last executing test programs: 2m52.563736188s ago: executing program 1 (id=2136): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000840), 0x4) recvmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/59, 0x3b}], 0x1}, 0x80) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000400)='espint', 0x6) socket$kcm(0x29, 0x5, 0x0) r1 = openat$vim2m(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="05000000040000004300000005"], 0x50) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r2, &(0x7f00000020c0)={0x2020}, 0x2020) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0cc5604, &(0x7f0000000500)={0x0, @sliced={0xfff, [0xf7f0, 0x2, 0x5, 0x10, 0x69c, 0xf70, 0x7, 0x0, 0x7f, 0x96, 0x3, 0x5, 0x2, 0x9, 0x4, 0x7, 0x5, 0x7, 0x9, 0x204, 0x1, 0x3, 0x1, 0x1, 0x7, 0x7, 0xf1, 0x2, 0x0, 0xfffe, 0xffff, 0xe, 0x4, 0x5, 0x8, 0x9d, 0x5, 0x8, 0x5, 0x8, 0x0, 0xd, 0x416, 0x9, 0x101, 0x8, 0x101, 0x1], 0x5}}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f0000000140)=0x80000001, 0x4) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r3 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0x5d, @remote, 0x80}}, 0x6, 0x2, 0x3524, 0xffffff80, 0x9c48d57efb3ef4b, 0x0, 0x3}, &(0x7f0000000280)=0x9c) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, 0x0, &(0x7f0000000340)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) r6 = socket(0x10, 0x80002, 0x0) r7 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, 0xfffffffffffffffc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x2, 0x1, 0x201, 0x0, 0x0, {0x0, 0x2, 0xfffd}}, 0x14}, 0x1, 0x0, 0x0, 0x80051}, 0x0) add_key(0x0, 0x0, 0x0, 0xfffffffffffffef7, r7) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="358749"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) write(r8, &(0x7f0000000780)="2400000011005f0414a1f40700090400810a00000d0000000000000008000f000100000089e0d89c08d66b6a4b79536bcdc82a6c58164cd55e1e6faf9413c90f53707e1a61f4e82f8d117432bbc5daf3693d0956c03b4586d8541764db9b0394ea54a617dd3cbf6a1b2939933a00"/123, 0x7b) syz_usb_connect$uac2(0x2, 0x9d, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x46d, 0x8c6, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8b, 0x3, 0x1, 0x7, 0x70, 0xb, {0x8, 0xb, 0x1, 0x1, 0x1, 0xff, 0x20, 0x5}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x6, 0x3, 0x15, 0x7}, [@output_terminal={0xc, 0x24, 0x3, 0x5, 0x301, 0x5d, 0x2, 0x0, 0x8b, 0x20}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x3e}, @as_header={0x10, 0x24, 0x1, 0x5, 0xc4, 0x3, 0x3, 0xe, 0xd, 0xce}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x0, 0xc, 0x1d, {0x8, 0x25, 0x1, 0x83, 0x3f, 0x2, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x4, 0x1, 0xf2, {0x8, 0x25, 0x1, 0x2, 0xc, 0x4, 0x7}}}}}}}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) 2m50.991021732s ago: executing program 1 (id=2144): bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000004000000040000000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xb, &(0x7f0000000440)=@framed={{}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfff}, {0x85, 0x0, 0x0, 0x2e}}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (fail_nth: 3) 2m50.722952865s ago: executing program 1 (id=2148): r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000600)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc008e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29103"}, 0x48, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000140)='e\x03\x0f\xac\xd1\xebt\xd8&w\xef\x9f`T3%\xfa\xbf\xef\xeb\x8e1w\xfd') bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1e, 0xf, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000003000000000200000057d70000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) userfaultfd(0x1) openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x40202, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f00000003c0)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x8000, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r5, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{0x0}], 0x1}}], 0x1, 0x4000000) r9 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r10, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f00000002c0)={r10, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 2m49.547488428s ago: executing program 1 (id=2152): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x44) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000180)=ANY=[@ANYBLOB='-', @ANYRESHEX], 0x27) (fail_nth: 3) 2m49.15455843s ago: executing program 1 (id=2154): keyctl$read(0xb, 0x0, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) open(0x0, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x9801) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0\x00') r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x89901) move_mount(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x7) pivot_root(&(0x7f0000000200)='./file0/../file0/../file0/../file0\x00', 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @timestamp={0xd, 0x0, 0x0, 0x40, 0xf, 0x3, 0xd7df, 0xbd}}}}}, 0x0) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000040)=0x8, 0x4) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) 2m48.876940243s ago: executing program 1 (id=2156): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) r8 = dup(r5) (async) r9 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8001) ioctl$EVIOCREVOKE(r9, 0x40044591, 0x0) (async) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) (async) syz_ublk_setup_queues(r8, r4, &(0x7f0000000180)={0x0, 0x612d, 0x0, 0x3, 0xbd}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0x1, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x200, 0x2, 0x24c}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) (async, rerun: 32) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r11, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r11, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) (async, rerun: 32) connect$inet(r11, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) (rerun: 32) ioctl$VHOST_SET_VRING_BASE(r7, 0x4008af12, &(0x7f0000000300)={0x2, 0x3}) (async) setsockopt$inet_tcp_TCP_REPAIR(r11, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) (async) sendto$inet(r11, &(0x7f00000002c0)='J', 0x1, 0x4000, 0x0, 0x0) sendmmsg(r11, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000001100)="fe", 0x1}], 0x1, &(0x7f0000001540)=ANY=[@ANYBLOB="101000000000000012010000060000000659a5388350034a3cf5bdb9b5dee9b6685292eec5b020a679004319d93ffc12e0f872161e4821af6d50d25e507bf081af4aa001015f86e29e099a13460450846bfe0a41a739c64462bdd43b88b5c5e0fc7ad8536ebef1411c38aa6bd26de99c8e49db03df8718dc89c51a97afeb0578a5fd7effe8578fc99b1629d577caabb3bc0e5f85bf46ae22142ea97d93a8bc756774b432a7dec11e4fcd2ff4c0aa6933ee2e2a91a75fcd42861a80e0df89942ae369c56ffcafa63647f68b65abf31c63ac1b3501df9729bd7dd3117e6d31653301b2a91dd1f9575499e6fd9620cc1743caad5cc8d1ca5e65e96974c2060eea65ef8747b0364f73634d4e20f1db2f625df0cda315b02b05ffbae56eed87c5430efdebb21d4849cb76160fcc8a323f436d6f1f7f11091a47dd4f0f01b9948e7b70da247ada7a8d4b4b2fea8c2938b51b11c34ae661d3949d405d800e241d600c6b53b4e08e3696ed4c881edaa773aebed1b7dcb94d3fbeede48576592f86eec1274184127b522210076b67aced534caa10c67a9ba64dd5f50f28303f81116f449467196fba078023c5157b05bbec3e6f4ff5509e849a86f4f6a8cc31d5d053b92b441bba2dd84079d4c0340e6e290d5da002e1e31597576f520b3b8efec7a13f0c7c66250e2946366dd86f4773a7b129b369ee0e09e41e9dfcb76d19d1ab4ae1c9ece6c6c0fa3c569b3363e0322ca27b80679669caa92ccb408e1ce068b0606fa43f6e839fd12c589e7bb5e32c5cbfad51032fa7213503dbf5dcb5570b034780679f93c95fc9ff5f4468ddbb9b5f5b758802555ee18cbe8a26980412552ff34a0e8aa7f7dd0e710c27a403c355ead7f812c5f8ed64df39e02a4246d88f855d64272349cb7efe606567e5c990336e8200a220b39a30c473d27e583ec6fd6843ce595b677b9c05d3b79319c343858561f3b093715b16f4cdc58683e9b78e71b21e6bc9cda40c438bc7112e52380343b9f04874201f9ab5f01c0399dacbbd592e85039e81e1cc6d26210b69351005c87354fb1adbebe554d7684a9c81ecdb1c642791281e21b6e7a53dedc9e761d97b157ecff816786d20c87fdcb6b344c0bcc0cc5fea2d0665795062123719828c5ccdc41cbf756f6237fbe9d5718c34515dc2f3af03ac4d791a8c5875dcda4b78d71a8b4b15fc5c9a2a276549addca0c1a949c1640f4a069430ff22d875b9f6ed8592503bdc2ebda7091371c60c12f14a1a2ee5f6fd781635aeaab0f6390fd00bcec9cad447a35ad599453db477e68225c1eaf2dac69b8e15be0fbe0168e467feb2845591a441c94f31a314151428e861e591cd4664740091ade21a4da55d902b3c2f83d548821be3cb306f4d888882bef104e131cc879b71bcc6f8886b45c81f0a033f4c7d39272fa163364a3ca8b622750c08bb158996f366789d7dc6a13dd9198cb31de1c6a2bb3cdc9be5bafabd322d3540c3ebb34450ad9a9c3f11c4226dcd1960cf41cd439ebde9a36d4dc517492d9bd94183e58398a96d68c244b8ffdb0387755c9e12b53197b8880fe2f5abf7c3b9e47732dbbc57d780c398ac8e0fcc6424ca28fb7915b0c0fb3fb0f45621a74ef43690a960ce8ed461b1ec7cf03e4d0ac87fe825a5994b3889a08dac911ad4524f306a67100224d4f88aa5923381e2803773f530257c1ad4483557067b3a96f2fc92e0389b1ed7c13dcab818d77dd339dea4933f51d8dfcb8e0c5d947dec1688a156a71f140119433098541618bcf141f2a701e567b75fe58e4450c631433063d85d9ab3f9d62c0259f6500e802d3c8368bd9b2d70a08bc02bff20667d30ae8b37f77dea85d2e54603edca38f2fe00eb1e7db5e30a4df941ca9d351add817c9c531dff50229ab0c4def40ca25ecae0bc8296f31d6fcbd87011b8054331941c402b199d7abfc89dd7d4a652f644cf270c4188dd8eaa48dd1f565c794cf14fcb8c3184b45602de8e00230e77c976e27d741211f60518c3058abe372378b0419c10fd778395721eb3d791ff7c67f70af2efde9a4666c4ab2c4b3a41378232f42a2b419c824037b9ad1af620aa10fd68bf2843386f0ef54327eb3203d6ca0a2297011fd4a10b5586868a7c85466c6588bbdf53759d4a7aea9a5f80e5103a983d7edb33cd6d9c747d756ea490ac342e30f5b5b86901db7c4907cf166f0b78f6e113ce51af21102d024d6ddb79a47ef7a86cdd0e0c40ff06699d16b5517652bab0ef05cd504a3c7f7c0abf3952087be2fc8c7fdb9f9a3878513c14fb2830b5598040edc43eac7db36231500e8f7ea7810aada8f348fa631d7a057973ba604db376fc5d4d047390d3fbf677bc966e3e6f5f1de5ed00c58199a09b77a4915b3ce1c010194d5394dc89b16c73f2807bdc788c4424865915954ba4b66c60a0e17213eecdabd456cc21231b82ac0ed3eec591fe584ff56a98fb55e77aa85aa7150032a4b7b45fd3e1cfdd8417899c1f80c609582c608108fa47a4a1bf102b0931d88739db0a0fbdddae4c9ebf93e9267743bc7abeb54e29fe93198f51bea4fc97286fc522f24799a29cfa530a459ace88e3f6c91af172e4ef73e80dcedb7a380d216b0d300e34b52c55011facceaf0a678f0eabf1e2acce36b1f4df629904891939bf136064dc7652940fa554950a4b36b0e39504a8aa606b1c1d3f235d4f2ff6fcd72f95e4a07033803602c008673df3524bb3621bda02e87edecd3cc014f2b04cc0ebfb7002ec51e71c4a657a6cb133ba07c27d93b0417003a761227e2bf7c4ad7095cc703d24d4d55ee97c8b12b29626413bfb0f34b1e5776a013bd9098820df155d8b8ad3aac19adae3e89db7d1718be3b019c9c556d9fa92e20fd5c0c0983108a67f29d7049d6d665879510fa77129e27929b9a55524a15979e9f9d420a8aa37e6a60052d169354cc6a948de4f0c94902fee652ab7a798df223e3c48709992058eca39c614ef45fa6f984a61c1a472aa26ec8483d200a63f9b7e2db3bf4500cc8c8725af1a6baa2f694d0729b0be486ab4c818cede51cedd16756b0516c42d92f6645558cc70991f6aadfed6f3adeda5440da4f1e17039e9d4197659dd8fae033ab92f6b243e67fbe88d76131d6e93484c6ad70f9d25c939585e60a29c668d3b47af42d15cbe2465d9b2300daa9f45b71d3dc0b83888f1506362ef4672ff4a9d3e994814a741b8736078f77078c68f3f3242798a982c5a3b765b8c2e130d534cf4c9671d593262abff5601553c9c11be4dcaef83ed9ae9111dc4d9f1f1198518b025fd10727748bddc25f8ccc3e63aa990369c6beacdbe1cc76f03f0f34f3f3948e34e390b87841df7abdb5bc937a2ea32ee4b41c05b94e6ba7fc35392992bac8531fc4161814d44fe2e67542b02017a8b42d54eadad84398128f203c1d82d0d8ca610b1707a4c22e75b0f3a8df9baf6ace8d63a484059a6ed462836e31519fad652425a1d37715896a2c881c16c9e5af51c65fea1d632465e8191ff2d572da6a8b1474d6231346e8eed69acd94d492340f05aa23d79dc638836025f04a776744c02de31ecb8bff4106cca2c39c54afe0059734bfd261f85af218de920c4877a3aa24566db8048a4a0f0c73d62cd1415c98779a88e5ddac4ce7d82f919e90ca68abd081358c3f9d28da8d78c88185bc113c059aef5e9e149f9b52f81eda3fb97341a0a462c85a7a2046526d5617f33ef5212a9a412051a672ccd6c9bf3fa4049535cc650df2dc2ec5f0b8f6bc5bb7ca5d53fd6516603dac62ef80388fcd53ae7218b94a6b8e2fa4ae2ca06410f55695cfcf1d0c759085a6e6124a480d320ff49c1e6afeb298e3bc83e37a8e9db55bf3fe75ad6155ac3760dd7c45687c6c1392ae11bcc7f694c059c9465ab42be75c1e16ec17f259f310e4be4faf37f7006df408796482613d6984710860cf50df14cba81f0f3bfa225a2930d87c6a8bbe8c885b730c59889652208122535aa57b30dd3e511b2e28ba5baa002009364a4f0095cc50b59d667b2c2b477fe8b2d985ea02ae44b75409c49135c357dee4a8bd3b5995a5cd501f0ae5c42c1f025a7487ce22edaaea5a27286c01dfe91943ae3b4cb27b9b92f03d775b119be2d23a93804b88d1342dfb3eac93fdfb139fd80844ad32ccbd24f48c9afc0b7ec27c5c76e377eca1ebdf67f7376ffc1bae6bafa914f8fb2404a2adc4ede25521a3d7f6db8760a31370d286f46be74f648028b3a8207014471e39c3796a708753c3e19818ac73cc46db66a792dee8587c486686c1aeb834d887f73f0a0eb53f6a7f33480792bfd8c295ed091676c7d858e38bdf00b26ec220dc34b10f6137e3935d60887155942bea21c2e676fbcac8089a4256202845ab6852d5e1414c014498e6bad6cb1ee13494c1fae964f43164bea795e8fd40fd3ed2cc27c62f95b3e24c9ffa9280fd6d1b6f3cea7d2280f340c644fda466ccff61cd120148123ba2b600ec5cff707f8ca95ae3362bd60b23a7f9640273c9245ab434a1c563777e39bcd8888c58698df0ce7ed24814532abf8b96c1ca9b26a6aceb3e5280423041b190327e1bc1b79c43ee1c4e9ef3de26846511f87d97368f8bf5e8dfd5d089c09aad401d76d50f6feacd7844835023a716e376e3fc61556c4af5d4f015d225c27396851cbc878c284487f3f5846cdf8fb5ab51a4b7308a17974be72d849fa1fa235bcbc36229846ca66d37de3d8a5d46d2155fe8c5ecf494e8423d96e9c98b3755940e535e6e3d8c366c9770453fe46230bf84381eb1d73912f9ae09546c16ce78a27d2f76f6c8021ca54de1f811e879cee4cab8fa76510d85b88e6b86731374a17473299fa32fa79a3dc2e8303a026de5a2e61a12a74e711548fa00709ca6f2366b17e226dc09b336f8f8ec05cf2818a40d04a77d251594e796643c22671f38fedbaaa92c4f12e4c99a9628bcb76aac4391795bb1b9fd045ebf89bf3ecc6b29382047f423011782085d3a16db148d1dce85c0eff58f29bca2b78a9d391feb2fb285a5f3306354dd58fcd1b4680d1995be9f34e0bc559c7513688c96a3595ac1e4e75f29ab92b7eacababcc9b4890b894987dbe4870a5a0470fd8b6191b6f4ddde35d94170de8968513f2da43e7c98738fc1ec74da101cf5b11ee48ebf4f3e99919b2ec77016548701d58f8b026ae2eea6c186090e77a936d44d7182930783206d62422b417bcbf5396fea51420d7eee3caa1eb58fcfcb7542f28098d9817603b27e99a0e0ddc62fa5ba0af4e9e580e866e512adcb142cf6e219b510b22564dc0ae0ad0f39fe2272a046c35ea944e81289c520985d930c025696ac9760cee31d52547dd65b223979ada9a2bfeb14d79ed121945a77fc3562363cfeff7a5282c6ca970e5d385f0d2a8b1189d2b19c3a9aab5957608e571a01b8974f6206985ecb25f10d40b263f1d0633fb72b8a717fef2706dfccb0e21233e0a39a92aa3e49963699a552b9867a34d1f9320ec1c56e0bb15519d5b2d64ac46e363f3386544f1c0a04dea90c6648518da50478fb9edef434e34fe6080a3debd2f903141ab455063a6294f82282d44f940c1bbf1cf05e6535cd4b08083600b43766f6c41add34c4724b0d6d13cd5bf1d1da72d5c8bde3b6c336a6a852c806d91953b35f6100b3f99ad4148994832639ac3ffbbd329aaf33c0c5a997758b0ba83b3ea259c1ccc98996fceec04b7d3a9640198eecd1733cc8c0486e907d99934eb2a7ba234c82070df9e903bb2681bf6c6b3f2904cea27b36d3df3e8b724de3f4b0ef5dac39c0d53976560283af914bd39c5eb00c196144926e000000000000000000000000f000000ee5f7f5aaa81f6f0b02cdc8741a911aba65b7275c182bf779aad1d3431cfc5c966b1eace5109167484a3917a393b14ffaa7409ff9fdab4ef58b0e98db5bca1a3bb7c25650c3db841cfb78cfe4f8969fb2b79d263dae9e16471bf27c87553d2f7dbd6611ce3c9b1f0ecbd691ae61e3551b3540b340c4866ecfe78d20c30d00c669321507578551f20e26cea74f18aea8eeb5ca43ef5acb10dd13013dc9fa871dc29eb4c5cb0c9612f0eb1341703508158ff45730ab0633b5a27e8006f28d88c0b2587e4776ef4759e95f7e33b948f0000e0"], 0x11d0}}], 0x1, 0x4000045) (async, rerun: 32) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002280)={0x14, 0x40, 0x107, 0x70ad2b, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) (rerun: 32) 2m33.417390274s ago: executing program 32 (id=2156): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) r8 = dup(r5) (async) r9 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8001) ioctl$EVIOCREVOKE(r9, 0x40044591, 0x0) (async) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) (async) syz_ublk_setup_queues(r8, r4, &(0x7f0000000180)={0x0, 0x612d, 0x0, 0x3, 0xbd}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0x1, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f0, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x200, 0x2, 0x24c}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) (async, rerun: 32) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r11, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r11, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) (async, rerun: 32) connect$inet(r11, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) (rerun: 32) ioctl$VHOST_SET_VRING_BASE(r7, 0x4008af12, &(0x7f0000000300)={0x2, 0x3}) (async) setsockopt$inet_tcp_TCP_REPAIR(r11, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) (async) sendto$inet(r11, &(0x7f00000002c0)='J', 0x1, 0x4000, 0x0, 0x0) sendmmsg(r11, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000001100)="fe", 0x1}], 0x1, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0x11d0}}], 0x1, 0x4000045) (async, rerun: 32) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002280)={0x14, 0x40, 0x107, 0x70ad2b, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) (rerun: 32) 16.544995816s ago: executing program 2 (id=2899): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000780)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r2, {0x5, 