last executing test programs: 4.504993583s ago: executing program 4 (id=297): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) 4.14165748s ago: executing program 4 (id=299): socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sigaltstack(&(0x7f0000000300)={&(0x7f00000001c0)=""/179, 0x2, 0xb3}, &(0x7f0000000380)={&(0x7f0000000340)=""/10, 0x0, 0xa}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x3, 0x1) openat$vicodec0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) syz_ublk_add_dev(r2, r3, 0x0, r5, &(0x7f0000000480)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x80000000, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000003c0)=@new_dev={0x3, 0xe46, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x81}}}, &(0x7f0000000500)=0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)={0x0, 0x3601, 0x10000, 0x3, 0x3c3}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4858, 0x100, 0x3, 0x39b, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5814, 0x2000, 0x7, 0x29a, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcafc, 0x40000, 0x1, 0x153, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe82c, 0x40, 0x3, 0x73, 0x0, r2}}], 0x4, &(0x7f0000001dc0)={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x8001}, 0x0, 0x0, '\x00', {0x0, 0x689, 0x0, &(0x7f0000000dc0)=@buf_4k="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"}}, &(0x7f0000001e40)) r8 = syz_io_uring_setup(0xf20, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r10, r11, &(0x7f00000001c0)=@IORING_OP_RENAMEAT={0x23, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, {0x0, r12}}) syz_ublk_setup_queues(0xffffffffffffffff, r6, &(0x7f0000000540)={0x0, 0x34fe, 0x80, 0x3, 0x2f8, 0x0, r2}, &(0x7f0000000840)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x397c, 0x2000, 0x2, 0x163, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcf9e, 0x4000, 0x0, 0x28e, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x26c4, 0xb00, 0x0, 0xb8, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa49, 0x8, 0x1, 0x289, 0x0, r2}}], 0x4, &(0x7f0000002e80)={0x2e, 0x5a, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x8000}, 0x0, r12, '\x00', {0x1, 0x515, 0x0, &(0x7f0000001e80)=@buf_1k="5d4424dca87375bdbb10545b6344b8c41719c7e96ca4703c192d9c8d62fe4a095b0945209f869e8c66869b82372d079d61097b213b241adb1a609ef1f651e1744ec3a3f7034542edb26e1a560a4355405c05ac260112dc7cc329443c33f8779d01a8fd8ee2e879c9e9f93d738059f0c24a2b3a0743a6617e9dc7a6fedfad5804b08e901026e9a00b6ba159f21fccce75b6045b699f2779cf3fabe1f9a37c0ceb3eb37838dfd03fdd5bf485e0dfb181a634cfcb54c2719c377b4932e7d0b364286d3585b5ef89b2be93c39ffea8a6e6b635b9cfa4c9888bca15172a854059f1bcec806e64c53114d3ca13919c722ae9da6cbd82efe7b1a368993bd9649e84684757c79519065a99a31c357261e5c8c949aa2d893a32b07f6cbdabd3dfdf05221b6622a0bfd48c063369164630485a13d1806d3b64b84483d8da87ac7a25576b4feb05cd50be2073a0c20d1c5b11d2d23702cd9ea97bf12047b5435d996e5ba6972e9507d4bf95502f771dd136bcaa5126836257e5bf0ee2fc35043afc15068a263996dab133b151054f9eb9954684b7683184f5045e0acdb1374621ea20acab27fbab51544b39e47fb62216b901d39651b5c15939d5835d89c28babb12b32f78fa27050f0a6838fb608a13175a1102cfd523c7f538ff897a19f7f6ad0b5e7a76cf992649fa3c744ea5f521af17ba3d235ee1bd371137d4ea4f750787c1893900aa1241832f4ef47dc352157ea0e15e67a5a3db5807c1885d87932bcff0a3e8b951a3b1e31ff372a6ca94d2a252c51495da1b49ebc66b5d1d3cf15c65050c94ff8a2fa52a8b45f555cd9a2f3662260852892b465100a7a7f0d9a2df64edfade52f7b27a9471df1aedc57099ec1dd2620bdb0f67e74782fd2695c13ab333406b3ac30c882f66c5e9b4982d18672291da4eb30b4b815d64e8d6b66ee90afe728f9052bd57bf849a1f7801f519d2b2d76ed082da8d2526727b6a7a9fa5e49b2787097fab3503c214f4d478300ff2b0a1cf542bbdc78939607012d7eaea01123fa15dd8be34da53c30030342f971899d835d5d7154fc04c61c978396414cbe6e878e11e86754b342535aa9987d31572d9a3ac4d96c78daa49126c2266808289e723e53b0dff2a5092fd7199c193165a5f0f4c04feae0e8b98a013f84d4d26b7e1d0d36dd101864ee7b899be761b2397b3aa3bcb524e93a5a57c8ef97b30691eb8aa7ddf027ce6b6ba41e9b420c8fdb16a8f7905c0561dbf79d5d6c872ae97dc6ff4187df51b653017f633c80a244f48e47d8331a6b2d3a3bf03675d02e4babc9946c8ff1fd05763549ee4f798349a281b95ffcd3ca7ff7ea6ae8adc37cea0b87d40d1c9d347c91e8b7562dc57a301af3039ff4f95199104a044c824bbefc153295422ed8958dab45e70d51cc3844e695da62476180e7abb009e13a4963e3923649aa58"}}, &(0x7f0000002f00)) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x1, 0x12}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) sendmsg$nl_route(r13, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB="38000000100001040100000000000000000000000000000000000000000000000900030069666232000000000c00128008000100696662"], 0x38}}, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x6, @mcast1, 0x8}, 0x1c) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0xf4}}, 0x10) r15 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x82) r16 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r16, 0xc0a85320, &(0x7f0000001e00)={{0x80, 0x80}, 'port1\x00', 0x3d, 0x0, 0x7ffb, 0x1, 0x10001, 0x6935, 0x5, 0x0, 0x3, 0x9}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r16, 0xc0a85320, &(0x7f0000000100)={{0x80, 0x10}, 'port0\x00', 0x20, 0x50000, 0x7fff, 0x0, 0x5, 0x9, 0x90, 0x0, 0x1, 0xb7}) ioctl$USBDEVFS_CONTROL(r15, 0xc0185500, &(0x7f0000000040)={0x0, 0xb, 0x102, 0x7, 0x0, 0x0, 0x0}) 3.724922716s ago: executing program 3 (id=303): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x1}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x84}, 0x0) 3.626330467s ago: executing program 4 (id=305): r0 = syz_open_dev$loop(&(0x7f00000017c0), 0xa4f, 0x60040) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc0007008019000000000000000000000000af1e4ccfb7b3cad80004010400", [0x1, 0x2000000000001]}}) 3.571360891s ago: executing program 3 (id=306): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2000000) (fail_nth: 1) 2.958054454s ago: executing program 3 (id=307): r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYRES32=r1, @ANYBLOB="0b1b0500000000005c0012800b00010069703667726500004c00028008000100", @ANYRES32=r1, @ANYBLOB="14000600fe8000000000000000000000000000bb14000700fe"], 0x7c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) 2.925410252s ago: executing program 2 (id=308): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101501, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e33, 0x0, @empty, 0x9}, 0x1c) (fail_nth: 1) 2.871695742s ago: executing program 4 (id=309): syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0xf089e8679c7014f3, 0x1}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x8, 0x10, 0x100000002, 0x0, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) 2.569513683s ago: executing program 4 (id=311): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0xe, 0x49c901) read$char_usb(r1, &(0x7f0000000300)=""/216, 0xd8) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_open_dev$video4linux(&(0x7f0000000000), 0xe, 0x49c901) (async) read$char_usb(r1, &(0x7f0000000300)=""/216, 0xd8) (async) syz_usb_disconnect(0xffffffffffffffff) (async) syz_usb_disconnect(0xffffffffffffffff) (async) syz_usb_disconnect(0xffffffffffffffff) (async) syz_usb_disconnect(0xffffffffffffffff) (async) syz_usb_disconnect(r0) (async) 2.545884977s ago: executing program 3 (id=312): socketpair$unix(0x1, 0x3, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x4073972, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) unshare(0x400) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x10001, 0x0) write$nci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="040000fe0cb326600d19688ce16842"], 0xf) rseq(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000a80)={@in6={{0xa, 0x4e23, 0x0, @mcast2, 0x3}}, 0x0, 0x0, 0x2, 0x0, "03c2769bf71d7836323485466b1ab4062438333b036583040056324587db0009466206f9bd19e028710cd7a9a0520137e9cc8f9dc099fc3aecf50f4d209cb4733d2af1e022a74f0d66fba11caeef38f8"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000002c0)={@in6={{0xa, 0x4, 0x5, @mcast2, 0x1}}, 0x0, 0x0, 0x2, 0x0, "822aaee2729b48f1845387c235d30585bf81611e13f83de0710352d17ca6203825876f84442d02faa742b77bb3ad0b6c2309dbd20dcdf18f65ea2080dc4a3c1969b6613d836e2cab1517353d8510d426"}, 0xd8) 2.494717086s ago: executing program 2 (id=313): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4d0086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x18, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$uac2(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000240)={0x78a09a1d84b4e9f1, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0xfffffffe, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x14b5, 0x6, 0x1, 0x80}}}}]}, 0x48}}, 0x4000) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f00000001c0)={0x0, 0x1, 0x2, "2f12"}, 0x0, 0x0}) (async) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000003ec0)={0x28, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0xc, 0x145, 0x0, 0x1, [@typed={0x8, 0x4, 0x0, 0x0, @fd=r5}]}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x1c}]}]}, 0x28}, 0x1, 0x3000000}, 0x2004c000) (async) syz_usb_control_io$printer(r3, 0x0, 0x0) (async) syz_usb_control_io$sierra_net(r3, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000380)=ANY=[@ANYBLOB="40060004000001"], 0x0, 0x0}) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r1) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000700)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000500)={0x190, r6, 0x800, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x94, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x82c6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xfc5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffb}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffeff}]}]}, @TIPC_NLA_BEARER={0x80, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x1, @loopback, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x80000000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x44}, 0x40084) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x38, r7, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000054}, 0xc001) r8 = syz_usb_connect(0x0, 0xa7d, &(0x7f0000000900)={{0x12, 0x1, 0x200, 0xac, 0x18, 0x66, 0x8, 0x2013, 0x251, 0x6d31, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa6b, 0x4, 0x7, 0x0, 0x80, 0xb, "", [{{0x9, 0x4, 0xe6, 0xce, 0xa, 0xc9, 0xe4, 0x12, 0x0, [@cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "444810"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x3, 0xd, 0x1, 0x5}, [@ncm={0x6, 0x24, 0x1a, 0x0, 0x3}, @acm={0x4, 0x24, 0x2, 0x8}, @obex={0x5, 0x24, 0x15, 0x6}, @mdlm={0x15, 0x24, 0x12, 0x8}, @country_functional={0xa, 0x24, 0x7, 0x4, 0x0, [0x0, 0xd]}, @country_functional={0xe, 0x24, 0x7, 0x96, 0x9, [0x6, 0x1, 0xfff, 0x9]}]}], [{{0x9, 0x5, 0xb, 0x10, 0x40, 0x9, 0x6, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x4dd}]}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x31, 0x24, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x5, 0x1}, @generic={0x5e, 0x1, "7b4fdd380c9f8b8f61b04cfc442c7124f57192a5dc113677592f16553bf00e17c00266bc94642372644485c9354b7eb32c8986038793d258e3920cc93bd4f395d497876943134787ea970fe03b304bbd326ea2a3974240aaf52d9ff0"}]}}, {{0x9, 0x5, 0xf, 0xc, 0x40, 0x5, 0x2, 0xa, [@generic={0xd, 0x21, "d17e5001c84c3b6396b8f1"}, @generic={0xe, 0x22, "31dfb99171a121813ba88afd"}]}}, {{0x9, 0x5, 0x3, 0xc, 0x200, 0x7, 0x5, 0x9, [@generic={0x37, 0x22, "e5b7db73cf75e3695f5094c2374ad92f57309b54b6271f2884ad419d57ebdfa7a659a1262b917e9ca79d13b0905c23394d0dfa24d5"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x6}]}}, {{0x9, 0x5, 0x2, 0x1a, 0x200, 0x6, 0xd, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x2}]}}, {{0x9, 0x5, 0xf, 0x3, 0x3ff, 0x1, 0x5, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x0, 0x2}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0xc, 0xc, 0x9, [@generic={0xd3, 0x21, "792f3377d94507e62f16c7c4c58196bc5b63ef53bd524cafb1a12d176127d5db826ce199ab1acdc3818a0a0da21924734de6b7050fda2d1ef1f9f73477a4485b94b8bdc661e0d2284c3a22d7e919b7cc3a39e1fb76a308eac0350a450f1056c1241c7f2f88d1f469dc5d4738dcab9854de2fb9d251066e6981c143e01c4a8ff46d765b9e1e342a4618c5f1ef9896bda1d9579daacca661dfff5979248e4b96f3d033a41345f4704c720cddc73462a34974463cf73d2868937f07ab90a15b4f843d3821cdf6bdfa727735c6238883844cad"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0xe, 0x10}]}}, {{0x9, 0x5, 0xe, 0x0, 0x0, 0x4b, 0x0, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x47d2}]}}, {{0x9, 0x5, 0xc, 0x0, 0x440, 0x4, 0x95, 0x2, [@generic={0xa8, 0x2, "3f4f511c0c1ea80a4d43309e06f7409a639aed5ca31392a3b5af7e2f55bc0f70552aa524a5e84445fb383e83e3a10c0d26b04be23647302e09044b3b161736be49dc513727497b9b23b7a5c034cd7565c59bceed10181c44fe3e30427c51720002062beaf8c036e8aaa46090c74c92026b71472ca3c40e6d94d8e9b42e4f549e7ca82fe9fbcb569f0397c551495ff7febc5a8550044acdd832e778cfe92101b068e8d4cda2a7"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x10, 0x8, 0x0, [@generic={0xd, 0x21, "5720f4a9f1d6d8fe829ceb"}]}}]}}, {{0x9, 0x4, 0x68, 0x3, 0x1, 0xff, 0x80, 0x22, 0x7, [@hid_hid={0x9, 0x21, 0x0, 0xfb, 0x1, {0x22, 0x3d5}}, @generic={0x8b, 0x23, "d3e16da275634dbdd426fdf99bf1367fe730837c76a7784bff27c97a62b12125a94eff189fd2eda709be21f657bd85ccbd1fc8671ad72ffd6ecf8eb0bb5884506ca47bf0bb514af04454b042d386aecb92d730dc746b2115a09eb100bda6d72acfe97f37202cb9205a5cc1381070fa0817f70cc62390199941fbdec9b97f084e5c634cc391bc0535be"}], [{{0x9, 0x5, 0x80, 0x2, 0x40, 0x1, 0x0, 0x7f, [@generic={0xe9, 0xc, "f85bed3eb3c5d5eedb5c071ec295368ab93996a0fcc8f2ec5774b1b154c07bd985903fc7ad14592ee0e803787c3fbc1e437d2d762386f59dbfae09bcde4c952b3cd22f5a924354af94db26d6a55c72d159b85f4ddd9b4b713dc731f86bda81a1c3f826eebb6c959d1cf10ea10b007b567fd4909da5e59b9be5dae09e2e80666e0875d55593a190ce274d6332f97d40b5f888b78a002c106b13a2bc2d4e648e8bc72e72a5f4ae81c85223051384a4015ee0a456d5df1a607a7b6362af03389e5c60b969cd8499fe6775e8c890af87665cb6583e4e12304b4a073125a667ac29abefc7397d666798"}]}}]}}, {{0x9, 0x4, 0x4c, 0xc2, 0xe, 0xdb, 0x3d, 0xe0, 0x4, [@uac_as={[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x4, 0x3, 0x0, 0xb3, "65b6", "89"}, @as_header={0x7, 0x24, 0x1, 0x2, 0xf3, 0x1001}]}, @hid_hid={0x9, 0x21, 0x3, 0x5, 0x1, {0x22, 0x40f}}], [{{0x9, 0x5, 0x0, 0x4, 0x3ff, 0x5, 0x5, 0x1, [@generic={0x5d, 0xc, "566bb3f98dfb82fa8689726c99cf70853c21fd0fc88087e499fbd62862216f0071ab699c28818628ee82b95f7d00ebeecfeeafd5fb7a217dfcc8886e58c662db43ead488f6b42e8cc25224c2d96e8169810254139623e41610f82b"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x5}]}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0x8, 0x29, 0x0, [@generic={0x102, 0x24, "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"}]}}, {{0x9, 0x5, 0x2, 0xc, 0x40, 0x6, 0x8, 0x81, [@generic={0xb5, 0x31, "44af54e2885da643f74eb27ff3b81aafa4e5b1e2b92df983e8a3f6d19711fedd23a5f94014e8f80f42e7446c21e2e1fe5aecfd2a349e80616f00d819f7fe257fc6fa9c9d679afe929670a8ea79449482d14f900a9e0f378011b6d2ea47ba990c85fa9f2c3d2d9294fabffc65dc234d48a5e8a5cf13eb146ea14fea454fd9f1a2f2373390d9ee574d21e5ebd028255676214f41265cfe956c514decd3c133582f7686ee8a546b5761777f302656ceb4006e9a8d"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x10, 0x5, 0x40, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x2, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x9ec}]}}, {{0x9, 0x5, 0x0, 0x10, 0x20, 0x6, 0xc2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0xfff8}]}}, {{0x9, 0x5, 0xd, 0x10, 0x200, 0x8c, 0x3, 0xff, [@generic={0x53, 0xa, "05dd46450f84abbbdd9e40836c688e896b0623eafbdb35a984b465dcfaa9728f3be4a2d973b91ac6b5d07ba1b93d3516058860a6ef25a49c3ee460466cd2c623b764511a92154c2930636b6d02fc7212e7"}]}}, {{0x9, 0x5, 0x2, 0xc, 0x20, 0x4, 0x4, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0x2}]}}, {{0x9, 0x5, 0x7, 0x10, 0x200, 0x9, 0x1e, 0x8, [@generic={0x59, 0xe, "4987f99d34f4da9de27a8d2f55269e6eeb7072ab5dde6a74304d2edad55b3843fabe9d2071b8a3f2ee345a3807a74bee345f62ad596d01217b5e9c1f73554540fa487b589ec07feb204cb4b0d3d95681aa889640d1cef0"}]}}, {{0x9, 0x5, 0x1, 0x2, 0x20, 0x3, 0x5, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x1}]}}, {{0x9, 0x5, 0xd, 0xc, 0x200, 0x3, 0xc8, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x0, 0x3}]}}, {{0x9, 0x5, 0x9, 0x0, 0x10, 0x9, 0x6, 0xa5, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x1, 0x6}]}}, {{0x9, 0x5, 0x9, 0x1, 0x3ff, 0x1, 0x11, 0x6, [@generic={0x7b, 0xc, "836d50953fe1efb7102e6ad73bc391f36f0a33c879031659f79d61f66035b249c1d6a8cd5f012b2aec4368592b9ff7f8d40cc70656136df548c265d1f147b35b7b43e1c429e48260101b6dfd7d099194fed47c33f56f17a4acb9c51e04d6de0d47b2822d08b03fb8369ce1f9cafc3cbecbeb34e30d15112024"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x1}]}}, {{0x9, 0x5, 0x3, 0x15, 0x20, 0x10, 0xf8, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xf4, 0x1}]}}, {{0x9, 0x5, 0x3, 0x0, 0x8, 0xfb, 0x3, 0x90, [@generic={0x49, 0xf, "73b4c1d9de9ca93520aa5abfcf344647195376e701aa13761bb7fe57c8b42d4fad5dee2c0afc99e62e12206d847c3cd2d60b959a40f52460af6c66bbb8dacc3fe529450eb69401"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x95, 0x3}]}}]}}, {{0x9, 0x4, 0xed, 0x8, 0x3, 0xee, 0x55, 0x67, 0x1, [@uac_control={{0xa, 0x24, 0x1, 0x81, 0x24}, [@output_terminal={0x9, 0x24, 0x3, 0x2, 0x100, 0x5, 0x5, 0x9}, @selector_unit={0x9, 0x24, 0x5, 0x4, 0x8, "6deab461"}, @mixer_unit={0x8, 0x24, 0x4, 0x2, 0xfa, "38a990"}]}], [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x8, 0x3, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x7}]}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0xfc, 0x5, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0xfff7}]}}, {{0x9, 0x5, 0x0, 0x1, 0x10, 0x3, 0x0, 0xb6, [@generic={0x8b, 0x5, "ed754c5d8b32c2ee4dfcd67be2546aa62e7f2266e047fb2ee714058823fea0a1ea5fd2df4781d2cab3625405d3681063b4e3c01cef6d65496b08183f761d3d55855fdd63f8e1e85185d94d53fa292cddf740d9c0d7d37b73ad67146f51cec3645338aa41dbb09e750524f0138ba62e2c022ae661405d2e8ed6c61c4e65a1617b743b75069c8057a9aa"}, @generic={0x5d, 0xb, "a11b20e85a159e48c5fe693465a6d7fa44cf0628f97524cd4511375b6b9e4196d47b35dc93ed9c19634a9f08304bfcaddad46affc84168c27d663ebad11460f27def48faca58886c3b7dcf29cf8871d602de58c0e1fa794b9ed74a"}]}}]}}]}}]}}, &(0x7f0000001600)={0xa, &(0x7f0000001380)={0xa, 0x6, 0x310, 0x21, 0xe, 0xa, 0x10, 0x5}, 0xc7, &(0x7f00000013c0)={0x5, 0xf, 0xc7, 0x2, [@ssp_cap={0x24, 0x10, 0xa, 0xb1, 0x6, 0x9, 0xf000, 0x9, [0x180, 0xc03f, 0x18, 0x14000, 0x18, 0x30]}, @generic={0x9e, 0x10, 0xb, "b33eacf27f2bb5d738407d704f0e9e4c0a8ad17baaad214155b42941bd467aa337a970729a4e3d65db37030219d8f2d9e56dcbf8c4a93469b5400387c564f56c0a40fb3a5fd2b8f5951414c08f93bd5677c00ee8f66230937c511f4c8a8e8f9ac5433ef29a45739a14047e1e30d28147d6862adbfda58e471d44a540e0b3171aee9531c3da510e160780956fa33eb14e37145f0463ab679cc02b2b"}]}, 0x3, [{0x4, &(0x7f00000014c0)=@lang_id={0x4, 0x3, 0x1c09}}, {0x87, &(0x7f0000001500)=@string={0x87, 0x3, "bd83d55bf0239aa3d0d0c2c5307c9bf3f8c79a54d06e5aecc27c5a74da11ffbf113deb72b75f0b612708ba0792f52efeabf24cd92df5b746154d85af34f34c41083f54d9849e308163933defc0ad0710e02717a6b65c502dd85e0a9c0df9b4812c2dba0d1fa4fdfc29e16aaf1c668cf53566ce53366b5c04ee6c0645b61fb4bec2ad5ed303"}}, {0x4, &(0x7f00000015c0)=@lang_id={0x4, 0x3, 0x400a}}]}) syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0) (async) ptrace$setregs(0xd, 0x0, 0x0, 0x0) 2.381323474s ago: executing program 0 (id=315): socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sigaltstack(&(0x7f0000000300)={&(0x7f00000001c0)=""/179, 0x2, 0xb3}, &(0x7f0000000380)={&(0x7f0000000340)=""/10, 0x0, 0xa}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x3, 0x1) openat$vicodec0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) syz_ublk_add_dev(r2, r3, 0x0, r5, &(0x7f0000000480)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x80000000, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000003c0)=@new_dev={0x3, 0xe46, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x81}}}, &(0x7f0000000500)=0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)={0x0, 0x3601, 0x10000, 0x3, 0x3c3}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4858, 0x100, 0x3, 0x39b, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5814, 0x2000, 0x7, 0x29a, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcafc, 0x40000, 0x1, 0x153, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe82c, 0x40, 0x3, 0x73, 0x0, r2}}], 0x4, &(0x7f0000001dc0)={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x8001}, 0x0, 0x0, '\x00', {0x0, 0x689, 0x0, &(0x7f0000000dc0)=@buf_4k="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"}}, &(0x7f0000001e40)) r8 = syz_io_uring_setup(0xf20, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r10, r11, &(0x7f00000001c0)=@IORING_OP_RENAMEAT={0x23, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, {0x0, r12}}) syz_ublk_setup_queues(0xffffffffffffffff, r6, &(0x7f0000000540)={0x0, 0x34fe, 0x80, 0x3, 0x2f8, 0x0, r2}, &(0x7f0000000840)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x397c, 0x2000, 0x2, 0x163, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcf9e, 0x4000, 0x0, 0x28e, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x26c4, 0xb00, 0x0, 0xb8, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa49, 0x8, 0x1, 0x289, 0x0, r2}}], 0x4, &(0x7f0000002e80)={0x2e, 