last executing test programs: 10.618180665s ago: executing program 0 (id=526): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000100058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) syz_usb_connect(0x0, 0x45, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040351201820001010203010902450002010080fa080b0002010020000904000000010120000924010002080900000904010001ff00"], 0x0) 7.45442306s ago: executing program 0 (id=542): syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x4e22, @remote}, 0xa) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x27, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_ENCAP_FLAGS={0x6}]}}}]}, 0x48}}, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x9, 0x4, 0x81, 0xffffffff, 0xffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x1, 0x2, &(0x7f0000000140)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x3}, @exit], &(0x7f0000000040)='GPL\x00', 0x6, 0x47, &(0x7f00000000c0)=""/71, 0x40f00, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000015c0)={0x1, 0x0, [{0x1, 0x9, 0x7, 0x1, 0x8}]}) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f00000000c0)=0x3) ioctl$KVM_KVMCLOCK_CTRL(r3, 0xaead) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0400000004000000020000000500010004080000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000d00390eee0ef87f7c05e1045eb163776a04b8c725d004be808b89941dc131cf3ec46e3cb5c4b603004175abdf8fc00c3b0dc012de29aea01ac01962a5a2dbd98e88c908682d6160fe804135d0d0b52d739bcf9e47d9ee070ddc74283e600f9f0f0b372", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000200"/28], 0x50) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000880)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1000700000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34cf2645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd673c1eeda4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d06c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235eaa92143ce4bb5c5acb290e8976dcac779ff0000f5620000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05be23dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe656c9c46bffbe9dd03970800000000000000d372bdd6f89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mq_timedsend(r4, 0x0, 0x0, 0x6, 0x0) r5 = openat$6lowpan_enable(0xffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$6lowpan_enable(r5, &(0x7f00000001c0)='0', 0x1) r6 = syz_open_dev$vcsu(&(0x7f0000000080), 0xffffffff, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000380), 0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={'cmac(camellia-asm)\x00'}}) sendmsg$kcm(r6, &(0x7f00000004c0)={&(0x7f0000000100)=@xdp={0x2c, 0x6, 0x0, 0x8}, 0x80, &(0x7f0000000600)=[{&(0x7f00000002c0)}, {&(0x7f00000003c0)="6ee0ec40b9b5c9a57091d84e71486e307a44595348cc398434a7a828081dfdcace6d4e71b850518e4e267bd633324c31782c2f92814ca995fee362acdbfc03e5232924fbe1ba4a6f3e7029fe7dca7a27bd32d14643e5dfa86155d384fc2763945fe35d324af37da50a1dfcc26b5108d2a53262d178c7b05c820522b737fe01697549940cf66a5c3dcfc0c01399", 0x8d}, {&(0x7f0000000580)="8f39b85bf27ff64e5c51d2c6e29f7e7e95c165f8426bc4ce6c1b5005a671770f8aa0f9d07ec3129a93698d23d5a59c31c290e8509d021fc91c357641a0c1dc5269394100b9741cd09c6c6f9c9758c0b0812a20883ee8f501444e6c635aa86335d67395", 0x63}], 0x3}, 0x40) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) 6.777208465s ago: executing program 4 (id=546): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r2, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='clear_refs\x00') write$binfmt_format(r3, &(0x7f0000000300)='0\x00', 0x2) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}}}, 0x24}}, 0x0) 6.726397743s ago: executing program 4 (id=547): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x5543, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x9, "", [{{0x9, 0x4, 0x0, 0x9, 0x3, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x1001, 0xff, 0x1, {0x22, 0x6}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7f, 0x1, 0x8}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) r1 = syz_usb_connect$uac1(0x1, 0xc0, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xae, 0x3, 0x1, 0x4, 0xc0, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x16}, [@input_terminal={0xc, 0x24, 0x2, 0x3, 0x205, 0x1, 0x8, 0xfffd, 0x5, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xfb, 0x2, 0x1001}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x9, 0x10, 0x1, 0x9, 0x4}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x5, 0x1, 0x7, 0x6, "ad53cc900b"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7400, 0x4, 0x2, 0x84}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x1, 0x1, 0x4}, @as_header={0x7, 0x24, 0x1, 0xde, 0x5, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x2, 0x1, 0x4, {0x7, 0x25, 0x1, 0xc, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x6, 0x1, 0x4, 0xc}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xf1, 0x4, 0x8, {0x7, 0x25, 0x1, 0xc, 0x79, 0x7}}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x0, 0x23, 0x95, 0x5, 0x20, 0x9}, 0xb4, &(0x7f0000000200)={0x5, 0xf, 0xb4, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x8, "3fbf09f740a0c6a064cec515798390ea"}, @generic={0x85, 0x10, 0x3, "c001fd91052541e3e6d81d1725a22032fbb3029a1735f7ad27a5de80231e2a0d719393e723dd6241045809455e05c2c775d1036613272f5a5856dfb25a298bc3cdf732fcfa6395d024605709e07968ead177df3348d69df4325f3f0934d5eb01c9f857c6c3b4e3391626a66540d9d922b7dfcb0fd4678742eaafb4e746dc2b3cab78"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x4, 0x4, 0x4ac, 0x1}, @wireless={0xb, 0x10, 0x1, 0x8, 0xb, 0x1, 0x7, 0xa, 0x1}]}, 0x7, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x140c}}, {0x5a, &(0x7f0000000300)=@string={0x5a, 0x3, "877b18540114e54af5fbe0221835ab1e8dbdb65a2a14363e43d73819dd53e63f6e427bd604f95f0cef1ab30ca77245a0c75116d2522fe675d6c557e82b1625a0649f004b42ad53c8ecda93688a6d714184bfa7b4e87cd462"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x411}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0xe0d9}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x41d}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x400a}}, {0xc8, &(0x7f0000000f00)=@string={0xc8, 0x3, "bf7f6c3b10a4ab45d0f2c4759ffabaed97f72a71f6d24eca397fa8a933b36b8d5461fc6422d1da893f28af85d232cd8065939acf6c5145867873e00eb5081d6660fe18aa665089057f16c6e4dc7d7537dfc4b8132e1530151d37edebd286dbfc58eff8705d2088c0686616c65879b087378820d69648b6c970426f312c5f71b37f5c1c6a36b102b437b1efd64350ed797380a2058b76c336c58e4f10ce817f127588a0817abc32a6350d39743bcfbfe8a6e85c2a6dd23c5375c311480e93fb399a1a13b90bd1"}}]}) syz_usb_control_io$uac1(r1, &(0x7f00000005c0)={0xc, &(0x7f0000000540)={0x20, 0xb, 0x4, {0x4, 0x8, "a039"}}, &(0x7f0000000580)={0x0, 0x3, 0x1c, @string={0x1c, 0x3, "3002b10b7cd4fa32d0e5436f42ff588a026f28f843364ab1f896"}}}, &(0x7f0000000800)={0x24, &(0x7f0000000600)={0x40, 0x14, 0x3, "01c9ec"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0xf8}, &(0x7f00000006c0)={0x20, 0x81, 0x3, "b8abbf"}, &(0x7f0000000980)=ANY=[@ANYBLOB="06000800e4ff1074ab63bf23001e661d043d32ea81351eae45770bf3ebb0a9738a452a3d80b0a4776e47cd74a245791ca2d7425572bbf1188311e070431b54096c1ad8fd85684fcde54adfaf9b8bc773f99d5876307de779b27fdc845f299298f4f30926af51994d0efb13da978297cc1e4f75e757c6cf843599919685fbf12092cd4b08e4c8e4e486fe1b948e73fb6da8da4bebafb654aac5fa5b0820524f7e8678f05614687cfcba8688b71f78c05485ef42728b0dbfcb73d4ff2e94194096f46eadc2ad4474a4c1d6dc478a9dd2eaaa76d32e00"/223], &(0x7f0000000740)={0x20, 0x83, 0x2, "832c"}, &(0x7f0000000780)={0x20, 0x84, 0x3, "2cb454"}, &(0x7f00000007c0)={0x20, 0x85, 0x3, "ef7fd0"}}) (async) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32) close(0x3) (async, rerun: 32) r4 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r4, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) (async) listen(r4, 0xa) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000840)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) r6 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0x6d1, 0x0, 0x0, 0x1000, 0x5}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_queues(r5, r10, &(0x7f0000000540)={0x0, 0x1aa2, 0x80, 0x2, 0x20000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x803104, 0x2, 0x0, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587d, 0x4, 0x1, 0x69, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffe, 0x800, 0x10004, 0x400000, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6253, 0x20, 0x3, 0x0, 0x0, r5}}], 0x1, &(0x7f00000003c0)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0xdbc, 0x0, 0x0}}, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x4}, 0x94) recvmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2000) (async, rerun: 32) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) (rerun: 32) openat$fuse(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x300) (async, rerun: 32) setsockopt$inet_int(r3, 0x0, 0xd, &(0x7f0000000180)=0x80, 0x4) (rerun: 32) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0xca, 0xac2) (async) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x2b}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async, rerun: 32) syz_open_dev$hiddev(&(0x7f0000000480), 0xffffffff, 0x42102) (rerun: 32) r12 = socket$inet6(0xa, 0x1, 0x8010800000000084) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r12, 0x84, 0x8, &(0x7f0000000100)=0x1, 0x4) (async, rerun: 64) sendmmsg$inet6(r12, &(0x7f0000002140)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x1}], 0x1}}], 0x2, 0x4008040) (async, rerun: 64) read(r11, 0x0, 0x1a) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000240)={0x6, "0659dc2a4d18829bbfc530c92dff81cac142a1ce3a056f3348823f8f2891f8f4"}) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000280)={0x13, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"}) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x10001, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25"}) 5.773022417s ago: executing program 1 (id=551): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) socket$inet6_udp(0xa, 0x2, 0x0) r2 = io_uring_setup(0x5d02, &(0x7f0000000100)={0x0, 0x97a4, 0x8, 0x0, 0x192}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x5, &(0x7f0000000e80)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f0000000200)={0x13, 0x10, 0x8, {0x0, r5, 0x1}}, 0x18) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10) sendto$inet(r3, &(0x7f0000000100)='$e', 0x2, 0x20008005, &(0x7f00000000c0)={0x2, 0x4e20}, 0x10) (async) readv(r3, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/210, 0xd2}], 0x1) (async) setsockopt$sock_int(r3, 0x1, 0xa, &(0x7f0000000140)=0x6, 0x4) (async) recvfrom(r3, &(0x7f0000000300)=""/102, 0xfffffffffffffe30, 0x736, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100002b715f08e11d02c1894d0000000109021200010000006c0904"], 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/config', 0x0, 0x0) getdents(r6, &(0x7f0000000200)=""/226, 0x13) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @adapter={0x7, 0x6, 0xaaca, 0x80000001, 0x2}}]}) (async) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x40000002, 0x0, 0x7}]}) (async) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000140)={0x0, 0x401}) 5.674642926s ago: executing program 0 (id=552): r0 = syz_usb_connect(0x0, 0x4b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b05100001010200010902390002010080320904000000000000000904010000000000000904010103000000000705010240000007058102400000070582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$dvb_demux(&(0x7f0000000200), 0x1, 0x2) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f0000000300)={0x2000, 0x1, 0x1, 0x0, 0x4}) 4.689845979s ago: executing program 2 (id=555): r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000340)={&(0x7f0000000040)={0xa, 0x4e23, 0x20, @mcast1, 0x4}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=[@hoplimit_2292={{0x10, 0x29, 0x8, 0xf}}], 0x10}, 0x800) 4.571670667s ago: executing program 2 (id=556): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c00000010000500"/20, @ANYRES32=0x0, @ANYBLOB="01000000010000001400030073797a6b616c6c65723000000000000008000a00", @ANYRES32=r3], 0x3c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c73d8a0870272091776c0102ef010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, &(0x7f0000002980)={0x34, &(0x7f0000002780)={0x40, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r5, 0x0, &(0x7f0000000b80)={0x34, &(0x7f0000000980)={0x20, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$inet_sctp(0x2, 0x5, 0x84) close(r6) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010100}]}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1, &(0x7f00000000c0)=[@sndinfo={0x1c, 0x84, 0x2, {0x6, 0x4, 0x29, 0x200000e, r8}}], 0x1c, 0x2400e044}, 0x24008026) r9 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r9, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, 0x0, 0x0) close(r9) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) syz_usb_control_io$sierra_net(r5, &(0x7f0000000240)={0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="200873000000730899166ea4c08042cf3002b2e167ff97e22e53493c0f92ee50d3b6043fd9be1152a843daf395c10feeac2f9fdde29c6ed8b85704940f761d57d31d72de14c1f5a139f7a078e8725da660fdbbe98125945a15529cfe9b24971d6d63862401127005a5334b47494dc02efb67f7d9be9309ef1de6e8264b4314"], &(0x7f0000000180)={0x0, 0x3, 0x5e, @string={0x5e, 0x3, "eef99072f7353f01c7aa66e9d81488efe8e44a910c262612c3bd3e05bd1e0273b8e1903f2cd6e66121e26139638b53093e900cc005a4ee3a2572d90d4b9713d9f8634a316c4d67c653b1964a54d76ed1b537b6d4d00e76992165bc79"}}}, &(0x7f0000000840)={0x10, 0x0, &(0x7f00000003c0)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000800)={0x21, 0x0, 0xfffffffffffffe30, "a9acbf2b"}}) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x2, &(0x7f0000000080)) mprotect(&(0x7f00008f4000/0x1000)=nil, 0x1000, 0x2) syz_usb_control_io$sierra_net(r5, &(0x7f00000009c0)={0xc, &(0x7f0000000300)={0x0, 0x30, 0x6, {0x6, 0xf, 'TCoS'}}, &(0x7f0000000880)={0x0, 0x3, 0x62, @string={0x62, 0x3, "8ba8517351f9d71b744dadaf33d5beeb282a98b9dadd2ff51683d22efe16a452f03a2bb2c71eb3a69432f5a5b3a627d38634c0cdf5b1a943dd7ef20de220f522b26c433322533f4db84f3fad0fd9bb384aa1f33059db72036df414e231e0209f"}}}, &(0x7f0000001040)={0x10, &(0x7f0000000a00)={0x0, 0x6, 0x31, "492be1879f4e7bb26ce68f90af1513d83ce0f9701e9768d8935fc28ac47010736953f282dc71715e1e5849dab013dd06e1"}, &(0x7f0000000bc0)={0xa1, 0x1, 0x400, "c19518a0cba6a18248ad0607a9009800e8865a0b92765964f7a2f663a2443e44dd1e45fb7ad34411af2d521685a4237b1b6ff7f7f86312956e8578d9e89fe96205a656f7e16eccee333cff206a7d7001f1a8ae7a43345a7d23d19ccc24cfa44d0bb2c5b40facd7fe516069def82f67e879d5a5930034af7d90d9c34c6608f4b52d5121f59816af1d286cc0e16af1fe89acccc54815f7333cbbdb099b8d48e97bedcae4d71e3faaf3c3560ce57aad5fd9ef35e271c8693954fdb1cd3098d32783c52ec6be82abdd4ff155c082f963a7d537cc9aec507beacd4cbc00e20a16be3e1fe904d7bb8f5061e98352c9d84ecee98d4e2b977d76c29e4f9e2ccb9ac87d3e21bba91616395b80d9c682fbc47610dbb46a42d8cc92ef0cdbc4b68171ce0306505c3b444913051cc3add6f9805e1c955554c7e232599f9a1f265363834a908569f6f8708d3c7844975de7161fedff6c7bfc51eff636b23b420e8dfd72ca09185364f9a7515ea8a82ad205718b10f7cee6c58ca2e305c25bd07f5f7f824b1fa1142b9dc347a7c9e173368c6a743a8f2875fa47d29fdbf42d0f364fe0d68da36bccdfef198863b0837c69ebe257c6928a6f1d23bf4a21ac9f07a687ed051926c9da16884aa46f555544511f3f8a436a666449112623082c23df2faef873410650a174df1379286b3ff33ff02e3aac5d3d1e1ffee036e3fa6910d0d4496afca121e13ced841f5418b1afdd2eeb0e6acf00e06bb9b12ccde8ec3916385f61bbfdcf19422261971eae3da2260de162f86e528102c821d4dac31a2f9ceab6f2f17db4fd2ee727a5bd1d0fab9290a656052602f7c81451ba68ed8c229d3f31371260c002949c1c9598b8fae8481537fd0bcaf19fad6f8c1dabc3a04a2135a7b6c954d4ed2bc10776271672892396e524a5c63a100c239527593c3867eb0f750a5d9c94cfccf228416bca27690f56b95e468f94137a5a324de2e0d35418350fb2fc139e3d34d1326c2120feff7085801d6c01a09e7fa9897f53ece62e089d85487ff897b7853faa3dd2265590a01019e971cab31d67bcf40bad65271bfddb7d7623284a0703f71c20e0d7bec01cb54ff6cad69056c3aeb6ed58a815637d0dc7bf36ed942fa7293b5c091cd942fa9832c20991359bb32f73dc81ecfbf9a20818f820378e3b85d984b0253cac9e8266c204c0da0a0229c5659d685b6dadd85e2a6ed34347bda1df2b8a15e8c652a49904a847ed142b446d68af85a494be9ec9860601111a4edaf2b9a023c7864d211ab605d35eaa29b50ef46015c23698dc87192fb42b3031097cb0d19f9ed3954f022f6209ca179021bbe85ff3a60c35f70cc883675fe2f90c22ab91f68b0ba6598ac11faacafa64c9d7b4372e7df07e5ef008cc3d0e15cc3c43f0304835601cbb7211bfd7a76e92ff57de863100358bdf81e7a78ddc97"}, &(0x7f0000001000)={0x21, 0x0, 0x2, "57bb"}}) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x18, r10, 0x701, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000810}, 0x0) write(r0, &(0x7f0000000700)="ffffffffffff0011223344554305000f32111800000100112233445500112233445500ff0040", 0xfdef) 3.977326045s ago: executing program 3 (id=559): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000001bc0)={'#! ', './file1/../file0', [{0x20, '#2\xb7\xfd\x84\xb9&\xc8! '}, {0x20, '\xecM8\xc6!\xb45Z~AD\t\xc3n\xc1i\x12\xc8\x9cW)}@M\x18\xcf\x93\xdbP\xc6C=\x84\x13\xb1?\xc0i\xbaE\x03\xb1J)\x99\xed\x939\x9ff\x84+r\xbf\xb77\xc3\x00\x00\x00\x00\xdeq\x01!\xd2\xe5\xc3\xffi\x11n\x8b\x8c\b\x1f\xd0sG@\xdd\x17k\x14r\x01\x18R\t)\x117\x8f\xddZj:\x8aA\x1fx\x97\x8f\x9d\x8eY2P4\xc5\xb3\xd1\x1a)I\xb9\xbbp\x06\a\xfe\xce\x11\x8ba\x9c\x82\xfd\xa4g\x87\xa6\x00\xcew\xb7A!Cx\xb5\xfe\x8f/8{\v\x14A\xe9*\xfa\xaf\x8b\xd2\xcfq@qS\xe8\xe4\x99{#\x1e\xfe6c\xac\xac\xc6N<\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00%+H\xcaN\xb5 u?\x1c9\x00\xfc\td\xc6\x13-\xa3\xd6\x84-HH=\xaa\xdc\x1d\xd7A&\xeb\xfe\x88\xf9\x80D\x9fH\xe0E\xe9|no\xac\x18\x80u&\xbe\xef\x1a\x8c\xea<\x8e\x9c\xf9\x1bZ\xa9]#\xeb\xb1\xdc\xdc\xc6Q\x03S4\xc3\x94q\x18 \xbcxXR\x92\x98_\x1d\xcc\xfb\xd7r\b\x93\x9e\xe8R\x8e0\xddqj\x87\xde\x1a\xdb{\xf8\xb9\xf4\xd2#\xda;\x13\xa1\xa6\xc6\xc9b\x16\x82\xfa\xe3\x01\xf6CKhO/\x7f2\x8dJ\x88\x04:\xf4\x7fk\xff\xcbY\x11\x1e^H\x9c\xa7i)\xe7 \xed\xbe\xa5B\x9cc4\xc2\xbb%R\b\x8c\x97\xc1\xfb\xea\x02r\xa0\x7f\r\xa12\xc4S\xcb\v\xc3\xe2\x8d[\xd6\xc7\xe4\xc0z\xb8\xcd\xe2\n\xb5r;\xdc\xbf\x86\x83r\xbe\xb1LA\xea&C\xf1\xfbn\xb3\x99\xc8\xc4twd\xa9\x80\x85q\xfe` \xc8g\xe5'}, {}, {0x20, '/dev/loop#\x00'}, {0x20, '#! '}, {0x20, '#! '}, {}, {}, {0x20, '\xecM8\xc6!\xb45Z~AD\t\xc3n\xc1i\x12\xc8\x9cW)}@M\x18\xcf\x93\xdbP\xc6C=\x84\x13\xb1?\xc0i\xbaE\x03\xb1J)\x99\xed\x939\x9ff\x84+r\xbf\xb77\xc3\x00\x00\x00\x00\xdeq\x01!\xd2\xe5\xc3\xffi\x11n\x8b\x8c\b\x1f\xd0sG@\xdd\x17k\x14r\x01\x18R\t)\x117\x8f\xddZj:\x8aA\x1fx\x97\x8f\x9d\x8eY2P4\xc5\xb3\xd1\x1a)I\xb9\xbbp\x06\a\xfe\xce\x11\x8ba\x9c\x82\xfd\xa4g\x87\xa6\x00\xcew\xb7A!Cx\xb5\xfe\x8f/8{\v\x14A\xe9*\xfa\xaf\x8b\xd2\xcfq@qS\xe8\xe4\x99{#\x1e\xfe6c\xac\xac\xc6N<\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00%+H\xcaN\xb5 u?\x1c9\x00\xfc\td\xc6\x13-\xa3\xd6\x84-HH=\xaa\xdc\x1d\xd7A&\xeb\xfe\x88\xf9\x80D\x9fH\xe0E\xe9|no\xac\x18\x80u&\xbe\xef\x1a\x8c\xea<\x8e\x9c\xf9\x1bZ\xa9]#\xeb\xb1\xdc\xdc\xc6Q\x03S4\xc3\x94q\x18 \xbcxXR\x92\x98_\x1d\xcc\xfb\xd7r\b\x93\x9e\xe8R\x8e0\xddqj\x87\xde\x1a\xdb{\xf8\xb9\xf4\xd2#\xda;\x13\xa1\xa6\xc6\xc9b\x16\x82\xfa\xe3\x01\xf6CKhO/\x7f2\x8dJ\x88\x04:\xf4\x7fk\xff\xcbY\x11\x1e^H\x9c\xa7i)\xe7 \xed\xbe\xa5B\x9cc4\xc2\xbb%R\b\x8c\x97\xc1\xfb\xea\x02r\xa0\x7f\r\xa12\xc4S\xcb\v\xc3\xe2\x8d[\xd6\xc7\xe4\xc0z\xb8\xcd\xe2\n\xb5r;\xdc\xbf\x86\x83r\xbe\xb1LA\xea&C\xf1\xfbn\xb3\x99\xc8\xc4twd\xa9\x80\x85q\xfe` \xc8g\xe5'}]}, 0x374) ioctl$XFS_IOC_FSGEOMETRY_V1(r1, 0x806c5864, &(0x7f0000000640)) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) personality(0x619641b6fb4b8591) syz_usb_connect(0x4, 0x9c3, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0x42, 0x23, 0xd6, 0x8, 0x1a79, 0x6001, 0x6854, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9b1, 0x4, 0x7, 0x8, 0x30, 0x5, "", [{{0x9, 0x4, 0x9c, 0x4, 0x3, 0xbf, 0xee, 0x8d, 0xa7, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "571302dd"}, {0x5, 0x24, 0x0, 0xc805}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x4, 0xff, 0xd}, {0x6, 0x24, 0x1a, 0x21f, 0x14}, [@country_functional={0xa, 0x24, 0x7, 0x6, 0x50d, [0x12, 0x7fff]}]}, @uac_as={[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x101, 0x4000, 0x4, 0x4}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x2, 0xaed, 0x2, 0x2}, @as_header={0x7, 0x24, 0x1, 0x6, 0x1, 0x3}]}], [{{0x9, 0x5, 0x0, 0x12, 0x10, 0xfc, 0x7f, 0x4, [@generic={0x7d, 0x21, "89fc18e99051a3d60cac3fd5e57db193c1d091f0e578ab474d60905ceed0173c07d396a29cfa6b201bebad45a22b3f7fc0c5e32a3d2c8180255950b89a0e39c06e2694e2c07cd352528fd5ba10cc86ab915c1a04f94cf0c5bde4785cd89f921092ef2d453f21405feb39b0e0f2332c84e6431fdf0058c3da950564"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0x1, 0xf9, 0x3, [@generic={0x31, 0x1, "51be5b45796f4b97297eb942e9bbecba50466cf075022045e812c6c2f509e0cee9393159f545ba42493e0012d6a840"}]}}, {{0x9, 0x5, 0x7, 0x1, 0x200, 0x4, 0x6, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x40}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x9}]}}]}}, {{0x9, 0x4, 0xcf, 0x5, 0x5, 0xa5, 0x84, 0xbd, 0x9, [@generic={0x44, 0x1, "f726df91b9bd3862b0bb473f62e7f14df4dd32b1c01189d6879ce354012063f5b6604a422ec7ce1651b1ac326a866df99a224d4d1882ebd4ad10a870f9b720e2a6b4"}], [{{0x9, 0x5, 0x3, 0x8, 0x8, 0xe, 0x8, 0x4, [@generic={0xce, 0xe, "d9346da6125884693817d5609e6a917e41ed12c8bb2091f887e7228bb4c34af9a147fd19a72be91759eb2b6e36358bb3dd367c426fd3d57102acf3bd061ca422bfac851cc421dee871afe49c4dd77ef79e2e1b55a0798662a3fd8d529b44a9806f7f0a38cd467b3719deaa9460d15278d14d9691e854b923de35225b652cef9666b54a22bcc0be45bc3e0c61a1134e2644d06aa242d17ba52c01206aab12ca6b0695e0e3fc2803b76a0a05a835512e1922451e50a1d473a01b0f38ab7ce4e5506e0e7a25daac98e8e9c68f16"}]}}, {{0x9, 0x5, 0xa, 0x8, 0x10, 0xf, 0x46, 0x40}}, {{0x9, 0x5, 0xf, 0x3, 0x8, 0x40, 0xb, 0x8}}, {{0x9, 0x5, 0xd, 0x2, 0x400, 0x3, 0xe, 0x4}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0x5c, 0x1, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x40}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x9}]}}]}}, {{0x9, 0x4, 0xb7, 0x4, 0x9, 0xf9, 0x11, 0x40, 0x80, [@uac_control={{0xa, 0x24, 0x1, 0xb, 0x1f}, [@input_terminal={0xc, 0x24, 0x2, 0x2, 0x402, 0x2, 0xdb, 0x7f, 0x7, 0x8}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x302, 0x6, 0x4, 0xfa}]}, @hid_hid={0x9, 0x21, 0xfc01, 0x7, 0x1, {0x22, 0x78c}}], [{{0x9, 0x5, 0x80, 0x3, 0x3ff, 0xf1, 0x8, 0x4, [@generic={0xe2, 0xe, "5c90403336abb81097bf9046bebd2960da8308ac00f93fc6d351d8376d4ec59e0b933abbb49225772ea4f5c84e8c40c97aedbb2e5b913f17321d8c5fedf3f88a2e9b2e473ae93d66dd286711e9f67987b0bd64dfd282b0ca850ddecdbab3256c249dd9a9f9aeee8fef051db264f355d39b186aba3042a5dc036e000ff9004877ba6259976ddc89dad33b658e1ed48d3d3b24a9441252d1eb82abf1fdedbd616b8b33c3993b4ff842c515398ef73884e2afe43b7b1db9091770c2abf5709e7df7a9725254891ef627917425118a1c7a7d3d701839fddf76bd19e05d136d4d0c14"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x10, 0x1}]}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x7, 0x0, 0x6, [@generic={0x35, 0x23, "03e14e46e3648d7ca5e1b5cd374f3a861cf095c78856e7121c1fc1c6e4ee0cc1e12bdfd4f85c2103339f810a7587a8afc03196"}]}}, {{0x9, 0x5, 0x8, 0x3, 0x20, 0x6, 0xfb, 0x5}}, {{0x9, 0x5, 0xd, 0x4, 0x200, 0x24, 0x40, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0xded6}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x7, 0x7}]}}, {{0x9, 0x5, 0x80, 0x3, 0x3ff, 0x0, 0x3, 0x1, [@generic={0x5, 0x30, "8d96fe"}, @generic={0x2d, 0x6, "ceb0b567298543b1f4bafd016bb5c32285e8ca51107fbe172b5b0509f30f6defbc141ef91ff7f16eb0fdb3"}]}}, {{0x9, 0x5, 0x4, 0x10, 0x400, 0x8, 0x1, 0x4, [@generic={0xa0, 