0xffff}, {}, {0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0xaf}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0xc010) (fail_nth: 3) 16.392468879s ago: executing program 2 (id=2901): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYRESDEC=r0, @ANYRESDEC=r0, @ANYBLOB="2b5dfd496e58dab5827922759286af4f36b06e86b02d47017acf70e80294b87722469583a8faafd7ebc944f3780e7e297059ac8c6142df7ada325ebea190f03c6a7bb8555b6fe2b8162f305a06ca435f11b9f2970ef569f1", @ANYRES8=r0, @ANYRES32=r0, @ANYRESHEX=r0], 0xfe33) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000002940)=""/4146, 0x1032}, {&(0x7f0000000400)=""/4066, 0xfe2}], 0x2}, 0x0) 15.332228807s ago: executing program 2 (id=2907): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@newtfilter={0x98, 0x2c, 0xd27, 0x70bd2b, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xffff, 0x3}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x64, 0x2, [@TCA_MATCHALL_ACT={0x60, 0x2, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x57f}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x6, 0xffffffffffffffff, 0x800, 0xf}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x40800}, 0x44000) 15.244310244s ago: executing program 2 (id=2908): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES32=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000000000011f17c49b000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0c0009800800014600000004080005400000001c140000001100010000000000000000000100000a"], 0x64}, 0x1, 0x0, 0x0, 0x4051}, 0x4004044) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) readv(r3, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/57, 0x39}], 0x1) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r6 = openat$cgroup_ro(r2, &(0x7f0000000340)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000004c0)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000001, 0x4010, r6, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000080)={0x2, 0x2, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000002c0)}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="68000000020605000000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000a00007800c00018008000140000000000800084000000000080006400000000005000400000000000500010006000000"], 0x68}}, 0x4040000) r8 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r8, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r8, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r8, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r9 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r9, &(0x7f0000000700)=ANY=[], 0xed) splice(r1, 0x0, r8, 0x0, 0x8000, 0x0) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000abe9dd98536ef8710c5ea6593677c464cd2495e27ef4d19ab827296780087dda80c3f19313e0799871c455bb93ed0ffe409a6dcd388810938f61e2c39c37f72ec1e5"]) openat$nullb(0xffffff9c, &(0x7f0000000200), 0x40401, 0x0) 14.363296801s ago: executing program 2 (id=2913): r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x1) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffb, 0x6, 0x1, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="93725afa467b", 0x0, 0xfffffff9, 0x0, 0xffffffffffffffff, 0x0}) 14.308971729s ago: executing program 2 (id=2915): r0 = syz_usb_connect(0x5, 0x4f, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3d, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x0, 0x1a, 0xda, 0xa8, 0x8}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000bc0)={0x14, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x24, 0x0, &(0x7f0000001540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000001c0)={0x40, 0x8, 0x8, "fde61e0ee4a63b9e"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000001e00)={0x20, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 6.430060819s ago: executing program 4 (id=2954): pipe2$9p(&(0x7f0000000000), 0x800) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in=@loopback, @in=@remote}}, {{@in=@multicast1}, 0x0, @in6=@mcast1}}, &(0x7f0000000140)=0xe4) socket$xdp(0x2c, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000006c0)={0x14, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000004) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000001c0)={0x1, 0x0, [{0x1, 0x2, 0x80, 0xfffffff9, 0xeaa}]}) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x483, 0x0, 0xd6}]}) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80001, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000280)={0x1, "5660359c32450000000000000000fa00", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000000)={0x7, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r7}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0xb, 0x6, 0x100}, 0x3c, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x1d98, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x8000004, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0x40000e, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10080007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x9, 0x4, 0x4, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x2, 0xff, 0x6, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x6, 0x1000a, 0x4, 0x5, 0xfffffffe, 0x103, 0x8d2, 0x9, 0x5, 0x7fff, 0xffffffff, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x10006, 0x8, 0xffffffff, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x2000000c, 0x2, 0x6d02, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x3, 0x2, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2eb, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0xb9, 0xce7, 0x1fd, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x0, 0x2, 0x5, 0x1, 0x3, 0x14c, 0x60a7, 0x6, 0x96, 0xfffffffb, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x2, 0x226, 0x5, 0x5, 0x1, 0x30b1d68f, 0xa1f, 0xcb, 0x800, 0x1, 0x6c1b, 0x0, 0x3, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xa77e]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r8, 0x0) setsockopt$inet6_int(r8, 0x29, 0x4, &(0x7f0000000000)=0x8, 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000940)=@mangle={'mangle\x00', 0x64, 0x6, 0x51c, 0xc8, 0x38c, 0xc8, 0x27c, 0xc8, 0x454, 0x454, 0x454, 0x454, 0x454, 0x6, 0x0, {[{{@ipv6={@remote, @mcast2, [0xff], [0x0, 0xffffffff, 0x0, 0xffffff00], 'gre0\x00', 'syzkaller1\x00', {}, {0xff}, 0x0, 0x0, 0x7}, 0x0, 0xa4, 0xc8}, @common=@unspec=@NFQUEUE1={0x24, 'NFQUEUE\x00', 0x1, {0x599c, 0x6}}}, {{@uncond, 0x0, 0xc8, 0xec, 0x0, {}, [@common=@inet=@socket1={{0x24}, 0x1}]}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0x27c}}, {{@uncond, 0x0, 0xa4, 0xc8}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0x38c}}, {{@uncond, 0x0, 0xc8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x4}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@empty, 'lo\x00', {0xd}}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @HL={0x24, 'HL\x00', 0x0, {0x2, 0x8}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x578) syz_emit_ethernet(0x84, &(0x7f0000000300)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x4e, 0x6, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xfffc, 0x0, 0xff6b}, {"153090dc4feca6539b724ef2494473e1b7c1a3fc4f8462015618c321d63c72d8be977b956c11cf4c03a460ddfa505b53a5933409ce9e9af8ae3f"}}}}}}}, 0x0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$int_in(r9, 0x5421, &(0x7f0000000140)=0x2f) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r11 = dup(r10) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x8}}, 0x20) ioctl$TCSETS(r11, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x400000, 0x0, 0x3, "0062ba7d820700000000000000000000096304"}) syz_open_pts(r10, 0x80) 5.975007812s ago: executing program 4 (id=2955): ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000900)=@newlink={0x4c, 0x10, 0x401, 0xfffffffc, 0x25dfdbfa, {0x0, 0x0, 0x0, r2, 0x31, 0x455965fb809f3fbd}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_NEIGH_SUPPRESS={0x5}, @IFLA_BRPORT_MULTICAST_ROUTER={0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20048800}, 0x0) (fail_nth: 3) 5.764107598s ago: executing program 4 (id=2956): syz_emit_ethernet(0x6a, &(0x7f0000000180)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x65, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8, 0x0, 0x0, [0xff]}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x6]}, {}, {}, {}, {0x8, 0x6558, 0xfffffffd}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}, @IFLA_GTP_FD1={0x8, 0x2, @udp6}]}}}]}, 0x40}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x20) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc04c5611, &(0x7f0000000280)=@multiplanar_overlay={0x4, 0x1, 0x4, 0x800, 0x1, {0x0, 0x2710}, {0x1, 0xc, 0xb, 0x1, 0x9, 0x9, "6dc72d77"}, 0x9f4d, 0x3, {&(0x7f0000000200)=[{0x6, 0xfffffffb, {0x7}, 0x6}, {0x9, 0xffffcb51, {0x6}, 0x80000000}]}, 0x8}) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) splice(r2, 0x0, r1, 0x0, 0x20000000000002, 0xa) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, @broadcast, 0x20, 0x1d}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x108, r4, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0xcc, 0xe, {{{}, {}, @broadcast, @device_a, @random="ce99a8ba8228"}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @val={0x5, 0x7e, {0x7, 0x3a, 0x5, "d8a76f57d90e39cdb045d9fde3196dd905ebf86c398e950ad65e17f0f0c6892391128271cc086840d1a0f0e8168c765400ef920d3718be678f5a6061a053fa7235fe23c7d5b00e71df317aa39ff21d1d66dec769deb384243467c843a2140ed90977efc54dd37518aa665448ebf03f467d9428165d21269f5655dc"}}, @void, @void, @void, @val={0x2d, 0x1a, {0x1, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7f}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_HE_BSS_COLOR={0x8, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}]}, 0x108}}, 0x20000014) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r8, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32, @ANYBLOB="0600cd00000000006c00330080200900080211000001080211000000"], 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r9 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io$printer(r9, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r9, 0x0, &(0x7f0000000000)={0x1c, &(0x7f00000005c0)=ANY=[@ANYBLOB="ffffffff0000000070f9ed26a4d1cb46dc19efa2880daaa4df888254c284879e776120dc8142b66c2220ac51cab3cfc9089e5a5f5fe8901560277bd4d623a3baf2462eac95d733"], 0x0, 0x0}) syz_usb_control_io$rtl8150(r9, 0x0, 0x0) syz_usb_control_io$lan78xx(r9, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000280)={0x0, 0xb, 0x3, "c1e0f7"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x6}, 0x0, 0x0, 0x0, 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000580)={&(0x7f0000000100), 0xc, &(0x7f0000000540)={&(0x7f0000000300)={0x23c, r4, 0x22, 0x70bd28, 0x4, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x6d}}}}, [@NL80211_ATTR_HE_BSS_COLOR={0x8, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_TX_RATES={0x20c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x7c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xde, 0x8000, 0x8000, 0x7f, 0xdd, 0x5, 0x6]}}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x6, 0xa}, {0x5, 0x8}, {0x0, 0x8}, {0x0, 0x9}, {0x1}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {}, {0x2, 0x1}, {0x7, 0x3}, {0x6, 0x8}, {0x4, 0x2}, {0x2, 0x8}, {0x5, 0x4}, {0x2}, {0x7, 0x9}, {0x7, 0x4}, {0x1, 0x4}, {}, {0x0, 0x9}, {0x5, 0x2}, {0x6, 0x6}, {0x6, 0x3}, {0x3, 0x8}, {0x1, 0x4}, {0x6, 0xa}, {0x2}, {0x6, 0x1}, {0x0, 0x3}, {0x3}, {0x2, 0xa}, {0x7, 0x7}, {0x0, 0xa}, {0x1, 0x6}, {0x4, 0x4}, {0x7, 0x9}, {0x1, 0xa}, {0x7, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x7, 0x7}, {0x2, 0x3}, {0x2, 0x6}, {0x3, 0x7}, {0x0, 0x4}, {0x0, 0xa}, {0x6, 0x4}, {0x1, 0x6}, {0x6, 0x3}, {0x5, 0x3}, {0x6, 0x6}, {0x7, 0xa}, {0x5, 0x5}, {0x2, 0xa}, {0x4, 0x9}, {0x7, 0x2}, {0x6, 0x2}, {0x7, 0x9}, {0x0, 0x8}, {0x6, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x18, 0x6c, 0x6, 0x18, 0x5, 0x2, 0x24, 0x6c, 0x18, 0x36, 0x16, 0x4, 0x60, 0xc, 0x5, 0x6, 0x30, 0xb, 0x1, 0x12, 0x12, 0x16, 0x4, 0x18, 0x3, 0x16, 0x12, 0x3, 0x24, 0x4, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x401, 0x16c, 0xffff, 0x9, 0x7, 0x50, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x6, 0x0, 0xff00, 0x3ff, 0x7]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x8c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xb, 0x3, 0x5, 0x8, 0xff, 0x10, 0xb4]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x48, 0x24, 0x36, 0x9, 0x6a, 0x24, 0x60, 0x2, 0x9, 0x6, 0x24, 0x9, 0x24, 0x16, 0x1b, 0x504f6ee8e9e8db1e, 0x1b, 0x30, 0x2, 0x12, 0xc, 0x4, 0x6, 0x1b, 0xb, 0x24, 0x30, 0x1b, 0x1b, 0x9]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x0, 0x1000, 0x0, 0x2, 0x1, 0x3, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x2, 0x63, 0x24, 0x12, 0x6, 0x5, 0x5, 0x9, 0x1b, 0x3, 0x60, 0xc, 0x6, 0x60, 0x30, 0x2a, 0xb, 0x30, 0x9, 0x6c, 0x12, 0x24, 0x6, 0x6c]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x74, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x43, 0x2, [{0x3, 0x4}, {0x0, 0x8}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {0x0, 0x1}, {0x0, 0x6}, {0x3}, {0x2, 0x9}, {0x6, 0x9}, {0x7, 0x1}, {0x1, 0xa}, {0x2, 0x9}, {0x7, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x2, 0x4}, {0x7, 0x9}, {0x2, 0x4}, {0x3, 0xa}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0xa}, {0x6, 0x3}, {0x1, 0x2}, {0x7, 0x5}, {0x7, 0x3}, {0x7, 0x6}, {0x1, 0x3}, {0x4, 0xa}, {0x3, 0x3}, {0x6, 0x1}, {0x7, 0x9}, {0x7, 0x8}, {0x7, 0x6}, {0x1}, {0x0, 0x4}, {0x1, 0x8}, {0x1, 0x5}, {0x1, 0x9}, {0x4, 0x1}, {0x4, 0x2}, {0x2, 0x7}, {0x0, 0x8}, {0x0, 0x3}, {0x2, 0x3}, {0x6, 0x9}, {0x4, 0x5}, {0x5}, {0x6, 0x8}, {0x4, 0x6}, {0x6, 0x1}, {0x5, 0x8}, {0x0, 0xa}, {0x1, 0x4}, {0x3, 0x6}, {0x6, 0xa}, {0x3, 0x4}, {}, {0x1, 0x3}, {0x1, 0xa}, {0x5, 0x3}, {}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0xc, 0x24, 0x1b, 0x34, 0x1, 0x9, 0x4, 0x4, 0x24, 0x16, 0x36, 0x3, 0x3, 0x30, 0x5, 0x5, 0x16, 0x2, 0x16, 0x3, 0x60]}, @NL80211_TXRATE_HE_GI={0x5}]}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x10) 4.601196795s ago: executing program 0 (id=2963): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@cgroup, 0xffffffffffffffff, 0x34, 0x20}, 0x20) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo\x00') fchdir(r3) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x161a82, 0x149) sendfile(r4, r4, 0x0, 0xb) 4.399726105s ago: executing program 0 (id=2964): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000001405000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x40000080}, 0x40000) (fail_nth: 3) 4.248901919s ago: executing program 0 (id=2966): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="0c0100001000090500000000000000006f6d886486fe73d24bbe326a387f597b47af65be2dd7f674ccfcece6a2cd862cc13b29fd329074e8d1d07f3623fc81588e3f03f3cd3572b4006780ad006b00fa17c478174d1c45dd1a6cb2c1e5d1c7b6f51175197c6946316afcdb3333b272489068b2b1e549df218b893961fd4f9e95f085661faf6e56d25e7e0b2711c2e3c4851abd6686ba35a738b6d770454b37e84eaf5d4563d8338b7857863a4165d45cf69dd0532f81273a513e4d683fd353c5989655a87923412dba5590ee39c31a9fd3b7d14681739c4364e109b30085af2278035d1fdb3734c6115443d2422417fea295220851d74dfe00"/268], 0x10c}], 0x1}, 0x40040) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x15, @loopback}, 0x10) listen(r0, 0x5) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x4000) r1 = socket$kcm(0x29, 0x5, 0x0) sendmmsg$inet(r1, &(0x7f0000001800)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x56}}], 0x2, 0x20008081) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') lseek(r2, 0x1000000, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xfffffffffffffca0}, 0x42) ioctl$TUNSETNOCSUM(r3, 0xff03, 0x110c230102) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x53, &(0x7f0000000100)=[{0x9, 0x0, 0x0, 0x7fff0000}]}) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2, 0x80255, 0x0, r10}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x4, 0x2000, 0x10000004, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x1, 0x0, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xae2d, 0x1000, 0x0, 0x390, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3c42, 0x20, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x51, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x2, {}, 0x1f, 0x0, '\x00', {0x0, 0x0, 0x0, 0x0}}, 0x0) bind$inet(r10, &(0x7f00000000c0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r11 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1000, 0x2, 0x155}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r11, r12, r13, r14, &(0x7f0000000200)={0x2e, 0x56, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x4, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) r15 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r15, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'ip6gretap0\x00', 0x4}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r15, 0x0, 0x48c, &(0x7f0000000600)={0x2, 'pimreg\x00', 0x1}, 0x18) 4.058857423s ago: executing program 5 (id=2967): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x1030002, 