0x5a, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x8000}, 0x0, r12, '\x00', {0x1, 0x515, 0x0, &(0x7f0000001e80)=@buf_1k="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"}}, &(0x7f0000002f00)) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x1, 0x12}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) sendmsg$nl_route(r13, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB="38000000100001040100000000000000000000000000000000000000000000000900030069666232000000000c00128008000100696662"], 0x38}}, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x6, @mcast1, 0x8}, 0x1c) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0xf4}}, 0x10) r15 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x82) r16 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r16, 0xc0a85320, &(0x7f0000001e00)={{0x80, 0x80}, 'port1\x00', 0x3d, 0x0, 0x7ffb, 0x1, 0x10001, 0x6935, 0x5, 0x0, 0x3, 0x9}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r16, 0xc0a85320, &(0x7f0000000100)={{0x80, 0x10}, 'port0\x00', 0x20, 0x50000, 0x7fff, 0x0, 0x5, 0x9, 0x90, 0x0, 0x1, 0xb7}) ioctl$USBDEVFS_CONTROL(r15, 0xc0185500, &(0x7f0000000040)={0x0, 0xb, 0x102, 0x7, 0x0, 0x0, 0x0}) 2.276744452s ago: executing program 0 (id=316): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x11, &(0x7f0000000000)=ANY=[@ANYBLOB="180800000500000000000000fbffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf090000000000005509010000000000950000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000bf98000000000000b5080000000000008500000007000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.184209395s ago: executing program 0 (id=317): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000040)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x0, 0xa4, 0x9, 0xfffffffd, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x25}}, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x10, 0x20, 0x9, 0x40}}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = syz_io_uring_setup(0x208c, &(0x7f0000000200)={0x0, 0x37b0, 0x8, 0x3, 0x4001bf}, &(0x7f0000000040), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000580)=[{&(0x7f0000000380)=""/113, 0x71}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0xe61c1323c3c20c32) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000009060300f100100000000000050000400900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c0001c008000140e00040000c00028008000140e00000020c00148008000140ff"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 2.126967478s ago: executing program 0 (id=318): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00'}) r10 = socket$netlink(0x10, 0x3, 0x0) write(r10, &(0x7f0000000000)="3000000024000106010000000000000000000000010000000000fffff1ffffff000000000c000100696e677265737300", 0x30) write(r10, &(0x7f0000000100)="6c0000002c0001060200000000000000000000000100000000000000f1ffffff000301000c000100666c6f77657200003c0002801c0054801800058005000100010000000c00020000000000000000011c0055801800058005000100ff0000000c000200ffffffffffffffff", 0x6c) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x24044010) mbind(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x9, 0x0) setns(0xc9, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@setneightbl={0x38, 0x43, 0x1, 0x70bd2d, 0x0, {0x2}, [@NDTA_NAME={0xe, 0x1, 'arp_cache\x00'}, @NDTA_GC_INTERVAL={0xc, 0x8, 0x7}, @NDTA_THRESH3={0x8, 0x4, 0x7f}]}, 0x38}}, 0x0) r11 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc) splice(r5, 0x0, r7, 0x0, 0x8001, 0xd) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x3}, {0xffff, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x8, 0xfff, 0x10000000, 0x7, 0xccb}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) write$tun(r0, &(0x7f0000001280)=ANY=[@ANYBLOB="000086dd"], 0xfce) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f00000003c0)={0x15, 0x110, 0xfa00, {r12, 0x1ff, 0x0, 0x0, 0x0, @ib={0x1b, 0x1, 0x3, {"de1c7a47ed411976a4a64dff49db0fac"}, 0x9, 0x61e, 0x78}, @ib={0x1b, 0x3, 0x80, {"a3d430968e21b0f1409bace3066fd9e3"}, 0x6, 0x100000000, 0x3}}}, 0x118) 1.941176341s ago: executing program 3 (id=319): capset(&(0x7f0000a31000)={0x19980330}, &(0x7f0000000100)={0x0, 0x2eec, 0x0, 0x0, 0x1, 0x1000036}) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x49, &(0x7f0000000000)=0x200004, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000003800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=""/191, 0xbf}, 0xffffffff}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000023c0)=""/13, 0xd}, 0x3}, {{0x0, 0x0, 0x0}, 0x1}], 0x3, 0x3, 0x0) setsockopt$inet6_int(r1, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000240)={0x0, 'bridge_slave_1\x00', {0x4}, 0x3ff8}) 1.294966296s ago: executing program 1 (id=327): ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xee01}}, './file0\x00'}) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f00000000c0)={0xc, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000140)={0x28, 0x0, 0x0, r1, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000100)}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="fab0817da4bdf31a1c001280110001006272696467655f736c6176650000000004000580140003006261746164765f736c6176655f300000"], 0x50}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x121001, 0x28) writev(r3, &(0x7f0000000000)=[{&(0x7f00000001c0)="98", 0x1}], 0x1) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f0000000040)) 1.211293127s ago: executing program 1 (id=328): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c00000002000000ffff000005"], 0x48) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0cc5640, &(0x7f0000001a00)={0x1, @pix={0x5, 0x1, 0x32344d59, 0xb, 0x2, 0xd0, 0x2, 0xfeedcafe, 0x0, 0x8, 0x0, 0x1}}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_SET_IRQCHIP(r6, 0xae64, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x78, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x48, 0x2, [@TCA_CGROUP_EMATCHES={0x44, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x34, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x2}]}}]}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x40010) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r0}, 0x38) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}, 0x38) 1.13132916s ago: executing program 0 (id=329): socketpair$unix(0x1, 0x3, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x4073972, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) unshare(0x400) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) lseek(0xffffffffffffffff, 0x10001, 0x0) write$nci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="040000fe0cb326600d19688ce16842"], 0xf) rseq(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000a80)={@in6={{0xa, 0x4e23, 0x0, @mcast2, 0x3}}, 0x0, 0x0, 0x2, 0x0, "03c2769bf71d7836323485466b1ab4062438333b036583040056324587db0009466206f9bd19e028710cd7a9a0520137e9cc8f9dc099fc3aecf50f4d209cb4733d2af1e022a74f0d66fba11caeef38f8"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000002c0)={@in6={{0xa, 0x4, 0x5, @mcast2, 0x1}}, 0x0, 0x0, 0x2, 0x0, "822aaee2729b48f1845387c235d30585bf81611e13f83de0710352d17ca6203825876f84442d02faa742b77bb3ad0b6c2309dbd20dcdf18f65ea2080dc4a3c1969b6613d836e2cab1517353d8510d426"}, 0xd8) 1.05628312s ago: executing program 3 (id=330): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) listns(&(0x7f0000000000)={0x20, 0x0, 0x0, 0x20000000}, 0x0, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, 0x1, 0x4, 0x301, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_CMD={0x5, 0x1, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044}, 0x80) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x200000000000, 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b9000000001090212"], 0x0) ioctl$EVIOCRMFF(r2, 0xc0085508, &(0x7f0000000040)=0x18) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r3, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r3, &(0x7f0000001380)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)=""/249, 0xf9}, 0xffffffff}], 0x2, 0x60010000, 0x0) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f00000004c0)={0x9, "34e6498c270e0000b56a000005000000000000000000000000000100"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000040)={0x7fc3, "b9abecfe9100a72ead3b3be3b6795e80561559bf34037168c9eebad8f163d551"}) r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x181000, 0x0) read$snddsp(r6, &(0x7f0000000240)=""/203, 0xcb) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) ioctl$XFS_IOC_FSCOUNTS(r0, 0x80205871, &(0x7f00000000c0)) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000140)={0x0, 0x20, "4468f53c4a24b292985cc1466770adaaf76b92110419f97cadfe8b1bd65d7f4f"}, &(0x7f0000000180)=0x28) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000240)={r8, @in6={{0xa, 0x4e21, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}}, 0x9, 0x4}, 0x88) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x34, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f000000ae00)=@newtfilter={0x24, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}}, 0x24}}, 0x0) 974.458628ms ago: executing program 1 (id=331): unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x5, &(0x7f00000004c0)=0x75, 0x4) openat$binderfs(0xffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x800, 0x0) unshare(0x10060080) unshare(0x12010000) 909.193388ms ago: executing program 1 (id=332): syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, 0xf089e8679c7014f3, 0x1}) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x8, 0x10, 0x100000002, 0x0, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) 803.572288ms ago: executing program 1 (id=333): r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0b1b0500000000005c0012800b00010069703667726500004c00028008000100", @ANYRES32=r1, @ANYBLOB="14000600fe8000000000000000000000000000bb14000700fe"], 0x7c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) 803.299356ms ago: executing program 2 (id=334): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000"], 0x48) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x2000850) 760.012932ms ago: executing program 1 (id=335): openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) (async) r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) (async) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000a00)='net/rpc\x00') getdents64(r1, &(0x7f0000000040)=""/41, 0x29) (async) getdents64(r1, &(0x7f0000000040)=""/41, 0x29) getdents64(r1, &(0x7f0000000a40)=""/4105, 0x1009) (async) getdents64(r1, &(0x7f0000000a40)=""/4105, 0x1009) r2 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r2, 0xc0347c03, &(0x7f0000000400)) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xffffffffffffffff}, {0xffff, 0xffff}, {0xffe0, 0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x8, 0x7, 0x7fffffff}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xf3f, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0x3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x0, 0xffff}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) read(r0, &(0x7f0000000180)=""/229, 0xe5) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000440)={0x2, 0xfa}, 0x2) syz_usb_connect(0x3, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040402001c60100000000010902450001010080fa0904000003ff000000070502020002000705810200020007058601000c010904000103ff000000070502020002000705810200020007058601000c01"], 0x0) (async) r5 = syz_usb_connect(0x3, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040402001c60100000000010902450001010080fa0904000003ff000000070502020002000705810200020007058601000c010904000103ff000000070502020002000705810200020007058601000c01"], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902130001000000000904"], 0x0) r6 = syz_open_dev$I2C(&(0x7f00000002c0), 0x1, 0xae00) ioctl$I2C_RDWR(r6, 0x707, &(0x7f0000000040)={&(0x7f0000000200)=[{0x8, 0x1810, 0x0, 0x0}], 0x1}) r7 = openat$nullb(0xffffff9c, &(0x7f0000000280), 0xc80, 0x0) pidfd_getfd(r1, r7, 0x0) pipe2$9p(&(0x7f0000000100), 0x4800) (async) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RCREATE(r8, &(0x7f0000000140)={0x18, 0x73, 0x2, {{0x0, 0x3, 0x7}, 0x3}}, 0x18) syz_usb_control_io(r5, 0x0, 0x0) 721.903228ms ago: executing program 2 (id=336): socket$nl_rdma(0x10, 0x3, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003800), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, 0x0, 0x20000000) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x4028800) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYRESHEX=0x0], 0xa8}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r3) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0ae43d", @ANYRES32, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESOCT=r0, @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) 569.316138ms ago: executing program 2 (id=337): socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) openat$binfmt_register(0xffffff9c, 0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sigaltstack(&(0x7f0000000300)={&(0x7f00000001c0)=""/179, 0x2, 0xb3}, &(0x7f0000000380)={&(0x7f0000000340)=""/10, 0x0, 0xa}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x3, 0x1) openat$vicodec0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) syz_ublk_add_dev(r2, r3, 0x0, r5, &(0x7f0000000480)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x80000000, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000003c0)=@new_dev={0x3, 0xe46, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x81}}}, &(0x7f0000000500)=0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)={0x0, 0x3601, 0x10000, 0x3, 0x3c3}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4858, 0x100, 0x3, 0x39b, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5814, 0x2000, 0x7, 0x29a, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcafc, 0x40000, 0x1, 0x153, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe82c, 0x40, 0x3, 0x73, 0x0, r2}}], 0x4, &(0x7f0000001dc0)={0x2e, 0x20, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x8001}, 0x0, 0x0, '\x00', {0x0, 0x689, 0x0, &(0x7f0000000dc0)=@buf_4k="c5d7a29da923983d36b8c00f178a9eb782fe0e5f6b4bc6ff88b1a2acf3fadd4405a45ffa08858b5c3d47a1d7140bad7d20f9e07a06c50c2a8c01c70e714a08ee70cb5bbea2dfb3b6495a9840b747f18c618fd2706eda05798b986c6a1da992aae62c9b1cf58ff165c127f95759f9b6be83e567f00a5adb1ce4b0f5385f5ab7225d2239943c1a7c7ee293d68c65058cb218d193788c104f9534638e3a1e87975db1b10c16fc2784c1e0107271f03d6f5578fff88887fddf193b6db256008718d37ca19e16039eb845ba2b72494bdf328146f90a58191908287c940f3d53aa18da88413d9182d11c16f0977436a2fcfb2c8a8ea70d957eca2869aa9b89287f7faa41524ec612febe7e4cca424e1ed163c5fed5504b7cd9b6790ade818028323076a7217400d290953c8feac296456de32517e215f78f8bbdd1553b1cb89f804a9954521603711d321f4dbe90e05509f1a18646d7604578c5e92ce1c5f387f80131ee5f13b3d70d14683bc6d2ebfbe9cb68a089a364979b22e7ae10984b8faff859bd30cb5bb633f08ca4abe79633877d727f1e27c7c8d91fc2e8d13ec1c4d1f41009c920cedf7b964a4c567cfb0635dc4d7e57271a4d0648ebe78194956b27d177b383ec47d9a198a2bf0e7e3703f37660ef231448519461dda2c48ce565d1ee84892e34d34019b7f34c01c070d6d9d69d37bce268eaba642aeaa60cd1fb5ed52dd9034c808023d169c4e3a278ee516fe7492f8b55e5d79da7f270feed8b29d2a74afcd2b5d4f1fe17623e27d83b829f863064005a1130911eba5bd65c12929aad2f60f91c5d774f56a4f284a386fed883eaf185b78a80e8ab9c27d343c830f7b77929e48183deb5fba2ecf0dd7e26af842ffcbf7ffe9e0d9c1ade72c5e5d82ed10dff83ace922f85f2e50e8ad573c2c18539dabd220c35d7c8e6cba58e13b75ee3edadccaa77b8f691d8112f609b55d56a0db3a8fa9e4f422e3b8c099a598e0c37a19731ca93e6c0912e0d8ee8e21e5555c1a74f6a1b4bd7d53b547dd91ba15d38229b75062cd1244707851f2ebf18407551da6c0e48faeec56da3cdef76d36884e43d2df906f7b453b5c18fd0f6bb34e2dd18cd47d603c0dd7763aa2000625ec89e8468ff49e1d57d265ba49ccbeab18a15555eccfdd1a7bac717c7a82545c27c76ef6822c2e4681b52e9178580ebe243cd76e8e9b28a0b8013f7cac2205a91ad639b798b548ff3576df76f1142cf5f68dc975615b3958bfda236c190fae9d57a6a3fc910f94da9d86dd75b833c8fe45b322f71338a7f44e9b4b08872ea1d5806a69a11cef53e3aa3b1e4c0f62d3ddfc35163a22426c65bc4ae37499ee0be64bb6b48f129dbd4d30e8b5a4bb837101814d1d7d0ab8cb261a19ab2b689d877aa28628752b2a924161293a4c7a640f2d94f1aaf17f2a8290fa16af3a15c3df028dd076ec853c7adafb42d2d64213d4bbb5df755d1fe5d85a63c6cff28324e0e266d1191965751602fb1b55ae3d957666150f9d319723557bbf1c5f4a1f1abb423547d528950586d0667d6ce2525459f194e4a9d7e03d90583128c2008dd62e3b97288957efb26c92659ca3b76afe92ecf249618e9c7052eff2a574cc021be7d340f35f7f49525951bafe01fca89caf35cdbba6fe0ec2a1b294f85c39874acd762ea6ac3e558a87fe98401fef8e860624c071f0212b9dd7ff7fd20f61153f5a8a57251997be00f76807a83bc0f2c09e8f164775338eb0aa59670f5a7b8994b1420e80d1ca672db02a556a025882a4ca9fcd4031fa96ee870fcfcee3932db6dafd6b6fcd7498fbb9ecae7c28a643ca2036a3690b05956a319cbdb4026c7bdbf49835cf5392065e51e16c439ebe80a40a353f814610ba1a329356b063323ff8ab4ae93ec7ed9465359aec386d5135119ec29852ee960c25b4722640b94bd9c08ae240d7b689674fb9d5938d40bf0ff88a7c6969b45dd54fee7a69dcd646b771237f75db8ff0823a8eaac2575fbe99c0c6007495494b4e266cd4fe2b7a7c7efdf9d6fc3cb2292a3c082367c38ad5929508f1b205143bd97d2b3fffd7bdcc11942f21faf92988d7749c0c755f48007641355018219a7bf2f859b7422a1554d0a15df536ba440643228a47e0448413ae5293f7f53078e4020f22fec5a0738987247a4b0a37e24eeaead1324aee1af2f50094d63281aaf0b60560753691f0c2944eb16bed57f81da352b761847358beefecdc75e5534c5e4ad2856cfb186f065b081fadbc68f7713a4c5b94bc90fcde974e25403b9430471716f530b09b72831415142c930e3e73d287ffb0b4f917fc5fae7c40c2b635d66f3fa91c9b637fc4e4f0daf14e82821ad2eb52ea95bf8a14dc2ed8388f130c2714d8b64ec721a17fd85503fb474abedf51d5f7d3516b0ecdd0d8ee8dbaa6149266bb94394b2ac417acc1d1a01a3c5d03ee461090dba38f27caa481226a5c88c6f92a638eb2ea2c4b1b5e14754477a1e4cd4b4a13b54426bdf17fd62bb0dcb952c8e4d41f403d7e0c5d7bc8c19da26ecd6f890dba3fe59002108d493bbdfb590decc1e95105594f30324f8bebfc4c1869f0ae6d671e7151e38232dec8b3628b86cd4dac1f70dfeee253a02eebf6b71db48cfbfddad7fd70f1ab26a8ededed638e60c25c2b629f242a94724c90b00908c843d103a4acd942b64e354bb7959e14d3de0323bc64b76693d75346b20f16483c34c12116603a210069ee26197295933d34057ea89bf9f2ca0c8878c1775600a18c4972a2863472d69077189b4d35e0cb0406481d130ab6e78d5bbb2e65712f7be2209128c78ce9d30f363e3a0ace993252dcc07a6db2e94799ee23f6fefa4d0a0187d426e512a8c50ce25e890b8ec3f00b3a1f493f30c1a5bbea56d3686205e48ed1073ce3ca1211a2666d7bc7b1de484a9ac90d91fcb2a2963faf4334e684308188ce5fb04e5ac67167a0a30d97c70b614a66b09233c62185e0271483f769cea858958c64f5f29c34e697241b6e9b20c3aef9c37b4a87f7162571b325cf3c4d7831f5a6197d92192b28487e125bf9bfcda34739359c9bd60400a0390e8ebcb7259565a82fbc76557fb4c82c055c74930eb92d1c2ecf417d09889be2826a07ce8a909a3b3898d7891931c9b455a79e18b7827a223ef9b887eba4a3aba98ca9b25203b6fd172b0715960a9b7de59a479fbb8c3d2c8c4750cdc4ea288dbd8de96c1ea4c65639f8c6c6757126b2090a2161e3b7d59c478691811b0fdea5d4ca6d15c5020d71b44dfd917ea97710797cf56c9f230b5366a7e2bfd2740787b724b4cc8e5b2ba5b020247c46176219a0bdad7d5ae5178049dc99762486dde51bae7c9556ac5d1bf5b9f1b7a05b0bd8f03c4a32b27d78d5c9e2015017fda834c78a3b0ba9d16838a80b4d97855f602fae7edd280f6182fb0069adc569b61445ca2bc4ea6e3b0b66ab87801e09e2c8549b99148a05d2b5d6871d9ec9f6ae9fbee42310018e0c94041a9fc1eca4b17689cfe5f86791e6bbfcdb5cc26cfb65c179be5e6fe1eaba2626fc80af06bc375b394abe5f87b675c01ab47dbede68ddbcab932dd77c60dda29d67ae48b9bcea049a2251ca1d729c4d614f2bc2d24eee339d090aabaeab555a5cd1ba5d22f833aa2cdbb495721c0d20217c6a358bec39d8dc82a9f8d88d304cd3df507bf2f610ae1156515707a94ed598579a68bd6a6a0e6014eec8ae042e0bfc93f2a2a5598210e973df9e87cf76f59d4cb65faca2f62e733bf620d904baba5ca0dcf4a3b785786fe6a5d286a572defa355aade4d734a3951532ae5fb1dec033495b301f2c0a5a22dc92362634d4ec9e9972a805fe31f64c4c0567bde39a5e19cb7abad3b08ed3bb2c7f43d4af88cf0f4fa197d71216649c590c327098878dd47a6d76ed9444e4d4d4b81e3d8532f45bc39757b3065d706ac70675851d1c1defd72bd33e93300ac10708c1e6368dfad06ca92c514257cc8604291f55ae0cd885f926b5dc0317a28845a723633025789955894248c79cde54b88567e775d20a374c837fcb9588b7bd77c948b464ca5dd81a301d3fdc1e9d6c9e3fbd75ac6fa40f911d60dd2e911c186b364fab66dacb53832473bdb53728e4b3e0f4648adde8a9eb4a47dd561907a8ef3163c0fc0f0d2003839cc618be0d30949a7261e1d1178e1b5ad7f4fc3a4e4352c3b00845c85e0a10e3d154a50aef76d059278cd292f0e1578b2a49610a0ae78896381a3b5b7028fccdcbd2d058c39a45678aeca518c1771b9d391d367245121a363442d11b828e3d2832e0a4a98aafff99a28c7991989fe243b66096cfb20c04db917a57d2f2a50d76f5c9ed32efeee517094ff2ca9214702e96d002b9e09c6bfc91b13b6908b3e2bc92b142c59161e7b5880e1e574b7519058fff8023d52913180d1e5d36edbfb50b62e8a852334beb4e45a9910667c58763ead929e0b8c0bd695d2f12f9d1f33a54f0aecc612e252317e4fb01c1369c0de0476cf05f64049848521071abfe641320d634172ff68a52e809f0f049e2ed707f7592d7c6cf6381eca21bafb76a6e288317425e0b9a62311b72b53751c4f2fcb3882ad7b6f362556fe0f603c72f3c97b637cc40907d46dea96f3cd4f5b71105f071825749c8a94018ee305f8312f6d2c9821051d9085b45c996e520924fcce96d485feafecb674135bfd760652f32118b49b5928d1bfe126b997415b5ebbd20c749a558c0ed1b6d28ecb9d8c1dae2b50706a8e6675539a89d6d2938c93e832059a927f62699651905f20d4013b20f0c70b8955cf18d9c30889d2a3a7b26c5eb8849f518b2133b53ac347b368bd7d46eb3b42c31f567bdeaddbe0b3cea7fcb1af030f3c56fea73cd477a15217a5a8c2550290e09cfb41d890030c8e37ce34be893ec6cbdceec6d539b9c6eba4e22fd1e8ebe51b074336ea33f614e8b54c6fb8c886146d37b24069981c6d88f02a4481670703d62009aa7434ad36bd4eb711b87df948ee548386d7741696c4ce216bb94a1b7894064795c44b379cf0277122e50aabd7e4ba01d5a1ef5d2dbae7e9c5fafbbc2ed6ad9759cc068c2926a504787be3cd5aabf9c75a3954a86d4d086dee88aeb991afe1b5b3383f81591d19938f680ef243d1b2b7a6f70dddf3f45bb577cac53394ed180d599ffbb916c9ed9b39553c3d14f640ffd9178c103f4fd2c20333be051372808a1f9535dfc2646c99f47030483b7e51192d2ba7b8ffa75449d6187ada172b956d0d2285555996c6def7391b44faa31dff8c735961e8dfed13c98574a7b95bef119d8bc99442d752213a9600868e8326935f1d7016f74475d48014f7c372da702a0471d7d7cc899c69eb2295edd619dc70432f0965a4516d24f853b5d13abbddcd28a5581315ab62ecf863b09338e4f10c8fb49e6ce29876ce63bb168ec1c8ae5034e7690ab0a2d7271991238e69aa35d3cca0ba15fc65a9a8dde3ef508163a3ce3534d04865bc98897e3d8fb6df163c6c59b4b71297515e4900bbf020076162386c03906c300d1948741eaf4b3234d9ce816cfbe93f2d2ce0cc5219c7864dd7f0d10fd123519a9e9e941fb8486aaf716230f223f17d4e720ac554e09ad6a1f3b4b3a7027a4c7c3b3c8bebb31d4979953bce9d71b6396ad1f7cfce44a4aac9bbf7b2850d2c1580924962720a1409448d22c6d85f0157ab94cf7825d15359ade99271fcf950cab5fc62862f18070fd9c92766d8f98929e42f352c402526ce63152e48e33205f3ec1fa1e381827c9d179aa492626f1efeba8d82ced15fa5be403837e6c3a"}}, &(0x7f0000001e40)) r8 = syz_io_uring_setup(0xf20, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0) syz_io_uring_submit(r9, r10, r11, &(0x7f00000001c0)=@IORING_OP_RENAMEAT={0x23, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, {0x0, r12}}) syz_ublk_setup_queues(0xffffffffffffffff, r6, &(0x7f0000000540)={0x0, 0x34fe, 0x80, 0x3, 0x2f8, 0x0, r2}, &(0x7f0000000840)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x397c, 0x2000, 0x2, 0x163, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcf9e, 0x4000, 0x0, 0x28e, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x26c4, 0xb00, 0x0, 0xb8, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa49, 0x8, 0x1, 0x289, 0x0, r2}}], 0x4, &(0x7f0000002e80)={0x2e, 0x5a, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x8000}, 0x0, r12, '\x00', {0x1, 0x515, 0x0, &(0x7f0000001e80)=@buf_1k="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"}}, &(0x7f0000002f00)) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x1, 0x12}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) sendmsg$nl_route(r13, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB="38000000100001040100000000000000000000000000000000000000000000000900030069666232000000000c00128008000100696662"], 0x38}}, 0x0) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x6, @mcast1, 0x8}, 0x1c) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0xf4}}, 0x10) r15 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x82) r16 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r16, 0xc0a85320, &(0x7f0000001e00)={{0x80, 0x80}, 'port1\x00', 0x3d, 0x0, 0x7ffb, 0x1, 0x10001, 0x6935, 0x5, 0x0, 0x3, 0x9}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r16, 0xc0a85320, &(0x7f0000000100)={{0x80, 0x10}, 'port0\x00', 0x20, 0x50000, 0x7fff, 0x0, 0x5, 0x9, 0x90, 0x0, 0x1, 0xb7}) ioctl$USBDEVFS_CONTROL(r15, 0xc0185500, &(0x7f0000000040)={0x0, 0xb, 0x102, 0x7, 0x0, 0x0, 0x0}) 561.063232ms ago: executing program 0 (id=338): openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2100, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000240000/0x1000)=nil, 0x3) madvise(&(0x7f000040f000/0x4000)=nil, 0x4000, 0x13) io_uring_setup(0xf06, &(0x7f00000003c0)={0x0, 0x8000efa9, 0x800, 0x43, 0x161}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) epoll_create(0x401) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002f40)=ANY=[@ANYRES32=r0], 0xcc}}, 0x4000840) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r2, 0x8800000) read$FUSE(r2, &(0x7f0000002f40)={0x2020}, 0xfffffd24) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000001900010000000000000000000a100000fd040000002f000008001e000100000008001700fffffffffa3506a58ff3ed97a136c99ebf2bf0971a8849141160ca7286ee3e1510842d847a3438e621bf49732133251cc05ae16787f769f5c1c9ebbfca6d14322054e7f8616789d6d588721a7344f77e616dad3beaea356193388789ff10979177020cb25c16934483356d2b93ed7fb9d3908f735dc042615e2348ff623d0bc6d57e81febf3fd2785b3464936afe7771cb7d7091eb09301b1fac47b4a8dba2c276c7f9db1d4a"], 0x2c}, 0x1, 0x0, 0x0, 0x448d0}, 0x4000054) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f009f4b22000066bad104b800800000ef660f388034e866b826010f00d00f0dbafb0000000fc76a73c4c285974ed7c4c17c52270f18144e9a00d0ffffd100", 0x3f}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001040400", @ANYRES32=0x0, @ANYBLOB="03050000000002000800250001000000050010"], 0x30}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) r7 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x7f, 0x42500) ioctl$MON_IOCH_MFLUSH(r7, 0x9208, 0x8000000000000000) (fail_nth: 1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x2c}}, 0x0) sendto$inet6(r6, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) socket$nl_route(0x10, 0x3, 0x0) 428.427329ms ago: executing program 2 (id=339): openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2100, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000240000/0x1000)=nil, 0x3) madvise(&(0x7f000040f000/0x4000)=nil, 0x4000, 0x13) io_uring_setup(0xf06, &(0x7f00000003c0)={0x0, 0x8000efa9, 0x800, 0x43, 0x161}) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) epoll_create(0x401) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002f40)=ANY=[@ANYRES32=r0], 0xcc}}, 0x4000840) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) ftruncate(r2, 0x8800000) read$FUSE(r2, &(0x7f0000002f40)={0x2020}, 0xfffffd24) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x6) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000001900010000000000000000000a100000fd040000002f000008001e000100000008001700fffffffffa3506a58ff3ed97a136c99ebf2bf0971a8849141160ca7286ee3e1510842d847a3438e621bf49732133251cc05ae16787f769f5c1c9ebbfca6d14322054e7f8616789d6d588721a7344f77e616dad3beaea356193388789ff10979177020cb25c16934483356d2b93ed7fb9d3908f735dc042615e2348ff623d0bc6d57e81febf3fd2785b3464936afe7771cb7d7091eb09301b1fac47b4a8dba2c276c7f9db1d4a"], 0x2c}, 0x1, 0x0, 0x0, 0x448d0}, 0x4000054) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="0f009f4b22000066bad104b800800000ef660f388034e866b826010f00d00f0dbafb0000000fc76a73c4c285974ed7c4c17c52270f18144e9a00d0ffffd100", 0x3f}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001040400", @ANYRES32=0x0, @ANYBLOB="03050000000002000800250001000000050010"], 0x30}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) r7 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x7f, 0x42500) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000580)=@assoc_value={0x0, 0x8}, &(0x7f00000005c0)=0x8) ioctl$MON_IOCH_MFLUSH(r7, 0x9208, 0x8000000000000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x2c}}, 0x0) sendto$inet6(r6, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 4 (id=340): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0xb, 0x3}) socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) unlink(&(0x7f00000003c0)='./cgroup\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x0, 0x2, 0xc0150, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0x0) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@get={0xe0, 0x13, 0x1, 0x70bd26, 0x25dfdbff, {{'sha256\x00'}, '\x00', '\x00', 0x460, 0x2041}}, 0xe0}, 0x1, 0x0, 0x0, 0x4001}, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x250, 0xf3, 0x6d, 0x1c, 0x10, 0x856, 0xac32, 0xd841, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xfb, 0xb4, 0xc0, 0xc, "", [{{0x9, 0x4, 0x5f, 0x4, 0x0, 0x81, 0xaf, 0xe1, 0x8}}]}}]}}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x5, 0x400, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newsa={0xec, 0x10, 0x413, 0x70bd28, 0x0, {{@in=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20}, {@in6=@private2, 0x0, 0x32}, @in6=@ipv4={'\x00', '\xff\xff', @empty}, {0xfffffffffffffffe, 0x7, 0x0, 0x40000000000008, 0xffffffffffffffff, 0xfffffffffffffffe, 0x7e, 0x7fff}, {0x0, 0x6, 0xcc, 0x1}, {0x5}, 0x0, 0x0, 0x2, 0x1, 0x1}}, 0xec}}, 0x20040084) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8940, &(0x7f0000002280)={'syzkaller0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, 0x0, 0x20008080) sendmsg$NL80211_CMD_VENDOR(r1, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): 0 [ 88.117594][ T5630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.150940][ T5631] veth0_macvtap: entered promiscuous mode [ 88.197325][ T5632] veth0_macvtap: entered promiscuous mode [ 88.207981][ T5631] veth1_macvtap: entered promiscuous mode [ 88.210436][ T5628] veth0_vlan: entered promiscuous mode [ 88.241639][ T5632] veth1_macvtap: entered promiscuous mode [ 88.243676][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.243699][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.294930][ T5628] veth1_vlan: entered promiscuous mode [ 88.346574][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.357184][ T1124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.357209][ T1124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.376231][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.395171][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.420480][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.449145][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.451110][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.451161][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.451201][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.481391][ T52] Bluetooth: hci0: command tx timeout [ 88.509161][ T5630] veth0_vlan: entered promiscuous mode [ 88.541149][ T5629] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 88.568309][ T4934] Bluetooth: hci1: command tx timeout [ 88.568397][ T52] Bluetooth: hci2: command tx timeout [ 88.582037][ T80] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.584562][ T34] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.584694][ T34] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.584805][ T34] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.628561][ T5629] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 88.629262][ T5629] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 88.629700][ T5629] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 88.630236][ T5629] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon. [ 88.649894][ T52] Bluetooth: hci3: command tx timeout [ 88.705185][ T5630] veth1_vlan: entered promiscuous mode [ 88.707135][ T5628] veth0_macvtap: entered promiscuous mode [ 88.719653][ T52] Bluetooth: hci4: command tx timeout [ 88.796863][ T5628] veth1_macvtap: entered promiscuous mode [ 88.947570][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.947595][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.983823][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.036168][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.056423][ T5630] veth0_macvtap: entered promiscuous mode [ 89.089066][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.089092][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.157968][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.158082][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.158125][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.158164][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.161756][ T5630] veth1_macvtap: entered promiscuous mode [ 89.227101][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.227125][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.329239][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.329263][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.364144][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.402375][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.577870][ T34] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.577924][ T34] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.577963][ T34] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.578001][ T34] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.660543][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.660589][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.833185][ T5719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.834701][ T5719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.884092][ T1220] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 89.937642][ T1124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.937668][ T1124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.252651][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.252675][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.285573][ T5732] process 'syz.4.8' launched '/dev/fd/4' with NULL argv: empty string added [ 90.558104][ T52] Bluetooth: hci0: command tx timeout [ 90.591600][ T5739] netlink: 76 bytes leftover after parsing attributes in process `syz.3.10'. [ 90.647952][ T52] Bluetooth: hci2: command tx timeout [ 90.647988][ T52] Bluetooth: hci1: command tx timeout [ 90.728051][ T4934] Bluetooth: hci3: command tx timeout [ 90.754258][ T5740] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10'. [ 90.756027][ T5741] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10'. [ 90.807955][ T4934] Bluetooth: hci4: command tx timeout [ 90.981030][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.981050][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.160794][ T5744] nvme nvme0: failed to connect socket: -111 [ 91.397615][ T5751] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 91.800424][ T5759] netlink: 64 bytes leftover after parsing attributes in process `syz.4.12'. [ 92.023952][ T9] cfg80211: failed to load regulatory.db [ 92.108647][ T5682] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 92.276896][ T5682] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 92.293260][ T5682] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 92.293282][ T5682] usb 3-1: config 0 has no interface number 0 [ 92.293312][ T5682] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 92.293331][ T5682] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 92.293362][ T5682] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.357442][ T5682] usb 3-1: config 0 descriptor?? [ 92.378342][ T5758] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 92.494762][ T5761] only policy match revision 0 supported [ 92.494777][ T5761] unable to load match [ 92.516908][ T5682] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 93.027686][ T5758] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 93.027717][ T5758] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 93.066967][ T5758] vhci_hcd vhci_hcd.0: Device attached [ 93.347875][ T5729] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 93.455311][ T5773] Zero length message leads to an empty skb [ 93.472698][ T5773] fuse: Unknown parameter ' [ 93.472698][ T5773] ä' [ 94.105735][ T5770] vhci_hcd: connection reset by peer [ 94.119230][ T59] vhci_hcd vhci_hcd.2: stop threads [ 94.119558][ T59] vhci_hcd vhci_hcd.2: release socket [ 94.147371][ T59] vhci_hcd vhci_hcd.2: disconnect device [ 94.442918][ C1] iowarrior 3-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 94.490435][ T9] usb 3-1: USB disconnect, device number 2 [ 95.225078][ T5675] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 95.241188][ T5794] binder_alloc: 5793: binder_alloc_buf, no vma [ 95.246799][ T5794] binder: 5793:5794 ioctl c0306201 80000180 returned -11 [ 95.398842][ T5675] usb 4-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 95.400339][ T5675] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 95.400373][ T5675] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 95.402442][ T5675] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 95.402469][ T5675] usb 4-1: Product: syz [ 95.402484][ T5675] usb 4-1: Manufacturer: syz [ 95.566831][ T5675] mos7840 4-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 95.705691][ T30] audit: type=1326 audit(1791188429.105:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5802 comm="syz.1.24" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef0ec code=0x7ffc0000 [ 95.716819][ T30] audit: type=1326 audit(1791188429.115:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5802 comm="syz.1.24" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef0ec code=0x7ffc0000 [ 95.765276][ T30] audit: type=1326 audit(1791188429.165:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5802 comm="syz.1.24" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6fef0ec code=0x7ffc0000 [ 95.765330][ T30] audit: type=1326 audit(1791188429.165:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5802 comm="syz.1.24" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef0ec code=0x7ffc0000 [ 95.765372][ T30] audit: type=1326 audit(1791188429.165:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5802 comm="syz.1.24" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef0ec code=0x7ffc0000 [ 95.898377][ T30] audit: type=1326 audit(1791188429.295:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5802 comm="syz.1.24" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf6fef0ec code=0x7ffc0000 [ 95.898420][ T30] audit: type=1326 audit(1791188429.295:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5802 comm="syz.1.24" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef0ec code=0x7ffc0000 [ 95.898451][ T30] audit: type=1326 audit(1791188429.295:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5802 comm="syz.1.24" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef0ec code=0x7ffc0000 [ 95.911428][ T30] audit: type=1326 audit(1791188429.305:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5802 comm="syz.1.24" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf6fef0ec code=0x7ffc0000 [ 95.911572][ T30] audit: type=1326 audit(1791188429.305:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5802 comm="syz.1.24" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fef0ec code=0x7ffc0000 [ 96.009075][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.107052][ T5675] mos7840 ttyUSB0: probe with driver mos7840 failed with error -5 [ 96.124830][ T5799] nvme nvme0: failed to connect socket: -111 [ 96.396930][ T5809] syzkaller0: entered promiscuous mode [ 96.396952][ T5809] syzkaller0: entered allmulticast mode [ 96.509435][ T5808] syzkaller1: entered promiscuous mode [ 96.509455][ T5808] syzkaller1: entered allmulticast mode [ 96.661032][ T5812] fuse: Unknown parameter ' [ 96.661032][ T5812] ä' [ 97.221006][ T5817] bridge1: entered promiscuous mode [ 97.938339][ T5675] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 97.987933][ T5706] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 98.067883][ T25] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 98.097858][ T5675] usb 1-1: Using ep0 maxpacket: 8 [ 98.098694][ T5675] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 98.102090][ T5675] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.102108][ T5675] usb 1-1: config 0 has no interfaces? [ 98.102130][ T5675] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.126447][ T5675] usb 1-1: config 0 descriptor?? [ 98.159661][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 98.177125][ T5706] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 98.198386][ T5706] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 98.198417][ T5706] usb 2-1: config 0 has no interface number 0 [ 98.198460][ T5706] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 98.198489][ T5706] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 98.198531][ T5706] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.207578][ T5706] usb 2-1: config 0 descriptor?? [ 98.235708][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 98.256286][ T25] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 98.291781][ T25] usb 5-1: config 1 has an invalid descriptor of length 115, skipping remainder of the config [ 98.291812][ T25] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 98.292828][ T5829] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 98.327630][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.327659][ T25] usb 5-1: Product: syz [ 98.327670][ T25] usb 5-1: Manufacturer: syz [ 98.327681][ T25] usb 5-1: SerialNumber: syz [ 98.349523][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 98.353027][ T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 98.375792][ T5706] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 98.396874][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.396903][ T9] usb 3-1: config 0 has no interfaces? [ 98.396945][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.459693][ T9] usb 3-1: config 0 descriptor?? [ 98.478777][ T25] usb 5-1: 0:2 : does not exist [ 98.493381][ T5729] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 98.534729][ T9] usb 4-1: USB disconnect, device number 3 [ 98.611107][ T9] mos7840 4-1:1.0: device disconnected [ 98.636793][ T25] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 98.774371][ T5668] usb 1-1: USB disconnect, device number 2 [ 98.787657][ T25] usb 5-1: USB disconnect, device number 2 [ 99.065881][ T5834] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 99.065921][ T5834] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 99.072033][ T5834] vhci_hcd vhci_hcd.0: Device attached [ 99.179740][ T5706] usb 3-1: USB disconnect, device number 3 [ 99.349527][ T9] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 99.399370][ T5620] udevd[5620]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 99.649869][ T5843] netlink: 12 bytes leftover after parsing attributes in process `syz.4.34'. [ 100.178729][ T25] usb 2-1: USB disconnect, device number 2 [ 100.297604][ T5840] vhci_hcd: connection reset by peer [ 100.310041][ T50] vhci_hcd vhci_hcd.1: stop threads [ 100.310070][ T50] vhci_hcd vhci_hcd.1: release socket [ 100.310121][ T50] vhci_hcd vhci_hcd.1: disconnect device [ 100.742450][ T5851] nvme nvme0: failed to connect socket: -111 [ 100.889550][ T25] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 101.061339][ T25] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 101.065114][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.065135][ T25] usb 3-1: Product: syz [ 101.065146][ T25] usb 3-1: Manufacturer: syz [ 101.065156][ T25] usb 3-1: SerialNumber: syz [ 101.100939][ T25] usb 3-1: config 0 descriptor?? [ 101.107242][ T25] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 101.154759][ T25] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 101.155707][ T25] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 101.155775][ T25] usb 3-1: media controller created [ 101.192613][ T5870] netlink: 76 bytes leftover after parsing attributes in process `syz.1.43'. [ 101.235118][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 101.314851][ T5861] dvb-usb: bulk message failed: -22 (7/0) [ 101.338956][ T5861] netlink: 44 bytes leftover after parsing attributes in process `syz.2.40'. [ 101.347404][ T25] DVB: Unable to find symbol mt352_attach() [ 101.426277][ T25] DVB: Unable to find symbol nxt6000_attach() [ 101.426296][ T25] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 101.450250][ T25] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5 [ 101.468577][ T5870] veth0: entered promiscuous mode [ 101.468651][ T5870] veth0: entered allmulticast mode [ 101.490953][ T25] dvb-usb: schedule remote query interval to 1000 msecs. [ 101.490974][ T25] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 101.491007][ T25] dvb-usb: bulk message failed: -22 (7/0) [ 101.491018][ T25] dvb-usb: bulk message failed: -22 (7/0) [ 101.528868][ T25] usb 3-1: USB disconnect, device number 4 [ 101.664151][ T25] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 101.672906][ T5675] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 101.798313][ T5668] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 101.815017][ T5883] netlink: 12 bytes leftover after parsing attributes in process `syz.1.47'. [ 101.819524][ T5615] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 101.839535][ T5675] usb 5-1: Using ep0 maxpacket: 16 [ 101.840386][ T5675] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 101.842896][ T5675] usb 5-1: config 1 has an invalid descriptor of length 115, skipping remainder of the config [ 101.842923][ T5675] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 101.898724][ T5675] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.898744][ T5675] usb 5-1: Product: syz [ 101.898755][ T5675] usb 5-1: Manufacturer: syz [ 101.898766][ T5675] usb 5-1: SerialNumber: syz [ 101.942762][ T5675] usb 5-1: 0:2 : does not exist [ 101.949149][ T5668] usb 1-1: Using ep0 maxpacket: 8 [ 101.954495][ T5668] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 101.970457][ T5668] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 101.970517][ T5668] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 101.970546][ T5668] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 101.970573][ T5668] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 101.970596][ T5668] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 102.008519][ T5615] usb 4-1: Using ep0 maxpacket: 16 [ 102.044319][ T5615] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 102.055836][ T5615] usb 4-1: config 1 has an invalid descriptor of length 115, skipping remainder of the config [ 102.055913][ T5615] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 102.097578][ T5668] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.097611][ T5668] usb 1-1: Product: syz [ 102.097627][ T5668] usb 1-1: Manufacturer: syz [ 102.097643][ T5668] usb 1-1: SerialNumber: syz [ 102.104228][ T5615] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.104312][ T5615] usb 4-1: Product: syz [ 102.104410][ T5615] usb 4-1: Manufacturer: syz [ 102.104453][ T5615] usb 4-1: SerialNumber: syz [ 102.158361][ T5668] usb 1-1: config 0 descriptor?? [ 102.209911][ T5675] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 102.242723][ T5668] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input6 [ 102.368777][ T5615] usb 4-1: 0:2 : does not exist [ 102.384505][ T5675] usb 5-1: USB disconnect, device number 3 [ 102.509457][ T5615] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 102.648031][ T5880] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 102.813720][ T5880] usb 2-1: Using ep0 maxpacket: 32 [ 102.818963][ T5880] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 102.850966][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.876179][ T5880] usb 2-1: config 0 descriptor?? [ 102.916540][ T5880] gspca_main: sunplus-2.14.0 probing 041e:400b [ 102.942942][ T5615] usb 4-1: USB disconnect, device number 4 [ 103.253968][ T5881] udevd[5881]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 103.276599][ T5620] udevd[5620]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 103.428417][ T5880] gspca_sunplus: reg_w_riv err -110 [ 103.428521][ T5880] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 104.406698][ T5925] FAULT_INJECTION: forcing a failure. [ 104.406698][ T5925] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 104.406736][ T5925] CPU: 0 UID: 0 PID: 5925 Comm: syz.2.55 Tainted: G L syzkaller #0 PREEMPT(full) [ 104.406756][ T5925] Tainted: [L]=SOFTLOCKUP [ 104.406762][ T5925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 104.406777][ T5925] Call Trace: [ 104.406786][ T5925] [ 104.406793][ T5925] dump_stack_lvl+0xe8/0x150 [ 104.406827][ T5925] should_fail_ex+0x410/0x560 [ 104.406851][ T5925] _copy_to_user+0x31/0xb0 [ 104.406876][ T5925] snd_timer_user_read+0x3eb/0xa10 [ 104.406907][ T5925] ? __pfx_snd_timer_user_read+0x10/0x10 [ 104.406926][ T5925] ? common_file_perm+0x20e/0x2b0 [ 104.406957][ T5925] ? bpf_lsm_file_permission+0x9/0x20 [ 104.406982][ T5925] ? security_file_permission+0x75/0x260 [ 104.407002][ T5925] ? rw_verify_area+0x24a/0x4c0 [ 104.407031][ T5925] vfs_readv+0x57c/0x850 [ 104.407052][ T5925] ? __pfx_snd_timer_user_read+0x10/0x10 [ 104.407072][ T5925] ? __pfx_vfs_readv+0x10/0x10 [ 104.407103][ T5925] ? __fget_files+0x2a/0x420 [ 104.407129][ T5925] ? __fget_files+0x3a2/0x420 [ 104.407152][ T5925] ? __fget_files+0x2a/0x420 [ 104.407182][ T5925] do_readv+0x154/0x2e0 [ 104.407203][ T5925] ? __pfx_do_readv+0x10/0x10 [ 104.407230][ T5925] __do_fast_syscall_32+0x27a/0x6b0 [ 104.407246][ T5925] ? do_fast_syscall_32+0x33/0x70 [ 104.407270][ T5925] ? asm_int80_emulation+0x1a/0x20 [ 104.407285][ T5925] ? do_int80_emulation+0x299/0x500 [ 104.407309][ T5925] ? trace_irq_disable+0x3b/0x140 [ 104.407329][ T5925] do_fast_syscall_32+0x33/0x70 [ 104.407356][ T5925] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 104.407376][ T5925] RIP: 0023:0xf70af0ec [ 104.407394][ T5925] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 104.407407][ T5925] RSP: 002b:00000000f549d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000091 [ 104.407428][ T5925] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000200 [ 104.407439][ T5925] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 104.407454][ T5925] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 104.407463][ T5925] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 104.407472][ T5925] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 104.407494][ T5925] [ 104.480854][ T9] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 104.935037][ T5933] netlink: 76 bytes leftover after parsing attributes in process `syz.2.57'. [ 105.182252][ T5933] veth1_to_team: entered promiscuous mode [ 105.182282][ T5933] veth1_to_team: entered allmulticast mode [ 105.451659][ T5946] netlink: 12 bytes leftover after parsing attributes in process `syz.2.59'. [ 105.523103][ T9] usb 1-1: USB disconnect, device number 3 [ 105.730175][ T5955] fuse: Unknown parameter ' [ 105.730175][ T5955] ä' [ 105.894365][ T5960] macvlan0: entered promiscuous mode [ 105.920052][ T5960] netlink: 'syz.3.63': attribute type 1 has an invalid length. [ 105.920082][ T5960] netlink: 'syz.3.63': attribute type 2 has an invalid length. [ 105.987125][ T9] usb 2-1: USB disconnect, device number 3 [ 106.112730][ T5963] fuse: Unknown parameter ' [ 106.112730][ T5963] ä' [ 106.257960][ T5970] netlink: 76 bytes leftover after parsing attributes in process `syz.2.70'. [ 106.416032][ T5970] hsr_slave_1: entered allmulticast mode [ 106.628880][ T5729] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 106.777903][ T5729] usb 1-1: Using ep0 maxpacket: 8 [ 106.778855][ T5729] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 106.780207][ T5729] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 106.780236][ T5729] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 106.780265][ T5729] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 106.780329][ T5729] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 106.780354][ T5729] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 106.830878][ T5729] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.830908][ T5729] usb 1-1: Product: syz [ 106.830919][ T5729] usb 1-1: Manufacturer: syz [ 106.830930][ T5729] usb 1-1: SerialNumber: syz [ 106.904918][ T5729] usb 1-1: config 0 descriptor?? [ 106.936294][ T5729] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input7 [ 107.403949][ T5990] syzkaller0: entered promiscuous mode [ 107.403975][ T5990] syzkaller0: entered allmulticast mode [ 107.856194][ T6002] fuse: Unknown parameter ' [ 107.856194][ T6002] ä' [ 108.397935][ T5706] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 108.518445][ T6004] nvme nvme0: failed to connect socket: -111 [ 108.551744][ T5706] usb 4-1: Using ep0 maxpacket: 16 [ 108.555093][ T5706] usb 4-1: unable to get BOS descriptor or descriptor too short [ 108.555133][ T5706] usb 4-1: New USB device found, idVendor=0856, idProduct=ac32, bcdDevice=d8.41 [ 108.556066][ T5706] usb 4-1: config 251 has an invalid interface number: 95 but max is 0 [ 108.556085][ T5706] usb 4-1: config 251 has no interface number 0 [ 108.556106][ T5706] usb 4-1: config 251 interface 95 has no altsetting 0 [ 108.617109][ T5706] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.617217][ T5706] usb 4-1: Product: syz [ 108.617233][ T5706] usb 4-1: Manufacturer: syz [ 108.617256][ T5706] usb 4-1: SerialNumber: syz [ 108.832275][ T6020] netlink: 28 bytes leftover after parsing attributes in process `syz.1.78'. [ 109.005368][ T5706] mos7840 4-1:251.95: required endpoints missing [ 109.032019][ T5706] usb 4-1: USB disconnect, device number 5 [ 109.429749][ T5697] usb 1-1: USB disconnect, device number 4 [ 109.520037][ T6038] netlink: 16 bytes leftover after parsing attributes in process `syz.4.82'. [ 109.695764][ T6038] ipvlan1: entered promiscuous mode [ 109.695864][ T6038] ipvlan1: entered allmulticast mode [ 109.695881][ T6038] veth0_vlan: entered allmulticast mode [ 109.930024][ T6046] batman_adv: batadv0: Adding interface: dummy0 [ 109.930047][ T6046] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.930082][ T6046] batman_adv: batadv0: Interface activated: dummy0 [ 110.103451][ T6046] batadv0: mtu less than device minimum [ 110.104956][ T6046] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 110.105902][ T6046] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 110.106839][ T6046] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 110.109471][ T6046] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 110.113664][ T6046] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 110.117027][ T6046] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 110.120937][ T6046] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 110.124516][ T6046] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 110.125222][ T5706] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 110.126847][ T6046] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 110.377874][ T5706] usb 3-1: Using ep0 maxpacket: 8 [ 110.378554][ T5706] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 110.379670][ T5706] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.379695][ T5706] usb 3-1: config 0 has no interfaces? [ 110.379728][ T5706] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.539114][ T5706] usb 3-1: config 0 descriptor?? [ 110.951730][ T5706] usb 3-1: USB disconnect, device number 5 [ 111.453769][ T6082] nvme nvme0: failed to connect socket: -111 [ 111.688305][ T5682] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 111.763024][ T6092] only policy match revision 0 supported [ 111.763046][ T6092] unable to load match [ 111.814950][ T6100] fuse: Unknown parameter ' [ 111.814950][ T6100] ä' [ 111.859232][ T5682] usb 2-1: Using ep0 maxpacket: 8 [ 111.862068][ T5682] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 111.863654][ T5682] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 111.863683][ T5682] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 111.863711][ T5682] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 111.863738][ T5682] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 111.863762][ T5682] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 111.865937][ T5682] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.865962][ T5682] usb 2-1: Product: syz [ 111.865977][ T5682] usb 2-1: Manufacturer: syz [ 111.865993][ T5682] usb 2-1: SerialNumber: syz [ 111.907263][ T5682] usb 2-1: config 0 descriptor?? [ 111.995348][ T5682] input: KB Gear Tablet as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input8 [ 112.046623][ T6105] netlink: 4 bytes leftover after parsing attributes in process `syz.2.97'. [ 112.046754][ T6105] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 112.046777][ T6105] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 112.089998][ T5706] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 112.181753][ T6108] fuse: Unknown parameter ' [ 112.181753][ T6108] ä' [ 112.249060][ T5706] usb 4-1: Using ep0 maxpacket: 16 [ 112.278820][ T5706] usb 4-1: unable to get BOS descriptor or descriptor too short [ 112.278883][ T5706] usb 4-1: New USB device found, idVendor=0856, idProduct=ac32, bcdDevice=d8.41 [ 112.307935][ T5706] usb 4-1: config 251 has an invalid interface number: 95 but max is 0 [ 112.307968][ T5706] usb 4-1: config 251 has no interface number 0 [ 112.308003][ T5706] usb 4-1: config 251 interface 95 has no altsetting 0 [ 112.350213][ T5706] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.350249][ T5706] usb 4-1: Product: syz [ 112.350267][ T5706] usb 4-1: Manufacturer: syz [ 112.350284][ T5706] usb 4-1: SerialNumber: syz [ 112.665468][ T5706] mos7840 4-1:251.95: required endpoints missing [ 112.683958][ T5706] usb 4-1: USB disconnect, device number 6 [ 112.814613][ T5682] usb 2-1: USB disconnect, device number 4 [ 113.001323][ T25] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 113.147828][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 113.148689][ T25] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 113.149860][ T25] usb 5-1: config 1 has an invalid descriptor of length 115, skipping remainder of the config [ 113.149886][ T25] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 113.153306][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.153342][ T25] usb 5-1: Product: syz [ 113.153358][ T25] usb 5-1: Manufacturer: syz [ 113.153373][ T25] usb 5-1: SerialNumber: syz [ 113.232334][ T25] usb 5-1: 0:2 : does not exist [ 113.424909][ T25] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 113.532315][ T6130] syzkaller0: entered promiscuous mode [ 113.532341][ T6130] syzkaller0: entered allmulticast mode [ 113.589106][ T25] usb 5-1: USB disconnect, device number 4 [ 113.785526][ T5881] udevd[5881]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 113.880731][ T6132] nvme nvme0: failed to connect socket: -111 [ 113.901177][ T6136] fuse: Unknown parameter ' [ 113.901177][ T6136] ä' [ 113.972749][ T6138] only policy match revision 0 supported [ 113.972765][ T6138] unable to load match [ 114.046213][ T6140] netlink: 16 bytes leftover after parsing attributes in process `syz.1.109'. [ 114.046263][ T6140] veth1_macvtap: entered allmulticast mode [ 114.235962][ T6146] fuse: Unknown parameter ' [ 114.235962][ T6146] ä' [ 114.246399][ T6150] FAULT_INJECTION: forcing a failure. [ 114.246399][ T6150] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.246501][ T6150] CPU: 1 UID: 0 PID: 6150 Comm: syz.2.113 Tainted: G L syzkaller #0 PREEMPT(full) [ 114.246608][ T6150] Tainted: [L]=SOFTLOCKUP [ 114.246629][ T6150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 114.246656][ T6150] Call Trace: [ 114.246686][ T6150] [ 114.246717][ T6150] dump_stack_lvl+0xe8/0x150 [ 114.246841][ T6150] should_fail_ex+0x410/0x560 [ 114.246928][ T6150] _copy_from_user+0x2d/0xb0 [ 114.247014][ T6150] get_compat_msghdr+0xb3/0x4c0 [ 114.247094][ T6150] ? __pfx_get_compat_msghdr+0x10/0x10 [ 114.247193][ T6150] ___sys_sendmsg+0x201/0x360 [ 114.247280][ T6150] ? __lock_acquire+0x747/0x2de0 [ 114.247371][ T6150] ? __pfx____sys_sendmsg+0x10/0x10 [ 114.247458][ T6150] ? get_pid_task+0x20/0x1f0 [ 114.247514][ T6150] ? get_pid_task+0x20/0x1f0 [ 114.247568][ T6150] ? get_pid_task+0x20/0x1f0 [ 114.247695][ T6150] ? __fget_files+0x2a/0x420 [ 114.247776][ T6150] ? __fget_files+0x3a2/0x420 [ 114.247873][ T6150] __sys_sendmsg+0x177/0x240 [ 114.247971][ T6150] ? __pfx___sys_sendmsg+0x10/0x10 [ 114.248137][ T6150] __do_fast_syscall_32+0x27a/0x6b0 [ 114.248194][ T6150] ? do_fast_syscall_32+0x33/0x70 [ 114.248281][ T6150] ? asm_int80_emulation+0x1a/0x20 [ 114.248345][ T6150] ? do_int80_emulation+0x299/0x500 [ 114.248430][ T6150] ? trace_irq_disable+0x3b/0x140 [ 114.248517][ T6150] do_fast_syscall_32+0x33/0x70 [ 114.248608][ T6150] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 114.248683][ T6150] RIP: 0023:0xf70af0ec [ 114.248746][ T6150] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 114.248792][ T6150] RSP: 002b:00000000f549d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 114.248852][ T6150] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000400 [ 114.248894][ T6150] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 114.248928][ T6150] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 114.248959][ T6150] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 114.248999][ T6150] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 114.249076][ T6150] [ 114.798572][ T6159] syzkaller0: entered promiscuous mode [ 114.798598][ T6159] syzkaller0: entered allmulticast mode [ 114.967844][ T5675] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 115.006252][ T6167] fuse: Unknown parameter ' [ 115.006252][ T6167] ä' [ 115.127950][ T5675] usb 2-1: Using ep0 maxpacket: 16 [ 115.152463][ T5675] usb 2-1: unable to get BOS descriptor or descriptor too short [ 115.152502][ T5675] usb 2-1: New USB device found, idVendor=0856, idProduct=ac32, bcdDevice=d8.41 [ 115.182506][ T5675] usb 2-1: config 251 has an invalid interface number: 95 but max is 0 [ 115.182527][ T5675] usb 2-1: config 251 has no interface number 0 [ 115.182551][ T5675] usb 2-1: config 251 interface 95 has no altsetting 0 [ 115.215141][ T5675] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.215173][ T5675] usb 2-1: Product: syz [ 115.215192][ T5675] usb 2-1: Manufacturer: syz [ 115.215203][ T5675] usb 2-1: SerialNumber: syz [ 115.378081][ T6170] netlink: 12 bytes leftover after parsing attributes in process `syz.2.120'. [ 115.626830][ T5675] mos7840 2-1:251.95: required endpoints missing [ 115.648861][ T5675] usb 2-1: USB disconnect, device number 5 [ 115.850431][ T6174] nvme nvme0: failed to connect socket: -111 [ 116.209625][ T5682] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 116.259932][ T6185] FAULT_INJECTION: forcing a failure. [ 116.259932][ T6185] name failslab, interval 1, probability 0, space 0, times 0 [ 116.259962][ T6185] CPU: 0 UID: 0 PID: 6185 Comm: syz.3.125 Tainted: G L syzkaller #0 PREEMPT(full) [ 116.259990][ T6185] Tainted: [L]=SOFTLOCKUP [ 116.259996][ T6185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 116.260006][ T6185] Call Trace: [ 116.260012][ T6185] [ 116.260019][ T6185] dump_stack_lvl+0xe8/0x150 [ 116.260047][ T6185] should_fail_ex+0x410/0x560 [ 116.260071][ T6185] should_failslab+0xa8/0x100 [ 116.260094][ T6185] __kmalloc_noprof+0xfe/0x720 [ 116.260111][ T6185] ? rcu_is_watching+0x16/0xb0 [ 116.260132][ T6185] ? tomoyo_realpath_from_path+0xef/0x640 [ 116.260156][ T6185] ? tomoyo_realpath_from_path+0xef/0x640 [ 116.260185][ T6185] tomoyo_realpath_from_path+0xef/0x640 [ 116.260216][ T6185] ? tomoyo_path_number_perm+0x219/0x5f0 [ 116.260237][ T6185] tomoyo_path_number_perm+0x246/0x5f0 [ 116.260259][ T6185] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 116.260279][ T6185] ? __lock_acquire+0x747/0x2de0 [ 116.260307][ T6185] ? hook_file_ioctl_compat+0x1f2/0x600 [ 116.260344][ T6185] ? __fget_files+0x2a/0x420 [ 116.260371][ T6185] ? __fget_files+0x3a2/0x420 [ 116.260394][ T6185] ? __fget_files+0x2a/0x420 [ 116.260420][ T6185] security_file_ioctl_compat+0xc3/0x2a0 [ 116.260442][ T6185] __ia32_compat_sys_ioctl+0x139/0x950 [ 116.260464][ T6185] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 116.260485][ T6185] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 116.260512][ T6185] ? __fget_files+0x3a2/0x420 [ 116.260541][ T6185] ? fput+0xa0/0xd0 [ 116.260561][ T6185] ? ksys_write+0x242/0x270 [ 116.260586][ T6185] __do_fast_syscall_32+0x27a/0x6b0 [ 116.260602][ T6185] ? do_fast_syscall_32+0x33/0x70 [ 116.260626][ T6185] ? asm_int80_emulation+0x1a/0x20 [ 116.260641][ T6185] ? do_int80_emulation+0x299/0x500 [ 116.260664][ T6185] ? trace_irq_disable+0x3b/0x140 [ 116.260685][ T6185] do_fast_syscall_32+0x33/0x70 [ 116.260710][ T6185] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 116.260729][ T6185] RIP: 0023:0xf701f0ec [ 116.260743][ T6185] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 116.260756][ T6185] RSP: 002b:00000000f540d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 116.260773][ T6185] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c040565f [ 116.260783][ T6185] RDX: 0000000080000940 RSI: 0000000000000000 RDI: 0000000000000000 [ 116.260793][ T6185] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 116.260801][ T6185] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 116.260810][ T6185] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 116.260835][ T6185] [ 116.262558][ T6185] ERROR: Out of memory at tomoyo_realpath_from_path. [ 116.409312][ T5682] usb 1-1: Using ep0 maxpacket: 16 [ 116.423835][ T5682] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 116.441558][ T5682] usb 1-1: config 1 has an invalid descriptor of length 115, skipping remainder of the config [ 116.441647][ T5682] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 116.537091][ T5682] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.537193][ T5682] usb 1-1: Product: syz [ 116.537237][ T5682] usb 1-1: Manufacturer: syz [ 116.537309][ T5682] usb 1-1: SerialNumber: syz [ 116.665765][ T5682] usb 1-1: 0:2 : does not exist [ 116.861255][ T5682] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 116.921974][ T6193] bridge1: entered promiscuous mode [ 117.001923][ T5682] usb 1-1: USB disconnect, device number 5 [ 117.110645][ T5881] udevd[5881]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 117.142609][ T6198] syzkaller0: entered promiscuous mode [ 117.142634][ T6198] syzkaller0: entered allmulticast mode [ 117.183602][ T6200] fuse: Unknown parameter ' [ 117.183602][ T6200] ä' [ 117.258183][ T1220] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 117.333063][ T6209] netlink: 'syz.4.134': attribute type 5 has an invalid length. [ 117.408006][ T1220] usb 3-1: Using ep0 maxpacket: 8 [ 117.410279][ T1220] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 117.414839][ T1220] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.414868][ T1220] usb 3-1: config 0 has no interfaces? [ 117.414891][ T1220] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.435707][ T1220] usb 3-1: config 0 descriptor?? [ 117.472535][ T6214] syzkaller0: entered promiscuous mode [ 117.527832][ T5675] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 117.687837][ T5675] usb 2-1: Using ep0 maxpacket: 32 [ 117.689006][ T5675] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 117.690217][ T5675] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.690249][ T5675] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.690275][ T5675] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 117.690318][ T5675] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.694041][ T5675] usb 2-1: config 0 descriptor?? [ 117.811116][ T5682] usb 3-1: USB disconnect, device number 6 [ 117.901850][ T5675] hid (null): report_id 0 is invalid [ 117.902022][ T5675] hid (null): unknown global tag 0xe [ 117.959239][ T5675] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0001/input/input9 [ 118.127299][ T5675] input: HID 0458:5011 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5011.0001/input/input10 [ 118.312286][ T5675] kye 0003:0458:5011.0001: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 118.388065][ T5682] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 118.552000][ T6231] netlink: 8 bytes leftover after parsing attributes in process `syz.4.139'. [ 118.556258][ T5682] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 118.590849][ T5682] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.590888][ T5682] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.590912][ T5682] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 118.590956][ T5682] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.662244][ T5682] usb 1-1: config 0 descriptor?? [ 118.809248][ T6234] fuse: Unknown parameter ' [ 118.809248][ T6234] ä' [ 119.280055][ T6239] bridge1: entered promiscuous mode [ 119.284952][ T6242] fuse: Unknown parameter ' [ 119.284952][ T6242] ä' [ 119.319581][ T5675] usb 2-1: reset high-speed USB device number 6 using dummy_hcd [ 119.807443][ T6248] syzkaller0: entered promiscuous mode [ 119.807469][ T6248] syzkaller0: entered allmulticast mode [ 120.081728][ T5682] usbhid 1-1:0.0: can't add hid device: -71 [ 120.081852][ T5682] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 120.102279][ T5682] usb 1-1: USB disconnect, device number 6 [ 120.217401][ T6255] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 120.217422][ T6255] IPv6: NLM_F_CREATE should be set when creating new route [ 120.245696][ T6255] netlink: 20 bytes leftover after parsing attributes in process `syz.3.147'. [ 120.358599][ T6255] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.359680][ T6255] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.393821][ T6260] loop3: detected capacity change from 0 to 4 [ 120.430241][ T6255] batman_adv: batadv0: Interface deactivated: dummy0 [ 120.479018][ T1220] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 120.518987][ T6255] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.526728][ T6255] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.628630][ T1220] usb 5-1: Using ep0 maxpacket: 16 [ 120.629962][ T1220] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 120.632654][ T1220] usb 5-1: config 1 has an invalid descriptor of length 115, skipping remainder of the config [ 120.632682][ T1220] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 120.635045][ T1220] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.635069][ T1220] usb 5-1: Product: syz [ 120.635082][ T1220] usb 5-1: Manufacturer: syz [ 120.635094][ T1220] usb 5-1: SerialNumber: syz [ 120.697053][ T1220] usb 5-1: 0:2 : does not exist [ 120.803148][ T34] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.804675][ T1124] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.804728][ T1124] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.804797][ T1124] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.888483][ T1220] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 120.968925][ T1220] usb 5-1: USB disconnect, device number 5 [ 120.979338][ T5705] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 121.023027][ T6266] only policy match revision 0 supported [ 121.023043][ T6266] unable to load match [ 121.048208][ T5881] udevd[5881]: setting owner of /dev/bus/usb/005/005 to uid=0, gid=0 failed: No such file or directory [ 121.082756][ T5881] udevd[5881]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 121.128080][ T5705] usb 1-1: Using ep0 maxpacket: 16 [ 121.130044][ T5705] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 121.132473][ T5705] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 121.132504][ T5705] usb 1-1: config 0 has no interface number 0 [ 121.132545][ T5705] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 121.132573][ T5705] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 121.183289][ T5705] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.183377][ T5705] usb 1-1: Product: syz [ 121.183421][ T5705] usb 1-1: Manufacturer: syz [ 121.183457][ T5705] usb 1-1: SerialNumber: syz [ 121.237199][ T5705] usb 1-1: config 0 descriptor?? [ 121.244335][ T6263] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 121.244480][ T6263] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 121.413167][ T6271] bridge2: entered promiscuous mode [ 121.432833][ T6273] fuse: Unknown parameter ' [ 121.432833][ T6273] ä' [ 121.433648][ T6269] FAULT_INJECTION: forcing a failure. [ 121.433648][ T6269] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.433712][ T6269] CPU: 1 UID: 0 PID: 6269 Comm: syz.1.152 Tainted: G L syzkaller #0 PREEMPT(full) [ 121.433742][ T6269] Tainted: [L]=SOFTLOCKUP [ 121.433750][ T6269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 121.433763][ T6269] Call Trace: [ 121.433772][ T6269] [ 121.433781][ T6269] dump_stack_lvl+0xe8/0x150 [ 121.433821][ T6269] should_fail_ex+0x410/0x560 [ 121.433854][ T6269] _copy_from_user+0x2d/0xb0 [ 121.433886][ T6269] get_compat_msghdr+0xb3/0x4c0 [ 121.433915][ T6269] ? __pfx_get_compat_msghdr+0x10/0x10 [ 121.433953][ T6269] ___sys_sendmsg+0x201/0x360 [ 121.433986][ T6269] ? __lock_acquire+0x747/0x2de0 [ 121.434015][ T6269] ? __pfx____sys_sendmsg+0x10/0x10 [ 121.434047][ T6269] ? get_pid_task+0x20/0x1f0 [ 121.434068][ T6269] ? get_pid_task+0x20/0x1f0 [ 121.434087][ T6269] ? get_pid_task+0x20/0x1f0 [ 121.434138][ T6269] ? __fget_files+0x2a/0x420 [ 121.434179][ T6269] ? __fget_files+0x3a2/0x420 [ 121.434221][ T6269] __sys_sendmsg+0x177/0x240 [ 121.434257][ T6269] ? __pfx___sys_sendmsg+0x10/0x10 [ 121.434309][ T6269] __do_fast_syscall_32+0x27a/0x6b0 [ 121.434332][ T6269] ? do_fast_syscall_32+0x33/0x70 [ 121.434364][ T6269] ? asm_int80_emulation+0x1a/0x20 [ 121.434386][ T6269] ? do_int80_emulation+0x299/0x500 [ 121.434418][ T6269] ? trace_irq_disable+0x3b/0x140 [ 121.434446][ T6269] do_fast_syscall_32+0x33/0x70 [ 121.434480][ T6269] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 121.434507][ T6269] RIP: 0023:0xf6fef0ec [ 121.434526][ T6269] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 121.434545][ T6269] RSP: 002b:00000000f53dd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 121.434568][ T6269] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000800000c0 [ 121.434583][ T6269] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 121.434596][ T6269] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 121.434609][ T6269] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 121.434622][ T6269] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 121.434653][ T6269] [ 121.652564][ T6263] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 121.694880][ T6263] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 121.856269][ T6281] netlink: 64 bytes leftover after parsing attributes in process `syz.2.158'. [ 121.885563][ T6281] ip6gre1: entered promiscuous mode [ 121.885588][ T6281] ip6gre1: entered allmulticast mode [ 121.902436][ T5705] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 121.924076][ T5697] usb 2-1: USB disconnect, device number 6 [ 121.945182][ T6281] netlink: 64 bytes leftover after parsing attributes in process `syz.2.158'. [ 122.044839][ T5880] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 122.174835][ T6290] netlink: 12 bytes leftover after parsing attributes in process `syz.2.162'. [ 122.229713][ T5880] usb 5-1: Using ep0 maxpacket: 32 [ 122.230688][ T5880] usb 5-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 122.231948][ T5880] usb 5-1: config 0 has an invalid interface number: 219 but max is 0 [ 122.231974][ T5880] usb 5-1: config 0 has no interface number 0 [ 122.232027][ T5880] usb 5-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 122.232056][ T5880] usb 5-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 122.232083][ T5880] usb 5-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 122.232108][ T5880] usb 5-1: config 0 interface 219 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 122.232130][ T5880] usb 5-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 122.234242][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.234264][ T5880] usb 5-1: Product: syz [ 122.234277][ T5880] usb 5-1: Manufacturer: syz [ 122.234290][ T5880] usb 5-1: SerialNumber: syz [ 122.237215][ T5880] usb 5-1: config 0 descriptor?? [ 122.333611][ T6277] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 122.535523][ T6295] only policy match revision 0 supported [ 122.535552][ T6295] unable to load match [ 122.644216][ T5880] etas_es58x 5-1:0.219: Starting syz syz (Serial Number syz) [ 122.660636][ T5880] etas_es58x 5-1:0.219: could not retrieve the product info string [ 122.781325][ T5880] usb 5-1: USB disconnect, device number 6 [ 122.799042][ T5880] etas_es58x 5-1:0.219: Disconnecting syz syz [ 123.074804][ T6299] netlink: 64 bytes leftover after parsing attributes in process `syz.2.164'. [ 123.123766][ T6299] ip6gre2: entered promiscuous mode [ 123.123792][ T6299] ip6gre2: entered allmulticast mode [ 123.167524][ T6299] netlink: 64 bytes leftover after parsing attributes in process `syz.2.164'. [ 123.296777][ T6285] syz.1.160 (6285): drop_caches: 2 [ 123.464094][ T6305] fuse: Unknown parameter ' [ 123.464094][ T6305] ä' [ 123.568584][ T5880] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 123.717832][ T5880] usb 3-1: Using ep0 maxpacket: 16 [ 123.718634][ T5880] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 123.719822][ T5880] usb 3-1: config 1 has an invalid descriptor of length 115, skipping remainder of the config [ 123.719847][ T5880] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 123.722200][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.722227][ T5880] usb 3-1: Product: syz [ 123.722243][ T5880] usb 3-1: Manufacturer: syz [ 123.722260][ T5880] usb 3-1: SerialNumber: syz [ 123.796437][ T5880] usb 3-1: 0:2 : does not exist [ 123.833320][ T6263] netlink: 168 bytes leftover after parsing attributes in process `syz.0.150'. [ 123.838982][ T5705] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 123.864335][ T5705] asix 1-1:0.34: probe with driver asix failed with error -71 [ 123.877892][ T5697] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 123.879016][ T25] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 123.881657][ T5705] usb 1-1: USB disconnect, device number 7 [ 123.936300][ T5880] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 124.010684][ T5880] usb 3-1: USB disconnect, device number 7 [ 124.037817][ T5697] usb 5-1: Using ep0 maxpacket: 32 [ 124.040107][ T5697] usb 5-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 124.041190][ T5697] usb 5-1: config index 0 descriptor too short (expected 19, got 18) [ 124.048313][ T5697] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.048341][ T5697] usb 5-1: Product: syz [ 124.048357][ T5697] usb 5-1: Manufacturer: syz [ 124.048373][ T5697] usb 5-1: SerialNumber: syz [ 124.110185][ T5697] usb 5-1: config 0 descriptor?? [ 124.114474][ T5697] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 124.114842][ T5697] dvb-usb: bulk message failed: -22 (2/0) [ 124.139290][ T5697] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 124.139990][ T5697] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 124.140046][ T5697] usb 5-1: media controller created [ 124.179982][ T5697] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 124.186847][ T5881] udevd[5881]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 124.238596][ T5697] usb 5-1: selecting invalid altsetting 7 [ 124.238619][ T5697] cxusb: set interface failed [ 124.238631][ T5697] dvb-usb: bulk message failed: -22 (1/0) [ 124.341513][ T5697] DVB: Unable to find symbol lgdt330x_attach() [ 124.342031][ T5697] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 124.402443][ T6309] cxusb: i2c wr: len=79 is too big! [ 124.402443][ T6309] [ 124.430534][ T5697] rc_core: IR keymap rc-dvico-portable not found [ 124.430554][ T5697] Registered IR keymap rc-empty [ 124.436691][ T5697] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 124.470097][ T5697] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input11 [ 124.473058][ T5697] dvb-usb: schedule remote query interval to 100 msecs. [ 124.473083][ T5697] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 124.475416][ T5697] usb 5-1: USB disconnect, device number 7 [ 124.600381][ T5697] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 124.763165][ T6324] netlink: 12 bytes leftover after parsing attributes in process `syz.2.172'. [ 124.791710][ T6315] nvme nvme0: failed to connect socket: -512 [ 124.843381][ T6327] netlink: 64 bytes leftover after parsing attributes in process `syz.0.173'. [ 124.875367][ T6327] netlink: 64 bytes leftover after parsing attributes in process `syz.0.173'. [ 125.068059][ T5682] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 125.097107][ T6331] only policy match revision 0 supported [ 125.097122][ T6331] unable to load match [ 125.132143][ T6337] netlink: 12 bytes leftover after parsing attributes in process `syz.0.177'. [ 125.200021][ T5682] usb 3-1: device descriptor read/64, error -71 [ 125.438246][ T5682] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 125.461681][ T6343] fuse: Unknown parameter ' [ 125.461681][ T6343] ä' [ 125.490944][ T25] usb 2-1: unable to get BOS descriptor or descriptor too short [ 125.490995][ T25] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 125.491030][ T25] usb 2-1: no configurations [ 125.491042][ T25] usb 2-1: can't read configurations, error -22 [ 125.568837][ T5682] usb 3-1: device descriptor read/64, error -71 [ 125.690531][ T5682] usb usb3-port1: attempt power cycle [ 126.028648][ T5682] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 126.050593][ T5682] usb 3-1: device descriptor read/8, error -71 [ 126.289731][ T5682] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 126.308584][ T5682] usb 3-1: device descriptor read/8, error -71 [ 126.418668][ T5682] usb usb3-port1: unable to enumerate USB device [ 126.778480][ T5697] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 126.826724][ T6362] nvme nvme0: failed to connect socket: -111 [ 126.875509][ T6368] netlink: 4 bytes leftover after parsing attributes in process `syz.3.187'. [ 126.937873][ T5697] usb 1-1: Using ep0 maxpacket: 16 [ 126.938663][ T5697] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 126.940025][ T5697] usb 1-1: config 1 has an invalid descriptor of length 115, skipping remainder of the config [ 126.940052][ T5697] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 126.942426][ T5697] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.942455][ T5697] usb 1-1: Product: syz [ 126.942472][ T5697] usb 1-1: Manufacturer: syz [ 126.942489][ T5697] usb 1-1: SerialNumber: syz [ 127.013724][ T5697] usb 1-1: 0:2 : does not exist [ 127.039548][ T6370] only policy match revision 0 supported [ 127.039589][ T6370] unable to load match [ 127.112954][ T6373] fuse: Unknown parameter ' [ 127.112954][ T6373] ä' [ 127.220255][ T5697] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 127.244474][ T6377] FAULT_INJECTION: forcing a failure. [ 127.244474][ T6377] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.244503][ T6377] CPU: 1 UID: 0 PID: 6377 Comm: syz.1.190 Tainted: G L syzkaller #0 PREEMPT(full) [ 127.244524][ T6377] Tainted: [L]=SOFTLOCKUP [ 127.244529][ T6377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 127.244538][ T6377] Call Trace: [ 127.244544][ T6377] [ 127.244551][ T6377] dump_stack_lvl+0xe8/0x150 [ 127.244580][ T6377] should_fail_ex+0x410/0x560 [ 127.244603][ T6377] _copy_from_user+0x2d/0xb0 [ 127.244627][ T6377] __se_sys_io_uring_setup+0x1b4/0x2c0 [ 127.244647][ T6377] ? __fget_files+0x2a/0x420 [ 127.244679][ T6377] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 127.244708][ T6377] ? ksys_write+0x242/0x270 [ 127.244732][ T6377] __do_fast_syscall_32+0x27a/0x6b0 [ 127.244748][ T6377] ? do_fast_syscall_32+0x33/0x70 [ 127.244772][ T6377] ? asm_int80_emulation+0x1a/0x20 [ 127.244787][ T6377] ? do_int80_emulation+0x299/0x500 [ 127.244811][ T6377] ? trace_irq_disable+0x3b/0x140 [ 127.244832][ T6377] do_fast_syscall_32+0x33/0x70 [ 127.244856][ T6377] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 127.244876][ T6377] RIP: 0023:0xf6fef0ec [ 127.244890][ T6377] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 127.244903][ T6377] RSP: 