fast_syscall_32+0x33/0x70 [ 139.528030][ T6969] ? lockdep_hardirqs_on+0x7a/0x110 [ 139.528051][ T6969] ? asm_int80_emulation+0x1a/0x20 [ 139.528068][ T6969] ? do_int80_emulation+0x286/0x530 [ 139.528088][ T6969] do_fast_syscall_32+0x33/0x70 [ 139.528105][ T6969] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 139.528124][ T6969] RIP: 0023:0xf7f7401c [ 139.528140][ T6969] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 139.528153][ T6969] RSP: 002b:00000000f543650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 139.528172][ T6969] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800000c0 [ 139.528182][ T6969] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 139.528192][ T6969] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 139.528201][ T6969] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 139.528210][ T6969] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 139.528235][ T6969] [ 139.559667][ T6953] cgroup: fork rejected by pids controller in /syz0 [ 139.658779][ T29] audit: type=1326 audit(1779212263.540:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6967 comm="syz.1.355" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cf01c code=0x7ffc0000 [ 139.661695][ T29] audit: type=1326 audit(1779212263.540:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6967 comm="syz.1.355" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cf01c code=0x7ffc0000 [ 139.661835][ T29] audit: type=1326 audit(1779212263.540:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6967 comm="syz.1.355" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cf01c code=0x7ffc0000 [ 139.942681][ T7013] FAULT_INJECTION: forcing a failure. [ 139.942681][ T7013] name failslab, interval 1, probability 0, space 0, times 0 [ 139.942732][ T7013] CPU: 0 UID: 0 PID: 7013 Comm: syz.0.358 Tainted: G L syzkaller #0 PREEMPT(full) [ 139.942746][ T7013] Tainted: [L]=SOFTLOCKUP [ 139.942750][ T7013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 139.942756][ T7013] Call Trace: [ 139.942760][ T7013] [ 139.942764][ T7013] dump_stack_lvl+0xe8/0x150 [ 139.942781][ T7013] should_fail_ex+0x412/0x560 [ 139.942798][ T7013] should_failslab+0xa8/0x100 [ 139.942817][ T7013] __kmalloc_noprof+0xe8/0x760 [ 139.942831][ T7013] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 139.942846][ T7013] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 139.942867][ T7013] genl_family_rcv_msg_doit+0xd9/0x330 [ 139.942879][ T7013] ? __asan_memcpy+0x40/0x70 [ 139.942892][ T7013] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 139.942905][ T7013] ? __pfx_genl_get_cmd+0x10/0x10 [ 139.942923][ T7013] genl_rcv_msg+0x61c/0x7a0 [ 139.942937][ T7013] ? __pfx_genl_rcv_msg+0x10/0x10 [ 139.942951][ T7013] ? __pfx_ctrl_getfamily+0x10/0x10 [ 139.942961][ T7013] ? __pfx_ref_tracker_free+0x10/0x10 [ 139.942974][ T7013] ? __asan_memcpy+0x40/0x70 [ 139.942985][ T7013] ? __skb_clone+0x63/0x7a0 [ 139.943003][ T7013] netlink_rcv_skb+0x232/0x4b0 [ 139.943017][ T7013] ? __pfx_genl_rcv_msg+0x10/0x10 [ 139.943028][ T7013] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 139.943049][ T7013] ? down_read+0x270/0x2e0 [ 139.943058][ T7013] ? genl_rcv+0xd/0x40 [ 139.943069][ T7013] genl_rcv+0x28/0x40 [ 139.943078][ T7013] netlink_unicast+0x75c/0x8e0 [ 139.943096][ T7013] netlink_sendmsg+0x813/0xb40 [ 139.943114][ T7013] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.943129][ T7013] ? aa_sock_msg_perm+0xf1/0x1b0 [ 139.943143][ T7013] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 139.943157][ T7013] ? __pfx_netlink_sendmsg+0x10/0x10 [ 139.943170][ T7013] __sys_sendto+0x672/0x710 [ 139.943185][ T7013] ? __pfx___sys_sendto+0x10/0x10 [ 139.943204][ T7013] ? __might_fault+0xaf/0x130 [ 139.943230][ T7013] __ia32_compat_sys_socketcall+0x765/0xa10 [ 139.943242][ T7013] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 139.943259][ T7013] ? ksys_write+0x242/0x270 [ 139.943274][ T7013] ? __pfx_ksys_write+0x10/0x10 [ 139.943290][ T7013] ? asm_int80_emulation+0x1a/0x20 [ 139.943302][ T7013] do_int80_emulation+0x181/0x530 [ 139.943311][ T7013] ? trace_irq_disable+0x3b/0x140 [ 139.943325][ T7013] ? asm_int80_emulation+0x1a/0x20 [ 139.943334][ T7013] ? clear_bhb_loop+0x40/0x90 [ 139.943343][ T7013] ? clear_bhb_loop+0x40/0x90 [ 139.943354][ T7013] asm_int80_emulation+0x1a/0x20 [ 139.943363][ T7013] RIP: 0023:0xf71d61ab [ 139.943373][ T7013] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 139.943381][ T7013] RSP: 002b:00000000f549534c EFLAGS: 00000246 ORIG_RAX: 0000000000000066 [ 139.943392][ T7013] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000f54953f4 [ 139.943398][ T7013] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 139.943404][ T7013] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 139.943409][ T7013] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 139.943415][ T7013] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 139.943430][ T7013] [ 140.146768][ T7017] FAULT_INJECTION: forcing a failure. [ 140.146768][ T7017] name failslab, interval 1, probability 0, space 0, times 0 [ 140.146897][ T7017] CPU: 0 UID: 0 PID: 7017 Comm: syz.3.361 Tainted: G L syzkaller #0 PREEMPT(full) [ 140.146919][ T7017] Tainted: [L]=SOFTLOCKUP [ 140.146924][ T7017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 140.146931][ T7017] Call Trace: [ 140.146936][ T7017] [ 140.146941][ T7017] dump_stack_lvl+0xe8/0x150 [ 140.146957][ T7017] should_fail_ex+0x412/0x560 [ 140.146973][ T7017] should_failslab+0xa8/0x100 [ 140.146989][ T7017] __kmalloc_cache_noprof+0x88/0x660 [ 140.147003][ T7017] ? tcf_chain_create+0xb0/0x310 [ 140.147020][ T7017] tcf_chain_create+0xb0/0x310 [ 140.147036][ T7017] __tcf_chain_get+0x111/0x3c0 [ 140.147050][ T7017] tc_new_tfilter+0x77e/0x1780 [ 140.147060][ T7017] ? kmem_cache_free+0x182/0x650 [ 140.147084][ T7017] ? __pfx_tc_new_tfilter+0x10/0x10 [ 140.147101][ T7017] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 140.147121][ T7017] ? __pfx_tc_new_tfilter+0x10/0x10 [ 140.147130][ T7017] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 140.147144][ T7017] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 140.147155][ T7017] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 140.147166][ T7017] ? ref_tracker_free+0x693/0x840 [ 140.147181][ T7017] ? __pfx_ref_tracker_free+0x10/0x10 [ 140.147193][ T7017] ? __asan_memcpy+0x40/0x70 [ 140.147203][ T7017] ? __skb_clone+0x63/0x7a0 [ 140.147221][ T7017] netlink_rcv_skb+0x232/0x4b0 [ 140.147235][ T7017] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 140.147248][ T7017] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 140.147268][ T7017] ? netlink_deliver_tap+0x2e/0x1b0 [ 140.147280][ T7017] ? netlink_deliver_tap+0x2e/0x1b0 [ 140.147305][ T7017] netlink_unicast+0x75c/0x8e0 [ 140.147333][ T7017] netlink_sendmsg+0x813/0xb40 [ 140.147352][ T7017] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.147367][ T7017] ? aa_sock_msg_perm+0xf1/0x1b0 [ 140.147381][ T7017] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 140.147396][ T7017] ____sys_sendmsg+0x972/0x9f0 [ 140.147415][ T7017] ? __pfx_____sys_sendmsg+0x10/0x10 [ 140.147431][ T7017] ? kstrtoull+0x12f/0x1d0 [ 140.147446][ T7017] ___sys_sendmsg+0x2a5/0x360 [ 140.147459][ T7017] ? __lock_acquire+0x6b5/0x2cf0 [ 140.147472][ T7017] ? __pfx____sys_sendmsg+0x10/0x10 [ 140.147487][ T7017] ? get_pid_task+0x20/0x1f0 [ 140.147502][ T7017] ? get_pid_task+0x20/0x1f0 [ 140.147512][ T7017] ? get_pid_task+0x20/0x1f0 [ 140.147538][ T7017] ? __fget_files+0x2a/0x420 [ 140.147549][ T7017] ? __fget_files+0x3a0/0x420 [ 140.147565][ T7017] __sys_sendmsg+0x183/0x260 [ 140.147585][ T7017] ? __pfx___sys_sendmsg+0x10/0x10 [ 140.147610][ T7017] __do_fast_syscall_32+0x229/0x6e0 [ 140.147621][ T7017] ? do_fast_syscall_32+0x33/0x70 [ 140.147629][ T7017] ? lockdep_hardirqs_on+0x7a/0x110 [ 140.147642][ T7017] ? asm_int80_emulation+0x1a/0x20 [ 140.147652][ T7017] ? do_int80_emulation+0x286/0x530 [ 140.147660][ T7017] ? trace_irq_disable+0x3b/0x140 [ 140.147676][ T7017] do_fast_syscall_32+0x33/0x70 [ 140.147685][ T7017] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 140.147697][ T7017] RIP: 0023:0xf704f01c [ 140.147706][ T7017] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 140.147715][ T7017] RSP: 002b:00000000f543d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 140.147726][ T7017] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080006040 [ 140.147732][ T7017] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 140.147738][ T7017] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 140.147743][ T7017] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 140.147749][ T7017] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 140.147763][ T7017] [ 140.868600][ T7039] netlink: 20 bytes leftover after parsing attributes in process `syz.1.369'. [ 141.031043][ T7043] macvtap1: entered allmulticast mode [ 141.031279][ T7043] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 141.031447][ T7043] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 141.039469][ T7043] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 141.088384][ T7043] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 141.196925][ T5713] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 141.373750][ T5684] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 141.539828][ T5684] usb 2-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 141.539865][ T5684] usb 2-1: config 0 interface 0 has no altsetting 0 [ 141.542312][ T5684] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 141.542341][ T5684] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 141.542362][ T5684] usb 2-1: Product: syz [ 141.542377][ T5684] usb 2-1: Manufacturer: syz [ 141.542392][ T5684] usb 2-1: SerialNumber: syz [ 141.557260][ T5684] usb 2-1: config 0 descriptor?? [ 141.596033][ T7058] netlink: 20 bytes leftover after parsing attributes in process `syz.0.377'. [ 141.647983][ T5684] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 141.737813][ T6254] udevd[6254]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 142.084507][ T5698] usb 2-1: USB disconnect, device number 10 [ 142.263827][ T5684] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 142.415108][ T5684] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 142.771311][ T5684] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 142.782463][ T5684] usb 1-1: config 220 has no interface number 2 [ 142.789151][ T5684] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 142.806746][ T5684] usb 1-1: config 220 interface 0 has no altsetting 0 [ 142.821175][ T5684] usb 1-1: config 220 interface 76 has no altsetting 0 [ 142.833657][ T5684] usb 1-1: config 220 interface 1 has no altsetting 0 [ 142.889928][ T5684] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 142.941371][ T5684] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.975550][ T5684] usb 1-1: Product: syz [ 142.985371][ T5684] usb 1-1: Manufacturer: syz [ 142.999565][ T5684] usb 1-1: SerialNumber: syz [ 143.280284][ T7080] loop4: detected capacity change from 0 to 7 [ 143.335572][ T7080] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 143.350938][ T7080] loop4: partition table partially beyond EOD, truncated [ 143.363800][ T7080] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 143.556413][ T7002] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.709193][ T7002] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.817499][ T4993] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 143.822993][ T4993] loop4: partition table partially beyond EOD, truncated [ 143.824820][ T7002] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.831001][ T4993] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 143.976035][ T7002] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.013656][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 144.083169][ T4993] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 144.103354][ T4993] loop4: partition table partially beyond EOD, truncated [ 144.113844][ T4993] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 144.140505][ T5629] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 144.152893][ T5629] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 144.162839][ T5629] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 144.170419][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 144.182053][ T5629] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 144.190816][ T9] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 144.204189][ T9] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 144.215765][ T9] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 144.228713][ T5629] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 144.237054][ T5361] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 144.247322][ T9] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 144.260320][ T9] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 144.272040][ T9] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 144.280077][ T5631] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 144.284109][ T9] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 144.304707][ T9] usb 2-1: config 168 interface 0 has no altsetting 0 [ 144.307330][ T5631] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 144.312658][ T9] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 144.328180][ T5631] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 144.328815][ T9] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 144.338767][ T5631] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 144.349065][ T9] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 144.354716][ T5631] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 144.404161][ T5361] usb 4-1: Using ep0 maxpacket: 16 [ 144.420582][ T5361] usb 4-1: unable to get BOS descriptor or descriptor too short [ 144.447039][ T5361] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 196, changing to 7 [ 144.474196][ T9] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 144.499260][ T5361] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 144.514538][ T9] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 144.538606][ T5361] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.556711][ T9] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 144.592207][ T5361] usb 4-1: Product: syz [ 144.603883][ T5361] usb 4-1: Manufacturer: syz [ 144.610299][ T5361] usb 4-1: SerialNumber: syz [ 144.615483][ T9] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 144.677732][ T9] usb 2-1: config 168 interface 0 has no altsetting 0 [ 144.698066][ T5684] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 144.710733][ T5684] uvcvideo 1-1:220.0: No valid video chain found. [ 144.718645][ T9] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 144.726931][ T9] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 144.738679][ T5684] usb 1-1: selecting invalid altsetting 0 [ 144.748665][ T9] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 144.791000][ T5684] usb 1-1: selecting invalid altsetting 0 [ 144.801258][ T9] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 144.815415][ T5684] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 144.842827][ T9] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 144.861304][ T9] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 144.881423][ T5684] usb 1-1: USB disconnect, device number 12 [ 144.909919][ T9] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 144.927665][ T9] usb 2-1: config 168 interface 0 has no altsetting 0 [ 144.938584][ T9] usb 2-1: string descriptor 0 read error: -22 [ 144.946192][ T9] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 144.990198][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.063421][ T4993] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 145.075583][ T9] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 145.093249][ T4993] loop4: partition table partially beyond EOD, truncated [ 145.112637][ T4993] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 145.423025][ T9] usb 2-1: USB disconnect, device number 11 [ 145.429591][ T7081] usb 2-1: Couldn't submit interrupt_out_urb -19 [ 145.494255][ T5361] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 145.504855][ T5361] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 145.693775][ T5361] usb 4-1: USB disconnect, device number 13 [ 145.754625][ T5932] udevd[5932]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 145.792294][ T7002] bond0 (unregistering): Released all slaves [ 145.837871][ T7110] bridge0: entered allmulticast mode [ 145.837925][ T7107] FAULT_INJECTION: forcing a failure. [ 145.837925][ T7107] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.875150][ T7107] CPU: 0 UID: 0 PID: 7107 Comm: syz.4.389 Tainted: G L syzkaller #0 PREEMPT(full) [ 145.875179][ T7107] Tainted: [L]=SOFTLOCKUP [ 145.875185][ T7107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 145.875194][ T7107] Call Trace: [ 145.875202][ T7107] [ 145.875209][ T7107] dump_stack_lvl+0xe8/0x150 [ 145.875235][ T7107] should_fail_ex+0x412/0x560 [ 145.875249][ T5289] 8021q: adding VLAN 0 to HW filter on device eth1 [ 145.875261][ T7107] _copy_to_user+0x31/0xb0 [ 145.875285][ T7107] simple_read_from_buffer+0xe1/0x170 [ 145.875307][ T7107] proc_fail_nth_read+0x1bb/0x230 [ 145.875331][ T7107] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 145.875355][ T7107] ? rw_verify_area+0x2a6/0x4d0 [ 145.875378][ T7107] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 145.875400][ T7107] vfs_read+0x20c/0xa70 [ 145.875425][ T7107] ? __pfx___mutex_lock+0x10/0x10 [ 145.875443][ T7107] ? __pfx_vfs_read+0x10/0x10 [ 145.875467][ T7107] ? __fget_files+0x2a/0x420 [ 145.875490][ T7107] ? __fget_files+0x3a0/0x420 [ 145.875508][ T7107] ? __fget_files+0x2a/0x420 [ 145.875535][ T7107] ksys_read+0x150/0x270 [ 145.875560][ T7107] ? __pfx_ksys_read+0x10/0x10 [ 145.875587][ T7107] ? asm_int80_emulation+0x1a/0x20 [ 145.875616][ T7107] do_int80_emulation+0x181/0x530 [ 145.875633][ T7107] ? trace_irq_disable+0x3b/0x140 [ 145.875656][ T7107] ? asm_int80_emulation+0x1a/0x20 [ 145.875672][ T7107] ? clear_bhb_loop+0x40/0x90 [ 145.875688][ T7107] ? clear_bhb_loop+0x40/0x90 [ 145.875708][ T7107] asm_int80_emulation+0x1a/0x20 [ 145.875724][ T7107] RIP: 0023:0xf71761ab [ 145.875741][ T7107] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 145.875754][ T7107] RSP: 002b:00000000f54364bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 145.875772][ T7107] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000f54365d0 [ 145.875783][ T7107] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 145.875793][ T7107] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 145.875802][ T7107] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 145.875812][ T7107] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 145.875838][ T7107] [ 146.138620][ T7002] : left promiscuous mode [ 146.433621][ T5631] Bluetooth: hci1: command tx timeout [ 146.678233][ T7002] hsr_slave_0: left promiscuous mode [ 146.690625][ T7002] hsr_slave_1: left promiscuous mode [ 146.725975][ T7002] veth1_macvtap: left promiscuous mode [ 146.732493][ T7002] veth0_macvtap: left promiscuous mode [ 146.738747][ T7002] veth1_vlan: left promiscuous mode [ 146.746334][ T7002] veth0_vlan: left promiscuous mode [ 147.420672][ T7161] netlink: 4 bytes leftover after parsing attributes in process `syz.3.396'. [ 147.519021][ T5289] 8021q: adding VLAN 0 to HW filter on device eth2 [ 147.789650][ T7174] kAFS: unable to lookup cell '(,' [ 147.934913][ T7094] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.963288][ T7094] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.991377][ T7094] bridge_slave_0: entered allmulticast mode [ 148.037295][ T7094] bridge_slave_0: entered promiscuous mode [ 148.083054][ T7181] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.091551][ T7181] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.123421][ T7181] bridge0: entered allmulticast mode [ 148.166722][ T7094] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.220019][ T7094] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.251583][ T7094] bridge_slave_1: entered allmulticast mode [ 148.298105][ T7094] bridge_slave_1: entered promiscuous mode [ 148.459053][ T7094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.509929][ T7094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.513939][ T5631] Bluetooth: hci1: command tx timeout [ 148.666110][ T7200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.403'. [ 148.709370][ T7094] team0: Port device team_slave_0 added [ 148.751546][ T7094] team0: Port device team_slave_1 added [ 148.896595][ T7094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.924672][ T7094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 148.984658][ T7094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.116564][ T7094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.132930][ T7094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 149.175967][ T7094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.576502][ T5289] 8021q: adding VLAN 0 to HW filter on device eth3 [ 149.606517][ T7218] FAULT_INJECTION: forcing a failure. [ 149.606517][ T7218] name failslab, interval 1, probability 0, space 0, times 0 [ 149.620215][ T7218] CPU: 1 UID: 0 PID: 7218 Comm: syz.4.405 Tainted: G L syzkaller #0 PREEMPT(full) [ 149.620233][ T7218] Tainted: [L]=SOFTLOCKUP [ 149.620237][ T7218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 149.620244][ T7218] Call Trace: [ 149.620249][ T7218] [ 149.620254][ T7218] dump_stack_lvl+0xe8/0x150 [ 149.620271][ T7218] should_fail_ex+0x412/0x560 [ 149.620292][ T7218] should_failslab+0xa8/0x100 [ 149.620317][ T7218] __kmalloc_cache_noprof+0x88/0x660 [ 149.620340][ T7218] ? tipc_nametbl_lookup_mcast_sockets+0x624/0xd30 [ 149.620360][ T7218] ? tipc_nametbl_lookup_mcast_sockets+0x5b/0xd30 [ 149.620383][ T7218] tipc_nametbl_lookup_mcast_sockets+0x624/0xd30 [ 149.620398][ T7218] ? tipc_nametbl_lookup_mcast_sockets+0x5b/0xd30 [ 149.620415][ T7218] tipc_sk_mcast_rcv+0x594/0xf30 [ 149.620426][ T7218] ? __lock_acquire+0x6b5/0x2cf0 [ 149.620443][ T7218] ? __pfx_tipc_sk_mcast_rcv+0x10/0x10 [ 149.620458][ T7218] ? tipc_mcast_xmit+0x11f4/0x19e0 [ 149.620477][ T7218] ? tipc_mcast_xmit+0x11f4/0x19e0 [ 149.620491][ T7218] tipc_mcast_xmit+0x1385/0x19e0 [ 149.620507][ T7218] ? __might_fault+0xaf/0x130 [ 149.620520][ T7218] ? __pfx_tipc_mcast_xmit+0x10/0x10 [ 149.620532][ T7218] ? _copy_from_iter+0x2d3/0x1670 [ 149.620547][ T7218] ? rcu_is_watching+0x15/0xb0 [ 149.620562][ T7218] ? __pfx__copy_from_iter+0x10/0x10 [ 149.620578][ T7218] ? tipc_msg_build+0x40d/0xf00 [ 149.620594][ T7218] ? tipc_msg_build+0x482/0xf00 [ 149.620620][ T7218] ? trace_tipc_sk_sendmcast+0x93/0x230 [ 149.620635][ T7218] __tipc_sendmsg+0x218e/0x2bc0 [ 149.620657][ T7218] ? __pfx___tipc_sendmsg+0x10/0x10 [ 149.620678][ T7218] ? process_measurement+0x7ce/0x1c80 [ 149.620688][ T7218] ? __pfx_woken_wake_function+0x10/0x10 [ 149.620699][ T7218] ? up_write+0x1ab/0x410 [ 149.620715][ T7218] ? process_measurement+0x195e/0x1c80 [ 149.620724][ T7218] ? process_measurement+0x321/0x1c80 [ 149.620749][ T7218] ? __pfx_process_measurement+0x10/0x10 [ 149.620776][ T7218] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 149.620788][ T7218] ? __lock_acquire+0x6b5/0x2cf0 [ 149.620797][ T7218] ? look_up_lock_class+0x57/0x110 [ 149.620812][ T7218] ? register_lock_class+0x31/0x2e0 [ 149.620824][ T7218] __tipc_sendstream+0x104e/0x1280 [ 149.620857][ T7218] ? do_raw_spin_lock+0x12b/0x2f0 [ 149.620872][ T7218] ? __pfx___tipc_sendstream+0x10/0x10 [ 149.620887][ T7218] ? tipc_send_packet+0x6e/0xa0 [ 149.620901][ T7218] ? __local_bh_enable_ip+0xd0/0x130 [ 149.620914][ T7218] tipc_send_packet+0x7c/0xa0 [ 149.620928][ T7218] ____sys_sendmsg+0x972/0x9f0 [ 149.620947][ T7218] ? __pfx_____sys_sendmsg+0x10/0x10 [ 149.620963][ T7218] ? kstrtoull+0x12f/0x1d0 [ 149.620978][ T7218] ___sys_sendmsg+0x2a5/0x360 [ 149.620991][ T7218] ? __lock_acquire+0x6b5/0x2cf0 [ 149.621003][ T7218] ? __pfx____sys_sendmsg+0x10/0x10 [ 149.621017][ T7218] ? get_pid_task+0x20/0x1f0 [ 149.621029][ T7218] ? get_pid_task+0x20/0x1f0 [ 149.621040][ T7218] ? get_pid_task+0x20/0x1f0 [ 149.621065][ T7218] ? __fget_files+0x2a/0x420 [ 149.621076][ T7218] ? __fget_files+0x3a0/0x420 [ 149.621091][ T7218] __sys_sendmsg+0x183/0x260 [ 149.621106][ T7218] ? __pfx___sys_sendmsg+0x10/0x10 [ 149.621130][ T7218] __do_fast_syscall_32+0x229/0x6e0 [ 149.621140][ T7218] ? do_fast_syscall_32+0x33/0x70 [ 149.621148][ T7218] ? lockdep_hardirqs_on+0x7a/0x110 [ 149.621161][ T7218] ? asm_int80_emulation+0x1a/0x20 [ 149.621170][ T7218] ? do_int80_emulation+0x286/0x530 [ 149.621179][ T7218] ? trace_irq_disable+0x3b/0x140 [ 149.621195][ T7218] do_fast_syscall_32+0x33/0x70 [ 149.621204][ T7218] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 149.621216][ T7218] RIP: 0023:0xf7f7401c [ 149.621226][ T7218] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 149.621234][ T7218] RSP: 002b:00000000f543650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 149.621245][ T7218] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000380 [ 149.621252][ T7218] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 149.621258][ T7218] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 149.621263][ T7218] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 149.621269][ T7218] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 149.621283][ T7218] [ 150.335771][ T7094] hsr_slave_0: entered promiscuous mode [ 150.360222][ T7094] hsr_slave_1: entered promiscuous mode [ 150.370725][ T7094] debugfs: 'hsr0' already exists in 'hsr' [ 150.388256][ T7094] Cannot create hsr debugfs directory [ 150.437165][ T7227] binder: 7226:7227 unknown command 0 [ 150.468956][ T7227] binder: 7226:7227 ioctl c0306201 80000080 returned -22 [ 150.593673][ T5631] Bluetooth: hci1: command tx timeout [ 150.922694][ T7243] FAULT_INJECTION: forcing a failure. [ 150.922694][ T7243] name failslab, interval 1, probability 0, space 0, times 0 [ 150.986976][ T7243] CPU: 0 UID: 0 PID: 7243 Comm: syz.1.411 Tainted: G L syzkaller #0 PREEMPT(full) [ 150.987003][ T7243] Tainted: [L]=SOFTLOCKUP [ 150.987009][ T7243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 150.987020][ T7243] Call Trace: [ 150.987026][ T7243] [ 150.987033][ T7243] dump_stack_lvl+0xe8/0x150 [ 150.987058][ T7243] should_fail_ex+0x412/0x560 [ 150.987081][ T7243] should_failslab+0xa8/0x100 [ 150.987105][ T7243] __kmalloc_node_track_caller_noprof+0xeb/0x7b0 [ 150.987128][ T7243] ? __kasan_kmalloc+0x93/0xb0 [ 150.987151][ T7243] ? __request_module+0x2ec/0x630 [ 150.987169][ T7243] ? __kmalloc_cache_noprof+0x31c/0x660 [ 150.987195][ T7243] kstrdup+0x42/0x100 [ 150.987214][ T7243] __request_module+0x2ec/0x630 [ 150.987237][ T7243] ? rtnl_link_ops_get+0x23/0x250 [ 150.987261][ T7243] ? __pfx___request_module+0x10/0x10 [ 150.987292][ T7243] ? rtnl_link_ops_get+0x23/0x250 [ 150.987313][ T7243] ? rtnl_link_ops_get+0x23/0x250 [ 150.987337][ T7243] ? rtnl_link_ops_get+0x215/0x250 [ 150.987362][ T7243] rtnl_newlink+0x60a/0x1bb0 [ 150.987383][ T7243] ? unwind_next_frame+0xa6/0x2550 [ 150.987414][ T7243] ? __pfx_rtnl_newlink+0x10/0x10 [ 150.987441][ T7243] ? __lock_acquire+0x6b5/0x2cf0 [ 150.987463][ T7243] ? __lock_acquire+0x6b5/0x2cf0 [ 150.987490][ T7243] ? unwind_next_frame+0xa6/0x2550 [ 150.987516][ T7243] ? unwind_next_frame+0xa6/0x2550 [ 150.987539][ T7243] ? is_bpf_text_address+0x26/0x2b0 [ 150.987568][ T7243] ? is_bpf_text_address+0x26/0x2b0 [ 150.987590][ T7243] ? __lock_acquire+0x6b5/0x2cf0 [ 150.987612][ T7243] ? kernel_text_address+0xa5/0xe0 [ 150.987636][ T7243] ? __kernel_text_address+0xd/0x30 [ 150.987658][ T7243] ? unwind_get_return_address+0x4d/0x90 [ 150.987685][ T7243] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 150.987708][ T7243] ? arch_stack_walk+0xfb/0x150 [ 150.987738][ T7243] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 150.987775][ T7243] ? __pfx_rtnl_newlink+0x10/0x10 [ 150.987796][ T7243] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 150.987816][ T7243] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 150.987839][ T7243] ? netlink_sendmsg+0x5d4/0xb40 [ 150.987864][ T7243] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 150.987885][ T7243] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 150.987908][ T7243] ? __lock_acquire+0x6b5/0x2cf0 [ 150.987938][ T7243] netlink_rcv_skb+0x232/0x4b0 [ 150.987961][ T7243] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 150.987985][ T7243] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 150.988023][ T7243] ? netlink_deliver_tap+0x2e/0x1b0 [ 150.988045][ T7243] ? netlink_deliver_tap+0x2e/0x1b0 [ 150.988074][ T7243] netlink_unicast+0x75c/0x8e0 [ 150.988106][ T7243] netlink_sendmsg+0x813/0xb40 [ 150.988138][ T7243] ? __pfx_netlink_sendmsg+0x10/0x10 [ 150.988164][ T7243] ? aa_sock_msg_perm+0xf1/0x1b0 [ 150.988188][ T7243] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 150.988214][ T7243] ____sys_sendmsg+0x972/0x9f0 [ 150.988247][ T7243] ? __pfx_____sys_sendmsg+0x10/0x10 [ 150.988275][ T7243] ? kstrtoull+0x12f/0x1d0 [ 150.988303][ T7243] ___sys_sendmsg+0x2a5/0x360 [ 150.988325][ T7243] ? __lock_acquire+0x6b5/0x2cf0 [ 150.988347][ T7243] ? __pfx____sys_sendmsg+0x10/0x10 [ 150.988373][ T7243] ? get_pid_task+0x20/0x1f0 [ 150.988394][ T7243] ? get_pid_task+0x20/0x1f0 [ 150.988413][ T7243] ? get_pid_task+0x20/0x1f0 [ 150.988460][ T7243] ? __fget_files+0x2a/0x420 [ 150.988479][ T7243] ? __fget_files+0x3a0/0x420 [ 150.988509][ T7243] __sys_sendmsg+0x183/0x260 [ 150.988535][ T7243] ? __pfx___sys_sendmsg+0x10/0x10 [ 150.988580][ T7243] __do_fast_syscall_32+0x229/0x6e0 [ 150.988598][ T7243] ? do_fast_syscall_32+0x33/0x70 [ 150.988612][ T7243] ? lockdep_hardirqs_on+0x7a/0x110 [ 150.988634][ T7243] ? asm_int80_emulation+0x1a/0x20 [ 150.988649][ T7243] ? do_int80_emulation+0x286/0x530 [ 150.988671][ T7243] ? trace_irq_disable+0x3b/0x140 [ 150.988699][ T7243] do_fast_syscall_32+0x33/0x70 [ 150.988716][ T7243] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 150.988737][ T7243] RIP: 0023:0xf70cf01c [ 150.988753][ T7243] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 150.988768][ T7243] RSP: 002b:00000000f54bd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 150.988787][ T7243] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000140 [ 150.988799][ T7243] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 150.988809][ T7243] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 150.988819][ T7243] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 150.988829][ T7243] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 150.988856][ T7243] [ 151.616396][ T7258] program syz.1.415 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 151.753672][ T86] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 151.914945][ T86] usb 1-1: Using ep0 maxpacket: 32 [ 151.922119][ T86] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 151.937832][ T86] usb 1-1: config 0 has no interface number 0 [ 151.967382][ T86] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 151.979970][ T7274] kAFS: unable to lookup cell '(,' [ 152.016541][ T86] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.046721][ T86] usb 1-1: Product: syz [ 152.063909][ T86] usb 1-1: Manufacturer: syz [ 152.079977][ T86] usb 1-1: SerialNumber: syz [ 152.101422][ T86] usb 1-1: config 0 descriptor?? [ 152.137505][ T86] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 152.372390][ T86] usb 1-1: qt2_attach - failed to power on unit: -71 [ 152.408851][ T86] quatech2 1-1:0.51: probe with driver quatech2 failed with error -71 [ 152.484787][ T86] usb 1-1: USB disconnect, device number 13 [ 152.604968][ T7094] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 152.630968][ T7094] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 152.644190][ T7292] FAULT_INJECTION: forcing a failure. [ 152.644190][ T7292] name failslab, interval 1, probability 0, space 0, times 0 [ 152.665071][ T5631] Bluetooth: hci1: command tx timeout [ 152.669668][ T7292] CPU: 1 UID: 0 PID: 7292 Comm: syz.0.420 Tainted: G L syzkaller #0 PREEMPT(full) [ 152.669696][ T7292] Tainted: [L]=SOFTLOCKUP [ 152.669702][ T7292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 152.669712][ T7292] Call Trace: [ 152.669719][ T7292] [ 152.669726][ T7292] dump_stack_lvl+0xe8/0x150 [ 152.669754][ T7292] should_fail_ex+0x412/0x560 [ 152.669781][ T7292] should_failslab+0xa8/0x100 [ 152.669808][ T7292] __kmalloc_cache_noprof+0x88/0x660 [ 152.669832][ T7292] ? u32_init+0x19e/0x6d0 [ 152.669854][ T7292] u32_init+0x19e/0x6d0 [ 152.669869][ T7292] ? __raw_spin_lock_init+0x45/0x100 [ 152.669896][ T7292] tcf_proto_create+0x248/0x330 [ 152.669919][ T7292] tc_new_tfilter+0x12ff/0x1780 [ 152.669958][ T7292] ? __pfx_tc_new_tfilter+0x10/0x10 [ 152.669988][ T7292] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 152.670024][ T7292] ? __pfx_tc_new_tfilter+0x10/0x10 [ 152.670039][ T7292] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 152.670064][ T7292] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 152.670084][ T7292] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 152.670103][ T7292] ? ref_tracker_free+0x693/0x840 [ 152.670128][ T7292] ? __pfx_ref_tracker_free+0x10/0x10 [ 152.670148][ T7292] ? __asan_memcpy+0x40/0x70 [ 152.670166][ T7292] ? __skb_clone+0x63/0x7a0 [ 152.670196][ T7292] netlink_rcv_skb+0x232/0x4b0 [ 152.670221][ T7292] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 152.670244][ T7292] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 152.670277][ T7292] ? netlink_deliver_tap+0x2e/0x1b0 [ 152.670299][ T7292] ? netlink_deliver_tap+0x2e/0x1b0 [ 152.670327][ T7292] netlink_unicast+0x75c/0x8e0 [ 152.670365][ T7292] netlink_sendmsg+0x813/0xb40 [ 152.670397][ T7292] ? __pfx_netlink_sendmsg+0x10/0x10 [ 152.670423][ T7292] ? aa_sock_msg_perm+0xf1/0x1b0 [ 152.670447][ T7292] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 152.670471][ T7292] ____sys_sendmsg+0x972/0x9f0 [ 152.670502][ T7292] ? __pfx_____sys_sendmsg+0x10/0x10 [ 152.670528][ T7292] ? kstrtoull+0x12f/0x1d0 [ 152.670556][ T7292] ___sys_sendmsg+0x2a5/0x360 [ 152.670578][ T7292] ? __lock_acquire+0x6b5/0x2cf0 [ 152.670601][ T7292] ? __pfx____sys_sendmsg+0x10/0x10 [ 152.670626][ T7292] ? get_pid_task+0x20/0x1f0 [ 152.670646][ T7292] ? get_pid_task+0x20/0x1f0 [ 152.670664][ T7292] ? get_pid_task+0x20/0x1f0 [ 152.670710][ T7292] ? __fget_files+0x2a/0x420 [ 152.670728][ T7292] ? __fget_files+0x3a0/0x420 [ 152.670757][ T7292] __sys_sendmsg+0x183/0x260 [ 152.670784][ T7292] ? __pfx___sys_sendmsg+0x10/0x10 [ 152.670827][ T7292] __do_fast_syscall_32+0x229/0x6e0 [ 152.670845][ T7292] ? do_fast_syscall_32+0x33/0x70 [ 152.670860][ T7292] ? lockdep_hardirqs_on+0x7a/0x110 [ 152.670883][ T7292] ? asm_int80_emulation+0x1a/0x20 [ 152.670898][ T7292] ? do_int80_emulation+0x286/0x530 [ 152.670913][ T7292] ? trace_irq_disable+0x3b/0x140 [ 152.670940][ T7292] do_fast_syscall_32+0x33/0x70 [ 152.670957][ T7292] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 152.670977][ T7292] RIP: 0023:0xf7fd901c [ 152.670992][ T7292] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 152.671006][ T7292] RSP: 002b:00000000f549650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 152.671024][ T7292] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000580 [ 152.671035][ T7292] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 152.671045][ T7292] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 152.671055][ T7292] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 152.671065][ T7292] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 152.671090][ T7292] [ 152.735590][ T7094] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 153.038975][ T7094] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 153.088650][ T7094] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 153.131535][ T7094] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 153.170607][ T7094] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 153.219304][ T7094] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 153.263850][ T86] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 153.425678][ T86] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 153.442572][ T86] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.463276][ T7094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.470045][ T5699] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 153.482527][ T86] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.508154][ T86] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 153.530110][ T7094] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.546386][ T86] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 153.562915][ T7008] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.564572][ T86] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.570104][ T7008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.590456][ T86] usb 1-1: config 0 descriptor?? [ 153.635174][ T7008] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.642599][ T7008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.653701][ T5699] usb 2-1: Using ep0 maxpacket: 16 [ 153.665076][ T5699] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 153.710722][ T5699] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 153.724728][ T5699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.743648][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 153.752970][ T5699] usb 2-1: Product: syz [ 153.768231][ T5699] usb 2-1: Manufacturer: syz [ 153.780139][ T5699] usb 2-1: SerialNumber: syz [ 153.821836][ T5699] r8152-cfgselector 2-1: Unknown version 0x0000 [ 153.833379][ T5699] r8152-cfgselector 2-1: config 0 descriptor?? [ 153.905233][ T7094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.920947][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.947487][ T9] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 153.980741][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.031036][ T9] usb 4-1: config 0 descriptor?? [ 154.041763][ T7094] veth0_vlan: entered promiscuous mode [ 154.056581][ T86] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 154.060962][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 154.105267][ T7094] veth1_vlan: entered promiscuous mode [ 154.195262][ T7094] veth0_macvtap: entered promiscuous mode [ 154.211730][ T7094] veth1_macvtap: entered promiscuous mode [ 154.232557][ T86] usb 1-1: USB disconnect, device number 14 [ 154.282403][ T7094] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.291882][ T5699] r8152-cfgselector 2-1: USB disconnect, device number 12 [ 154.322700][ T7094] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.364215][ T5361] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 154.406154][ T199] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.426950][ T199] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.468670][ T199] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.478648][ T199] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.543829][ T5361] usb 5-1: Using ep0 maxpacket: 16 [ 154.566217][ T5361] usb 5-1: config index 0 descriptor too short (expected 51443, got 18) [ 154.592204][ T5361] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 154.603135][ T5361] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.623943][ T5361] usb 5-1: Product: syz [ 154.632687][ T5361] usb 5-1: Manufacturer: syz [ 154.641537][ T7002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.655465][ T5361] usb 5-1: SerialNumber: syz [ 154.667051][ T7002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.686829][ T5361] r8152-cfgselector 