0x0, 0x0, 0x2}}, 0x50) read$FUSE(0xffffffffffffffff, &(0x7f00000065c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20080, 0x0) close(0x3) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) r3 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000040)={0x80000010}) ppoll(&(0x7f0000000180)=[{r0, 0xa200}], 0x1, 0x0, 0x0, 0x0) 3.911285369s ago: executing program 0 (id=2968): rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r0 = shmget$private(0x0, 0x2000, 0x10, &(0x7f000050f000/0x2000)=nil) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x4) shmctl$SHM_LOCK(r0, 0xb) r1 = eventfd2(0x42000006, 0x801) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000080)={r1, 0x7, 0x2}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={0x0, 0x1, 0x6, @local}, 0x10) mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x35, 0x4, @thr={&(0x7f0000000040)="dbbbe746367dfa7de517d4231ccf15325f4ba4dea107115b65a325b3a1886464c23599547cae380d8beb4ad87907736b4a783b800a803b17a6f8e8c0", &(0x7f00000000c0)="ff23561ed70fa775a45347b034345f5130341f762c1a608a2410d92dcbb4de3306d4d0484490dc56c11fba6e395137cc60082c4aae18a3a1a539755334e35bc73324a27361441de29161506af5ed9bdd8a81242ac342501d81e265b9a461fde3cd8488b769c5753a04d71a691fa06b280eeebcc15a12409ca4bce8"}}) setsockopt$packet_buf(r2, 0x107, 0x2, &(0x7f0000000080)="5ec78db485c534bdf7a2172f3f1f30da", 0x10) r3 = getpid() r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_create(0x0) ptrace(0x10, r4) rt_sigqueueinfo(r4, 0x1c, &(0x7f0000000ac0)={0x4001f, 0xc0, 0xff7fff7e}) ptrace$peeksig(0x4209, r4, &(0x7f0000000000)={0x2000000000000, 0x1, 0x1}, &(0x7f0000000080)=[{}]) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000240)={@initdev, 0x0}, &(0x7f00000002c0)=0x14) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f0000000140)="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"/297, 0x3accf8d5) vmsplice(r7, &(0x7f0000000440)=[{&(0x7f00000000c0)='7', 0x1}], 0x1, 0x100000000000000) sendmsg$nl_route(r5, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4000000029bd7000ffdbdf25000063631d6f52de3a9a88b1d86292a5870fdbf2d41c76d64584c2f98e0118c7177e8f40b9b20b1a7814fc3cf9ae8bc1af763f4ae256c937293bcec365a9d949a657032b86b348b58ec0a1db8b352c", @ANYRES32=r6, @ANYBLOB="000000004000000008001f000800000008002e000200000008001c00", @ANYRES32=r7, @ANYBLOB="540034801400350077673100000000000000000000000000140035006e723000000000000000000000000000140035007465616d5f736c6176655f3000000000140035007465616d5f736c6176655f300000000011002400f98316597c5819eeab10f1ff3c0000000800250004000000"], 0xa8}, 0x1, 0x0, 0x0, 0x4101}, 0x1080) rseq(&(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x5, 0x2, 0x7, 0x10000}, 0x4}, 0x20, 0x0, 0x0) r8 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r8, &(0x7f0000000000)=ANY=[], 0x120) close(r8) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x1) process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/78, 0x4e}], 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) 3.433063959s ago: executing program 3 (id=2969): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) rseq(&(0x7f0000000280), 0x20, 0x0, 0x0) socket(0x10, 0x803, 0x0) socket(0x2, 0x80805, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000140)=0xc) sched_setattr(r2, &(0x7f0000000180)={0x38, 0x5, 0x0, 0x3, 0x2, 0xffff, 0xfffffffffffffffb, 0x80, 0x5, 0xfffff350}, 0x0) 3.21179623s ago: executing program 3 (id=2970): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, 0x0, &(0x7f0000000040), &(0x7f0000000140)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902"], 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0x8210, 0x2, 0x0, 0x42}, 0x0, 0x0, 0x0) socket(0x2d, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xc0803, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r1) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08001400fc000000080011000700000008000e00800000000800", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (fail_nth: 2) 3.089162517s ago: executing program 5 (id=2971): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f0000000100)) 2.898507266s ago: executing program 5 (id=2972): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f0000000100)) (fail_nth: 3) 2.538144338s ago: executing program 4 (id=2973): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x9c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x70, 0x3, 0x0, 0x1, [{0x6c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x60, 0xb, 0x0, 0x1, [{0xffffffffffffff6d, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x8}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0x0, 0x1, 0x1, 0x0, 0x501}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x4, 0x84}}}, 0x120}}, 0x0) (fail_nth: 3) 2.380817998s ago: executing program 5 (id=2974): pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x0, 0x800) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8fb, 0x0, 0x9, 0x0, 0xfffffe0000000005, 0xfa0f, 0xa46}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xc) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8004) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="48010000100013070000140000000000e000006cb100000073f8479900000000fe8000000000000100000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x148}}, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x16) r4 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000b24000/0x1000)=nil, 0x7ffffffa, 0x0, 0x0, 0x6, 0x0, 0x2, 0x0, 0x18}) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x2}}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x30, 0x4, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0xfffffffd}]}, 0x8) syz_genetlink_get_family_id$tipc2(&(0x7f0000000800), 0xffffffffffffffff) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) 2.050131901s ago: executing program 4 (id=2975): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@cgroup, 0xffffffffffffffff, 0x34, 0x20}, 0x20) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f00000000c0)={0x1, 0x0, [{0x1, 0xd2bd, 0x100005, 0xe8e8, 0xfffffffa}]}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo\x00') fchdir(r3) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x161a82, 0x149) sendfile(r4, r4, 0x0, 0xb) 1.573694765s ago: executing program 3 (id=2976): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, 0x0, 0x0, 0x16}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000640)={'ip6_vti0\x00', r2, 0x29, 0x9, 0x81, 0x1000cf53, 0xff52, @ipv4={'\x00', '\xff\xff', @multicast2}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000, 0x8000, 0x8, 0x1}}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000070000000900000073797a30000000003c000000090a010400000000000000000700200008000a40000000000900020073797a31000000000900010073797a300000000008000540000000219c0000000c0a00090900020073797a31000000000900010073797a3000000000700003806c000080080003400000000260000b806dff01800a00010071696f74610000002000028008000240000000010c000440000000000000000808000240000000012c0001800a0001006c696d69740000001c0002800000014000000000000005010c0001400000000000000003140000001000010000000000000000000484000a774b30796d8ccb8c4fddd9d7e5228ed19334c67ffc28383f71b3950ff48c0bf69ca9b70bb305650dc19ea8021ab81d5434c38dbb9cb8744e6ea9ba7ab74941661469e91a824365b3e0836b7ff52ca7d6aef72c402de2100c373ee6912e5088885321fb0dfe357b8c0b4d1901c7926b86028ee36a6e3bb8d758622a7f2b43278a54f0a0778de26dc70d01c71d8085733f6c955079e16acd32d5ee7575e85a0335497b133d51f38f"], 0x120}}, 0x0) 1.320417553s ago: executing program 3 (id=2977): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x41f, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x9}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}]}}}, {0x14, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x4}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x14040001}, 0x24000840) 1.313647898s ago: executing program 5 (id=2978): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="0c0100001000090500000000000000006f6d886486fe73d24bbe326a387f597b47af65be2dd7f674ccfcece6a2cd862cc13b29fd329074e8d1d07f3623fc81588e3f03f3cd3572b4006780ad006b00fa17c478174d1c45dd1a6cb2c1e5d1c7b6f51175197c6946316afcdb3333b272489068b2b1e549df218b893961fd4f9e95f085661faf6e56d25e7e0b2711c2e3c4851abd6686ba35a738b6d770454b37e84eaf5d4563d8338b7857863a4165d45cf69dd0532f81273a513e4d683fd353c5989655a87923412dba5590ee39c31a9fd3b7d14681739c4364e109b30085af2278035d1fdb3734c6115443d2422417fea295220851d74dfe00"/268], 0x10c}], 0x1}, 0x40040) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x15, @loopback}, 0x10) listen(r0, 0x5) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x4000) r1 = socket$kcm(0x29, 0x5, 0x0) sendmmsg$inet(r1, &(0x7f0000001800)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x56}}], 0x2, 0x20008081) lseek(0xffffffffffffffff, 0x1000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r3, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xfffffffffffffca0}, 0x42) ioctl$TUNSETNOCSUM(r4, 0xff03, 0x110c230102) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x53, &(0x7f0000000100)=[{0x9, 0x0, 0x0, 0x7fff0000}]}) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2, 0x80255, 0x0, r11}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x4, 0x2000, 0x10000004, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x1, 0x0, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xae2d, 0x1000, 0x0, 0x390, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3c42, 0x20, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x51, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x2, {}, 0x1f, 0x0, '\x00', {0x0, 0x0, 0x0, 0x0}}, 0x0) bind$inet(r11, &(0x7f00000000c0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r12 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x1000, 0x2, 0x155}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r12, r13, r14, r15, &(0x7f0000000200)={0x2e, 0x56, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x4, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) r16 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r16, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'ip6gretap0\x00', 0x4}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r16, 0x0, 0x48c, &(0x7f0000000600)={0x2, 'pimreg\x00', 0x1}, 0x18) 931.524518ms ago: executing program 3 (id=2979): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000000)={0x1d, r2, 0x3}, 0x18) sendmmsg$inet(r1, &(0x7f0000002e00)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000080)="d171e4c4c55f7973", 0x8}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001500)='i', 0x1}], 0x1}}], 0x2, 0x0) syz_usb_connect(0x4, 0x0, 0x0, 0x0) write$vga_arbiter(r0, &(0x7f0000000140)=@other={'trylock', ' ', 'io+mem'}, 0xf) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x38, r6, 0x7, 0x0, 0x40000, {}, [@ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) modify_ldt$write2(0x11, &(0x7f0000000200)={0xd8a, 0x0, 0x2000, 0x0, 0x3, 0x1, 0x1, 0x1}, 0x10) dup(r4) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000006800010400000000fdffffff020000000000000008000500", @ANYRES32=0x1, @ANYBLOB="3efac095b1c4666f2439c37be001ef31ea325a2dc9918a146684b5b36f340d6b638eb008926ef6080591de1890a3fe77f65f17293b6700dd9a0900000000000000964c979956667bdff3e26c302c1cbf66b4661acf988d7adedc2aa3fed73fad8929c78dac60bf227bd8ca6223ec5b34932aa4d3a036e4cfec37138fa63b43f3f8e735a466204fda7a87ea10040000ef644b7afe24d29b07da81c5576df272ff21df54440cff4699da857bffc883c8f9f48db6ef309a2487387960d72a821d65bb42bdc7a1fb18d2edc8de79c618771bda922ce0e9b95f6688b1537b8b13e26f713d4e9c5cf72e48984e6097320d007eb31746ff3d993ac41c01a14a18f6169e8fc0975a5bc89dc19e4d39a47a838b39a686de80b101f8543b51bbe0b618509dc415e3f3b3867bab56c2d7520de31c3c9d335590c59ab67368216145f2cec664a86c4d25c5abc414ba7b87de64a47202733ce196bbfed7b02d078772289be1415bedc32b064b739460f7681e60f4f392d7d4e87b67e7366cd333ab762d6609c97f234a4229c4"], 0x20}}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e1206021f1f00000e000a0010000000028000001294", 0x2e}], 0x1}, 0x4004850) 689.030886ms ago: executing program 4 (id=2980): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x1030002, 0x0, 0x0, 0x2}}, 0x50) read$FUSE(0xffffffffffffffff, &(0x7f00000065c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20080, 0x0) close(0x3) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) r3 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000040)={0x80000010}) ppoll(&(0x7f0000000180)=[{r0, 0xa200}], 0x1, 0x0, 0x0, 0x0) 545.144845ms ago: executing program 0 (id=2981): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000005a00)=[{&(0x7f0000002940)=""/4146, 0x1032}, {&(0x7f0000005a40)=""/4076, 0xfec}, {&(0x7f0000003980)=""/4168, 0x1048}, {&(0x7f0000004a00)=""/4096, 0x1000}], 0x4}, 0x0) 493.006653ms ago: executing program 5 (id=2982): syz_emit_ethernet(0x6a, &(0x7f0000000180)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x65, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8, 0x0, 0x0, [0xff]}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x6]}, {}, {}, {}, {0x8, 0x6558, 0xfffffffd}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}, @IFLA_GTP_FD1={0x8, 0x2, @udp6}]}}}]}, 0x40}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x20) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc04c5611, &(0x7f0000000280)=@multiplanar_overlay={0x4, 0x1, 0x4, 0x800, 0x1, {0x0, 0x2710}, {0x1, 0xc, 0xb, 0x1, 0x9, 0x9, "6dc72d77"}, 0x9f4d, 0x3, {&(0x7f0000000200)=[{0x6, 0xfffffffb, {0x7}, 0x6}, {0x9, 0xffffcb51, {0x6}, 0x80000000}]}, 0x8}) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) splice(r2, 0x0, r1, 0x0, 0x20000000000002, 0xa) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r1, 0x89fa, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, @broadcast, 0x20, 0x1d}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x108, r4, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0xcc, 0xe, {{{}, {}, @broadcast, @device_a, @random="ce99a8ba8228"}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @val={0x5, 0x7e, {0x7, 0x3a, 0x5, "d8a76f57d90e39cdb045d9fde3196dd905ebf86c398e950ad65e17f0f0c6892391128271cc086840d1a0f0e8168c765400ef920d3718be678f5a6061a053fa7235fe23c7d5b00e71df317aa39ff21d1d66dec769deb384243467c843a2140ed90977efc54dd37518aa665448ebf03f467d9428165d21269f5655dc"}}, @void, @void, @void, @val={0x2d, 0x1a, {0x1, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7f}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_HE_BSS_COLOR={0x8, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}]}, 0x108}}, 0x20000014) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, 0x0, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r8, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="0600cd00000000006c00330080200900080211000001080211000000"], 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r9 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io(r9, 0x0, 0x0) syz_usb_control_io$printer(r9, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r9, 0x0, &(0x7f0000000000)={0x1c, &(0x7f00000005c0)=ANY=[@ANYBLOB="ffffffff0000000070f9ed26a4d1cb46dc19efa2880daaa4df888254c284879e776120dc8142b66c2220ac51cab3cfc9089e5a5f5fe8901560277bd4d623a3baf2462eac95d733"], 0x0, 0x0}) syz_usb_control_io$rtl8150(r9, 0x0, 0x0) syz_usb_control_io$lan78xx(r9, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000280)={0x0, 0xb, 0x3, "c1e0f7"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x6}, 0x0, 0x0, 0x0, 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000580)={&(0x7f0000000100), 0xc, &(0x7f0000000540)={&(0x7f0000000300)={0x23c, r4, 0x22, 0x70bd28, 0x4, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x9, 0x6d}}}}, [@NL80211_ATTR_HE_BSS_COLOR={0x8, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_TX_RATES={0x20c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x7c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xde, 0x8000, 0x8000, 0x7f, 0xdd, 0x5, 0x6]}}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x6, 0xa}, {0x5, 0x8}, {0x0, 0x8}, {0x0, 0x9}, {0x1}, {0x5, 0x6}, {0x3, 0x1}, {0x7, 0x7}, {}, {0x2, 0x1}, {0x7, 0x3}, {0x6, 0x8}, {0x4, 0x2}, {0x2, 0x8}, {0x5, 0x4}, {0x2}, {0x7, 0x9}, {0x7, 0x4}, {0x1, 0x4}, {}, {0x0, 0x9}, {0x5, 0x2}, {0x6, 0x6}, {0x6, 0x3}, {0x3, 0x8}, {0x1, 0x4}, {0x6, 0xa}, {0x2}, {0x6, 0x1}, {0x0, 0x3}, {0x3}, {0x2, 0xa}, {0x7, 0x7}, {0x0, 0xa}, {0x1, 0x6}, {0x4, 0x4}, {0x7, 0x9}, {0x1, 0xa}, {0x7, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x7, 0x7}, {0x2, 0x3}, {0x2, 0x6}, {0x3, 0x7}, {0x0, 0x4}, {0x0, 0xa}, {0x6, 0x4}, {0x1, 0x6}, {0x6, 0x3}, {0x5, 0x3}, {0x6, 0x6}, {0x7, 0xa}, {0x5, 0x5}, {0x2, 0xa}, {0x4, 0x9}, {0x7, 0x2}, {0x6, 0x2}, {0x7, 0x9}, {0x0, 0x8}, {0x6, 0x4}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x18, 0x6c, 0x6, 0x18, 0x5, 0x2, 0x24, 0x6c, 0x18, 0x36, 0x16, 0x4, 0x60, 0xc, 0x5, 0x6, 0x30, 0xb, 0x1, 0x12, 0x12, 0x16, 0x4, 0x18, 0x3, 0x16, 0x12, 0x3, 0x24, 0x4, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x401, 0x16c, 0xffff, 0x9, 0x7, 0x50, 0x5]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x6, 