last executing test programs: 6.35587583s ago: executing program 0 (id=6113): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) mbind(&(0x7f000016a000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x2, 0xf) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c00028014000300f4f03b020000000007000f116b61979e090001006c3274700000000008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 6.144026442s ago: executing program 0 (id=6114): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast2, 0x8000000, 0x0, 0xff, 0x0, 0x9, 0x9}, 0x20) writev(0xffffffffffffffff, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r2 = openat$fault_inject(0xffffff9c, &(0x7f0000000180)='/sys/kernel/debug/failslab/verbose\x00', 0x1, 0x0) write$fault_inject(r2, &(0x7f0000000080)='1\x00', 0x2) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) poll(&(0x7f0000001b40)=[{r3, 0x8090}], 0x1, 0x9a0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000080)={0x50, 0x0, r6, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000040)={0xa, {"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", 0x1000}}, 0x1006) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_fuse_handle_req(r5, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x150, 0x0, 0x3, [{{0x1, 0x2, 0xd8, 0x2, 0x6, 0x2, {0x0, 0x980, 0x3, 0x2, 0x7, 0x100000000009, 0x8, 0x3, 0x0, 0x6000, 0x1, r7, r8, 0x4, 0x7}}, {0x3, 0x7fffffff, 0x2, 0x6, '[]'}}, {{0x0, 0x3, 0x5a, 0x7, 0x0, 0x6, {0x3, 0xffff, 0xe27, 0x2, 0x8, 0x3, 0x7, 0x6, 0x2, 0x4000, 0x8, r7, r8, 0x9, 0x5}}, {0x3, 0x4, 0x2, 0x6, '+%'}}]}, 0x0, 0x0, 0x0}) open$dir(&(0x7f00000001c0)='./file0\x00', 0x2000, 0x62) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {0x9}}, './file0\x00'}) pipe(&(0x7f0000000180)={0xffffffffffffffff}) syz_genetlink_get_family_id$fou(&(0x7f0000000480), r9) getdents(r9, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$tipc(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x8820) socket$inet_udp(0x2, 0x2, 0x0) 5.143820434s ago: executing program 0 (id=6117): r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0xd, 0x4, 0x0, 0x3}}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x68, 0x0, 0xc8, r2}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) symlink(&(0x7f0000000180)='./file1\x00', &(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000000)={0x210a, r6}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r7) close(r7) creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6fc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) r8 = semget$private(0x0, 0x2, 0x1) semctl$IPC_SET(r8, 0x0, 0x1, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 0x100, 0x4}, 0x0, 0x81, 0x0, 0x0, 0x4, 0x0, 0x848a}) semctl$IPC_STAT(r8, 0x0, 0x2, &(0x7f0000000140)=""/80) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300000000d0a010800000000000004000a00fffe0900020073797a31000000000900020073797a310000000004000380"], 0x30}, 0x1, 0x0, 0x0, 0x4044840}, 0x8000) r9 = socket$inet(0xa, 0x800, 0x1) listen(r9, 0x8) 4.997270407s ago: executing program 2 (id=6119): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@empty, @in6=@empty, 0x0, 0x4, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x400000000000000}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0xa, @in6=@empty}}, 0xe4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000700)={0xa, 0x1236, 0x0, @remote}, 0x1c) (fail_nth: 5) 4.756711834s ago: executing program 2 (id=6120): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x1a2200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000004c0)={0x10000000000000a1, 0x0, [{0x200, 0x0, 0x7}]}) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x101000) ioctl$EVIOCGABS20(r3, 0x80184520, &(0x7f0000000100)=""/165) 4.616070918s ago: executing program 2 (id=6121): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r1], 0xe8}, 0x1, 0x0, 0x0, 0x44000}, 0x80) write$tun(r0, &(0x7f0000001840)=ANY=[@ANYBLOB="0800080006000600080014000000450a0fc000660005"], 0xfce) 4.361202335s ago: executing program 2 (id=6122): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000080)}], 0x1}}], 0x1, 0x0) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000740)=@newtclass={0x68, 0x28, 0x400, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd, 0x1}, {0xffff, 0x3}, {0x1, 0xfff7}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x3}}}, @c_cbq={{0x8}, {0x24, 0x2, [@TCA_CBQ_WRROPT={0x10, 0x2, {0x5, 0x3, 0x2, 0x12, 0x6, 0x5}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x1, 0x9}, 0x715, 0x2}}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x44040}, 0x8800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x5c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x30, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x300}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a310000000070000000060a010400000000000000000100000008000b400000000048000480440001800b000100657874686472000034000280080001400000000c080003400000000008000440000000220500020007000000080006400000000308000540000000000900010073797a300000000020000000030a010300000000000000000a0000020900030073797a300000000044010000080a01080000000000000000010000073a00074032e97608c07b8f34d704cc507d07a8d4c429672a9b6841e516ce194f03354b3c46a930469ce36ee8391a02352a70d543c633dc17a9d300007900074012119f33dbd27dbba871f33b8206fc0a59dac6df96baf86f3deffa20b8a2b13fa2fbc917a33ad4b9dc903553ff1e7533cd9d1e3f6a3248b10a63552977fab38d9ad7409cbd223b094a0bb6f0884c8839890d122f9b9963668c97749b2304852a8d461ccc39dc307f41ac41688a4f2d64a916dc532d00000008000a40000000000900010073797a30000000000900020073797a31000000002c00058008000140000086dd080001400000002c080001400000001608000140000000736afd014000008100080009"], 0x248}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r3) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x1001001}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010006000d0000000000010000000000000001410000001c001700000000000000006574683a73797a5f74756e"], 0x38}}, 0x0) nanosleep(0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffffaabbccddeeff88ca5b500028003a00000000000001001002000012670000"], 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = userfaultfd(0x1) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x8) read(r6, &(0x7f00000002c0)=""/153, 0x99) unshare(0x400) r7 = openat$dlm_monitor(0xffffff9c, &(0x7f00000006c0), 0x80603, 0x0) inotify_rm_watch(r7, 0x0) syz_open_dev$radio(&(0x7f0000000100), 0x3, 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fsopen(&(0x7f0000000080)='erofs\x00', 0x0) 4.084901348s ago: executing program 2 (id=6123): r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x22214, 0x8900}, [@IFLA_MASTER={0x8, 0x3}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x4}]}}}]}, 0x44}, 0x1, 0xd, 0x0, 0x480c5}, 0x20000000) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x5220, 0x4) bind$unix(r0, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e23}, 0x6e) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000780)={0x5f, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r3, 0x40015b0b, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x103a42, 0x32) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x25, &(0x7f00000000c0)={0x8000000001, 0xffffffffffffffff, 0x26, {0xffffffffffffffff, 0xffff}, 0x1}, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x4008001) sendmsg$NFT_BATCH(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a1c0000000b0a23020000000000000000010000001100010000000006000000000000000a"], 0x44}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000001e0021002b"], 0x20}, 0x1, 0x0, 0x0, 0x2008800}, 0x4000000) syz_usb_ep_write$ath9k_ep1(r8, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={&(0x7f0000000540)="f8659845b70a581d148a59b002f8012166e276fc9c3518c5658f81261546c203b7b0c20bb575f6b1b08f112760d60f3e13c2642ba1d06a0124dba5763fc6a37f5df90982448ed5827800694b553c2c7d736ee3811fa8d720c93d158c91c5048ed285b7b1", &(0x7f00000005c0)=""/143, &(0x7f0000000680)="95b24430e8d0ffa7167a8f0bba63f330eb023e3f88f0a00e97ba7e8fce32e4e90a0c4bf102eac3dc0448473ee1ab8df04fa4cabacaee0f50be8bd6f6671bf98d8ccd19bb2e66748e717a5230e5dd22f40d47f341d9d7549492038d37be0572bd2d75481e413663b8902c099c4805ee8e228436200b7d09d715e254e05749fdad390c8dc9d934afa0a610dcebb0bc607ed3ac51090835a65e0b25decf96f185883a1b5a5fcf6ca2d1a8706e899c3f674d", &(0x7f0000000800)="c77aba71676645b724d5371813c53966770062a4ad43fa19575dbc18d7a026e606419337466248ad2317c8ee0d3f311c4fd5dd840ed6b77e1c9972e93a0f3e1eeb56e734bfcebfc42454840a7f0dc9a5b9cdaa898f70b7eaf15f6a4812ea5e93409b8abcc5439138267fedb064f5175faa1e96deb2a0b67085e78b41c99f0ae320cf8b6c66f8535b1a34753e6a74eca9d09e3e8defef5aed1c39657bf9c82d55ad8915e18fdca9d8e92d83d6199ab4a8fbeb4320ee36a14cc58be67e0688738ff04dae7ab4e4b5f6621fe4d186b3d6b49194217d6b23f344e57290c0bdd7821d", 0x7f, r4}, 0x38) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) recvmmsg(r9, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x5}, 0x1}], 0x400000000000141, 0x20, 0x0) 4.079204758s ago: executing program 0 (id=6124): syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001173a6140f41515006ed10102030109022400013600a0000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000080), 0x1, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000200)={&(0x7f00000001c0)=[{0x7, 0x6af5, 0x700, 0x0}, {0x0, 0x3200, 0x0, 0x0}], 0x2}) 3.201881683s ago: executing program 1 (id=6125): syz_open_dev$video(&(0x7f0000000300), 0x9, 0x0) syz_open_procfs(0x0, &(0x7f00000003c0)='fd/3\x00') pselect6(0x40, &(0x7f0000000100)={0x0, 0xf, 0x1000, 0x0, 0x801, 0x100}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@getchain={0x44, 0x66, 0x100, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xfff2, 0x2}, {0x1, 0xd}, {0x1, 0xe}}, [{0x5, 0xb, 0xb88}, {0x8}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x1cdc, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xfff8}, {}, {0x9, 0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x1ca8, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x5}, @TCA_MATCHALL_ACT={0x144, 0x2, [@m_skbmod={0x60, 0x13, 0x0, 0x0, {{0xb}, {0x20, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xb}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x3ff}]}, {0x16, 0x6, "9fc0ff3a0eec60b545b75cf58b0ee0cc6e3d"}, {0xc}, {0xc, 0x8, {0xbf5515f29e2a1011}}}}, @m_skbmod={0xe0, 0x14, 0x0, 0x0, {{0xb}, {0xb0, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @random="c6f8bd29cc7c"}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="194b117f4643"}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x40}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x100}, @TCA_SKBMOD_PARMS={0x20, 0x2, {{0x2, 0x7, 0x3, 0x0, 0x1}, 0x9}}, @TCA_SKBMOD_PARMS={0x20, 0x2, {{0x0, 0x8, 0x10000000, 0xfffffffa, 0x9}, 0x8}}, @TCA_SKBMOD_PARMS={0x20, 0x2, {{0x3, 0x0, 0xffffffffffffffff, 0x10001, 0x1}, 0x5}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}]}, {0x6, 0x6, "7bf8"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_MATCHALL_ACT={0x874, 0x2, [@m_police={0x870, 0xc, 0x0, 0x0, {{0xb}, {0x830, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3ff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x8, 0x8556, 0x9, 0x5, 0xa, 0x1, 0x606f, 0x2, 0x80000000, 0x5, 0x4, 0x6, 0x4, 0x1ff, 0x3, 0x6, 0xfff, 0x7fffffff, 0x80000001, 0xfd, 0x1, 0x0, 0x9b, 0x5, 0x1, 0x4, 0x9, 0x7, 0x1ff, 0x65, 0xad7, 0x8000, 0x2, 0x5, 0x6, 0x4de, 0xffffffff, 0x9, 0x7, 0x8, 0x7e8, 0x3, 0x2, 0x4, 0x6, 0x1000, 0x4, 0x6, 0x7, 0x0, 0xb, 0x40, 0x34800000, 0x6, 0xe0, 0x6, 0xfffffffb, 0xa9c7, 0x9, 0x7f80, 0x8, 0xf055, 0x7, 0x5f, 0x0, 0x2, 0x8, 0x6, 0x7fff, 0x200, 0x1ff, 0xff, 0x7, 0x100, 0x3, 0x2, 0x3, 0xe, 0x3, 0x800, 0x4, 0xc, 0x5, 0x3, 0xc, 0x1, 0x1, 0x101, 0x7, 0xffffffff, 0x7, 0x7, 0x4, 0x1, 0x17, 0x6, 0x8, 0x1, 0x2, 0x0, 0xffff2aa4, 0x4, 0x5, 0x3, 0xc274, 0x9, 0x6, 0x83, 0x7, 0x0, 0x400, 0x2, 0x3, 0x2, 0x5716, 0x2, 0x4, 0x2073, 0x100, 0x5d32, 0x8, 0x2, 0x6, 0x7f, 0x6867, 0x9, 0x5, 0x6, 0x3, 0x6, 0x9, 0x9, 0x400, 0x4edad5b7, 0x8, 0x5, 0x3, 0x4, 0x5, 0x0, 0x0, 0x80, 0xa, 0x10001, 0x1000, 0x7f, 0x7e6, 0xd, 0xec, 0x9, 0x7fff, 0x3ff, 0x4, 0xc0000000, 0x7fffffff, 0x6, 0x7f, 0x1, 0x0, 0x512d, 0x4, 0x8, 0x10, 0xc6, 0xfff, 0x33, 0x32c40000, 0x5, 0x960e, 0x6bd0, 0x200, 0x10, 0x8, 0x80000000, 0xaf0, 0x10001, 0x4, 0x0, 0x0, 0x4, 0xa, 0x40, 0x61cc, 0x5bb8, 0xffff0000, 0x9b5, 0x316, 0x6, 0x4, 0x0, 0x9, 0x61, 0x6, 0x1, 0x651, 0x7fffffff, 0x7fff, 0x7, 0x6, 0x6, 0x1, 0x29, 0x7, 0x1, 0x5, 0x5, 0xf6, 0x6fab2157, 0xfffffffb, 0x17dc, 0x0, 0x5, 0x7, 0x8, 0x1583, 0x2, 0xffff, 0x4, 0xfffffffc, 0x7, 0x404000, 0xffffffff, 0x3, 0x2, 0x2, 0xf, 0xc, 0x2, 0x5, 0xfffffffb, 0x80000001, 0x9, 0x500000, 0x101, 0x8, 0x3, 0x5, 0x87f, 0xfffffff2, 0xad, 0x6, 0x8, 0x9, 0x2, 0x5, 0x9, 0x7, 0x5, 0x7fffffff, 0x4166d7df, 0x8001, 0x5, 0x18, 0x8, 0xc]}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0xe0, 0x2, 0x7, 0x100, 0x68f, 0x4, 0x7ff, 0xfffff801, 0x1, 0x0, 0x1, 0x82, 0x8, 0x6b7, 0x3, 0x8, 0x101, 0x7f, 0x6, 0x3, 0x0, 0x80000001, 0xbb82, 0x4, 0x5, 0x2, 0x6, 0x7, 0xa4, 0xfffffffa, 0x2, 0xd31f, 0x7, 0x9, 0x7, 0x1b033077, 0xf914, 0x10000, 0x1000, 0x9, 0x9, 0x7c36, 0x88b, 0x436a, 0x3, 0xa24, 0x9, 0x8000, 0x8, 0xcc, 0x3, 0x5, 0xfffffffb, 0xf, 0x7697, 0xe, 0x5, 0x9, 0x8, 0x2d455b7d, 0x2, 0x80, 0xd, 0xe49, 0x3, 0x5, 0xc1d, 0x0, 0x9, 0x9, 0x7831, 0x2, 0x7, 0x0, 0x7, 0x5a3, 0x68, 0x8, 0x400, 0xfff, 0x6a0b, 0x3db, 0x400, 0x7, 0x7, 0x80000001, 0xf49, 0x8, 0x2, 0xe, 0x800, 0xfffffff9, 0x6, 0x8000, 0x1ff, 0x80000001, 0xcc, 0x5, 0x6, 0x0, 0xfffffffe, 0x40, 0x4, 0xba14, 0x0, 0x0, 0x0, 0x81, 0x4, 0x78, 0x48, 0xfffffffa, 0x0, 0xffff, 0x39e1, 0xef, 0xe, 0x7e65, 0x945, 0xdca, 0x2, 0x4, 0x5, 0x40000000, 0x6, 0x0, 0x8, 0x824a, 0xc, 0x6, 0x6, 0x6, 0x51, 0xff, 0x3, 0x0, 0x7fff, 0x4, 0x5, 0x1, 0x9, 0x9, 0x9, 0x7, 0xfff, 0x7, 0x0, 0x7f, 0x81, 0x10cd, 0x6, 0x3, 0xffff, 0x1a0a, 0x8, 0x0, 0x300, 0x1, 0xfffffffd, 0x4, 0x100, 0x5, 0xfffffffa, 0x0, 0x5, 0xa7, 0x2, 0x80000001, 0x7, 0x81, 0xffffffe9, 0x4, 0x4, 0x9, 0x4, 0x4, 0xce81, 0xca5, 0x4, 0x6, 0x7, 0x4, 0x2, 0x51, 0x2b9f17e5, 0x1000, 0x100, 0x0, 0x2, 0xc5f, 0x99, 0xcf63, 0xffffffc0, 0x0, 0x0, 0x3, 0x0, 0x10, 0x8, 0x1, 0x5, 0xf924, 0x14000, 0x4, 0xe, 0x5, 0xe, 0x6, 0x7ff, 0x7, 0x0, 0x4, 0x6, 0x0, 0x80, 0x6, 0x8001, 0x2, 0xb0, 0xb, 0x2, 0x7, 0x2, 0xffff, 0x8001, 0xffffffff, 0x3, 0x6, 0xa, 0x3ff, 0xffffe7fe, 0x3, 0x2, 0x1ff, 0x7, 0x7, 0x2, 0x1b, 0x1, 0x400, 0x3, 0x7fffffff, 0x46f7, 0x5, 0xa, 0x8, 0x2, 0xa5f5, 0xe, 0x49a, 0x8, 0xffff4bcf, 0x7, 0x2, 0x9]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x7}]]}, {0x16, 0x6, "120bca05270657be3381df18b2c09fec8673"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_MATCHALL_ACT={0x12e4, 0x2, [@m_ct={0xfc, 0x17, 0x0, 0x0, {{0x7}, {0x88, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x3}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @mcast1}, @TCA_CT_LABELS={0x14, 0x7, "699d6110c3b6b353f965d157e719102d"}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @mcast1}, @TCA_CT_ACTION={0x6}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @rand_addr=0x64010100}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @dev={0xfe, 0x80, '\x00', 0x33}}, @TCA_CT_LABELS={0x14, 0x7, "4f7e8dd764675421c4883854e261b90e"}, @TCA_CT_ZONE={0x6, 0x4, 0x400}]}, {0x4f, 0x6, "8931d6770695b84704937c9318b06d056c50570a850beb9c1ff20046a49bf2c5d5abf96d5f90ccdceb6b13445ed9a7b39f0cbccf45dd9f581fef1215a438fbf257105ae38508a6862e521b"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x154, 0x16, 0x0, 0x0, {{0x8}, {0x74, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xbec9, 0x6, 0x0, 0x10000, 0x4624a55c}, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x6, 0x7, 0x8, 0x3f}}}, @TCA_IFE_METALST={0x18, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x7}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_METALST={0x18, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x2}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}]}]}, {0xbc, 0x6, "e1b3a030c9cb57cbafdc2ba2ba1e29694f1f96832a502cf6554a6c4e7ee273966a808787fc34a3060ce6b725b2ae4e083d7ef716aa90be86ce9ae6a7497ea75c0407e875be3185ccdf9bac4774e8890e44ced12209dd6d717e560d7db42fca3bee17c1e6635a8f8f8d825506ffa87495b8fbc04881e8fc33355924afbb9156489534504e8c6bccbd36f9a57ce6bcb07749e3ed45d10aa5ece8a9fd0bf0d5d3689d8952859f00221d5ac61bf2501f5a691a906dab0046c451"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0x1090, 0x16, 0x0, 0x0, {{0x7}, {0x68, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @mcast1}, @TCA_CT_LABELS_MASK={0x14, 0x8, "6b56b7720ef0369601ead86bbe0aeda1"}, @TCA_CT_MARK={0x8, 0x5, 0x7}, @TCA_CT_LABELS_MASK={0x14, 0x8, "20e455139bba9afefc1aa0aca2a9725c"}, @TCA_CT_ZONE={0x6, 0x4, 0x2}, @TCA_CT_PARMS={0x18, 0x1, {0xb2d3, 0x0, 0xffffffffffffffff, 0xf62}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x1cdc}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r4 = openat$ttynull(0xffffff9c, &(0x7f0000000040), 0x103840, 0x0) ioctl$KDDISABIO(r4, 0x4b37) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xf58b, 0x101}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x20000) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r5 = signalfd(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x8936, 0x0) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x3c) syz_open_procfs(0x0, &(0x7f00000000c0)='net/rt_acct\x00') r6 = inotify_init1(0x0) read(r6, 0x0, 0x0) close(r6) 2.833274029s ago: executing program 1 (id=6128): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000180)=@ethtool_link_settings={0x2a, 0x8, 0x4, 0x7, 0x7, 0xc0, 0x1, 0x3, 0x5, 0xdf, [0x80, 0x0, 0x32, 0x7, 0x0, 0xa0, 0x10, 0x5]}}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYRES16=r1, @ANYRES32=r1, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20000805}, 0x8d4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x42081, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0cc5605, &(0x7f0000000180)={0x1, @vbi={0x500, 0x0, 0x32315842}}) r3 = getpid() r4 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, 0x0) kcmp(r3, r3, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000440)) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0, 0x26}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r5, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x240, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xd) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000440)=0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) socket$inet(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000000)={@local}) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r7, 0x7af, &(0x7f0000000080)={@hyper, 0x2}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x2e, 0x32, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x1, 0x640, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x90}}}, &(0x7f0000000380)) 2.591355045s ago: executing program 1 (id=6130): r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r2, @ANYBLOB="05"], 0x6c}, 0x1, 0x0, 0x0, 0x10004000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x12}, 0x9}, 0x0) 2.492507868s ago: executing program 1 (id=6132): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x0, 0x8, 0xfe8, &(0x7f0000001e00)=""/4072, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r3 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x58, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x15}}, {0x8, 0x2, @remote}}}]}, @CTA_FILTER={0x24, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x18}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0xa80}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x401}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x408}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x406c450}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r4, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x63}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 2.468340642s ago: executing program 3 (id=6133): r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0xd, 0x4, 0x0, 0x3}}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x68, 0x0, 0xc8, r2}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) symlink(&(0x7f0000000180)='./file1\x00', &(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000000)={0x210a, r6}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r7) close(r7) creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6fc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) r8 = semget$private(0x0, 0x2, 0x1) semctl$IPC_SET(r8, 0x0, 0x1, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 0x100, 0x4}, 0x0, 0x81, 0x0, 0x0, 0x4, 0x0, 0x848a}) semctl$IPC_STAT(r8, 0x0, 0x2, &(0x7f0000000140)=""/80) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300000000d0a010800000000000004000a00fffe0900020073797a31000000000900020073797a310000000004000380"], 0x30}, 0x1, 0x0, 0x0, 0x4044840}, 0x8000) r9 = socket$inet(0xa, 0x800, 0x1) listen(r9, 0x8) 1.971277047s ago: executing program 4 (id=6134): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) memfd_create(0x0, 