0x5, "0daedb7867f8d19bb450ae36affa98d20a843da3a77da5e34fd461580dbcc22b9d29cef6b108302bc03e212ae4072029083eaa7ec4842986f0dcba868f211cc2ac331d73f885c527be9f2b52079a0832b1e208fd10a88a1ca1525e0c1b31618365a337cf258c44dee701e4b0a6cf884ba5d2918ec3fe300f67511a38852c77e9ed631004bf0aee3e98485a3d7e1cd423f03d9a47a6bd6ba6d5bdf7854c22"}, @generic={0xa1, 0x4, "f3439a75ed07a1f98e98ebac9c3226d5b394272cbdd9a34a0c23cd95146489466b18c0c1f3203bce8d3867f9d397afc223eefa549111e817deb0faf1fc2a5128a051bcb8334066f3c3c8cebc9c65cacb41908218b42edf8586611d48ac5343f7935c4fe7d5604251c6719b1f39f8f2e43641b4ed4e8eac6d13782f1ef18aafbbead336aadfe6cde6530f507a835137448c4de41ae8634954e65bc05a7fb73d"}]}}, {{0x9, 0x5, 0x4, 0x2, 0x400, 0x1, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x18, 0x8, 0xff7f}]}}, {{0x9, 0x5, 0xa, 0x10, 0x40, 0x80, 0xa0, 0x6}}, {{0x9, 0x5, 0xa, 0x10, 0x200, 0x8, 0x2, 0xdb, [@generic={0xe6, 0x21, "4881d753ce72d21e6fab1046dd5b93242cb06c391402a9163557b9e9b727095298340113fef0e9308cc0c03b6aa7b0f9f7e96c45166c9de0f9c1bd010d8e9e7e4687b21d1916223794520c7b81897b04f95ebde29299ca1a3f5332275e42bee0bd3546c1730579eab17607879d0dae9fcdb409ca271890e4807b81b57ec06be3e38b2ae459f0567ae7c63a9775207fa127e88c52ca3c9ff3dda6a3c0aab916b9fad1d947d9d59e6bcd3e310914353f53db4232e59aeaf5e2589db79d6e7a1606e43f5844e13ec4c0ca2cf8ca28c319202dd197bd8a1f781ecd2c0986c63d671e327e45fb"}]}}]}}, {{0x9, 0x4, 0x7, 0x2, 0xe, 0xfe, 0xf0, 0x54, 0x0, [], [{{0x9, 0x5, 0x0, 0x1, 0x200, 0x9, 0x3, 0x3, [@generic={0x7c, 0x22, "f7ff9658987356e11b9e126b49b4945181c5ea5947f683ffcdc6bd3f0abf0a843d0cd53e486f818f82cfec3b83e2321e0e976f92ad6a9e40b57332dbaededbf2ba6c43b71fa190e512c16f111f7ed5b2d498a877bb2cfbf6f18104ac309a5285ed91c86271f884c85ed7401f70c2fd687f83a7494a3e51e38b37"}, @generic={0xc, 0x11, "0048e48343c964763483"}]}}, {{0x9, 0x5, 0x86, 0x4, 0x200, 0x5, 0x0, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x6, 0x5}]}}, {{0x9, 0x5, 0x8, 0x10, 0x20, 0x2, 0xc, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0x4}, @generic={0x77, 0xe, "09803d76fa2882116bb8615ce90262e3ef4e72256e9e894c79ff73035ac6781966f70c1ecf44f4586d98bdbbe5ba517fb5eca89c25ae3bd877805641086e9b996f29fef5092e7d51ad11291854fefcfd240a3f72db4b33807ec80af06161725304498ab605bf2f8b3cb57a51899edc9f35c156c0ad"}]}}, {{0x9, 0x5, 0x5, 0x1, 0x3ff, 0x8, 0x0, 0xdc}}, {{0x9, 0x5, 0xa, 0x9, 0x8, 0x7, 0x3, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x86, 0x1}]}}, {{0x9, 0x5, 0x80, 0x2, 0x3ff, 0x0, 0x3, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xe, 0x1, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x8}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x3, 0x8, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x8, 0x7}]}}, {{0x9, 0x5, 0x1, 0x3, 0x200, 0x8, 0x3, 0xf1}}, {{0x9, 0x5, 0x5, 0x4, 0x400, 0x40, 0x3, 0x4}}, {{0x9, 0x5, 0x6, 0x10, 0x400, 0xd6, 0x6, 0x7}}, {{0x9, 0x5, 0x9, 0x10, 0x20, 0x4, 0x10, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xec, 0x1}, @generic={0x1d, 0xa, "ae4f43c3f62c921b9a47b1472f9cf4e406e93d93badbb82840b09b"}]}}, {{0x9, 0x5, 0xd, 0x4, 0x200, 0xc, 0xfb, 0x8}}, {{0x9, 0x5, 0x2, 0x0, 0x60, 0x3, 0x4, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5, 0xffe3}, @generic={0x7c, 0x4, "3da909918413ab442c8be78b4845dd588475470e29b0714c692de9d50fb51e384b86057074ec78d557caa2d3417e680f259374c07a8d6858c27f599ddcea071a2b3d40581949ac78555ff319ba27f0ba45eb7b5098726c76e081f18cd68f5a8c3434f2a334cf1e889513412d37a7391252ed1e71cdfac25fb150"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0x76, 0x1e, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8}, @generic={0xc0, 0x1, "9416667559681b8934745c7106b92b879dacfcda5abf1ac5579e80cdeb688c5abc377d8395072db6f39066566f1a1b0bda0778407737a329c3284db704882d17c19e5af6157c757de1d627867e221a205be895e28e24377d0f1047d8c2f53202cc90c43770014db3f553ac7c53f44561c8503b0c39bc6658bf3fe3960009b7a02b3a5847d509e2172d4be578f3334724de9b907e053557a5f59605d638cf786f4fc7d2c0f1206e27c53b7209afaa99acf2fef84fb3a77de48e42e74bb252"}]}}]}}]}}]}}, &(0x7f0000001300)={0xa, &(0x7f0000000e00)={0xa, 0x6, 0x250, 0x5, 0x10, 0x81, 0x10, 0xa}, 0x2e, &(0x7f0000000e40)=ANY=[@ANYBLOB="050f2e00060b10010c18000803040008639ffa611003000200028105d703100b03100b0b1001020c003305001008"], 0x9, [{0xbc, &(0x7f0000000e80)=@string={0xbc, 0x3, "5615a3471144bff02d9fad55ee65a0a1f294a389ea165eea4eab3eba01ce2b181beb0dae5fdcf42c727b2b6a3d3ebf4b4255991380acf9d1634405cbb2535122fe52f587f231674606786319c94ebb2bbc5b6870d98eaadb2f627a152a920b2f17e70325de720ab9cb749ea91054c41de3dada5b2162abd323cb232949cbf0334f5f320908b1f4a6d4d07a698bab9980de08678e76a19fa9f73cd8dc852e57ac9d599b6bf14bd78b94b61012351b587bda008460d4f951893b2f"}}, {0x4, &(0x7f0000000f40)=@lang_id={0x4, 0x3, 0x40b}}, {0x4, &(0x7f0000000f80)=@lang_id={0x4, 0x3, 0x820}}, {0xbe, &(0x7f0000000fc0)=@string={0xbe, 0x3, "d2f53f83b1249d3905363eb98402febe27624414bc2ca4f5f75cf3ab549a0dc23459bba0dd26845e2adab3aa2fbc58b4a508f156bb4092ceb19d6520826431ecd89b2e2034157031ae2119bcff676543d61816b257a57ac1ba4b897055ffcb20bc9bd7f6b1973d062d094872d6bb96b3a97a4e85980d38889bdf117030416592b8c10600cd75f297564f436c7480c3debcd90832522cc613089b14e6f1b038459142757783234b2e2703790289bf01cb449ea75a9b56b2534aaae934"}}, {0x4, &(0x7f0000001080)=@lang_id={0x4, 0x3, 0xfcff}}, {0x4, &(0x7f00000010c0)=@lang_id={0x4, 0x3, 0x3009}}, {0x5, &(0x7f0000001100)=@string={0x5, 0x3, 'Y|N'}}, {0xa1, &(0x7f0000001140)=@string={0xa1, 0x3, "3230a9aab24c608d379390131c1372fd315b28e8e23656d09cd46ea356f961566b2e07bbce67c40363b8003fc3be7579b9178c4e36e2f7d88f0e6113ea8491b5895887a670ed92c18dc1fb586bceb436b15e83eee0c916946be9e42c3c52f706442dee90e5d6205ece7c17fa43a04682ae46a9ab4f1c93ca9815d36140d5ee237f6a9135f690db11f908dd989c011dee5d29429f002ac916fcabf0680007f7"}}, {0xc6, &(0x7f0000001200)=@string={0xc6, 0x3, "db5ea90a709b47077f69a3afd96518b53edfdf9bef630d2f719fac56e31939a89a0e339a142d18cd2179aa24e7cf4ffd1efaff359ceff3465f6e8e936f30fa8e03f7a67505eb6c09825df29cf1efc6d3f6a4ba98b1c90fec9f40a73c4cd781eb11634db1bcbd9618adb3f84f409ba083385d278ff0b1a8bba5274389e43480075aecf022453b7e7ef81b1744314689291d793ae8cf86e2490ab4f2c5d9ec2094002b89cca90978ecbe840470bef0e7fd480f978afd659d8186c27b528f4cc9743ab755ab"}}]}) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/nf_conntrack_expect\x00') ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f00000000c0)=@get={0x1, &(0x7f0000000040)=""/115, 0xf4}) 3.300288943s ago: executing program 4 (id=560): r0 = syz_open_dev$media(&(0x7f00000003c0), 0x2, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001140)=[{}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') setns(r1, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000b00)={{{@in=@rand_addr=0x64010102, @in=@broadcast, 0xfffc, 0x5, 0x0, 0x0, 0x2, 0x0, 0x10, 0x1}, {0x7fe000000000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0xffffffff, 0x4d2, 0x32}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0xb7, 0xb, 0x81, 0x4040000}}, 0xe8) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r3 = syz_io_uring_setup(0x3639, &(0x7f00000005c0)={0x0, 0x2, 0x100, 0xffffffff, 0x2e}, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f00000006c0)=@IORING_OP_FUTEX_WAIT={0x33, 0x1, 0x0, 0x6, 0x401, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x10000fe2e}}) r7 = openat$sequencer(0xffffff9c, &(0x7f0000000180), 0x212081, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r7, 0x80045104, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xd, 0x0, 0x2, 0x0, 0x37c60, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2}, 0x50) io_uring_enter(r3, 0x6516, 0x6d93, 0x8, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00'}) 3.013763906s ago: executing program 3 (id=561): unshare(0x400) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) 3.010686539s ago: executing program 4 (id=562): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x30, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4005, 0x19ee0}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0xc001102c, 0x0, 0x9}]}) (async) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='fd', @ANYRESHEX, @ANYBLOB=',rootmod=000000000000000', @ANYBLOB="26ea654f494912e990c74e2de7104f5402607b4dda730d4870c29ca6a77b5381d502968ecf91d5a581d05d7d606eacfded37112b7d5c8a99d963ca465ca5a57d28d74864fc96950bfd888adf6a0ef109650b5f61a810885bcccd9b897ce60c0fdec3fbc8e92e780d9539c2d0c9bfa7ca763f10006e305dd89a2afa22d707a23f6cd89ad23bd534cd"]) (async) r4 = memfd_create(&(0x7f0000001cc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0sr\x95\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\x00\x01\x00\x00\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) (async) r5 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) (async) r6 = syz_usb_connect(0x0, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b06100001010203010902450001010080fa0904000002ff000000070503020002"], 0x0) syz_usb_ep_read(r6, 0x3, 0x0, 0x0) (async) fsync(r4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = syz_ublk_setup_io_uring(0x7377, &(0x7f00000001c0)={0x0, 0x6658, 0x8, 0x2, 0x12}, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)) ioctl$XFS_IOC_FSGETXATTRA(r8, 0x801c582d, &(0x7f0000000300)) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000400)={0x30, 0x3, 0x8, 0x301, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x670}, @CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x3}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x28000004}, 0x18) (async) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r5, 0x1, 0x0) fchdir(r9) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) 2.864859456s ago: executing program 3 (id=563): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1a82, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x301142, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x5961, 0x10000, 0x0, 0x4e}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000140)={0x0, 0xffff, 0x0, 0x0, 0x0}) timer_create(0x5, &(0x7f00000001c0)={0x0, 0xd, 0x0, @tid=r7}, &(0x7f0000000200)) syz_extract_tcp_res$synack(&(0x7f0000000480)={0x41424344}, 0x1, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) r10 = socket$igmp(0x2, 0x3, 0x2) r11 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r11, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r11, 0x4008af03, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r9, &(0x7f0000000000)={0x0, 0xfffffffffffffd9d, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@multicast1, @in6=@mcast2, 0x4, 0xb6e, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in=@loopback, 0x4d4, 0x32}, @in=@rand_addr=0x64010101, {0x0, 0x0, 0x1, 0x8000000000000001, 0xfffffffeffffffff, 0x10, 0x8001, 0x543}, {0x4, 0x7fffffffffffffff, 0xb, 0xfffffffffffffffd}, {0x0, 0xe}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x40, "66d38547aa140d000000000000000086cae9fb4f"}}, @offload={0xc, 0x1c, {r12, 0x5}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2094) uname(0x0) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) syz_emit_ethernet(0x15d, &(0x7f00000004c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c20000038100480008004067014b0068000000069078e0000001ffffff572c695f00890bedac1e0101ac1414aa440c6b930a04000000000000001bbeac1e010102004729e0000001ac1e000100000000ac1e0101442c815000000002fffffff900000005000000090000000600000000ffffffff000100070000000f00000005071befac1414aa64010101ac1414aa001000007f000001ac1414bb442c9a51000000000000059d9f1414aa000000070a010102000000277f2391b558af1213e0a1bd613a5c7400000100001c01ac", @ANYRES32=0x41424344, @ANYRES32=r8, @ANYBLOB="514007ff907800000810f6a2c9e7dff84ca5bf9092eb03fe1312f790ba1787f9e299d204fef44bfb9ed6080a000000020000006a02040b00220d3f841bae38910d1b79e7f40303079d335f7f228ba91355419893cdf9004096770e3a36ad05fa75c7d4dbf8f2c671f225522e9c0104aea9c92f282f3d98c9457e2500a162cb"], &(0x7f0000000640)={0x0, 0x2, [0x628, 0x7a9, 0xb04, 0x3a0]}) r13 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) sendmsg$NFT_MSG_GETSET(r13, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0xa, 0xa, 0x5, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000) io_uring_enter(r3, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r13) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000800)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80811}, 0xc, &(0x7f00000007c0)={&(0x7f0000000840)={0x140, r14, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xe6, 0xbe, "41a9d09531481389dd9296364aeaec9dac139e6aee0d72e572c9f9e9e76eac2af17236cf9b361ef34659d5a8e5a201333c2c802245a611cb888c45f2a9c6584eb32da7140dbf3ad5a30cb452d6cb2275b34829aa05f3b27bfc098369fab854a5662140e946d3ca2f90b119dddc1497826efb34e467a0017327aa1d3efa25f2c1c5fac30f45c234e67515876a33e63deca3dfd7c3ea8829db299bb3d6b138fb3f9af9d34ada1c37d07a6fc78a5d24ecd8592fdc56dd5ee688873fb7709f0dbe3f8bbc01da6459bbbb79e3e88ade97802211cb7d7ea1a05118823f2f207834f177b871"}, @NL80211_ATTR_STA_CAPABILITY={0x6}, @NL80211_ATTR_STA_FLAGS={0x1c, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_MFP={0x4}]}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x31a}]}, 0x140}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) syz_usb_connect(0x0, 0x24, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000c166a0108304341276ff010203010902120001000000000904"], 0x0) close(r2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) 2.581864222s ago: executing program 1 (id=564): r0 = socket$inet(0x2, 0x3, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r2 = socket$inet(0x2, 0x2, 0x0) r3 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x1) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x0, 0x2}}) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r6 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0xffffff00}}, './file0\x00'}) r8 = openat$cgroup_ro(r7, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000026c0)=@newtfilter={0xad0, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1, 0xffe0}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0xaa0, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xc6}, @TCA_ROUTE4_ACT={0x948, 0x6, [@m_ife={0x164, 0x7, 0x0, 0x0, {{0x8}, {0x88, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40d, 0x0, 0x1, 0x7fffffff, 0x6}, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x7, 0x1088, 0x5, 0x9, 0x9}}}, @TCA_IFE_DMAC={0xa, 0x3, @remote}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x400, 0x2, 0x5, 0xfffffffc}, 0x1}}, @TCA_IFE_METALST={0x24, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x80f}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x800}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x2}]}]}, {0xb6, 0x6, "4796906361f9e4c32fd3f5b1ddc3a436c90d6b41ae3c9be8229a52aac654d92f846ca5d7f9f2faf45ce37b71c4ce20084c248bea6fb01d0a59d5f323fabbec8047e871e22e77fc65348a2b05277b1997bf7157b1fec3f563c7e8a194222fe2955bb291c347ef9ae603ce5fd5f064a4a9147ae0eda94420af7bf074a5888a8eb5014712ea2fe84da4a0d929713c223a035ece10be0380bd53e47a87b404cfb0d37fbd11f7917ba8e95c0a5d5d8d2f99b60a11"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ife={0x84, 0x1b, 0x0, 0x0, {{0x8}, {0x4}, {0x5b, 0x6, "87ba0c862db615e4e9ee80d280e669a9686fefcb317c402327a93ea10e62c2670b243b4ea0efe21e2a15e4fc52848ceefec54d4cd15fca98595f614c14bd3a09b136b2da6c2c69fcb7e2cfc63a767a154fca4cb9f5e636"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_sample={0x114, 0x1e, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0xffffffff, 0x4, 0x8, 0xbe0}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x6}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0x0, 0x0, 0x1000, 0xb}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xb3a}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x40, 0x6, 0x2, 0x5, 0x4000006}}]}, {0x87, 0x6, "05b94e762ed180d24156a3bf755f38d69b2eff1c781efcad2dd9d1eed4cb4ead2cf827f52d12dace79459ef0419e3eaf9bf1b4061d947246a4ed405a4200d61718d4b5e8070978ba6b60484883e03452ce0e22a1ad1f29d462008e12d435b2c45a38c0bac9fa96996e375e9a3f2907126217549f51537e41622982f2ea654b86143ae9"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ctinfo={0x14c, 0x11, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0xf01d}, @TCA_CTINFO_ACT={0x18, 0x3, {0x6, 0xf4, 0x10000000, 0x6, 0x8}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x80000001, 0x1, 0x4, 0x10, 0x3}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x4}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x4}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x80}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xffff7f3c}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x7}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x7}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3}]}, {0xaf, 0x6, "8485075e5af7d4f7e8875a7a25faf77e7e4cbb2a68455ef0f271376b892cf677d61c1a54f8009edb3af32c696376de8558606708d527bdcf8dfaed202844e5c7f53eecfb5197272037bc27a9d1184e2467a66eaebe798be9be0d392b0016fdaad18a8f44662121f66b959b414c83b4f2e7c3a6c569fe12f7baee9a3f47591e980ae664713abb5f431e994831795d12518e9888c1e1aa307db6fcd4eb7ec6553014d4d3067028c42f651635"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_bpf={0xa0, 0x11, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8, 0x5, r8}]}, {0x5b, 0x6, "392667f1ecabf425d28a5e022e39cb2480a2f56ddd92f793ac7502527578df742f70c4b28e0e49a156b0acb849531479bcd8e720053b524aa9d4058d5f30ca55d0a95b7333bf18858305a5d9ddb057b5bc937d6015e92c"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_sample={0xf4, 0xf, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x6}]}, {0xc0, 0x6, "067b4fd6d8af9b88a8fca12e25102c140ecddca79d6be859b4260de456546a0807c271371cd0eb4e66a750bc608a7c9600e6623472e2731c9d552075cfceb7ecfb4ceee0666c0a3fd046497d259478823d98dd7245b2a701bc76d1a208ad2a5eeb7a65244059a23be845a313405328607f96e1a3fd935081bfc3ba184fd0c5489b23389052491c5794e248d4b36dc9e50f49e55d68880fa0e2ce958280dea18c38cf8a2cc72a8006634dd5a7aaf4e2bb44ec337224c411e7c309090d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_csum={0x114, 0x1f, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xf, 0x5, 0x3, 0x2, 0xe3}, 0x65}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x1, 0x4, 0x1, 0x1000}, 0x7d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xff, 0x3e, 0x10000000, 0x8, 0x10}, 0x7b}}]}, {0x93, 0x6, "f3f46f7fdf7c654d940f88115066382998c362c4c0c547ef27a74869d418d46d95c985969e36a25e8f38f4f6a4bd08f9b1337b0e28b62bc4a95cfdc4e619c24ac5bc7f41742a6d458e7d7c89fdc943fea026909f8aaddf24de09c5a89c2c0c0cbfa2e048a4fce6029a09b675fe96af2e6a20de56a992f42f5df38bbc1f9c5c659625b3de10b9f93e73e965b8eaca09"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_nat={0x254, 0x17, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x793f, 0x8, 0xc9, 0x7}, @private=0xa010000, @empty, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x8, 0x7, 0x6, 0x770d44cb}, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x1d}}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x1, 0x30000002, 0xffffffa9, 0x3}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x80000001, 0x6, 0x5, 0x100, 0xfffc}, @dev={0xac, 0x14, 0x14, 0x2b}, @empty, 0xac75d38e9b9a5c6, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0xea, 0x10000000, 0xdb00, 0x9}, @remote, @multicast1, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x101, 0xc3f0, 0xfd0b6c0b1f045b90, 0x9, 0x78}, @local, @local, 0x0, 0x1}}]}, {0x139, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xa, 0x10}}, @TCA_ROUTE4_ACT={0xbc, 0x6, [@m_simple={0xb8, 0x20, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'GPL\x00'}, @TCA_DEF_DATA={0xf, 0x3, 'syzkaller0\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x7b, 0x41, 0x6, 0x8000, 0x9}}]}, {0x5c, 0x6, "cd8679428d6f7464f9642e1864e31c83ef62ff1c9678aff5c40f6161618cdffec717eb80b1fd1477ed54f1bc4db7c496b999574b4e122046db59cabe67dcda4bd2b9860f5cb5549221fad60c6a86b2b7f80ac0e7af7aedfa"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0xd9}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x42}, @TCA_ROUTE4_TO={0x8, 0x2, 0x8f}, @TCA_ROUTE4_ACT={0x60, 0x6, [@m_bpf={0x5c, 0x7f, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r2}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x6f5b38d4, 0xb, 0x6, 0x2, 0x3}}]}, {0x12, 0x6, "a349841ed872f206cd488d60aa66"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0xe7}, @TCA_ROUTE4_IIF={0x8, 0x4, r5}]}}]}, 0xad0}}, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d23210000000000000000001"], 0x4a) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32=r9, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000000c0), 0x492492492492627, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$can_j1939(0x1d, 0x2, 0x7) syz_open_dev$vim2m(&(0x7f0000000080), 0x1000, 0x2) pselect6(0x40, &(0x7f0000000140)={0xf, 0xc, 0x6, 0x1e, 0x40, 0xc, 0x100000001, 0x400}, 0x0, 0x0, 0x0, 0x0) bind$can_j1939(r11, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) sendmsg$nl_route_sched(r10, 0x0, 0x40c0090) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) 2.449112064s ago: executing program 0 (id=565): r0 = epoll_create1(0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) syz_open_procfs(0x0, &(0x7f0000000100)='net/netfilter\x00') r2 = dup3(r1, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1, 0x5, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40000000}, [@map_fd={0x18, 0xa, 0x1, 0x0, r2}]}, &(0x7f0000000000)='GPL\x00', 0xa, 0x1005, &(0x7f0000002840)=""/4101, 0x40f00}, 0x94) 2.310115222s ago: executing program 0 (id=566): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="24000000180001092cbd7000ffdbdf2502180000000000080000000008000100ac141400ba1ef7"], 0x24}, 0x1, 0x0, 0x0, 0xa000000}, 0x0) (fail_nth: 6) 1.94926465s ago: executing program 0 (id=567): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x1, 0x30, 0x8, 0x1}, &(0x7f0000000040)=0x18) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={r1, 0x5d}, 0x8) syz_usb_connect(0x2, 0x3f, &(0x7f0000000340)=ANY=[@ANYBLOB="120110012cae9308da040d39dffa0102030109022d0001c94080010904f90403c0da26ff0905f10f40000300bf09050300ff030507200905821010"], 0x0) 1.697705475s ago: executing program 1 (id=568): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r2, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='clear_refs\x00') write$binfmt_format(r3, &(0x7f0000000300)='0\x00', 0x2) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}}}, 0x24}}, 0x0) 1.607678873s ago: executing program 1 (id=569): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000140)={0x0, 0x0}) (fail_nth: 4) 1.436917101s ago: executing program 1 (id=570): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x20, &(0x7f00000001c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xee01}, 0x2c, {[{@allow_other}, {@default_permissions}, {@allow_other}], [{@smackfsdef={'smackfsdef', 0x3d, '+'}}, {@permit_directio}, {@uid_lt={'uid<', 0xee01}}, {@subj_type={'subj_type', 0x3d, '#['}}, {@smackfshat={'smackfshat', 0x3d, '],)'}}]}}, 0x0, 0x0, &(0x7f0000000300)="ad5ccac15f4b7edbd61b1ef010449f31098e7663980b9bf240ae60c4863cc926f6fd8723d8d3f11cb89cd2bb5ace4cdd9d8b9bf35ec7eed9f0be23f09ea08bcce89834b4ca3f1c52f7c4bc169c6d1ceff11bb9d0da2d101d9a804dff90ec3de6beb69fe1de4b8aff75d579d0e7f405ac690e6f5b2b65453f94d66428181c299ff44f6739fd49df0ca0467177da40b46e5e340487c9026aec77c576005b488d1d8b83be4e03a48135b7eec29c9a701c313da35daa157851ab6195480eafb53a94b520278caabbdf4219f1") ioctl$NILFS_IOCTL_GET_CPSTAT(r0, 0x80186e83, &(0x7f0000000400)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5e0}, [@IFLA_MTU={0x8, 0x4, 0x5e0}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) syz_emit_ethernet(0x62, &(0x7f0000000a00)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa008100283afffe8000000000bbff02000000000000000000000000000189dc907800000000fe8800000000000000000000000000010002122b472e41e2ffee2754605962e5000000000000000000"], 