0x0, 0xff00, 0x3ff, 0x7]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x8c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xb, 0x3, 0x5, 0x8, 0xff, 0x10, 0xb4]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x48, 0x24, 0x36, 0x9, 0x6a, 0x24, 0x60, 0x2, 0x9, 0x6, 0x24, 0x9, 0x24, 0x16, 0x1b, 0x504f6ee8e9e8db1e, 0x1b, 0x30, 0x2, 0x12, 0xc, 0x4, 0x6, 0x1b, 0xb, 0x24, 0x30, 0x1b, 0x1b, 0x9]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x0, 0x1000, 0x0, 0x2, 0x1, 0x3, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x2, 0x63, 0x24, 0x12, 0x6, 0x5, 0x5, 0x9, 0x1b, 0x3, 0x60, 0xc, 0x6, 0x60, 0x30, 0x2a, 0xb, 0x30, 0x9, 0x6c, 0x12, 0x24, 0x6, 0x6c]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x74, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x43, 0x2, [{0x3, 0x4}, {0x0, 0x8}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {0x0, 0x1}, {0x0, 0x6}, {0x3}, {0x2, 0x9}, {0x6, 0x9}, {0x7, 0x1}, {0x1, 0xa}, {0x2, 0x9}, {0x7, 0x8}, {0x2, 0x2}, {0x4, 0xa}, {0x2, 0x4}, {0x7, 0x9}, {0x2, 0x4}, {0x3, 0xa}, {0x3, 0x6}, {0x1, 0xa}, {0x5, 0xa}, {0x6, 0x3}, {0x1, 0x2}, {0x7, 0x5}, {0x7, 0x3}, {0x7, 0x6}, {0x1, 0x3}, {0x4, 0xa}, {0x3, 0x3}, {0x6, 0x1}, {0x7, 0x9}, {0x7, 0x8}, {0x7, 0x6}, {0x1}, {0x0, 0x4}, {0x1, 0x8}, {0x1, 0x5}, {0x1, 0x9}, {0x4, 0x1}, {0x4, 0x2}, {0x2, 0x7}, {0x0, 0x8}, {0x0, 0x3}, {0x2, 0x3}, {0x6, 0x9}, {0x4, 0x5}, {0x5}, {0x6, 0x8}, {0x4, 0x6}, {0x6, 0x1}, {0x5, 0x8}, {0x0, 0xa}, {0x1, 0x4}, {0x3, 0x6}, {0x6, 0xa}, {0x3, 0x4}, {}, {0x1, 0x3}, {0x1, 0xa}, {0x5, 0x3}, {}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0xc, 0x24, 0x1b, 0x34, 0x1, 0x9, 0x4, 0x4, 0x24, 0x16, 0x36, 0x3, 0x3, 0x30, 0x5, 0x5, 0x16, 0x2, 0x16, 0x3, 0x60]}, @NL80211_TXRATE_HE_GI={0x5}]}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x10) 125.935066ms ago: executing program 3 (id=2983): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f0000000080)=@attr_arm64={0x0, 0x0, 0x0, 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x129642, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000040)={0xd, 0x1, 0x4, "495700b300000000fcff0d1609d6000000000b000004040023000700004000", 0x20323159}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000040)={0x1080}) mkdirat(r6, &(0x7f0000000340)='./file0\x00', 0xb2) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r10, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x40007, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x6, 0x99, 0x9, 0x5, 0x6, 0x40000007, 0xfffffff7, 0x6d, 0x2, 0x9, 0xd05, 0x1000044, 0x4, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x5, 0x7, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0xffffffff, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0x5, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0xfffd, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x6, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0xf06, 0x8, 0x2, 0x0, 0x9, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0x7, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x5, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x5, 0x40fff, 0x1ff, 0x8000, 0x3, 0x200, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0xd, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x10000068, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x80000000, 0x1, 0x0, 0x7, 0x8001, 0x2, 0x6, 0x4, 0xc, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x10000002, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0x8, 0x8001, 0x4, 0x6, 0x7, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0x8001, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x48001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0xffff6f3c, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0x80, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x6, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x1, 0x9da, 0x9, 0x6, 0xea6, 0x3, 0x5, 0x10, 0x8, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0x6, 0x9, 0x5, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x4, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x7ff, 0xfffffffe, 0x0, 0xb, 0xfffffff7, 0x8000008, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0x0, 0xf, 0x1982, 0x1, 0x80000000, 0x1, 0x9, 0x6, 0x7ffc, 0x2, 0x1, 0x2, 0x2, 0x9, 0x5, 0xffffff1c, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x9, 0x1b8f, 0x14, 0x65, 0xc00, 0x9, 0xd, 0x3, 0x88, 0x10004, 0x295, 0x6, 0xcb1, 0x1, 0xb7e, 0x10001, 0x8000002, 0xa, 0x6, 0x1, 0x2, 0x3ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d4, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x5, 0x7fffffff, 0x80, 0x2, 0x90, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xfffffffe, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xfff, 0x421, 0x3ff, 0x2, 0xd, 0xfb6, 0xc, 0xfffffffd, 0xac, 0x4a0, 0xa, 0x0, 0x1, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 0s ago: executing program 0 (id=2984): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000740)={0x2, 0x3, 0x0, 0x3, 0x11, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_key={0x1, 0x9}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}}, @sadb_key={0x2, 0x8, 0x10, 0x0, "b1e5"}]}, 0x88}, 0x1, 0x7}, 0x0) write$cgroup_freezer_state(r0, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) syz_usb_connect(0x5, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000e4cb032021042302bdb10102031509022e000100eaff0009040000000202ff"], 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x980) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f0000000040)) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r4, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x9, 0x38, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x5, 0x4, 0x0, 0x5, 0x4000, 0x1, 0xffff, 0x0, 0x1, 0x7, @empty, @multicast1}, "00a85f77bd00ddc4"}}}}}, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f00000005c0)={{}, {0x1, 0x2}, [], {}, [], {0x10, 0x1}, {0x20, 0x2}}, 0x24, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0xd5b203, 0x2) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r5, 0xc0945662, &(0x7f00000002c0)={0xd, 0x0, '\x00', {0x0, @reserved}}) write$cgroup_pid(r2, &(0x7f0000000180)=r6, 0x12) write$cgroup_freezer_state(r0, &(0x7f0000000080)='THAWED\x00', 0x7) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000740)={0x2, 0x3, 0x0, 0x3, 0x11, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_key={0x1, 0x9}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}}, @sadb_key={0x2, 0x8, 0x10, 0x0, "b1e5"}]}, 0x88}, 0x1, 0x7}, 0x0) (async) write$cgroup_freezer_state(r0, &(0x7f0000000040)='FROZEN\x00', 0x7) (async) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) (async) syz_usb_connect(0x5, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000e4cb032021042302bdb10102031509022e000100eaff0009040000000202ff"], 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x980) (async) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f0000000040)) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) setsockopt$inet_int(r4, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) (async) syz_emit_ethernet(0x4a, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x9, 0x38, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x5, 0x4, 0x0, 0x5, 0x4000, 0x1, 0xffff, 0x0, 0x1, 0x7, @empty, @multicast1}, "00a85f77bd00ddc4"}}}}}, 0x0) (async) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f00000005c0)={{}, {0x1, 0x2}, [], {}, [], {0x10, 0x1}, {0x20, 0x2}}, 0x24, 0x0) (async) open(&(0x7f00000000c0)='./file0\x00', 0xd5b203, 0x2) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r5, 0xc0945662, &(0x7f00000002c0)={0xd, 0x0, '\x00', {0x0, @reserved}}) (async) write$cgroup_pid(r2, &(0x7f0000000180)=r6, 0x12) (async) write$cgroup_freezer_state(r0, &(0x7f0000000080)='THAWED\x00', 0x7) (async) kernel console output (not intermixed with test programs): e+0x8e/0x210 [ 652.019534][T14775] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 652.019560][T14775] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 652.019578][T14775] vfs_write+0x296/0xba0 [ 652.019613][T14775] ? __pfx_vfs_write+0x10/0x10 [ 652.019641][T14775] ? __fget_files+0x2a/0x420 [ 652.019669][T14775] ? __fget_files+0x3a2/0x420 [ 652.019692][T14775] ? __fget_files+0x2a/0x420 [ 652.019725][T14775] ksys_write+0x150/0x270 [ 652.019753][T14775] ? __pfx_ksys_write+0x10/0x10 [ 652.019784][T14775] ? asm_int80_emulation+0x1a/0x20 [ 652.019807][T14775] do_int80_emulation+0x198/0x500 [ 652.019832][T14775] ? trace_irq_disable+0x3b/0x140 [ 652.019849][T14775] ? asm_int80_emulation+0x1a/0x20 [ 652.019866][T14775] ? clear_bhb_loop+0x70/0xc0 [ 652.019883][T14775] ? clear_bhb_loop+0x70/0xc0 [ 652.019906][T14775] asm_int80_emulation+0x1a/0x20 [ 652.019923][T14775] RIP: 0023:0xf71175ab [ 652.019940][T14775] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 652.019954][T14775] RSP: 002b:00000000f53b54bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 652.019973][T14775] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f53b55d0 [ 652.019986][T14775] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 652.019996][T14775] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 652.020008][T14775] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 652.020019][T14775] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 652.020047][T14775] [ 652.396340][ T9955] legousbtower 1-1:14.57: interrupt endpoints not found [ 652.583816][ T9955] legousbtower 1-1:14.228: interrupt endpoints not found [ 652.697296][ T5707] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 652.758343][T14795] gtp7: entered promiscuous mode [ 652.758358][T14795] gtp7: entered allmulticast mode [ 652.786797][ T30] usb 3-1: reset high-speed USB device number 123 using dummy_hcd [ 652.847732][ T5707] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 652.849153][ T5707] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 64 [ 652.849182][ T5707] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 64 [ 652.851590][ T5707] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 652.851612][ T5707] usb 6-1: Product: syz [ 652.851625][ T5707] usb 6-1: Manufacturer: syz [ 652.949374][ T30] usb 3-1: device firmware changed [ 652.953165][ T9925] usb 3-1: USB disconnect, device number 123 [ 653.006821][T10285] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 653.102231][T14785] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 653.102314][T14785] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 653.122353][ T9925] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 653.131416][ T5707] dvb_ttusb_budget: ttusb_init_controller: error [ 653.131437][ T5707] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 653.157984][T10285] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 653.162083][T10285] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 653.162102][T10285] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 653.164269][T10285] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.164285][T10285] usb 5-1: Product: syz [ 653.164292][T10285] usb 5-1: Manufacturer: syz [ 653.164300][T10285] usb 5-1: SerialNumber: syz [ 653.165997][T10285] usb 5-1: config 0 descriptor?? [ 653.166466][T14795] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 653.166526][T14795] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 653.277573][ T5707] DVB: Unable to find symbol cx22700_attach() [ 653.323696][ T5707] DVB: Unable to find symbol tda10046_attach() [ 653.323723][ T5707] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 653.344172][ T9925] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 653.346386][ T9925] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 653.346410][ T9925] usb 3-1: config 0 has no interfaces? [ 653.373229][ T9925] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 653.373254][ T9925] usb 3-1: Manufacturer: syz [ 653.382189][T14795] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 653.382328][T14795] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 653.433758][ T9925] usb 3-1: config 0 descriptor?? [ 653.494921][ T5707] usb 6-1: USB disconnect, device number 27 [ 654.326742][ T9925] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 654.478550][ T9925] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 654.479721][ T9925] usb 6-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 654.479750][ T9925] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 654.479774][ T9925] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 654.479811][ T9925] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.483686][T14812] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 654.553240][ T5723] usb 1-1: USB disconnect, device number 3 [ 655.017462][ T2247] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 655.176671][ T2247] usb 4-1: Using ep0 maxpacket: 16 [ 655.177750][ T2247] usb 4-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 655.179416][ T2247] usb 4-1: config index 0 descriptor too short (expected 55442, got 36) [ 655.179514][ T2247] usb 4-1: config 6 has too many interfaces: 246, using maximum allowed: 32 [ 655.179533][ T2247] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 655.179551][ T2247] usb 4-1: config 6 has 0 interfaces, different from the descriptor's value: 246 [ 655.179585][ T2247] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.781907][T10285] Error reading MAC address [ 655.803768][T10285] usb 5-1: USB disconnect, device number 122 [ 655.817697][ T5723] usb 3-1: USB disconnect, device number 124 [ 655.959788][ T9928] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 656.156828][ T9928] usb 1-1: Using ep0 maxpacket: 16 [ 656.160233][ T9928] usb 1-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 656.187190][ T9928] usb 1-1: config index 0 descriptor too short (expected 55442, got 36) [ 656.187208][ T9928] usb 1-1: config 6 has too many interfaces: 246, using maximum allowed: 32 [ 656.187219][ T9928] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 656.187228][ T9928] usb 1-1: config 6 has 0 interfaces, different from the descriptor's value: 246 [ 656.187265][ T9928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.218054][T14812] netlink: 'syz.5.2770': attribute type 40 has an invalid length. [ 656.401728][T14842] netlink: 'syz.4.2778': attribute type 1 has an invalid length. [ 656.427258][ T9925] aiptek 6-1:17.0: Aiptek using 400 ms programming speed [ 656.438804][ T9925] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:17.0/input/input118 [ 656.608739][ T9925] usb 6-1: USB disconnect, device number 28 [ 656.608790][ C0] aiptek 6-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 656.758322][T14843] libceph: resolve '0..' (ret=-3): failed [ 657.516890][ T5723] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 657.666713][ T5723] usb 6-1: Using ep0 maxpacket: 32 [ 657.670445][ T5723] usb 6-1: unable to get BOS descriptor or descriptor too short [ 657.670478][ T5723] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 657.671440][ T5723] usb 6-1: config 14 has an invalid interface number: 228 but max is 0 [ 657.671455][ T5723] usb 6-1: config 14 has no interface number 0 [ 657.671477][ T5723] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 657.671491][ T5723] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 657.671504][ T5723] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 657.671516][ T5723] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 657.671549][ T5723] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 657.671562][ T5723] usb 6-1: config 14 interface 228 has no altsetting 0 [ 657.675759][ T5723] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.675774][ T5723] usb 6-1: Product: syz [ 657.675782][ T5723] usb 6-1: Manufacturer: syz [ 657.675789][ T5723] usb 6-1: SerialNumber: syz [ 657.863312][ T2247] usb 4-1: string descriptor 0 read error: -71 [ 657.878212][ T2247] usb 4-1: USB disconnect, device number 3 [ 658.143055][ T5723] legousbtower 6-1:14.228: interrupt endpoints not found [ 658.270563][T14866] gtp7: entered promiscuous mode [ 658.270579][T14866] gtp7: entered allmulticast mode [ 658.295333][T14868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2785'. [ 658.587272][ T5684] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 658.690860][ T9928] usb 1-1: string descriptor 0 read error: -71 [ 658.694723][ T9928] usb 1-1: USB disconnect, device number 4 [ 658.737957][ T5684] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 658.742060][ T5684] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 658.742092][ T5684] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 658.743966][ T5684] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.743990][ T5684] usb 3-1: Product: syz [ 658.744002][ T5684] usb 3-1: Manufacturer: syz [ 658.744012][ T5684] usb 3-1: SerialNumber: syz [ 658.757717][ T5684] usb 3-1: config 0 descriptor?? [ 658.763476][T14866] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 