0x6) mmap$IORING_OFF_PBUF_RING(0x0, 0xe19, 0x7, 0x4010, 0xffffffffffffffff, 0x87c512a2) (fail_nth: 11) 1.786220911s ago: executing program 4 (id=6135): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, 0x0, 0x44) 1.643471725s ago: executing program 4 (id=6136): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@empty, @in6=@empty, 0x0, 0x4, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x400000000000000}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0xa, @in6=@empty}}, 0xe4) sendto$inet6(r0, 0x0, 0x97, 0x0, &(0x7f0000000700)={0xa, 0x1236, 0x0, @remote}, 0x1c) 1.410929977s ago: executing program 4 (id=6137): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r0, 0x402, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/f1\x00', 0x42, 0x1ff) setxattr(&(0x7f0000000500)='./mnt/f1\x00', 0x0, 0x0, 0x0, 0x0) 1.392069078s ago: executing program 1 (id=6138): r0 = syz_open_dev$vim2m(0x0, 0xffff8000, 0x2) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x24}}, 0x0) (async) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0cc5605, 0x0) (async) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x6, 0x3}) (async) syz_emit_ethernet(0x4a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaa8aaaaaaaa0286dd602b000100140600fe8000000000000000000000000000bb2001000000000000000000000000000200004e2233b0e9c10b5e181e350035118b2b3a2df31caf4dd4a3846ceb76e3e5c829558f916a04983db9698a5fb37ec035a6e6abb1d5524f771886a7ba13e3f7eb4e60bc76ec826b00aae7d54bd33f14610c7c83b7dbb16ffb1713116cb30e32b8f9ebd0aa8e08ce9a9d6659f5cf004b7e0eee31391cba706df3401419319662d7d82f65a13b72274192b565b5a6cdc6db1275502113481cefc46fd876c597464584bf011780fcba8da6a917172081690183b3c6c1b30000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="54c2a38890780000"], 0x0) syz_usb_connect(0x0, 0x5d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052413"], 0x0) 1.377759785s ago: executing program 3 (id=6139): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xd}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xffff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x16, 0x0, 0x2, 0x3ff, 0x8, 0x2}, {0x7, 0x2, 0x5ec, 0x1, 0xad, 0x200}, 0xffff0001, 0x8000, 0xb9f}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x9e57194a6724d2b5}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r3, 0x3e}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000700)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb6ad67d196186e061f7092e2fe1ef9a0d699e9d080edab4bfdf0700000000000033b67507b05c35577587287c161a312d2351cf0f9c19d2f0d2b52ace0218941304c45c9b529492322ecf2cf8c68a126cb82558982cdcd02dba2f605704bcafe6da433b11d59d071d79e32748a1317a1d68c1be05f1f584dde4be8c1262a925fbabe0af8c00a5181f9c85b647ed0e5f", 0xb5}, {&(0x7f00000002c0)="8caed476f6bcc737902ee6863118a0f660978f27dfa8e77e65d30f0c994994af1fb65ee49983e655d3f7be317d2380b0ed8e916769d5f1b8dc7a927e6401a10223ad90d5dc45614dec7e4c2f19d2b70807aaef8fc9e45c7a65583d15a94480840f4e4fc9ee8e3b7f8fd1aaf800d9", 0x6e}, {&(0x7f0000000440)="99dcbf373748a116444c10801b7c8f48ff3cc4222eaa9a8ecd976fe5c2b153b8012daa0155cbb1", 0x27}, {&(0x7f0000000480)="5dc2db6fa9b830b5bedc2a54b2d4091ce8c28ef121944d189544096016abb738c8d7cbee8455797c78611bc5b5633e30c7ee1093b90e3208ecb225f6d0d29465fa81ca56e738ef1e7c0480a7b780ec614330e809a1523dbfda40a01ee577449b2adcf3ac4a416128f9b100695ec34ba5c785caca8eaf21639695869be83d5597e7d5c5d74690449c0b1589212d14268d86d6e9df6605662594a579a01f6247f8789ee2753104a9ff6c977436258777b047c00743caeee11953c7ee9f75783afc3e3e6951ad94872aef0797363080994c6e7ff1645c", 0xd5}, {&(0x7f0000000b00)="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", 0xf9a}], 0x5}, 0x0) 1.348823277s ago: executing program 4 (id=6140): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xd}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xffff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x16, 0x0, 0x2, 0x3ff, 0x8, 0x2}, {0x7, 0x2, 0x5ec, 0x1, 0xad, 0x200}, 0xffff0001, 0x8000, 0xb9f}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x9e57194a6724d2b5}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r3, 0x3e}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000700)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb6ad67d196186e061f7092e2fe1ef9a0d699e9d080edab4bfdf0700000000000033b67507b05c35577587287c161a312d2351cf0f9c19d2f0d2b52ace0218941304c45c9b529492322ecf2cf8c68a126cb82558982cdcd02dba2f605704bcafe6da433b11d59d071d79e32748a1317a1d68c1be05f1f584dde4be8c1262a925fbabe0af8c00a5181f9c85b647ed0e5f", 0xb5}, {&(0x7f00000002c0)="8caed476f6bcc737902ee6863118a0f660978f27dfa8e77e65d30f0c994994af1fb65ee49983e655d3f7be317d2380b0ed8e916769d5f1b8dc7a927e6401a10223ad90d5dc45614dec7e4c2f19d2b70807aaef8fc9e45c7a65583d15a94480840f4e4fc9ee8e3b7f8fd1aaf800d9176af51346ea81ee48fdc01f072780ff849a4fe9197b8926a16412b4da7b627e43d71ec1b367bbd9454ab97566775449de0c9e1b429acb005171cfd0b37d5e807f54ece988ae6a50773488ded126b8fc9559f66619d6002a53923e4e93bf09354a28cdd2c6a0653731e3ff0fac", 0xdb}, {&(0x7f0000000440)="99dcbf373748a116444c10801b7c8f48ff3cc4222eaa9a8ecd976fe5c2b153b8012daa0155cbb1", 0x27}, {&(0x7f0000000480)="5dc2db6fa9b830b5bedc2a54b2d4091ce8c28ef121944d189544096016abb738c8d7cbee8455797c78611bc5b5633e30c7ee1093b90e3208ecb225f6d0d29465fa81ca56e738ef1e7c0480a7b780ec614330e809a1523dbfda40a01ee577449b2adcf3ac4a416128f9b100695ec34ba5c785caca8eaf21639695869be83d5597e7d5c5d74690449c0b1589212d14268d86d6e9df6605662594a579a01f6247f8789ee2753104a9ff6c977436258777b047c00743caeee11953c7ee9f75783afc3e3e6951ad94872aef0797363080994c6e7ff1645c", 0xd5}, {&(0x7f0000000b00)="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", 0xda7}], 0x5}, 0x0) 1.159276612s ago: executing program 4 (id=6141): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000001000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000c80)={0x44, 0x0, &(0x7f0000000a80)={0x0, 0xa, 0x1, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000140)=ANY=[@ANYBLOB="20c81e0000004d61501d0100000000000000100000000000800700000000000038"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_setup(0x7, &(0x7f0000000280)=0x0) r2 = openat$sysfs(0xffffff9c, &(0x7f00000002c0)='/sys/power/freeze_filesystems', 0x42, 0xf0) io_submit(r1, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0xfffffc98}]) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000280)=ANY=[@ANYBLOB="40830100000081"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000d80)={0x34, &(0x7f0000000a80)=ANY=[@ANYBLOB="401605"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 1.010816854s ago: executing program 3 (id=6142): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'veth1_to_team\x00', &(0x7f0000002fc0)=@ethtool_wolinfo={0x3, 0x8, 0x4, "050000009582"}}) sendmsg$IPSET_CMD_TEST(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x88}}, 0x0) socket$key(0xf, 0x3, 0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x31) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000003c0)="660fda1f660f388164ea5ebb0300000065260f3566b811008ed0b805000000b9000000800f01c13626660f38801766baf80cb804391780ef66bafc0cb8626e0000ef66b865008ee0c4e2797802", 0x4d}], 0x1, 0x0, &(0x7f0000000600), 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=@newsa={0x13c, 0x18, 0x803, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0xea3, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x4, 0x10001, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0x1, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @etimer_thresh={0x8, 0xc, 0x9}]}, 0x13c}}, 0x844) write(0xffffffffffffffff, &(0x7f0000000300)="8cdc9a065e5522b6836813165b31718fc68fb534c8bed89ae8ea7f287057a98be835e1c9bd5690ad469d262a39d4cf07d0faf3c601b625996e79f562e3d73e026661122e66799455bb51f59ae5cfdc038dc824858bf248abb854756835b6fd3a423a5b2e51744bdca9256e", 0x6b) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1c0008000100000000003d0000004800004000000090783fffffffac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b4000000907800060e0300050200000000000000000002d58838068b91000000"], 0x4e) mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) openat$cuse(0xffffff9c, &(0x7f00000000c0), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0xffffffff, 0x1e5}, &(0x7f00000001c0), &(0x7f0000000080), &(0x7f0000000140)) r7 = openat$kvm(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r8, 0x80045505, &(0x7f0000000140)=@usbdevfs_driver={0x0, 0x8, 0x0}) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x80045505, &(0x7f0000000000)=0x1) 953.470754ms ago: executing program 0 (id=6143): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)=0x81) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000001c0)=0x5) (fail_nth: 3) 950.908378ms ago: executing program 2 (id=6144): r0 = fsopen(&(0x7f00000001c0)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0xf) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)=@acquire={0x134, 0x17, 0x1, 0x70bd25, 0x25dfdbfb, {{@in=@multicast2, 0x4d2, 0x6c}, @in=@empty, {@in6=@private2, @in=@multicast2, 0x4e23, 0x4a, 0x4e21, 0xf, 0x2, 0x0, 0xe0, 0x0, 0x0, 0xee00}, {{@in=@loopback, @in=@empty, 0x4e21, 0x0, 0x4e20, 0x5, 0xa, 0x10, 0x80, 0x29}, {0x8, 0x4, 0x5, 0x16, 0x400, 0x6, 0x9, 0x400}, {0x5, 0x1, 0x7ff0000000, 0x3}, 0x10, 0x0, 0x1, 0x1, 0x2}, 0x1, 0x7fff, 0xfff, 0x70bd2a}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1, 0x9}}]}, 0x134}}, 0x4050) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f00000005c0)=[{0x6}]}) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0502103, 0xfffffffffffffffe) 613.918137ms ago: executing program 0 (id=6145): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101042, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000340), 0x14, 0x0) r2 = add_key$user(&(0x7f00000000c0), &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000480), 0x0, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r4, r3, r3}, 0x0, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f00000004c0)={r2, 0x0, r4}, &(0x7f0000000500)=""/119, 0x77, &(0x7f0000000640)={&(0x7f0000000580)={'xcbc-aes-neon\x00'}, &(0x7f0000000600)="a5", 0x1}) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000080)=""/22) syz_emit_ethernet(0x4a, &(0x7f0000000380)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x5, 0x6, "cfbd35", 0x14, 0x11, 0x0, @empty, @local, {[@dstopts={0x2f}], {0x4e22, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x0, 0x3, 0x0, @void}}}}}}}}, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)=0x81) r5 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42902, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0xfffffffffffffd92, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd27, 0x8000, {0x0, 0x0, 0x0, r11, {0x8, 0xc}, {}, {0xa, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2204402c}, 0x0) r12 = socket$unix(0x1, 0x5, 0x0) openat$cgroup_ro(r9, &(0x7f0000000680)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000280)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x20, 0x0, r12, 0x0, 0x0, 0x0, 0x42}) io_uring_enter(r5, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r13 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) r14 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) r15 = syz_io_uring_complete(r6, r7) ioctl$EVIOCSABS20(r15, 0x401845e0, &(0x7f0000000480)={0x3, 0x4, 0x7ff, 0xfffffffe, 0x5, 0x6}) r16 = dup(r14) ioctl$PTP_PEROUT_REQUEST2(r16, 0x40383d0c, &(0x7f0000000000)={{0x8, 0x7}, {0x200000000000002, 0x8007}, 0x10000004, 0x4}) ioctl$PPPIOCNEWUNIT(r13, 0xc004743e, &(0x7f00000001c0)=0x5) 550.02005ms ago: executing program 3 (id=6146): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8044}, 0x44) 387.649767ms ago: executing program 3 (id=6147): syz_open_dev$video(&(0x7f0000000300), 0x9, 0x0) syz_open_procfs(0x0, &(0x7f00000003c0)='fd/3\x00') pselect6(0x40, &(0x7f0000000100)={0x0, 0xf, 0x1000, 0x0, 0x801, 0x100}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@getchain={0x44, 0x66, 0x100, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xfff2, 0x2}, {0x1, 0xd}, {0x1, 0xe}}, [{0x5, 0xb, 0xb88}, {0x8}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0x1cdc, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xfff8}, {}, {0x9, 0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x1ca8, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x5}, @TCA_MATCHALL_ACT={0x144, 0x2, [@m_skbmod={0x60, 0x13, 0x0, 0x0, {{0xb}, {0x20, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xb}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x3ff}]}, {0x16, 0x6, "9fc0ff3a0eec60b545b75cf58b0ee0cc6e3d"}, {0xc}, {0xc, 0x8, {0xbf5515f29e2a1011}}}}, @m_skbmod={0xe0, 0x14, 0x0, 0x0, {{0xb}, {0xb0, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @random="c6f8bd29cc7c"}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="194b117f4643"}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x40}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x100}, @TCA_SKBMOD_PARMS={0x20, 0x2, {{0x2, 0x7, 0x3, 0x0, 0x1}, 0x9}}, @TCA_SKBMOD_PARMS={0x20, 0x2, {{0x0, 0x8, 0x10000000, 0xfffffffa, 0x9}, 0x8}}, @TCA_SKBMOD_PARMS={0x20, 0x2, {{0x3, 0x0, 0xffffffffffffffff, 0x10001, 0x1}, 0x5}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}]}, {0x6, 0x6, "7bf8"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_MATCHALL_ACT={0x874, 0x2, [@m_police={0x870, 0xc, 0x0, 0x0, {{0xb}, {0x830, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3ff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x8, 0x8556, 0x9, 0x5, 0xa, 0x1, 0x606f, 0x2, 0x80000000, 0x5, 0x4, 0x6, 0x4, 0x1ff, 0x3, 0x6, 0xfff, 0x7fffffff, 0x80000001, 0xfd, 0x1, 0x0, 0x9b, 0x5, 0x1, 0x4, 0x9, 0x7, 0x1ff, 0x65, 0xad7, 0x8000, 0x2, 0x5, 0x6, 0x4de, 0xffffffff, 0x9, 0x7, 0x8, 0x7e8, 0x3, 0x2, 0x4, 0x6, 0x1000, 0x4, 0x6, 0x7, 0x0, 0xb, 0x40, 0x34800000, 0x6, 0xe0, 0x6, 0xfffffffb, 0xa9c7, 0x9, 0x7f80, 0x8, 0xf055, 0x7, 0x5f, 0x0, 0x2, 0x8, 0x6, 0x7fff, 0x200, 0x1ff, 0xff, 0x7, 0x100, 0x3, 0x2, 0x3, 0xe, 0x3, 0x800, 0x4, 0xc, 0x5, 0x3, 0xc, 0x1, 0x1, 0x101, 0x7, 0xffffffff, 0x7, 0x7, 0x4, 0x1, 0x17, 0x6, 0x8, 0x1, 0x2, 0x0, 0xffff2aa4, 0x4, 0x5, 0x3, 0xc274, 0x9, 0x6, 0x83, 0x7, 0x0, 0x400, 0x2, 0x3, 0x2, 0x5716, 0x2, 0x4, 0x2073, 0x100, 0x5d32, 0x8, 0x2, 0x6, 0x7f, 0x6867, 0x9, 0x5, 0x6, 0x3, 0x6, 0x9, 0x9, 0x400, 0x4edad5b7, 0x8, 0x5, 0x3, 0x4, 0x5, 0x0, 0x0, 0x80, 0xa, 0x10001, 0x1000, 0x7f, 0x7e6, 0xd, 0xec, 0x9, 0x7fff, 0x3ff, 0x4, 0xc0000000, 0x7fffffff, 0x6, 0x7f, 0x1, 0x0, 0x512d, 0x4, 0x8, 0x10, 0xc6, 0xfff, 0x33, 0x32c40000, 0x5, 0x960e, 0x6bd0, 0x200, 0x10, 0x8, 0x80000000, 0xaf0, 0x10001, 0x4, 0x0, 0x0, 0x4, 0xa, 0x40, 0x61cc, 0x5bb8, 0xffff0000, 0x9b5, 0x316, 0x6, 0x4, 0x0, 0x9, 0x61, 0x6, 0x1, 0x651, 0x7fffffff, 0x7fff, 0x7, 0x6, 0x6, 0x1, 0x29, 0x7, 0x1, 0x5, 0x5, 0xf6, 0x6fab2157, 0xfffffffb, 0x17dc, 0x0, 0x5, 0x7, 0x8, 0x1583, 0x2, 0xffff, 0x4, 0xfffffffc, 0x7, 0x404000, 0xffffffff, 0x3, 0x2, 0x2, 0xf, 0xc, 0x2, 0x5, 0xfffffffb, 0x80000001, 0x9, 0x500000, 0x101, 0x8, 0x3, 0x5, 0x87f, 0xfffffff2, 0xad, 0x6, 0x8, 0x9, 0x2, 0x5, 0x9, 0x7, 0x5, 0x7fffffff, 0x4166d7df, 0x8001, 0x5, 0x18, 0x8, 0xc]}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0xe0, 0x2, 0x7, 0x100, 0x68f, 0x4, 0x7ff, 0xfffff801, 0x1, 0x0, 0x1, 0x82, 0x8, 0x6b7, 0x3, 0x8, 0x101, 0x7f, 0x6, 0x3, 0x0, 0x80000001, 0xbb82, 0x4, 0x5, 0x2, 0x6, 0x7, 0xa4, 0xfffffffa, 0x2, 0xd31f, 0x7, 0x9, 0x7, 0x1b033077, 0xf914, 0x10000, 0x1000, 0x9, 0x9, 0x7c36, 0x88b, 0x436a, 0x3, 0xa24, 0x9, 0x8000, 0x8, 0xcc, 0x3, 0x5, 0xfffffffb, 0xf, 0x7697, 0xe, 0x5, 0x9, 0x8, 0x2d455b7d, 0x2, 0x80, 0xd, 0xe49, 0x3, 0x5, 0xc1d, 0x0, 0x9, 0x9, 0x7831, 0x2, 0x7, 0x0, 0x7, 0x5a3, 0x68, 0x8, 0x400, 0xfff, 0x6a0b, 0x3db, 0x400, 0x7, 0x7, 0x80000001, 0xf49, 0x8, 0x2, 0xe, 0x800, 0xfffffff9, 0x6, 0x8000, 0x1ff, 0x80000001, 0xcc, 0x5, 0x6, 0x0, 0xfffffffe, 0x40, 0x4, 0xba14, 0x0, 0x0, 0x0, 0x81, 0x4, 0x78, 0x48, 0xfffffffa, 0x0, 0xffff, 0x39e1, 0xef, 0xe, 0x7e65, 0x945, 0xdca, 0x2, 0x4, 0x5, 0x40000000, 0x6, 0x0, 0x8, 0x824a, 0xc, 0x6, 0x6, 0x6, 0x51, 0xff, 0x3, 0x0, 0x7fff, 0x4, 0x5, 0x1, 0x9, 0x9, 0x9, 0x7, 0xfff, 0x7, 0x0, 0x7f, 0x81, 0x10cd, 0x6, 0x3, 0xffff, 0x1a0a, 0x8, 0x0, 0x300, 0x1, 0xfffffffd, 0x4, 0x100, 0x5, 0xfffffffa, 0x0, 0x5, 0xa7, 0x2, 0x80000001, 0x7, 0x81, 0xffffffe9, 0x4, 0x4, 0x9, 0x4, 0x4, 0xce81, 0xca5, 0x4, 0x6, 0x7, 0x4, 0x2, 0x51, 0x2b9f17e5, 0x1000, 0x100, 0x0, 0x2, 0xc5f, 0x99, 0xcf63, 0xffffffc0, 0x0, 0x0, 0x3, 0x0, 0x10, 0x8, 0x1, 0x5, 0xf924, 0x14000, 0x4, 0xe, 0x5, 0xe, 0x6, 0x7ff, 0x7, 0x0, 0x4, 0x6, 0x0, 0x80, 0x6, 0x8001, 0x2, 0xb0, 0xb, 0x2, 0x7, 0x2, 0xffff, 0x8001, 0xffffffff, 0x3, 0x6, 0xa, 0x3ff, 0xffffe7fe, 0x3, 0x2, 0x1ff, 0x7, 0x7, 0x2, 0x1b, 0x1, 0x400, 0x3, 0x7fffffff, 0x46f7, 0x5, 0xa, 0x8, 0x2, 0xa5f5, 0xe, 0x49a, 0x8, 0xffff4bcf, 0x7, 0x2, 0x9]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x7}]]}, {0x16, 0x6, "120bca05270657be3381df18b2c09fec8673"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_MATCHALL_ACT={0x12e4, 0x2, [@m_ct={0xfc, 0x17, 0x0, 0x0, {{0x7}, {0x88, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x3}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @mcast1}, @TCA_CT_LABELS={0x14, 0x7, "699d6110c3b6b353f965d157e719102d"}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @mcast1}, @TCA_CT_ACTION={0x6}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @rand_addr=0x64010100}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @dev={0xfe, 0x80, '\x00', 0x33}}, @TCA_CT_LABELS={0x14, 0x7, "4f7e8dd764675421c4883854e261b90e"}, @TCA_CT_ZONE={0x6, 0x4, 0x400}]}, {0x4f, 0x6, "8931d6770695b84704937c9318b06d056c50570a850beb9c1ff20046a49bf2c5d5abf96d5f90ccdceb6b13445ed9a7b39f0cbccf45dd9f581fef1215a438fbf257105ae38508a6862e521b"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x154, 0x16, 0x0, 0x0, {{0x8}, {0x74, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xbec9, 0x6, 0x0, 0x10000, 0x4624a55c}, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x6, 0x7, 0x8, 0x3f}}}, @TCA_IFE_METALST={0x18, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x7}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_METALST={0x18, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x2}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}]}]}, {0xbc, 0x6, "e1b3a030c9cb57cbafdc2ba2ba1e29694f1f96832a502cf6554a6c4e7ee273966a808787fc34a3060ce6b725b2ae4e083d7ef716aa90be86ce9ae6a7497ea75c0407e875be3185ccdf9bac4774e8890e44ced12209dd6d717e560d7db42fca3bee17c1e6635a8f8f8d825506ffa87495b8fbc04881e8fc33355924afbb9156489534504e8c6bccbd36f9a57ce6bcb07749e3ed45d10aa5ece8a9fd0bf0d5d3689d8952859f00221d5ac61bf2501f5a691a906dab0046c451"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0x1090, 0x16, 0x0, 0x0, {{0x7}, {0x68, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @mcast1}, @TCA_CT_LABELS_MASK={0x14, 0x8, "6b56b7720ef0369601ead86bbe0aeda1"}, @TCA_CT_MARK={0x8, 0x5, 0x7}, @TCA_CT_LABELS_MASK={0x14, 0x8, "20e455139bba9afefc1aa0aca2a9725c"}, @TCA_CT_ZONE={0x6, 0x4, 0x2}, @TCA_CT_PARMS={0x18, 0x1, {0xb2d3, 0x0, 0xffffffffffffffff, 0xf62}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x1cdc}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r4 = openat$ttynull(0xffffff9c, &(0x7f0000000040), 0x103840, 0x0) ioctl$KDDISABIO(r4, 0x4b37) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xf58b, 0x101}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x20000) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r5 = signalfd(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x8936, 0x0) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x3c) syz_open_procfs(0x0, &(0x7f00000000c0)='net/rt_acct\x00') r6 = inotify_init1(0x0) read(r6, 0x0, 0x0) close(r6) 21.919122ms ago: executing program 1 (id=6148): ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x14, 0x4}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x8228, 0x2214}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'vlan1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x0) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'batadv_slave_1\x00', 0x7101}) r1 = syz_usb_connect(0x0, 0x4b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b05100001010200010902390002010080320904000000000000000904010000000000000904010103000000000705010240000007058102400000070582"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_open_dev$dvb_demux(&(0x7f0000000200), 0x1, 0x2) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f0000000300)={0x100, 0x0, 0x1, 0x14, 0x4}) 0s ago: executing program 3 (id=6149): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) r0 = memfd_secret(0x80000) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000000080)={{0x1, 0x3000, 0xc, 0x8, 0x21, 0x8, 0x1, 0xa8, 0x5, 0x4, 0xef, 0xb5}, {0x40000, 0x70000, 0xb, 0xbc, 0x3, 0x0, 0x3c, 0x3, 0x1, 0x9, 0x5, 0x8}, {0xdddd1000, 0x0, 0x3, 0x9, 0xf7, 0x4, 0x3, 0x85, 0x5, 0x10, 0x7, 0xfe}, {0xdddd0000, 0x8080000, 0x10, 0x81, 0x3e, 0x68, 0x77, 0xaa, 0x0, 0x6, 0x4, 0x7}, {0x200000, 0x1ffc, 0x14, 0x31, 0x10, 0x1, 0x6, 0x4, 0xa, 0xe, 0xf5, 