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r3, 0x1, 0x49, &(0x7f0000000100)=""/246, &(0x7f0000000080)=0xf6) r4 = syz_io_uring_setup(0x369e, &(0x7f0000000400)={0x0, 0x5de4, 0x10000, 0x0, 0x51}, &(0x7f0000000300)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_FUTEX_WAKE={0x34, 0x4, 0x0, 0x2, 0x0, &(0x7f0000000600), 0x0, 0x0, 0x1, {0x0, 0x0, 0x0, 0x5}}) io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r8 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x16ba82, 0x10) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f0000000600)={0xc, &(0x7f0000000500)={0x40, 0xd, 0x99, {0x99, 0xd, "51406b36be338cf1b6eb67e3c43f17dbdad92bda6f92563e2626eff27fddaa01a516925bd41d9ff7935e09ac4ca6170fa6270202663fa5e99955bde5d8acd16d659209266eb6682e56fe2c5d610c99f02859604df4c70da322b90528bbd4a920e587237cf87631a7aa2076fd01cf9ed5430e36a9130959961f1f04b3ce1854c60a684ef6a7f4060c9947254904dd8f305ec09953154fa5"}}, &(0x7f00000008c0)={0x0, 0x3, 0xba, @string={0xba, 0x3, "00006cd70b894d223e0f34c292eefaaa8c20fbb8053039ef81f869b55f7ea91fe755f8b245029845451b3963a7e3dd15559426841507e700de8883a05ac061130a5020c19ffb01144a274b3bcb8dc18362af470bd6c78d6e52955b9dee49afcb5b64902a55b7adc60ad8aad7f3b12abadd5962d557a8634b4d471b07b668120d486725bb911b8c95db78eb802d08bf1915d15573a55138a6f6a7eb35419da2401200431a48ad01e3b3072b1f7076367d8ae0e65979c6effe"}}}, &(0x7f0000000840)={0x24, &(0x7f0000000640)={0x40, 0x12, 0x5, "8cea0c1954"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000880)={0x0, 0x8, 0x1}, &(0x7f00000006c0)=ANY=[@ANYBLOB="20810100000016b3acca12904d"], &(0x7f0000000740)={0x20, 0x82, 0x1, "96"}, &(0x7f0000000780)={0x20, 0x83, 0x1, '7'}, &(0x7f0000000700)={0x20, 0x84, 0x4, "f01c3285"}, &(0x7f0000000800)={0x20, 0x85, 0x3, "b96c81"}}) unshare(0x20000400) write$cgroup_int(r9, &(0x7f0000000180)=0x10001, 0x12) write$RDMA_USER_CM_CMD_JOIN_MCAST(r9, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000002c0)={&(0x7f0000000000)=[0x0], 0x1}) ioctl$VIDIOC_REQBUFS(r8, 0xc0585609, 0x0) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r9, 0x4068aea3, &(0x7f0000000480)={0xa3, 0x0, &(0x7f0000000440)}) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r10 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCFLSH(r10, 0x5608, 0x0) 1.172730417s ago: executing program 4 (id=571): r0 = socket$unix(0x1, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e24, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x2c2}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000000)={0xc, 0x0, r0}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x100000000000000, 0x3fc}, 0x0, r6}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x30, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2800000004060103000000000000000005000008050001000700fceca777215e4970a1310000000005871a5b3c55a2036b3490585c8680d4b90f1c3ed86347cb095d855e535e8551c5e04cf293080401c8c49835ef06562f55db747575e3fe1c0f65c6a0ac39891ddac621f9bd3cbf328be4e17c86a5259ec1a6047bbf319f921e8fda1750034a22"], 0x28}, 0x1, 0x0, 0x0, 0x408c0}, 0x4000000) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)={0x80, r3, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "8477835e24"}, @NL80211_ATTR_KEY={0x34, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "b5a8a037cd"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "4ae63e4aa43fcf20d99263bae6"}, @NL80211_KEY_DEFAULT_TYPES={0xc, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x24, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x4000013) ioctl$sock_proto_private(r0, 0x8b19, &(0x7f0000000080)) 1.077479412s ago: executing program 4 (id=572): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') exit(0x20000000000005) fchdir(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000540)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8040}}, {{&(0x7f0000000000)=@file={0x1, '\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4080}}], 0x2, 0x400c0) r2 = syz_usb_connect(0x0, 0x4b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040480b05100001010200010902390002010080320904000000000000000904010000000000000904010103000000000705010240000007058102400000070582"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = syz_open_dev$dvb_demux(&(0x7f0000000200), 0x1, 0x2) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r3, 0x40146f2c, &(0x7f0000000300)={0x103, 0x1, 0x1, 0x0, 0x4}) 953.639264ms ago: executing program 3 (id=573): unshare(0x400) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001240)=ANY=[@ANYBLOB="bf16000000000000b707000001009fa35070000000000000280000000000c00095000000000000002ba728041598d6fbd30cb599e83d24a3aa81d36bb3010100bd2321afb56fa54f26fb0b71d0e6adff07f1d8f7faf75e0f226bd99eea7960707142fa2dc79b9723741c4a0e168c1886d0d4d94f2f4e345c652fbc16ee988ee99fbfbf9b0a4def23d410f6296b32a834388107200759cda9036b4e369a9e152ddcc7b1b85f3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c3b35967dec6e802f5ab3eea57b09a2ed4048d3b867ddd58211d6ececb0cd2b6d357b85a0218ce740068725837079e468ee207d2f73902fbcfcf49822775985bf31b715f5888b24efa000000000000ffffffdf0000000000000000000000000000020000000000000000000000000000b27cf3d1848a54d7132be1ffb0adf9deab29ea3323aa9fdfb52faf449c3bfd09000000b9349e31aa3701c38c527d3237c18e521ab219efdebb7b3de8f67581cf796a1d4223b90b80fcad3f6c962b9f292324b7ab7f7da31cf41ab12012fb1e0a494034127de745409e35a30b23bcee46762c2093bcc9eae5ee3e980026c96f80ee1a74e04bde740750fa4d9aaa705989b8e673e3296e52d307db98ca112874ec309baed0499104dcfe7c0f694bd5fc9e66d058b75fa4c81e5c9f42d9383e41d277b10392a96286744f049c3f128f8f92ef992239eafce5b43b4ec1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637598f37ad380a447483cac394c7bbdcd0e3b1c39b2e00916de48a4e70f03cc415ba77af02c1d4cef5379da860aed8477dfa8ceefb405005c6977c78cdbf37704ec73755539280b064bda144910fe050038ec9e47de89298b7bf4d769ccc18eede00e8ca5457870eb30d211e23ccc8e06cd58b638c234bbb55ff413c86ba9affb12ec757c7234c270246c87a901160e6c07bf6cf8809c3a0d46ff7f000000000000ad1e1f493354b2822b9837421134c0167d78e6c24ed0a2768e825972ea3b774a1467c89fa0f82e8440105051e5510a33dcda5e143fbfff161c12ca389cbe4cc302b52e2101de18a1f1f7c551b3fa00055cc1c46c5fd9c26a54d43fa050645bd6109b113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a84a4e378a9b15bc20f49e298727340e97c870800000047546103f123f661c84726e7c7c55eff231a1b033d8f841ba3442b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf46306f2ef7be184f5e93ba5c8c2a4c04450b652b8d4c2ff030000000000000007c6bbd6cb2b240ce7d47ae636a5dbe9864a117d27326850a7c3b57086a4482c218b10af13d7be94987005088a83880ccab9c99220002af8c5e13d52c87c3a3ee6c08384865b66d2b4dcb5dd9cba16b64ebbbf8702ae12c77e6e34991a225c120a3c950942fe0bc9f2a1a7506d35e5b439edeb7088aeda890cf8a4a6f31ba6d9b8cb098f935bdcbb29fd0f1a342c9eed00000000ab6648a9dea0b6c91996d65da6c24a700a86c814459f3cdaaf99000000000000000000bf2130d1b32c826563c718d0ad23bc83ba3f3757210a057e177615c0683f000000000000006d4e0413ab52f5aaab812201d1aba3d70471fcd9b466569f3ef72f39d87fcccab514fcff030000629c9b73ce7bc4be7f8be71cb7b2d0a4acff8f6abe7dbad64dfa63966945d93c33b038ce0d890f85f8a6ab8487c383e24d4a8051f80e1811e387723a25dda119f64b35e71c5400000000000000000000000000000034c751ebdf3f207ea3df3d6c0002a41783078e56c70afe8016b3dd9dc7785b36e609f173cc747837d600283b3452c57a5d44cacd363589845637071320921d32c1663964eddec97cc33158bc306d8c3bdae8108a23d2dc96a5cdb518f58832ec0906aaec43659c79c8ad37b0f961f3beaa3e02f7762c5dd633d13b5e487e996597b2ab42c81eb7dd8390e13b395aacce4683e55bcfe8c17615257364365fd48bd77da79e52ce9adfe6dcb0c42c4d719347f3d16304fa000008ffffffffffffff003049ca923d059c0ab5d886a491adacb7e4b43b1b57586e5fe2aa611f6232a9b71882ce24fce75cf105fa57f000756755b7230e2c0c1fed5487271c4f2981cf8f4351ef5d08641dacaed000080000000000000000000000fa36bbac00bb77c933d3961556f3fe647b05643b0000000000000000000000967aef9c5706e13d5889e77dab80a2548ec31629b7355a2bb8b93e4b6323061f545b26accc4621b568ab0bfaf30aa4f60705532c4a09c0a4a5487c762167edf362be35b9c90ad7e372a66bbb1471aa21000000000000104061c66a7432f25687618e31dcef8c5d4a2457a93f3fc6d3d7131746c75ccf400fc1a7a51826832ef7f5fbc78827d937768443a1c1ca3aba930826fd21aa1201d9225256df8de405d1f12c17cdaff3ad675aa333aa7e919459babd3cc1000000000000000000000000000000000000000000000000000000000000000059fdc6a54a2a8b28fa7d9b92aeb58e78e3b8594a5ef6bb67e52bf43b6145f544273a8f62852706c0abef368bfc72f92fa99a7bf121019cff8001fd7d2f6c2c295a5cab383235fec4c1decbed258ee9df8963c0fc828ad2119ffefe36c78692fffb6942b9da0922b2aa8f6b66c14ee7f42d5951edcc986356b41c0de3549f851ca340d9e425e355c1decb785a1042a72c1c98a084b04b1d9be473e50a15d76b110eda3b7cc1f2501211773cf510a43888422c1328476dd6f42659c61a18618fd28d5cd342c276aa9c4cc035077fa09d672b8dcfb3ac1751628647047d07338a8619037e3449a173ddd697f541a0795a2de7ef1396d70675341ebf004be122de04b5275fe7e53d28ebdc5051cec00759d73ca97229d93b965926060b6f91d01324bd458b425ea51c5d5b69551d599188fc6040370ac9ca7ae9eea9e5ede79bd66bd3d616dd7d7dd4c3a8fd055a3585af6fe7f5046c61154598cd33c33a48ece1072afd04b1fd85eb1655d9f3f813392c9634200d892dc6810b436820a1e0f6b464855e28953eb63cd3d6fc1b7bfb588ce28a51af1658d45d759a8399da55a3ff6597bb9f47167fe55ca240623a001e5fe15d9ddefea06a3750501916163844106c4ce662f418d9fc509e5447f712048d53e7e36ee7de083c5ea1119969d858eb6785395fc5a2c551de9a086cb4583f55c47828645e3046"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) 891.15818ms ago: executing program 3 (id=574): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x8000000ffffffff) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x7, 0x0) shutdown(r1, 0x1) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0xa8341) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r5) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, &(0x7f0000001dc0)={0xf, 0x5, 0x80000}, 0x20) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000000180)) 697.661066ms ago: executing program 3 (id=575): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x20008000) r2 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r2, &(0x7f0000001280)={&(0x7f00000010c0)=@in6={0xa, 0x4e21, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x9}, 0x80, 0x0}, 0x40810) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r3 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) r4 = userfaultfd(0x1) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r3, 0xc008551b, &(0x7f00000000c0)={0x1, 0x20, [0xa, 0x36, 0x9, 0x7f, 0x3, 0x5, 0x5, 0x2]}) close(0x3) openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) r6 = dup2(r5, r5) readv(r6, 0x0, 0x0) write$P9_RREADLINK(r6, 0x0, 0x0) io_uring_setup(0xadc, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x257}) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x80}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r8, &(0x7f0000007700), 0x318, 0xfc0, 0x0) 625.895143ms ago: executing program 2 (id=576): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r0, 0x541e, &(0x7f0000000140)={0x0, 0x0}) 600.025471ms ago: executing program 2 (id=577): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000080)={0x81, 0x0, 0x2}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_open_dev$loop(0x0, 0x4, 0x0) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x185202, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r0, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) 505.038279ms ago: executing program 2 (id=578): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = userfaultfd(0x80801) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x19c}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ff7000/0x1000)=nil, 0x1000}, 0x1}) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4e9}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ff8000/0x1000)=nil, 0x1000}, 0x1}) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f00000013c0)={0x2, 0xb, 0x4c, 0x9, 0x2, 0x0, 0x70bd26, 0x25dfdbfc}, 0x10}}, 0x4008040) r5 = socket(0x10, 0x803, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x9801}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1", 0x5ea, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r6, 0x1, 0x4, 0x6, @local}, 0x14) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$nl_route(0x10, 0x3, 0x0) (async) userfaultfd(0x80801) (async) userfaultfd(0x1) (async) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x19c}) (async) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ff7000/0x1000)=nil, 0x1000}, 0x1}) (async) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4e9}) (async) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000ff8000/0x1000)=nil, 0x1000}, 0x1}) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r4, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f00000013c0)={0x2, 0xb, 0x4c, 0x9, 0x2, 0x0, 0x70bd26, 0x25dfdbfc}, 0x10}}, 0x4008040) (async) socket(0x10, 0x803, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r5, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x9801}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) (async) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1", 0x5ea, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r6, 0x1, 0x4, 0x6, @local}, 0x14) (async) 160.844205ms ago: executing program 2 (id=579): r0 = socket$inet(0x2, 0x3, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0xe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) r3 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x1) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x0, 0x2}}) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r6 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0xffffff00}}, './file0\x00'}) r8 = openat$cgroup_ro(r7, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000026c0)=@newtfilter={0xad0, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1, 0xffe0}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_route={{0xa}, {0xaa0, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xc6}, @TCA_ROUTE4_ACT={0x948, 0x6, [@m_ife={0x164, 0x7, 0x0, 0x0, {{0x8}, {0x88, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40d, 0x0, 0x1, 0x7fffffff, 0x6}, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x7, 0x1088, 0x5, 0x9, 0x9}}}, @TCA_IFE_DMAC={0xa, 0x3, @remote}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x400, 0x2, 0x5, 0xfffffffc}, 0x1}}, @TCA_IFE_METALST={0x24, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x80f}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x800}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x2}]}]}, {0xb6, 0x6, "4796906361f9e4c32fd3f5b1ddc3a436c90d6b41ae3c9be8229a52aac654d92f846ca5d7f9f2faf45ce37b71c4ce20084c248bea6fb01d0a59d5f323fabbec8047e871e22e77fc65348a2b05277b1997bf7157b1fec3f563c7e8a194222fe2955bb291c347ef9ae603ce5fd5f064a4a9147ae0eda94420af7bf074a5888a8eb5014712ea2fe84da4a0d929713c223a035ece10be0380bd53e47a87b404cfb0d37fbd11f7917ba8e95c0a5d5d8d2f99b60a11"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ife={0x84, 0x1b, 0x0, 0x0, {{0x8}, {0x4}, {0x5b, 0x6, "87ba0c862db615e4e9ee80d280e669a9686fefcb317c402327a93ea10e62c2670b243b4ea0efe21e2a15e4fc52848ceefec54d4cd15fca98595f614c14bd3a09b136b2da6c2c69fcb7e2cfc63a767a154fca4cb9f5e636"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_sample={0x114, 0x1e, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0xffffffff, 0x4, 0x8, 0xbe0}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x6}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0x0, 0x0, 0x1000, 0xb}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xb3a}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x40, 0x6, 0x2, 0x5, 0x4000006}}]}, {0x87, 0x6, "05b94e762ed180d24156a3bf755f38d69b2eff1c781efcad2dd9d1eed4cb4ead2cf827f52d12dace79459ef0419e3eaf9bf1b4061d947246a4ed405a4200d61718d4b5e8070978ba6b60484883e03452ce0e22a1ad1f29d462008e12d435b2c45a38c0bac9fa96996e375e9a3f2907126217549f51537e41622982f2ea654b86143ae9"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ctinfo={0x14c, 0x11, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0xf01d}, @TCA_CTINFO_ACT={0x18, 0x3, {0x6, 0xf4, 0x10000000, 0x6, 0x8}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x80000001, 0x1, 0x4, 0x10, 0x3}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x4}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x4}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x80}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0xffff7f3c}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x7}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x7}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3}]}, {0xaf, 0x6, "8485075e5af7d4f7e8875a7a25faf77e7e4cbb2a68455ef0f271376b892cf677d61c1a54f8009edb3af32c696376de8558606708d527bdcf8dfaed202844e5c7f53eecfb5197272037bc27a9d1184e2467a66eaebe798be9be0d392b0016fdaad18a8f44662121f66b959b414c83b4f2e7c3a6c569fe12f7baee9a3f47591e980ae664713abb5f431e994831795d12518e9888c1e1aa307db6fcd4eb7ec6553014d4d3067028c42f651635"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_bpf={0xa0, 0x11, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8, 0x5, r8}]}, {0x5b, 0x6, "392667f1ecabf425d28a5e022e39cb2480a2f56ddd92f793ac7502527578df742f70c4b28e0e49a156b0acb849531479bcd8e720053b524aa9d4058d5f30ca55d0a95b7333bf18858305a5d9ddb057b5bc937d6015e92c"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_sample={0xf4, 0xf, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x6}]}, {0xc0, 0x6, "067b4fd6d8af9b88a8fca12e25102c140ecddca79d6be859b4260de456546a0807c271371cd0eb4e66a750bc608a7c9600e6623472e2731c9d552075cfceb7ecfb4ceee0666c0a3fd046497d259478823d98dd7245b2a701bc76d1a208ad2a5eeb7a65244059a23be845a313405328607f96e1a3fd935081bfc3ba184fd0c5489b23389052491c5794e248d4b36dc9e50f49e55d68880fa0e2ce958280dea18c38cf8a2cc72a8006634dd5a7aaf4e2bb44ec337224c411e7c309090d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_csum={0x114, 0x1f, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xf, 0x5, 0x3, 0x2, 0xe3}, 0x65}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x1, 0x4, 0x1, 0x1000}, 0x7d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xff, 0x3e, 0x10000000, 0x8, 0x10}, 0x7b}}]}, {0x93, 0x6, "f3f46f7fdf7c654d940f88115066382998c362c4c0c547ef27a74869d418d46d95c985969e36a25e8f38f4f6a4bd08f9b1337b0e28b62bc4a95cfdc4e619c24ac5bc7f41742a6d458e7d7c89fdc943fea026909f8aaddf24de09c5a89c2c0c0cbfa2e048a4fce6029a09b675fe96af2e6a20de56a992f42f5df38bbc1f9c5c659625b3de10b9f93e73e965b8eaca09"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_nat={0x254, 0x17, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x793f, 0x8, 0xc9, 0x7}, @private=0xa010000, @empty, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x8, 0x7, 0x6, 0x770d44cb}, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x1d}}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x1, 0x30000002, 0xffffffa9, 0x3}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x80000001, 0x6, 0x5, 0x100, 0xfffc}, @dev={0xac, 0x14, 0x14, 0x2b}, @empty, 0xac75d38e9b9a5c6, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0xea, 0x10000000, 0xdb00, 0x9}, @remote, @multicast1, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x101, 0xc3f0, 0xfd0b6c0b1f045b90, 0x9, 0x78}, @local, @local, 0x0, 0x1}}]}, {0x139, 0x6, "fa37009f56e44186cd5ffdb5456d0433366c77232ee4c1c2d9312e3580acbc43068bc199b80427d749144e3ecc569c6cb7d5b74950868ef49eea22f930d797587ad41ddce7a3ed41c8f38e11617916c961bc8927a506c588f56c4c77853d8fe428f3a987ba13162f2a8acc103ff315c01817e95b5f436a464c7433122c2869529178ce6d000000000020a9a5ab06277a7c9f9b85360fd70922ff1f3c95fb8d1a3c975d1c9d7e3c78abd37a152e3e24584926bff126478de3849c1656c49d6027a7526f00dcf07cf54afef83814656be645e03d116abae206ce78c88942c49ee7999212efa7256bca1260f8ebc87a27222ecf18b47475dc6579b22510e1c5b73acae7ba74ac94dabb9e06c62c712554164e19ac14500d631aaa27d6f7f434a02efe062705344910b92c5c7f0762e23bca0b2ac24198"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xa, 0x10}}, @TCA_ROUTE4_ACT={0xbc, 0x6, [@m_simple={0xb8, 0x20, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'GPL\x00'}, @TCA_DEF_DATA={0xf, 0x3, 'syzkaller0\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x7b, 0x41, 0x6, 0x8000, 0x9}}]}, {0x5c, 0x6, "cd8679428d6f7464f9642e1864e31c83ef62ff1c9678aff5c40f6161618cdffec717eb80b1fd1477ed54f1bc4db7c496b999574b4e122046db59cabe67dcda4bd2b9860f5cb5549221fad60c6a86b2b7f80ac0e7af7aedfa"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0xd9}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x42}, @TCA_ROUTE4_TO={0x8, 0x2, 0x8f}, @TCA_ROUTE4_ACT={0x60, 0x6, [@m_bpf={0x5c, 0x7f, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r2}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x6f5b38d4, 0xb, 0x6, 0x2, 0x3}}]}, {0x12, 0x6, "a349841ed872f206cd488d60aa66"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0xe7}, @TCA_ROUTE4_IIF={0x8, 0x4, r5}]}}]}, 0xad0}}, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d23210000000000000000001"], 0x4a) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32=r9, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000000c0), 0x492492492492627, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$can_j1939(0x1d, 0x2, 0x7) syz_open_dev$vim2m(&(0x7f0000000080), 0x1000, 0x2) pselect6(0x40, &(0x7f0000000140)={0xf, 0xc, 0x6, 0x1e, 0x40, 0xc, 0x100000001, 0x400}, 0x0, 0x0, 0x0, 0x0) bind$can_j1939(r11, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) sendmsg$nl_route_sched(r10, 0x0, 0x40c0090) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) 0s ago: executing program 1 (id=580): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r2, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='clear_refs\x00') write$binfmt_format(r3, &(0x7f0000000300)='0\x00', 0x2) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}}}, 0x24}}, 0x0) kernel console output (not intermixed with test programs): 3/0x70 [ 155.385360][ T6759] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 155.385379][ T6759] RIP: 0023:0xf7f740ec [ 155.385393][ T6759] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 155.385407][ T6759] RSP: 002b:00000000f543650c EFLAGS: 00000206 ORIG_RAX: 0000000000000015 [ 155.385424][ T6759] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00000000800020c0 [ 155.385435][ T6759] RDX: 0000000080002100 RSI: 0000000002000010 RDI: 0000000080002140 [ 155.385445][ T6759] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 155.385454][ T6759] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 155.385464][ T6759] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 155.385486][ T6759] [ 155.769143][ T6741] netlink: 28 bytes leftover after parsing attributes in process `syz.4.329'. [ 155.840564][ T5674] usb 5-1: USB disconnect, device number 18 [ 156.042744][ T6769] netlink: 12 bytes leftover after parsing attributes in process `syz.1.338'. [ 156.146885][ T6288] udevd[6288]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 156.421628][ T9] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 156.550338][ T9] usb 4-1: device descriptor read/64, error -71 [ 156.789024][ T9] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 156.919043][ T9] usb 4-1: device descriptor read/64, error -71 [ 156.980960][ T25] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 157.029214][ T9] usb usb4-port1: attempt power cycle [ 157.139160][ T5707] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 157.142236][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 157.143619][ T25] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 157.145941][ T25] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 157.145980][ T25] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 157.146021][ T25] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 157.146053][ T25] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 157.146082][ T25] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 157.146127][ T25] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 157.146156][ T25] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 157.146184][ T25] usb 2-1: config 168 interface 0 has no altsetting 0 [ 157.147964][ T25] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 157.148001][ T25] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 157.148045][ T25] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 157.148066][ T25] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 157.148085][ T25] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 157.148104][ T25] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 157.148123][ T25] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 157.148145][ T25] usb 2-1: config 168 interface 0 has no altsetting 0 [ 157.217985][ T25] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 157.218019][ T25] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 157.218047][ T25] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 157.218068][ T25] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 157.218129][ T25] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 157.218148][ T25] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 157.218168][ T25] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 157.218187][ T25] usb 2-1: config 168 interface 0 has no altsetting 0 [ 157.310212][ T5707] usb 3-1: device descriptor read/64, error -71 [ 157.373915][ T9] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 157.376758][ T25] usb 2-1: string descriptor 0 read error: -22 [ 157.376893][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.377189][ T6785] netlink: 4 bytes leftover after parsing attributes in process `syz.4.341'. [ 157.401162][ T9] usb 4-1: device descriptor read/8, error -71 [ 157.518160][ T25] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 157.597924][ T6785] netlink: 4 bytes leftover after parsing attributes in process `syz.4.341'. [ 157.607220][ T5707] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 157.639802][ T9] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 157.661385][ T9] usb 4-1: device descriptor read/8, error -71 [ 157.749837][ T5707] usb 3-1: device descriptor read/64, error -71 [ 157.770746][ T9] usb usb4-port1: unable to enumerate USB device [ 157.869608][ T5707] usb usb3-port1: attempt power cycle [ 157.902333][ T9] usb 2-1: USB disconnect, device number 18 [ 158.219119][ T5707] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 158.242171][ T5707] usb 3-1: device descriptor read/8, error -71 [ 158.488957][ T5707] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 158.509806][ T5707] usb 3-1: device descriptor read/8, error -71 [ 158.619553][ T5707] usb usb3-port1: unable to enumerate USB device [ 158.858157][ T6809] FAULT_INJECTION: forcing a failure. [ 158.858157][ T6809] name failslab, interval 1, probability 0, space 0, times 0 [ 158.858185][ T6809] CPU: 1 UID: 0 PID: 6809 Comm: syz.1.349 Tainted: G L syzkaller #0 PREEMPT(full) [ 158.858206][ T6809] Tainted: [L]=SOFTLOCKUP [ 158.858212][ T6809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 158.858222][ T6809] Call Trace: [ 158.858229][ T6809] [ 158.858239][ T6809] dump_stack_lvl+0xe8/0x150 [ 158.858268][ T6809] should_fail_ex+0x410/0x560 [ 158.858291][ T6809] should_failslab+0xa8/0x100 [ 158.858313][ T6809] ? do_getname_kernel+0x54/0x230 [ 158.858336][ T6809] kmem_cache_alloc_noprof+0xa1/0x600 [ 158.858351][ T6809] ? kfree+0x1c5/0x650 [ 158.858375][ T6809] ? tomoyo_encode+0x533/0x570 [ 158.858398][ T6809] ? do_getname_kernel+0x54/0x230 [ 158.858425][ T6809] do_getname_kernel+0x54/0x230 [ 158.858446][ T6809] ? kern_path+0x1b/0x150 [ 158.858471][ T6809] kern_path+0x25/0x150 [ 158.858497][ T6809] tomoyo_mount_permission+0x79e/0x9e0 [ 158.858520][ T6809] ? tomoyo_mount_permission+0x2b5/0x9e0 [ 158.858546][ T6809] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 158.858569][ T6809] ? kasan_save_track+0x4f/0x80 [ 158.858622][ T6809] ? kasan_quarantine_put+0xbb/0x1f0 [ 158.858642][ T6809] security_sb_mount+0xe4/0x320 [ 158.858669][ T6809] path_mount+0xbc/0x1050 [ 158.858732][ T6809] ? user_path_at+0xd4/0x160 [ 158.858758][ T6809] __se_sys_mount+0x31d/0x420 [ 158.858786][ T6809] ? __pfx___se_sys_mount+0x10/0x10 [ 158.858835][ T6809] ? __ia32_sys_mount+0x20/0xc0 [ 158.858870][ T6809] __do_fast_syscall_32+0x27a/0x6a0 [ 158.858904][ T6809] ? do_fast_syscall_32+0x33/0x70 [ 158.858935][ T6809] ? asm_int80_emulation+0x1a/0x20 [ 158.858957][ T6809] ? do_int80_emulation+0x299/0x500 [ 158.858989][ T6809] ? trace_irq_disable+0x3b/0x140 [ 158.859019][ T6809] do_fast_syscall_32+0x33/0x70 [ 158.859061][ T6809] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 158.859090][ T6809] RIP: 0023:0xf7f450ec [ 158.859110][ T6809] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 158.859130][ T6809] RSP: 002b:00000000f540650c EFLAGS: 00000206 ORIG_RAX: 0000000000000015 [ 158.859155][ T6809] RAX: ffffffffffffffda RBX: 00000000800013c0 RCX: 0000000080000180 [ 158.859172][ T6809] RDX: 0000000000000000 RSI: 0000000003002891 RDI: 0000000000000000 [ 158.859187][ T6809] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 158.859200][ T6809] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 158.859214][ T6809] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 158.859248][ T6809] [ 158.959459][ T5689] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 159.151539][ T5689] usb 5-1: Using ep0 maxpacket: 16 [ 159.153486][ T5689] usb 5-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 159.157372][ T5689] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 159.157396][ T5689] usb 5-1: config 0 interface 0 has no altsetting 0 [ 159.195579][ T5689] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.195600][ T5689] usb 5-1: Product: syz [ 159.195612][ T5689] usb 5-1: Manufacturer: syz [ 159.195622][ T5689] usb 5-1: SerialNumber: syz [ 159.207921][ T5689] usb 5-1: config 0 descriptor?? [ 159.436688][ T6805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.437340][ T6805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.466112][ C0] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 159.552025][ T5689] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input10 [ 159.765587][ T5689] imon:send_packet: packet tx failed (-71) [ 159.799381][ T5689] imon 5-1:0.0: panel buttons/knobs setup failed [ 159.851611][ T6816] FAULT_INJECTION: forcing a failure. [ 159.851611][ T6816] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.852685][ T6816] CPU: 0 UID: 0 PID: 6816 Comm: syz.0.352 Tainted: G L syzkaller #0 PREEMPT(full) [ 159.852719][ T6816] Tainted: [L]=SOFTLOCKUP [ 159.852725][ T6816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 159.852736][ T6816] Call Trace: [ 159.852742][ T6816] [ 159.852749][ T6816] dump_stack_lvl+0xe8/0x150 [ 159.852780][ T6816] should_fail_ex+0x410/0x560 [ 159.852809][ T6816] _copy_to_user+0x31/0xb0 [ 159.852834][ T6816] simple_read_from_buffer+0xe1/0x170 [ 159.852863][ T6816] proc_fail_nth_read+0x1bb/0x230 [ 159.852879][ T6816] ? common_file_perm+0x20e/0x2b0 [ 159.852903][ T6816] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 159.852922][ T6816] ? rw_verify_area+0x24a/0x4c0 [ 159.852949][ T6816] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 159.852965][ T6816] vfs_read+0x213/0xa80 [ 159.852994][ T6816] ? __pfx___mutex_lock+0x10/0x10 [ 159.853018][ T6816] ? __pfx_vfs_read+0x10/0x10 [ 159.853045][ T6816] ? __fget_files+0x2a/0x420 [ 159.853071][ T6816] ? __fget_files+0x3a2/0x420 [ 159.853094][ T6816] ? __fget_files+0x2a/0x420 [ 159.853124][ T6816] ksys_read+0x150/0x270 [ 159.853141][ T6816] ? __pfx_ksys_read+0x10/0x10 [ 159.853159][ T6816] ? asm_int80_emulation+0x1a/0x20 [ 159.853179][ T6816] do_int80_emulation+0x198/0x500 [ 159.853203][ T6816] ? trace_irq_disable+0x3b/0x140 [ 159.853240][ T6816] ? asm_int80_emulation+0x1a/0x20 [ 159.853255][ T6816] ? clear_bhb_loop+0x70/0xc0 [ 159.853271][ T6816] ? clear_bhb_loop+0x70/0xc0 [ 159.853290][ T6816] asm_int80_emulation+0x1a/0x20 [ 159.853308][ T6816] RIP: 0023:0xf71775ab [ 159.853322][ T6816] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 159.853336][ T6816] RSP: 002b:00000000f54364bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 159.853353][ T6816] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000f54365d0 [ 159.853364][ T6816] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 159.853373][ T6816] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 159.853382][ T6816] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 159.853391][ T6816] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 159.853414][ T6816] [ 160.279020][ T5689] rc_core: IR keymap rc-imon-pad not found [ 160.279035][ T5689] Registered IR keymap rc-empty [ 160.279120][ T5689] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 160.279134][ T5689] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 160.280472][ T5689] imon:send_packet: packet tx failed (-71) [ 160.310718][ T5689] imon 5-1:0.0: remote input dev register failed [ 160.311219][ T5689] imon 5-1:0.0: imon_init_intf0: rc device setup failed [ 160.651975][ T5689] imon 5-1:0.0: unable to initialize intf0, err 0 [ 160.652002][ T5689] imon:imon_probe: failed to initialize context! [ 160.652016][ T5689] imon 5-1:0.0: unable to register, err -19 [ 160.689220][ T5349] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 160.696647][ T5689] usb 5-1: USB disconnect, device number 19 [ 160.851430][ T5349] usb 3-1: Using ep0 maxpacket: 32 [ 160.859835][ T5349] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 160.882220][ T5349] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 160.882255][ T5349] usb 3-1: config 0 has no interface number 0 [ 160.882305][ T5349] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 160.882338][ T5349] usb 3-1: config 0 interface 85 has no altsetting 0 [ 160.886515][ T5349] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.886548][ T5349] usb 3-1: Product: syz [ 160.886566][ T5349] usb 3-1: Manufacturer: syz [ 160.886585][ T5349] usb 3-1: SerialNumber: syz [ 160.997241][ T5349] usb 3-1: config 0 descriptor?? [ 161.099395][ T5689] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 161.231170][ T31] audit: type=1326 audit(1790612603.565:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6839 comm="syz.1.359" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f450ec code=0x7ffc0000 [ 161.231485][ T31] audit: type=1326 audit(1790612603.565:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6839 comm="syz.1.359" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f450ec code=0x7ffc0000 [ 161.231935][ T5689] usb 5-1: device descriptor read/64, error -71 [ 161.234875][ T31] audit: type=1326 audit(1790612603.565:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6839 comm="syz.1.359" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f450ec code=0x7ffc0000 [ 161.234957][ T31] audit: type=1326 audit(1790612603.565:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6839 comm="syz.1.359" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f450ec code=0x7ffc0000 [ 161.235005][ T31] audit: type=1326 audit(1790612603.565:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6839 comm="syz.1.359" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7f450ec code=0x7ffc0000 [ 161.235051][ T31] audit: type=1326 audit(1790612603.565:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6839 comm="syz.1.359" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f450ec code=0x7ffc0000 [ 161.235128][ T31] audit: type=1326 audit(1790612603.565:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6839 comm="syz.1.359" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f450ec code=0x7ffc0000 [ 161.263991][ T31] audit: type=1326 audit(1790612603.565:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6839 comm="syz.1.359" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=55 compat=1 ip=0xf7f450ec code=0x7ffc0000 [ 161.264062][ T31] audit: type=1326 audit(1790612603.565:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6839 comm="syz.1.359" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f450ec code=0x7ffc0000 [ 161.264107][ T31] audit: type=1326 audit(1790612603.565:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6839 comm="syz.1.359" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=316 compat=1 ip=0xf7f450ec code=0x7ffc0000 [ 161.539039][ T5689] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 161.679109][ T5689] usb 5-1: device descriptor read/64, error -71 [ 161.789320][ T5689] usb usb5-port1: attempt power cycle [ 161.828056][ T6831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.828650][ T6831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.860755][ T5349] appletouch 3-1:0.85: Geyser mode initialized. [ 161.887041][ T5349] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input12 [ 161.944462][ T6845] netlink: 'syz.3.361': attribute type 2 has an invalid length. [ 162.082024][ T5349] usb 3-1: USB disconnect, device number 19 [ 162.182810][ T5349] appletouch 3-1:0.85: input: appletouch disconnected [ 162.542820][ T6859] netlink: 20 bytes leftover after parsing attributes in process `syz.3.365'. [ 162.990680][ T6870] netlink: 260 bytes leftover after parsing attributes in process `syz.2.369'. [ 162.990727][ T6870] netlink: 36 bytes leftover after parsing attributes in process `syz.2.369'. [ 163.292802][ T6870] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 163.394943][ T6878] fuse: Unknown parameter 'user_id00000000000000000000' [ 163.629888][ T6882] FAULT_INJECTION: forcing a failure. [ 163.629888][ T6882] name failslab, interval 1, probability 0, space 0, times 0 [ 163.629927][ T6882] CPU: 1 UID: 0 PID: 6882 Comm: syz.4.373 Tainted: G L syzkaller #0 PREEMPT(full) [ 163.629957][ T6882] Tainted: [L]=SOFTLOCKUP [ 163.629966][ T6882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 163.629979][ T6882] Call Trace: [ 163.629987][ T6882] [ 163.629997][ T6882] dump_stack_lvl+0xe8/0x150 [ 163.630034][ T6882] should_fail_ex+0x410/0x560 [ 163.630069][ T6882] should_failslab+0xa8/0x100 [ 163.630100][ T6882] __kmalloc_noprof+0xfe/0x720 [ 163.630124][ T6882] ? rcu_is_watching+0x16/0xb0 [ 163.630153][ T6882] ? tomoyo_realpath_from_path+0xef/0x640 [ 163.630186][ T6882] ? tomoyo_realpath_from_path+0xef/0x640 [ 163.630228][ T6882] tomoyo_realpath_from_path+0xef/0x640 [ 163.630273][ T6882] ? tomoyo_path_number_perm+0x219/0x5f0 [ 163.630302][ T6882] tomoyo_path_number_perm+0x246/0x5f0 [ 163.630335][ T6882] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 163.630363][ T6882] ? __lock_acquire+0x747/0x2de0 [ 163.630414][ T6882] ? hook_file_ioctl_compat+0x1f2/0x600 [ 163.630466][ T6882] ? __fget_files+0x2a/0x420 [ 163.630504][ T6882] ? __fget_files+0x3a2/0x420 [ 163.630536][ T6882] ? __fget_files+0x2a/0x420 [ 163.630573][ T6882] security_file_ioctl_compat+0xc3/0x2a0 [ 163.630602][ T6882] __ia32_compat_sys_ioctl+0x139/0x950 [ 163.630633][ T6882] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 163.630664][ T6882] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 163.630699][ T6882] ? __fget_files+0x3a2/0x420 [ 163.630740][ T6882] ? fput+0xa0/0xd0 [ 163.630769][ T6882] ? ksys_write+0x242/0x270 [ 163.630805][ T6882] __do_fast_syscall_32+0x27a/0x6a0 [ 163.630841][ T6882] ? do_fast_syscall_32+0x33/0x70 [ 163.630873][ T6882] ? asm_int80_emulation+0x1a/0x20 [ 163.630896][ T6882] ? do_int80_emulation+0x299/0x500 [ 163.630928][ T6882] ? trace_irq_disable+0x3b/0x140 [ 163.630958][ T6882] do_fast_syscall_32+0x33/0x70 [ 163.630992][ T6882] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 163.631020][ T6882] RIP: 0023:0xf70af0ec [ 163.631040][ T6882] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 163.631059][ T6882] RSP: 002b:00000000f549d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 163.631090][ T6882] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c040565f [ 163.631105][ T6882] RDX: 0000000080000940 RSI: 0000000000000000 RDI: 0000000000000000 [ 163.631118][ T6882] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 163.631130][ T6882] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 163.631144][ T6882] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 163.631174][ T6882] [ 163.637427][ T6882] ERROR: Out of memory at tomoyo_realpath_from_path. [ 164.569077][ T5349] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 164.719873][ T5349] usb 3-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 164.725145][ T5349] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.725199][ T5349] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 164.727486][ T5349] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 164.727514][ T5349] usb 3-1: Product: syz [ 164.727527][ T5349] usb 3-1: Manufacturer: syz [ 165.030882][ T5707] usb 3-1: USB disconnect, device number 20 [ 165.375690][ T6869] ovs-system: entered promiscuous mode [ 166.177722][ T6912] netlink: 4 bytes leftover after parsing attributes in process `syz.2.382'. [ 166.190819][ T6900] fuse: Unknown parameter 'user_id00000000000000000000' [ 166.437620][ T6914] netlink: 4 bytes leftover after parsing attributes in process `syz.3.384'. [ 166.538636][ T6914] netlink: 4 bytes leftover after parsing attributes in process `syz.3.384'. [ 166.654209][ T6917] netlink: 12 bytes leftover after parsing attributes in process `syz.2.383'. [ 166.871270][ T6919] pim6reg1: entered promiscuous mode [ 166.871298][ T6919] pim6reg1: entered allmulticast mode [ 166.986874][ T6920] netlink: 'syz.1.385': attribute type 1 has an invalid length. [ 167.032078][ T6926] netlink: 4 bytes leftover after parsing attributes in process `syz.4.386'. [ 167.112315][ T6920] 8021q: adding VLAN 0 to HW filter on device bond1 [ 167.285904][ T6931] netlink: 4 bytes leftover after parsing attributes in process `syz.4.388'. [ 167.436339][ T6933] FAULT_INJECTION: forcing a failure. [ 167.436339][ T6933] name failslab, interval 1, probability 0, space 0, times 0 [ 167.436368][ T6933] CPU: 0 UID: 0 PID: 6933 Comm: syz.3.389 Tainted: G L syzkaller #0 PREEMPT(full) [ 167.436390][ T6933] Tainted: [L]=SOFTLOCKUP [ 167.436396][ T6933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 167.436405][ T6933] Call Trace: [ 167.436411][ T6933] [ 167.436418][ T6933] dump_stack_lvl+0xe8/0x150 [ 167.436447][ T6933] should_fail_ex+0x410/0x560 [ 167.436470][ T6933] ? __alloc_skb+0x1db/0x7a0 [ 167.436492][ T6933] should_failslab+0xa8/0x100 [ 167.436516][ T6933] ? __alloc_skb+0x1db/0x7a0 [ 167.436536][ T6933] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 167.436553][ T6933] ? __alloc_skb+0x18d/0x7a0 [ 167.436575][ T6933] ? __alloc_skb+0x1db/0x7a0 [ 167.436601][ T6933] __alloc_skb+0x1db/0x7a0 [ 167.436626][ T6933] xfrm_send_state_notify+0x888/0x18d0 [ 167.436650][ T6933] ? __pfx_xfrm_send_state_notify+0x10/0x10 [ 167.436670][ T6933] ? xfrm_state_add+0x57a/0xd40 [ 167.436686][ T6933] ? __local_bh_enable_ip+0xd6/0x140 [ 167.436709][ T6933] ? xfrm_state_add+0x8f2/0xd40 [ 167.436727][ T6933] ? xfrm_hash_resize+0x98a/0x1210 [ 167.436749][ T6933] ? km_state_notify+0x25/0x1f0 [ 167.436767][ T6933] ? km_state_notify+0x25/0x1f0 [ 167.436785][ T6933] ? __pfx_xfrm_send_state_notify+0x10/0x10 [ 167.436804][ T6933] km_state_notify+0x110/0x1f0 [ 167.436825][ T6933] xfrm_add_sa+0x36ff/0x40a0 [ 167.436852][ T6933] ? __pfx_xfrm_add_sa+0x10/0x10 [ 167.436875][ T6933] ? __nla_parse+0x40/0x60 [ 167.436923][ T6933] xfrm_user_rcv_msg+0x7a8/0xf30 [ 167.436947][ T6933] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 167.436990][ T6933] ? __mutex_trylock_common+0x15f/0x270 [ 167.437016][ T6933] ? __pfx___mutex_trylock_common+0x10/0x10 [ 167.437043][ T6933] ? rcu_is_watching+0x16/0xb0 [ 167.437064][ T6933] ? trace_contention_end+0x3d/0x140 [ 167.437092][ T6933] netlink_rcv_skb+0x226/0x4a0 [ 167.437110][ T6933] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 167.437131][ T6933] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 167.437159][ T6933] ? netlink_deliver_tap+0x2e/0x1b0 [ 167.437175][ T6933] ? netlink_deliver_tap+0x2e/0x1b0 [ 167.437194][ T6933] xfrm_netlink_rcv+0x79/0x90 [ 167.437213][ T6933] netlink_unicast+0x7bd/0x940 [ 167.437252][ T6933] netlink_sendmsg+0x813/0xb40 [ 167.437276][ T6933] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.437300][ T6933] ? apparmor_socket_sendmsg+0x98/0x360 [ 167.437321][ T6933] ? __pfx_netlink_sendmsg+0x10/0x10 [ 167.437337][ T6933] sock_sendmsg_nosec+0x13a/0x180 [ 167.437358][ T6933] ____sys_sendmsg+0x54e/0x850 [ 167.437387][ T6933] ? __pfx_____sys_sendmsg+0x10/0x10 [ 167.437423][ T6933] ___sys_sendmsg+0x2a5/0x360 [ 167.437446][ T6933] ? __lock_acquire+0x747/0x2de0 [ 167.437467][ T6933] ? __pfx____sys_sendmsg+0x10/0x10 [ 167.437490][ T6933] ? get_pid_task+0x20/0x1f0 [ 167.437506][ T6933] ? get_pid_task+0x20/0x1f0 [ 167.437520][ T6933] ? get_pid_task+0x20/0x1f0 [ 167.437558][ T6933] ? __fget_files+0x2a/0x420 [ 167.437581][ T6933] ? __fget_files+0x3a2/0x420 [ 167.437613][ T6933] __sys_sendmsg+0x177/0x240 [ 167.437638][ T6933] ? __pfx___sys_sendmsg+0x10/0x10 [ 167.437677][ T6933] __do_fast_syscall_32+0x27a/0x6a0 [ 167.437702][ T6933] ? do_fast_syscall_32+0x33/0x70 [ 167.437727][ T6933] ? asm_int80_emulation+0x1a/0x20 [ 167.437743][ T6933] ? do_int80_emulation+0x299/0x500 [ 167.437766][ T6933] ? trace_irq_disable+0x3b/0x140 [ 167.437786][ T6933] do_fast_syscall_32+0x33/0x70 [ 167.437810][ T6933] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 167.437830][ T6933] RIP: 0023:0xf7f330ec [ 167.437845][ T6933] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 167.437858][ T6933] RSP: 002b:00000000f53f650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 167.437875][ T6933] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000180 [ 167.437886][ T6933] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 167.437895][ T6933] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 167.437904][ T6933] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 167.437914][ T6933] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 167.437936][ T6933] [ 167.739872][ T6934] netlink: 4 bytes leftover after parsing attributes in process `syz.3.389'. [ 168.197333][ T6940] fuse: Bad value for 'user_id' [ 168.197357][ T6940] fuse: Bad value for 'user_id' [ 168.279515][ T5707] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 168.395762][ T6947] netlink: 4 bytes leftover after parsing attributes in process `syz.3.394'. [ 168.439490][ T5707] usb 5-1: Using ep0 maxpacket: 32 [ 168.441929][ T5707] usb 5-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 168.443603][ T5707] usb 5-1: config 0 has an invalid interface number: 217 but max is 0 [ 168.443633][ T5707] usb 5-1: config 0 has no interface number 0 [ 168.491427][ T5707] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.491450][ T5707] usb 5-1: Product: syz [ 168.491461][ T5707] usb 5-1: Manufacturer: syz [ 168.491472][ T5707] usb 5-1: SerialNumber: syz [ 168.499883][ T5707] usb 5-1: config 0 descriptor?? [ 168.537702][ T5707] ftdi_sio 5-1:0.217: FTDI USB Serial Device converter detected [ 168.552886][ T5707] usb 5-1: Detected SIO [ 168.564700][ T5707] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 168.668993][ T30] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 168.818181][ T6949] netlink: 4 bytes leftover after parsing attributes in process `syz.3.395'. [ 168.831054][ T30] usb 3-1: Using ep0 maxpacket: 8 [ 168.836509][ T30] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 168.848198][ T30] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 