658.763605][T14866] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 658.870744][T14881] syzkaller0: entered promiscuous mode [ 658.870812][T14881] syzkaller0: entered allmulticast mode [ 658.968376][T14866] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 658.968508][T14866] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 659.126725][ T9928] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 659.276817][ T9928] usb 1-1: Using ep0 maxpacket: 16 [ 659.277431][ T9928] usb 1-1: New USB device found, idVendor=2304, idProduct=023b, bcdDevice=7b.5c [ 659.277455][ T9928] usb 1-1: too many configurations: 97, using maximum allowed: 8 [ 659.419178][ T2247] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 659.566662][ T2247] usb 5-1: Using ep0 maxpacket: 16 [ 659.569413][ T2247] usb 5-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 659.572175][ T31] kauditd_printk_skb: 21 callbacks suppressed [ 659.572192][ T31] audit: type=1326 audit(1790212190.286:4930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14897 comm="syz.3.2795" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f130ec code=0x7ffc0000 [ 659.573150][ T31] audit: type=1326 audit(1790212190.286:4931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14897 comm="syz.3.2795" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f130ec code=0x7ffc0000 [ 659.573571][ T31] audit: type=1326 audit(1790212190.286:4932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14897 comm="syz.3.2795" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f130ec code=0x7ffc0000 [ 659.574385][ T31] audit: type=1326 audit(1790212190.286:4933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14897 comm="syz.3.2795" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f130ec code=0x7ffc0000 [ 659.574788][ T31] audit: type=1326 audit(1790212190.286:4934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14897 comm="syz.3.2795" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f130ec code=0x7ffc0000 [ 659.575494][ T31] audit: type=1326 audit(1790212190.286:4935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14897 comm="syz.3.2795" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f130ec code=0x7ffc0000 [ 659.575521][ T31] audit: type=1326 audit(1790212190.286:4936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14897 comm="syz.3.2795" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f130ec code=0x7ffc0000 [ 659.575916][ T2247] usb 5-1: config index 0 descriptor too short (expected 55442, got 36) [ 659.575938][ T2247] usb 5-1: config 6 has too many interfaces: 246, using maximum allowed: 32 [ 659.575956][ T2247] usb 5-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 659.575979][ T31] audit: type=1326 audit(1790212190.286:4937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14897 comm="syz.3.2795" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f130ec code=0x7ffc0000 [ 659.576003][ T2247] usb 5-1: config 6 has 0 interfaces, different from the descriptor's value: 246 [ 659.576039][ T2247] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.591633][ T31] audit: type=1326 audit(1790212190.286:4938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14897 comm="syz.3.2795" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7f130ec code=0x7ffc0000 [ 659.591684][ T31] audit: type=1326 audit(1790212190.286:4939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14897 comm="syz.3.2795" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f130ec code=0x7ffc0000 [ 659.858106][ T9928] usb 1-1: string descriptor 0 read error: -71 [ 659.858274][ T9928] usb 1-1: New USB device strings: Mfr=249, Product=204, SerialNumber=224 [ 659.911348][ T9928] usb 1-1: rejected 8 configurations due to insufficient available bus power [ 659.911365][ T9928] usb 1-1: no configuration chosen from 8 choices [ 659.924683][ T9928] usb 1-1: USB disconnect, device number 5 [ 660.426396][T14909] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2798'. [ 660.483601][ T9928] usb 6-1: USB disconnect, device number 29 [ 660.946883][ T9928] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 661.097793][ T9928] usb 6-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 661.099157][ T9928] usb 6-1: config 2 has an invalid interface number: 255 but max is 0 [ 661.099191][ T9928] usb 6-1: config 2 has no interface number 0 [ 661.099216][ T9928] usb 6-1: too many endpoints for config 2 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 661.099239][ T9928] usb 6-1: config 2 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 661.099253][ T9928] usb 6-1: config 2 interface 255 has no altsetting 0 [ 661.099271][ T9928] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.110489][ T9928] ums-realtek 6-1:2.255: USB Mass Storage device detected [ 661.252241][ T5684] Error reading MAC address [ 661.261925][ T5684] usb 3-1: USB disconnect, device number 125 [ 661.323693][ T9928] usb 6-1: USB disconnect, device number 30 [ 662.088013][ T2247] usb 5-1: string descriptor 0 read error: -71 [ 662.095802][ T2247] usb 5-1: USB disconnect, device number 123 [ 662.117965][ T9928] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 662.236738][T14906] Bluetooth: hci5: command 0x0406 tx timeout [ 662.269391][ T9928] usb 6-1: New USB device found, idVendor=14e1, idProduct=6000, bcdDevice= 0.00 [ 662.270625][ T9928] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 662.270664][ T9928] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 662.270688][ T9928] usb 6-1: config 0 interface 0 has no altsetting 0 [ 662.270718][ T9928] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.300050][ T9928] usb 6-1: config 0 descriptor?? [ 662.357222][T14945] netlink: 'syz.2.2810': attribute type 41 has an invalid length. [ 662.357293][T14945] netlink: 'syz.2.2810': attribute type 17 has an invalid length. [ 662.452849][T14951] FAULT_INJECTION: forcing a failure. [ 662.452849][T14951] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 662.452882][T14951] CPU: 0 UID: 0 PID: 14951 Comm: syz.3.2813 Tainted: G L syzkaller #0 PREEMPT(full) [ 662.452907][T14951] Tainted: [L]=SOFTLOCKUP [ 662.452914][T14951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 662.452927][T14951] Call Trace: [ 662.452936][T14951] [ 662.452944][T14951] dump_stack_lvl+0xe8/0x150 [ 662.452979][T14951] should_fail_ex+0x410/0x560 [ 662.453006][T14951] _copy_to_user+0x31/0xb0 [ 662.453033][T14951] simple_read_from_buffer+0xe1/0x170 [ 662.453066][T14951] proc_fail_nth_read+0x1bb/0x230 [ 662.453084][T14951] ? common_file_perm+0x20e/0x2b0 [ 662.453118][T14951] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 662.453151][T14951] ? rw_verify_area+0x24a/0x4c0 [ 662.453180][T14951] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 662.453208][T14951] vfs_read+0x213/0xa80 [ 662.453240][T14951] ? __pfx___mutex_lock+0x10/0x10 [ 662.453266][T14951] ? __pfx_vfs_read+0x10/0x10 [ 662.453295][T14951] ? __fget_files+0x2a/0x420 [ 662.453325][T14951] ? __fget_files+0x3a2/0x420 [ 662.453348][T14951] ? __fget_files+0x2a/0x420 [ 662.453383][T14951] ksys_read+0x150/0x270 [ 662.453412][T14951] ? __pfx_ksys_read+0x10/0x10 [ 662.453444][T14951] ? asm_int80_emulation+0x1a/0x20 [ 662.453469][T14951] do_int80_emulation+0x198/0x500 [ 662.453493][T14951] ? trace_irq_disable+0x3b/0x140 [ 662.453512][T14951] ? asm_int80_emulation+0x1a/0x20 [ 662.453529][T14951] ? clear_bhb_loop+0x70/0xc0 [ 662.453548][T14951] ? clear_bhb_loop+0x70/0xc0 [ 662.453571][T14951] asm_int80_emulation+0x1a/0x20 [ 662.453589][T14951] RIP: 0023:0xf71175ab [ 662.453607][T14951] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 662.453622][T14951] RSP: 002b:00000000f53d64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 662.453642][T14951] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53d65d0 [ 662.453655][T14951] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 662.453666][T14951] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 662.453678][T14951] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 662.453689][T14951] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 662.453717][T14951] [ 662.490051][T14952] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2812'. [ 662.589351][T10285] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 662.604295][T14952] syz_tun (unregistering): left allmulticast mode [ 662.643146][T14954] gtp17: entered promiscuous mode [ 662.643169][T14954] gtp17: entered allmulticast mode [ 662.770980][T14936] binder_alloc: 14935: pid 14935 spamming oneway? 1 buffers allocated for a total size of 4096 [ 662.771248][T14936] binder_alloc: 14935: pid 14935 spamming oneway? 2 buffers allocated for a total size of 5120 [ 662.775179][ T9928] usbhid 6-1:0.0: can't add hid device: -71 [ 662.775279][ T9928] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 662.814035][ T9928] usb 6-1: USB disconnect, device number 31 [ 662.818680][T10285] usb 5-1: Using ep0 maxpacket: 32 [ 662.822332][T10285] usb 5-1: unable to get BOS descriptor or descriptor too short [ 662.822393][T10285] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 662.823368][T10285] usb 5-1: config 14 has an invalid interface number: 228 but max is 0 [ 662.823389][T10285] usb 5-1: config 14 has no interface number 0 [ 662.823429][T10285] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 662.823453][T10285] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 662.823475][T10285] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 662.823498][T10285] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 662.823529][T10285] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 662.823551][T10285] usb 5-1: config 14 interface 228 has no altsetting 0 [ 662.826985][T10285] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.827007][T10285] usb 5-1: Product: syz [ 662.827020][T10285] usb 5-1: Manufacturer: syz [ 662.827033][T10285] usb 5-1: SerialNumber: syz [ 662.845331][ T2247] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 662.898239][ T5723] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 662.987675][ T2247] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 662.988736][ T2247] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.991093][ T2247] usb 3-1: config 0 descriptor?? [ 663.047574][ T5723] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 663.048734][ T5723] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 663.048764][ T5723] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 663.051167][ T5723] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.051192][ T5723] usb 4-1: Product: syz [ 663.051205][ T5723] usb 4-1: Manufacturer: syz [ 663.051249][ T5723] usb 4-1: SerialNumber: syz [ 663.054216][ T5723] usb 4-1: config 0 descriptor?? [ 663.055067][T14954] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 663.055207][T14954] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 663.257407][T14954] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 663.257533][T14954] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 663.338290][T10285] legousbtower 5-1:14.228: interrupt endpoints not found [ 663.391518][T14959] FAULT_INJECTION: forcing a failure. [ 663.391518][T14959] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 663.391552][T14959] CPU: 0 UID: 0 PID: 14959 Comm: syz.5.2815 Tainted: G L syzkaller #0 PREEMPT(full) [ 663.391579][T14959] Tainted: [L]=SOFTLOCKUP [ 663.391586][T14959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 663.391598][T14959] Call Trace: [ 663.391606][T14959] [ 663.391615][T14959] dump_stack_lvl+0xe8/0x150 [ 663.391646][T14959] should_fail_ex+0x410/0x560 [ 663.391673][T14959] _copy_from_user+0x2d/0xb0 [ 663.391698][T14959] get_compat_msghdr+0xb3/0x4c0 [ 663.391730][T14959] ? __pfx_get_compat_msghdr+0x10/0x10 [ 663.391762][T14959] ? kfree+0x4d/0x650 [ 663.391795][T14959] ___sys_recvmsg+0x1db/0x5a0 [ 663.391826][T14959] ? __pfx____sys_recvmsg+0x10/0x10 [ 663.391858][T14959] ? lock_acquire+0x115/0x350 [ 663.391905][T14959] do_recvmmsg+0x38b/0x7f0 [ 663.391946][T14959] ? __pfx_do_recvmmsg+0x10/0x10 [ 663.391985][T14959] ? __mutex_unlock_slowpath+0x731/0x900 [ 663.392022][T14959] __sys_recvmmsg+0x1a5/0x290 [ 663.392051][T14959] ? __pfx___sys_recvmmsg+0x10/0x10 [ 663.392077][T14959] ? ksys_write+0x242/0x270 [ 663.392112][T14959] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 663.392136][T14959] __do_fast_syscall_32+0x27a/0x6a0 [ 663.392161][T14959] ? do_fast_syscall_32+0x33/0x70 [ 663.392185][T14959] ? asm_int80_emulation+0x1a/0x20 [ 663.392202][T14959] ? do_int80_emulation+0x299/0x500 [ 663.392225][T14959] ? trace_irq_disable+0x3b/0x140 [ 663.392248][T14959] do_fast_syscall_32+0x33/0x70 [ 663.392273][T14959] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 663.392295][T14959] RIP: 0023:0xf7f740ec [ 663.392312][T14959] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 663.392326][T14959] RSP: 002b:00000000f541550c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 663.392346][T14959] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 663.392360][T14959] RDX: 000000000291962b RSI: 000000002e4b39ff RDI: 0000000000000000 [ 663.392372][T14959] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 663.392382][T14959] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 663.392394][T14959] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 663.392425][T14959] [ 663.408635][T14949] input: syz0 as /devices/virtual/input/input119 [ 663.530494][ T2247] ath6kl: Failed to read usb control message: -71 [ 663.530549][ T2247] ath6kl: Unable to read the bmi data from the device: -71 [ 663.530562][ T2247] ath6kl: Unable to recv target info: -71 [ 663.597192][ T2247] ath6kl: Failed to init ath6kl core: -71 [ 663.639315][ T2247] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 663.708427][ T2247] usb 3-1: USB disconnect, device number 126 [ 664.060809][T14973] FAULT_INJECTION: forcing a failure. [ 664.060809][T14973] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 664.060844][T14973] CPU: 1 UID: 0 PID: 14973 Comm: syz.2.2820 Tainted: G L syzkaller #0 PREEMPT(full) [ 664.060869][T14973] Tainted: [L]=SOFTLOCKUP [ 664.060876][T14973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 664.060885][T14973] Call Trace: [ 664.060890][T14973] [ 664.060894][T14973] dump_stack_lvl+0xe8/0x150 [ 664.060923][T14973] should_fail_ex+0x410/0x560 [ 664.060950][T14973] _copy_from_iter+0x1d3/0x1660 [ 664.060972][T14973] ? __alloc_skb+0x27a/0x7a0 [ 664.060996][T14973] ? __alloc_skb+0x27a/0x7a0 [ 664.061011][T14973] ? __alloc_skb+0x27a/0x7a0 [ 664.061023][T14973] ? __pfx__copy_from_iter+0x10/0x10 [ 664.061033][T14973] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 664.061049][T14973] ? __alloc_skb+0x27a/0x7a0 [ 664.061062][T14973] ? __alloc_skb+0x27a/0x7a0 [ 664.061089][T14973] ? netlink_sendmsg+0x650/0xb40 [ 664.061107][T14973] ? skb_put+0x112/0x210 [ 664.061133][T14973] netlink_sendmsg+0x6c0/0xb40 [ 664.061156][T14973] ? __pfx_netlink_sendmsg+0x10/0x10 [ 664.061170][T14973] ? apparmor_socket_sendmsg+0x98/0x360 [ 664.061183][T14973] ? __pfx_netlink_sendmsg+0x10/0x10 [ 664.061192][T14973] sock_sendmsg_nosec+0x13a/0x180 [ 664.061205][T14973] ____sys_sendmsg+0x54e/0x850 [ 664.061231][T14973] ? __pfx_____sys_sendmsg+0x10/0x10 [ 664.061272][T14973] ___sys_sendmsg+0x2a5/0x360 [ 664.061295][T14973] ? __lock_acquire+0x747/0x2de0 [ 664.061312][T14973] ? __pfx____sys_sendmsg+0x10/0x10 [ 664.061325][T14973] ? get_pid_task+0x20/0x1f0 [ 664.061335][T14973] ? get_pid_task+0x20/0x1f0 [ 664.061343][T14973] ? get_pid_task+0x20/0x1f0 [ 664.061372][T14973] ? __fget_files+0x2a/0x420 [ 664.061395][T14973] ? __fget_files+0x3a2/0x420 [ 664.061428][T14973] __sys_sendmsg+0x177/0x240 [ 664.061463][T14973] ? __pfx___sys_sendmsg+0x10/0x10 [ 664.061503][T14973] __do_fast_syscall_32+0x27a/0x6a0 [ 664.061518][T14973] ? do_fast_syscall_32+0x33/0x70 [ 664.061535][T14973] ? asm_int80_emulation+0x1a/0x20 [ 664.061553][T14973] ? do_int80_emulation+0x299/0x500 [ 664.061576][T14973] ? trace_irq_disable+0x3b/0x140 [ 664.061600][T14973] do_fast_syscall_32+0x33/0x70 [ 664.061622][T14973] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 664.061634][T14973] RIP: 0023:0xf705f0ec [ 664.061645][T14973] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 664.061654][T14973] RSP: 002b:00000000f544d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 664.061666][T14973] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180 [ 664.061673][T14973] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 664.061681][T14973] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 664.061692][T14973] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 664.061703][T14973] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 664.061735][T14973] [ 664.406720][ T2247] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 664.550389][T14979] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 664.558538][ T2247] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 664.560085][ T2247] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.567265][ T2247] usb 3-1: config 0 descriptor?? [ 664.836185][ T2247] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 664.877816][T14987] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2824'. [ 665.065704][ T2247] [drm:udl_init] *ERROR* Selecting channel failed [ 665.139738][ T2247] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 1 [ 665.139764][ T2247] [drm] Initialized udl on minor 1 [ 665.147551][ T2247] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 665.169586][ T2247] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 665.179395][ T2247] usb 3-1: USB disconnect, device number 127 [ 665.226672][ T5707] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 665.377765][ T5707] usb 1-1: New USB device found, idVendor=14e1, idProduct=6000, bcdDevice= 0.00 [ 665.380898][ T5707] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 665.380927][ T5707] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 665.380941][ T5707] usb 1-1: config 0 interface 0 has no altsetting 0 [ 665.380967][ T5707] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.386164][ T5707] usb 1-1: config 0 descriptor?? [ 665.506082][T14994] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 665.506177][T14993] IPVS: stopping backup sync thread 14994 ... [ 665.594728][ T5723] Error reading MAC address [ 665.624877][ T5723] usb 4-1: USB disconnect, device number 4 [ 665.660831][ T5631] udevd[5631]: setting mode of /dev/bus/usb/004/004 to 020664 failed: No such file or directory [ 665.660952][ T5631] udevd[5631]: setting owner of /dev/bus/usb/004/004 to uid=0, gid=0 failed: No such file or directory [ 665.694208][ T9955] usb 5-1: USB disconnect, device number 124 [ 665.906774][T14989] binder_alloc: 14988: pid 14988 spamming oneway? 