0x40}, {0x80a0000, 0x41000, 0xc, 0xcf, 0x5, 0x80, 0x5, 0x4, 0x2, 0x45, 0x6, 0x40}, {0x41000, 0x0, 0x3, 0x40, 0x3, 0x0, 0x7, 0x4, 0x7, 0xad, 0x7, 0xd}, {0x1ffe, 0xe000, 0x9, 0x4, 0x4, 0x6, 0x4, 0x5, 0x70, 0x7f, 0x83, 0x1}, {0x1ffc, 0xd}, {0x70000, 0xa502}, 0x20040020, 0x0, 0xe000, 0x4130, 0x4, 0x101, 0xdddd0000, [0x7, 0xf, 0x2, 0x9]}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r0, 0x0) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) kernel console output (not intermixed with test programs): my_hcd [ 1199.319004][ T5351] usb 4-1: new low-speed USB device number 118 using dummy_hcd [ 1199.400123][ T5732] usb 2-1: New USB device found, idVendor=0bda, idProduct=8178, bcdDevice=3a.ba [ 1199.403205][ T5732] usb 2-1: config index 0 descriptor too short (asked for 9, got 0) [ 1199.403241][ T5732] usb 2-1: can't read configurations, error -22 [ 1199.405266][ T5732] usb usb2-port1: attempt power cycle [ 1199.469794][ T5351] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1199.471739][ T5351] usb 4-1: config 168 has an invalid interface number: 4 but max is 0 [ 1199.471767][ T5351] usb 4-1: config 168 has an invalid descriptor of length 179, skipping remainder of the config [ 1199.471788][ T5351] usb 4-1: config 168 has no interface number 0 [ 1199.471828][ T5351] usb 4-1: config 168 interface 4 altsetting 172 has 0 endpoint descriptors, different from the interface descriptor's value: 20 [ 1199.471856][ T5351] usb 4-1: config 168 interface 4 has no altsetting 0 [ 1199.473603][ T5351] usb 4-1: config 168 has an invalid interface number: 4 but max is 0 [ 1199.473630][ T5351] usb 4-1: config 168 has an invalid descriptor of length 179, skipping remainder of the config [ 1199.473651][ T5351] usb 4-1: config 168 has no interface number 0 [ 1199.473695][ T5351] usb 4-1: config 168 interface 4 altsetting 172 has 0 endpoint descriptors, different from the interface descriptor's value: 20 [ 1199.473723][ T5351] usb 4-1: config 168 interface 4 has no altsetting 0 [ 1199.475062][ T5351] usb 4-1: config 168 has an invalid interface number: 4 but max is 0 [ 1199.475087][ T5351] usb 4-1: config 168 has an invalid descriptor of length 179, skipping remainder of the config [ 1199.475108][ T5351] usb 4-1: config 168 has no interface number 0 [ 1199.475146][ T5351] usb 4-1: config 168 interface 4 altsetting 172 has 0 endpoint descriptors, different from the interface descriptor's value: 20 [ 1199.475175][ T5351] usb 4-1: config 168 interface 4 has no altsetting 0 [ 1199.475381][T13121] netlink: 'syz.0.5818': attribute type 1 has an invalid length. [ 1199.485355][ T5351] usb 4-1: string descriptor 0 read error: -22 [ 1199.485482][ T5351] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1199.515323][ T5351] adutux 4-1:168.4: interrupt endpoints not found [ 1199.540114][T13121] erspan2: entered allmulticast mode [ 1199.737941][ T5732] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 1199.765415][ T5732] usb 2-1: New USB device found, idVendor=0bda, idProduct=8178, bcdDevice=3a.ba [ 1199.766855][ T5732] usb 2-1: config index 0 descriptor too short (asked for 9, got 0) [ 1199.766888][ T5732] usb 2-1: can't read configurations, error -22 [ 1199.789239][T13134] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1199.889046][ T5732] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 1199.936382][ T5732] usb 2-1: New USB device found, idVendor=0bda, idProduct=8178, bcdDevice=3a.ba [ 1199.948142][ T5732] usb 2-1: config index 0 descriptor too short (asked for 9, got 0) [ 1199.948202][ T5732] usb 2-1: can't read configurations, error -22 [ 1199.949016][ T5732] usb usb2-port1: unable to enumerate USB device [ 1200.070044][T16750] usb 4-1: USB disconnect, device number 118 [ 1200.765131][T13164] netlink: 'syz.3.5824': attribute type 1 has an invalid length. [ 1200.999405][T13164] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1201.000419][T13169] veth0_virt_wifi: entered promiscuous mode [ 1201.072654][T13169] bond2: (slave veth0_virt_wifi): making interface the new active one [ 1201.086408][T13169] bond2: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 1201.260129][T13189] ptrace attach of "ci-upstream-kasan-gce-386/syz-executor exec"[13204] was attempted by "ci-upstream-kasan-gce-386/syz-executor exec"[13189] [ 1201.667074][ T31] audit: type=1326 audit(1791052473.103:9762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13211 comm="syz.2.5828" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cf0ec code=0x7ffc0000 [ 1201.669145][ T31] audit: type=1326 audit(1791052473.103:9763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13211 comm="syz.2.5828" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cf0ec code=0x7ffc0000 [ 1201.989277][T13228] syzkaller0: entered promiscuous mode [ 1201.989307][T13228] syzkaller0: entered allmulticast mode [ 1202.148303][T13239] random: crng reseeded on system resumption [ 1202.241400][ T5614] Bluetooth: hci4: ISO packet too small [ 1202.523895][T13251] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1202.597964][ T5704] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1202.748007][ T5704] usb 2-1: Using ep0 maxpacket: 32 [ 1202.753071][ T5704] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1202.753119][ T5704] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1202.757146][ T5704] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 1202.757181][ T5704] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 1202.757222][ T5704] usb 2-1: config 14 has no interface number 0 [ 1202.757241][ T5704] usb 2-1: config 14 has no interface number 1 [ 1202.757302][ T5704] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1202.757326][ T5704] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 1202.757353][ T5704] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 1202.757378][ T5704] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 1202.757406][ T5704] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1202.757431][ T5704] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1202.757457][ T5704] usb 2-1: config 14 interface 57 has no altsetting 0 [ 1202.757474][ T5704] usb 2-1: config 14 interface 228 has no altsetting 0 [ 1202.846951][ T5704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1202.846981][ T5704] usb 2-1: Product: syz [ 1202.846996][ T5704] usb 2-1: Manufacturer: syz [ 1202.847011][ T5704] usb 2-1: SerialNumber: syz [ 1203.338755][T13268] sctp: [Deprecated]: syz.3.5838 (pid 13268) Use of int in max_burst socket option deprecated. [ 1203.338755][T13268] Use struct sctp_assoc_value instead [ 1203.340644][ T5704] legousbtower 2-1:14.57: interrupt endpoints not found [ 1203.595626][T13274] fuse: Unknown parameter 'rootmoAe' [ 1203.670762][T13276] FAULT_INJECTION: forcing a failure. [ 1203.670762][T13276] name failslab, interval 1, probability 0, space 0, times 0 [ 1203.670796][T13276] CPU: 1 UID: 0 PID: 13276 Comm: syz.3.5841 Tainted: G L syzkaller #0 PREEMPT(full) [ 1203.670822][T13276] Tainted: [L]=SOFTLOCKUP [ 1203.670829][T13276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1203.670841][T13276] Call Trace: [ 1203.670849][T13276] [ 1203.670857][T13276] dump_stack_lvl+0xe8/0x150 [ 1203.670898][T13276] should_fail_ex+0x410/0x560 [ 1203.670926][T13276] should_failslab+0xa8/0x100 [ 1203.670954][T13276] __kmalloc_cache_noprof+0xa3/0x600 [ 1203.670975][T13276] ? __mutex_trylock_common+0x15f/0x270 [ 1203.671001][T13276] ? fuse_lookup_name+0x1c6/0x870 [ 1203.671026][T13276] ? fuse_lookup_name+0x1c6/0x870 [ 1203.671059][T13276] fuse_lookup_name+0x1c6/0x870 [ 1203.671085][T13276] ? trace_contention_end+0x3d/0x140 [ 1203.671124][T13276] ? __pfx_fuse_lookup_name+0x10/0x10 [ 1203.671162][T13276] ? fuse_lock_inode+0xd3/0x120 [ 1203.671198][T13276] ? __lock_acquire+0x747/0x2de0 [ 1203.671233][T13276] fuse_lookup+0x20b/0x4f0 [ 1203.671269][T13276] ? __pfx_fuse_lookup+0x10/0x10 [ 1203.671298][T13276] ? do_raw_spin_lock+0x12b/0x2f0 [ 1203.671337][T13276] ? do_raw_spin_unlock+0xf5/0x200 [ 1203.671366][T13276] ? _raw_spin_unlock+0x28/0x50 [ 1203.671390][T13276] ? d_alloc+0x144/0x190 [ 1203.671412][T13276] lookup_one_qstr_excl+0x12d/0x360 [ 1203.671439][T13276] filename_create+0x20e/0x370 [ 1203.671467][T13276] ? __pfx_filename_create+0x10/0x10 [ 1203.671500][T13276] filename_symlinkat+0xf7/0x410 [ 1203.671532][T13276] ? __pfx_filename_symlinkat+0x10/0x10 [ 1203.671556][T13276] ? strncpy_from_user+0x150/0x2c0 [ 1203.671583][T13276] ? do_getname+0x151/0x250 [ 1203.671617][T13276] __se_sys_symlink+0x4d/0x2b0 [ 1203.671645][T13276] __do_fast_syscall_32+0x27a/0x6a0 [ 1203.671676][T13276] ? do_fast_syscall_32+0x33/0x70 [ 1203.671705][T13276] ? asm_int80_emulation+0x1a/0x20 [ 1203.671724][T13276] ? do_int80_emulation+0x299/0x500 [ 1203.671751][T13276] ? trace_irq_disable+0x3b/0x140 [ 1203.671780][T13276] do_fast_syscall_32+0x33/0x70 [ 1203.671810][T13276] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1203.671833][T13276] RIP: 0023:0xf7f030ec [ 1203.671852][T13276] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1203.671871][T13276] RSP: 002b:00000000f53c650c EFLAGS: 00000206 ORIG_RAX: 0000000000000053 [ 1203.671892][T13276] RAX: ffffffffffffffda RBX: 0000000080000080 RCX: 0000000080000140 [ 1203.671907][T13276] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1203.671919][T13276] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1203.671931][T13276] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1203.671943][T13276] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1203.671973][T13276] [ 1203.770562][ T5704] legousbtower 2-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 1203.777712][ T5704] legousbtower 2-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 1203.836882][T13288] fuse: Bad value for 'fd' [ 1203.931890][T19146] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1204.120011][T19146] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1204.121352][T19146] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1204.121395][T19146] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1204.121420][T19146] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1204.121442][T19146] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1204.123102][T19146] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1204.123126][T19146] usb 5-1: Manufacturer: syz [ 1204.130431][T19146] usb 5-1: config 0 descriptor?? [ 1204.591848][T19146] appleir 0003:05AC:8243.00A2: unknown main item tag 0x0 [ 1204.645633][T19146] appleir 0003:05AC:8243.00A2: hiddev1,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 1205.058958][T16750] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1205.211417][T16750] usb 4-1: Using ep0 maxpacket: 8 [ 1205.212184][T16750] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1205.214588][T16750] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1205.214637][T16750] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1205.214661][T16750] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1205.214685][T16750] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1205.214710][T16750] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1205.214751][T16750] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1205.487412][ T5732] usb 2-1: USB disconnect, device number 19 [ 1205.510507][T16750] usb 4-1: GET_CAPABILITIES returned 0 [ 1205.510572][T16750] usbtmc 4-1:16.0: can't read capabilities [ 1205.535528][ T5732] legousbtower 2-1:14.228: LEGO USB Tower #-160 now disconnected [ 1205.796047][T13335] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5847'. [ 1205.845213][T13311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1205.851154][T13311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1206.473426][T13341] netlink: 'syz.2.5850': attribute type 1 has an invalid length. [ 1206.650896][ T5732] usb 5-1: USB disconnect, device number 105 [ 1206.830821][T13360] fuse: fd is not a fuse device [ 1207.261810][T13343] lo: entered allmulticast mode [ 1207.263602][T13371] syzkaller0: entered promiscuous mode [ 1207.263624][T13371] syzkaller0: entered allmulticast mode [ 1207.455444][T13373] lo: left allmulticast mode [ 1207.563180][T13384] input: syz0 as /devices/virtual/input/input246 [ 1207.588590][T13384] netlink: 'syz.1.5859': attribute type 1 has an invalid length. [ 1207.643120][T13407] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5859'. [ 1207.674090][T13384] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1207.775564][T13422] FAULT_INJECTION: forcing a failure. [ 1207.775564][T13422] name failslab, interval 1, probability 0, space 0, times 0 [ 1207.775601][T13422] CPU: 0 UID: 0 PID: 13422 Comm: syz.4.5860 Tainted: G L syzkaller #0 PREEMPT(full) [ 1207.775629][T13422] Tainted: [L]=SOFTLOCKUP [ 1207.775637][T13422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1207.775648][T13422] Call Trace: [ 1207.775657][T13422] [ 1207.775666][T13422] dump_stack_lvl+0xe8/0x150 [ 1207.775699][T13422] should_fail_ex+0x410/0x560 [ 1207.775727][T13422] ? __alloc_skb+0x1db/0x7a0 [ 1207.775753][T13422] should_failslab+0xa8/0x100 [ 1207.775790][T13422] ? __alloc_skb+0x1db/0x7a0 [ 1207.775814][T13422] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1207.775835][T13422] ? __alloc_skb+0x18d/0x7a0 [ 1207.775861][T13422] ? __alloc_skb+0x1db/0x7a0 [ 1207.775893][T13422] __alloc_skb+0x1db/0x7a0 [ 1207.775921][T13422] netlink_ack+0x136/0xb30 [ 1207.775940][T13422] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1207.775966][T13422] ? ref_tracker_free+0x689/0x830 [ 1207.775995][T13422] ? __pfx_ref_tracker_free+0x10/0x10 [ 1207.776031][T13422] netlink_rcv_skb+0x2a4/0x4a0 [ 1207.776053][T13422] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1207.776081][T13422] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1207.776123][T13422] netlink_unicast+0x7bd/0x940 [ 1207.776163][T13422] netlink_sendmsg+0x813/0xb40 [ 1207.776192][T13422] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1207.776220][T13422] ? apparmor_socket_sendmsg+0x98/0x360 [ 1207.776248][T13422] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1207.776268][T13422] sock_sendmsg_nosec+0x13a/0x180 [ 1207.776293][T13422] ____sys_sendmsg+0x54e/0x850 [ 1207.776327][T13422] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1207.776374][T13422] ___sys_sendmsg+0x2a5/0x360 [ 1207.776402][T13422] ? __lock_acquire+0x747/0x2de0 [ 1207.776427][T13422] ? __pfx____sys_sendmsg+0x10/0x10 [ 1207.776453][T13422] ? get_pid_task+0x20/0x1f0 [ 1207.776471][T13422] ? get_pid_task+0x20/0x1f0 [ 1207.776486][T13422] ? get_pid_task+0x20/0x1f0 [ 1207.776529][T13422] ? __fget_files+0x2a/0x420 [ 1207.776557][T13422] ? __fget_files+0x3a2/0x420 [ 1207.776594][T13422] __sys_sendmsg+0x177/0x240 [ 1207.776625][T13422] ? __pfx___sys_sendmsg+0x10/0x10 [ 1207.776672][T13422] __do_fast_syscall_32+0x27a/0x6a0 [ 1207.776703][T13422] ? do_fast_syscall_32+0x33/0x70 [ 1207.776732][T13422] ? asm_int80_emulation+0x1a/0x20 [ 1207.776751][T13422] ? do_int80_emulation+0x299/0x500 [ 1207.776790][T13422] ? trace_irq_disable+0x3b/0x140 [ 1207.776815][T13422] do_fast_syscall_32+0x33/0x70 [ 1207.776844][T13422] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1207.776868][T13422] RIP: 0023:0xf706f0ec [ 1207.776886][T13422] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1207.776903][T13422] RSP: 002b:00000000f545d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1207.776925][T13422] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 1207.776940][T13422] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1207.776951][T13422] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1207.776963][T13422] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1207.776976][T13422] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1207.777004][T13422] [ 1207.856138][ T5704] usb 4-1: USB disconnect, device number 119 [ 1208.356110][T13434] loop2: detected capacity change from 0 to 7 [ 1208.380136][T13434] Dev loop2: unable to read RDB block 7 [ 1208.380184][T13434] loop2: unable to read partition table [ 1208.380405][T13434] loop2: partition table beyond EOD, truncated [ 1208.380423][T13434] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1208.734946][ T5704] bridge0: entered promiscuous mode [ 1208.971828][T13464] FAULT_INJECTION: forcing a failure. [ 1208.971828][T13464] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1208.971864][T13464] CPU: 0 UID: 0 PID: 13464 Comm: syz.1.5867 Tainted: G L syzkaller #0 PREEMPT(full) [ 1208.971891][T13464] Tainted: [L]=SOFTLOCKUP [ 1208.971899][T13464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1208.971910][T13464] Call Trace: [ 1208.971918][T13464] [ 1208.971927][T13464] dump_stack_lvl+0xe8/0x150 [ 1208.971960][T13464] should_fail_ex+0x410/0x560 [ 1208.971992][T13464] _copy_from_user+0x2d/0xb0 [ 1208.972020][T13464] get_compat_msghdr+0xb3/0x4c0 [ 1208.972046][T13464] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1208.972080][T13464] ___sys_sendmsg+0x201/0x360 [ 1208.972108][T13464] ? __lock_acquire+0x747/0x2de0 [ 1208.972135][T13464] ? __pfx____sys_sendmsg+0x10/0x10 [ 1208.972164][T13464] ? get_pid_task+0x20/0x1f0 [ 1208.972183][T13464] ? get_pid_task+0x20/0x1f0 [ 1208.972200][T13464] ? get_pid_task+0x20/0x1f0 [ 1208.972241][T13464] ? __fget_files+0x2a/0x420 [ 1208.972270][T13464] ? __fget_files+0x3a2/0x420 [ 1208.972307][T13464] __sys_sendmsg+0x177/0x240 [ 1208.972337][T13464] ? __pfx___sys_sendmsg+0x10/0x10 [ 1208.972382][T13464] __do_fast_syscall_32+0x27a/0x6a0 [ 1208.972412][T13464] ? do_fast_syscall_32+0x33/0x70 [ 1208.972460][T13464] ? asm_int80_emulation+0x1a/0x20 [ 1208.972480][T13464] ? do_int80_emulation+0x299/0x500 [ 1208.972507][T13464] ? trace_irq_disable+0x3b/0x140 [ 1208.972532][T13464] do_fast_syscall_32+0x33/0x70 [ 1208.972561][T13464] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1208.972586][T13464] RIP: 0023:0xf7f380ec [ 1208.972603][T13464] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1208.972619][T13464] RSP: 002b:00000000f53f650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1208.972641][T13464] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 1208.972655][T13464] RDX: 0000000000008000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1208.972667][T13464] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1208.972679][T13464] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1208.972691][T13464] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1208.972776][T13464] [ 1209.243036][T13472] syzkaller0: entered promiscuous mode [ 1209.243060][T13472] syzkaller0: entered allmulticast mode [ 1209.261014][ T5732] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1209.302964][T13469] TCP: TCP_TX_DELAY enabled [ 1209.407980][ T5732] usb 4-1: Using ep0 maxpacket: 32 [ 1209.409916][ T5732] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1209.409963][ T5732] usb 4-1: New USB device found, idVendor=16d8, idProduct=6280, bcdDevice=b6.de [ 1209.410491][ T5732] usb 4-1: config 110 has no interfaces? [ 1209.415762][ T5732] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1209.415787][ T5732] usb 4-1: Product: syz [ 1209.415801][ T5732] usb 4-1: Manufacturer: syz [ 1209.415816][ T5732] usb 4-1: SerialNumber: syz [ 1209.494182][T13483] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5871'. [ 1209.531850][T13482] syzkaller0: entered promiscuous mode [ 1209.531872][T13482] syzkaller0: entered allmulticast mode [ 1209.962830][T13498] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1210.848012][ T5732] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 1211.000476][ T5732] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1211.001131][ T5732] usb 2-1: not running at top speed; connect to a high speed hub [ 1211.001164][ T5732] usb 2-1: New USB device found, idVendor=06cd, idProduct=011b, bcdDevice= 1.87 [ 1211.002142][ T5732] usb 2-1: config 8 has an invalid interface number: 231 but max is 0 [ 1211.002166][ T5732] usb 2-1: config 8 has no interface number 0 [ 1211.002195][ T5732] usb 2-1: config 8 interface 231 has no altsetting 0 [ 1211.005468][ T5732] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1211.005492][ T5732] usb 2-1: Product: syz [ 1211.005507][ T5732] usb 2-1: Manufacturer: syz [ 1211.005522][ T5732] usb 2-1: SerialNumber: syz [ 1211.118970][T13519] syzkaller0: entered promiscuous mode [ 1211.118996][T13519] syzkaller0: entered allmulticast mode [ 1211.183147][T13525] FAULT_INJECTION: forcing a failure. [ 1211.183147][T13525] name failslab, interval 1, probability 0, space 0, times 0 [ 1211.183182][T13525] CPU: 1 UID: 0 PID: 13525 Comm: syz.4.5880 Tainted: G L syzkaller #0 PREEMPT(full) [ 1211.183209][T13525] Tainted: [L]=SOFTLOCKUP [ 1211.183217][T13525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1211.183229][T13525] Call Trace: [ 1211.183237][T13525] [ 1211.183247][T13525] dump_stack_lvl+0xe8/0x150 [ 1211.183284][T13525] should_fail_ex+0x410/0x560 [ 1211.183314][T13525] should_failslab+0xa8/0x100 [ 1211.183342][T13525] __kmalloc_cache_noprof+0xa3/0x600 [ 1211.183364][T13525] ? __pfx_sprintf+0x10/0x10 [ 1211.183387][T13525] ? snd_timer_instance_new+0x51/0x260 [ 1211.183416][T13525] ? snd_timer_instance_new+0x51/0x260 [ 1211.183452][T13525] snd_timer_instance_new+0x51/0x260 [ 1211.183484][T13525] snd_seq_timer_open+0x23e/0x620 [ 1211.183517][T13525] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 1211.183565][T13525] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1211.183596][T13525] snd_seq_queue_timer_open+0xc2/0x150 [ 1211.183623][T13525] snd_seq_ioctl_set_queue_timer+0x217/0x380 [ 1211.183656][T13525] snd_seq_ioctl+0x292/0x490 [ 1211.183683][T13525] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 1211.183721][T13525] ? __fget_files+0x3a2/0x420 [ 1211.183749][T13525] ? __fget_files+0x2a/0x420 [ 1211.183785][T13525] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 1211.183811][T13525] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1211.183836][T13525] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1211.183866][T13525] ? __fget_files+0x3a2/0x420 [ 1211.183901][T13525] ? fput+0xa0/0xd0 [ 1211.183927][T13525] ? ksys_write+0x242/0x270 [ 1211.183959][T13525] __do_fast_syscall_32+0x27a/0x6a0 [ 1211.183990][T13525] ? do_fast_syscall_32+0x33/0x70 [ 1211.184018][T13525] ? asm_int80_emulation+0x1a/0x20 [ 1211.184036][T13525] ? do_int80_emulation+0x299/0x500 [ 1211.184062][T13525] ? trace_irq_disable+0x3b/0x140 [ 1211.184088][T13525] do_fast_syscall_32+0x33/0x70 [ 1211.184118][T13525] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1211.184141][T13525] RIP: 0023:0xf706f0ec [ 1211.184159][T13525] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1211.184177][T13525] RSP: 002b:00000000f545d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1211.184198][T13525] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040605346 [ 1211.184212][T13525] RDX: 0000000080000280 RSI: 0000000000000000 RDI: 0000000000000000 [ 1211.184225][T13525] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1211.184237][T13525] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1211.184250][T13525] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1211.184280][T13525] [ 1211.918171][T16750] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1211.922452][ T30] usb 4-1: USB disconnect, device number 120 [ 1212.191153][ T5732] keyspan 2-1:8.231: Keyspan - (without firmware) converter detected [ 1212.196394][ T5732] usb 2-1: USB disconnect, device number 20 [ 1212.197636][ T5732] keyspan 2-1:8.231: device disconnected [ 1213.121108][T13586] FAULT_INJECTION: forcing a failure. [ 1213.121108][T13586] name failslab, interval 1, probability 0, space 0, times 0 [ 1213.121266][T13586] CPU: 1 UID: 0 PID: 13586 Comm: syz.1.5891 Tainted: G L syzkaller #0 PREEMPT(full) [ 1213.121293][T13586] Tainted: [L]=SOFTLOCKUP [ 1213.121303][T13586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1213.121315][T13586] Call Trace: [ 1213.121324][T13586] [ 1213.121332][T13586] dump_stack_lvl+0xe8/0x150 [ 1213.121367][T13586] should_fail_ex+0x410/0x560 [ 1213.121395][T13586] ? __alloc_skb+0x1db/0x7a0 [ 1213.121421][T13586] should_failslab+0xa8/0x100 [ 1213.121459][T13586] ? __alloc_skb+0x1db/0x7a0 [ 1213.121482][T13586] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1213.121504][T13586] ? __alloc_skb+0x18d/0x7a0 [ 1213.121530][T13586] ? __alloc_skb+0x1db/0x7a0 [ 1213.121561][T13586] __alloc_skb+0x1db/0x7a0 [ 1213.121591][T13586] netlink_sendmsg+0x5d4/0xb40 [ 1213.121622][T13586] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1213.121651][T13586] ? apparmor_socket_sendmsg+0x98/0x360 [ 1213.121677][T13586] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1213.121698][T13586] sock_sendmsg_nosec+0x13a/0x180 [ 1213.121724][T13586] ____sys_sendmsg+0x54e/0x850 [ 1213.121759][T13586] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1213.121802][T13586] ___sys_sendmsg+0x2a5/0x360 [ 1213.121831][T13586] ? __lock_acquire+0x747/0x2de0 [ 1213.121857][T13586] ? __pfx____sys_sendmsg+0x10/0x10 [ 1213.121885][T13586] ? get_pid_task+0x20/0x1f0 [ 1213.121905][T13586] ? get_pid_task+0x20/0x1f0 [ 1213.121922][T13586] ? get_pid_task+0x20/0x1f0 [ 1213.121967][T13586] ? __fget_files+0x2a/0x420 [ 1213.121995][T13586] ? __fget_files+0x3a2/0x420 [ 1213.122032][T13586] __sys_sendmsg+0x177/0x240 [ 1213.122063][T13586] ? __pfx___sys_sendmsg+0x10/0x10 [ 1213.122109][T13586] __do_fast_syscall_32+0x27a/0x6a0 [ 1213.122140][T13586] ? do_fast_syscall_32+0x33/0x70 [ 1213.122168][T13586] ? asm_int80_emulation+0x1a/0x20 [ 1213.122187][T13586] ? do_int80_emulation+0x299/0x500 [ 1213.122215][T13586] ? trace_irq_disable+0x3b/0x140 [ 1213.122240][T13586] do_fast_syscall_32+0x33/0x70 [ 1213.122270][T13586] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1213.122294][T13586] RIP: 0023:0xf7f380ec [ 1213.122312][T13586] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1213.122329][T13586] RSP: 002b:00000000f53f650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1213.122351][T13586] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0 [ 1213.122365][T13586] RDX: 0000000000014014 RSI: 0000000000000000 RDI: 0000000000000000 [ 1213.122378][T13586] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1213.122390][T13586] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1213.122403][T13586] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1213.122431][T13586] [ 1213.549318][T13588] syzkaller0: entered promiscuous mode [ 1213.549334][T13588] syzkaller0: entered allmulticast mode [ 1213.720192][T13596] netlink: 168 bytes leftover after parsing attributes in process `syz.2.5894'. [ 1213.720210][T13596] netlink: 168 bytes leftover after parsing attributes in process `syz.2.5894'. [ 1213.880630][T13602] syzkaller0: entered promiscuous mode [ 1213.880653][T13602] syzkaller0: entered allmulticast mode [ 1214.050257][T13609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1214.050772][T13609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1214.177960][ T5732] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1214.279383][T19146] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1214.328905][ T5732] usb 4-1: Using ep0 maxpacket: 8 [ 1214.329852][ T5732] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1214.331730][ T5732] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1214.331779][ T5732] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1214.332131][ T5732] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1214.332158][ T5732] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1214.332207][ T5732] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1214.332272][ T5732] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1214.438749][T19146] usb 2-1: New USB device found, idVendor=046d, idProduct=c22e, bcdDevice= 0.00 [ 1214.439688][T19146] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 227, changing to 11 [ 1214.439725][T19146] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1214.448940][T19146] usb 2-1: config 0 descriptor?? [ 1214.624163][ T5732] usb 4-1: GET_CAPABILITIES returned 0 [ 1214.624241][ T5732] usbtmc 4-1:16.0: can't read capabilities [ 1214.858323][T13609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1214.862322][T13610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1214.871957][T13610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1214.883107][T19146] hid (null): report_id 0 is invalid [ 1214.898904][T13609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1214.901336][T13604] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5896'. [ 1214.915123][T19146] lg-g15 0003:046D:C22E.00A3: unknown main item tag 0x0 [ 1214.915159][T19146] lg-g15 0003:046D:C22E.00A3: unknown main item tag 0x0 [ 1214.915185][T19146] lg-g15 0003:046D:C22E.00A3: unknown main item tag 0x0 [ 1214.915211][T19146] lg-g15 0003:046D:C22E.00A3: unknown main item tag 0x0 [ 1214.915237][T19146] lg-g15 0003:046D:C22E.00A3: unknown main item tag 0x0 [ 1214.916963][T19146] lg-g15 0003:046D:C22E.00A3: unknown main item tag 0x0 [ 1214.916992][T19146] lg-g15 0003:046D:C22E.00A3: unknown main item tag 0x0 [ 1214.917018][T19146] lg-g15 0003:046D:C22E.00A3: unknown main item tag 0x0 [ 1214.917044][T19146] lg-g15 0003:046D:C22E.00A3: unknown main item tag 0x0 [ 1214.917069][T19146] lg-g15 0003:046D:C22E.00A3: unknown main item tag 0x0 [ 1214.917585][T19146] lg-g15 0003:046D:C22E.00A3: report_id 0 is invalid [ 1214.917601][T19146] lg-g15 0003:046D:C22E.00A3: item 0 1 1 8 parsing failed [ 1214.921628][T19146] lg-g15 0003:046D:C22E.00A3: probe with driver lg-g15 failed with error -22 [ 1214.949893][T13604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1214.955620][T13604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1215.093958][T19146] usb 2-1: USB disconnect, device number 21 [ 1215.108866][T13655] FAULT_INJECTION: forcing a failure. [ 1215.108866][T13655] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1215.108901][T13655] CPU: 1 UID: 0 PID: 13655 Comm: syz.4.5903 Tainted: G L syzkaller #0 PREEMPT(full) [ 1215.108928][T13655] Tainted: [L]=SOFTLOCKUP [ 1215.108935][T13655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1215.108947][T13655] Call Trace: [ 1215.108954][T13655] [ 1215.108963][T13655] dump_stack_lvl+0xe8/0x150 [ 1215.108996][T13655] should_fail_ex+0x410/0x560 [ 1215.109026][T13655] strncpy_from_user+0x36/0x2c0 [ 1215.109054][T13655] do_getname+0x77/0x250 [ 1215.109083][T13655] do_sys_openat2+0xcc/0x200 [ 1215.109110][T13655] ? __pfx_do_sys_openat2+0x10/0x10 [ 1215.109138][T13655] ? ksys_write+0x242/0x270 [ 1215.109163][T13655] __ia32_compat_sys_open+0x117/0x140 [ 1215.109194][T13655] __do_fast_syscall_32+0x27a/0x6a0 [ 1215.109223][T13655] ? do_fast_syscall_32+0x33/0x70 [ 1215.109249][T13655] ? asm_int80_emulation+0x1a/0x20 [ 1215.109267][T13655] ? do_int80_emulation+0x299/0x500 [ 1215.109293][T13655] ? trace_irq_disable+0x3b/0x140 [ 1215.109317][T13655] do_fast_syscall_32+0x33/0x70 [ 1215.109346][T13655] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1215.109370][T13655] RIP: 0023:0xf706f0ec [ 1215.109388][T13655] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1215.109405][T13655] RSP: 002b:00000000f545d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000005 [ 1215.109426][T13655] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000101000 [ 1215.109442][T13655] RDX: 0000000000000110 RSI: 0000000000000000 RDI: 0000000000000000 [ 1215.109455][T13655] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1215.109467][T13655] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1215.109479][T13655] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1215.109508][T13655] [ 1215.588801][T16750] usb 5-1: device descriptor read/64, error -71 [ 1215.827991][T16750] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1215.958963][T16750] usb 5-1: device descriptor read/64, error -71 [ 1215.967964][ T5704] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1216.069168][T16750] usb usb5-port1: attempt power cycle [ 1216.071271][T13687] FAULT_INJECTION: forcing a failure. [ 1216.071271][T13687] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1216.071301][T13687] CPU: 1 UID: 0 PID: 13687 Comm: syz.2.5911 Tainted: G L syzkaller #0 PREEMPT(full) [ 1216.071329][T13687] Tainted: [L]=SOFTLOCKUP [ 1216.071336][T13687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1216.071348][T13687] Call Trace: [ 1216.071356][T13687] [ 1216.071365][T13687] dump_stack_lvl+0xe8/0x150 [ 1216.071398][T13687] should_fail_ex+0x410/0x560 [ 1216.071428][T13687] _copy_to_user+0x31/0xb0 [ 1216.071458][T13687] simple_read_from_buffer+0xe1/0x170 [ 1216.071493][T13687] proc_fail_nth_read+0x1bb/0x230 [ 1216.071513][T13687] ? common_file_perm+0x20e/0x2b0 [ 1216.071542][T13687] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1216.071567][T13687] ? rw_verify_area+0x24a/0x4c0 [ 1216.071599][T13687] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1216.071620][T13687] vfs_read+0x213/0xa80 [ 1216.071644][T13687] ? __pfx___mutex_lock+0x10/0x10 [ 1216.071673][T13687] ? __pfx_vfs_read+0x10/0x10 [ 1216.071694][T13687] ? __fget_files+0x2a/0x420 [ 1216.071729][T13687] ? __fget_files+0x3a2/0x420 [ 1216.071756][T13687] ? __fget_files+0x2a/0x420 [ 1216.071792][T13687] ksys_read+0x150/0x270 [ 1216.071814][T13687] ? __pfx_ksys_read+0x10/0x10 [ 1216.071837][T13687] ? asm_int80_emulation+0x1a/0x20 [ 1216.071862][T13687] do_int80_emulation+0x198/0x500 [ 1216.071891][T13687] ? trace_irq_disable+0x3b/0x140 [ 1216.071925][T13687] ? asm_int80_emulation+0x1a/0x20 [ 1216.071942][T13687] ? clear_bhb_loop+0x70/0xc0 [ 1216.071961][T13687] ? clear_bhb_loop+0x70/0xc0 [ 1216.071984][T13687] asm_int80_emulation+0x1a/0x20 [ 1216.072003][T13687] RIP: 0023:0xf72075ab [ 1216.072021][T13687] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1216.072038][T13687] RSP: 002b:00000000f54bd4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1216.072059][T13687] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54bd5d0 [ 1216.072073][T13687] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1216.072085][T13687] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1216.072097][T13687] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1216.072109][T13687] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1216.072138][T13687] [ 1216.130406][ T5704] usb 2-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 1216.137217][ T5704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1216.137243][ T5704] usb 2-1: Product: syz [ 1216.137259][ T5704] usb 2-1: Manufacturer: syz [ 1216.137275][ T5704] usb 2-1: SerialNumber: syz [ 1216.450129][T16750] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1216.469101][T16750] usb 5-1: device descriptor read/8, error -71 [ 1216.475547][ T31] audit: type=1326 audit(1791052487.913:9764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13676 comm="syz.1.5908" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f380ec code=0x7ffc0000 [ 1216.475738][ T31] audit: type=1326 audit(1791052487.913:9765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13676 comm="syz.1.5908" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f380ec code=0x7ffc0000 [ 1216.557058][ T5704] dvb-usb: found a 'Pinnacle PCTV 310e' in cold state, will try to load a firmware [ 1216.557073][ T5704] dvb-usb: did not find the firmware file '(null)' (status -22). You can use /scripts/get_dvb_firmware to get the firmware [ 1216.561093][ T5704] usb 2-1: USB disconnect, device number 22 [ 1216.583012][T13703] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5913'. [ 1216.737955][T16750] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 1216.758915][T16750] usb 5-1: device descriptor read/8, error -71 [ 1216.869747][T16750] usb usb5-port1: unable to enumerate USB device [ 1216.940371][ T5351] usb 4-1: USB disconnect, device number 121 [ 1217.335668][T13731] FAULT_INJECTION: forcing a failure. [ 1217.335668][T13731] name failslab, interval 1, probability 0, space 0, times 0 [ 1217.335702][T13731] CPU: 0 UID: 0 PID: 13731 Comm: syz.2.5917 Tainted: G L syzkaller #0 PREEMPT(full) [ 1217.335729][T13731] Tainted: [L]=SOFTLOCKUP [ 1217.335736][T13731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1217.335747][T13731] Call Trace: [ 1217.335755][T13731] [ 1217.335764][T13731] dump_stack_lvl+0xe8/0x150 [ 1217.335795][T13731] should_fail_ex+0x410/0x560 [ 1217.335827][T13731] should_failslab+0xa8/0x100 [ 1217.335856][T13731] __kmalloc_noprof+0xfe/0x720 [ 1217.335878][T13731] ? rfkill_alloc+0xa8/0x300 [ 1217.335902][T13731] ? rfkill_alloc+0xa8/0x300 [ 1217.335933][T13731] rfkill_alloc+0xa8/0x300 [ 1217.335963][T13731] wiphy_new_nm+0x12cd/0x1b20 [ 1217.335990][T13731] ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10 [ 1217.336015][T13731] ieee80211_alloc_hw_nm+0x3f3/0x1f00 [ 1217.336042][T13731] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 1217.336073][T13731] mac80211_hwsim_new_radio+0x1ea/0x56b0 [ 1217.336107][T13731] ? __pfx___nla_validate_parse+0x10/0x10 [ 1217.336149][T13731] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1217.336176][T13731] ? trace_kmalloc+0x2a/0xf0 [ 1217.336204][T13731] hwsim_new_radio_nl+0xd8b/0xf90 [ 1217.336243][T13731] genl_family_rcv_msg_doit+0x233/0x340 [ 1217.336278][T13731] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1217.336318][T13731] ? bpf_lsm_capable+0x9/0x20 [ 1217.336338][T13731] ? security_capable+0x7e/0x2c0 [ 1217.336371][T13731] genl_rcv_msg+0x614/0x7a0 [ 1217.336403][T13731] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1217.336429][T13731] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1217.336471][T13731] netlink_rcv_skb+0x226/0x4a0 [ 1217.336493][T13731] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1217.336521][T13731] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1217.336557][T13731] ? down_read+0x2be/0x330 [ 1217.336580][T13731] genl_rcv+0x28/0x40 [ 1217.336611][T13731] netlink_unicast+0x7bd/0x940 [ 1217.336652][T13731] netlink_sendmsg+0x813/0xb40 [ 1217.336684][T13731] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1217.336714][T13731] ? apparmor_socket_sendmsg+0x98/0x360 [ 1217.336741][T13731] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1217.336762][T13731] sock_sendmsg_nosec+0x13a/0x180 [ 1217.336789][T13731] ____sys_sendmsg+0x54e/0x850 [ 1217.336825][T13731] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1217.336871][T13731] ___sys_sendmsg+0x2a5/0x360 [ 1217.336899][T13731] ? __lock_acquire+0x747/0x2de0 [ 1217.336926][T13731] ? __pfx____sys_sendmsg+0x10/0x10 [ 1217.336955][T13731] ? get_pid_task+0x20/0x1f0 [ 1217.336975][T13731] ? get_pid_task+0x20/0x1f0 [ 1217.336993][T13731] ? get_pid_task+0x20/0x1f0 [ 1217.337042][T13731] ? __fget_files+0x2a/0x420 [ 1217.337070][T13731] ? __fget_files+0x3a2/0x420 [ 1217.337109][T13731] __sys_sendmsg+0x177/0x240 [ 1217.337140][T13731] ? __pfx___sys_sendmsg+0x10/0x10 [ 1217.337187][T13731] __do_fast_syscall_32+0x27a/0x6a0 [ 1217.337218][T13731] ? do_fast_syscall_32+0x33/0x70 [ 1217.337247][T13731] ? asm_int80_emulation+0x1a/0x20 [ 1217.337268][T13731] ? do_int80_emulation+0x299/0x500 [ 1217.337297][T13731] ? trace_irq_disable+0x3b/0x140 [ 1217.337323][T13731] do_fast_syscall_32+0x33/0x70 [ 1217.337352][T13731] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1217.337375][T13731] RIP: 0023:0xf70cf0ec [ 1217.337394][T13731] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1217.337412][T13731] RSP: 002b:00000000f54bd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1217.337434][T13731] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000400 [ 1217.337449][T13731] RDX: 0000000004080040 RSI: 0000000000000000 RDI: 0000000000000000 [ 1217.337462][T13731] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1217.337475][T13731] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1217.337488][T13731] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1217.337519][T13731] [ 1217.470797][ T5351] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1217.477975][ T5704] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1217.632898][ T5704] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1217.636990][ T5704] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1217.637037][ T5704] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1217.637063][ T5704] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1217.637085][ T5704] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1217.637125][ T5704] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1217.649417][ T5351] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1217.665238][ T5704] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1217.666093][ T5704] usb 2-1: invalid MIDI out EP 0 [ 1217.734981][T13733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5918'. [ 1217.741690][ T5351] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1217.741735][ T5351] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1217.823873][ T5351] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1217.823899][ T5351] usb 4-1: Product: syz [ 1217.823914][ T5351] usb 4-1: Manufacturer: syz [ 1217.823928][ T5351] usb 4-1: SerialNumber: syz [ 1217.871227][T13726] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5916'. [ 1217.927735][ T5351] cdc_mbim 4-1:1.0: skipping garbage [ 1218.000797][ T5704] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1218.008301][ T5704] usb 2-1: USB disconnect, device number 23 [ 1218.140211][T13716] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1218.195123][T13781] syzkaller0: entered promiscuous mode [ 1218.195147][T13781] syzkaller0: entered allmulticast mode [ 1218.624762][T13796] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1218.759868][T13716] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1218.760383][ T5351] cdc_mbim 4-1:1.0: setting tx_max = 16384 [ 1218.763712][ T5351] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 1218.818827][ T5351] wwan wwan0: port wwan0mbim0 attached [ 1218.846257][ T5351] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 5a:49:4a:1a:72:1b [ 1219.011435][T19146] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1219.151442][T13716] bridge0: port 2(bridge_slave_1) entered disabled state [ 1219.154446][T13716] bridge0: port 1(bridge_slave_0) entered disabled state [ 1219.158005][T19146] usb 2-1: Using ep0 maxpacket: 8 [ 1219.158973][T19146] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1219.162692][T19146] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1219.162739][T19146] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1219.162760][T19146] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1219.162784][T19146] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1219.162808][T19146] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1219.162847][T19146] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1219.340212][T13821] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5926'. [ 1219.374629][T19146] usb 2-1: GET_CAPABILITIES returned 0 [ 1219.374673][T19146] usbtmc 2-1:16.0: can't read capabilities [ 1219.382898][T13716] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1219.398799][T13716] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1219.449355][T13716] veth0_virt_wifi: left promiscuous mode [ 1219.631914][T13799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5925'. [ 1219.634705][T13799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1219.635733][T13799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1219.838889][ T6319] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1219.839640][ T6319] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1219.839678][ T6319] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1219.839711][ T6319] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1219.881742][ T991] usb 4-1: USB disconnect, device number 122 [ 1219.884268][ T991] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 1220.020196][ T991] wwan wwan0: port wwan0mbim0 disconnected [ 1220.237935][ T6066] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1220.393742][ T6066] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1220.396831][ T6066] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1220.396858][ T6066] usb 5-1: Product: syz [ 1220.396872][ T6066] usb 5-1: SerialNumber: syz [ 1220.418916][ T6066] usb 5-1: config 0 descriptor?? [ 1220.665471][ T6066] hso 5-1:0.0: Failed to find BULK eps [ 1220.868528][ T5704] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1220.895900][T13854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1220.897068][T13854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1221.013221][ T5351] usb 5-1: USB disconnect, device number 110 [ 1221.025872][ T5704] usb 4-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 1221.042386][ T5704] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1221.042412][ T5704] usb 4-1: Product: syz [ 1221.042424][ T5704] usb 4-1: Manufacturer: syz [ 1221.042432][ T5704] usb 4-1: SerialNumber: syz [ 1221.058636][T13905] fuse: Bad value for 'fd' [ 1221.320565][ T31] audit: type=1326 audit(1791052492.763:9766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13869 comm="syz.3.5930" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f030ec code=0x7ffc0000 [ 1221.322066][ T31] audit: type=1326 audit(1791052492.763:9767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13869 comm="syz.3.5930" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f030ec code=0x7ffc0000 [ 1221.536108][ T5704] dvb-usb: found a 'Pinnacle PCTV 310e' in cold state, will try to load a firmware [ 1221.536130][ T5704] dvb-usb: did not find the firmware file '(null)' (status -22). You can use /scripts/get_dvb_firmware to get the firmware [ 1221.548294][ T5704] usb 4-1: USB disconnect, device number 123 [ 1221.674125][T13934] FAULT_INJECTION: forcing a failure. [ 1221.674125][T13934] name failslab, interval 1, probability 0, space 0, times 0 [ 1221.674161][T13934] CPU: 0 UID: 0 PID: 13934 Comm: syz.2.5938 Tainted: G L syzkaller #0 PREEMPT(full) [ 1221.674189][T13934] Tainted: [L]=SOFTLOCKUP [ 1221.674196][T13934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1221.674209][T13934] Call Trace: [ 1221.674222][T13934] [ 1221.674231][T13934] dump_stack_lvl+0xe8/0x150 [ 1221.674264][T13934] should_fail_ex+0x410/0x560 [ 1221.674295][T13934] should_failslab+0xa8/0x100 [ 1221.674323][T13934] kmem_cache_alloc_lru_noprof+0xa7/0x5f0 [ 1221.674347][T13934] ? __d_alloc+0x37/0x6f0 [ 1221.674364][T13934] ? __d_alloc+0x37/0x6f0 [ 1221.674388][T13934] __d_alloc+0x37/0x6f0 [ 1221.674413][T13934] d_alloc_parallel+0xde/0x16b0 [ 1221.674437][T13934] ? lock_acquire+0x115/0x350 [ 1221.674469][T13934] ? __d_lookup+0x66/0x790 [ 1221.674490][T13934] ? __d_lookup+0x66/0x790 [ 1221.674511][T13934] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1221.674533][T13934] ? d_lookup+0x1f/0xa0 [ 1221.674556][T13934] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 1221.674593][T13934] lookup_open+0x2c7/0x1a40 [ 1221.674644][T13934] path_openat+0x677/0x1d60 [ 1221.674683][T13934] do_file_open+0x23e/0x4a0 [ 1221.674710][T13934] ? __pfx_do_file_open+0x10/0x10 [ 1221.674752][T13934] ? _raw_spin_unlock+0x28/0x50 [ 1221.674776][T13934] ? alloc_fd+0x651/0x6c0 [ 1221.674821][T13934] do_sys_openat2+0x115/0x200 [ 1221.674849][T13934] ? __fget_files+0x3a2/0x420 [ 1221.674878][T13934] ? __pfx_do_sys_openat2+0x10/0x10 [ 1221.674907][T13934] ? fput+0xa0/0xd0 [ 1221.674932][T13934] ? ksys_write+0x242/0x270 [ 1221.674956][T13934] __ia32_compat_sys_openat+0x131/0x160 [ 1221.674989][T13934] __do_fast_syscall_32+0x27a/0x6a0 [ 1221.675025][T13934] ? do_fast_syscall_32+0x33/0x70 [ 1221.675053][T13934] ? asm_int80_emulation+0x1a/0x20 [ 1221.675072][T13934] ? do_int80_emulation+0x299/0x500 [ 1221.675100][T13934] ? trace_irq_disable+0x3b/0x140 [ 1221.675128][T13934] do_fast_syscall_32+0x33/0x70 [ 1221.675157][T13934] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1221.675181][T13934] RIP: 0023:0xf70cf0ec [ 1221.675199][T13934] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1221.675216][T13934] RSP: 002b:00000000f54bd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 1221.675238][T13934] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000800004c0 [ 1221.675253][T13934] RDX: 0000000000028000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1221.675265][T13934] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1221.675277][T13934] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1221.675289][T13934] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1221.675317][T13934] [ 1221.917703][ T5704] usb 2-1: USB disconnect, device number 24 [ 1222.210381][T13955] syzkaller0: entered promiscuous mode [ 1222.210406][T13955] syzkaller0: entered allmulticast mode [ 1222.278951][T13956] lo: left promiscuous mode [ 1222.291032][T13956] tunl0: left promiscuous mode [ 1222.292106][T13956] gre0: left promiscuous mode [ 1222.314823][T13956] gretap0: left promiscuous mode [ 1222.335551][T13956] ip_vti0: left promiscuous mode [ 1222.336165][T13956] ip6_vti0: left promiscuous mode [ 1222.358413][T13956] sit0: left promiscuous mode [ 1222.385075][T13956] ip6tnl0: left promiscuous mode [ 1222.396374][T13956] ip6gre0: left promiscuous mode [ 1222.410307][T13956] ip6gretap0: left promiscuous mode [ 1222.419662][T13956] bridge0: port 2(bridge_slave_1) entered disabled state [ 1222.419862][T13956] bridge0: port 1(bridge_slave_0) entered disabled state [ 1222.420275][T13956] bridge0: left promiscuous mode [ 1222.426797][T13956] vcan0: left promiscuous mode [ 1222.448506][T13956] bond0: left promiscuous mode [ 1222.461801][T13956] team0: left promiscuous mode [ 1222.470496][T13956] dummy0: left promiscuous mode [ 1222.477104][T13956] nlmon0: left promiscuous mode [ 1222.487016][T13956] batadv0: left promiscuous mode [ 1222.499992][T13956] vxcan0: left promiscuous mode [ 1222.503060][T13956] vxcan1: left promiscuous mode [ 1222.506427][T13956] veth0: left promiscuous mode [ 1222.512881][T13956] veth1: left promiscuous mode [ 1222.523860][T13956] wg0: left promiscuous mode [ 1222.556880][T13956] wg1: left promiscuous mode [ 1222.602741][T13956] wg2: left promiscuous mode [ 1222.603445][T13956] veth0_to_bridge: left promiscuous mode [ 1222.625471][T13956] veth1_to_bridge: left promiscuous mode [ 1222.647258][T13956] veth0_to_bond: left promiscuous mode [ 1222.678856][T13956] bond_slave_0: left promiscuous mode [ 1222.682187][T13956] veth1_to_bond: left promiscuous mode [ 1222.687451][T13956] bond_slave_1: left promiscuous mode [ 1222.709523][T13956] veth0_to_team: left promiscuous mode [ 1222.731790][T13956] team_slave_0: left promiscuous mode [ 1222.750231][T13956] veth1_to_team: left promiscuous mode [ 1222.769445][T13956] team_slave_1: left promiscuous mode [ 1222.772471][T13956] veth0_to_batadv: left promiscuous mode [ 1222.777023][T13956] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1222.805404][T13956] batadv_slave_0: left promiscuous mode [ 1222.808067][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1222.825731][T13956] veth1_to_batadv: left promiscuous mode [ 1222.836482][T13956] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1222.836544][T13956] batadv_slave_1: left promiscuous mode [ 1222.855810][T13956] xfrm0: left promiscuous mode [ 1222.866703][T13956] veth0_to_hsr: left promiscuous mode [ 1222.883146][T13956] veth1_to_hsr: left promiscuous mode [ 1222.890660][T13956] hsr0: left promiscuous mode [ 1222.892069][T13956] veth1_virt_wifi: left promiscuous mode [ 1222.893341][T13956] veth0_virt_wifi: left promiscuous mode [ 1222.964566][T13956] virt_wifi0: left promiscuous mode [ 1222.996592][T13956] vlan0: left promiscuous mode [ 1223.009229][T13956] vlan1: left promiscuous mode [ 1223.035147][T13956] macvlan0: left promiscuous mode [ 1223.062532][T13956] macvlan1: left promiscuous mode [ 1223.077379][T13956] ipvlan0: left promiscuous mode [ 1223.105683][T13956] ipvlan1: left promiscuous mode [ 1223.154864][T13956] macvtap0: left promiscuous mode [ 1223.163647][T13956] macsec0: left promiscuous mode [ 1223.201884][T13956] geneve1: left promiscuous mode [ 1223.224846][T13956] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 1223.235446][T13956] netdevsim netdevsim2 netdevsim1: left promiscuous mode [ 1223.245606][T13956] netdevsim netdevsim2 netdevsim2: left promiscuous mode [ 1223.257078][T13956] netdevsim netdevsim2 netdevsim3: left promiscuous mode [ 1223.301398][T13956] mac80211_hwsim hwsim70 wlan1: left promiscuous mode [ 1223.320206][T13956] vxlan0: left promiscuous mode [ 1223.330114][T13956] vlan2: left promiscuous mode [ 1223.330135][T13956] geneve0: left promiscuous mode [ 1223.362859][T13956] bond1: left promiscuous mode [ 1223.362876][T13956] erspan0: left promiscuous mode [ 1223.386458][T13956] bond2: left promiscuous mode [ 1223.405358][T13956] ip6erspan0: left promiscuous mode [ 1223.416003][T13956] bond3: left promiscuous mode [ 1223.425299][T13956] geneve2: left promiscuous mode [ 1223.427148][T13956] vxcan2: left promiscuous mode [ 1223.427776][T13956] vxcan3: left promiscuous mode [ 1223.464332][T13956] mac80211_hwsim hwsim76 wlan2: left promiscuous mode [ 1223.478339][T22854] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1223.478372][T22854] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1223.478398][T22854] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1223.479203][T22854] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1223.479232][T22854] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1223.479257][T22854] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1223.479343][T22854] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1223.479368][T22854] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1223.479393][T22854] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1223.479427][T22854] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1223.479451][T22854] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1223.479476][T22854] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1223.696202][T14000] syzkaller0: entered promiscuous mode [ 1223.696226][T14000] syzkaller0: entered allmulticast mode [ 1223.917946][T13971] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1224.067923][T13971] usb 4-1: Using ep0 maxpacket: 8 [ 1224.068588][T13971] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1224.069509][T13971] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1224.069558][T13971] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1224.069581][T13971] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1224.069601][T13971] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1224.069613][T13971] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1224.069637][T13971] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1224.292752][T13971] usb 4-1: GET_CAPABILITIES returned 0 [ 1224.292800][T13971] usbtmc 4-1:16.0: can't read capabilities [ 1224.522255][T14032] syzkaller0: entered promiscuous mode [ 1224.522278][T14032] syzkaller0: entered allmulticast mode [ 1224.563903][T14043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5951'. [ 1224.592282][T14043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1224.635812][T14043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1225.019530][T14050] ptrace attach of "ci-upstream-kasan-gce-386/syz-executor exec"[14052] was attempted by "ci-upstream-kasan-gce-386/syz-executor exec"[14050] [ 1225.181442][T14064] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1225.348597][T13971] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 1225.477920][T13971] usb 5-1: device descriptor read/64, error -71 [ 1225.718377][T13971] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 1225.849014][T13971] usb 5-1: device descriptor read/64, error -71 [ 1225.958950][T13971] usb usb5-port1: attempt power cycle [ 1226.298546][T13971] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 1226.318573][T13971] usb 5-1: device descriptor read/8, error -71 [ 1226.518924][ T5704] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1226.558100][T13971] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1226.582058][T13971] usb 5-1: device descriptor read/8, error -71 [ 1226.614069][T14087] fuse: fd is not a fuse device [ 1226.672428][ T5704] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1226.673631][ T5704] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1226.673673][ T5704] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1226.680793][ T5704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1226.680819][ T5704] usb 2-1: Product: syz [ 1226.680833][ T5704] usb 2-1: Manufacturer: syz [ 1226.680847][ T5704] usb 2-1: SerialNumber: syz [ 1226.688617][T13971] usb usb5-port1: unable to enumerate USB device [ 1226.707367][ T5704] cdc_mbim 2-1:1.0: skipping garbage [ 1226.763088][T13971] usb 4-1: USB disconnect, device number 124 [ 1226.921011][T14101] FAULT_INJECTION: forcing a failure. [ 1226.921011][T14101] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1226.921072][T14101] CPU: 0 UID: 0 PID: 14101 Comm: syz.3.5970 Tainted: G L syzkaller #0 PREEMPT(full) [ 1226.921098][T14101] Tainted: [L]=SOFTLOCKUP [ 1226.921106][T14101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1226.921118][T14101] Call Trace: [ 1226.921127][T14101] [ 1226.921136][T14101] dump_stack_lvl+0xe8/0x150 [ 1226.921169][T14101] should_fail_ex+0x410/0x560 [ 1226.921204][T14101] _copy_from_user+0x2d/0xb0 [ 1226.921233][T14101] kstrtouint_from_user+0xd6/0x180 [ 1226.921260][T14101] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1226.921292][T14101] ? lock_acquire+0x115/0x350 [ 1226.921319][T14101] proc_fail_nth_write+0x8e/0x210 [ 1226.921341][T14101] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1226.921371][T14101] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1226.921393][T14101] vfs_write+0x296/0xba0 [ 1226.921420][T14101] ? __pfx_vfs_write+0x10/0x10 [ 1226.921442][T14101] ? __fget_files+0x2a/0x420 [ 1226.921475][T14101] ? __fget_files+0x3a2/0x420 [ 1226.921502][T14101] ? __fget_files+0x2a/0x420 [ 1226.921539][T14101] ksys_write+0x150/0x270 [ 1226.921561][T14101] ? __pfx_ksys_write+0x10/0x10 [ 1226.921586][T14101] ? asm_int80_emulation+0x1a/0x20 [ 1226.921611][T14101] do_int80_emulation+0x198/0x500 [ 1226.921642][T14101] ? asm_int80_emulation+0x1a/0x20 [ 1226.921661][T14101] ? clear_bhb_loop+0x70/0xc0 [ 1226.921680][T14101] ? clear_bhb_loop+0x70/0xc0 [ 1226.921705][T14101] asm_int80_emulation+0x1a/0x20 [ 1226.921724][T14101] RIP: 0023:0xf71075ab [ 1226.921742][T14101] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1226.921760][T14101] RSP: 002b:00000000f53c64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 1226.921782][T14101] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000f53c65d0 [ 1226.921796][T14101] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 1226.921808][T14101] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1226.921821][T14101] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1226.921834][T14101] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1226.921863][T14101] [ 1226.933476][T14082] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 1227.246897][T14108] syzkaller0: entered promiscuous mode [ 1227.246923][T14108] syzkaller0: entered allmulticast mode [ 1227.546132][T14082] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 1227.546522][ T5704] cdc_mbim 2-1:1.0: setting tx_max = 16384 [ 1227.551372][ T5704] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 1227.594768][ T5704] wwan wwan0: port wwan0mbim0 attached [ 1227.628730][ T5704] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, de:dd:1d:96:54:97 [ 1227.649669][ T30] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1227.764990][T14082] lo: left promiscuous mode [ 1227.765168][T14082] tunl0: left promiscuous mode [ 1227.765341][T14082] gre0: left promiscuous mode [ 1227.765468][T14082] gretap0: left promiscuous mode [ 1227.765582][T14082] erspan0: left promiscuous mode [ 1227.765701][T14082] ip_vti0: left promiscuous mode [ 1227.765840][T14082] ip6_vti0: left promiscuous mode [ 1227.765953][T14082] sit0: left promiscuous mode [ 1227.766060][T14082] ip6tnl0: left promiscuous mode [ 1227.766280][T14082] ip6gre0: left promiscuous mode [ 1227.803145][ T30] usb 4-1: Using ep0 maxpacket: 32 [ 1227.825445][ T30] usb 4-1: New USB device found, idVendor=16d8, idProduct=7006, bcdDevice=74.40 [ 1227.826813][ T30] usb 4-1: config 255 has an invalid interface number: 5 but max is 2 [ 1227.826841][ T30] usb 4-1: config 255 has an invalid interface number: 148 but max is 2 [ 1227.826863][ T30] usb 4-1: config 255 has an invalid interface number: 130 but max is 2 [ 1227.826883][ T30] usb 4-1: config 255 contains an unexpected descriptor of type 0x2, skipping [ 1227.826902][ T30] usb 4-1: config 255 contains an unexpected descriptor of type 0x1, skipping [ 1227.826921][ T30] usb 4-1: config 255 has an invalid interface number: 178 but max is 2 [ 1227.826942][ T30] usb 4-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 1227.826962][ T30] usb 4-1: config 255 has 4 interfaces, different from the descriptor's value: 3 [ 1227.826983][ T30] usb 4-1: config 255 has no interface number 0 [ 1227.826999][ T30] usb 4-1: config 255 has no interface number 1 [ 1227.827016][ T30] usb 4-1: config 255 has no interface number 2 [ 1227.827032][ T30] usb 4-1: config 255 has no interface number 3 [ 1227.827101][ T30] usb 4-1: config 255 interface 5 altsetting 48 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 1227.827129][ T30] usb 4-1: config 255 interface 5 altsetting 48 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 1227.827156][ T30] usb 4-1: config 255 interface 5 altsetting 48 has 4 endpoint descriptors, different from the interface descriptor's value: 16 [ 1227.827197][ T30] usb 4-1: config 255 interface 148 altsetting 26 has a duplicate endpoint with address 0xB, skipping [ 1227.827221][ T30] usb 4-1: config 255 interface 148 altsetting 26 has a duplicate endpoint with address 0xB, skipping [ 1227.827245][ T30] usb 4-1: config 255 interface 148 altsetting 26 endpoint 0x3 has invalid maxpacket 1136, setting to 64 [ 1227.827271][ T30] usb 4-1: config 255 interface 148 altsetting 26 has a duplicate endpoint with address 0xB, skipping [ 1227.827293][ T30] usb 4-1: config 255 interface 148 altsetting 26 has an invalid descriptor for endpoint zero, skipping [ 1227.827314][ T30] usb 4-1: config 255 interface 148 altsetting 26 has an invalid descriptor for