5-1: Unknown version 0x0000 [ 154.698715][ T5361] r8152-cfgselector 5-1: config 0 descriptor?? [ 154.726529][ T7002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.736002][ T7002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.124790][ T7334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.161745][ T7334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.529596][ T7369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.431'. [ 156.195935][ T5361] r8152-cfgselector 5-1: Unknown version 0x0000 [ 156.226683][ T5361] r8152-cfgselector 5-1: No union descriptors [ 156.262377][ T5361] r8152-cfgselector 5-1: USB disconnect, device number 13 [ 156.566943][ T9] pwc: recv_control_msg error -71 req 02 val 2b00 [ 156.601942][ T9] pwc: recv_control_msg error -71 req 02 val 2700 [ 156.640846][ T9] pwc: recv_control_msg error -71 req 02 val 2c00 [ 156.688154][ T9] pwc: recv_control_msg error -71 req 04 val 1000 [ 156.715773][ T9] pwc: recv_control_msg error -71 req 04 val 1300 [ 156.752373][ T9] pwc: recv_control_msg error -71 req 04 val 1400 [ 156.785463][ T9] pwc: recv_control_msg error -71 req 02 val 2000 [ 156.827011][ T9] pwc: recv_control_msg error -71 req 02 val 2100 [ 156.871379][ T9] pwc: recv_control_msg error -71 req 04 val 1500 [ 156.906656][ T9] pwc: recv_control_msg error -71 req 02 val 2500 [ 156.939910][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 156.979656][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 157.018536][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 157.034057][ T7407] FAULT_INJECTION: forcing a failure. [ 157.034057][ T7407] name failslab, interval 1, probability 0, space 0, times 0 [ 157.047906][ T7407] CPU: 1 UID: 0 PID: 7407 Comm: syz.1.437 Tainted: G L syzkaller #0 PREEMPT(full) [ 157.047933][ T7407] Tainted: [L]=SOFTLOCKUP [ 157.047939][ T7407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 157.047949][ T7407] Call Trace: [ 157.047956][ T7407] [ 157.047964][ T7407] dump_stack_lvl+0xe8/0x150 [ 157.047989][ T7407] should_fail_ex+0x412/0x560 [ 157.048017][ T7407] should_failslab+0xa8/0x100 [ 157.048045][ T7407] __kmalloc_cache_noprof+0x88/0x660 [ 157.048077][ T7407] ? __hw_addr_create+0x60/0x250 [ 157.048107][ T7407] __hw_addr_create+0x60/0x250 [ 157.048136][ T7407] __hw_addr_list_snapshot+0x19e/0x750 [ 157.048173][ T7407] netif_rx_mode_run+0x931/0x1290 [ 157.048201][ T7407] ? __pfx_netif_rx_mode_run+0x10/0x10 [ 157.048227][ T7407] ? netif_rx_mode_sync+0x15d/0x1e0 [ 157.048243][ T7407] ? dev_ifsioc+0xf51/0x1330 [ 157.048262][ T7407] ? dev_ioctl+0x7b4/0x1150 [ 157.048280][ T7407] ? sock_do_ioctl+0x23e/0x320 [ 157.048307][ T7407] ? netif_rx_mode_sync+0x169/0x1e0 [ 157.048327][ T7407] ? __local_bh_enable_ip+0xd0/0x130 [ 157.048351][ T7407] netif_rx_mode_sync+0x171/0x1e0 [ 157.048372][ T7407] dev_ifsioc+0xf51/0x1330 [ 157.048397][ T7407] ? dev_load+0x21/0x1f0 [ 157.048420][ T7407] dev_ioctl+0x7b4/0x1150 [ 157.048446][ T7407] sock_do_ioctl+0x23e/0x320 [ 157.048470][ T7407] ? __pfx_sock_do_ioctl+0x10/0x10 [ 157.048499][ T7407] ? unix_ioctl+0x206/0x780 [ 157.048522][ T7407] compat_sock_ioctl+0xba6/0xcb0 [ 157.048546][ T7407] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 157.048567][ T7407] ? __fget_files+0x3a0/0x420 [ 157.048587][ T7407] ? __fget_files+0x2a/0x420 [ 157.048610][ T7407] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 157.048640][ T7407] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 157.048669][ T7407] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 157.048698][ T7407] ? __fget_files+0x3a0/0x420 [ 157.048725][ T7407] ? fput+0xa0/0xd0 [ 157.048745][ T7407] ? ksys_write+0x242/0x270 [ 157.048781][ T7407] __do_fast_syscall_32+0x229/0x6e0 [ 157.048799][ T7407] ? do_fast_syscall_32+0x33/0x70 [ 157.048815][ T7407] ? lockdep_hardirqs_on+0x7a/0x110 [ 157.048837][ T7407] ? asm_int80_emulation+0x1a/0x20 [ 157.048853][ T7407] ? do_int80_emulation+0x286/0x530 [ 157.048874][ T7407] do_fast_syscall_32+0x33/0x70 [ 157.048892][ T7407] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 157.048912][ T7407] RIP: 0023:0xf70cf01c [ 157.048928][ T7407] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 157.048943][ T7407] RSP: 002b:00000000f54bd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 157.048962][ T7407] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008931 [ 157.048973][ T7407] RDX: 00000000800002c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 157.048983][ T7407] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 157.048993][ T7407] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 157.049003][ T7407] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 157.049031][ T7407] [ 157.049103][ T7407] ------------[ cut here ]------------ [ 157.353902][ T7407] netdevice: dummy0: failed to sync uc/mc addresses [ 157.360475][ T7407] WARNING: net/core/dev_addr_lists.c:1278 at netif_rx_mode_run+0xd55/0x1290, CPU#1: syz.1.437/7407 [ 157.371174][ T7407] Modules linked in: [ 157.376186][ T7407] CPU: 1 UID: 0 PID: 7407 Comm: syz.1.437 Tainted: G L syzkaller #0 PREEMPT(full) [ 157.386961][ T7407] Tainted: [L]=SOFTLOCKUP [ 157.391265][ T7407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 157.401318][ T7407] RIP: 0010:netif_rx_mode_run+0xe82/0x1290 [ 157.407129][ T7407] Code: 3a 48 c7 c2 60 f2 dd 8c eb 1a e8 b9 b5 43 f8 48 c7 c2 e0 f0 dd 8c eb 0c e8 ab b5 43 f8 48 c7 c2 e0 f1 dd 8c 4c 89 f7 4c 89 fe <67> 48 0f b9 3a 48 8b 5c 24 38 48 8b 7c 24 48 e8 ba c1 29 02 42 c7 [ 157.426745][ T7407] RSP: 0018:ffffc900030d7820 EFLAGS: 00010293 [ 157.432793][ T7407] RAX: ffffffff89820ed7 RBX: 0000000000000001 RCX: ffff8880297d3d80 [ 157.440766][ T7407] RDX: ffffffff8cddf0e0 RSI: ffff888079258120 RDI: ffffffff903fc610 [ 157.448739][ T7407] RBP: ffffc900030d79f8 R08: ffff8880297d3d80 R09: 0000000000000006 [ 157.456721][ T7407] R10: 0000000000000005 R11: 0000000000000000 R12: ffff888079258120 [ 157.464721][ T7407] R13: dffffc0000000000 R14: ffffffff903fc610 R15: ffff888079258120 [ 157.472673][ T7407] FS: 0000000000000000(0000) GS:ffff888125389000(0063) knlGS:00000000f54bdb40 [ 157.481597][ T7407] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 157.488181][ T7407] CR2: 000000008013b018 CR3: 0000000079eb0000 CR4: 00000000003526f0 [ 157.496152][ T7407] Call Trace: [ 157.499414][ T7407] [ 157.502328][ T7407] ? __pfx_netif_rx_mode_run+0x10/0x10 [ 157.507790][ T7407] ? netif_rx_mode_sync+0x15d/0x1e0 [ 157.512965][ T7407] ? dev_ifsioc+0xf51/0x1330 [ 157.517556][ T7407] ? dev_ioctl+0x7b4/0x1150 [ 157.522041][ T7407] ? sock_do_ioctl+0x23e/0x320 [ 157.526889][ T7407] ? netif_rx_mode_sync+0x169/0x1e0 [ 157.532069][ T7407] ? __local_bh_enable_ip+0xd0/0x130 [ 157.537357][ T7407] netif_rx_mode_sync+0x171/0x1e0 [ 157.542364][ T7407] dev_ifsioc+0xf51/0x1330 [ 157.546783][ T7407] ? dev_load+0x21/0x1f0 [ 157.551015][ T7407] dev_ioctl+0x7b4/0x1150 [ 157.555345][ T7407] sock_do_ioctl+0x23e/0x320 [ 157.559921][ T7407] ? __pfx_sock_do_ioctl+0x10/0x10 [ 157.565046][ T7407] ? unix_ioctl+0x206/0x780 [ 157.569619][ T7407] compat_sock_ioctl+0xba6/0xcb0 [ 157.574559][ T7407] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 157.579999][ T7407] ? __fget_files+0x3a0/0x420 [ 157.585119][ T7407] ? __fget_files+0x2a/0x420 [ 157.589695][ T7407] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 157.595251][ T7407] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 157.600696][ T7407] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 157.606679][ T7407] ? __fget_files+0x3a0/0x420 [ 157.611338][ T7407] ? fput+0xa0/0xd0 [ 157.615144][ T7407] ? ksys_write+0x242/0x270 [ 157.619812][ T7407] __do_fast_syscall_32+0x229/0x6e0 [ 157.625022][ T7407] ? do_fast_syscall_32+0x33/0x70 [ 157.630067][ T7407] ? lockdep_hardirqs_on+0x7a/0x110 [ 157.635268][ T7407] ? asm_int80_emulation+0x1a/0x20 [ 157.640442][ T7407] ? do_int80_emulation+0x286/0x530 [ 157.645636][ T7407] do_fast_syscall_32+0x33/0x70 [ 157.650474][ T7407] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 157.656821][ T7407] RIP: 0023:0xf70cf01c [ 157.660875][ T7407] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 157.680514][ T7407] RSP: 002b:00000000f54bd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 157.689040][ T7407] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008931 [ 157.697025][ T7407] RDX: 00000000800002c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 157.705030][ T7407] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 157.712985][ T7407] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 157.720966][ T7407] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 157.728979][ T7407] [ 157.732093][ T7407] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 157.739355][ T7407] CPU: 1 UID: 0 PID: 7407 Comm: syz.1.437 Tainted: G L syzkaller #0 PREEMPT(full) [ 157.750096][ T7407] Tainted: [L]=SOFTLOCKUP [ 157.754400][ T7407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 157.764436][ T7407] Call Trace: [ 157.767701][ T7407] [ 157.770611][ T7407] vpanic+0x56c/0xa60 [ 157.774579][ T7407] ? __pfx__printk+0x10/0x10 [ 157.779328][ T7407] ? __pfx_vpanic+0x10/0x10 [ 157.783821][ T7407] ? is_bpf_text_address+0x292/0x2b0 [ 157.789104][ T7407] ? is_bpf_text_address+0x26/0x2b0 [ 157.794299][ T7407] panic+0xc5/0xd0 [ 157.798010][ T7407] ? __pfx_panic+0x10/0x10 [ 157.802416][ T7407] __warn+0x315/0x4c0 [ 157.806380][ T7407] ? netif_rx_mode_run+0xd55/0x1290 [ 157.811567][ T7407] ? netif_rx_mode_run+0xd55/0x1290 [ 157.816746][ T7407] __report_bug+0x29a/0x540 [ 157.821238][ T7407] ? netif_rx_mode_run+0xd55/0x1290 [ 157.826425][ T7407] ? __pfx___report_bug+0x10/0x10 [ 157.831446][ T7407] ? __kfree_rcu_sheaf+0x1f/0x5d0 [ 157.836453][ T7407] ? lock_acquire+0x106/0x350 [ 157.841123][ T7407] report_bug_entry+0x19a/0x290 [ 157.845972][ T7407] ? netif_rx_mode_run+0xe82/0x1290 [ 157.851164][ T7407] ? netif_rx_mode_run+0xe87/0x1290 [ 157.856372][ T7407] handle_bug+0xce/0x200 [ 157.860615][ T7407] exc_invalid_op+0x1a/0x50 [ 157.865107][ T7407] asm_exc_invalid_op+0x1a/0x20 [ 157.869950][ T7407] RIP: 0010:netif_rx_mode_run+0xe82/0x1290 [ 157.875750][ T7407] Code: 3a 48 c7 c2 60 f2 dd 8c eb 1a e8 b9 b5 43 f8 48 c7 c2 e0 f0 dd 8c eb 0c e8 ab b5 43 f8 48 c7 c2 e0 f1 dd 8c 4c 89 f7 4c 89 fe <67> 48 0f b9 3a 48 8b 5c 24 38 48 8b 7c 24 48 e8 ba c1 29 02 42 c7 [ 157.895430][ T7407] RSP: 0018:ffffc900030d7820 EFLAGS: 00010293 [ 157.901481][ T7407] RAX: ffffffff89820ed7 RBX: 0000000000000001 RCX: ffff8880297d3d80 [ 157.909434][ T7407] RDX: ffffffff8cddf0e0 RSI: ffff888079258120 RDI: ffffffff903fc610 [ 157.917393][ T7407] RBP: ffffc900030d79f8 R08: ffff8880297d3d80 R09: 0000000000000006 [ 157.925345][ T7407] R10: 0000000000000005 R11: 0000000000000000 R12: ffff888079258120 [ 157.933295][ T7407] R13: dffffc0000000000 R14: ffffffff903fc610 R15: ffff888079258120 [ 157.941342][ T7407] ? netif_rx_mode_run+0xe67/0x1290 [ 157.947075][ T7407] ? __pfx_netif_rx_mode_run+0x10/0x10 [ 157.952530][ T7407] ? netif_rx_mode_sync+0x15d/0x1e0 [ 157.957729][ T7407] ? dev_ifsioc+0xf51/0x1330 [ 157.963181][ T7407] ? dev_ioctl+0x7b4/0x1150 [ 157.967717][ T7407] ? sock_do_ioctl+0x23e/0x320 [ 157.972475][ T7407] ? netif_rx_mode_sync+0x169/0x1e0 [ 157.977659][ T7407] ? __local_bh_enable_ip+0xd0/0x130 [ 157.982930][ T7407] netif_rx_mode_sync+0x171/0x1e0 [ 157.987941][ T7407] dev_ifsioc+0xf51/0x1330 [ 157.992343][ T7407] ? dev_load+0x21/0x1f0 [ 157.996573][ T7407] dev_ioctl+0x7b4/0x1150 [ 158.000897][ T7407] sock_do_ioctl+0x23e/0x320 [ 158.005474][ T7407] ? __pfx_sock_do_ioctl+0x10/0x10 [ 158.010569][ T7407] ? unix_ioctl+0x206/0x780 [ 158.015057][ T7407] compat_sock_ioctl+0xba6/0xcb0 [ 158.019979][ T7407] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 158.025424][ T7407] ? __fget_files+0x3a0/0x420 [ 158.030081][ T7407] ? __fget_files+0x2a/0x420 [ 158.034664][ T7407] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 158.040196][ T7407] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 158.045640][ T7407] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 158.051622][ T7407] ? __fget_files+0x3a0/0x420 [ 158.056288][ T7407] ? fput+0xa0/0xd0 [ 158.060077][ T7407] ? ksys_write+0x242/0x270 [ 158.064567][ T7407] __do_fast_syscall_32+0x229/0x6e0 [ 158.069744][ T7407] ? do_fast_syscall_32+0x33/0x70 [ 158.074750][ T7407] ? lockdep_hardirqs_on+0x7a/0x110 [ 158.079931][ T7407] ? asm_int80_emulation+0x1a/0x20 [ 158.085024][ T7407] ? do_int80_emulation+0x286/0x530 [ 158.090205][ T7407] do_fast_syscall_32+0x33/0x70 [ 158.095036][ T7407] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 158.101344][ T7407] RIP: 0023:0xf70cf01c [ 158.105394][ T7407] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 158.124987][ T7407] RSP: 002b:00000000f54bd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 158.133381][ T7407] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008931 [ 158.141329][ T7407] RDX: 00000000800002c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 158.149289][ T7407] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 158.157240][ T7407] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 158.165189][ T7407] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 158.173149][ T7407] [ 158.176411][ T7407] Kernel Offset: disabled [ 158.180734][ T7407] Rebooting in 86400 seconds..