168.848332][ T30] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 168.848448][ T30] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 168.848542][ T30] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 168.848608][ T30] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 168.848688][ T30] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 168.848765][ T30] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 168.869154][ T30] usb 3-1: config 168 interface 0 has no altsetting 0 [ 168.922462][ T30] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 168.922589][ T30] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 168.922700][ T30] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 168.922771][ T30] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 168.922846][ T30] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 168.922913][ T30] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 168.926276][ T30] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 168.926373][ T30] usb 3-1: config 168 interface 0 has no altsetting 0 [ 169.015130][ T30] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 169.015173][ T30] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 169.015225][ T30] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 169.015323][ T30] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 169.015391][ T30] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 169.015468][ T30] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 169.015553][ T30] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 169.015630][ T30] usb 3-1: config 168 interface 0 has no altsetting 0 [ 169.129492][ T30] usb 3-1: string descriptor 0 read error: -22 [ 169.129892][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.214798][ T30] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 169.454490][ T6958] netlink: 4 bytes leftover after parsing attributes in process `syz.3.397'. [ 169.547420][ T30] usb 3-1: USB disconnect, device number 21 [ 169.713421][ T6967] syzkaller0: entered promiscuous mode [ 169.713440][ T6967] syzkaller0: entered allmulticast mode [ 169.775849][ T6969] bond0: Caught tx_queue_len zero misconfig [ 169.915635][ T6971] syzkaller0: entered promiscuous mode [ 170.029391][ T5349] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 170.181499][ T5349] usb 4-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice= 1.00 [ 170.183124][ T5349] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 170.183176][ T5349] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 1024 [ 170.183206][ T5349] usb 4-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 170.183233][ T5349] usb 4-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 255 [ 170.183275][ T5349] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.202264][ T6969] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 170.431029][ T6969] program syz.3.401 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 170.601056][ T5349] ims_pcu 4-1:1.0: Failed to set line coding, error: -71 [ 170.606327][ T5349] ims_pcu 4-1:1.0: probe with driver ims_pcu failed with error -71 [ 170.637107][ T5349] usb 4-1: USB disconnect, device number 19 [ 170.792148][ T6990] FAULT_INJECTION: forcing a failure. [ 170.792148][ T6990] name failslab, interval 1, probability 0, space 0, times 0 [ 170.792189][ T6990] CPU: 0 UID: 0 PID: 6990 Comm: syz.1.406 Tainted: G L syzkaller #0 PREEMPT(full) [ 170.792220][ T6990] Tainted: [L]=SOFTLOCKUP [ 170.792230][ T6990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 170.792244][ T6990] Call Trace: [ 170.792254][ T6990] [ 170.792263][ T6990] dump_stack_lvl+0xe8/0x150 [ 170.792311][ T6990] should_fail_ex+0x410/0x560 [ 170.792345][ T6990] should_failslab+0xa8/0x100 [ 170.792377][ T6990] ? __seq_open_private+0x7a/0x1a0 [ 170.792409][ T6990] kmem_cache_alloc_noprof+0xa1/0x600 [ 170.792431][ T6990] ? __kmalloc_noprof+0x38c/0x720 [ 170.792457][ T6990] ? __seq_open_private+0x29/0x1a0 [ 170.792485][ T6990] ? __seq_open_private+0x7a/0x1a0 [ 170.792522][ T6990] __seq_open_private+0x7a/0x1a0 [ 170.792557][ T6990] pid_numa_maps_open+0x2c/0xd0 [ 170.792592][ T6990] ? __pfx_pid_numa_maps_open+0x10/0x10 [ 170.792627][ T6990] do_dentry_open+0x816/0x1380 [ 170.792669][ T6990] vfs_open+0x3b/0x340 [ 170.792696][ T6990] ? path_openat+0x1428/0x1d60 [ 170.792723][ T6990] path_openat+0x1443/0x1d60 [ 170.792768][ T6990] do_file_open+0x23e/0x4a0 [ 170.792810][ T6990] ? __pfx_do_file_open+0x10/0x10 [ 170.792846][ T6990] ? __pfx_kfree_link+0x10/0x10 [ 170.792892][ T6990] ? _raw_spin_unlock+0x28/0x50 [ 170.792920][ T6990] ? alloc_fd+0x651/0x6c0 [ 170.792963][ T6990] do_sys_openat2+0x115/0x200 [ 170.792998][ T6990] ? __pfx_do_sys_openat2+0x10/0x10 [ 170.793030][ T6990] ? ksys_write+0x242/0x270 [ 170.793056][ T6990] ? __pfx_ksys_write+0x10/0x10 [ 170.793081][ T6990] __ia32_compat_sys_openat+0x131/0x160 [ 170.793124][ T6990] do_int80_emulation+0x198/0x500 [ 170.793158][ T6990] ? trace_irq_disable+0x3b/0x140 [ 170.793183][ T6990] ? asm_int80_emulation+0x1a/0x20 [ 170.793206][ T6990] ? clear_bhb_loop+0x70/0xc0 [ 170.793228][ T6990] ? clear_bhb_loop+0x70/0xc0 [ 170.793258][ T6990] asm_int80_emulation+0x1a/0x20 [ 170.793281][ T6990] RIP: 0023:0xf71475ab [ 170.793309][ T6990] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 170.793329][ T6990] RSP: 002b:00000000f53c43cc EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 170.793354][ T6990] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f53c4490 [ 170.793371][ T6990] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 170.793385][ T6990] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 170.793399][ T6990] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 170.793413][ T6990] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 170.793446][ T6990] [ 171.106825][ T5689] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 171.312896][ T5689] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 171.314533][ T5689] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.392885][ T5689] usb 3-1: config 0 descriptor?? [ 171.409795][ T5689] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 171.534335][ T30] usb 5-1: USB disconnect, device number 23 [ 171.607685][ T6988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.608221][ T6988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.614613][ T30] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 171.627970][ T30] ftdi_sio 5-1:0.217: device disconnected [ 171.653087][ T5707] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 171.733514][ T6997] netlink: 4 bytes leftover after parsing attributes in process `syz.4.408'. [ 171.798904][ T5707] usb 4-1: Using ep0 maxpacket: 8 [ 171.799718][ T5707] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 171.804490][ T5707] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.804522][ T5707] usb 4-1: Product: syz [ 171.804538][ T5707] usb 4-1: Manufacturer: syz [ 171.804553][ T5707] usb 4-1: SerialNumber: syz [ 171.845221][ T5707] usb 4-1: config 0 descriptor?? [ 171.870193][ T5707] gspca_main: se401-2.14.0 probing 047d:5003 [ 171.916136][ T6997] netlink: 4 bytes leftover after parsing attributes in process `syz.4.408'. [ 172.264047][ T5707] gspca_se401: Bayer format not supported! [ 172.496198][ T6995] RDS: rds_bind could not find a transport for ::a:0:0, load rds_tcp or rds_rdma? [ 172.497826][ T6995] netlink: 168 bytes leftover after parsing attributes in process `syz.3.407'. [ 172.497851][ T6995] netlink: 168 bytes leftover after parsing attributes in process `syz.3.407'. [ 172.538538][ T5674] usb 4-1: USB disconnect, device number 20 [ 173.040919][ T7012] syzkaller0: entered promiscuous mode [ 173.040948][ T7012] syzkaller0: entered allmulticast mode [ 173.351946][ T7020] netlink: 12 bytes leftover after parsing attributes in process `syz.3.415'. [ 173.455148][ T7024] netlink: 4 bytes leftover after parsing attributes in process `syz.0.416'. [ 173.499566][ T5689] gp8psk: usb in 128 operation failed. [ 173.500117][ T5689] gp8psk: usb in 137 operation failed. [ 173.500134][ T5689] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 173.500959][ T5689] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 173.501020][ T5689] usb 3-1: media controller created [ 173.562360][ T5689] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 173.601806][ T5689] gp8psk_fe: Frontend attached [ 173.602215][ T5689] usb 3-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 173.614358][ T5689] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 173.698093][ T5689] gp8psk: usb in 138 operation failed. [ 173.698116][ T5689] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 173.698131][ T5689] gp8psk: found Genpix USB device pID = 203 (hex) [ 173.848932][ T5682] usb 3-1: USB disconnect, device number 22 [ 174.078292][ T7031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.419'. [ 174.208958][ T7031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.419'. [ 174.319302][ T5689] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 174.341348][ T7034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.420'. [ 174.409353][ T5682] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 174.469097][ T5689] usb 2-1: Using ep0 maxpacket: 16 [ 174.469871][ T5689] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 174.472777][ T5689] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 174.472803][ T5689] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 174.476281][ T5689] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.476310][ T5689] usb 2-1: Product: syz [ 174.476327][ T5689] usb 2-1: Manufacturer: syz [ 174.476344][ T5689] usb 2-1: SerialNumber: syz [ 174.545276][ T5689] usb 2-1: 0:2 : does not exist [ 174.545360][ T5689] usb 2-1: unit 9 not found! [ 174.578675][ T7034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.420'. [ 174.796378][ T5782] udevd[5782]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 174.817495][ T7027] tipc: Started in network mode [ 174.817522][ T7027] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 174.817653][ T7027] tipc: Enabled bearer , priority 0 [ 174.875928][ T7027] tipc: Disabling bearer [ 174.991419][ T30] usb 2-1: USB disconnect, device number 19 [ 175.140621][ T5689] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 175.310496][ T5689] usb 4-1: Using ep0 maxpacket: 8 [ 175.311258][ T5689] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 175.314359][ T5689] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 175.314413][ T5689] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 175.314465][ T5689] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 175.314496][ T5689] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 175.314525][ T5689] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 175.314554][ T5689] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 175.314583][ T5689] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 175.314613][ T5689] usb 4-1: config 168 interface 0 has no altsetting 0 [ 175.318583][ T5689] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 175.318624][ T5689] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 175.318665][ T5689] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 175.318695][ T5689] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 175.318722][ T5689] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 175.318749][ T5689] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 175.318779][ T5689] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 175.341029][ T5689] usb 4-1: config 168 interface 0 has no altsetting 0 [ 175.402028][ T5689] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 175.402071][ T5689] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 175.402113][ T5689] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 175.402143][ T5689] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 175.402169][ T5689] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 175.402198][ T5689] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 175.402228][ T5689] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 175.402256][ T5689] usb 4-1: config 168 interface 0 has no altsetting 0 [ 175.580960][ T5689] usb 4-1: string descriptor 0 read error: -22 [ 175.581090][ T5689] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.650250][ T5689] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 175.766042][ T320] IPVS: starting estimator thread 0... [ 175.801507][ T7050] fuse: fd is not a fuse device [ 175.852060][ T7051] IPVS: using max 37 ests per chain, 88800 per kthread [ 176.017123][ T30] usb 4-1: USB disconnect, device number 21 [ 176.180754][ T7057] FAULT_INJECTION: forcing a failure. [ 176.180754][ T7057] name failslab, interval 1, probability 0, space 0, times 0 [ 176.180795][ T7057] CPU: 0 UID: 0 PID: 7057 Comm: syz.4.427 Tainted: G L syzkaller #0 PREEMPT(full) [ 176.180823][ T7057] Tainted: [L]=SOFTLOCKUP [ 176.180832][ T7057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 176.180857][ T7057] Call Trace: [ 176.180867][ T7057] [ 176.180876][ T7057] dump_stack_lvl+0xe8/0x150 [ 176.180914][ T7057] should_fail_ex+0x410/0x560 [ 176.180949][ T7057] should_failslab+0xa8/0x100 [ 176.180980][ T7057] ? skb_clone+0x212/0x3a0 [ 176.181025][ T7057] kmem_cache_alloc_noprof+0xa1/0x600 [ 176.181052][ T7057] ? skb_clone+0x212/0x3a0 [ 176.181094][ T7057] skb_clone+0x212/0x3a0 [ 176.181133][ T7057] __netlink_deliver_tap+0x413/0x860 [ 176.181169][ T7057] ? netlink_deliver_tap+0x2e/0x1b0 [ 176.181195][ T7057] netlink_deliver_tap+0x19c/0x1b0 [ 176.181221][ T7057] netlink_sendskb+0x68/0x140 [ 176.181259][ T7057] netlink_rcv_skb+0x2a4/0x4a0 [ 176.181282][ T7057] ? __pfx_genl_rcv_msg+0x10/0x10 [ 176.181318][ T7057] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 176.181358][ T7057] ? down_read+0x2be/0x330 [ 176.181397][ T7057] genl_rcv+0x28/0x40 [ 176.181423][ T7057] netlink_unicast+0x7bd/0x940 [ 176.181470][ T7057] netlink_sendmsg+0x813/0xb40 [ 176.181504][ T7057] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.181539][ T7057] ? apparmor_socket_sendmsg+0x98/0x360 [ 176.181569][ T7057] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.181592][ T7057] sock_sendmsg_nosec+0x13a/0x180 [ 176.181622][ T7057] ____sys_sendmsg+0x54e/0x850 [ 176.181663][ T7057] ? __pfx_____sys_sendmsg+0x10/0x10 [ 176.181715][ T7057] ___sys_sendmsg+0x2a5/0x360 [ 176.181749][ T7057] ? __lock_acquire+0x747/0x2de0 [ 176.181779][ T7057] ? __pfx____sys_sendmsg+0x10/0x10 [ 176.181813][ T7057] ? get_pid_task+0x20/0x1f0 [ 176.181836][ T7057] ? get_pid_task+0x20/0x1f0 [ 176.181856][ T7057] ? get_pid_task+0x20/0x1f0 [ 176.181917][ T7057] ? __fget_files+0x2a/0x420 [ 176.181950][ T7057] ? __fget_files+0x3a2/0x420 [ 176.181993][ T7057] __sys_sendmsg+0x177/0x240 [ 176.182038][ T7057] ? __pfx___sys_sendmsg+0x10/0x10 [ 176.182092][ T7057] __do_fast_syscall_32+0x27a/0x6a0 [ 176.182126][ T7057] ? do_fast_syscall_32+0x33/0x70 [ 176.182158][ T7057] ? asm_int80_emulation+0x1a/0x20 [ 176.182180][ T7057] ? do_int80_emulation+0x299/0x500 [ 176.182219][ T7057] do_fast_syscall_32+0x33/0x70 [ 176.182252][ T7057] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 176.182281][ T7057] RIP: 0023:0xf70af0ec [ 176.182301][ T7057] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 176.182320][ T7057] RSP: 002b:00000000f549d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 176.182345][ T7057] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800006c0 [ 176.182361][ T7057] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 176.182375][ T7057] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 176.182388][ T7057] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 176.182401][ T7057] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 176.182435][ T7057] [ 177.031478][ T7071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.432'. [ 177.588625][ T7068] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 177.599359][ T7068] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 177.644724][ T7068] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 177.659313][ T7068] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 177.661572][ T7068] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 177.700251][ T7068] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 177.744416][ T7068] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 177.746930][ T7068] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 177.779007][ T7068] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 177.790090][ T7068] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 177.791294][ T7068] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 177.823890][ T7068] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 177.840048][ T7068] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 177.840888][ T7068] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 177.872537][ T7068] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 178.120443][ T5707] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 178.144043][ T7086] FAULT_INJECTION: forcing a failure. [ 178.144043][ T7086] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.144086][ T7086] CPU: 1 UID: 0 PID: 7086 Comm: syz.0.438 Tainted: G L syzkaller #0 PREEMPT(full) [ 178.144121][ T7086] Tainted: [L]=SOFTLOCKUP [ 178.144131][ T7086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 178.144146][ T7086] Call Trace: [ 178.144156][ T7086] [ 178.144167][ T7086] dump_stack_lvl+0xe8/0x150 [ 178.144223][ T7086] should_fail_ex+0x410/0x560 [ 178.144261][ T7086] _copy_to_user+0x31/0xb0 [ 178.144300][ T7086] simple_read_from_buffer+0xe1/0x170 [ 178.144346][ T7086] proc_fail_nth_read+0x1bb/0x230 [ 178.144371][ T7086] ? common_file_perm+0x20e/0x2b0 [ 178.144409][ T7086] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 178.144439][ T7086] ? rw_verify_area+0x24a/0x4c0 [ 178.144481][ T7086] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 178.144508][ T7086] vfs_read+0x213/0xa80 [ 178.144554][ T7086] ? __pfx___mutex_lock+0x10/0x10 [ 178.144591][ T7086] ? __pfx_vfs_read+0x10/0x10 [ 178.144634][ T7086] ? __fget_files+0x2a/0x420 [ 178.144677][ T7086] ? __fget_files+0x3a2/0x420 [ 178.144715][ T7086] ? __fget_files+0x2a/0x420 [ 178.144762][ T7086] ksys_read+0x150/0x270 [ 178.144790][ T7086] ? __pfx_ksys_read+0x10/0x10 [ 178.144821][ T7086] ? asm_int80_emulation+0x1a/0x20 [ 178.144851][ T7086] do_int80_emulation+0x198/0x500 [ 178.144889][ T7086] ? trace_irq_disable+0x3b/0x140 [ 178.144916][ T7086] ? asm_int80_emulation+0x1a/0x20 [ 178.144941][ T7086] ? clear_bhb_loop+0x70/0xc0 [ 178.144967][ T7086] ? clear_bhb_loop+0x70/0xc0 [ 178.144998][ T7086] asm_int80_emulation+0x1a/0x20 [ 178.145024][ T7086] RIP: 0023:0xf71775ab [ 178.145046][ T7086] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 178.145068][ T7086] RSP: 002b:00000000f54364bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 178.145096][ T7086] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000f54365d0 [ 178.145113][ T7086] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 178.145127][ T7086] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 178.145142][ T7086] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 178.145157][ T7086] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 178.145202][ T7086] [ 178.271043][ T5707] usb 4-1: Using ep0 maxpacket: 8 [ 178.272892][ T5707] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 178.298521][ T5707] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 178.298618][ T5707] usb 4-1: config 0 has an invalid descriptor of length 5, skipping remainder of the config [ 178.298693][ T5707] usb 4-1: config 0 has no interface number 0 [ 178.374588][ T5707] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.374688][ T5707] usb 4-1: Product: syz [ 178.374735][ T5707] usb 4-1: Manufacturer: syz [ 178.374784][ T5707] usb 4-1: SerialNumber: syz [ 178.460865][ T5707] usb 4-1: config 0 descriptor?? [ 178.519789][ T5674] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 178.607534][ T7091] FAULT_INJECTION: forcing a failure. [ 178.607534][ T7091] name failslab, interval 1, probability 0, space 0, times 0 [ 178.607578][ T7091] CPU: 1 UID: 0 PID: 7091 Comm: syz.1.440 Tainted: G L syzkaller #0 PREEMPT(full) [ 178.607609][ T7091] Tainted: [L]=SOFTLOCKUP [ 178.607618][ T7091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 178.607632][ T7091] Call Trace: [ 178.607640][ T7091] [ 178.607650][ T7091] dump_stack_lvl+0xe8/0x150 [ 178.607690][ T7091] should_fail_ex+0x410/0x560 [ 178.607724][ T7091] should_failslab+0xa8/0x100 [ 178.607757][ T7091] __kmalloc_noprof+0xfe/0x720 [ 178.607784][ T7091] ? tomoyo_encode+0x2ad/0x570 [ 178.607815][ T7091] ? tomoyo_encode+0x2ad/0x570 [ 178.607862][ T7091] tomoyo_encode+0x2ad/0x570 [ 178.607898][ T7091] tomoyo_realpath_from_path+0x5fa/0x640 [ 178.607939][ T7091] ? tomoyo_path_number_perm+0x219/0x5f0 [ 178.607967][ T7091] tomoyo_path_number_perm+0x246/0x5f0 [ 178.607997][ T7091] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 178.608024][ T7091] ? __lock_acquire+0x747/0x2de0 [ 178.608064][ T7091] ? hook_file_ioctl_compat+0x1f2/0x600 [ 178.608116][ T7091] ? __fget_files+0x2a/0x420 [ 178.608154][ T7091] ? __fget_files+0x3a2/0x420 [ 178.608185][ T7091] ? __fget_files+0x2a/0x420 [ 178.608223][ T7091] security_file_ioctl_compat+0xc3/0x2a0 [ 178.608253][ T7091] __ia32_compat_sys_ioctl+0x139/0x950 [ 178.608284][ T7091] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 178.608312][ T7091] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 178.608348][ T7091] ? __fget_files+0x3a2/0x420 [ 178.608388][ T7091] ? fput+0xa0/0xd0 [ 178.608417][ T7091] ? ksys_write+0x242/0x270 [ 178.608452][ T7091] __do_fast_syscall_32+0x27a/0x6a0 [ 178.608488][ T7091] ? do_fast_syscall_32+0x33/0x70 [ 178.608521][ T7091] ? asm_int80_emulation+0x1a/0x20 [ 178.608543][ T7091] ? do_int80_emulation+0x299/0x500 [ 178.608575][ T7091] ? trace_irq_disable+0x3b/0x140 [ 178.608605][ T7091] do_fast_syscall_32+0x33/0x70 [ 178.608640][ T7091] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 178.608667][ T7091] RIP: 0023:0xf7f450ec [ 178.608688][ T7091] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 178.608707][ T7091] RSP: 002b:00000000f540650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 178.608732][ T7091] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008931 [ 178.608747][ T7091] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 178.608762][ T7091] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 178.608775][ T7091] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 178.608788][ T7091] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 178.608828][ T7091] [ 178.631395][ T7091] ERROR: Out of memory at tomoyo_realpath_from_path. [ 178.710473][ T5707] uvcvideo 4-1:0.31: probe with driver uvcvideo failed with error -22 [ 178.729095][ T5674] usb 5-1: Using ep0 maxpacket: 16 [ 178.739079][ T5674] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 178.758318][ T5674] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 178.758349][ T5674] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 178.792683][ T5707] usb 4-1: USB disconnect, device number 22 [ 178.874320][ T5674] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.874351][ T5674] usb 5-1: Product: syz [ 178.874368][ T5674] usb 5-1: Manufacturer: syz [ 178.874384][ T5674] usb 5-1: SerialNumber: syz [ 179.000350][ T5674] usb 5-1: 0:2 : does not exist [ 179.000424][ T5674] usb 5-1: unit 9 not found! [ 179.088967][ T4932] Bluetooth: hci0: command 0x0c1a tx timeout [ 179.127833][ T7101] netlink: 2 bytes leftover after parsing attributes in process `syz.0.441'. [ 179.151045][ T5782] udevd[5782]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 179.208907][ T5689] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 179.255918][ T7081] tipc: Enabled bearer , priority 0 [ 179.257998][ T7081] tipc: Resetting bearer [ 179.316039][ T7081] tipc: Disabling bearer [ 179.369757][ T5689] usb 3-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 179.371039][ T5689] usb 3-1: config 1 has an invalid interface number: 13 but max is 0 [ 179.371067][ T5689] usb 3-1: config 1 has an invalid descriptor of length 117, skipping remainder of the config [ 179.371089][ T5689] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 179.371113][ T5689] usb 3-1: config 1 has no interface number 1 [ 179.371178][ T5689] usb 3-1: config 1 interface 13 altsetting 1 has a duplicate endpoint with address 0x1, skipping [ 179.371204][ T5689] usb 3-1: config 1 interface 13 altsetting 1 has an endpoint descriptor with address 0x5A, changing to 0xA [ 179.371232][ T5689] usb 3-1: config 1 interface 13 altsetting 1 endpoint 0xA has an invalid bInterval 105, changing to 7 [ 179.371261][ T5689] usb 3-1: config 1 interface 13 altsetting 1 endpoint 0xA has invalid maxpacket 33666, setting to 1024 [ 179.371320][ T5689] usb 3-1: config 1 interface 13 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 179.371350][ T5689] usb 3-1: config 1 interface 13 has no altsetting 0 [ 179.374400][ T5689] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.374430][ T5689] usb 3-1: Product: syz [ 179.374446][ T5689] usb 3-1: Manufacturer: syz [ 179.374463][ T5689] usb 3-1: SerialNumber: syz [ 179.528212][ T5689] usb-storage 3-1:1.0: USB Mass Storage device detected [ 179.541538][ T5707] usb 5-1: USB disconnect, device number 24 [ 179.543486][ T5689] usb-storage 3-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 179.544120][ T5689] scsi host1: usb-storage 3-1:1.0 [ 179.607215][ T5689] usb-storage 3-1:1.13: USB Mass Storage device detected [ 179.620153][ T5689] usb-storage 3-1:1.13: Quirks match for vid 174c pid 55aa: 400000 [ 179.649283][ T4932] Bluetooth: hci1: command 0x0c1a tx timeout [ 179.751436][ T7095] netlink: 4 bytes leftover after parsing attributes in process `syz.2.442'. [ 179.797204][ T30] usb 3-1: USB disconnect, device number 23 [ 179.810593][ T4932] Bluetooth: hci3: command 0x0c1a tx timeout [ 179.810606][ T53] Bluetooth: hci2: command 0x0c1a tx timeout [ 179.891075][ T4932] Bluetooth: hci4: command 0x0c1a tx timeout [ 180.326273][ T7127] netlink: 4 bytes leftover after parsing attributes in process `syz.4.449'. [ 180.326391][ T7127] FAULT_INJECTION: forcing a failure. [ 180.326391][ T7127] name failslab, interval 1, probability 0, space 0, times 0 [ 180.326852][ T7127] CPU: 0 UID: 0 PID: 7127 Comm: syz.4.449 Tainted: G L syzkaller #0 PREEMPT(full) [ 180.326885][ T7127] Tainted: [L]=SOFTLOCKUP [ 180.326894][ T7127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 180.326907][ T7127] Call Trace: [ 180.326916][ T7127] [ 180.326926][ T7127] dump_stack_lvl+0xe8/0x150 [ 180.326964][ T7127] should_fail_ex+0x410/0x560 [ 180.327005][ T7127] should_failslab+0xa8/0x100 [ 180.327038][ T7127] __kmalloc_node_noprof+0x100/0x720 [ 180.327064][ T7127] ? crypto_create_tfm_node+0x81/0x3c0 [ 180.327091][ T7127] ? crypto_create_tfm_node+0x81/0x3c0 [ 180.327125][ T7127] crypto_create_tfm_node+0x81/0x3c0 [ 180.327156][ T7127] crypto_alloc_tfm_node+0x169/0x3e0 [ 180.327194][ T7127] ipcomp_init_state+0x14a/0x290 [ 180.327230][ T7127] ipcomp4_init_state+0xca/0xb70 [ 180.327251][ T7127] ? __xfrm_init_state+0x745/0x1320 [ 180.327285][ T7127] __xfrm_init_state+0x9dd/0x1320 [ 180.327311][ T7127] ? __xfrm_init_state+0x745/0x1320 [ 180.327342][ T7127] xfrm_add_sa+0x2f3f/0x40a0 [ 180.327379][ T7127] ? __pfx_xfrm_add_sa+0x10/0x10 [ 180.327413][ T7127] ? __nla_parse+0x40/0x60 [ 180.327448][ T7127] xfrm_user_rcv_msg+0x7a8/0xf30 [ 180.327482][ T7127] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 180.327543][ T7127] ? __mutex_trylock_common+0x15f/0x270 [ 180.327579][ T7127] ? __pfx___mutex_trylock_common+0x10/0x10 [ 180.327627][ T7127] ? rcu_is_watching+0x16/0xb0 [ 180.327658][ T7127] ? trace_contention_end+0x3d/0x140 [ 180.327706][ T7127] netlink_rcv_skb+0x226/0x4a0 [ 180.327733][ T7127] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 180.327763][ T7127] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 180.327804][ T7127] ? netlink_deliver_tap+0x2e/0x1b0 [ 180.327828][ T7127] ? netlink_deliver_tap+0x2e/0x1b0 [ 180.327855][ T7127] xfrm_netlink_rcv+0x79/0x90 [ 180.327883][ T7127] netlink_unicast+0x7bd/0x940 [ 180.327928][ T7127] netlink_sendmsg+0x813/0xb40 [ 180.327968][ T7127] ? __pfx_netlink_sendmsg+0x10/0x10 [ 180.328010][ T7127] ? apparmor_socket_sendmsg+0x98/0x360 [ 180.328042][ T7127] ? __pfx_netlink_sendmsg+0x10/0x10 [ 180.328065][ T7127] sock_sendmsg_nosec+0x13a/0x180 [ 180.328096][ T7127] ____sys_sendmsg+0x54e/0x850 [ 180.328137][ T7127] ? __pfx_____sys_sendmsg+0x10/0x10 [ 180.328190][ T7127] ___sys_sendmsg+0x2a5/0x360 [ 180.328222][ T7127] ? __lock_acquire+0x747/0x2de0 [ 180.328250][ T7127] ? __pfx____sys_sendmsg+0x10/0x10 [ 180.328282][ T7127] ? get_pid_task+0x20/0x1f0 [ 180.328304][ T7127] ? get_pid_task+0x20/0x1f0 [ 180.328323][ T7127] ? get_pid_task+0x20/0x1f0 [ 180.328378][ T7127] ? __fget_files+0x2a/0x420 [ 180.328411][ T7127] ? __fget_files+0x3a2/0x420 [ 180.328456][ T7127] __sys_sendmsg+0x177/0x240 [ 180.328492][ T7127] ? __pfx___sys_sendmsg+0x10/0x10 [ 180.328546][ T7127] __do_fast_syscall_32+0x27a/0x6a0 [ 180.328581][ T7127] ? do_fast_syscall_32+0x33/0x70 [ 180.328614][ T7127] ? asm_int80_emulation+0x1a/0x20 [ 180.328637][ T7127] ? do_int80_emulation+0x299/0x500 [ 180.328669][ T7127] ? trace_irq_disable+0x3b/0x140 [ 180.328707][ T7127] do_fast_syscall_32+0x33/0x70 [ 180.328741][ T7127] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 180.328770][ T7127] RIP: 0023:0xf70af0ec [ 180.328790][ T7127] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 180.328809][ T7127] RSP: 002b:00000000f549d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 180.328832][ T7127] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000040 [ 180.328847][ T7127] RDX: 0000000000000844 RSI: 0000000000000000 RDI: 0000000000000000 [ 180.328860][ T7127] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 180.328873][ T7127] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 180.328885][ T7127] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 180.328918][ T7127] [ 181.168917][ T4932] Bluetooth: hci0: command 0x0c1a tx timeout [ 181.276211][ T7154] FAULT_INJECTION: forcing a failure. [ 181.276211][ T7154] name failslab, interval 1, probability 0, space 0, times 0 [ 181.276240][ T7154] CPU: 1 UID: 0 PID: 7154 Comm: syz.2.454 Tainted: G L syzkaller #0 PREEMPT(full) [ 181.276262][ T7154] Tainted: [L]=SOFTLOCKUP [ 181.276268][ T7154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 181.276278][ T7154] Call Trace: [ 181.276284][ T7154] [ 181.276291][ T7154] dump_stack_lvl+0xe8/0x150 [ 181.276346][ T7154] should_fail_ex+0x410/0x560 [ 181.276387][ T7154] should_failslab+0xa8/0x100 [ 181.276412][ T7154] __kmalloc_cache_node_noprof+0xaa/0x620 [ 181.276434][ T7154] ? __get_vm_area_node+0x155/0x2f0 [ 181.276458][ T7154] ? __get_vm_area_node+0x155/0x2f0 [ 181.276489][ T7154] __get_vm_area_node+0x155/0x2f0 [ 181.276518][ T7154] __vmalloc_node_range_noprof+0x343/0x1540 [ 181.276545][ T7154] ? n_tty_open+0x1d/0x150 [ 181.276588][ T7154] ? lock_acquire+0x115/0x350 [ 181.276622][ T7154] ? pcpu_alloc+0x10/0x310 [ 181.276662][ T7154] ? do_raw_spin_lock+0x12b/0x2f0 [ 181.276701][ T7154] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 181.276746][ T7154] ? n_tty_open+0x1d/0x150 [ 181.276767][ T7154] vzalloc_noprof+0xb2/0xe0 [ 181.276782][ T7154] ? n_tty_open+0x1d/0x150 [ 181.276804][ T7154] n_tty_open+0x1d/0x150 [ 181.276826][ T7154] tty_ldisc_setup+0xcc/0x270 [ 181.276845][ T7154] tty_init_dev+0x279/0x4d0 [ 181.276864][ T7154] ptmx_open+0xeb/0x2e0 [ 181.276891][ T7154] chrdev_open+0x4d9/0x600 [ 181.276914][ T7154] ? __pfx_chrdev_open+0x10/0x10 [ 181.276940][ T7154] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 181.276965][ T7154] ? __pfx_chrdev_open+0x10/0x10 [ 181.276984][ T7154] do_dentry_open+0x816/0x1380 [ 181.277014][ T7154] vfs_open+0x3b/0x340 [ 181.277033][ T7154] ? path_openat+0x1428/0x1d60 [ 181.277052][ T7154] path_openat+0x1443/0x1d60 [ 181.277084][ T7154] do_file_open+0x23e/0x4a0 [ 181.277106][ T7154] ? __pfx_do_file_open+0x10/0x10 [ 181.277140][ T7154] ? _raw_spin_unlock+0x28/0x50 [ 181.277160][ T7154] ? alloc_fd+0x651/0x6c0 [ 181.277191][ T7154] do_sys_openat2+0x115/0x200 [ 181.277213][ T7154] ? __fget_files+0x3a2/0x420 [ 181.277237][ T7154] ? __pfx_do_sys_openat2+0x10/0x10 [ 181.277262][ T7154] ? fput+0xa0/0xd0 [ 181.277283][ T7154] ? ksys_write+0x242/0x270 [ 181.277318][ T7154] __ia32_compat_sys_openat+0x131/0x160 [ 181.277356][ T7154] __do_fast_syscall_32+0x27a/0x6a0 [ 181.277392][ T7154] ? do_fast_syscall_32+0x33/0x70 [ 181.277428][ T7154] ? asm_int80_emulation+0x1a/0x20 [ 181.277446][ T7154] ? do_int80_emulation+0x299/0x500 [ 181.277489][ T7154] ? trace_irq_disable+0x3b/0x140 [ 181.277510][ T7154] do_fast_syscall_32+0x33/0x70 [ 181.277535][ T7154] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 181.277555][ T7154] RIP: 0023:0xf7f280ec [ 181.277569][ T7154] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 181.277583][ T7154] RSP: 002b:00000000f53a450c EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 181.277600][ T7154] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000080 [ 181.277611][ T7154] RDX: 0000000000004200 RSI: 0000000000000000 RDI: 0000000000000000 [ 181.277621][ T7154] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 181.277630][ T7154] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 181.277639][ T7154] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 181.277663][ T7154] [ 181.311470][ T7154] syz.2.454: vmalloc error: size 9112, align 0x1, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 181.315042][ T7154] CPU: 1 UID: 0 PID: 7154 Comm: syz.2.454 Tainted: G L syzkaller #0 PREEMPT(full) [ 181.315129][ T7154] Tainted: [L]=SOFTLOCKUP [ 181.315151][ T7154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 181.315192][ T7154] Call Trace: [ 181.315215][ T7154] [ 181.315238][ T7154] dump_stack_lvl+0xe8/0x150 [ 181.315345][ T7154] warn_alloc+0x24d/0x270 [ 181.315425][ T7154] ? __kasan_kmalloc+0x22/0xb0 [ 181.315514][ T7154] ? __pfx_warn_alloc+0x10/0x10 [ 181.315587][ T7154] ? __get_vm_area_node+0x155/0x2f0 [ 181.315694][ T7154] ? __get_vm_area_node+0x2a9/0x2f0 [ 181.315802][ T7154] __vmalloc_node_range_noprof+0x36b/0x1540 [ 181.315901][ T7154] ? lock_acquire+0x115/0x350 [ 181.315999][ T7154] ? pcpu_alloc+0x10/0x310 [ 181.316099][ T7154] ? do_raw_spin_lock+0x12b/0x2f0 [ 181.316189][ T7154] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 181.316308][ T7154] ? n_tty_open+0x1d/0x150 [ 181.316386][ T7154] vzalloc_noprof+0xb2/0xe0 [ 181.316435][ T7154] ? n_tty_open+0x1d/0x150 [ 181.316520][ T7154] n_tty_open+0x1d/0x150 [ 181.316596][ T7154] tty_ldisc_setup+0xcc/0x270 [ 181.316671][ T7154] tty_init_dev+0x279/0x4d0 [ 181.316753][ T7154] ptmx_open+0xeb/0x2e0 [ 181.316867][ T7154] chrdev_open+0x4d9/0x600 [ 181.316956][ T7154] ? __pfx_chrdev_open+0x10/0x10 [ 181.317024][ T7154] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 181.317111][ T7154] ? __pfx_chrdev_open+0x10/0x10 [ 181.317178][ T7154] do_dentry_open+0x816/0x1380 [ 181.317294][ T7154] vfs_open+0x3b/0x340 [ 181.317361][ T7154] ? path_openat+0x1428/0x1d60 [ 181.317427][ T7154] path_openat+0x1443/0x1d60 [ 181.317548][ T7154] do_file_open+0x23e/0x4a0 [ 181.317625][ T7154] ? __pfx_do_file_open+0x10/0x10 [ 181.317755][ T7154] ? _raw_spin_unlock+0x28/0x50 [ 181.317829][ T7154] ? alloc_fd+0x651/0x6c0 [ 181.317950][ T7154] do_sys_openat2+0x115/0x200 [ 181.318028][ T7154] ? __fget_files+0x3a2/0x420 [ 181.318123][ T7154] ? __pfx_do_sys_openat2+0x10/0x10 [ 181.318242][ T7154] ? fput+0xa0/0xd0 [ 181.318319][ T7154] ? ksys_write+0x242/0x270 [ 181.318393][ T7154] __ia32_compat_sys_openat+0x131/0x160 [ 181.318534][ T7154] __do_fast_syscall_32+0x27a/0x6a0 [ 181.318631][ T7154] ? do_fast_syscall_32+0x33/0x70 [ 181.318718][ T7154] ? asm_int80_emulation+0x1a/0x20 [ 181.318774][ T7154] ? do_int80_emulation+0x299/0x500 [ 181.318860][ T7154] ? trace_irq_disable+0x3b/0x140 [ 181.318945][ T7154] do_fast_syscall_32+0x33/0x70 [ 181.319029][ T7154] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 181.319105][ T7154] RIP: 0023:0xf7f280ec [ 181.319160][ T7154] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 181.319206][ T7154] RSP: 002b:00000000f53a450c EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 181.319270][ T7154] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000080 [ 181.319313][ T7154] RDX: 0000000000004200 RSI: 0000000000000000 RDI: 0000000000000000 [ 181.319354][ T7154] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 181.319387][ T7154] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 181.319421][ T7154] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 181.319543][ T7154] [ 181.330722][ T7154] Mem-Info: [ 181.330774][ T7154] active_anon:6073 inactive_anon:0 isolated_anon:0 [ 181.330774][ T7154] active_file:17 inactive_file:52849 isolated_file:0 [ 181.330774][ T7154] unevictable:0 dirty:174 writeback:0 [ 181.330774][ T7154] slab_reclaimable:10610 slab_unreclaimable:95752 [ 181.330774][ T7154] mapped:34229 shmem:520 pagetables:1385 [ 181.330774][ T7154] sec_pagetables:0 bounce:0 [ 181.330774][ T7154] kernel_misc_reclaimable:0 [ 181.330774][ T7154] free:1316646 free_pcp:10851 free_cma:0 [ 181.330943][ T7154] Node 0 active_anon:24292kB inactive_anon:0kB active_file:68kB inactive_file:211184kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:136916kB dirty:692kB writeback:0kB shmem:2080kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12608kB pagetables:5424kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 181.331095][ T7154] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 181.331252][ T7154] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 181.331423][ T7154] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 181.331495][ T7154] Node 0 DMA32 free:1311252kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:24292kB inactive_anon:0kB active_file:68kB inactive_file:211184kB unevictable:0kB writepending:692kB zspages:0kB present:3129332kB managed:2546880kB mlocked:0kB bounce:0kB free_pcp:41788kB local_pcp:21124kB free_cma:0kB [ 181.331563][ T7154] lowmem_reserve[]: 0 0 0 0 0 [ 181.331602][ T7154] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 181.332400][ T7154] lowmem_reserve[]: 0 0 0 0 0 [ 181.332444][ T7154] Node 1 Normal free:3939972kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:1616kB local_pcp:0kB free_cma:0kB [ 181.332509][ T7154] lowmem_reserve[]: 0 0 0 0 0 [ 181.332547][ T7154] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 181.337799][ T7154] Node 0 DMA32: 77*4kB (UM) 216*8kB (UME) 752*16kB (UM) 607*32kB (UM) 212*64kB (UME) 153*128kB (UME) 74*256kB (UM) 26*512kB (UME) 20*1024kB (UM) 12*2048kB (UM) 285*4096kB (UM) = 1311316kB [ 181.338303][ T7154] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 181.338610][ T7154] Node 1 Normal: 3*4kB (M) 5*8kB (UM) 7*16kB (UM) 7*32kB (UM) 6*64kB (UM) 3*128kB (UM) 4*256kB (M) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (M) 960*4096kB (UM) = 3939972kB [ 181.348338][ T7154] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 181.348359][ T7154] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 181.348383][ T7154] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 181.348401][ T7154] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 181.348418][ T7154] 53382 total pagecache pages [ 181.348431][ T7154] 0 pages in swap cache [ 181.348439][ T7154] Free swap = 124996kB [ 181.348448][ T7154] Total swap = 124996kB [ 181.348457][ T7154] 2097051 pages RAM [ 181.348465][ T7154] 0 pages HighMem/MovableOnly [ 181.348472][ T7154] 428715 pages reserved [ 181.348480][ T7154] 0 pages cma reserved [ 181.348687][ T7154] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 181.730370][ T4932] Bluetooth: hci1: command 0x0c1a tx timeout [ 181.889479][ T4932] Bluetooth: hci2: command 0x0c1a tx timeout [ 181.889600][ T4932] Bluetooth: hci3: command 0x0c1a tx timeout [ 181.969838][ T53] Bluetooth: hci4: command 0x0c1a tx timeout [ 182.099888][ T7154] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 182.114811][ T7154] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 182.163488][ T7154] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 182.219156][ T7154] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 182.234965][ T7154] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 183.146361][ T7178] fuse: Bad value for 'fd' [ 183.533139][ T7186] fuse: Bad value for 'fd' [ 183.534314][ T7186] FAULT_INJECTION: forcing a failure. [ 183.534314][ T7186] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 183.534352][ T7186] CPU: 0 UID: 0 PID: 7186 Comm: syz.1.465 Tainted: G L syzkaller #0 PREEMPT(full) [ 183.534376][ T7186] Tainted: [L]=SOFTLOCKUP [ 183.534382][ T7186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 183.534392][ T7186] Call Trace: [ 183.534398][ T7186] [ 183.534405][ T7186] dump_stack_lvl+0xe8/0x150 [ 183.534434][ T7186] should_fail_ex+0x410/0x560 [ 183.534460][ T7186] _copy_to_user+0x31/0xb0 [ 183.534485][ T7186] simple_read_from_buffer+0xe1/0x170 [ 183.534514][ T7186] proc_fail_nth_read+0x1bb/0x230 [ 183.534530][ T7186] ? common_file_perm+0x20e/0x2b0 [ 183.534553][ T7186] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 183.534572][ T7186] ? rw_verify_area+0x24a/0x4c0 [ 183.534602][ T7186] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 183.534618][ T7186] vfs_read+0x213/0xa80 [ 183.534650][ T7186] ? __pfx___mutex_lock+0x10/0x10 [ 183.534674][ T7186] ? __pfx_vfs_read+0x10/0x10 [ 183.534700][ T7186] ? __fget_files+0x2a/0x420 [ 183.534751][ T7186] ? __fget_files+0x3a2/0x420 [ 183.534784][ T7186] ? __fget_files+0x2a/0x420 [ 183.534826][ T7186] ksys_read+0x150/0x270 [ 183.534845][ T7186] ? kmem_cache_free+0x182/0x650 [ 183.534874][ T7186] ? __pfx_ksys_read+0x10/0x10 [ 183.534902][ T7186] ? asm_int80_emulation+0x1a/0x20 [ 183.534942][ T7186] do_int80_emulation+0x198/0x500 [ 183.534968][ T7186] ? trace_irq_disable+0x3b/0x140 [ 183.534985][ T7186] ? asm_int80_emulation+0x1a/0x20 [ 183.535000][ T7186] ? clear_bhb_loop+0x70/0xc0 [ 183.535016][ T7186] ? clear_bhb_loop+0x70/0xc0 [ 183.535036][ T7186] asm_int80_emulation+0x1a/0x20 [ 183.535051][ T7186] RIP: 0023:0xf71475ab [ 183.535066][ T7186] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 183.535079][ T7186] RSP: 002b:00000000f53e54bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 183.535096][ T7186] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53e55d0 [ 183.535107][ T7186] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 183.535116][ T7186] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 183.535126][ T7186] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 183.535135][ T7186] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 183.535158][ T7186] [ 183.695086][ T7174] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 183.697381][ T7174] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 183.744792][ T7174] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 183.788288][ T7174] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 183.798384][ T7174] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 185.168975][ T53] Bluetooth: hci0: command 0x0c1a tx timeout [ 185.309412][ T5689] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 185.440024][ T152] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 185.729154][ T53] Bluetooth: hci2: command 0x0c1a tx timeout [ 185.729189][ T53] Bluetooth: hci1: command 0x0c1a tx timeout [ 185.754407][ T7216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.769496][ T7216] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.809706][ T4932] Bluetooth: hci4: command 0x0c1a tx timeout [ 185.810031][ T53] Bluetooth: hci3: command 0x0c1a tx timeout [ 185.957945][ T7223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.475'. [ 186.056176][ T7216] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 186.082043][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.082164][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.107927][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.108002][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.235285][ T7223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.475'. [ 186.374283][ T5689] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 186.451234][ T62] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 186.451512][ T62] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 186.606258][ T7233] FAULT_INJECTION: forcing a failure. [ 186.606258][ T7233] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.606309][ T7233] CPU: 0 UID: 0 PID: 7233 Comm: syz.3.478 Tainted: G L syzkaller #0 PREEMPT(full) [ 186.606340][ T7233] Tainted: [L]=SOFTLOCKUP [ 186.606348][ T7233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 186.606362][ T7233] Call Trace: [ 186.606371][ T7233] [ 186.606381][ T7233] dump_stack_lvl+0xe8/0x150 [ 186.606420][ T7233] should_fail_ex+0x410/0x560 [ 186.606463][ T7233] copy_folio_from_iter_atomic+0x45a/0x1a30 [ 186.606495][ T7233] ? shmem_allowable_huge_orders+0x325/0x6c0 [ 186.606547][ T7233] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 186.606587][ T7233] ? shmem_write_begin+0x1d8/0x330 [ 186.606625][ T7233] generic_perform_write+0x5c7/0x8f0 [ 186.606677][ T7233] ? __pfx_generic_perform_write+0x10/0x10 [ 186.606710][ T7233] ? down_write+0x16b/0x200 [ 186.606743][ T7233] ? generic_write_checks_count+0x41a/0x520 [ 186.606779][ T7233] ? file_update_time_flags+0x2d5/0x440 [ 186.606808][ T7233] shmem_file_write_iter+0xf8/0x120 [ 186.606845][ T7233] do_iter_readv_writev+0x612/0x8c0 [ 186.606873][ T7233] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 186.606915][ T7233] vfs_writev+0x343/0x990 [ 186.606955][ T7233] ? __pfx_vfs_writev+0x10/0x10 [ 186.606998][ T7233] ? __fget_files+0x2a/0x420 [ 186.607038][ T7233] ? __fget_files+0x3a2/0x420 [ 186.607069][ T7233] ? __fget_files+0x2a/0x420 [ 186.607112][ T7233] do_writev+0x154/0x2e0 [ 186.607144][ T7233] ? __pfx_do_writev+0x10/0x10 [ 186.607184][ T7233] __do_fast_syscall_32+0x27a/0x6a0 [ 186.607220][ T7233] ? do_fast_syscall_32+0x33/0x70 [ 186.607254][ T7233] ? asm_int80_emulation+0x1a/0x20 [ 186.607275][ T7233] ? do_int80_emulation+0x299/0x500 [ 186.607310][ T7233] ? trace_irq_disable+0x3b/0x140 [ 186.607331][ T7233] do_fast_syscall_32+0x33/0x70 [ 186.607356][ T7233] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 186.607376][ T7233] RIP: 0023:0xf7f330ec [ 186.607391][ T7233] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 186.607404][ T7233] RSP: 002b:00000000f53f650c EFLAGS: 00000206 ORIG_RAX: 0000000000000092 [ 186.607421][ T7233] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000 [ 186.607432][ T7233] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 186.607442][ T7233] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 186.607457][ T7233] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 186.607466][ T7233] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 