002b:00000000f53dd43c EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 127.244919][ T6377] RAX: ffffffffffffffda RBX: 0000000000000e26 RCX: 0000000080000a88 [ 127.244930][ T6377] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 127.244939][ T6377] RBP: 00000000f53dd4fc R08: 0000000000000000 R09: 0000000000000000 [ 127.244948][ T6377] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 127.244957][ T6377] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 127.244979][ T6377] [ 127.495761][ T5697] usb 1-1: USB disconnect, device number 8 [ 127.554381][ T5881] udevd[5881]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 127.739583][ T6394] FAULT_INJECTION: forcing a failure. [ 127.739583][ T6394] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.739613][ T6394] CPU: 1 UID: 0 PID: 6394 Comm: syz.3.198 Tainted: G L syzkaller #0 PREEMPT(full) [ 127.739633][ T6394] Tainted: [L]=SOFTLOCKUP [ 127.739639][ T6394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 127.739648][ T6394] Call Trace: [ 127.739655][ T6394] [ 127.739661][ T6394] dump_stack_lvl+0xe8/0x150 [ 127.739689][ T6394] should_fail_ex+0x410/0x560 [ 127.739712][ T6394] _copy_from_user+0x2d/0xb0 [ 127.739736][ T6394] get_compat_msghdr+0xb3/0x4c0 [ 127.739756][ T6394] ? __pfx_get_compat_msghdr+0x10/0x10 [ 127.739783][ T6394] ___sys_sendmsg+0x201/0x360 [ 127.739807][ T6394] ? __lock_acquire+0x747/0x2de0 [ 127.739827][ T6394] ? __pfx____sys_sendmsg+0x10/0x10 [ 127.739851][ T6394] ? get_pid_task+0x20/0x1f0 [ 127.739867][ T6394] ? get_pid_task+0x20/0x1f0 [ 127.739880][ T6394] ? get_pid_task+0x20/0x1f0 [ 127.739916][ T6394] ? __fget_files+0x2a/0x420 [ 127.739940][ T6394] ? __fget_files+0x3a2/0x420 [ 127.739971][ T6394] __sys_sendmsg+0x177/0x240 [ 127.739997][ T6394] ? __pfx___sys_sendmsg+0x10/0x10 [ 127.740037][ T6394] __do_fast_syscall_32+0x27a/0x6b0 [ 127.740052][ T6394] ? do_fast_syscall_32+0x33/0x70 [ 127.740077][ T6394] ? asm_int80_emulation+0x1a/0x20 [ 127.740092][ T6394] ? do_int80_emulation+0x299/0x500 [ 127.740115][ T6394] ? trace_irq_disable+0x3b/0x140 [ 127.740135][ T6394] do_fast_syscall_32+0x33/0x70 [ 127.740159][ T6394] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 127.740179][ T6394] RIP: 0023:0xf701f0ec [ 127.740192][ T6394] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 127.740205][ T6394] RSP: 002b:00000000f540d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 127.740221][ T6394] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 127.740232][ T6394] RDX: 00000000000400c4 RSI: 0000000000000000 RDI: 0000000000000000 [ 127.740241][ T6394] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 127.740250][ T6394] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 127.740258][ T6394] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 127.740279][ T6394] [ 128.165668][ T6403] fuse: Unknown parameter ' [ 128.165668][ T6403] ä' [ 128.255000][ T6406] only policy match revision 0 supported [ 128.255014][ T6406] unable to load match [ 128.475084][ T6408] nvme nvme0: failed to connect socket: -111 [ 128.858446][ T25] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 129.007930][ T5697] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 129.012565][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 129.016185][ T25] usb 1-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 129.026681][ T25] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 129.026735][ T25] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 129.026763][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 30, changing to 8 [ 129.026789][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 129.094084][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.094107][ T25] usb 1-1: Product: syz [ 129.094117][ T25] usb 1-1: Manufacturer: syz [ 129.094128][ T25] usb 1-1: SerialNumber: syz [ 129.124887][ T25] usb 1-1: config 0 descriptor?? [ 129.125538][ T6418] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 129.167843][ T5697] usb 5-1: Using ep0 maxpacket: 8 [ 129.168744][ T5697] usb 5-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 129.170328][ T5697] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 129.170378][ T5697] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 129.170405][ T5697] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 30, changing to 8 [ 129.170433][ T5697] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 129.173125][ T5697] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.173150][ T5697] usb 5-1: Product: syz [ 129.173166][ T5697] usb 5-1: Manufacturer: syz [ 129.173181][ T5697] usb 5-1: SerialNumber: syz [ 129.261926][ T5697] usb 5-1: config 0 descriptor?? [ 129.263717][ T6421] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 129.348710][ T6415] nvme nvme0: failed to connect socket: -512 [ 129.406284][ T25] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 129.443074][ T25] input: Griffin SoundKnob as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input12 [ 129.467462][ T5697] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 129.550277][ T5697] input: Griffin SoundKnob as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input13 [ 129.672519][ T6421] FAULT_INJECTION: forcing a failure. [ 129.672519][ T6421] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 129.672638][ T6421] CPU: 0 UID: 0 PID: 6421 Comm: syz.4.205 Tainted: G L syzkaller #0 PREEMPT(full) [ 129.672670][ T6421] Tainted: [L]=SOFTLOCKUP [ 129.672678][ T6421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 129.672691][ T6421] Call Trace: [ 129.672700][ T6421] [ 129.672709][ T6421] dump_stack_lvl+0xe8/0x150 [ 129.672751][ T6421] should_fail_ex+0x410/0x560 [ 129.672785][ T6421] _copy_from_user+0x2d/0xb0 [ 129.672817][ T6421] input_event_from_user+0xfe/0x290 [ 129.672847][ T6421] ? __pfx_input_event_from_user+0x10/0x10 [ 129.672887][ T6421] evdev_write+0x2c7/0x4c0 [ 129.672912][ T6421] ? __lock_acquire+0x747/0x2de0 [ 129.672941][ T6421] ? __pfx_evdev_write+0x10/0x10 [ 129.672969][ T6421] ? bpf_lsm_file_permission+0x9/0x20 [ 129.673002][ T6421] ? security_file_permission+0x75/0x260 [ 129.673030][ T6421] ? rw_verify_area+0x203/0x4c0 [ 129.673067][ T6421] ? __pfx_evdev_write+0x10/0x10 [ 129.673092][ T6421] vfs_write+0x296/0xba0 [ 129.673122][ T6421] ? __pfx_vfs_write+0x10/0x10 [ 129.673146][ T6421] ? __fget_files+0x2a/0x420 [ 129.673182][ T6421] ? __fget_files+0x2a/0x420 [ 129.673214][ T6421] ? __fget_files+0x3a2/0x420 [ 129.673244][ T6421] ? __fget_files+0x2a/0x420 [ 129.673283][ T6421] ksys_write+0x150/0x270 [ 129.673307][ T6421] ? __pfx_ksys_write+0x10/0x10 [ 129.673346][ T6421] __do_fast_syscall_32+0x27a/0x6b0 [ 129.673370][ T6421] ? do_fast_syscall_32+0x33/0x70 [ 129.673403][ T6421] ? asm_int80_emulation+0x1a/0x20 [ 129.673423][ T6421] ? do_int80_emulation+0x299/0x500 [ 129.673455][ T6421] ? trace_irq_disable+0x3b/0x140 [ 129.673482][ T6421] do_fast_syscall_32+0x33/0x70 [ 129.673515][ T6421] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 129.673542][ T6421] RIP: 0023:0xf705f0ec [ 129.673561][ T6421] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 129.673579][ T6421] RSP: 002b:00000000f544d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 129.673603][ T6421] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000040 [ 129.673618][ T6421] RDX: 0000000000002250 RSI: 0000000000000000 RDI: 0000000000000000 [ 129.673631][ T6421] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 129.673642][ T6421] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 129.673654][ T6421] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 129.673683][ T6421] [ 129.701420][ C1] powermate: config urb returned -71 [ 129.706720][ C1] powermate: config urb returned -71 [ 129.707196][ C1] powermate: config urb returned -71 [ 129.708148][ C1] powermate: config urb returned -71 [ 129.708472][ C1] powermate: config urb returned -71 [ 129.762819][ T25] usb 1-1: USB disconnect, device number 9 [ 129.762933][ C1] powermate 1-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 129.929338][ C0] powermate: config urb returned -71 [ 129.929561][ C0] powermate: config urb returned -71 [ 129.929801][ C0] powermate: config urb returned -71 [ 129.930038][ C0] powermate: config urb returned -71 [ 129.983669][ T5682] usb 5-1: USB disconnect, device number 8 [ 129.985763][ C0] powermate 5-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 130.305619][ T6437] syzkaller0: entered promiscuous mode [ 130.305637][ T6437] syzkaller0: entered allmulticast mode [ 130.457881][ T1220] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 130.608830][ T1220] usb 2-1: Using ep0 maxpacket: 8 [ 130.609826][ T1220] usb 2-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 130.615224][ T1220] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 130.615377][ T1220] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 130.615454][ T1220] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 30, changing to 8 [ 130.615529][ T1220] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 130.630791][ T1220] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.630869][ T1220] usb 2-1: Product: syz [ 130.630912][ T1220] usb 2-1: Manufacturer: syz [ 130.630990][ T1220] usb 2-1: SerialNumber: syz [ 130.657225][ T1220] usb 2-1: config 0 descriptor?? [ 130.675454][ T6435] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 130.902778][ T1220] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 130.929600][ T1220] input: Griffin SoundKnob as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input14 [ 131.327698][ T6456] nvme_fabrics: missing parameter 'transport=%s' [ 131.327829][ T6456] nvme_fabrics: missing parameter 'nqn=%s' [ 131.646585][ T6462] fuse: Unknown parameter ' [ 131.646585][ T6462] ä' [ 132.249066][ T6476] fuse: Unknown parameter ' [ 132.249066][ T6476] ä' [ 132.407871][ T5880] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 132.567821][ T5880] usb 5-1: Using ep0 maxpacket: 8 [ 132.568672][ T5880] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 132.572707][ T5880] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.572743][ T5880] usb 5-1: config 0 has no interfaces? [ 132.572776][ T5880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.626634][ T5880] usb 5-1: config 0 descriptor?? [ 132.959913][ T5880] usb 5-1: USB disconnect, device number 9 [ 132.980319][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.980478][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.270856][ T6490] FAULT_INJECTION: forcing a failure. [ 133.270856][ T6490] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.270955][ T6490] CPU: 1 UID: 0 PID: 6490 Comm: syz.2.225 Tainted: G L syzkaller #0 PREEMPT(full) [ 133.270980][ T6490] Tainted: [L]=SOFTLOCKUP [ 133.270987][ T6490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 133.270997][ T6490] Call Trace: [ 133.271003][ T6490] [ 133.271011][ T6490] dump_stack_lvl+0xe8/0x150 [ 133.271045][ T6490] should_fail_ex+0x410/0x560 [ 133.271077][ T6490] _copy_from_user+0x2d/0xb0 [ 133.271114][ T6490] get_compat_msghdr+0xb3/0x4c0 [ 133.271140][ T6490] ? __pfx_get_compat_msghdr+0x10/0x10 [ 133.271178][ T6490] ___sys_sendmsg+0x201/0x360 [ 133.271208][ T6490] ? __lock_acquire+0x747/0x2de0 [ 133.271232][ T6490] ? __pfx____sys_sendmsg+0x10/0x10 [ 133.271258][ T6490] ? get_pid_task+0x20/0x1f0 [ 133.271277][ T6490] ? get_pid_task+0x20/0x1f0 [ 133.271292][ T6490] ? get_pid_task+0x20/0x1f0 [ 133.271339][ T6490] ? __fget_files+0x2a/0x420 [ 133.271367][ T6490] ? __fget_files+0x3a2/0x420 [ 133.271407][ T6490] __sys_sendmsg+0x177/0x240 [ 133.271443][ T6490] ? __pfx___sys_sendmsg+0x10/0x10 [ 133.271494][ T6490] __do_fast_syscall_32+0x27a/0x6b0 [ 133.271518][ T6490] ? do_fast_syscall_32+0x33/0x70 [ 133.271552][ T6490] ? asm_int80_emulation+0x1a/0x20 [ 133.271574][ T6490] ? do_int80_emulation+0x299/0x500 [ 133.271607][ T6490] ? trace_irq_disable+0x3b/0x140 [ 133.271636][ T6490] do_fast_syscall_32+0x33/0x70 [ 133.271671][ T6490] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 133.271699][ T6490] RIP: 0023:0xf70af0ec [ 133.271720][ T6490] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 133.271740][ T6490] RSP: 002b:00000000f549d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 133.271762][ T6490] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 133.271777][ T6490] RDX: 000000002000c0c2 RSI: 0000000000000000 RDI: 0000000000000000 [ 133.271791][ T6490] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 133.271802][ T6490] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 133.271815][ T6490] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 133.271844][ T6490] [ 133.531245][ C1] powermate: config urb returned -71 [ 133.531449][ C1] powermate: config urb returned -71 [ 133.531650][ C1] powermate: config urb returned -71 [ 133.532494][ C1] powermate: config urb returned -71 [ 133.534412][ T5880] usb 2-1: USB disconnect, device number 9 [ 133.534459][ C1] powermate 2-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 133.853770][ T6500] netlink: 64 bytes leftover after parsing attributes in process `syz.2.227'. [ 134.947660][ T6509] nvme_fabrics: missing parameter 'transport=%s' [ 134.947677][ T6509] nvme_fabrics: missing parameter 'nqn=%s' [ 135.037899][ T25] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 135.101597][ T6518] netlink: 4 bytes leftover after parsing attributes in process `syz.0.233'. [ 135.104653][ T6518] netlink: 4 bytes leftover after parsing attributes in process `syz.0.233'. [ 135.149471][ T6518] syz.0.233 uses obsolete (PF_INET,SOCK_PACKET) [ 135.189220][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 135.189986][ T25] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 135.190698][ T25] usb 4-1: config 0 has no interfaces? [ 135.190735][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.195689][ T25] usb 4-1: config 0 descriptor?? [ 135.281976][ T6523] fuse: Unknown parameter ' [ 135.281976][ T6523] ä' [ 135.485811][ T25] usb 4-1: USB disconnect, device number 7 [ 135.585165][ T6529] fuse: Unknown parameter ' [ 135.585165][ T6529] ä' [ 135.687827][ T5675] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 135.773784][ T6534] netlink: 64 bytes leftover after parsing attributes in process `syz.0.239'. [ 135.838738][ T5675] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 135.842163][ T5675] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.842194][ T5675] usb 5-1: Product: syz [ 135.842210][ T5675] usb 5-1: Manufacturer: syz [ 135.842226][ T5675] usb 5-1: SerialNumber: syz [ 135.846670][ T5675] usb 5-1: config 0 descriptor?? [ 135.893177][ T5675] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 135.910202][ T5675] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 135.912513][ T5675] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 135.912566][ T5675] usb 5-1: media controller created [ 135.951412][ T5675] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 136.098133][ T5675] DVB: Unable to find symbol mt352_attach() [ 136.104714][ T6527] dvb-usb: bulk message failed: -22 (7/0) [ 136.106137][ T6527] netlink: 44 bytes leftover after parsing attributes in process `syz.4.236'. [ 136.190610][ T5675] DVB: Unable to find symbol nxt6000_attach() [ 136.190630][ T5675] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 136.218202][ T5705] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 136.227178][ T5675] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input15 [ 136.241874][ T5675] dvb-usb: schedule remote query interval to 1000 msecs. [ 136.241902][ T5675] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 136.241920][ T5675] dvb-usb: bulk message failed: -22 (7/0) [ 136.241936][ T5675] dvb-usb: bulk message failed: -22 (7/0) [ 136.245944][ T5675] usb 5-1: USB disconnect, device number 10 [ 136.321987][ T5675] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 136.379873][ T5705] usb 2-1: Using ep0 maxpacket: 8 [ 136.380715][ T5705] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 136.381927][ T5705] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.381952][ T5705] usb 2-1: config 0 has no interfaces? [ 136.381983][ T5705] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.437931][ T5705] usb 2-1: config 0 descriptor?? [ 136.458015][ T6544] bridge3: entered promiscuous mode [ 136.653256][ T6554] FAULT_INJECTION: forcing a failure. [ 136.653256][ T6554] name failslab, interval 1, probability 0, space 0, times 0 [ 136.653295][ T6554] CPU: 0 UID: 0 PID: 6554 Comm: syz.2.245 Tainted: G L syzkaller #0 PREEMPT(full) [ 136.653324][ T6554] Tainted: [L]=SOFTLOCKUP [ 136.653333][ T6554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 136.653345][ T6554] Call Trace: [ 136.653353][ T6554] [ 136.653363][ T6554] dump_stack_lvl+0xe8/0x150 [ 136.653408][ T6554] should_fail_ex+0x410/0x560 [ 136.653442][ T6554] should_failslab+0xa8/0x100 [ 136.653478][ T6554] __kmalloc_cache_noprof+0xa3/0x600 [ 136.653505][ T6554] ? alloc_pipe_info+0xe8/0x4c0 [ 136.653529][ T6554] ? alloc_pipe_info+0xe8/0x4c0 [ 136.653561][ T6554] alloc_pipe_info+0xe8/0x4c0 [ 136.653589][ T6554] splice_direct_to_actor+0xa41/0xcb0 [ 136.653620][ T6554] ? get_pid_task+0x20/0x1f0 [ 136.653647][ T6554] ? __pfx_aa_file_perm+0x10/0x10 [ 136.653680][ T6554] ? get_pid_task+0x20/0x1f0 [ 136.653699][ T6554] ? __pfx_direct_splice_actor+0x10/0x10 [ 136.653721][ T6554] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 136.653754][ T6554] do_splice_direct+0x195/0x290 [ 136.653778][ T6554] ? __pfx_do_splice_direct+0x10/0x10 [ 136.653801][ T6554] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 136.653830][ T6554] ? rw_verify_area+0x203/0x4c0 [ 136.653869][ T6554] do_sendfile+0x52e/0x7c0 [ 136.653906][ T6554] ? __pfx_do_sendfile+0x10/0x10 [ 136.653942][ T6554] ? __might_fault+0xaf/0x130 [ 136.653979][ T6554] __ia32_compat_sys_sendfile+0x120/0x1d0 [ 136.654013][ T6554] __do_fast_syscall_32+0x27a/0x6b0 [ 136.654035][ T6554] ? do_fast_syscall_32+0x33/0x70 [ 136.654068][ T6554] ? asm_int80_emulation+0x1a/0x20 [ 136.654089][ T6554] ? do_int80_emulation+0x299/0x500 [ 136.654121][ T6554] ? trace_irq_disable+0x3b/0x140 [ 136.654148][ T6554] do_fast_syscall_32+0x33/0x70 [ 136.654182][ T6554] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 136.654209][ T6554] RIP: 0023:0xf70af0ec [ 136.654229][ T6554] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 136.654247][ T6554] RSP: 002b:00000000f549d50c EFLAGS: 00000206 ORIG_RAX: 00000000000000bb [ 136.654270][ T6554] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000004 [ 136.654285][ T6554] RDX: 0000000080000080 RSI: 000000004d9b6eaf RDI: 0000000000000000 [ 136.654299][ T6554] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 136.654311][ T6554] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 136.654324][ T6554] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 136.654355][ T6554] [ 137.123301][ T5675] usb 2-1: USB disconnect, device number 10 [ 137.151787][ T6559] nvme_fabrics: missing parameter 'transport=%s' [ 137.151814][ T6559] nvme_fabrics: missing parameter 'nqn=%s' [ 137.240439][ T6565] fuse: Unknown parameter ' [ 137.240439][ T6565] ä' [ 137.470595][ T6577] FAULT_INJECTION: forcing a failure. [ 137.470595][ T6577] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 137.470634][ T6577] CPU: 0 UID: 0 PID: 6577 Comm: syz.0.252 Tainted: G L syzkaller #0 PREEMPT(full) [ 137.470663][ T6577] Tainted: [L]=SOFTLOCKUP [ 137.470671][ T6577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 137.470693][ T6577] Call Trace: [ 137.470702][ T6577] [ 137.470712][ T6577] dump_stack_lvl+0xe8/0x150 [ 137.470749][ T6577] should_fail_ex+0x410/0x560 [ 137.470781][ T6577] _copy_to_user+0x31/0xb0 [ 137.470814][ T6577] simple_read_from_buffer+0xe1/0x170 [ 137.470851][ T6577] proc_fail_nth_read+0x1bb/0x230 [ 137.470874][ T6577] ? common_file_perm+0x20e/0x2b0 [ 137.470906][ T6577] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 137.470933][ T6577] ? rw_verify_area+0x24a/0x4c0 [ 137.470969][ T6577] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 137.470992][ T6577] vfs_read+0x213/0xa80 [ 137.471019][ T6577] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 137.471052][ T6577] ? __pfx_vfs_read+0x10/0x10 [ 137.471076][ T6577] ? do_sys_openat2+0x14e/0x200 [ 137.471107][ T6577] ? kmem_cache_free+0x182/0x650 [ 137.471149][ T6577] ksys_read+0x150/0x270 [ 137.471173][ T6577] ? __pfx_ksys_read+0x10/0x10 [ 137.471199][ T6577] ? asm_int80_emulation+0x1a/0x20 [ 137.471226][ T6577] do_int80_emulation+0x198/0x500 [ 137.471268][ T6577] ? trace_irq_disable+0x3b/0x140 [ 137.471290][ T6577] ? asm_int80_emulation+0x1a/0x20 [ 137.471324][ T6577] ? clear_bhb_loop+0x70/0xc0 [ 137.471346][ T6577] ? clear_bhb_loop+0x70/0xc0 [ 137.471373][ T6577] asm_int80_emulation+0x1a/0x20 [ 137.471394][ T6577] RIP: 0023:0xf71275ab [ 137.471414][ T6577] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 137.471432][ T6577] RSP: 002b:00000000f53e64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 137.471455][ T6577] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53e65d0 [ 137.471470][ T6577] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 137.471483][ T6577] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 137.471495][ T6577] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 137.471508][ T6577] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 137.471538][ T6577] [ 137.930893][ T6595] FAULT_INJECTION: forcing a failure. [ 137.930893][ T6595] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 137.930933][ T6595] CPU: 0 UID: 0 PID: 6595 Comm: syz.2.256 Tainted: G L syzkaller #0 PREEMPT(full) [ 137.930963][ T6595] Tainted: [L]=SOFTLOCKUP [ 137.930971][ T6595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 137.930984][ T6595] Call Trace: [ 137.930993][ T6595] [ 137.931001][ T6595] dump_stack_lvl+0xe8/0x150 [ 137.931039][ T6595] should_fail_ex+0x410/0x560 [ 137.931072][ T6595] _copy_from_user+0x2d/0xb0 [ 137.931104][ T6595] get_compat_msghdr+0xb3/0x4c0 [ 137.931131][ T6595] ? __pfx_get_compat_msghdr+0x10/0x10 [ 137.931168][ T6595] ___sys_sendmsg+0x201/0x360 [ 137.931213][ T6595] ? __lock_acquire+0x747/0x2de0 [ 137.931242][ T6595] ? __pfx____sys_sendmsg+0x10/0x10 [ 137.931274][ T6595] ? get_pid_task+0x20/0x1f0 [ 137.931295][ T6595] ? get_pid_task+0x20/0x1f0 [ 137.931314][ T6595] ? get_pid_task+0x20/0x1f0 [ 137.931349][ T6594] FAULT_INJECTION: forcing a failure. [ 137.931349][ T6594] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 137.931364][ T6595] ? __fget_files+0x2a/0x420 [ 137.931394][ T6595] ? __fget_files+0x3a2/0x420 [ 137.931429][ T6595] __sys_sendmsg+0x177/0x240 [ 137.931463][ T6595] ? __pfx___sys_sendmsg+0x10/0x10 [ 137.931507][ T6595] __do_fast_syscall_32+0x27a/0x6b0 [ 137.931526][ T6595] ? do_fast_syscall_32+0x33/0x70 [ 137.931553][ T6595] ? asm_int80_emulation+0x1a/0x20 [ 137.931572][ T6595] ? do_int80_emulation+0x299/0x500 [ 137.931600][ T6595] ? trace_irq_disable+0x3b/0x140 [ 137.931624][ T6595] do_fast_syscall_32+0x33/0x70 [ 137.931652][ T6595] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 137.931675][ T6595] RIP: 0023:0xf70af0ec [ 137.931692][ T6595] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 137.931708][ T6595] RSP: 002b:00000000f547c50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 137.931729][ T6595] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 137.931741][ T6595] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 137.931752][ T6595] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 137.931763][ T6595] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 137.931774][ T6595] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 137.931802][ T6595] [ 137.935670][ T6594] CPU: 1 UID: 0 PID: 6594 Comm: syz.4.257 Tainted: G L syzkaller #0 PREEMPT(full) [ 137.935716][ T6594] Tainted: [L]=SOFTLOCKUP [ 137.935725][ T6594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 137.935738][ T6594] Call Trace: [ 137.935747][ T6594] [ 137.935757][ T6594] dump_stack_lvl+0xe8/0x150 [ 137.935796][ T6594] should_fail_ex+0x410/0x560 [ 137.935830][ T6594] _copy_from_user+0x2d/0xb0 [ 137.935864][ T6594] __sys_bpf+0x2e7/0xd90 [ 137.935899][ T6594] ? __pfx___sys_bpf+0x10/0x10 [ 137.935930][ T6594] ? ksys_write+0x1e6/0x270 [ 137.935959][ T6594] ? __mutex_unlock_slowpath+0x731/0x900 [ 137.936015][ T6594] ? fput+0xa0/0xd0 [ 137.936045][ T6594] ? ksys_write+0x242/0x270 [ 137.936074][ T6594] __ia32_sys_bpf+0xba/0xd0 [ 137.936106][ T6594] __do_fast_syscall_32+0x27a/0x6b0 [ 137.936130][ T6594] ? do_fast_syscall_32+0x33/0x70 [ 137.936166][ T6594] ? asm_int80_emulation+0x1a/0x20 [ 137.936188][ T6594] ? do_int80_emulation+0x299/0x500 [ 137.936221][ T6594] ? trace_irq_disable+0x3b/0x140 [ 137.936249][ T6594] do_fast_syscall_32+0x33/0x70 [ 137.936284][ T6594] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 137.936313][ T6594] RIP: 0023:0xf705f0ec [ 137.936333][ T6594] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 137.936352][ T6594] RSP: 002b:00000000f544d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 137.936376][ T6594] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800001c0 [ 137.936392][ T6594] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000 [ 137.936405][ T6594] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 137.936418][ T6594] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 137.936432][ T6594] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 137.936464][ T6594] [ 138.408413][ T6600] loop5: detected capacity change from 0 to 7 [ 138.442786][ T6600] Dev loop5: unable to read RDB block 7 [ 138.442834][ T6600] loop5: unable to read partition table [ 138.443061][ T6600] loop5: partition table beyond EOD, truncated [ 138.443095][ T6600] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 138.444172][ T6600] FAULT_INJECTION: forcing a failure. [ 138.444172][ T6600] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 138.444206][ T6600] CPU: 0 UID: 0 PID: 6600 Comm: syz.4.260 Tainted: G L syzkaller #0 PREEMPT(full) [ 138.444244][ T6600] Tainted: [L]=SOFTLOCKUP [ 138.444251][ T6600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 138.444263][ T6600] Call Trace: [ 138.444270][ T6600] [ 138.444279][ T6600] dump_stack_lvl+0xe8/0x150 [ 138.444317][ T6600] should_fail_ex+0x410/0x560 [ 138.444349][ T6600] _copy_from_user+0x2d/0xb0 [ 138.444381][ T6600] do_ipv6_setsockopt+0x249/0x3180 [ 138.444424][ T6600] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 138.444457][ T6600] ? aa_inet_opt_perm+0xae4/0xcf0 [ 138.444488][ T6600] ? get_pid_task+0x20/0x1f0 [ 138.444510][ T6600] ? get_pid_task+0x20/0x1f0 [ 138.444536][ T6600] ? __pfx_aa_inet_opt_perm+0x10/0x10 [ 138.444587][ T6600] ? ksys_write+0x1e6/0x270 [ 138.444614][ T6600] ? lock_acquire+0x115/0x350 [ 138.444655][ T6600] ipv6_setsockopt+0x59/0x170 [ 138.444687][ T6600] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 138.444718][ T6600] do_sock_setsockopt+0x17c/0x1b0 [ 138.444755][ T6600] __ia32_sys_setsockopt+0x13d/0x1b0 [ 138.444793][ T6600] __do_fast_syscall_32+0x27a/0x6b0 [ 138.444815][ T6600] ? do_fast_syscall_32+0x33/0x70 [ 138.444848][ T6600] ? asm_int80_emulation+0x1a/0x20 [ 138.444869][ T6600] ? do_int80_emulation+0x299/0x500 [ 138.444901][ T6600] ? trace_irq_disable+0x3b/0x140 [ 138.444929][ T6600] do_fast_syscall_32+0x33/0x70 [ 138.444963][ T6600] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 138.444990][ T6600] RIP: 0023:0xf705f0ec [ 138.445008][ T6600] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 138.445025][ T6600] RSP: 002b:00000000f544d50c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 138.445047][ T6600] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000029 [ 138.445060][ T6600] RDX: 0000000000000030 RSI: 00000000800008c0 RDI: 0000000000000190 [ 138.445074][ T6600] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 138.445085][ T6600] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 138.445104][ T6600] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 138.445134][ T6600] [ 138.826974][ T6610] netlink: 4 bytes leftover after parsing attributes in process `syz.0.263'. [ 138.838307][ T6610] netlink: 4 bytes leftover after parsing attributes in process `syz.0.263'. [ 139.162603][ T6618] fuse: Unknown parameter ' [ 139.162603][ T6618] ä' [ 139.345348][ T6624] ªªªªªª: renamed from vlan0 (while UP) [ 139.372007][ T6624] netlink: 16 bytes leftover after parsing attributes in process `syz.1.270'. [ 139.658030][ T25] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 139.682965][ T6640] netlink: 4 bytes leftover after parsing attributes in process `syz.2.275'. [ 139.744542][ T6642] bridge4: entered promiscuous mode [ 139.757897][ T5675] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 139.768275][ T5705] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 139.809165][ T25] usb 1-1: not running at top speed; connect to a high speed hub [ 139.809207][ T25] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40 [ 139.810455][ T25] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 139.812801][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.812827][ T25] usb 1-1: Product: syz [ 139.812842][ T25] usb 1-1: Manufacturer: syz [ 139.812863][ T25] usb 1-1: SerialNumber: syz [ 139.857179][ T25] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 139.947887][ T5705] usb 2-1: Using ep0 maxpacket: 8 [ 139.948689][ T5705] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 139.950049][ T5705] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 139.950110][ T5705] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 139.950172][ T5705] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 139.950201][ T5705] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 139.950229][ T5705] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 139.950255][ T5705] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 139.950524][ T5705] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.992107][ T5675] usb 4-1: Using ep0 maxpacket: 8 [ 140.026863][ T5675] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 140.067223][ T5675] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.067253][ T5675] usb 4-1: config 0 has no interfaces? [ 140.067285][ T5675] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.095373][ T5675] usb 4-1: config 0 descriptor?? [ 140.122722][ T25] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 140.148971][ T25] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 140.169834][ T5705] usb 2-1: usb_control_msg returned -32 [ 140.169921][ T5705] usbtmc 2-1:16.0: can't read capabilities [ 140.189326][ T6635] FAULT_INJECTION: forcing a failure. [ 140.189326][ T6635] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.189511][ T6635] CPU: 1 UID: 0 PID: 6635 Comm: syz.1.274 Tainted: G L syzkaller #0 PREEMPT(full) [ 140.189553][ T6635] Tainted: [L]=SOFTLOCKUP [ 140.189561][ T6635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 140.189576][ T6635] Call Trace: [ 140.189585][ T6635] [ 140.189593][ T6635] dump_stack_lvl+0xe8/0x150 [ 140.189630][ T6635] should_fail_ex+0x410/0x560 [ 140.189661][ T6635] _copy_to_user+0x31/0xb0 [ 140.189695][ T6635] simple_read_from_buffer+0xe1/0x170 [ 140.189733][ T6635] proc_fail_nth_read+0x1bb/0x230 [ 140.189783][ T6635] ? common_file_perm+0x20e/0x2b0 [ 140.189880][ T6635] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 140.189954][ T6635] ? rw_verify_area+0x24a/0x4c0 [ 140.190055][ T6635] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 140.190121][ T6635] vfs_read+0x213/0xa80 [ 140.190189][ T6635] ? __pfx___mutex_lock+0x10/0x10 [ 140.190278][ T6635] ? __pfx_vfs_read+0x10/0x10 [ 140.190342][ T6635] ? __fget_files+0x2a/0x420 [ 140.190440][ T6635] ? __fget_files+0x3a2/0x420 [ 140.190514][ T6635] ? __fget_files+0x2a/0x420 [ 140.190628][ T6635] ksys_read+0x150/0x270 [ 140.190688][ T6635] ? __pfx_ksys_read+0x10/0x10 [ 140.190755][ T6635] ? asm_int80_emulation+0x1a/0x20 [ 140.190831][ T6635] do_int80_emulation+0x198/0x500 [ 140.190920][ T6635] ? asm_int80_emulation+0x1a/0x20 [ 140.190975][ T6635] ? clear_bhb_loop+0x70/0xc0 [ 140.191043][ T6635] ? clear_bhb_loop+0x70/0xc0 [ 140.191111][ T6635] asm_int80_emulation+0x1a/0x20 [ 140.191176][ T6635] RIP: 0023:0xf71275ab [ 140.191231][ T6635] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 140.191291][ T6635] RSP: 002b:00000000f53dd4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 140.191363][ T6635] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f53dd5d0 [ 140.191406][ T6635] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 140.191439][ T6635] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 140.191472][ T6635] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 140.191512][ T6635] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 140.191595][ T6635] [ 140.431373][ T6628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.432043][ T6628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.467962][ T25] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 140.475602][ T25] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 140.502541][ T5615] usb 2-1: USB disconnect, device number 11 [ 140.667285][ T5705] usb 4-1: USB disconnect, device number 8 [ 140.778789][ T25] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 140.784394][ T25] usb 1-1: USB disconnect, device number 10 [ 140.828002][ T5623] udevd[5623]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 140.865707][ T6652] fuse: Unknown parameter ' [ 140.865707][ T6652] ä' [ 141.116646][ T6668] netlink: 4 bytes leftover after parsing attributes in process `syz.0.286'. [ 141.208848][ T5682] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 141.238096][ T6671] bridge1: entered promiscuous mode [ 141.362615][ T5682] usb 3-1: Using ep0 maxpacket: 32 [ 141.363370][ T5682] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 141.364573][ T5682] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.394633][ T5682] usb 3-1: config 0 descriptor?? [ 141.495266][ T6680] fuse: Unknown parameter 'gk up_id' [ 141.622088][ T5682] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 141.641063][ T5682] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 141.664839][ T5682] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 141.664882][ T5682] usb 3-1: media controller created [ 141.679930][ T6682] fuse: Unknown parameter ' [ 141.679930][ T6682] ä' [ 141.713261][ T6686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.293'. [ 141.741565][ T5682] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 141.847958][ T5682] az6027: usb out operation failed. (-71) [ 141.852837][ T5682] az6027: usb out operation failed. (-71) [ 141.852861][ T5682] stb0899_attach: Driver disabled by Kconfig [ 141.852872][ T5682] az6027: no front-end attached [ 141.852872][ T5682] [ 141.853271][ T5682] az6027: usb out operation failed. (-71) [ 141.853284][ T5682] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 141.863137][ T5682] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input16 [ 141.922485][ T5682] dvb-usb: schedule remote query interval to 400 msecs. [ 141.922512][ T5682] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 141.957313][ T5682] usb 3-1: USB disconnect, device number 12 [ 142.031529][ T6688] syz.1.294 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 142.031583][ T6688] CPU: 0 UID: 0 PID: 6688 Comm: syz.1.294 Tainted: G L syzkaller #0 PREEMPT(full) [ 142.031613][ T6688] Tainted: [L]=SOFTLOCKUP [ 142.031621][ T6688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 142.031635][ T6688] Call Trace: [ 142.031644][ T6688] [ 142.031655][ T6688] dump_stack_lvl+0xe8/0x150 [ 142.031694][ T6688] dump_header+0xd3/0x4b0 [ 142.031726][ T6688] oom_kill_process+0x3ab/0x9e0 [ 142.031763][ T6688] out_of_memory+0x1064/0x1480 [ 142.031793][ T6688] ? try_charge_memcg+0xc32/0x15e0 [ 142.031836][ T6688] ? __pfx_out_of_memory+0x10/0x10 [ 142.031864][ T6688] ? do_raw_spin_unlock+0xf5/0x200 [ 142.031909][ T6688] try_charge_memcg+0xcdf/0x15e0 [ 142.031960][ T6688] ? __pfx_try_charge_memcg+0x10/0x10 [ 142.031997][ T6688] ? percpu_ref_tryget+0x15/0x180 [ 142.032040][ T6688] ? __obj_cgroup_charge+0x36/0x2c0 [ 142.032070][ T6688] __obj_cgroup_charge+0x1fd/0x2c0 [ 142.032096][ T6688] ? __obj_cgroup_charge+0x36/0x2c0 [ 142.032125][ T6688] __memcg_slab_post_alloc_hook+0x766/0xd90 [ 142.032171][ T6688] kmem_cache_alloc_lru_noprof+0x351/0x5f0 [ 142.032196][ T6688] ? kmem_cache_alloc_lru_noprof+0x153/0x5f0 [ 142.032220][ T6688] ? alloc_inode+0xb8/0x1b0 [ 142.032248][ T6688] ? alloc_inode+0xb8/0x1b0 [ 142.032290][ T6688] alloc_inode+0xb8/0x1b0 [ 142.032323][ T6688] create_pipe_files+0x52/0x7c0 [ 142.032357][ T6688] __do_pipe_flags+0x46/0x1f0 [ 142.032386][ T6688] do_pipe2+0xaa/0x190 [ 142.032417][ T6688] ? __pfx_do_pipe2+0x10/0x10 [ 142.032447][ T6688] ? rcu_is_watching+0x16/0xb0 [ 142.032511][ T6688] __ia32_sys_pipe2+0x5a/0x70 [ 142.032540][ T6688] __do_fast_syscall_32+0x27a/0x6b0 [ 142.032564][ T6688] ? do_fast_syscall_32+0x33/0x70 [ 142.032605][ T6688] ? irqentry_exit+0x10f/0x920 [ 142.032636][ T6688] ? trace_irq_disable+0x3b/0x140 [ 142.032665][ T6688] do_fast_syscall_32+0x33/0x70 [ 142.032700][ T6688] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 142.032729][ T6688] RIP: 0023:0xf6fef0ec [ 142.032749][ T6688] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 142.032768][ T6688] RSP: 002b:00000000f53dd50c EFLAGS: 00000206 ORIG_RAX: 000000000000014b [ 142.032792][ T6688] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000000000 [ 142.032808][ T6688] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 142.032821][ T6688] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 142.032834][ T6688] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 142.032848][ T6688] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 142.032878][ T6688] [ 142.039138][ T6688] memory: usage 8kB, limit 8kB, failcnt 29 [ 142.039162][ T6688] memory+swap: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 142.039178][ T6688] kmem: usage 8kB, limit 9007199254740988kB, failcnt 0 [ 142.039193][ T6688] Memory cgroup stats for /syz1/test: [ 142.173947][ T6688] cache 0 [ 142.173984][ T6688] rss 0 [ 142.174005][ T6688] rss_huge 0 [ 142.174025][ T6688] shmem 0 [ 142.174047][ T6688] mapped_file 0 [ 142.174061][ T6688] dirty 0 [ 142.174082][ T6688] writeback 0 [ 142.174103][ T6688] workingset_refault_anon 0 [ 142.174125][ T6688] workingset_refault_file 0 [ 142.174155][ T6688] swap 0 [ 142.174169][ T6688] swapcached 0 [ 142.174190][ T6688] pgpgin 0 [ 142.174211][ T6688] pgpgout 0 [ 142.174232][ T6688] pgfault 19 [ 142.174253][ T6688] pgmajfault 0 [ 142.174274][ T6688] inactive_anon 0 [ 142.174296][ T6688] active_anon 0 [ 142.174317][ T6688] inactive_file 0 [ 142.174332][ T6688] active_file 0 [ 142.174364][ T6688] unevictable 0 [ 142.174386][ T6688] hierarchical_memory_limit 8192 [ 142.174410][ T6688] hierarchical_memsw_limit 9223372036854771712 [ 142.174439][ T6688] total_cache 0 [ 142.174461][ T6688] total_rss 0 [ 142.174523][ T6688] total_rss_huge 0 [ 142.174539][ T6688] total_shmem 0 [ 142.174562][ T6688] total_mapped_file 0 [ 142.174584][ T6688] total_dirty 0 [ 142.174606][ T6688] total_writeback 0 [ 142.174627][ T6688] total_workingset_refault_anon 0 [ 142.174754][ T6688] total_workingset_refault_file 0 [ 142.174783][ T6688] total_swap 0 [ 142.174804][ T6688] total_swapcached 0 [ 142.174826][ T6688] total_pgpgin 0 [ 142.174847][ T6688] total_pgpgout 0 [ 142.174873][ T6688] total_pgfault 19 [ 142.174895][ T6688] total_pgmajfault 0 [ 142.174916][ T6688] total_inactive_anon 0 [ 142.174938][ T6688] total_active_anon 0 [ 142.174959][ T6688] total_inactive_file 0 [ 142.174980][ T6688] total_active_file 0 [ 142.175002][ T6688] total_unevictable 0 [ 142.175023][ T6688] anon_cost 0 [ 142.175043][ T6688] file_cost 0 [ 142.175065][ T6688] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1/test,task_memcg=/syz1/test,task=syz.1.294,pid=6687,uid=0 [ 142.493335][ T6688] Memory cgroup out of memory: Killed process 6687 (syz.1.294) total-vm:102292kB, anon-rss:1320kB, file-rss:23020kB, shmem-rss:0kB, UID:0 pgtables:116kB oom_score_adj:1000 [ 142.570950][ T6691] net_ratelimit: 10 callbacks suppressed [ 142.570977][ T6691] socket: no more sockets [ 142.601922][ T6695] netlink: 4 bytes leftover after parsing attributes in process `syz.4.297'. [ 142.622625][ T5682] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 142.768174][ T6700] FAULT_INJECTION: forcing a failure. [ 142.768174][ T6700] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.768214][ T6700] CPU: 1 UID: 0 PID: 6700 Comm: syz.3.301 Tainted: G L syzkaller #0 PREEMPT(full) [ 142.768244][ T6700] Tainted: [L]=SOFTLOCKUP [ 142.768252][ T6700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 142.768265][ T6700] Call Trace: [ 142.768274][ T6700] [ 142.768284][ T6700] dump_stack_lvl+0xe8/0x150 [ 142.768321][ T6700] should_fail_ex+0x410/0x560 [ 142.768354][ T6700] _copy_from_user+0x2d/0xb0 [ 142.768386][ T6700] get_compat_msghdr+0xb3/0x4c0 [ 142.768414][ T6700] ? __pfx_get_compat_msghdr+0x10/0x10 [ 142.768450][ T6700] ___sys_sendmsg+0x201/0x360 [ 142.768482][ T6700] ? __lock_acquire+0x747/0x2de0 [ 142.768510][ T6700] ? __pfx____sys_sendmsg+0x10/0x10 [ 142.768543][ T6700] ? get_pid_task+0x20/0x1f0 [ 142.768563][ T6700] ? get_pid_task+0x20/0x1f0 [ 142.768582][ T6700] ? get_pid_task+0x20/0x1f0 [ 142.768631][ T6700] ? __fget_files+0x2a/0x420 [ 142.768662][ T6700] ? __fget_files+0x3a2/0x420 [ 142.768704][ T6700] __sys_sendmsg+0x177/0x240 [ 142.768740][ T6700] ? __pfx___sys_sendmsg+0x10/0x10 [ 142.768792][ T6700] __do_fast_syscall_32+0x27a/0x6b0 [ 142.768814][ T6700] ? do_fast_syscall_32+0x33/0x70 [ 142.768847][ T6700] ? asm_int80_emulation+0x1a/0x20 [ 142.768868][ T6700] ? do_int80_emulation+0x299/0x500 [ 142.768900][ T6700] ? trace_irq_disable+0x3b/0x140 [ 142.768928][ T6700] do_fast_syscall_32+0x33/0x70 [ 142.768960][ T6700] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 142.768997][ T6700] RIP: 0023:0xf701f0ec [ 142.769016][ T6700] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 142.769032][ T6700] RSP: 002b:00000000f540d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 142.769054][ T6700] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000440 [ 142.769069][ T6700] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 142.769084][ T6700] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 142.769096][ T6700] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 142.769107][ T6700] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 142.769133][ T6700] [ 143.022171][ T6702] bridge2: entered promiscuous mode [ 143.228858][ T5682] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 143.259434][ T30] kauditd_printk_skb: 52 callbacks suppressed [ 143.259455][ T30] audit: type=1326 audit(1791188476.665:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6716 comm="syz.3.306" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f0ec code=0x7ffc0000 [ 143.259624][ T30] audit: type=1326 audit(1791188476.665:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6716 comm="syz.3.306" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f0ec code=0x7ffc0000 [ 143.260830][ T6718] FAULT_INJECTION: forcing a failure. [ 143.260830][ T6718] name failslab, interval 1, probability 0, space 0, times 0 [ 143.260856][ T6718] CPU: 1 UID: 0 PID: 6718 Comm: syz.3.306 Tainted: G L syzkaller #0 PREEMPT(full) [ 143.260878][ T6718] Tainted: [L]=SOFTLOCKUP [ 143.260884][ T6718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 143.260893][ T6718] Call Trace: [ 143.260900][ T6718] [ 143.260907][ T6718] dump_stack_lvl+0xe8/0x150 [ 143.260935][ T6718] should_fail_ex+0x410/0x560 [ 143.260959][ T6718] should_failslab+0xa8/0x100 [ 143.260981][ T6718] ? audit_log_start+0x103/0xa10 [ 143.261004][ T6718] kmem_cache_alloc_noprof+0xa1/0x600 [ 143.261020][ T6718] ? auditd_test_task+0x22/0x280 [ 143.261042][ T6718] ? auditd_test_task+0x22/0x280 [ 143.261062][ T6718] ? audit_log_start+0x103/0xa10 [ 143.261088][ T6718] audit_log_start+0x103/0xa10 [ 143.261115][ T6718] ? __pfx_audit_log_start+0x10/0x10 [ 143.261141][ T6718] ? get_pid_task+0x20/0x1f0 [ 143.261157][ T6718] ? get_pid_task+0x20/0x1f0 [ 143.261177][ T6718] audit_seccomp+0x63/0x190 [ 143.261196][ T6718] ? clear_bhb_loop+0x70/0xc0 [ 143.261213][ T6718] ? clear_bhb_loop+0xe/0xc0 [ 143.261232][ T6718] __seccomp_filter+0xd14/0x1de0 [ 143.261264][ T6718] ? __pfx___seccomp_filter+0x10/0x10 [ 143.261285][ T6718] ? __mutex_unlock_slowpath+0x731/0x900 [ 143.261312][ T6718] ? __fget_files+0x2a/0x420 [ 143.261337][ T6718] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 143.261362][ T6718] ? __fget_files+0x3a2/0x420 [ 143.261399][ T6718] ? __seccomp_permit_syscall+0xe7/0x2b0 [ 143.261423][ T6718] __do_fast_syscall_32+0x235/0x6b0 [ 143.261438][ T6718] ? do_fast_syscall_32+0x33/0x70 [ 143.261463][ T6718] ? asm_int80_emulation+0x1a/0x20 [ 143.261478][ T6718] ? do_int80_emulation+0x299/0x500 [ 143.261502][ T6718] ? trace_irq_disable+0x3b/0x140 [ 143.261522][ T6718] do_fast_syscall_32+0x33/0x70 [ 143.261547][ T6718] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 143.261567][ T6718] RIP: 0023:0xf701f0ec [ 143.261581][ T6718] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 143.261595][ T6718] RSP: 002b:00000000f540d50c EFLAGS: 00000206 ORIG_RAX: 00000000000000e4 [ 143.261612][ T6718] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 0000000000000000 [ 143.261623][ T6718] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002000000 [ 143.261632][ T6718] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 143.261641][ T6718] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 143.261651][ T6718] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 143.261677][ T6718] [ 143.261724][ T30] audit: type=1326 audit(1791188476.665:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6716 comm="syz.3.306" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71575ab code=0x7ffc0000 [ 143.261765][ T30] audit: type=1326 audit(1791188476.665:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6716 comm="syz.3.306" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf71575ab code=0x7ffc0000 [ 143.262407][ T6718] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 143.262426][ T6718] audit: out of memory in audit_log_start [ 143.262588][ T30] audit: type=1326 audit(1791188476.665:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6716 comm="syz.3.306" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf71575ab code=0x7ffc0000 [ 143.263593][ T6717] loop9: detected capacity change from 0 to 7 [ 143.266295][ T30] audit: type=1326 audit(1791188476.665:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6716 comm="syz.3.306" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf71575ab code=0x7ffc0000 [ 143.266550][ T30] audit: type=1326 audit(1791188476.665:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6716 comm="syz.3.306" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf71575ab code=0x7ffc0000 [ 143.266909][ T30] audit: type=1326 audit(1791188476.665:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6716 comm="syz.3.306" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f0ec code=0x7ffc0000 [ 143.267030][ T6717] Dev loop9: unable to read RDB block 7 [ 143.267054][ T6717] loop9: AHDI p2 p3 [ 143.267074][ T6717] loop9: partition table partially beyond EOD, truncated [ 143.310133][ T6717] loop9: p3 start 335544320 is beyond EOD, truncated [ 143.389532][ T5682] usb 2-1: Using ep0 maxpacket: 8 [ 143.397236][ T5682] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 143.431525][ T5682] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.431607][ T5682] usb 2-1: config 0 has no interfaces? [ 143.431696][ T5682] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.491488][ T5682] usb 2-1: config 0 descriptor?? [ 143.965964][ T6724] FAULT_INJECTION: forcing a failure. [ 143.965964][ T6724] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.966004][ T6724] CPU: 1 UID: 0 PID: 6724 Comm: syz.2.308 Tainted: G L syzkaller #0 PREEMPT(full) [ 143.966035][ T6724] Tainted: [L]=SOFTLOCKUP [ 143.966042][ T6724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 143.966056][ T6724] Call Trace: [ 143.966065][ T6724] [ 143.966073][ T6724] dump_stack_lvl+0xe8/0x150 [ 143.966110][ T6724] should_fail_ex+0x410/0x560 [ 143.966143][ T6724] _copy_from_user+0x2d/0xb0 [ 143.966176][ T6724] __sys_connect+0x155/0x450 [ 143.966210][ T6724] ? __pfx___sys_connect+0x10/0x10 [ 143.966261][ T6724] __ia32_sys_connect+0x7a/0x90 [ 143.966293][ T6724] __do_fast_syscall_32+0x27a/0x6b0 [ 143.966316][ T6724] ? do_fast_syscall_32+0x33/0x70 [ 143.966349][ T6724] ? asm_int80_emulation+0x1a/0x20 [ 143.966371][ T6724] ? do_int80_emulation+0x299/0x500 [ 143.966407][ T6724] ? trace_irq_disable+0x3b/0x140 [ 143.966436][ T6724] do_fast_syscall_32+0x33/0x70 [ 143.966470][ T6724] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 143.966497][ T6724] RIP: 0023:0xf70af0ec [ 143.966517][ T6724] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 143.966536][ T6724] RSP: 002b:00000000f549d50c EFLAGS: 00000206 ORIG_RAX: 000000000000016a [ 143.966560][ T6724] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000080 [ 143.966575][ T6724] RDX: 000000000000001c RSI: 0000000000000000 RDI: 0000000000000000 [ 143.966589][ T6724] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 143.966601][ T6724] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 143.966615][ T6724] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 143.966646][ T6724] [ 144.033265][ T6725] netlink: 4 bytes leftover after parsing attributes in process `syz.4.309'. [ 144.190083][ T5706] usb 2-1: USB disconnect, device number 12 [ 144.301181][ T1038] IPVS: starting estimator thread 0... [ 144.389630][ T6731] IPVS: using max 24 ests per chain, 57600 per kthread [ 144.466282][ T6738] bridge2: entered promiscuous mode [ 144.507819][ T5615] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 144.527830][ T5697] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 144.657825][ T5615] usb 5-1: Using ep0 maxpacket: 32 [ 144.658812][ T5615] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 144.660000][ T5615] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 144.662360][ T5615] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 144.662387][ T5615] usb 5-1: Product: syz [ 144.662402][ T5615] usb 5-1: Manufacturer: syz [ 144.662418][ T5615] usb 5-1: SerialNumber: syz [ 144.665545][ T5615] usb 5-1: config 0 descriptor?? [ 144.666447][ T6729] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 144.682663][ T5697] usb 3-1: Using ep0 maxpacket: 8 [ 144.738133][ T5697] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 144.739332][ T5697] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.739385][ T5697] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.744110][ T5615] hub 5-1:0.0: bad descriptor, ignoring hub [ 144.744136][ T5615] hub 5-1:0.0: probe with driver hub failed with error -5 [ 144.747667][ T5697] usb 3-1: config 0 descriptor?? [ 144.805639][ T5697] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 144.878007][ T6747] capability: warning: `syz.3.319' uses 32-bit capabilities (legacy support in use) [ 144.926476][ T6749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.320'. [ 145.031398][ T6754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.321'. [ 145.222266][ T6765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.227055][ T6765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.259311][ T6763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.260002][ T6763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.344826][ T6769] fuse: Unknown parameter ' [ 145.344826][ T6769] ä' [ 145.410863][ T5697] gspca_vc032x: reg_r err -71 [ 145.410965][ T5697] vc032x 3-1:0.0: probe with driver vc032x failed with error -71 [ 145.415438][ T5697] usb 3-1: USB disconnect, device number 13 [ 145.462588][ T6771] bridge2: entered promiscuous mode [ 145.745548][ T12] raw-gadget.0 gadget.4: failed to queue suspend event [ 145.759453][ T6752] raw-gadget.0 gadget.4: failed to queue disconnect event [ 145.763562][ T5706] usb 5-1: USB disconnect, device number 11 [ 145.910938][ T6784] netlink: 4 bytes leftover after parsing attributes in process `syz.1.332'. [ 146.126007][ T6797] misc userio: Begin command sent, but we're already running [ 146.167009][ T6796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.167489][ T6796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.176634][ T6799] fuse: Unknown parameter ' [ 146.176634][ T6799] ä' [ 146.269134][ T5880] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 146.294438][ T6801] bridge5: entered promiscuous mode [ 146.342836][ T6804] FAULT_INJECTION: forcing a failure. [ 146.342836][ T6804] name failslab, interval 1, probability 0, space 0, times 0 [ 146.342876][ T6804] CPU: 0 UID: 0 PID: 6804 Comm: syz.0.338 Tainted: G L syzkaller #0 PREEMPT(full) [ 146.342907][ T6804] Tainted: [L]=SOFTLOCKUP [ 146.342915][ T6804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 146.342928][ T6804] Call Trace: [ 146.342937][ T6804] [ 146.342947][ T6804] dump_stack_lvl+0xe8/0x150 [ 146.342994][ T6804] should_fail_ex+0x410/0x560 [ 146.343027][ T6804] should_failslab+0xa8/0x100 [ 146.343060][ T6804] __kmalloc_noprof+0xfe/0x720 [ 146.343081][ T6804] ? rcu_is_watching+0x16/0xb0 [ 146.343110][ T6804] ? tomoyo_realpath_from_path+0xef/0x640 [ 146.343143][ T6804] ? tomoyo_realpath_from_path+0xef/0x640 [ 146.343185][ T6804] tomoyo_realpath_from_path+0xef/0x640 [ 146.343230][ T6804] ? tomoyo_path_number_perm+0x219/0x5f0 [ 146.343259][ T6804] tomoyo_path_number_perm+0x246/0x5f0 [ 146.343291][ T6804] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 146.343320][ T6804] ? __lock_acquire+0x747/0x2de0 [ 146.343360][ T6804] ? hook_file_ioctl_compat+0x1f2/0x600 [ 146.343413][ T6804] ? __fget_files+0x2a/0x420 [ 146.343451][ T6804] ? __fget_files+0x3a2/0x420 [ 146.343484][ T6804] ? __fget_files+0x2a/0x420 [ 146.343521][ T6804] security_file_ioctl_compat+0xc3/0x2a0 [ 146.343551][ T6804] __ia32_compat_sys_ioctl+0x139/0x950 [ 146.343601][ T6804] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 146.343629][ T6804] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 146.343662][ T6804] ? __fget_files+0x3a2/0x420 [ 146.343693][ T6804] ? fput+0xa0/0xd0 [ 146.343719][ T6804] ? ksys_write+0x242/0x270 [ 146.343746][ T6804] __do_fast_syscall_32+0x27a/0x6b0 [ 146.343764][ T6804] ? do_fast_syscall_32+0x33/0x70 [ 146.343790][ T6804] ? asm_int80_emulation+0x1a/0x20 [ 146.343808][ T6804] ? do_int80_emulation+0x299/0x500 [ 146.343834][ T6804] ? trace_irq_disable+0x3b/0x140 [ 146.343856][ T6804] do_fast_syscall_32+0x33/0x70 [ 146.343884][ T6804] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 146.343905][ T6804] RIP: 0023:0xf7f240ec [ 146.343921][ T6804] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 146.343936][ T6804] RSP: 002b:00000000f53c550c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 146.343961][ T6804] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 0000000000009208 [ 146.343973][ T6804] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 146.343983][ T6804] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 146.343994][ T6804] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 146.344004][ T6804] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 146.344029][ T6804] [ 146.345578][ T6804] ERROR: Out of memory at tomoyo_realpath_from_path. [ 146.346352][ T6804] netlink: 67 bytes leftover after parsing attributes in process `syz.0.338'. [ 146.410161][ T5615] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 146.444029][ T5880] usb 4-1: Using ep0 maxpacket: 8 [ 146.448259][ T5880] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 146.462280][ T5880] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.462363][ T5880] usb 4-1: config 0 has no interfaces? [ 146.462465][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.482213][ T5880] usb 4-1: config 0 descriptor?? [ 146.580037][ T5615] usb 2-1: New USB device found, idVendor=2040, idProduct=c601, bcdDevice= 0.01 [ 146.615007][ T5615] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.745800][ T5615] usb 2-1: dvb_usb_v2: found a 'Hauppauge 126xxx ATSC' in warm state [ 146.810576][ T5615] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 146.811069][ T5615] dvbdev: DVB: registering new adapter (Hauppauge 126xxx ATSC) [ 146.811118][ T5615] usb 2-1: media controller created [ 146.864483][ T6796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.869975][ T6796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.893823][ T6796] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000018: 0000 [#1] SMP KASAN PTI [ 146.905802][ T6796] KASAN: null-ptr-deref in range [0x00000000000000c0-0x00000000000000c7] [ 146.914276][ T6796] CPU: 0 UID: 0 PID: 6796 Comm: syz.1.335 Tainted: G L syzkaller #0 PREEMPT(full) [ 146.925089][ T6796] Tainted: [L]=SOFTLOCKUP [ 146.929456][ T6796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 146.939556][ T6796] RIP: 0010:__mutex_lock+0x149/0x1550 [ 146.944989][ T6796] Code: c0 40 e5 9e 9a 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 3f 12 00 00 83 3d 05 25 b6 0e 00 75 22 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <80> 3c 18 00 74 05 e8 9c 61 4f f6 4d 39 64 24 58 0f 85 52 11 00 00 [ 146.964643][ T6796] RSP: 0018:ffffc900045df280 EFLAGS: 00010206 [ 146.970761][ T6796] RAX: 0000000000000018 RBX: dffffc0000000000 RCX: ffffffff9a9ee503 [ 146.978802][ T6796] RDX: 0000000000000000 RSI: ffffffff8e69fc8a RDI: 00000000000000c0 [ 146.986824][ T6796] RBP: ffffc900045df418 R08: ffffc900045df387 R09: 0000000000000000 [ 146.994854][ T6796] R10: ffffc900045df360 R11: fffff520008bbe71 R12: 0000000000000068 [ 147.002919][ T6796] R13: 0000000000000000 R14: 1ffff920008bbe64 R15: 0000000000000000 [ 147.011119][ T6796] FS: 0000000000000000(0000) GS:ffff888124cc6000(0063) knlGS:00000000f53ddb40 [ 147.020188][ T6796] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 147.026811][ T6796] CR2: 0000000033e23ffc CR3: 0000000074d1c000 CR4: 00000000003526f0 [ 147.034818][ T6796] Call Trace: [ 147.038125][ T6796] [ 147.041094][ T6796] ? __mutex_lock+0x30b/0x1550 [ 147.045917][ T6796] ? dvb_usbv2_generic_write+0x26/0x60 [ 147.051449][ T6796] ? __mutex_trylock_common+0x15f/0x270 [ 147.057035][ T6796] ? __pfx___mutex_lock+0x10/0x10 [ 147.062103][ T6796] ? __pfx___mutex_lock+0x10/0x10 [ 147.067175][ T6796] ? trace_contention_end+0x3d/0x140 [ 147.072493][ T6796] ? __mutex_lock+0x30b/0x1550 [ 147.077298][ T6796] dvb_usbv2_generic_write+0x26/0x60 [ 147.082989][ T6796] mxl111sf_ctrl_msg+0x160/0x2f0 [ 147.087974][ T6796] mxl111sf_write_reg+0xa9/0x1b0 [ 147.092942][ T6796] ? __pfx_mxl111sf_write_reg+0x10/0x10 [ 147.098527][ T6796] mxl111sf_i2c_xfer+0x463/0x5060 [ 147.103606][ T6796] ? lock_acquire+0x115/0x350 [ 147.108325][ T6796] ? __pfx_mxl111sf_i2c_xfer+0x10/0x10 [ 147.113928][ T6796] ? is_bpf_text_address+0x26/0x2b0 [ 147.119193][ T6796] ? kernel_text_address+0xa5/0xe0 [ 147.124364][ T6796] ? __kernel_text_address+0xd/0x30 [ 147.129613][ T6796] ? unwind_get_return_address+0x4d/0x90 [ 147.135325][ T6796] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 147.141534][ T6796] ? arch_stack_walk+0xfb/0x150 [ 147.146425][ T6796] ? stack_trace_save+0xa9/0x100 [ 147.151382][ T6796] ? __pfx_stack_trace_save+0x10/0x10 [ 147.156775][ T6796] ? stack_depot_save_flags+0x33/0x7f0 [ 147.162262][ T6796] ? kasan_save_track+0x4f/0x80 [ 147.167154][ T6796] ? look_up_lock_class+0x57/0x110 [ 147.172293][ T6796] ? register_lock_class+0x31/0x2e0 [ 147.177523][ T6796] ? __lock_acquire+0x747/0x2de0 [ 147.182493][ T6796] ? do_raw_spin_lock+0x12b/0x2f0 [ 147.187568][ T6796] __i2c_transfer+0x7bf/0x1fe0 [ 147.192361][ T6796] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 147.198196][ T6796] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 147.204041][ T6796] ? rt_mutex_lock_nested+0x156/0x1c0 [ 147.209470][ T6796] ? i2c_transfer+0xc7/0x2d0 [ 147.214111][ T6796] i2c_transfer+0x1cb/0x2d0 [ 147.218641][ T6796] i2cdev_ioctl_rdwr+0x460/0x740 [ 147.223605][ T6796] compat_i2cdev_ioctl+0x59f/0x5c0 [ 147.228760][ T6796] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 147.234450][ T6796] ? __fget_files+0x3a2/0x420 [ 147.239156][ T6796] ? __fget_files+0x2a/0x420 [ 147.243782][ T6796] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 147.249384][ T6796] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 147.254997][ T6796] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 147.261023][ T6796] ? kmem_cache_free+0x182/0x650 [ 147.265998][ T6796] ? __se_sys_futex_time32+0x3ab/0x440 [ 147.271495][ T6796] ? rcu_is_watching+0x16/0xb0 [ 147.276295][ T6796] __do_fast_syscall_32+0x27a/0x6b0 [ 147.281528][ T6796] ? do_fast_syscall_32+0x33/0x70 [ 147.286592][ T6796] ? asm_int80_emulation+0x1a/0x20 [ 147.291814][ T6796] ? do_int80_emulation+0x299/0x500 [ 147.297043][ T6796] ? trace_irq_disable+0x3b/0x140 [ 147.302096][ T6796] do_fast_syscall_32+0x33/0x70 [ 147.306984][ T6796] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 147.313342][ T6796] RIP: 0023:0xf6fef0ec [ 147.317431][ T6796] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 147.337065][ T6796] RSP: 002b:00000000f53dd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 147.345510][ T6796] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000000000707 [ 147.353509][ T6796] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 147.361512][ T6796] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 147.369509][ T6796] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 147.377506][ T6796] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 147.385507][ T6796] [ 147.388573][ T6796] Modules linked in: [ 147.393866][ T6796] ---[ end trace 0000000000000000 ]--- [ 147.401658][ T5615] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 147.403350][ T6810] netlink: 67 bytes leftover after parsing attributes in process `syz.2.339'. [ 147.427862][ T6796] RIP: 0010:__mutex_lock+0x149/0x1550 [ 147.427911][ T6796] Code: c0 40 e5 9e 9a 48 c1 e8 03 0f b6 04 18 84 c0 0f 85 3f 12 00 00 83 3d 05 25 b6 0e 00 75 22 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <80> 3c 18 00 74 05 e8 9c 61 4f f6 4d 39 64 24 58 0f 85 52 11 00 00 [ 147.427940][ T6796] RSP: 0018:ffffc900045df280 EFLAGS: 00010206 [ 147.427962][ T6796] RAX: 0000000000000018 RBX: dffffc0000000000 RCX: ffffffff9a9ee503 [ 147.427979][ T6796] RDX: 0000000000000000 RSI: ffffffff8e69fc8a RDI: 00000000000000c0 [ 147.427994][ T6796] RBP: ffffc900045df418 R08: ffffc900045df387 R09: 0000000000000000 [ 147.428010][ T6796] R10: ffffc900045df360 R11: fffff520008bbe71 R12: 0000000000000068 [ 147.428026][ T6796] R13: 0000000000000000 R14: 1ffff920008bbe64 R15: 0000000000000000 [ 147.428041][ T6796] FS: 0000000000000000(0000) GS:ffff888124dc6000(0063) knlGS:00000000f53ddb40 [ 147.428060][ T6796] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 147.428076][ T6796] CR2: 0000000080600000 CR3: 0000000074d1c000 CR4: 00000000003526f0 [ 147.428099][ T6796] Kernel panic - not syncing: Fatal exception [ 147.529542][ T6796] Kernel Offset: disabled [ 147.533899][ T6796] Rebooting in 86400 seconds..