endpoint zero, skipping [ 1227.827337][ T30] usb 4-1: config 255 interface 148 altsetting 26 has a duplicate endpoint with address 0xD, skipping [ 1227.827368][ T30] usb 4-1: config 255 interface 148 altsetting 26 has an invalid descriptor for endpoint zero, skipping [ 1227.827390][ T30] usb 4-1: config 255 interface 148 altsetting 26 has 12 endpoint descriptors, different from the interface descriptor's value: 21 [ 1227.827428][ T30] usb 4-1: config 255 interface 130 altsetting 1 has a duplicate endpoint with address 0xE, skipping [ 1227.827452][ T30] usb 4-1: config 255 interface 130 altsetting 1 has a duplicate endpoint with address 0x7, skipping [ 1227.827475][ T30] usb 4-1: config 255 interface 130 altsetting 1 has a duplicate endpoint with address 0x8B, skipping [ 1227.827498][ T30] usb 4-1: config 255 interface 130 altsetting 1 has a duplicate endpoint with address 0xE, skipping [ 1227.827520][ T30] usb 4-1: config 255 interface 130 altsetting 1 has a duplicate endpoint with address 0x8, skipping [ 1227.827542][ T30] usb 4-1: config 255 interface 130 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 1227.827564][ T30] usb 4-1: config 255 interface 130 altsetting 1 has a duplicate endpoint with address 0xD, skipping [ 1227.827586][ T30] usb 4-1: config 255 interface 130 altsetting 1 has a duplicate endpoint with address 0x1, skipping [ 1227.827606][ T30] usb 4-1: config 255 interface 130 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 1227.827630][ T30] usb 4-1: config 255 interface 130 altsetting 1 has a duplicate endpoint with address 0x8, skipping [ 1227.827653][ T30] usb 4-1: config 255 interface 130 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 1227.827693][ T30] usb 4-1: config 255 interface 178 altsetting 1 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 1227.827719][ T30] usb 4-1: config 255 interface 178 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 1227.827755][ T30] usb 4-1: config 255 interface 178 altsetting 1 has a duplicate endpoint with address 0xD, skipping [ 1227.827779][ T30] usb 4-1: config 255 interface 178 altsetting 1 has a duplicate endpoint with address 0xE, skipping [ 1227.827802][ T30] usb 4-1: config 255 interface 178 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 1227.872199][ T30] usb 4-1: config 255 interface 178 altsetting 1 has a duplicate endpoint with address 0xA, skipping [ 1227.872233][ T30] usb 4-1: config 255 interface 178 altsetting 1 has a duplicate endpoint with address 0xD, skipping [ 1227.872257][ T30] usb 4-1: config 255 interface 178 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 1227.872280][ T30] usb 4-1: config 255 interface 178 altsetting 1 has 8 endpoint descriptors, different from the interface descriptor's value: 15 [ 1227.872307][ T30] usb 4-1: config 255 interface 5 has no altsetting 0 [ 1227.872327][ T30] usb 4-1: config 255 interface 148 has no altsetting 0 [ 1227.888103][T14082] ip6gretap0: left promiscuous mode [ 1227.889890][ T30] usb 4-1: config 255 interface 130 has no altsetting 0 [ 1227.889915][ T30] usb 4-1: config 255 interface 178 has no altsetting 0 [ 1227.917644][T14082] bridge0: left promiscuous mode [ 1227.921809][T14082] vcan0: left promiscuous mode [ 1227.922157][T14082] bond0: left promiscuous mode [ 1227.925960][T14082] batadv0: left promiscuous mode [ 1227.926244][T14082] team0: left promiscuous mode [ 1227.926674][T14082] dummy0: left promiscuous mode [ 1227.934454][T14082] nlmon0: left promiscuous mode [ 1227.944392][T14082] vxcan0: left promiscuous mode [ 1227.944554][T14082] vxcan1: left promiscuous mode [ 1227.944728][T14082] veth0: left promiscuous mode [ 1227.953541][T14082] veth1: left promiscuous mode [ 1227.953684][T14082] wg0: left promiscuous mode [ 1227.953828][T14082] wg1: left promiscuous mode [ 1227.953971][T14082] wg2: left promiscuous mode [ 1227.954105][T14082] veth0_to_bridge: left promiscuous mode [ 1227.954348][T14082] veth1_to_bridge: left promiscuous mode [ 1227.958595][T14082] veth0_to_bond: left promiscuous mode [ 1227.959868][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1227.959894][ T30] usb 4-1: Product: 驆樾퍴 [ 1227.959910][ T30] usb 4-1: Manufacturer: 㔫퇷뚮㢽ᲁﰥ至죈됬扱҂䶳膍倒ꚱ빔臰먇捺猜⣢珁ﭰ㥚揩ꗲ୧맘綆獜ߍ韰ꢪ晡鋣詉圦氺芞Տ㖓獓駕㜸낒ꋱ [ 1227.959932][ T30] usb 4-1: SerialNumber: ႚ㐴᷀㐥敋埈깠㋎صŹ衠ﴩሐ剬䰿왔쁝⋑̃玙܅겨굪托룫삽㔈嚡馅蒛啭뙹㳚ៀ炸䶤海硑沛紴⢺꺎诩ᐎ眳嗃ꁐ컍鉂 [ 1227.961138][T14082] ªªªªªª: left promiscuous mode [ 1227.961282][T14082] veth1_to_bond: left promiscuous mode [ 1227.962537][T14082] bond_slave_1: left promiscuous mode [ 1227.962690][T14082] veth0_to_team: left promiscuous mode [ 1227.963381][T14082] team_slave_0: left promiscuous mode [ 1227.963526][T14082] veth1_to_team: left promiscuous mode [ 1227.965364][T14082] team_slave_1: left promiscuous mode [ 1227.969175][T14082] veth0_to_batadv: left promiscuous mode [ 1227.969335][T14082] batadv_slave_0: left promiscuous mode [ 1227.971804][T14082] veth1_to_batadv: left promiscuous mode [ 1227.971956][T14082] batadv_slave_1: left promiscuous mode [ 1227.972097][T14082] xfrm0: left promiscuous mode [ 1227.972234][T14082] veth0_to_hsr: left promiscuous mode [ 1227.972496][T14082] veth1_to_hsr: left promiscuous mode [ 1227.975640][T14082] hsr0: left promiscuous mode [ 1227.975789][T14082] veth1_virt_wifi: left promiscuous mode [ 1227.979766][T14082] veth0_virt_wifi: left promiscuous mode [ 1227.979930][T14082] virt_wifi0: left promiscuous mode [ 1227.980325][T14082] vlan0: left promiscuous mode [ 1227.980598][T14082] vlan1: left promiscuous mode [ 1227.993063][T14082] macvlan0: left promiscuous mode [ 1227.993284][T14082] macvlan1: left promiscuous mode [ 1227.993421][T14082] ipvlan0: left promiscuous mode [ 1227.993563][T14082] ipvlan1: left promiscuous mode [ 1227.993956][T14082] macvtap0: left promiscuous mode [ 1227.994118][T14082] macsec0: left promiscuous mode [ 1227.994231][T14082] geneve0: left promiscuous mode [ 1227.994371][T14082] geneve1: left promiscuous mode [ 1228.053364][T14082] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 1228.054914][T14082] netdevsim netdevsim1 netdevsim1: left promiscuous mode [ 1228.055055][T14082] netdevsim netdevsim1 netdevsim2: left promiscuous mode [ 1228.055170][T14082] netdevsim netdevsim1 netdevsim3: left promiscuous mode [ 1228.055282][T14082] mac80211_hwsim hwsim67 wlan1: left promiscuous mode [ 1228.055424][T14082] ipvlan2: left promiscuous mode [ 1228.090049][T14082] macsec1: left promiscuous mode [ 1228.123284][T14082] bond1: left promiscuous mode [ 1228.126771][T14082] ip6gre1: left promiscuous mode [ 1228.126793][T14082] ip6gre1: left allmulticast mode [ 1228.142214][T14082] bridge1: left promiscuous mode [ 1228.175379][T14082] bridge2: left promiscuous mode [ 1228.238849][T14082] syzkaller0: left promiscuous mode [ 1228.238873][T14082] syzkaller0: left allmulticast mode [ 1228.346664][T14146] syzkaller0: entered promiscuous mode [ 1228.346691][T14146] syzkaller0: entered allmulticast mode [ 1228.378629][ T5704] usb 2-1: USB disconnect, device number 25 [ 1228.380272][ T5704] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 1228.680869][T14119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1228.681415][T14119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1228.704137][ T5704] wwan wwan0: port wwan0mbim0 disconnected [ 1228.766890][T14159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1228.776512][T14159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1228.923010][T14159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1228.926907][T14159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1228.972819][ T30] option 4-1:255.148: GSM modem (1-port) converter detected [ 1229.000353][ T30] option 4-1:255.130: GSM modem (1-port) converter detected [ 1229.019842][ T30] option 4-1:255.178: GSM modem (1-port) converter detected [ 1229.026275][ T30] usb 4-1: USB disconnect, device number 125 [ 1229.051711][ T30] option 4-1:255.148: device disconnected [ 1229.056815][ T30] option 4-1:255.130: device disconnected [ 1229.083517][ T30] option 4-1:255.178: device disconnected [ 1229.123852][T14196] netlink: 'syz.2.5979': attribute type 11 has an invalid length. [ 1229.136961][ T5732] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1229.260207][ T5732] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1229.262426][T14196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1229.283229][T14196] 8021q: adding VLAN 0 to HW filter on device team0 [ 1229.316339][T14196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1229.421193][T14196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1229.432505][T14196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1229.453296][T14196] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1229.454936][T14196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1229.471190][T14196] veth1_vlan: left promiscuous mode [ 1229.474395][T14196] veth0_vlan: left promiscuous mode [ 1229.479882][T14196] veth0_vlan: entered promiscuous mode [ 1229.498662][T14196] veth1_vlan: entered promiscuous mode [ 1229.515433][T14196] veth1_macvtap: left promiscuous mode [ 1229.521409][T14196] veth0_macvtap: left promiscuous mode [ 1229.522666][T14196] veth0_macvtap: entered promiscuous mode [ 1229.523933][T14196] veth1_macvtap: entered promiscuous mode [ 1229.545938][T14196] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1229.555944][T14196] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1229.564568][T14196] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1229.575349][T14196] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1229.592155][T14196] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1229.595139][T14196] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1229.610447][T14196] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1229.643176][ T6319] bridge0: port 1(bridge_slave_0) entered blocking state [ 1229.643290][ T6319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1229.646345][ T6319] bridge0: port 2(bridge_slave_1) entered blocking state [ 1229.646450][ T6319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1229.658560][T13973] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1229.766508][T14225] syzkaller0: entered promiscuous mode [ 1229.766536][T14225] syzkaller0: entered allmulticast mode [ 1229.851044][T22834] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1229.888185][T22834] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1229.888220][T22834] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1229.888244][T22834] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1229.890919][T22834] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1229.890953][T22834] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1229.890978][T22834] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1229.891011][T22834] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1229.891036][T22834] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1229.891060][T22834] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1229.891092][T22834] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1229.891116][T22834] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1229.891140][T22834] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1230.397950][ T30] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 1230.495823][T14259] syzkaller0: entered promiscuous mode [ 1230.495850][T14259] syzkaller0: entered allmulticast mode [ 1230.508202][T13977] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1230.548152][ T30] usb 5-1: Using ep0 maxpacket: 32 [ 1230.548979][ T30] usb 5-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=4b.99 [ 1230.551505][ T30] usb 5-1: config 8 has an invalid interface number: 111 but max is 0 [ 1230.551532][ T30] usb 5-1: config 8 has no interface number 0 [ 1230.551572][ T30] usb 5-1: config 8 interface 111 altsetting 0 endpoint 0xB has invalid maxpacket 2007, setting to 1024 [ 1230.551626][ T30] usb 5-1: config 8 interface 111 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1230.554396][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1230.554423][ T30] usb 5-1: Product: syz [ 1230.554438][ T30] usb 5-1: Manufacturer: syz [ 1230.554453][ T30] usb 5-1: SerialNumber: syz [ 1230.601044][T14244] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1230.679732][T14265] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5990'. [ 1230.950516][T22834] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1230.950695][T22834] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1230.952396][ T30] aircable 5-1:8.111: aircable converter detected [ 1230.955095][ T30] usb 5-1: aircable converter now attached to ttyUSB0 [ 1231.002723][ T30] usb 5-1: USB disconnect, device number 115 [ 1231.033129][ T30] aircable ttyUSB0: aircable converter now disconnected from ttyUSB0 [ 1231.033538][ T30] aircable 5-1:8.111: device disconnected [ 1231.244637][T14296] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5993'. [ 1231.503083][ T5704] logitech-hidpp-device 0005:046D:B012.00A4: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 1231.558688][ T30] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1231.768291][T13977] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1231.791481][T14303] netlink: 'syz.4.5994': attribute type 11 has an invalid length. [ 1231.974304][T14317] netlink: 'syz.3.6004': attribute type 2 has an invalid length. [ 1231.974331][T14317] netlink: 'syz.3.6004': attribute type 2 has an invalid length. [ 1232.241597][T14310] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1232.289319][T14310] A link change request failed with some changes committed already. Interface pim6reg1 may have been left with an inconsistent configuration, please check. [ 1232.290151][T22854] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1232.822018][T14330] syzkaller0: entered promiscuous mode [ 1232.822042][T14330] syzkaller0: entered allmulticast mode [ 1233.058971][ T5704] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 1233.195255][T14353] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6006'. [ 1233.210872][ T5704] usb 5-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 1233.214713][ T5704] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1233.214740][ T5704] usb 5-1: Product: syz [ 1233.214754][ T5704] usb 5-1: Manufacturer: syz [ 1233.214768][ T5704] usb 5-1: SerialNumber: syz [ 1233.506348][ T31] audit: type=1326 audit(1791052504.943:9768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14331 comm="syz.4.6000" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 1233.514622][ T31] audit: type=1326 audit(1791052504.943:9769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14331 comm="syz.4.6000" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 1233.601413][T14360] syzkaller0: entered promiscuous mode [ 1233.601442][T14360] syzkaller0: entered allmulticast mode [ 1233.694598][ T5704] dvb-usb: found a 'Pinnacle PCTV 310e' in cold state, will try to load a firmware [ 1233.694622][ T5704] dvb-usb: did not find the firmware file '(null)' (status -22). You can use /scripts/get_dvb_firmware to get the firmware [ 1233.704908][ T5704] usb 5-1: USB disconnect, device number 116 [ 1233.848958][T14375] netlink: 'syz.2.6008': attribute type 2 has an invalid length. [ 1233.848986][T14375] netlink: 'syz.2.6008': attribute type 2 has an invalid length. [ 1234.159407][T13977] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 1234.308932][T13977] usb 2-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 1234.310220][T13977] usb 2-1: config 0 has an invalid interface number: 119 but max is 0 [ 1234.310245][T13977] usb 2-1: config 0 has no interface number 0 [ 1234.310284][T13977] usb 2-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1234.310307][T13977] usb 2-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xD3, changing to 0x83 [ 1234.310341][T13977] usb 2-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 4 [ 1234.310368][T13977] usb 2-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1234.312756][T13977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1234.312780][T13977] usb 2-1: Product: syz [ 1234.312795][T13977] usb 2-1: Manufacturer: syz [ 1234.312809][T13977] usb 2-1: SerialNumber: syz [ 1234.360878][T13977] usb 2-1: config 0 descriptor?? [ 1234.376553][T13977] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.119/input/input247 [ 1234.421951][T14399] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6011'. [ 1234.452786][T14403] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6013'. [ 1234.538174][T13977] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1234.614616][T13971] usb 2-1: USB disconnect, device number 26 [ 1234.652161][T14405] input: syz1 as /devices/virtual/input/input248 [ 1234.693240][T13977] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1234.693293][T13977] usb 4-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 1234.696791][T13977] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1234.696818][T13977] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1234.696872][T13977] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1234.701268][T13977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1234.701294][T13977] usb 4-1: Product: syz [ 1234.701309][T13977] usb 4-1: Manufacturer: syz [ 1234.701323][T13977] usb 4-1: SerialNumber: syz [ 1234.923942][ T31] audit: type=1326 audit(1791052506.363:9770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14387 comm="syz.3.6012" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f030ec code=0x7ffc0000 [ 1234.924111][ T31] audit: type=1326 audit(1791052506.363:9771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14387 comm="syz.3.6012" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f030ec code=0x7ffc0000 [ 1234.924849][ T31] audit: type=1326 audit(1791052506.363:9772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14387 comm="syz.3.6012" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f030ec code=0x7ffc0000 [ 1234.925019][ T31] audit: type=1326 audit(1791052506.363:9773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14387 comm="syz.3.6012" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f030ec code=0x7ffc0000 [ 1234.926983][ T31] audit: type=1326 audit(1791052506.363:9774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14387 comm="syz.3.6012" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=186 compat=1 ip=0xf7f030ec code=0x7ffc0000 [ 1234.938111][ T31] audit: type=1326 audit(1791052506.373:9775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14387 comm="syz.3.6012" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f030ec code=0x7ffc0000 [ 1234.938163][ T31] audit: type=1326 audit(1791052506.373:9776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14387 comm="syz.3.6012" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f030ec code=0x7ffc0000 [ 1234.938203][ T31] audit: type=1326 audit(1791052506.373:9777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14387 comm="syz.3.6012" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f030ec code=0x7ffc0000 [ 1235.308642][T13977] usb 4-1: Can't get UAC3 power state for id 10 [ 1235.313478][T13977] usb 4-1: 2:0: failed to get current value for ch 0 (-71) [ 1235.326885][T13977] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1235.326916][T13977] usb 4-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 1235.326934][T13977] usb 4-1: [2] FU [Generic Out Playback Volume] ch = 1, val = 0/1/1 [ 1235.368126][ C1] ip6_tnl_xmit_ctl: 4 callbacks suppressed [ 1235.368148][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1235.550659][T13977] usb 4-1: USB disconnect, device number 126 [ 1235.757963][T13971] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1235.916901][T13971] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1235.916953][T13971] usb 2-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40 [ 1235.918917][T13971] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1235.918942][T13971] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1235.918995][T13971] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1235.919220][T13971] usb 2-1: config 1 interface 1 has no altsetting 0 [ 1235.935756][T13971] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1235.935785][T13971] usb 2-1: Product: syz [ 1235.935801][T13971] usb 2-1: Manufacturer: syz [ 1235.935816][T13971] usb 2-1: SerialNumber: syz [ 1236.036066][T14472] syzkaller0: entered promiscuous mode [ 1236.036092][T14472] syzkaller0: entered allmulticast mode [ 1236.164409][T13971] usb 2-1: 1:1 : no or invalid class specific endpoint descriptor [ 1236.164455][T13971] usb 2-1: 1:1 : sample bitwidth 62 in over sample bytes 0 [ 1236.164478][T13971] usb 2-1: 1:1 : unsupported sample bitwidth 62 in 0 bytes [ 1236.164508][T13971] usb 