1 buffers allocated for a total size of 4096 [ 665.910492][T14989] binder_alloc: 14988: pid 14988 spamming oneway? 2 buffers allocated for a total size of 5120 [ 665.943623][ T5707] usbhid 1-1:0.0: can't add hid device: -71 [ 665.943718][ T5707] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 665.966842][ T5707] usb 1-1: USB disconnect, device number 6 [ 666.058898][T14995] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 666.981666][T15035] gtp8: entered promiscuous mode [ 666.981690][T15035] gtp8: entered allmulticast mode [ 667.010059][T15037] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 667.010428][T15036] IPVS: stopping backup sync thread 15037 ... [ 667.149236][T15041] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2841'. [ 667.150363][T15041] FAULT_INJECTION: forcing a failure. [ 667.150363][T15041] name failslab, interval 1, probability 0, space 0, times 0 [ 667.150384][T15041] CPU: 1 UID: 0 PID: 15041 Comm: syz.3.2841 Tainted: G L syzkaller #0 PREEMPT(full) [ 667.150399][T15041] Tainted: [L]=SOFTLOCKUP [ 667.150403][T15041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 667.150409][T15041] Call Trace: [ 667.150414][T15041] [ 667.150419][T15041] dump_stack_lvl+0xe8/0x150 [ 667.150438][T15041] should_fail_ex+0x410/0x560 [ 667.150457][T15041] should_failslab+0xa8/0x100 [ 667.150470][T15041] ? xfrm_state_alloc+0x24/0x2f0 [ 667.150485][T15041] kmem_cache_alloc_noprof+0xa1/0x600 [ 667.150502][T15041] ? xfrm_state_alloc+0x24/0x2f0 [ 667.150518][T15041] xfrm_state_alloc+0x24/0x2f0 [ 667.150533][T15041] xfrm_state_find+0x3b65/0x5f90 [ 667.150556][T15041] ? xfrm_state_find+0x1f2/0x5f90 [ 667.150573][T15041] ? __pfx_xfrm_state_find+0x10/0x10 [ 667.150596][T15041] ? __lock_acquire+0x747/0x2de0 [ 667.150613][T15041] xfrm_resolve_and_create_bundle+0x80b/0x33c0 [ 667.150631][T15041] ? do_raw_spin_lock+0x12b/0x2f0 [ 667.150652][T15041] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 667.150664][T15041] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 667.150676][T15041] ? ref_tracker_alloc+0x2d7/0x4b0 [ 667.150690][T15041] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 667.150714][T15041] ? xfrm_sk_policy_lookup+0x6db/0x720 [ 667.150732][T15041] ? xfrm_expand_policies+0x489/0x740 [ 667.150746][T15041] xfrm_lookup_with_ifid+0x2a6/0x1db0 [ 667.150762][T15041] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 667.150774][T15041] ? lock_acquire+0x115/0x350 [ 667.150789][T15041] xfrm_lookup_route+0x3c/0x1c0 [ 667.150802][T15041] udp_sendmsg+0x144a/0x2140 [ 667.150823][T15041] ? __pfx_udp_sendmsg+0x10/0x10 [ 667.150844][T15041] ? aa_file_perm+0x4ed/0x15f0 [ 667.150858][T15041] ? __lock_acquire+0x747/0x2de0 [ 667.150870][T15041] ? __asan_memset+0x22/0x50 [ 667.150885][T15041] ? current_check_autobind_udp_socket+0x18c/0x3e0 [ 667.150902][T15041] ? aa_sock_msg_perm+0xfc/0x210 [ 667.150913][T15041] ? sock_rps_record_flow+0x19/0x350 [ 667.150925][T15041] ? inet_sendmsg+0x23e/0x320 [ 667.150934][T15041] ? apparmor_socket_sendmsg+0x98/0x360 [ 667.150946][T15041] ? __pfx_inet_sendmsg+0x10/0x10 [ 667.150956][T15041] sock_sendmsg_nosec+0x10e/0x180 [ 667.150969][T15041] sock_write_iter+0x2de/0x3e0 [ 667.150980][T15041] ? __pfx_sock_write_iter+0x10/0x10 [ 667.150994][T15041] ? bpf_lsm_file_permission+0x9/0x20 [ 667.151007][T15041] ? security_file_permission+0x75/0x260 [ 667.151022][T15041] vfs_write+0x612/0xba0 [ 667.151041][T15041] ? __pfx_vfs_write+0x10/0x10 [ 667.151060][T15041] ? __fget_files+0x2a/0x420 [ 667.151081][T15041] ksys_write+0x150/0x270 [ 667.151103][T15041] ? __pfx_ksys_write+0x10/0x10 [ 667.151123][T15041] __do_fast_syscall_32+0x27a/0x6a0 [ 667.151137][T15041] ? do_fast_syscall_32+0x33/0x70 [ 667.151150][T15041] ? asm_int80_emulation+0x1a/0x20 [ 667.151160][T15041] ? do_int80_emulation+0x299/0x500 [ 667.151172][T15041] ? trace_irq_disable+0x3b/0x140 [ 667.151185][T15041] do_fast_syscall_32+0x33/0x70 [ 667.151198][T15041] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 667.151210][T15041] RIP: 0023:0xf7f130ec [ 667.151221][T15041] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 667.151229][T15041] RSP: 002b:00000000f53d650c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 667.151241][T15041] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000000000 [ 667.151248][T15041] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 667.151254][T15041] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 667.151260][T15041] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 667.151266][T15041] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 667.151281][T15041] [ 667.229968][ T5723] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 667.377411][ T5723] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 667.380442][ T5723] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 667.380472][ T5723] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 667.383764][ T5723] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.383788][ T5723] usb 5-1: Product: syz [ 667.383801][ T5723] usb 5-1: Manufacturer: syz [ 667.383814][ T5723] usb 5-1: SerialNumber: syz [ 667.392372][ T5723] usb 5-1: config 0 descriptor?? [ 667.393509][T15035] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 667.393651][T15035] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 667.512042][ T31] kauditd_printk_skb: 7 callbacks suppressed [ 667.512060][ T31] audit: type=1326 audit(1790212198.226:4947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15045 comm="syz.0.2843" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 667.512963][ T31] audit: type=1326 audit(1790212198.226:4948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15045 comm="syz.0.2843" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 667.524776][ T31] audit: type=1326 audit(1790212198.236:4949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15045 comm="syz.0.2843" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 667.525030][ T31] audit: type=1326 audit(1790212198.236:4950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15045 comm="syz.0.2843" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 667.525409][ T31] audit: type=1326 audit(1790212198.236:4951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15045 comm="syz.0.2843" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 667.525751][ T31] audit: type=1326 audit(1790212198.236:4952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15045 comm="syz.0.2843" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 667.526743][ T31] audit: type=1326 audit(1790212198.236:4953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15045 comm="syz.0.2843" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 667.526787][ T31] audit: type=1326 audit(1790212198.236:4954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15045 comm="syz.0.2843" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 667.527827][ T5707] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 667.529028][ T31] audit: type=1326 audit(1790212198.246:4955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15045 comm="syz.0.2843" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 667.529072][ T31] audit: type=1326 audit(1790212198.246:4956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15045 comm="syz.0.2843" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f0ec code=0x7ffc0000 [ 667.599763][T15035] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 667.600005][T15035] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 667.645217][T15048] FAULT_INJECTION: forcing a failure. [ 667.645217][T15048] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 667.645251][T15048] CPU: 0 UID: 0 PID: 15048 Comm: syz.0.2844 Tainted: G L syzkaller #0 PREEMPT(full) [ 667.645276][T15048] Tainted: [L]=SOFTLOCKUP [ 667.645283][T15048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 667.645295][T15048] Call Trace: [ 667.645303][T15048] [ 667.645311][T15048] dump_stack_lvl+0xe8/0x150 [ 667.645344][T15048] should_fail_ex+0x410/0x560 [ 667.645370][T15048] prepare_alloc_pages+0x223/0x600 [ 667.645397][T15048] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 667.645422][T15048] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 667.645447][T15048] ? __pfx_policy_nodemask+0x10/0x10 [ 667.645478][T15048] alloc_pages_mpol+0x21e/0x390 [ 667.645507][T15048] folio_alloc_mpol_noprof+0x39/0x160 [ 667.645533][T15048] swap_cache_alloc_folio+0x2c1/0x990 [ 667.645572][T15048] swap_cache_read_folio+0x44/0x120 [ 667.645601][T15048] swap_cluster_readahead+0x392/0x630 [ 667.645635][T15048] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 667.645661][T15048] ? is_bpf_text_address+0x292/0x2b0 [ 667.645704][T15048] swapin_readahead+0x1a3/0xc50 [ 667.645741][T15048] ? __pfx_swapin_readahead+0x10/0x10 [ 667.645772][T15048] ? swap_table_get+0x1e/0x260 [ 667.645796][T15048] ? swap_table_get+0x1e/0x260 [ 667.645817][T15048] ? swap_table_get+0x1e/0x260 [ 667.645842][T15048] ? swap_table_get+0x216/0x260 [ 667.645868][T15048] ? swap_cache_get_folio+0x2e7/0x2f0 [ 667.645898][T15048] do_swap_page+0x3fb/0x4c10 [ 667.645940][T15048] ? do_swap_page+0x126/0x4c10 [ 667.645964][T15048] ? __pfx_do_swap_page+0x10/0x10 [ 667.645984][T15048] ? __pte_offset_map+0x1ae/0x240 [ 667.646011][T15048] ? pte_offset_map_rw_nolock+0xea/0x160 [ 667.646038][T15048] handle_mm_fault+0x1398/0x3750 [ 667.646062][T15048] ? lockdep_hardirqs_on+0x7b/0x110 [ 667.646124][T15048] ? handle_mm_fault+0xf1/0x3750 [ 667.646159][T15048] ? __pfx_handle_mm_fault+0x10/0x10 [ 667.646184][T15048] ? follow_page_pte+0x748/0xf10 [ 667.646216][T15048] ? __pfx_follow_page_pte+0x10/0x10 [ 667.646249][T15048] __get_user_pages+0x1675/0x2750 [ 667.646303][T15048] faultin_page_range+0x26a/0x8f0 [ 667.646327][T15048] ? blk_start_plug+0x6e/0x1b0 [ 667.646351][T15048] madvise_do_behavior+0x2e4/0x540 [ 667.646379][T15048] ? __pfx_madvise_do_behavior+0x10/0x10 [ 667.646416][T15048] ? down_read+0x2be/0x330 [ 667.646448][T15048] do_madvise+0x327/0x3a0 [ 667.646471][T15048] ? __pfx_do_madvise+0x10/0x10 [ 667.646503][T15048] ? __fget_files+0x3a2/0x420 [ 667.646533][T15048] ? fput+0xa0/0xd0 [ 667.646568][T15048] ? ksys_write+0x242/0x270 [ 667.646601][T15048] __ia32_sys_madvise+0xa6/0xc0 [ 667.646624][T15048] __do_fast_syscall_32+0x27a/0x6a0 [ 667.646652][T15048] ? do_fast_syscall_32+0x33/0x70 [ 667.646675][T15048] ? asm_int80_emulation+0x1a/0x20 [ 667.646693][T15048] ? do_int80_emulation+0x299/0x500 [ 667.646721][T15048] do_fast_syscall_32+0x33/0x70 [ 667.646745][T15048] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 667.646766][T15048] RIP: 0023:0xf700f0ec [ 667.646783][T15048] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 667.646798][T15048] RSP: 002b:00000000f53fd50c EFLAGS: 00000206 ORIG_RAX: 00000000000000db [ 667.646817][T15048] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000600000 [ 667.646831][T15048] RDX: 0000000000000017 RSI: 0000000000000000 RDI: 0000000000000000 [ 667.646842][T15048] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 667.646858][T15048] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 667.646869][T15048] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 667.646896][T15048] [ 667.726477][ T5707] usb 6-1: Using ep0 maxpacket: 32 [ 667.827627][ T5707] usb 6-1: unable to get BOS descriptor or descriptor too short [ 667.827680][ T5707] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 667.885399][ T5707] usb 6-1: config 14 has an invalid interface number: 228 but max is 0 [ 667.885427][ T5707] usb 6-1: config 14 has no interface number 0 [ 667.885463][ T5707] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 667.885487][ T5707] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 667.885509][ T5707] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 667.885533][ T5707] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 667.885555][ T5707] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 667.885586][ T5707] usb 6-1: config 14 interface 228 has no altsetting 0 [ 667.985653][ T5707] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.985679][ T5707] usb 6-1: Product: syz [ 667.985692][ T5707] usb 6-1: Manufacturer: syz [ 667.985704][ T5707] usb 6-1: SerialNumber: syz [ 668.276897][ T2247] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 668.427440][ T2247] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 668.427481][ T2247] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 668.428743][ T2247] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 668.428787][ T2247] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 668.428811][ T2247] usb 1-1: config 0 interface 0 has no altsetting 0 [ 668.430171][ T2247] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 668.430213][ T2247] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 668.430235][ T2247] usb 1-1: config 0 interface 0 has no altsetting 0 [ 668.431552][ T2247] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 668.431595][ T2247] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 668.431617][ T2247] usb 1-1: config 0 interface 0 has no altsetting 0 [ 668.432920][ T2247] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 668.432992][ T2247] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 668.433014][ T2247] usb 1-1: config 0 interface 0 has no altsetting 0 [ 668.435550][ T2247] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 668.435615][ T2247] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 668.435639][ T2247] usb 1-1: config 0 interface 0 has no altsetting 0 [ 668.437878][ T2247] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 668.437921][ T2247] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 668.437976][ T2247] usb 1-1: config 0 interface 0 has no altsetting 0 [ 668.442110][ T2247] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 668.442181][ T2247] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 668.442206][ T2247] usb 1-1: config 0 interface 0 has no altsetting 0 [ 668.445689][ T2247] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 668.445738][ T2247] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 668.445787][ T2247] usb 1-1: config 0 interface 0 has no altsetting 0 [ 668.450420][ T2247] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 668.450447][ T2247] usb 1-1: Product: syz [ 668.450460][ T2247] usb 1-1: Manufacturer: syz [ 668.450473][ T2247] usb 1-1: SerialNumber: syz [ 668.459844][ T2247] usb 1-1: config 0 descriptor?? [ 668.484540][ T2247] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 668.634501][ T5707] legousbtower 6-1:14.228: interrupt endpoints not found [ 668.693765][ T2247] usb 1-1: USB disconnect, device number 7 [ 668.704200][ T2247] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 669.579216][T15075] IPVS: stopping backup sync thread 15076 ... [ 669.779016][T15085] netlink: 1004 bytes leftover after parsing attributes in process `syz.3.2856'. [ 669.914871][T15094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2860'. [ 669.967902][T15094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2860'. [ 669.998223][ T5723] Error reading MAC address [ 