186.607490][ T7233] [ 186.821217][ T5682] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 187.537528][ T7252] netlink: 4 bytes leftover after parsing attributes in process `syz.1.486'. [ 187.599959][ T7252] netlink: 4 bytes leftover after parsing attributes in process `syz.1.486'. [ 187.718296][ T7257] FAULT_INJECTION: forcing a failure. [ 187.718296][ T7257] name failslab, interval 1, probability 0, space 0, times 0 [ 187.718324][ T7257] CPU: 1 UID: 0 PID: 7257 Comm: syz.3.487 Tainted: G L syzkaller #0 PREEMPT(full) [ 187.718345][ T7257] Tainted: [L]=SOFTLOCKUP [ 187.718352][ T7257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 187.718361][ T7257] Call Trace: [ 187.718367][ T7257] [ 187.718374][ T7257] dump_stack_lvl+0xe8/0x150 [ 187.718402][ T7257] should_fail_ex+0x410/0x560 [ 187.718433][ T7257] should_failslab+0xa8/0x100 [ 187.718457][ T7257] __kmalloc_noprof+0xfe/0x720 [ 187.718475][ T7257] ? tomoyo_encode+0x2ad/0x570 [ 187.718498][ T7257] ? tomoyo_encode+0x2ad/0x570 [ 187.718528][ T7257] tomoyo_encode+0x2ad/0x570 [ 187.718555][ T7257] tomoyo_realpath_from_path+0x5fa/0x640 [ 187.718586][ T7257] ? tomoyo_path_number_perm+0x219/0x5f0 [ 187.718606][ T7257] tomoyo_path_number_perm+0x246/0x5f0 [ 187.718628][ T7257] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 187.718647][ T7257] ? __lock_acquire+0x747/0x2de0 [ 187.718676][ T7257] ? hook_file_ioctl_compat+0x1f2/0x600 [ 187.718714][ T7257] ? __fget_files+0x2a/0x420 [ 187.718741][ T7257] ? __fget_files+0x3a2/0x420 [ 187.718764][ T7257] ? __fget_files+0x2a/0x420 [ 187.718818][ T7257] security_file_ioctl_compat+0xc3/0x2a0 [ 187.718847][ T7257] __ia32_compat_sys_ioctl+0x139/0x950 [ 187.718877][ T7257] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 187.718905][ T7257] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 187.718940][ T7257] ? __fget_files+0x3a2/0x420 [ 187.718979][ T7257] ? fput+0xa0/0xd0 [ 187.719014][ T7257] ? ksys_write+0x242/0x270 [ 187.719050][ T7257] __do_fast_syscall_32+0x27a/0x6a0 [ 187.719085][ T7257] ? do_fast_syscall_32+0x33/0x70 [ 187.719119][ T7257] ? asm_int80_emulation+0x1a/0x20 [ 187.719141][ T7257] ? do_int80_emulation+0x299/0x500 [ 187.719170][ T7257] ? trace_irq_disable+0x3b/0x140 [ 187.719191][ T7257] do_fast_syscall_32+0x33/0x70 [ 187.719215][ T7257] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 187.719235][ T7257] RIP: 0023:0xf7f330ec [ 187.719249][ T7257] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 187.719263][ T7257] RSP: 002b:00000000f53f650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 187.719286][ T7257] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008931 [ 187.719297][ T7257] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 187.719312][ T7257] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 187.719321][ T7257] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 187.719330][ T7257] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 187.719353][ T7257] [ 187.789621][ T7257] ERROR: Out of memory at tomoyo_realpath_from_path. [ 188.330432][ T5707] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 188.455590][ T7266] netlink: 52 bytes leftover after parsing attributes in process `syz.4.491'. [ 188.459644][ T5707] usb 2-1: device descriptor read/64, error -71 [ 188.699038][ T5707] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 188.831867][ T5707] usb 2-1: device descriptor read/64, error -71 [ 188.942820][ T5707] usb usb2-port1: attempt power cycle [ 189.280109][ T5707] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 189.299612][ T5707] usb 2-1: device descriptor read/8, error -71 [ 189.427660][ T7282] netlink: 4 bytes leftover after parsing attributes in process `syz.2.498'. [ 189.482799][ T7282] netlink: 4 bytes leftover after parsing attributes in process `syz.2.498'. [ 189.538957][ T5707] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 189.566805][ T5707] usb 2-1: device descriptor read/8, error -71 [ 189.670376][ T5707] usb usb2-port1: unable to enumerate USB device [ 189.964447][ T7293] FAULT_INJECTION: forcing a failure. [ 189.964447][ T7293] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.964475][ T7293] CPU: 1 UID: 0 PID: 7293 Comm: syz.4.502 Tainted: G L syzkaller #0 PREEMPT(full) [ 189.964496][ T7293] Tainted: [L]=SOFTLOCKUP [ 189.964502][ T7293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 189.964512][ T7293] Call Trace: [ 189.964518][ T7293] [ 189.964524][ T7293] dump_stack_lvl+0xe8/0x150 [ 189.964552][ T7293] should_fail_ex+0x410/0x560 [ 189.964576][ T7293] _copy_from_user+0x2d/0xb0 [ 189.964599][ T7293] lo_ioctl+0x798/0x2010 [ 189.964628][ T7293] ? __lock_acquire+0x747/0x2de0 [ 189.964646][ T7293] ? __pfx_lo_ioctl+0x10/0x10 [ 189.964672][ T7293] ? __lock_acquire+0x747/0x2de0 [ 189.964704][ T7293] ? lock_acquire+0x115/0x350 [ 189.964728][ T7293] ? lock_acquire+0x115/0x350 [ 189.964751][ T7293] ? unwind_next_frame+0x8f/0x2550 [ 189.964772][ T7293] ? unwind_next_frame+0x8f/0x2550 [ 189.964791][ T7293] ? unwind_next_frame+0x1baf/0x2550 [ 189.964819][ T7293] ? __lock_acquire+0x747/0x2de0 [ 189.964843][ T7293] ? __lock_acquire+0x747/0x2de0 [ 189.964866][ T7293] ? __lock_acquire+0x747/0x2de0 [ 189.964888][ T7293] ? __lock_acquire+0x747/0x2de0 [ 189.964916][ T7293] ? lock_acquire+0x115/0x350 [ 189.964939][ T7293] ? __lock_acquire+0x747/0x2de0 [ 189.964963][ T7293] ? __lock_acquire+0x747/0x2de0 [ 189.964986][ T7293] ? __lock_acquire+0x747/0x2de0 [ 189.965008][ T7293] ? __lock_acquire+0x747/0x2de0 [ 189.965036][ T7293] ? lock_acquire+0x115/0x350 [ 189.965057][ T7293] ? lock_acquire+0x115/0x350 [ 189.965081][ T7293] ? is_bpf_text_address+0x26/0x2b0 [ 189.965106][ T7293] ? is_bpf_text_address+0x292/0x2b0 [ 189.965126][ T7293] ? is_bpf_text_address+0x26/0x2b0 [ 189.965149][ T7293] ? kernel_text_address+0xa5/0xe0 [ 189.965169][ T7293] ? __kernel_text_address+0xd/0x30 [ 189.965186][ T7293] ? unwind_get_return_address+0x4d/0x90 [ 189.965204][ T7293] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 189.965229][ T7293] ? arch_stack_walk+0xfb/0x150 [ 189.965256][ T7293] ? stack_trace_save+0xa9/0x100 [ 189.965272][ T7293] ? __pfx_stack_trace_save+0x10/0x10 [ 189.965286][ T7293] ? kasan_save_track+0x4f/0x80 [ 189.965307][ T7293] ? stack_depot_save_flags+0x33/0x7f0 [ 189.965327][ T7293] ? __lock_acquire+0x747/0x2de0 [ 189.965372][ T7293] ? blkdev_common_ioctl+0x14b7/0x3250 [ 189.965398][ T7293] lo_compat_ioctl+0x324/0x3f0 [ 189.965425][ T7293] ? __pfx_lo_compat_ioctl+0x10/0x10 [ 189.965450][ T7293] ? kasan_quarantine_put+0xbb/0x1f0 [ 189.965475][ T7293] ? tomoyo_path_number_perm+0x219/0x5f0 [ 189.965496][ T7293] ? tomoyo_path_number_perm+0x219/0x5f0 [ 189.965518][ T7293] ? do_vfs_ioctl+0x116f/0x1530 [ 189.965538][ T7293] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 189.965566][ T7293] ? hook_file_ioctl_compat+0x1f2/0x600 [ 189.965598][ T7293] ? __pfx_lo_compat_ioctl+0x10/0x10 [ 189.965624][ T7293] compat_blkdev_ioctl+0x5ea/0x7c0 [ 189.965647][ T7293] ? __fget_files+0x2a/0x420 [ 189.965674][ T7293] ? __pfx_compat_blkdev_ioctl+0x10/0x10 [ 189.965697][ T7293] ? __fget_files+0x2a/0x420 [ 189.965725][ T7293] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 189.965753][ T7293] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 189.965774][ T7293] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 189.965794][ T7293] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 189.965819][ T7293] ? __fget_files+0x3a2/0x420 [ 189.965848][ T7293] ? fput+0xa0/0xd0 [ 189.965869][ T7293] ? ksys_write+0x242/0x270 [ 189.965893][ T7293] __do_fast_syscall_32+0x27a/0x6a0 [ 189.965918][ T7293] ? do_fast_syscall_32+0x33/0x70 [ 189.965942][ T7293] ? asm_int80_emulation+0x1a/0x20 [ 189.965958][ T7293] ? do_int80_emulation+0x299/0x500 [ 189.965982][ T7293] ? trace_irq_disable+0x3b/0x140 [ 189.966003][ T7293] do_fast_syscall_32+0x33/0x70 [ 189.966027][ T7293] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 189.966047][ T7293] RIP: 0023:0xf70af0ec [ 189.966061][ T7293] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 189.966075][ T7293] RSP: 002b:00000000f549d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 189.966091][ T7293] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000004c0a [ 189.966102][ T7293] RDX: 00000000800002c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 189.966112][ T7293] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 189.966121][ T7293] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 189.966132][ T7293] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 189.966154][ T7293] [ 190.849077][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 191.296951][ T7307] 8021q: adding VLAN 0 to HW filter on device bond1 [ 191.319497][ T193] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 191.348978][ T5707] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 191.425524][ T7314] netlink: 4 bytes leftover after parsing attributes in process `syz.0.510'. [ 191.469406][ T193] usb 5-1: Using ep0 maxpacket: 32 [ 191.471124][ T193] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 191.473932][ T193] usb 5-1: config 1 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 217, changing to 11 [ 191.473957][ T193] usb 5-1: config 1 interface 0 altsetting 9 bulk endpoint 0x82 has invalid maxpacket 64 [ 191.473978][ T193] usb 5-1: config 1 interface 0 altsetting 9 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 191.473997][ T193] usb 5-1: config 1 interface 0 has no altsetting 0 [ 191.479189][ T5707] usb 3-1: device descriptor read/64, error -71 [ 191.546759][ T193] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.547466][ T193] usb 5-1: Product: ౹뢎섡雘섊⟹갯쟷쒩틂珜誣꾲耷鶦䣊颔汲臋담鋝㏁試顒쪠頩倷 [ 191.547491][ T193] usb 5-1: Manufacturer: ⸍蔝掆ᄍᕅ四耠싧Ч廱谓ᬞ戩閨㱯겭㕵뛧⤨ྰﮞ܎╩쮣鏭䋣淵燉轁蚘끆틘ﴫ丷䷃楛⌕ [ 191.547517][ T193] usb 5-1: SerialNumber: ည [ 191.610507][ T7301] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 191.610631][ T7301] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 191.656193][ T7314] netlink: 4 bytes leftover after parsing attributes in process `syz.0.510'. [ 191.730188][ T5707] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 191.817747][ T7302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.818363][ T7302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.859925][ T5707] usb 3-1: device descriptor read/64, error -71 [ 191.884105][ T31] kauditd_printk_skb: 26 callbacks suppressed [ 191.884126][ T31] audit: type=1800 audit(1790612634.205:232): pid=7321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.512" name="/" dev="fuse" ino=1 res=0 errno=0 [ 191.954836][ T7321] loop4: detected capacity change from 0 to 524287964 [ 191.970990][ T5707] usb usb3-port1: attempt power cycle [ 192.019961][ T193] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 192.042056][ T193] usb 5-1: USB disconnect, device number 25 [ 192.090234][ T7327] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 192.139163][ T7331] netlink: 80 bytes leftover after parsing attributes in process `syz.0.516'. [ 192.316467][ T5707] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 192.331142][ T5707] usb 3-1: device descriptor read/8, error -71 [ 192.458702][ T7339] netlink: 132 bytes leftover after parsing attributes in process `syz.0.520'. [ 192.477540][ T7342] syzkaller0: entered promiscuous mode [ 192.477566][ T7342] syzkaller0: entered allmulticast mode [ 192.494512][ T7342] FAULT_INJECTION: forcing a failure. [ 192.494512][ T7342] name failslab, interval 1, probability 0, space 0, times 0 [ 192.494550][ T7342] CPU: 0 UID: 0 PID: 7342 Comm: syz.1.521 Tainted: G L syzkaller #0 PREEMPT(full) [ 192.494580][ T7342] Tainted: [L]=SOFTLOCKUP [ 192.494589][ T7342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 192.494602][ T7342] Call Trace: [ 192.494611][ T7342] [ 192.494621][ T7342] dump_stack_lvl+0xe8/0x150 [ 192.494658][ T7342] should_fail_ex+0x410/0x560 [ 192.494691][ T7342] ? __alloc_skb+0x1db/0x7a0 [ 192.494720][ T7342] should_failslab+0xa8/0x100 [ 192.494752][ T7342] ? __alloc_skb+0x1db/0x7a0 [ 192.494780][ T7342] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 192.494809][ T7342] ? __alloc_skb+0x18d/0x7a0 [ 192.494838][ T7342] ? __alloc_skb+0x1db/0x7a0 [ 192.494876][ T7342] __alloc_skb+0x1db/0x7a0 [ 192.494908][ T7342] alloc_skb_with_frags+0xc6/0x760 [ 192.494952][ T7342] sock_alloc_send_pskb+0x878/0x990 [ 192.494980][ T7342] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 192.495020][ T7342] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 192.495047][ T7342] ? dev_get_by_index+0x22/0x2d0 [ 192.495070][ T7342] ? dev_get_by_index+0x22/0x2d0 [ 192.495099][ T7342] packet_sendmsg+0x33a6/0x5150 [ 192.495140][ T7342] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 192.495200][ T7342] ? __lock_acquire+0x747/0x2de0 [ 192.495237][ T7342] ? __pfx_packet_sendmsg+0x10/0x10 [ 192.495264][ T7342] ? aa_sk_perm+0x713/0x900 [ 192.495301][ T7342] ? __pfx_aa_sk_perm+0x10/0x10 [ 192.495333][ T7342] ? aa_sock_msg_perm+0x144/0x210 [ 192.495368][ T7342] ? apparmor_socket_sendmsg+0x98/0x360 [ 192.495396][ T7342] ? __pfx_packet_sendmsg+0x10/0x10 [ 192.495422][ T7342] sock_sendmsg_nosec+0x13a/0x180 [ 192.495452][ T7342] ____sys_sendmsg+0x54e/0x850 [ 192.495491][ T7342] ? __pfx_____sys_sendmsg+0x10/0x10 [ 192.495540][ T7342] ___sys_sendmsg+0x2a5/0x360 [ 192.495574][ T7342] ? __lock_acquire+0x747/0x2de0 [ 192.495603][ T7342] ? __pfx____sys_sendmsg+0x10/0x10 [ 192.495636][ T7342] ? get_pid_task+0x20/0x1f0 [ 192.495658][ T7342] ? get_pid_task+0x20/0x1f0 [ 192.495678][ T7342] ? get_pid_task+0x20/0x1f0 [ 192.495732][ T7342] ? __fget_files+0x2a/0x420 [ 192.495765][ T7342] ? __fget_files+0x3a2/0x420 [ 192.495808][ T7342] __sys_sendmsg+0x177/0x240 [ 192.495846][ T7342] ? __pfx___sys_sendmsg+0x10/0x10 [ 192.495900][ T7342] __do_fast_syscall_32+0x27a/0x6a0 [ 192.495936][ T7342] ? do_fast_syscall_32+0x33/0x70 [ 192.495969][ T7342] ? asm_int80_emulation+0x1a/0x20 [ 192.495991][ T7342] ? do_int80_emulation+0x299/0x500 [ 192.496023][ T7342] ? trace_irq_disable+0x3b/0x140 [ 192.496052][ T7342] do_fast_syscall_32+0x33/0x70 [ 192.496087][ T7342] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 192.496116][ T7342] RIP: 0023:0xf7f450ec [ 192.496136][ T7342] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 192.496156][ T7342] RSP: 002b:00000000f540650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 192.496189][ T7342] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800000c0 [ 192.496205][ T7342] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 192.496219][ T7342] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 192.496232][ T7342] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 192.496246][ T7342] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 192.496279][ T7342] [ 192.585975][ T5707] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 192.619122][ T5707] usb 3-1: device descriptor read/8, error -71 [ 192.746654][ T5707] usb usb3-port1: unable to enumerate USB device [ 193.123573][ T25] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 193.126297][ T7356] netlink: 4 bytes leftover after parsing attributes in process `syz.1.523'. [ 193.212738][ T7356] netlink: 4 bytes leftover after parsing attributes in process `syz.1.523'. [ 193.270710][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 193.271703][ T25] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 193.273099][ T25] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 193.273160][ T25] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 193.273188][ T25] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 193.273219][ T25] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 193.273249][ T25] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 193.273299][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.461103][ T7360] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 193.461330][ T7360] block device autoloading is deprecated and will be removed. [ 193.585298][ T25] usb 4-1: GET_CAPABILITIES returned 0 [ 193.585334][ T25] usbtmc 4-1:16.0: can't read capabilities [ 193.818464][ T30] usb 4-1: USB disconnect, device number 23 [ 194.340578][ T7378] usb usb7: usbfs: process 7378 (syz.4.528) did not claim interface 0 before use [ 194.452109][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.452174][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.723465][ T4932] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 194.775251][ T7390] netlink: 12 bytes leftover after parsing attributes in process `syz.1.532'. [ 194.851033][ T7392] warning: `syz.2.533' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 195.217607][ T7397] netlink: 4 bytes leftover after parsing attributes in process `syz.2.535'. [ 195.281179][ T7397] netlink: 4 bytes leftover after parsing attributes in process `syz.2.535'. [ 195.599597][ T5689] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 195.645522][ T7407] FAULT_INJECTION: forcing a failure. [ 195.645522][ T7407] name failslab, interval 1, probability 0, space 0, times 0 [ 195.645563][ T7407] CPU: 1 UID: 0 PID: 7407 Comm: syz.2.539 Tainted: G L syzkaller #0 PREEMPT(full) [ 195.645594][ T7407] Tainted: [L]=SOFTLOCKUP [ 195.645603][ T7407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 195.645617][ T7407] Call Trace: [ 195.645626][ T7407] [ 195.645636][ T7407] dump_stack_lvl+0xe8/0x150 [ 195.645676][ T7407] should_fail_ex+0x410/0x560 [ 195.645712][ T7407] should_failslab+0xa8/0x100 [ 195.645746][ T7407] kmem_cache_alloc_lru_noprof+0xa7/0x5f0 [ 195.645773][ T7407] ? fuse_alloc_inode+0x2e/0x170 [ 195.645804][ T7407] ? fuse_alloc_inode+0x2e/0x170 [ 195.645843][ T7407] fuse_alloc_inode+0x2e/0x170 [ 195.645878][ T7407] ? __pfx_fuse_alloc_inode+0x10/0x10 [ 195.645909][ T7407] alloc_inode+0x6a/0x1b0 [ 195.645939][ T7407] ? __pfx_fuse_inode_eq+0x10/0x10 [ 195.645966][ T7407] ? __pfx_fuse_inode_set+0x10/0x10 [ 195.645995][ T7407] iget5_locked+0x4a/0xa0 [ 195.646033][ T7407] fuse_iget+0x37d/0x9d0 [ 195.646076][ T7407] ? __pfx_fuse_iget+0x10/0x10 [ 195.646115][ T7407] fuse_lookup_name+0x703/0x870 [ 195.646146][ T7407] ? trace_contention_end+0x3d/0x140 [ 195.646191][ T7407] ? __pfx_fuse_lookup_name+0x10/0x10 [ 195.646240][ T7407] ? __lock_acquire+0x747/0x2de0 [ 195.646290][ T7407] fuse_lookup+0x20b/0x4f0 [ 195.646353][ T7407] ? __pfx_fuse_lookup+0x10/0x10 [ 195.646391][ T7407] ? do_raw_spin_lock+0x12b/0x2f0 [ 195.646437][ T7407] ? do_raw_spin_unlock+0xf5/0x200 [ 195.646475][ T7407] ? _raw_spin_unlock+0x28/0x50 [ 195.646502][ T7407] ? d_alloc+0x144/0x190 [ 195.646528][ T7407] lookup_one_qstr_excl+0x12d/0x360 [ 195.646572][ T7407] filename_unlinkat+0x2ba/0x610 [ 195.646621][ T7407] ? __pfx_filename_unlinkat+0x10/0x10 [ 195.646651][ T7407] ? strncpy_from_user+0x150/0x2c0 [ 195.646683][ T7407] ? do_getname+0x151/0x250 [ 195.646717][ T7407] __se_sys_unlinkat+0x83/0x1a0 [ 195.646761][ T7407] __do_fast_syscall_32+0x27a/0x6a0 [ 195.646797][ T7407] ? do_fast_syscall_32+0x33/0x70 [ 195.646830][ T7407] ? asm_int80_emulation+0x1a/0x20 [ 195.646852][ T7407] ? do_int80_emulation+0x299/0x500 [ 195.646884][ T7407] ? trace_irq_disable+0x3b/0x140 [ 195.646912][ T7407] do_fast_syscall_32+0x33/0x70 [ 195.646945][ T7407] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 195.646971][ T7407] RIP: 0023:0xf7f280ec [ 195.646991][ T7407] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 195.647010][ T7407] RSP: 002b:00000000f53e650c EFLAGS: 00000206 ORIG_RAX: 000000000000012d [ 195.647033][ T7407] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000040 [ 195.647049][ T7407] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 195.647061][ T7407] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 195.647075][ T7407] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 195.647088][ T7407] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 195.647121][ T7407] [ 195.749681][ T5689] usb 2-1: Using ep0 maxpacket: 8 [ 195.764564][ T5689] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 195.802043][ T5689] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 195.802089][ T5689] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 195.802164][ T5689] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 195.802196][ T5689] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 195.802225][ T5689] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 195.802254][ T5689] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 195.802283][ T5689] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 195.802308][ T5689] usb 2-1: config 168 interface 0 has no altsetting 0 [ 195.851128][ T5689] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 195.851172][ T5689] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 195.851213][ T5689] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 195.851242][ T5689] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 195.851269][ T5689] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 195.851295][ T5689] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 195.851324][ T5689] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 195.851356][ T5689] usb 2-1: config 168 interface 0 has no altsetting 0 [ 195.896366][ T5689] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 195.896411][ T5689] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 195.896454][ T5689] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 195.896485][ T5689] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 195.896513][ T5689] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 195.896542][ T5689] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 195.896571][ T5689] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 195.896600][ T5689] usb 2-1: config 168 interface 0 has no altsetting 0 [ 196.033989][ T5689] usb 2-1: string descriptor 0 read error: -22 [ 196.034126][ T5689] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.284610][ T5689] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 196.565652][ T7417] netlink: 64 bytes leftover after parsing attributes in process `syz.3.541'. [ 196.598381][ T7418] IPVS: wrr: TCP 127.0.0.1:21 - no destination available [ 196.602447][ T12] IPVS: starting estimator thread 0... [ 196.618101][ T30] usb 2-1: USB disconnect, device number 24 [ 196.689749][ T7419] IPVS: using max 24 ests per chain, 57600 per kthread [ 196.733709][ T7421] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 196.733738][ T7421] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 197.180191][ T5689] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 197.232418][ T7437] netlink: 4 bytes leftover after parsing attributes in process `syz.4.546'. [ 197.332475][ T5689] usb 4-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 197.336166][ T5689] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 197.336325][ T5689] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.410043][ T5689] as10x_usb: device has been detected [ 197.411215][ T5689] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 197.446701][ T5689] usb 4-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 197.558573][ T5689] as10x_usb: error during firmware upload part1 [ 197.566320][ T5689] Registered device Abilis Systems DVB-Titan [ 197.623122][ T7441] FAULT_INJECTION: forcing a failure. [ 197.623122][ T7441] name failslab, interval 1, probability 0, space 0, times 0 [ 197.623174][ T7441] CPU: 1 UID: 0 PID: 7441 Comm: syz.2.548 Tainted: G L syzkaller #0 PREEMPT(full) [ 197.623205][ T7441] Tainted: [L]=SOFTLOCKUP [ 197.623214][ T7441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 197.623228][ T7441] Call Trace: [ 197.623237][ T7441] [ 197.623247][ T7441] dump_stack_lvl+0xe8/0x150 [ 197.623285][ T7441] should_fail_ex+0x410/0x560 [ 197.623319][ T7441] should_failslab+0xa8/0x100 [ 197.623352][ T7441] __kmalloc_cache_noprof+0xa3/0x600 [ 197.623380][ T7441] ? fuse_dentry_init+0x51/0x100 [ 197.623409][ T7441] ? fuse_dentry_init+0x51/0x100 [ 197.623445][ T7441] fuse_dentry_init+0x51/0x100 [ 197.623477][ T7441] __d_alloc+0x484/0x6f0 [ 197.623505][ T7441] d_alloc_parallel+0xde/0x16b0 [ 197.623556][ T7441] ? __pfx_d_alloc_parallel+0x10/0x10 [ 197.623582][ T7441] ? lock_acquire+0x115/0x350 [ 197.623625][ T7441] __lookup_slow+0x82/0x2f0 [ 197.623664][ T7441] lookup_slow+0x53/0x70 [ 197.623699][ T7441] path_lookupat+0x3f5/0x8c0 [ 197.623750][ T7441] filename_lookup+0x265/0x5d0 [ 197.623782][ T7441] ? do_fast_syscall_32+0x33/0x70 [ 197.623823][ T7441] ? __pfx_filename_lookup+0x10/0x10 [ 197.623853][ T7441] ? __lock_acquire+0x747/0x2de0 [ 197.623905][ T7441] ? lock_acquire+0x115/0x350 [ 197.623939][ T7441] filename_linkat+0x119/0x5e0 [ 197.623980][ T7441] ? __pfx_filename_linkat+0x10/0x10 [ 197.624009][ T7441] ? strncpy_from_user+0x150/0x2c0 [ 197.624040][ T7441] ? do_getname+0x151/0x250 [ 197.624072][ T7441] __se_sys_link+0x55/0x2c0 [ 197.624106][ T7441] __do_fast_syscall_32+0x27a/0x6a0 [ 197.624148][ T7441] ? do_fast_syscall_32+0x33/0x70 [ 197.624182][ T7441] ? asm_int80_emulation+0x1a/0x20 [ 197.624205][ T7441] ? do_int80_emulation+0x299/0x500 [ 197.624237][ T7441] ? trace_irq_disable+0x3b/0x140 [ 197.624267][ T7441] do_fast_syscall_32+0x33/0x70 [ 197.624301][ T7441] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 197.624329][ T7441] RIP: 0023:0xf7f280ec [ 197.624350][ T7441] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 197.624370][ T7441] RSP: 002b:00000000f53e650c EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 197.624396][ T7441] RAX: ffffffffffffffda RBX: 0000000080000280 RCX: 0000000080000400 [ 197.624413][ T7441] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 197.624426][ T7441] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 197.624440][ T7441] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 197.624454][ T7441] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 197.624488][ T7441] [ 197.651998][ T30] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 197.830094][ T30] usb 5-1: Using ep0 maxpacket: 32 [ 197.836555][ T30] usb 5-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 197.875079][ T30] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 197.875216][ T30] usb 5-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 197.875291][ T30] usb 5-1: config 0 interface 0 has no altsetting 0 [ 197.875412][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.018097][ T7443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.018638][ T7443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.036739][ T30] usb 5-1: config 0 descriptor?? [ 198.271627][ T7449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.274981][ T7449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.320602][ T5707] usb 4-1: USB disconnect, device number 24 [ 198.323962][ T7453] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 198.360444][ T30] usbhid 5-1:0.0: can't add hid device: -71 [ 198.360568][ T30] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 198.377478][ T30] usb 5-1: USB disconnect, device number 26 [ 198.509003][ T5707] Unregistered device Abilis Systems DVB-Titan [ 198.515766][ T5707] as10x_usb: device has been disconnected [ 198.749677][ T25] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 198.899460][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 198.900543][ T25] usb 2-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 198.903781][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.906460][ T25] usb 2-1: config 0 descriptor?? [ 198.994112][ T25] gm12u320 2-1:0.0: [drm:gm12u320_set_ecomode] *ERROR* Misc. req. error -22 [ 198.994181][ T25] gm12u320 2-1:0.0: probe with driver gm12u320 failed with error -5 [ 199.027217][ T25] usb-storage 2-1:0.0: USB Mass Storage device detected [ 199.054659][ T25] usb-storage 2-1:0.0: device ignored [ 199.135998][ T25] usb 2-1: USB disconnect, device number 25 [ 199.413651][ T7454] cgroup: fork rejected by pids controller in /syz4 [ 199.558373][ T7502] batman_adv: batadv0: Adding interface: syzkaller0 [ 199.558392][ T7502] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.558422][ T7502] batman_adv: batadv0: Interface activated: syzkaller0 [ 199.574061][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 199.842486][ T7509] netlink: 4 bytes leftover after parsing attributes in process `syz.3.557'. [ 199.858977][ T5689] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 200.020051][ T5689] usb 3-1: Using ep0 maxpacket: 8 [ 200.028391][ T5689] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 200.043543][ T5689] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 200.043575][ T5689] usb 3-1: Product: syz [ 200.043590][ T5689] usb 3-1: Manufacturer: syz [ 200.043607][ T5689] usb 3-1: SerialNumber: syz [ 200.057912][ T5689] usb 3-1: config 0 descriptor?? [ 200.087571][ T5689] gspca_main: sq905-2.14.0 probing 2770:9120 [ 200.381148][ T7517] loop8: detected capacity change from 0 to 9 [ 200.395620][ T7517] Dev loop8: unable to read RDB block 9 [ 200.395706][ T7517] loop8: unable to read partition table [ 200.396037][ T7517] loop8: partition table beyond EOD, truncated [ 200.396083][ T7517] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 200.927173][ T5689] gspca_sq905: sq905_command: usb_control_msg failed 2 (-32) [ 200.927255][ T5689] sq905 3-1:0.0: probe with driver sq905 failed with error -32 [ 201.137403][ T7529] netlink: 4 bytes leftover after parsing attributes in process `syz.3.563'. [ 201.309175][ T25] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 201.459815][ T25] usb 5-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice= 1.00 [ 201.460997][ T25] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 201.461050][ T25] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 201.463603][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.463631][ T25] usb 5-1: Product: syz [ 201.463649][ T25] usb 5-1: Manufacturer: syz [ 201.463665][ T25] usb 5-1: SerialNumber: syz [ 201.525708][ T5689] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 201.664820][ T7542] FAULT_INJECTION: forcing a failure. [ 201.664820][ T7542] name failslab, interval 1, probability 0, space 0, times 0 [ 201.664864][ T7542] CPU: 1 UID: 0 PID: 7542 Comm: syz.0.566 Tainted: G L syzkaller #0 PREEMPT(full) [ 201.664895][ T7542] Tainted: [L]=SOFTLOCKUP [ 201.664903][ T7542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 201.664916][ T7542] Call Trace: [ 201.664924][ T7542] [ 201.664934][ T7542] dump_stack_lvl+0xe8/0x150 [ 201.664968][ T7542] should_fail_ex+0x410/0x560 [ 201.664999][ T7542] should_failslab+0xa8/0x100 [ 201.665029][ T7542] __kmalloc_noprof+0xfe/0x720 [ 201.665053][ T7542] ? fib_create_info+0x16fe/0x3170 [ 201.665079][ T7542] ? fib_create_info+0x16fe/0x3170 [ 201.665112][ T7542] fib_create_info+0x16fe/0x3170 [ 201.665142][ T7542] ? rcu_is_watching+0x16/0xb0 [ 201.665170][ T7542] ? trace_contention_end+0x3d/0x140 [ 201.665213][ T7542] ? __mutex_lock+0x30b/0x1550 [ 201.665257][ T7542] fib_table_insert+0xcb/0x1b10 [ 201.665292][ T7542] ? __pfx___mutex_lock+0x10/0x10 [ 201.665335][ T7542] ? fib_new_table+0x14b/0x3f0 [ 201.665364][ T7542] inet_rtm_newroute+0x14f/0x250 [ 201.665389][ T7542] ? __local_bh_enable_ip+0xd6/0x140 [ 201.665419][ T7542] ? __dev_queue_xmit+0x29b/0x3820 [ 201.665443][ T7542] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 201.665493][ T7542] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 201.665519][ T7542] rtnetlink_rcv_msg+0x802/0xc00 [ 201.665553][ T7542] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 201.665576][ T7542] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 201.665599][ T7542] ? ref_tracker_free+0x689/0x830 [ 201.665625][ T7542] ? __pfx_ref_tracker_free+0x10/0x10 [ 201.665658][ T7542] netlink_rcv_skb+0x226/0x4a0 [ 201.665677][ T7542] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 201.665705][ T7542] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 201.665734][ T7542] ? netlink_deliver_tap+0x2e/0x1b0 [ 201.665753][ T7542] ? netlink_deliver_tap+0x2e/0x1b0 [ 201.665775][ T7542] netlink_unicast+0x7bd/0x940 [ 201.665812][ T7542] netlink_sendmsg+0x813/0xb40 [ 201.665838][ T7542] ? __pfx_netlink_sendmsg+0x10/0x10 [ 201.665864][ T7542] ? apparmor_socket_sendmsg+0x98/0x360 [ 201.665887][ T7542] ? __pfx_netlink_sendmsg+0x10/0x10 [ 201.665906][ T7542] sock_sendmsg_nosec+0x13a/0x180 [ 201.665930][ T7542] ____sys_sendmsg+0x54e/0x850 [ 201.665961][ T7542] ? __pfx_____sys_sendmsg+0x10/0x10 [ 201.666001][ T7542] ___sys_sendmsg+0x2a5/0x360 [ 201.666026][ T7542] ? __lock_acquire+0x747/0x2de0 [ 201.666050][ T7542] ? __pfx____sys_sendmsg+0x10/0x10 [ 201.666076][ T7542] ? get_pid_task+0x20/0x1f0 [ 201.666094][ T7542] ? get_pid_task+0x20/0x1f0 [ 201.666109][ T7542] ? get_pid_task+0x20/0x1f0 [ 201.666152][ T7542] ? __fget_files+0x2a/0x420 [ 201.666178][ T7542] ? __fget_files+0x3a2/0x420 [ 201.666223][ T7542] __sys_sendmsg+0x177/0x240 [ 201.666251][ T7542] ? __pfx___sys_sendmsg+0x10/0x10 [ 201.666295][ T7542] __do_fast_syscall_32+0x27a/0x6a0 [ 201.666324][ T7542] ? do_fast_syscall_32+0x33/0x70 [ 201.666351][ T7542] ? asm_int80_emulation+0x1a/0x20 [ 201.666370][ T7542] ? do_int80_emulation+0x299/0x500 [ 201.666397][ T7542] ? trace_irq_disable+0x3b/0x140 [ 201.666421][ T7542] do_fast_syscall_32+0x33/0x70 [ 201.666450][ T7542] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 201.666474][ T7542] RIP: 0023:0xf7f740ec [ 201.666492][ T7542] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 201.666509][ T7542] RSP: 002b:00000000f543650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 201.666532][ T7542] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 201.666546][ T7542] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 201.666556][ T7542] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 201.666568][ T7542] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 201.666579][ T7542] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 201.666604][ T7542] [ 201.704266][ T25] ttusb_dec_send_command: result bulk message failed: error -22 [ 201.704903][ T25] ttusb-dec 5-1:1.0: probe with driver ttusb-dec failed with error -22 [ 201.759276][ T5689] usb 4-1: Using ep0 maxpacket: 16 [ 201.810444][ T5689] usb 4-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 201.880453][ T5689] usb 4-1: config 0 has an invalid interface number: 189 but max is 0 [ 201.880483][ T5689] usb 4-1: config 0 has no interface number 0 [ 201.880513][ T5689] usb 4-1: config 0 interface 189 has no altsetting 0 [ 201.920216][ T5689] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.920246][ T5689] usb 4-1: Product: syz [ 201.920261][ T5689] usb 4-1: Manufacturer: syz [ 201.920277][ T5689] usb 4-1: SerialNumber: syz [ 202.036833][ T5689] usb 4-1: config 0 descriptor?? [ 202.192231][ T193] usb 5-1: USB disconnect, device number 27 [ 202.348907][ T7549] netlink: 4 bytes leftover after parsing attributes in process `syz.1.568'. [ 202.407309][ T5689] usb_8dev 4-1:0.189 can0: sending command message failed [ 202.407353][ T5689] usb_8dev 4-1:0.189 can0: can't get firmware version [ 202.448111][ T7551] FAULT_INJECTION: forcing a failure. [ 202.448111][ T7551] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.448149][ T7551] CPU: 1 UID: 0 PID: 7551 Comm: syz.1.569 Tainted: G L syzkaller #0 PREEMPT(full) [ 202.448179][ T7551] Tainted: [L]=SOFTLOCKUP [ 202.448187][ T7551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 202.448202][ T7551] Call Trace: [ 202.448212][ T7551] [ 202.448222][ T7551] dump_stack_lvl+0xe8/0x150 [ 202.448260][ T7551] should_fail_ex+0x410/0x560 [ 202.448293][ T7551] _copy_to_user+0x31/0xb0 [ 202.448373][ T7551] con_get_unimap+0x37b/0x460 [ 202.448416][ T7551] vt_compat_ioctl+0x58a/0x680 [ 202.448454][ T7551] ? __pfx_vt_compat_ioctl+0x10/0x10 [ 202.448498][ T7551] ? __fget_files+0x3a2/0x420 [ 202.448530][ T7551] ? __fget_files+0x2a/0x420 [ 202.448566][ T7551] tty_compat_ioctl+0x6d9/0x8c0 [ 202.448599][ T7551] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 202.448630][ T7551] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 202.448658][ T7551] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 202.448693][ T7551] ? __fget_files+0x3a2/0x420 [ 202.448732][ T7551] ? fput+0xa0/0xd0 [ 202.448761][ T7551] ? ksys_write+0x242/0x270 [ 202.448797][ T7551] __do_fast_syscall_32+0x27a/0x6a0 [ 202.448832][ T7551] ? do_fast_syscall_32+0x33/0x70 [ 202.448863][ T7551] ? asm_int80_emulation+0x1a/0x20 [ 202.448885][ T7551] ? do_int80_emulation+0x299/0x500 [ 202.448916][ T7551] ? trace_irq_disable+0x3b/0x140 [ 202.448945][ T7551] do_fast_syscall_32+0x33/0x70 [ 202.448978][ T7551] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 202.449004][ T7551] RIP: 0023:0xf7f450ec [ 202.449024][ T7551] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 202.449043][ T7551] RSP: 002b:00000000f540650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 202.449066][ T7551] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000004b66 [ 202.449081][ T7551] RDX: 0000000080000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 202.449095][ T7551] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 202.449107][ T7551] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 202.449121][ T7551] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 202.449153][ T7551] [ 202.720758][ T5689] usb_8dev 4-1:0.189: probe with driver usb_8dev failed with error -22 [ 202.724563][ T5689] usb 4-1: USB disconnect, device number 25 [ 202.884459][ T7556] netlink: 12 bytes leftover after parsing attributes in process `syz.4.571'. [ 203.143102][ T25] usb 3-1: USB disconnect, device number 28 [ 203.161264][ T7540] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 203.238202][ T7540] batman_adv: batadv0: Removing interface: syzkaller0 [ 203.254606][ T7567] usb usb7: usbfs: process 7567 (syz.3.574) did not claim interface 0 before use [ 203.379731][ T5707] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 203.506364][ T7576] netlink: 8 bytes leftover after parsing attributes in process `syz.3.575'. [ 203.520959][ T7576] netlink: 8 bytes leftover after parsing attributes in process `syz.3.575'. [ 203.524646][ T7576] netlink: 8 bytes leftover after parsing attributes in process `syz.3.575'. [ 203.525602][ T7576] netlink: 8 bytes leftover after parsing attributes in process `syz.3.575'. [ 203.541108][ T7576] netlink: 8 bytes leftover after parsing attributes in process `syz.3.575'. [ 203.571719][ T5707] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 203.573713][ T5707] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 64 [ 203.573750][ T5707] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 64 [ 203.573775][ T5707] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 232, changing to 11 [ 203.573803][ T5707] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 59122, setting to 1024 [ 203.634865][ T5707] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 203.634887][ T5707] usb 5-1: Product: syz [ 203.634898][ T5707] usb 5-1: Manufacturer: syz [ 203.863374][ T7563] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 203.863509][ T7563] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 203.863608][ T7563] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 203.903463][ T5707] dvb_ttusb_budget: ttusb_init_controller: error [ 203.903485][ T5707] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 204.063660][ T5707] DVB: Unable to find symbol cx22700_attach() [ 204.079352][ T7563] usb 5-1: BOGUS urb xfer, pipe 0 != type 1 [ 204.079443][ T7563] ------------[ cut here ]------------ [ 204.079454][ T7563] usb 5-1: BOGUS urb flags, 202 --> 200 [ 204.079474][ T7563] WARNING: drivers/usb/core/urb.c:533 at usb_submit_urb+0xc9d/0x18b0, CPU#1: syz.4.572/7563 [ 204.110308][ T7563] Modules linked in: [ 204.114347][ T7563] CPU: 1 UID: 0 PID: 7563 Comm: syz.4.572 Tainted: G L syzkaller #0 PREEMPT(full) [ 204.126016][ T7563] Tainted: [L]=SOFTLOCKUP [ 204.131917][ T7563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 204.143089][ T7563] RIP: 0010:usb_submit_urb+0xd28/0x18b0 [ 204.148720][ T7563] Code: e8 3d b0 c8 fa 4c 89 f7 4d 8b 6d 00 41 0f b6 04 2c 84 c0 48 8b 54 24 18 0f 85 97 07 00 00 8b 0a 48 8b 34 24 4c 89 ea 45 89 f8 <67> 48 0f b9 3a 4c 8b 6c 24 08 4c 89 ef 48 c7 c6 40 50 b0 8f e8 af [ 204.169567][ T7563] RSP: 0000:ffffc90005687918 EFLAGS: 00010246 [ 204.175755][ T7563] RAX: 0000000000000000 RBX: ffff88807b1fda00 RCX: 0000000000000202 [ 204.184477][ T7563] RDX: ffff88802b4a6300 RSI: ffffffff8cc533c0 RDI: ffffffff90881840 [ 204.193040][ T7563] RBP: dffffc0000000000 R08: 0000000000000200 R09: 0000000000000004 [ 204.201450][ T7563] R10: 0000000000000003 R11: 0000000000000002 R12: 1ffff1100f63fb4b [ 204.209845][ T7563] R13: ffff88802b4a6300 R14: ffff888029504100 R15: 0000000000000200 [ 204.217835][ T7563] FS: 0000000000000000(0000) GS:ffff888124dc8000(0063) knlGS:00000000f547cb40 [ 204.227106][ T7563] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 204.233791][ T7563] CR2: 00000000f7f35588 CR3: 0000000076460000 CR4: 00000000003526f0 [ 204.241861][ T7563] Call Trace: [ 204.245572][ T7563] [ 204.248565][ T7563] ttusb_start_feed+0xe19/0x1770 [ 204.253834][ T7563] ? __pfx_ttusb_start_feed+0x10/0x10 [ 204.259296][ T7563] dmx_ts_feed_start_filtering+0x129/0x220 [ 204.265241][ T7563] dvb_dmxdev_filter_start+0x434/0x10d0 [ 204.270878][ T7563] dvb_demux_do_ioctl+0x48b/0x540 [ 204.275947][ T7563] dvb_usercopy+0x199/0x2e0 [ 204.280520][ T7563] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 204.286166][ T7563] ? __pfx_dvb_usercopy+0x10/0x10 [ 204.291315][ T7563] ? __fget_files+0x3a2/0x420 [ 204.296051][ T7563] dvb_demux_ioctl+0x29/0x40 [ 204.300869][ T7563] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 204.306434][ T7563] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 204.312488][ T7563] ? kmem_cache_free+0x182/0x650 [ 204.317457][ T7563] ? __se_sys_futex_time32+0x3ab/0x440 [ 204.323014][ T7563] ? rcu_is_watching+0x16/0xb0 [ 204.328128][ T7563] __do_fast_syscall_32+0x27a/0x6a0 [ 204.333497][ T7563] ? do_fast_syscall_32+0x33/0x70 [ 204.338550][ T7563] ? asm_int80_emulation+0x1a/0x20 [ 204.343742][ T7563] ? do_int80_emulation+0x299/0x500 [ 204.349515][ T7563] ? trace_irq_disable+0x3b/0x140 [ 204.354608][ T7563] do_fast_syscall_32+0x33/0x70 [ 204.359789][ T7563] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 204.366232][ T7563] RIP: 0023:0xf70af0ec [ 204.370486][ T7563] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 204.390160][ T7563] RSP: 002b:00000000f547c50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 204.398854][ T7563] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000040146f2c [ 204.406858][ T7563] RDX: 0000000080000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 204.415010][ T7563] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 204.423203][ T7563] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 204.431244][ T7563] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 204.439411][ T7563] [ 204.442744][ T7563] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 204.450266][ T7563] CPU: 1 UID: 0 PID: 7563 Comm: syz.4.572 Tainted: G L syzkaller #0 PREEMPT(full) [ 204.461072][ T7563] Tainted: [L]=SOFTLOCKUP [ 204.465433][ T7563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 204.475504][ T7563] Call Trace: [ 204.478891][ T7563] [ 204.481849][ T7563] vpanic+0x56d/0xa60 [ 204.485851][ T7563] ? __pfx__printk+0x10/0x10 [ 204.490540][ T7563] ? __pfx_vpanic+0x10/0x10 [ 204.495073][ T7563] ? is_bpf_text_address+0x292/0x2b0 [ 204.500422][ T7563] ? is_bpf_text_address+0x26/0x2b0 [ 204.505751][ T7563] panic+0xc5/0xd0 [ 204.509551][ T7563] ? __pfx_panic+0x10/0x10 [ 204.514045][ T7563] __warn+0x315/0x4c0 [ 204.518058][ T7563] ? usb_submit_urb+0xc9d/0x18b0 [ 204.523038][ T7563] ? usb_submit_urb+0xc9d/0x18b0 [ 204.528033][ T7563] __report_bug+0x276/0x570 [ 204.532584][ T7563] ? usb_submit_urb+0xc9d/0x18b0 [ 204.537723][ T7563] ? __pfx___report_bug+0x10/0x10 [ 204.542789][ T7563] ? ttusb_cmd+0x305/0x440 [ 204.547306][ T7563] report_bug_entry+0x19b/0x290 [ 204.552202][ T7563] ? usb_submit_urb+0xd28/0x18b0 [ 204.557191][ T7563] ? usb_submit_urb+0xd2d/0x18b0 [ 204.562157][ T7563] handle_bug+0xce/0x200 [ 204.566437][ T7563] exc_invalid_op+0x1a/0x50 [ 204.570960][ T7563] asm_exc_invalid_op+0x1a/0x20 [ 204.575972][ T7563] RIP: 0010:usb_submit_urb+0xd28/0x18b0 [ 204.581578][ T7563] Code: e8 3d b0 c8 fa 4c 89 f7 4d 8b 6d 00 41 0f b6 04 2c 84 c0 48 8b 54 24 18 0f 85 97 07 00 00 8b 0a 48 8b 34 24 4c 89 ea 45 89 f8 <67> 48 0f b9 3a 4c 8b 6c 24 08 4c 89 ef 48 c7 c6 40 50 b0 8f e8 af [ 204.601307][ T7563] RSP: 0000:ffffc90005687918 EFLAGS: 00010246 [ 204.607419][ T7563] RAX: 0000000000000000 RBX: ffff88807b1fda00 RCX: 0000000000000202 [ 204.615428][ T7563] RDX: ffff88802b4a6300 RSI: ffffffff8cc533c0 RDI: ffffffff90881840 [ 204.623462][ T7563] RBP: dffffc0000000000 R08: 0000000000000200 R09: 0000000000000004 [ 204.631616][ T7563] R10: 0000000000000003 R11: 0000000000000002 R12: 1ffff1100f63fb4b [ 204.639730][ T7563] R13: ffff88802b4a6300 R14: ffff888029504100 R15: 0000000000000200 [ 204.647778][ T7563] ? usb_submit_urb+0xce1/0x18b0 [ 204.652886][ T7563] ttusb_start_feed+0xe19/0x1770 [ 204.657975][ T7563] ? __pfx_ttusb_start_feed+0x10/0x10 [ 204.663435][ T7563] dmx_ts_feed_start_filtering+0x129/0x220 [ 204.669297][ T7563] dvb_dmxdev_filter_start+0x434/0x10d0 [ 204.674964][ T7563] dvb_demux_do_ioctl+0x48b/0x540 [ 204.680014][ T7563] dvb_usercopy+0x199/0x2e0 [ 204.684542][ T7563] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 204.690107][ T7563] ? __pfx_dvb_usercopy+0x10/0x10 [ 204.695207][ T7563] ? __fget_files+0x3a2/0x420 [ 204.700148][ T7563] dvb_demux_ioctl+0x29/0x40 [ 204.705025][ T7563] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 204.710519][ T7563] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 204.716525][ T7563] ? kmem_cache_free+0x182/0x650 [ 204.721502][ T7563] ? __se_sys_futex_time32+0x3ab/0x440 [ 204.727102][ T7563] ? rcu_is_watching+0x16/0xb0 [ 204.731910][ T7563] __do_fast_syscall_32+0x27a/0x6a0 [ 204.737160][ T7563] ? do_fast_syscall_32+0x33/0x70 [ 204.742238][ T7563] ? asm_int80_emulation+0x1a/0x20 [ 204.747393][ T7563] ? do_int80_emulation+0x299/0x500 [ 204.752622][ T7563] ? trace_irq_disable+0x3b/0x140 [ 204.757675][ T7563] do_fast_syscall_32+0x33/0x70 [ 204.762585][ T7563] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 204.768951][ T7563] RIP: 0023:0xf70af0ec [ 204.773132][ T7563] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 204.792790][ T7563] RSP: 002b:00000000f547c50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 204.801488][ T7563] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000040146f2c [ 204.809570][ T7563] RDX: 0000000080000300 RSI: 0000000000000000 RDI: 0000000000000000 [ 204.817561][ T7563] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 204.825547][ T7563] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 204.833620][ T7563] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 204.841631][ T7563] [ 204.845352][ T7563] Kernel Offset: disabled [ 204.849726][ T7563] Rebooting in 86400 seconds..