2-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 1236.165238][T13971] usb 2-1: selecting invalid altsetting 0 [ 1236.166919][T13971] usb 2-1: selecting invalid altsetting 0 [ 1236.316810][ C1] sd 0:0:1:0: [sda] tag#873 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 1236.316876][ C1] sd 0:0:1:0: [sda] tag#873 CDB: Write(6) 0a 00 00 00 00 00 00 05 ff 01 00 00 [ 1236.319731][T13971] usb 2-1: USB disconnect, device number 27 [ 1236.351553][T14494] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6033'. [ 1236.890477][ T30] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1236.967629][T14492] netlink: 'syz.4.6022': attribute type 2 has an invalid length. [ 1236.967658][T14492] netlink: 'syz.4.6022': attribute type 2 has an invalid length. [ 1237.018913][ T30] usb 4-1: device descriptor read/64, error -71 [ 1237.272163][ T30] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1237.298034][ T5732] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 1237.337464][T14577] syz.4.6031 (14577): drop_caches: 2 [ 1237.361032][T14577] syz.4.6031 (14577): drop_caches: 2 [ 1237.401574][T14580] FAULT_INJECTION: forcing a failure. [ 1237.401574][T14580] name failslab, interval 1, probability 0, space 0, times 0 [ 1237.401609][T14580] CPU: 0 UID: 0 PID: 14580 Comm: syz.2.6034 Tainted: G L syzkaller #0 PREEMPT(full) [ 1237.401636][T14580] Tainted: [L]=SOFTLOCKUP [ 1237.401644][T14580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1237.401659][T14580] Call Trace: [ 1237.401668][T14580] [ 1237.401677][T14580] dump_stack_lvl+0xe8/0x150 [ 1237.401711][T14580] should_fail_ex+0x410/0x560 [ 1237.401741][T14580] should_failslab+0xa8/0x100 [ 1237.401768][T14580] ? skb_clone+0x212/0x3a0 [ 1237.401787][T14580] kmem_cache_alloc_noprof+0xa1/0x600 [ 1237.401810][T14580] ? skb_clone+0x212/0x3a0 [ 1237.401835][T14580] skb_clone+0x212/0x3a0 [ 1237.401857][T14580] __netlink_deliver_tap+0x413/0x860 [ 1237.401890][T14580] ? netlink_deliver_tap+0x2e/0x1b0 [ 1237.401913][T14580] netlink_deliver_tap+0x19c/0x1b0 [ 1237.401936][T14580] netlink_unicast+0x781/0x940 [ 1237.401974][T14580] netlink_sendmsg+0x813/0xb40 [ 1237.402003][T14580] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1237.402031][T14580] ? apparmor_socket_sendmsg+0x98/0x360 [ 1237.402057][T14580] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1237.402077][T14580] sock_sendmsg_nosec+0x13a/0x180 [ 1237.402111][T14580] ____sys_sendmsg+0x54e/0x850 [ 1237.402146][T14580] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1237.402192][T14580] ___sys_sendmsg+0x2a5/0x360 [ 1237.402220][T14580] ? __lock_acquire+0x747/0x2de0 [ 1237.402247][T14580] ? __pfx____sys_sendmsg+0x10/0x10 [ 1237.402276][T14580] ? get_pid_task+0x20/0x1f0 [ 1237.402295][T14580] ? get_pid_task+0x20/0x1f0 [ 1237.402311][T14580] ? get_pid_task+0x20/0x1f0 [ 1237.402357][T14580] ? __fget_files+0x2a/0x420 [ 1237.402386][T14580] ? __fget_files+0x3a2/0x420 [ 1237.402424][T14580] __sys_sendmsg+0x177/0x240 [ 1237.402456][T14580] ? __pfx___sys_sendmsg+0x10/0x10 [ 1237.402504][T14580] __do_fast_syscall_32+0x27a/0x6a0 [ 1237.402535][T14580] ? do_fast_syscall_32+0x33/0x70 [ 1237.402564][T14580] ? asm_int80_emulation+0x1a/0x20 [ 1237.402584][T14580] ? do_int80_emulation+0x299/0x500 [ 1237.402611][T14580] ? trace_irq_disable+0x3b/0x140 [ 1237.402636][T14580] do_fast_syscall_32+0x33/0x70 [ 1237.402666][T14580] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1237.402690][T14580] RIP: 0023:0xf70cf0ec [ 1237.402709][T14580] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1237.402726][T14580] RSP: 002b:00000000f54bd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1237.402749][T14580] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000100 [ 1237.402763][T14580] RDX: 0000000004000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 1237.402775][T14580] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1237.402787][T14580] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1237.402799][T14580] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1237.402828][T14580] [ 1237.422340][ T30] usb 4-1: device descriptor read/64, error -71 [ 1237.540543][ T30] usb usb4-port1: attempt power cycle [ 1237.606785][ T5732] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1237.608603][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1237.645350][ T5732] usb 2-1: New USB device found, idVendor=046d, idProduct=08c6, bcdDevice= 0.40 [ 1237.690867][ T5732] usb 2-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config [ 1237.690896][ T5732] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1237.766081][T14588] syzkaller0: entered promiscuous mode [ 1237.767014][ T5732] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1237.767038][ T5732] usb 2-1: Product: syz [ 1237.767052][ T5732] usb 2-1: Manufacturer: syz [ 1237.767068][ T5732] usb 2-1: SerialNumber: syz [ 1237.769601][T14588] syzkaller0: entered allmulticast mode [ 1237.918036][ T30] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1237.943414][ T30] usb 4-1: device descriptor read/8, error -71 [ 1238.024004][ T5732] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 1238.095905][ T5732] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1238.112128][ T5732] usb 2-1: USB disconnect, device number 28 [ 1238.185236][ T30] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1238.202846][ T30] usb 4-1: device descriptor read/8, error -71 [ 1238.308333][ T30] usb usb4-port1: unable to enumerate USB device [ 1238.740090][T14628] syzkaller0: entered promiscuous mode [ 1238.740114][T14628] syzkaller0: entered allmulticast mode [ 1238.809398][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.809463][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.991691][T14641] netlink: 'syz.1.6044': attribute type 2 has an invalid length. [ 1238.991715][T14641] netlink: 'syz.1.6044': attribute type 2 has an invalid length. [ 1239.451595][T14648] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6048'. [ 1239.622248][T14649] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6048'. [ 1239.622376][T14649] FAULT_INJECTION: forcing a failure. [ 1239.622376][T14649] name failslab, interval 1, probability 0, space 0, times 0 [ 1239.622406][T14649] CPU: 0 UID: 0 PID: 14649 Comm: syz.1.6048 Tainted: G L syzkaller #0 PREEMPT(full) [ 1239.622442][T14649] Tainted: [L]=SOFTLOCKUP [ 1239.622450][T14649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1239.622462][T14649] Call Trace: [ 1239.622470][T14649] [ 1239.622479][T14649] dump_stack_lvl+0xe8/0x150 [ 1239.622512][T14649] should_fail_ex+0x410/0x560 [ 1239.622542][T14649] ? __alloc_skb+0x1db/0x7a0 [ 1239.622567][T14649] should_failslab+0xa8/0x100 [ 1239.622595][T14649] ? __alloc_skb+0x1db/0x7a0 [ 1239.622619][T14649] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1239.622640][T14649] ? __alloc_skb+0x18d/0x7a0 [ 1239.622666][T14649] ? __alloc_skb+0x1db/0x7a0 [ 1239.622698][T14649] __alloc_skb+0x1db/0x7a0 [ 1239.622728][T14649] xfrm_alloc_compat+0x1a6/0x1740 [ 1239.622766][T14649] ? __pfx_xfrm_alloc_compat+0x10/0x10 [ 1239.622794][T14649] xfrm_nlmsg_multicast+0xda/0x1f0 [ 1239.622821][T14649] xfrm_send_policy_notify+0xed2/0x1c00 [ 1239.622850][T14649] ? __pfx_xfrm_send_policy_notify+0x10/0x10 [ 1239.622874][T14649] ? lock_acquire+0x115/0x350 [ 1239.622902][T14649] ? lockdep_hardirqs_on+0x7b/0x110 [ 1239.622929][T14649] ? __local_bh_enable_ip+0xd6/0x140 [ 1239.622954][T14649] ? km_policy_notify+0x28/0x200 [ 1239.622977][T14649] ? __pfx_xfrm_send_policy_notify+0x10/0x10 [ 1239.623001][T14649] km_policy_notify+0x121/0x200 [ 1239.623022][T14649] ? km_policy_notify+0x28/0x200 [ 1239.623047][T14649] xfrm_add_policy+0x4a1/0x690 [ 1239.623077][T14649] ? __pfx_xfrm_add_policy+0x10/0x10 [ 1239.623106][T14649] ? __nla_parse+0x40/0x60 [ 1239.623136][T14649] xfrm_user_rcv_msg+0x7a8/0xf30 [ 1239.623165][T14649] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 1239.623215][T14649] ? __mutex_trylock_common+0x15f/0x270 [ 1239.623239][T14649] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1239.623265][T14649] ? rcu_is_watching+0x16/0xb0 [ 1239.623289][T14649] ? trace_contention_end+0x3d/0x140 [ 1239.623322][T14649] netlink_rcv_skb+0x226/0x4a0 [ 1239.623345][T14649] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 1239.623371][T14649] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1239.623407][T14649] ? netlink_deliver_tap+0x2e/0x1b0 [ 1239.623437][T14649] ? netlink_deliver_tap+0x2e/0x1b0 [ 1239.623460][T14649] xfrm_netlink_rcv+0x79/0x90 [ 1239.623484][T14649] netlink_unicast+0x7bd/0x940 [ 1239.623523][T14649] netlink_sendmsg+0x813/0xb40 [ 1239.623553][T14649] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1239.623582][T14649] ? apparmor_socket_sendmsg+0x98/0x360 [ 1239.623610][T14649] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1239.623630][T14649] sock_sendmsg_nosec+0x13a/0x180 [ 1239.623657][T14649] ____sys_sendmsg+0x54e/0x850 [ 1239.623692][T14649] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1239.623736][T14649] ___sys_sendmsg+0x2a5/0x360 [ 1239.623764][T14649] ? __lock_acquire+0x747/0x2de0 [ 1239.623790][T14649] ? __pfx____sys_sendmsg+0x10/0x10 [ 1239.623818][T14649] ? get_pid_task+0x20/0x1f0 [ 1239.623837][T14649] ? get_pid_task+0x20/0x1f0 [ 1239.623854][T14649] ? get_pid_task+0x20/0x1f0 [ 1239.623904][T14649] ? __fget_files+0x2a/0x420 [ 1239.623931][T14649] ? __fget_files+0x3a2/0x420 [ 1239.623970][T14649] __sys_sendmsg+0x177/0x240 [ 1239.624001][T14649] ? __pfx___sys_sendmsg+0x10/0x10 [ 1239.624049][T14649] __do_fast_syscall_32+0x27a/0x6a0 [ 1239.624080][T14649] ? do_fast_syscall_32+0x33/0x70 [ 1239.624109][T14649] ? asm_int80_emulation+0x1a/0x20 [ 1239.624128][T14649] ? do_int80_emulation+0x299/0x500 [ 1239.624161][T14649] do_fast_syscall_32+0x33/0x70 [ 1239.624191][T14649] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1239.624215][T14649] RIP: 0023:0xf7f380ec [ 1239.624233][T14649] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1239.624251][T14649] RSP: 002b:00000000f53d550c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1239.624272][T14649] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 0000000080000180 [ 1239.624287][T14649] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 1239.624299][T14649] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1239.624311][T14649] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1239.624323][T14649] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1239.624353][T14649] [ 1240.537956][ T5732] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1240.577968][ T30] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1240.689136][ T5732] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1240.690366][ T5732] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 1240.690390][ T5732] usb 2-1: config 1 has no interface number 0 [ 1240.690431][ T5732] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 32 [ 1240.690456][ T5732] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 1240.690554][ T5732] usb 2-1: config 1 interface 7 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1240.697083][ T5732] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1240.697109][ T5732] usb 2-1: Product: syz [ 1240.697124][ T5732] usb 2-1: Manufacturer: syz [ 1240.697140][ T5732] usb 2-1: SerialNumber: syz [ 1240.783493][T14665] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1240.783634][T14665] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1240.802328][ T30] usb 4-1: Using ep0 maxpacket: 32 [ 1240.802931][ T30] usb 4-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=4b.99 [ 1240.804143][ T30] usb 4-1: config 8 has an invalid interface number: 111 but max is 0 [ 1240.804168][ T30] usb 4-1: config 8 has no interface number 0 [ 1240.804208][ T30] usb 4-1: config 8 interface 111 altsetting 0 endpoint 0xB has invalid maxpacket 2007, setting to 1024 [ 1240.804235][ T30] usb 4-1: config 8 interface 111 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1240.805105][ T5732] usb 2-1: Expected 3 endpoints, found: 2 [ 1240.849358][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1240.849377][ T30] usb 4-1: Product: syz [ 1240.849385][ T30] usb 4-1: Manufacturer: syz [ 1240.849393][ T30] usb 4-1: SerialNumber: syz [ 1240.892866][T14666] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1241.126505][ T30] aircable 4-1:8.111: aircable converter detected [ 1241.145094][ T30] usb 4-1: aircable converter now attached to ttyUSB0 [ 1241.165845][ T30] usb 4-1: USB disconnect, device number 5 [ 1241.182596][ T30] aircable ttyUSB0: aircable converter now disconnected from ttyUSB0 [ 1241.186256][ T30] aircable 4-1:8.111: device disconnected [ 1241.374898][T14709] syzkaller0: entered promiscuous mode [ 1241.374918][T14709] syzkaller0: entered allmulticast mode [ 1241.696362][T14720] veth1_macvtap: left promiscuous mode [ 1241.696394][T14720] macsec0: entered allmulticast mode [ 1241.978140][T13977] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1242.089330][T14739] loop7: detected capacity change from 0 to 16384 [ 1242.128376][T13977] usb 5-1: Using ep0 maxpacket: 32 [ 1242.129096][T13977] usb 5-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 1242.131322][T13977] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 252, changing to 11 [ 1242.131341][T13977] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1242.131356][T13977] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1242.131375][T13977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1242.134902][T13977] usb 5-1: config 0 descriptor?? [ 1242.303244][T14746] netlink: 'syz.0.6061': attribute type 3 has an invalid length. [ 1242.309231][T13973] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1242.462123][T13973] usb 4-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 1242.479439][T13973] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1242.479467][T13973] usb 4-1: Product: syz [ 1242.479482][T13973] usb 4-1: Manufacturer: syz [ 1242.479497][T13973] usb 4-1: SerialNumber: syz [ 1242.513570][T14745] loop7: detected capacity change from 16384 to 16376 [ 1242.805953][T14720] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6057'. [ 1242.867152][ T31] kauditd_printk_skb: 124 callbacks suppressed [ 1242.867244][ T31] audit: type=1326 audit(1791052514.303:9902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14731 comm="syz.3.6060" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f030ec code=0x7ffc0000 [ 1242.867291][ T31] audit: type=1326 audit(1791052514.303:9903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14731 comm="syz.3.6060" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f030ec code=0x7ffc0000 [ 1242.946804][T14720] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1242.973114][T14780] veth1_macvtap: entered promiscuous mode [ 1242.973144][T14780] veth1_macvtap: entered allmulticast mode [ 1242.973293][T14780] macsec0: left allmulticast mode [ 1242.973337][T14780] veth1_macvtap: left allmulticast mode [ 1243.124486][T13977] hid-alps 0003:044E:120B.00A5: failed to read command (-71) [ 1243.124583][T13977] hid-alps 0003:044E:120B.00A5: failed U1_DEV_CTRL_1 (-71) [ 1243.183764][T13977] hid-alps 0003:044E:120B.00A5: hidraw0: USB HID v80.00 Joystick [HID 044e:120b] on usb-dummy_hcd.4-1/input0 [ 1243.232014][T13977] usb 5-1: USB disconnect, device number 117 [ 1243.381611][T13973] dvb-usb: found a 'Pinnacle PCTV 310e' in cold state, will try to load a firmware [ 1243.381638][T13973] dvb-usb: did not find the firmware file '(null)' (status -22). You can use /scripts/get_dvb_firmware to get the firmware [ 1243.391796][T13973] usb 4-1: USB disconnect, device number 6 [ 1243.431978][ T30] usb 2-1: USB disconnect, device number 29 [ 1243.697041][T14827] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 1243.739252][T14830] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6065'. [ 1244.568725][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1244.961451][ T5732] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1245.011475][T14843] syzkaller1: entered promiscuous mode [ 1245.011500][T14843] syzkaller1: entered allmulticast mode [ 1245.157948][ T5732] usb 2-1: Using ep0 maxpacket: 32 [ 1245.159894][ T5732] usb 2-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=4b.99 [ 1245.161069][ T5732] usb 2-1: config 8 has an invalid interface number: 111 but max is 0 [ 1245.161092][ T5732] usb 2-1: config 8 has no interface number 0 [ 1245.161126][ T5732] usb 2-1: config 8 interface 111 altsetting 0 endpoint 0xB has invalid maxpacket 2007, setting to 1024 [ 1245.161162][ T5732] usb 2-1: config 8 interface 111 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1245.163496][ T5732] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1245.163522][ T5732] usb 2-1: Product: syz [ 1245.163537][ T5732] usb 2-1: Manufacturer: syz [ 1245.163552][ T5732] usb 2-1: SerialNumber: syz [ 1245.245492][T14868] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1245.459047][ T5732] aircable 2-1:8.111: aircable converter detected [ 1245.462828][ T5732] usb 2-1: aircable converter now attached to ttyUSB0 [ 1245.487430][ T5732] usb 2-1: USB disconnect, device number 30 [ 1245.504967][ T5732] aircable ttyUSB0: aircable converter now disconnected from ttyUSB0 [ 1245.506906][ T5732] aircable 2-1:8.111: device disconnected [ 1245.955830][T13977] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1246.115096][T13977] usb 4-1: Using ep0 maxpacket: 8 [ 1246.116722][T13977] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1246.122295][T13977] usb 4-1: config 2 has an invalid interface number: 31 but max is 0 [ 1246.122322][T13977] usb 4-1: config 2 has no interface number 0 [ 1246.122362][T13977] usb 4-1: config 2 interface 31 has no altsetting 0 [ 1246.126235][T13977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1246.126258][T13977] usb 4-1: Product: syz [ 1246.126274][T13977] usb 4-1: Manufacturer: syz [ 1246.126288][T13977] usb 4-1: SerialNumber: syz [ 1246.166786][T14915] netlink: 'syz.1.6075': attribute type 23 has an invalid length. [ 1246.343777][T13977] ch9200 4-1:2.31: probe with driver ch9200 failed with error -71 [ 1246.357079][T13977] usb 4-1: USB disconnect, device number 7 [ 1246.468260][T13971] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1246.488256][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1246.620762][T13971] usb 2-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 1246.622657][T13971] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1246.622706][T13971] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1246.627375][T13971] usb 2-1: config 0 descriptor?? [ 1246.630211][T14919] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1246.902309][T13971] usbhid 2-1:0.0: can't add hid device: -71 [ 1246.902424][T13971] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1246.911323][T13971] usb 2-1: USB disconnect, device number 31 [ 1247.096263][T14953] syzkaller0: entered promiscuous mode [ 1247.096287][T14953] syzkaller0: entered allmulticast mode [ 1247.255259][T14962] syz.4.6084 (14962): drop_caches: 2 [ 1247.265407][T14962] syz.4.6084 (14962): drop_caches: 2 [ 1247.796497][T14975] fuse: Unknown parameter '000000000000000000000050x000000000000000c' [ 1247.998105][T13971] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1248.148350][T13971] usb 4-1: device descriptor read/64, error -71 [ 1248.397942][T13971] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1248.467968][T13977] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1248.528354][T13971] usb 4-1: device descriptor read/64, error -71 [ 1248.617964][T13977] usb 2-1: Using ep0 maxpacket: 8 [ 1248.619321][T13977] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1248.621298][T13977] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1248.621354][T13977] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1248.621378][T13977] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1248.621410][T13977] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1248.621435][T13977] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1248.621477][T13977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1248.638624][T13971] usb usb4-port1: attempt power cycle [ 1248.865540][T13977] usb 2-1: GET_CAPABILITIES returned 0 [ 1248.865587][T13977] usbtmc 2-1:16.0: can't read capabilities [ 1248.978492][T13971] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1248.998861][T13971] usb 4-1: device descriptor read/8, error -71 [ 1249.197223][T14995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6090'. [ 1249.220512][T14995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1249.227206][T14995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1249.247925][T13971] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1249.269543][T13971] usb 4-1: device descriptor read/8, error -71 [ 1249.379132][T13971] usb usb4-port1: unable to enumerate USB device [ 1250.463527][T15040] netlink: 'syz.2.6102': attribute type 3 has an invalid length. [ 1250.617269][T15047] FAULT_INJECTION: forcing a failure. [ 1250.617269][T15047] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1250.617304][T15047] CPU: 0 UID: 0 PID: 15047 Comm: syz.3.6103 Tainted: G L syzkaller #0 PREEMPT(full) [ 1250.617330][T15047] Tainted: [L]=SOFTLOCKUP [ 1250.617338][T15047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1250.617350][T15047] Call Trace: [ 1250.617358][T15047] [ 1250.617367][T15047] dump_stack_lvl+0xe8/0x150 [ 1250.617402][T15047] should_fail_ex+0x410/0x560 [ 1250.617431][T15047] _copy_from_user+0x2d/0xb0 [ 1250.617461][T15047] kstrtouint_from_user+0xd6/0x180 [ 1250.617487][T15047] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1250.617520][T15047] ? lock_acquire+0x115/0x350 [ 1250.617547][T15047] proc_fail_nth_write+0x8e/0x210 [ 1250.617569][T15047] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1250.617599][T15047] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1250.617620][T15047] vfs_write+0x296/0xba0 [ 1250.617649][T15047] ? __pfx_vfs_write+0x10/0x10 [ 1250.617671][T15047] ? __fget_files+0x2a/0x420 [ 1250.617712][T15047] ? __fget_files+0x3a2/0x420 [ 1250.617740][T15047] ? __fget_files+0x2a/0x420 [ 1250.617777][T15047] ksys_write+0x150/0x270 [ 1250.617800][T15047] ? __pfx_ksys_write+0x10/0x10 [ 1250.617827][T15047] ? asm_int80_emulation+0x1a/0x20 [ 1250.617849][T15047] do_int80_emulation+0x198/0x500 [ 1250.617877][T15047] ? trace_irq_disable+0x3b/0x140 [ 1250.617897][T15047] ? asm_int80_emulation+0x1a/0x20 [ 1250.617916][T15047] ? clear_bhb_loop+0x70/0xc0 [ 1250.617936][T15047] ? clear_bhb_loop+0x70/0xc0 [ 1250.617960][T15047] asm_int80_emulation+0x1a/0x20 [ 1250.617980][T15047] RIP: 0023:0xf71075ab [ 1250.617998][T15047] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1250.618016][T15047] RSP: 002b:00000000f53c64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 1250.618038][T15047] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f53c65d0 [ 1250.618052][T15047] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 1250.618064][T15047] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1250.618075][T15047] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1250.618086][T15047] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1250.618117][T15047] [ 1250.988517][T15058] syzkaller0: entered promiscuous mode [ 1250.988541][T15058] syzkaller0: entered allmulticast mode [ 1251.181445][T15063] kAFS: unable to lookup cell 'ÿ' [ 1251.293236][T13971] usb 2-1: USB disconnect, device number 32 [ 1251.481809][T15090] xt_l2tp: wrong L2TP version: 7 [ 1251.608270][T13977] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 1251.765176][T13977] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1251.767473][T13977] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1251.767498][T13977] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1251.767519][T13977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1251.774622][T13977] usb 5-1: config 0 descriptor?? [ 1251.818409][T13971] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1251.981174][T13971] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1251.981234][T13971] usb 2-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 1251.984838][T13971] usb 2-1: config 63 has an invalid interface number: 66 but max is 0 [ 1251.984857][T13971] usb 2-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 1251.984868][T13971] usb 2-1: config 63 has no interface number 0 [ 1251.984884][T13971] usb 2-1: config 63 interface 66 has no altsetting 0 [ 1251.997179][T13971] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1251.997227][T13971] usb 2-1: Product: syz [ 1251.997242][T13971] usb 2-1: Manufacturer: syz [ 1251.997256][T13971] usb 2-1: SerialNumber: syz [ 1252.309687][T13977] hid_parser_main: 46 callbacks suppressed [ 1252.309720][T13977] cp2112 0003:10C4:EA90.00A6: unknown main item tag 0x0 [ 1252.309740][T13977] cp2112 0003:10C4:EA90.00A6: unknown main item tag 0x0 [ 1252.309756][T13977] cp2112 0003:10C4:EA90.00A6: unknown main item tag 0x0 [ 1252.309771][T13977] cp2112 0003:10C4:EA90.00A6: unknown main item tag 0x0 [ 1252.309787][T13977] cp2112 0003:10C4:EA90.00A6: unknown main item tag 0x0 [ 1252.309802][T13977] cp2112 0003:10C4:EA90.00A6: unknown main item tag 0x0 [ 1252.309818][T13977] cp2112 0003:10C4:EA90.00A6: unknown main item tag 0x0 [ 1252.339021][T13977] cp2112 0003:10C4:EA90.00A6: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 1252.502886][T13977] cp2112 0003:10C4:EA90.00A6: Part Number: 0x00 Device Version: 0x00 [ 1252.601084][T15111] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6112'. [ 1253.122444][T15071] cp2112 0003:10C4:EA90.00A6: Error starting transaction: -38 [ 1253.126393][T13977] cp2112 0003:10C4:EA90.00A6: error reading lock byte: -71 [ 1253.170083][T13977] usb 5-1: USB disconnect, device number 118 [ 1253.421615][T15150] netlink: 'syz.2.6122': attribute type 3 has an invalid length. [ 1253.421638][T15150] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6122'. [ 1253.444485][T15150] tipc: Started in network mode [ 1253.444508][T15150] tipc: Node identity 1001001, cluster identity 4711 [ 1253.444522][T15150] tipc: Node number set to 16781313 [ 1253.708996][T15154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6123'. [ 1254.531235][T13971] uvcvideo 2-1:63.66: probe with driver uvcvideo failed with error -22 [ 1254.535060][T13971] usb 2-1: USB disconnect, device number 33 [ 1255.796539][ T31] audit: type=1326 audit(1791052527.233:9904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15192 comm="syz.4.6134" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 1255.796846][ T31] audit: type=1326 audit(1791052527.233:9905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15192 comm="syz.4.6134" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 1255.803377][T15193] FAULT_INJECTION: forcing a failure. [ 1255.803377][T15193] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1255.803409][T15193] CPU: 1 UID: 0 PID: 15193 Comm: syz.4.6134 Tainted: G L syzkaller #0 PREEMPT(full) [ 1255.803435][T15193] Tainted: [L]=SOFTLOCKUP [ 1255.803443][T15193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1255.803454][T15193] Call Trace: [ 1255.803462][T15193] [ 1255.803474][T15193] dump_stack_lvl+0xe8/0x150 [ 1255.803508][T15193] should_fail_ex+0x410/0x560 [ 1255.803536][T15193] _copy_to_user+0x31/0xb0 [ 1255.803566][T15193] simple_read_from_buffer+0xe1/0x170 [ 1255.803601][T15193] proc_fail_nth_read+0x1bb/0x230 [ 1255.803620][T15193] ? common_file_perm+0x20e/0x2b0 [ 1255.803648][T15193] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1255.803672][T15193] ? rw_verify_area+0x24a/0x4c0 [ 1255.803704][T15193] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1255.803723][T15193] vfs_read+0x213/0xa80 [ 1255.803747][T15193] ? __pfx___mutex_lock+0x10/0x10 [ 1255.803776][T15193] ? __pfx_vfs_read+0x10/0x10 [ 1255.803796][T15193] ? __fget_files+0x2a/0x420 [ 1255.803827][T15193] ? __fget_files+0x3a2/0x420 [ 1255.803853][T15193] ? __fget_files+0x2a/0x420 [ 1255.803889][T15193] ksys_read+0x150/0x270 [ 1255.803910][T15193] ? __pfx_ksys_read+0x10/0x10 [ 1255.803932][T15193] ? __seccomp_permit_syscall+0xe7/0x2b0 [ 1255.803961][T15193] do_int80_emulation+0x198/0x500 [ 1255.803993][T15193] ? trace_irq_disable+0x3b/0x140 [ 1255.804013][T15193] ? asm_int80_emulation+0x1a/0x20 [ 1255.804031][T15193] ? clear_bhb_loop+0x70/0xc0 [ 1255.804050][T15193] ? clear_bhb_loop+0x70/0xc0 [ 1255.804073][T15193] asm_int80_emulation+0x1a/0x20 [ 1255.804091][T15193] RIP: 0023:0xf71a75ab [ 1255.804109][T15193] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 1255.804125][T15193] RSP: 002b:00000000f545d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1255.804145][T15193] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f545d5d0 [ 1255.804159][T15193] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 1255.804170][T15193] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1255.804182][T15193] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1255.804193][T15193] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1255.804221][T15193] [ 1255.823260][ T31] audit: type=1326 audit(1791052527.243:9906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15192 comm="syz.4.6134" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 1255.823311][ T31] audit: type=1326 audit(1791052527.243:9907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15192 comm="syz.4.6134" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 1255.823346][ T31] audit: type=1326 audit(1791052527.243:9908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15192 comm="syz.4.6134" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 1255.823383][ T31] audit: type=1326 audit(1791052527.243:9909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15192 comm="syz.4.6134" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=356 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 1255.823421][ T31] audit: type=1326 audit(1791052527.243:9910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15192 comm="syz.4.6134" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 1255.823460][ T31] audit: type=1326 audit(1791052527.243:9911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15192 comm="syz.4.6134" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 1255.823500][ T31] audit: type=1326 audit(1791052527.243:9912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15192 comm="syz.4.6134" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71a75ab code=0x7ffc0000 [ 1255.823539][ T31] audit: type=1326 audit(1791052527.243:9913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15192 comm="syz.4.6134" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf71a75ab code=0x7ffc0000 [ 1256.421872][T15201] syzkaller0: entered promiscuous mode [ 1256.421896][T15201] syzkaller0: entered allmulticast mode [ 1256.511147][T15207] syzkaller0: entered promiscuous mode [ 1256.511175][T15207] syzkaller0: entered allmulticast mode [ 1256.700184][T16750] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1256.848386][ T30] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1256.851592][T15230] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6142'. [ 1256.855321][T15230] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6142'. [ 1256.857972][T16750] usb 2-1: Using ep0 maxpacket: 32 [ 1256.859799][T16750] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1256.860871][T16750] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1256.865593][T16750] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1256.865618][T16750] usb 2-1: Product: syz [ 1256.865633][T16750] usb 2-1: Manufacturer: syz [ 1256.865648][T16750] usb 2-1: SerialNumber: syz [ 1256.870175][T15238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6144'. [ 1256.882545][T16750] usb 2-1: config 0 descriptor?? [ 1256.892640][T16750] usb 2-1: No union descriptors [ 1256.895778][T16750] usb 2-1: unsupported MDLM descriptors [ 1256.935018][T15230] hub 1-0:1.0: USB hub found [ 1256.937777][T15230] hub 1-0:1.0: 1 port detected [ 1257.019939][ T30] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1257.021104][ T30] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1257.021149][ T30] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1257.021171][ T30] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1257.021195][ T30] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1257.021236][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1257.086174][ T5351] usb 2-1: USB disconnect, device number 34 [ 1257.326883][T15263] could not allocate digest TFM handle xcbc-aes-neon [ 1257.471845][T15263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6145'. [ 1258.079744][T16750] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1258.238785][T16750] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 1258.240421][T16750] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 64 [ 1258.240453][T16750] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 64 [ 1258.240501][T16750] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 118, changing to 10 [ 1258.240529][T16750] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 24940, setting to 1024 [ 1258.242910][T16750] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1258.242935][T16750] usb 2-1: Product: syz [ 1258.242948][T16750] usb 2-1: Manufacturer: syz [ 1258.454250][T15291] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1258.454396][T15291] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1258.466686][T16750] dvb_ttusb_budget: ttusb_init_controller: error [ 1258.466745][T16750] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1258.540402][T16750] DVB: Unable to find symbol cx22700_attach() [ 1258.594707][T16750] DVB: Unable to find symbol tda10046_attach() [ 1258.594726][T16750] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1258.664457][T15291] usb 2-1: BOGUS urb xfer, pipe 0 != type 1 [ 1258.664512][T15291] ------------[ cut here ]------------ [ 1258.664524][T15291] usb 2-1: BOGUS urb flags, 202 --> 200 [ 1258.664567][T15291] WARNING: drivers/usb/core/urb.c:533 at usb_submit_urb+0xc9d/0x18b0, CPU#1: syz.1.6148/15291 [ 1258.692843][T15291] Modules linked in: [ 1258.696809][T15291] CPU: 1 UID: 0 PID: 15291 Comm: syz.1.6148 Tainted: G L syzkaller #0 PREEMPT(full) [ 1258.707955][T15291] Tainted: [L]=SOFTLOCKUP [ 1258.712347][T15291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1258.723063][T15291] RIP: 0010:usb_submit_urb+0xd28/0x18b0 [ 1258.729411][T15291] Code: e8 1d 9b c8 fa 4c 89 f7 4d 8b 6d 00 41 0f b6 04 2c 84 c0 48 8b 54 24 18 0f 85 97 07 00 00 8b 0a 48 8b 34 24 4c 89 ea 45 89 f8 <67> 48 0f b9 3a 4c 8b 6c 24 08 4c 89 ef 48 c7 c6 a0 4f b0 8f e8 cf [ 1258.749456][T15291] RSP: 0018:ffffc9000e337918 EFLAGS: 00010246 [ 1258.755932][T15291] RAX: 0000000000000000 RBX: ffff888022bc2400 RCX: 0000000000000202 [ 1258.764050][T15291] RDX: ffff8880480149a0 RSI: ffffffff8cc53400 RDI: ffffffff908818f0 [ 1258.772236][T15291] RBP: dffffc0000000000 R08: 0000000000000200 R09: 0000000000000004 [ 1258.780306][T15291] R10: 0000000000000003 R11: 0000000000000002 R12: 1ffff1100457848b [ 1258.788364][T15291] R13: ffff8880480149a0 R14: ffff888028a55100 R15: 0000000000000200 [ 1258.796391][T15291] FS: 0000000000000000(0000) GS:ffff888124dc7000(0063) knlGS:00000000f53f6b40 [ 1258.805443][T15291] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 1258.812343][T15291] CR2: 000000002d30dff8 CR3: 0000000056fb0000 CR4: 00000000003526f0 [ 1258.821009][T15291] Call Trace: [ 1258.824816][T15291] [ 1258.827913][T15291] ttusb_start_feed+0xe19/0x1770 [ 1258.833392][T15291] ? __pfx_ttusb_start_feed+0x10/0x10 [ 1258.842439][T15291] dmx_ts_feed_start_filtering+0x129/0x220 [ 1258.848400][T15291] dvb_dmxdev_filter_start+0x434/0x10d0 [ 1258.854301][T15291] dvb_demux_do_ioctl+0x48b/0x540 [ 1258.859445][T15291] dvb_usercopy+0x199/0x2e0 [ 1258.864023][T15291] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1258.869660][T15291] ? __pfx_dvb_usercopy+0x10/0x10 [ 1258.874796][T15291] ? __fget_files+0x3a2/0x420 [ 1258.879599][T15291] dvb_demux_ioctl+0x29/0x40 [ 1258.884237][T15291] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 1258.889849][T15291] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1258.895881][T15291] ? kmem_cache_free+0x182/0x650 [ 1258.900911][T15291] ? __se_sys_futex_time32+0x3ab/0x440 [ 1258.906433][T15291] ? rcu_is_watching+0x16/0xb0 [ 1258.911658][T15291] __do_fast_syscall_32+0x27a/0x6a0 [ 1258.916926][T15291] ? do_fast_syscall_32+0x33/0x70 [ 1258.922106][T15291] ? asm_int80_emulation+0x1a/0x20 [ 1258.927265][T15291] ? do_int80_emulation+0x299/0x500 [ 1258.932572][T15291] ? trace_irq_disable+0x3b/0x140 [ 1258.938103][T15291] do_fast_syscall_32+0x33/0x70 [ 1258.943000][T15291] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1258.949862][T15291] RIP: 0023:0xf7f380ec [ 1258.954075][T15291] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1258.973928][T15291] RSP: 002b:00000000f53f650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1258.982522][T15291] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000040146f2c [ 1258.990781][T15291] RDX: 0000000080000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 1258.998862][T15291] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1259.006877][T15291] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1259.014949][T15291] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1259.023065][T15291] [ 1259.026141][T15291] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1259.033433][T15291] CPU: 1 UID: 0 PID: 15291 Comm: syz.1.6148 Tainted: G L syzkaller #0 PREEMPT(full) [ 1259.044419][T15291] Tainted: [L]=SOFTLOCKUP [ 1259.048742][T15291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1259.058831][T15291] Call Trace: [ 1259.062122][T15291] [ 1259.065058][T15291] vpanic+0x56d/0xa60 [ 1259.069061][T15291] ? __pfx__printk+0x10/0x10 [ 1259.073664][T15291] ? __pfx_vpanic+0x10/0x10 [ 1259.078182][T15291] ? is_bpf_text_address+0x292/0x2b0 [ 1259.083475][T15291] ? is_bpf_text_address+0x26/0x2b0 [ 1259.088708][T15291] panic+0xc5/0xd0 [ 1259.092446][T15291] ? __pfx_panic+0x10/0x10 [ 1259.096885][T15291] __warn+0x315/0x4c0 [ 1259.100872][T15291] ? usb_submit_urb+0xc9d/0x18b0 [ 1259.105820][T15291] ? usb_submit_urb+0xc9d/0x18b0 [ 1259.110776][T15291] __report_bug+0x276/0x570 [ 1259.115300][T15291] ? usb_submit_urb+0xc9d/0x18b0 [ 1259.120245][T15291] ? __pfx___report_bug+0x10/0x10 [ 1259.125300][T15291] ? ttusb_cmd+0x305/0x440 [ 1259.129738][T15291] report_bug_entry+0x19b/0x290 [ 1259.134609][T15291] ? usb_submit_urb+0xd28/0x18b0 [ 1259.139548][T15291] ? usb_submit_urb+0xd2d/0x18b0 [ 1259.144491][T15291] handle_bug+0xce/0x200 [ 1259.148737][T15291] exc_invalid_op+0x1a/0x50 [ 1259.153243][T15291] asm_exc_invalid_op+0x1a/0x20 [ 1259.158102][T15291] RIP: 0010:usb_submit_urb+0xd28/0x18b0 [ 1259.163662][T15291] Code: e8 1d 9b c8 fa 4c 89 f7 4d 8b 6d 00 41 0f b6 04 2c 84 c0 48 8b 54 24 18 0f 85 97 07 00 00 8b 0a 48 8b 34 24 4c 89 ea 45 89 f8 <67> 48 0f b9 3a 4c 8b 6c 24 08 4c 89 ef 48 c7 c6 a0 4f b0 8f e8 cf [ 1259.183282][T15291] RSP: 0018:ffffc9000e337918 EFLAGS: 00010246 [ 1259.189372][T15291] RAX: 0000000000000000 RBX: ffff888022bc2400 RCX: 0000000000000202 [ 1259.197357][T15291] RDX: ffff8880480149a0 RSI: ffffffff8cc53400 RDI: ffffffff908818f0 [ 1259.205345][T15291] RBP: dffffc0000000000 R08: 0000000000000200 R09: 0000000000000004 [ 1259.213334][T15291] R10: 0000000000000003 R11: 0000000000000002 R12: 1ffff1100457848b [ 1259.221325][T15291] R13: ffff8880480149a0 R14: ffff888028a55100 R15: 0000000000000200 [ 1259.229332][T15291] ? usb_submit_urb+0xce1/0x18b0 [ 1259.234306][T15291] ttusb_start_feed+0xe19/0x1770 [ 1259.239270][T15291] ? __pfx_ttusb_start_feed+0x10/0x10 [ 1259.244658][T15291] dmx_ts_feed_start_filtering+0x129/0x220 [ 1259.250485][T15291] dvb_dmxdev_filter_start+0x434/0x10d0 [ 1259.256054][T15291] dvb_demux_do_ioctl+0x48b/0x540 [ 1259.261088][T15291] dvb_usercopy+0x199/0x2e0 [ 1259.265608][T15291] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1259.271201][T15291] ? __pfx_dvb_usercopy+0x10/0x10 [ 1259.276256][T15291] ? __fget_files+0x3a2/0x420 [ 1259.280955][T15291] dvb_demux_ioctl+0x29/0x40 [ 1259.285555][T15291] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 1259.291036][T15291] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 1259.297020][T15291] ? kmem_cache_free+0x182/0x650 [ 1259.301972][T15291] ? __se_sys_futex_time32+0x3ab/0x440 [ 1259.307458][T15291] ? rcu_is_watching+0x16/0xb0 [ 1259.312252][T15291] __do_fast_syscall_32+0x27a/0x6a0 [ 1259.317469][T15291] ? do_fast_syscall_32+0x33/0x70 [ 1259.322505][T15291] ? asm_int80_emulation+0x1a/0x20 [ 1259.327623][T15291] ? do_int80_emulation+0x299/0x500 [ 1259.332829][T15291] ? trace_irq_disable+0x3b/0x140 [ 1259.338123][T15291] do_fast_syscall_32+0x33/0x70 [ 1259.343007][T15291] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1259.349353][T15291] RIP: 0023:0xf7f380ec [ 1259.353424][T15291] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1259.373036][T15291] RSP: 002b:00000000f53f650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1259.381461][T15291] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000040146f2c [ 1259.389446][T15291] RDX: 0000000080000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 1259.397423][T15291] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1259.405402][T15291] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1259.413464][T15291] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1259.421466][T15291] [ 1259.424649][T15291] Kernel Offset: disabled [ 1259.428967][T15291] Rebooting in 86400 seconds..