670.010282][ T5723] usb 5-1: USB disconnect, device number 125 [ 670.032508][T15094] fuse: Unknown parameter '0x0000000000000003' [ 670.080286][T15097] hsr0: entered promiscuous mode [ 670.080399][T15097] veth1_virt_wifi: entered promiscuous mode [ 670.080510][T15097] veth0_virt_wifi: entered promiscuous mode [ 670.080596][T15097] virt_wifi0: entered promiscuous mode [ 670.080859][T15097] macvtap0: entered promiscuous mode [ 670.080952][T15097] macsec0: entered promiscuous mode [ 670.081019][T15097] geneve0: entered promiscuous mode [ 670.081105][T15097] geneve1: entered promiscuous mode [ 670.081630][T15097] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 670.083651][T15097] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 670.083788][T15097] netdevsim netdevsim4 netdevsim2: entered promiscuous mode [ 670.083878][T15097] netdevsim netdevsim4 netdevsim3: entered promiscuous mode [ 670.083959][T15097] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 670.084051][T15097] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode [ 670.084269][T15097] mac80211_hwsim hwsim14 wlan2: entered promiscuous mode [ 670.084361][T15097] mac80211_hwsim hwsim18 wlan3: entered promiscuous mode [ 670.084455][T15097] mac80211_hwsim hwsim21 wlan4: entered promiscuous mode [ 670.084545][T15097] bond1: entered promiscuous mode [ 670.084945][T15097] mac80211_hwsim hwsim23 wlan5: entered promiscuous mode [ 670.085120][T15097] mac80211_hwsim hwsim24 wlan6: entered promiscuous mode [ 670.085307][T15097] mac80211_hwsim hwsim25 wlan7: entered promiscuous mode [ 670.085916][T15097] geneve2: entered promiscuous mode [ 670.151020][T15097] bond2: entered promiscuous mode [ 670.151179][T15097] syztnl0: entered promiscuous mode [ 670.157293][ T2247] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 670.163699][T15097] ipip0: entered promiscuous mode [ 670.177897][ T6551] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.177945][ T6551] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.177977][ T6551] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.178007][ T6551] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.318336][ T2247] usb 3-1: Using ep0 maxpacket: 32 [ 670.319049][ T2247] usb 3-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=a7.c0 [ 670.320382][ T2247] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 670.320422][ T2247] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 670.324299][T15099] FAULT_INJECTION: forcing a failure. [ 670.324299][T15099] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 670.324330][T15099] CPU: 1 UID: 0 PID: 15099 Comm: syz.3.2862 Tainted: G L syzkaller #0 PREEMPT(full) [ 670.324354][T15099] Tainted: [L]=SOFTLOCKUP [ 670.324361][T15099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 670.324372][T15099] Call Trace: [ 670.324380][T15099] [ 670.324389][T15099] dump_stack_lvl+0xe8/0x150 [ 670.324421][T15099] should_fail_ex+0x410/0x560 [ 670.324447][T15099] _copy_from_user+0x2d/0xb0 [ 670.324471][T15099] video_usercopy+0x359/0x1430 [ 670.324496][T15099] ? __pfx___video_do_ioctl+0x10/0x10 [ 670.324516][T15099] ? __pfx_video_usercopy+0x10/0x10 [ 670.324550][T15099] ? __fget_files+0x2a/0x420 [ 670.324580][T15099] v4l2_ioctl+0x18d/0x1e0 [ 670.324610][T15099] v4l2_compat_ioctl32+0x1c4/0x270 [ 670.324636][T15099] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 670.324660][T15099] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 670.324681][T15099] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 670.324715][T15099] ? __fget_files+0x3a2/0x420 [ 670.324746][T15099] ? fput+0xa0/0xd0 [ 670.324776][T15099] ? ksys_write+0x242/0x270 [ 670.324814][T15099] __do_fast_syscall_32+0x27a/0x6a0 [ 670.324839][T15099] ? do_fast_syscall_32+0x33/0x70 [ 670.324863][T15099] ? asm_int80_emulation+0x1a/0x20 [ 670.324880][T15099] ? do_int80_emulation+0x299/0x500 [ 670.324910][T15099] ? trace_irq_disable+0x3b/0x140 [ 670.324933][T15099] do_fast_syscall_32+0x33/0x70 [ 670.324957][T15099] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 670.324979][T15099] RIP: 0023:0xf7f130ec [ 670.324996][T15099] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 670.325012][T15099] RSP: 002b:00000000f53d650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 670.325032][T15099] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0405602 [ 670.325046][T15099] RDX: 0000000080000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 670.325057][T15099] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 670.325068][T15099] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 670.325079][T15099] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 670.325089][ T2247] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.325105][T15099] [ 670.325144][ T2247] usb 3-1: Product: syz [ 670.325157][ T2247] usb 3-1: Manufacturer: syz [ 670.325170][ T2247] usb 3-1: SerialNumber: syz [ 670.349201][ T2247] usb 3-1: config 0 descriptor?? [ 670.360895][ T2247] qmi_wwan 3-1:0.0: probe with driver qmi_wwan failed with error -22 [ 670.602769][T15107] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 670.605919][T15106] IPVS: stopping backup sync thread 15107 ... [ 670.833753][T15115] netlink: 'syz.0.2868': attribute type 12 has an invalid length. [ 670.833776][T15115] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2868'. [ 670.896501][T15120] netlink: 'syz.0.2869': attribute type 12 has an invalid length. [ 670.896519][T15120] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2869'. [ 670.937614][T10285] usb 6-1: USB disconnect, device number 32 [ 670.992764][T15123] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2870'. [ 671.034345][T15125] gtp1: entered promiscuous mode [ 671.034360][T15125] gtp1: entered allmulticast mode [ 671.176871][ T10] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 671.326706][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 671.328459][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 671.329459][ T10] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 32 [ 671.329487][ T10] usb 5-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 671.329503][ T10] usb 5-1: config 1 interface 0 has no altsetting 0 [ 671.331406][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.331429][ T10] usb 5-1: Product: syz [ 671.331442][ T10] usb 5-1: Manufacturer: syz [ 671.331456][ T10] usb 5-1: SerialNumber: syz [ 671.335686][T15121] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 671.411987][T10285] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 671.434068][T15127] netlink: 'syz.3.2872': attribute type 1 has an invalid length. [ 671.436255][T15127] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2872'. [ 671.540337][T15129] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2873'. [ 671.560164][T10285] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 671.561157][T10285] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 671.561184][T10285] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 671.599807][T10285] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.599835][T10285] usb 6-1: Product: syz [ 671.599849][T10285] usb 6-1: Manufacturer: syz [ 671.599863][T10285] usb 6-1: SerialNumber: syz [ 671.604432][T10285] usb 6-1: config 0 descriptor?? [ 671.605153][T15125] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 671.605293][T15125] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 671.810794][T15125] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 671.810929][T15125] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 672.445606][T15143] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 672.446188][T15142] IPVS: stopping backup sync thread 15143 ... [ 672.563850][ T31] kauditd_printk_skb: 104 callbacks suppressed [ 672.563868][ T31] audit: type=1326 audit(1790212203.276:5061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15144 comm="syz.3.2878" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f130ec code=0x7ffc0000 [ 672.564015][ T31] audit: type=1326 audit(1790212203.276:5062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15144 comm="syz.3.2878" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f130ec code=0x7ffc0000 [ 672.564560][ T31] audit: type=1326 audit(1790212203.276:5063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15144 comm="syz.3.2878" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f130ec code=0x7ffc0000 [ 672.597583][ T31] audit: type=1326 audit(1790212203.276:5064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15144 comm="syz.3.2878" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f130ec code=0x7ffc0000 [ 672.597637][ T31] audit: type=1326 audit(1790212203.276:5065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15144 comm="syz.3.2878" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f130ec code=0x7ffc0000 [ 672.597699][ T31] audit: type=1326 audit(1790212203.276:5066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15144 comm="syz.3.2878" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f130ec code=0x7ffc0000 [ 672.597738][ T31] audit: type=1326 audit(1790212203.276:5067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15144 comm="syz.3.2878" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f130ec code=0x7ffc0000 [ 672.597777][ T31] audit: type=1326 audit(1790212203.276:5068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15144 comm="syz.3.2878" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f130ec code=0x7ffc0000 [ 672.597838][ T31] audit: type=1326 audit(1790212203.276:5069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15144 comm="syz.3.2878" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f130ec code=0x7ffc0000 [ 672.597878][ T31] audit: type=1326 audit(1790212203.286:5070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15144 comm="syz.3.2878" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f130ec code=0x7ffc0000 [ 672.922914][ T9926] usb 3-1: USB disconnect, device number 2 [ 673.006856][ T9955] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 673.102624][T15161] gretap0: entered promiscuous mode [ 673.103035][T15161] tipc: Resetting bearer [ 673.119616][T15161] syz_tun: entered promiscuous mode [ 673.125472][T15161] ipvlan0: entered promiscuous mode [ 673.139980][T15161] bond0: entered promiscuous mode [ 673.161978][T15161] vlan2: entered promiscuous mode [ 673.167101][ T9955] usb 1-1: Using ep0 maxpacket: 32 [ 673.176409][ T9955] usb 1-1: unable to get BOS descriptor or descriptor too short [ 673.176460][ T9955] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 673.181239][ T9955] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 673.181264][ T9955] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 673.181282][ T9955] usb 1-1: config 14 has no interface number 0 [ 673.181296][ T9955] usb 1-1: config 14 has no interface number 1 [ 673.181364][ T9955] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 673.182610][ T9955] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 673.182635][ T9955] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 673.182658][ T9955] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 673.182681][ T9955] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 673.182705][ T9955] usb 1-1: config 14 interface 57 has no altsetting 0 [ 673.182742][ T9955] usb 1-1: config 14 interface 228 has no altsetting 0 [ 673.189447][ T9955] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.189496][ T9955] usb 1-1: Product: syz [ 673.189510][ T9955] usb 1-1: Manufacturer: syz [ 673.189523][ T9955] usb 1-1: SerialNumber: syz [ 673.242834][T15161] mac80211_hwsim hwsim6 pim6reg1: entered promiscuous mode [ 673.269558][T15161] gtp15: entered promiscuous mode [ 673.285441][T15161] syzkaller0: entered promiscuous mode [ 673.536638][T15169] FAULT_INJECTION: forcing a failure. [ 673.536638][T15169] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 673.536673][T15169] CPU: 0 UID: 0 PID: 15169 Comm: syz.2.2888 Tainted: G L syzkaller #0 PREEMPT(full) [ 673.536698][T15169] Tainted: [L]=SOFTLOCKUP [ 673.536705][T15169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 673.536716][T15169] Call Trace: [ 673.536724][T15169] [ 673.536735][T15169] dump_stack_lvl+0xe8/0x150 [ 673.536767][T15169] should_fail_ex+0x410/0x560 [ 673.536792][T15169] prepare_alloc_pages+0x223/0x600 [ 673.536817][T15169] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 673.536840][T15169] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 673.536864][T15169] ? __pfx_policy_nodemask+0x10/0x10 [ 673.536885][T15169] ? __asan_memcpy+0x40/0x70 [ 673.536912][T15169] ? nla_put+0xeb/0x150 [ 673.536938][T15169] alloc_pages_mpol+0x21e/0x390 [ 673.536965][T15169] folio_alloc_mpol_noprof+0x39/0x160 [ 673.536992][T15169] vma_alloc_folio_noprof+0xe1/0x1e0 [ 673.537019][T15169] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 673.537052][T15169] do_wp_page+0x117d/0x4b80 [ 673.537094][T15169] ? __pfx_do_wp_page+0x10/0x10 [ 673.537116][T15169] ? do_raw_spin_lock+0x12b/0x2f0 [ 673.537145][T15169] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 673.537179][T15169] handle_mm_fault+0x15d7/0x3750 [ 673.537213][T15169] ? handle_mm_fault+0xf1/0x3750 [ 673.537246][T15169] ? __pfx_handle_mm_fault+0x10/0x10 [ 673.537281][T15169] ? __lock_acquire+0x747/0x2de0 [ 673.537303][T15169] ? lock_mm_and_find_vma+0xa7/0x340 [ 673.537333][T15169] do_user_addr_fault+0x746/0x1340 [ 673.537368][T15169] exc_page_fault+0x6a/0xc0 [ 673.537391][T15169] asm_exc_page_fault+0x26/0x30 [ 673.537409][T15169] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 673.537438][T15169] Code: 67 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 0f 67 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 673.537453][T15169] RSP: 0018:ffffc90003b6f638 EFLAGS: 00050202 [ 673.537471][T15169] RAX: ffffffff84dca901 RBX: ffff88807f51c000 RCX: 0000000000000e5c [ 673.537484][T15169] RDX: 0000000000000000 RSI: ffff88807f51c000 RDI: 0000000080002940 [ 673.537497][T15169] RBP: ffffc90003b6f7b0 R08: ffff88807f51ce5b R09: 1ffff1100fea39cb [ 673.537511][T15169] R10: dffffc0000000000 R11: ffffed100fea39cc R12: dffffc0000000000 [ 673.537526][T15169] R13: 0000000000000000 R14: ffffc90003b6fdf0 R15: 0000000000000e5c [ 673.537546][T15169] ? _copy_to_iter+0x3b1/0x1810 [ 673.537573][T15169] _copy_to_iter+0x49d/0x1810 [ 673.537595][T15169] ? __pfx__copy_to_iter+0x10/0x10 [ 673.537607][T15169] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 673.537620][T15169] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 673.537636][T15169] ? __skb_try_recv_datagram+0x3de/0x4e0 [ 673.537668][T15169] __skb_datagram_iter+0xf8/0x980 [ 673.537694][T15169] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 673.537716][T15169] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 673.537741][T15169] skb_copy_datagram_iter+0xb5/0x240 [ 673.537758][T15169] netlink_recvmsg+0x2b9/0xa50 [ 673.537769][T15169] ? trace_irq_disable+0x3b/0x140 [ 673.537786][T15169] ? __pfx_netlink_recvmsg+0x10/0x10 [ 673.537812][T15169] ? __pfx_bpf_lsm_socket_recvmsg+0x10/0x10 [ 673.537838][T15169] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 673.537859][T15169] ? security_socket_recvmsg+0x7e/0x2c0 [ 673.537883][T15169] ? __pfx_netlink_recvmsg+0x10/0x10 [ 673.537900][T15169] sock_recvmsg+0x196/0x1e0 [ 673.537913][T15169] ____sys_recvmsg+0x1e6/0x4a0 [ 673.537933][T15169] ? __pfx_____sys_recvmsg+0x10/0x10 [ 673.537970][T15169] ? __lock_acquire+0x747/0x2de0 [ 673.537997][T15169] ___sys_recvmsg+0x213/0x5a0 [ 673.538022][T15169] ? get_pid_task+0x20/0x1f0 [ 673.538036][T15169] ? get_pid_task+0x20/0x1f0 [ 673.538047][T15169] ? __pfx____sys_recvmsg+0x10/0x10 [ 673.538064][T15169] ? lock_acquire+0x115/0x350 [ 673.538082][T15169] ? __fget_files+0x3a2/0x420 [ 673.538116][T15169] __sys_recvmsg+0x174/0x240 [ 673.538145][T15169] ? __pfx___sys_recvmsg+0x10/0x10 [ 673.538187][T15169] __do_fast_syscall_32+0x27a/0x6a0 [ 673.538201][T15169] ? do_fast_syscall_32+0x33/0x70 [ 673.538214][T15169] ? asm_int80_emulation+0x1a/0x20 [ 673.538224][T15169] ? do_int80_emulation+0x299/0x500 [ 673.538236][T15169] ? trace_irq_disable+0x3b/0x140 [ 673.538257][T15169] do_fast_syscall_32+0x33/0x70 [ 673.538282][T15169] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 673.538304][T15169] RIP: 0023:0xf705f0ec [ 673.538320][T15169] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 673.538333][T15169] RSP: 002b:00000000f544d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000174 [ 673.538347][T15169] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 673.538354][T15169] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 673.538360][T15169] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 673.538365][T15169] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 673.538371][T15169] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 673.538386][T15169] [ 673.695684][T15174] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 673.696020][T15173] IPVS: stopping backup sync thread 15174 ... [ 673.707399][ T5706] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 673.798701][ T9955] legousbtower 1-1:14.57: interrupt endpoints not found [ 673.857620][ T5706] usb 4-1: Using ep0 maxpacket: 8 [ 673.859090][ T5706] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 673.867575][ T5706] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.867624][ T5706] usb 4-1: Product: syz [ 673.867638][ T5706] usb 4-1: Manufacturer: syz [ 673.867651][ T5706] usb 4-1: SerialNumber: syz [ 673.888274][ T5706] usb 4-1: config 0 descriptor?? [ 673.909301][ T5706] gspca_main: sq930x-2.14.0 probing 2770:930c [ 673.955803][ T10] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 673.983371][ T10] usb 5-1: USB disconnect, device number 126 [ 674.113788][T15179] ±ÿ: renamed from lo [ 674.157108][T10285] Error reading MAC address [ 674.164513][ T9955] legousbtower 1-1:14.228: interrupt endpoints not found [ 674.165174][T10285] usb 6-1: USB disconnect, device number 33 [ 674.266042][T15182] FAULT_INJECTION: forcing a failure. [ 674.266042][T15182] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 674.266075][T15182] CPU: 1 UID: 0 PID: 15182 Comm: syz.5.2892 Tainted: G L syzkaller #0 PREEMPT(full) [ 674.266101][T15182] Tainted: [L]=SOFTLOCKUP [ 674.266108][T15182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 674.266120][T15182] Call Trace: [ 674.266127][T15182] [ 674.266136][T15182] dump_stack_lvl+0xe8/0x150 [ 674.266167][T15182] should_fail_ex+0x410/0x560 [ 674.266193][T15182] _copy_from_iter+0x1d3/0x1660 [ 674.266220][T15182] ? __alloc_skb+0x27a/0x7a0 [ 674.266245][T15182] ? __alloc_skb+0x27a/0x7a0 [ 674.266269][T15182] ? __alloc_skb+0x27a/0x7a0 [ 674.266291][T15182] ? __pfx__copy_from_iter+0x10/0x10 [ 674.266311][T15182] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 674.266337][T15182] ? __alloc_skb+0x27a/0x7a0 [ 674.266357][T15182] ? __alloc_skb+0x27a/0x7a0 [ 674.266384][T15182] ? netlink_sendmsg+0x650/0xb40 [ 674.266400][T15182] ? skb_put+0x112/0x210 [ 674.266426][T15182] netlink_sendmsg+0x6c0/0xb40 [ 674.266453][T15182] ? __pfx_netlink_sendmsg+0x10/0x10 [ 674.266479][T15182] ? apparmor_socket_sendmsg+0x98/0x360 [ 674.266506][T15182] ? __pfx_netlink_sendmsg+0x10/0x10 [ 674.266524][T15182] sock_sendmsg_nosec+0x13a/0x180 [ 674.266547][T15182] ____sys_sendmsg+0x54e/0x850 [ 674.266573][T15182] ? __pfx_____sys_sendmsg+0x10/0x10 [ 674.266608][T15182] ___sys_sendmsg+0x2a5/0x360 [ 674.266630][T15182] ? __lock_acquire+0x747/0x2de0 [ 674.266652][T15182] ? __pfx____sys_sendmsg+0x10/0x10 [ 674.266675][T15182] ? get_pid_task+0x20/0x1f0 [ 674.266693][T15182] ? get_pid_task+0x20/0x1f0 [ 674.266709][T15182] ? get_pid_task+0x20/0x1f0 [ 674.266755][T15182] ? __fget_files+0x2a/0x420 [ 674.266779][T15182] ? __fget_files+0x3a2/0x420 [ 674.266813][T15182] __sys_sendmsg+0x177/0x240 [ 674.266839][T15182] ? __pfx___sys_sendmsg+0x10/0x10 [ 674.266882][T15182] __do_fast_syscall_32+0x27a/0x6a0 [ 674.266916][T15182] ? do_fast_syscall_32+0x33/0x70 [ 674.266939][T15182] ? asm_int80_emulation+0x1a/0x20 [ 674.266957][T15182] ? do_int80_emulation+0x299/0x500 [ 674.266979][T15182] ? trace_irq_disable+0x3b/0x140 [ 674.267002][T15182] do_fast_syscall_32+0x33/0x70 [ 674.267026][T15182] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 674.267046][T15182] RIP: 0023:0xf7f740ec [ 674.267063][T15182] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 674.267077][T15182] RSP: 002b:00000000f543650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 674.267098][T15182] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800001c0 [ 674.267112][T15182] RDX: 0000000000000044 RSI: 0000000000000000 RDI: 0000000000000000 [ 674.267123][T15182] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 674.267134][T15182] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 674.267145][T15182] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 674.267173][T15182] [ 674.726668][T10285] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 674.861076][T15195] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2897'. [ 674.866948][T10285] usb 6-1: device descriptor read/64, error -71 [ 674.927490][ T5706] gspca_sq930x: reg_w 0305 fd00 failed -110 [ 675.110966][T10285] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 675.149453][ T5706] gspca_sq930x: Sensor ov9630 not yet treated [ 675.149546][ T5706] sq930x 4-1:0.0: probe with driver sq930x failed with error -22 [ 675.237501][T10285] usb 6-1: device descriptor read/64, error -71 [ 675.308920][ T5706] usb 4-1: USB disconnect, device number 5 [ 675.351413][T10285] usb usb6-port1: attempt power cycle [ 675.392113][T15209] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 675.392356][T15208] IPVS: stopping backup sync thread 15209 ... [ 675.498178][T15211] gtp9: entered promiscuous mode [ 675.498193][T15211] gtp9: entered allmulticast mode [ 675.686694][T10285] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 675.707239][T10285] usb 6-1: device descriptor read/8, error -71 [ 675.756724][ T5706] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 675.908435][ T5706] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 675.909549][ T5706] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 675.909578][ T5706] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 675.911813][ T5706] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.911836][ T5706] usb 5-1: Product: syz [ 675.911850][ T5706] usb 5-1: Manufacturer: syz [ 675.911873][ T5706] usb 5-1: SerialNumber: syz [ 675.914865][ T5706] usb 5-1: config 0 descriptor?? [ 675.915568][T15211] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 675.915704][T15211] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 675.956836][T10285] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 675.998211][T10285] usb 6-1: device descriptor read/8, error -71 [ 676.022149][ T25] usb 1-1: USB disconnect, device number 8 [ 676.064052][T15219] FAULT_INJECTION: forcing a failure. [ 676.064052][T15219] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 676.064086][T15219] CPU: 0 UID: 0 PID: 15219 Comm: syz.0.2905 Tainted: G L syzkaller #0 PREEMPT(full) [ 676.064112][T15219] Tainted: [L]=SOFTLOCKUP [ 676.064118][T15219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 676.064133][T15219] Call Trace: [ 676.064141][T15219] [ 676.064149][T15219] dump_stack_lvl+0xe8/0x150 [ 676.064179][T15219] should_fail_ex+0x410/0x560 [ 676.064205][T15219] _copy_from_user+0x2d/0xb0 [ 676.064231][T15219] get_sg_io_hdr+0x12e/0x850 [ 676.064259][T15219] ? do_raw_write_lock+0x11d/0x260 [ 676.064291][T15219] ? __pfx_get_sg_io_hdr+0x10/0x10 [ 676.064328][T15219] ? sg_add_request+0x630/0x690 [ 676.064358][T15219] sg_new_write+0x180/0x7f0 [ 676.064389][T15219] ? __pfx_sg_new_write+0x10/0x10 [ 676.064444][T15219] ? hook_file_ioctl_compat+0x1f2/0x600 [ 676.064470][T15219] sg_ioctl+0x10c8/0x21b0 [ 676.064504][T15219] ? __pfx_sg_ioctl+0x10/0x10 [ 676.064532][T15219] ? __fget_files+0x2a/0x420 [ 676.064561][T15219] ? __fget_files+0x3a2/0x420 [ 676.064585][T15219] ? __fget_files+0x2a/0x420 [ 676.064612][T15219] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 676.064643][T15219] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 676.064675][T15219] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 676.064697][T15219] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 676.064723][T15219] ? __fget_files+0x3a2/0x420 [ 676.064754][T15219] ? fput+0xa0/0xd0 [ 676.064776][T15219] ? ksys_write+0x242/0x270 [ 676.064815][T15219] __do_fast_syscall_32+0x27a/0x6a0 [ 676.064841][T15219] ? do_fast_syscall_32+0x33/0x70 [ 676.064864][T15219] ? asm_int80_emulation+0x1a/0x20 [ 676.064882][T15219] ? do_int80_emulation+0x299/0x500 [ 676.064905][T15219] ? trace_irq_disable+0x3b/0x140 [ 676.064928][T15219] do_fast_syscall_32+0x33/0x70 [ 676.064953][T15219] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 676.064975][T15219] RIP: 0023:0xf700f0ec [ 676.064992][T15219] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 676.065007][T15219] RSP: 002b:00000000f53fd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 676.065027][T15219] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000002285 [ 676.065039][T15219] RDX: 00000000800005c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 676.065049][T15219] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 676.065059][T15219] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 676.065068][T15219] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 676.065091][T15219] [ 676.120135][T10285] usb usb6-port1: unable to enumerate USB device [ 676.135686][T15211] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 676.135814][T15211] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 676.430782][T15227] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2908'. [ 676.586838][T15230] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 677.216257][T15244] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 677.217358][T15243] IPVS: stopping backup sync thread 15244 ... [ 677.597084][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 677.748278][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 677.754975][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 677.755025][ T10] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 677.756360][ T10] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 677.756385][ T10] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 677.756404][ T10] usb 3-1: config 14 has no interface number 0 [ 677.756419][ T10] usb 3-1: config 14 has no interface number 1 [ 677.756488][ T10] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 677.756515][ T10] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 677.756538][ T10] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 677.756776][ T10] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 677.756826][ T10] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 677.756850][ T10] usb 3-1: config 14 interface 57 has no altsetting 0 [ 677.756865][ T10] usb 3-1: config 14 interface 228 has no altsetting 0 [ 677.765335][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.765361][ T10] usb 3-1: Product: syz [ 677.765374][ T10] usb 3-1: Manufacturer: syz [ 677.765387][ T10] usb 3-1: SerialNumber: syz [ 677.773619][T15259] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2918'. [ 677.979286][T15262] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2919'. [ 678.106903][T15263] fuse: Bad value for 'fd' [ 678.194529][T15267] FAULT_INJECTION: forcing a failure. [ 678.194529][T15267] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 678.194564][T15267] CPU: 1 UID: 0 PID: 15267 Comm: syz.0.2921 Tainted: G L syzkaller #0 PREEMPT(full) [ 678.194588][T15267] Tainted: [L]=SOFTLOCKUP [ 678.194595][T15267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 678.194601][T15267] Call Trace: [ 678.194606][T15267] [ 678.194611][T15267] dump_stack_lvl+0xe8/0x150 [ 678.194631][T15267] should_fail_ex+0x410/0x560 [ 678.194646][T15267] _copy_from_user+0x2d/0xb0 [ 678.194670][T15267] do_sched_setscheduler+0xc1/0x2b0 [ 678.194691][T15267] ? __pfx_do_sched_setscheduler+0x10/0x10 [ 678.194713][T15267] ? fput+0xa0/0xd0 [ 678.194736][T15267] ? ksys_write+0x242/0x270 [ 678.194760][T15267] __ia32_sys_sched_setscheduler+0x79/0x90 [ 678.194774][T15267] __do_fast_syscall_32+0x27a/0x6a0 [ 678.194788][T15267] ? do_fast_syscall_32+0x33/0x70 [ 678.194801][T15267] ? asm_int80_emulation+0x1a/0x20 [ 678.194819][T15267] ? do_int80_emulation+0x299/0x500 [ 678.194841][T15267] ? trace_irq_disable+0x3b/0x140 [ 678.194865][T15267] do_fast_syscall_32+0x33/0x70 [ 678.194889][T15267] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 678.194903][T15267] RIP: 0023:0xf700f0ec [ 678.194916][T15267] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 678.194931][T15267] RSP: 002b:00000000f53fd50c EFLAGS: 00000206 ORIG_RAX: 000000000000009c [ 678.194950][T15267] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000005 [ 678.194963][T15267] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 678.194974][T15267] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 678.194984][T15267] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 678.194999][T15267] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 678.195027][T15267] [ 678.221840][ T10] legousbtower 3-1:14.57: interrupt endpoints not found [ 678.366932][ T5684] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 678.419068][ T10] legousbtower 3-1:14.228: interrupt endpoints not found [ 678.505239][ T5706] Error reading MAC address [ 678.513620][ T5706] usb 5-1: USB disconnect, device number 127 [ 678.516710][ T5684] usb 4-1: Using ep0 maxpacket: 16 [ 678.519736][ T5684] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 678.520916][ T5684] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 678.520942][ T5684] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 678.520961][ T5684] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 678.520998][ T5684] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.529991][ T9923] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 678.537503][ T5684] usb 4-1: config 0 descriptor?? [ 678.677417][ T9923] usb 1-1: New USB device found, idVendor=14e1, idProduct=6000, bcdDevice= 0.00 [ 678.678500][ T9923] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 678.678518][ T9923] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 678.678531][ T9923] usb 1-1: config 0 interface 0 has no altsetting 0 [ 678.678549][ T9923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.682038][ T9923] usb 1-1: config 0 descriptor?? [ 678.958471][ T5684] microsoft 0003:045E:07DA.002B: unknown main item tag 0x0 [ 678.958508][ T5684] microsoft 0003:045E:07DA.002B: ignoring exceeding usage max [ 678.968450][ T5684] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.002B/input/input120 [ 678.973507][ T5684] microsoft 0003:045E:07DA.002B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 679.036955][ T5706] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 679.095399][T15269] binder_alloc: 15268: pid 15268 spamming oneway? 1 buffers allocated for a total size of 4096 [ 679.095848][T15269] binder_alloc: 15268: pid 15268 spamming oneway? 2 buffers allocated for a total size of 5120 [ 679.101905][ T9923] usbhid 1-1:0.0: can't add hid device: -71 [ 679.102008][ T9923] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 679.111544][ T9923] usb 1-1: USB disconnect, device number 9 [ 679.187321][ T5706] usb 6-1: New USB device found, idVendor=14e1, idProduct=6000, bcdDevice= 0.00 [ 679.188294][ T5706] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 679.188313][ T5706] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 679.188327][ T5706] usb 6-1: config 0 interface 0 has no altsetting 0 [ 679.188345][ T5706] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.190355][ T5706] usb 6-1: config 0 descriptor?? [ 679.266045][T10285] usb 4-1: USB disconnect, device number 6 [ 679.516400][T15279] netlink: Only one type of NAT may be specified [ 679.516437][T15279] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 679.602350][T15273] binder_alloc: 15272: pid 15272 spamming oneway? 1 buffers allocated for a total size of 4096 [ 679.602819][T15273] binder_alloc: 15272: pid 15272 spamming oneway? 2 buffers allocated for a total size of 5120 [ 679.606984][ T5706] usbhid 6-1:0.0: can't add hid device: -71 [ 679.607083][ T5706] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 679.610131][ T5706] usb 6-1: USB disconnect, device number 38 [ 679.679094][T15281] FAULT_INJECTION: forcing a failure. [ 679.679094][T15281] name failslab, interval 1, probability 0, space 0, times 0 [ 679.679117][T15281] CPU: 0 UID: 0 PID: 15281 Comm: syz.0.2926 Tainted: G L syzkaller #0 PREEMPT(full) [ 679.679131][T15281] Tainted: [L]=SOFTLOCKUP [ 679.679135][T15281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 679.679142][T15281] Call Trace: [ 679.679147][T15281] [ 679.679153][T15281] dump_stack_lvl+0xe8/0x150 [ 679.679172][T15281] should_fail_ex+0x410/0x560 [ 679.679187][T15281] ? __alloc_skb+0x1db/0x7a0 [ 679.679200][T15281] should_failslab+0xa8/0x100 [ 679.679214][T15281] ? __alloc_skb+0x1db/0x7a0 [ 679.679225][T15281] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 679.679241][T15281] ? __alloc_skb+0x18d/0x7a0 [ 679.679253][T15281] ? __alloc_skb+0x1db/0x7a0 [ 679.679268][T15281] __alloc_skb+0x1db/0x7a0 [ 679.679282][T15281] netlink_sendmsg+0x5d4/0xb40 [ 679.679298][T15281] ? __pfx_netlink_sendmsg+0x10/0x10 [ 679.679312][T15281] ? apparmor_socket_sendmsg+0x98/0x360 [ 679.679325][T15281] ? __pfx_netlink_sendmsg+0x10/0x10 [ 679.679338][T15281] sock_sendmsg_nosec+0x13a/0x180 [ 679.679351][T15281] ____sys_sendmsg+0x54e/0x850 [ 679.679368][T15281] ? __pfx_____sys_sendmsg+0x10/0x10 [ 679.679390][T15281] ___sys_sendmsg+0x2a5/0x360 [ 679.679402][T15281] ? __lock_acquire+0x747/0x2de0 [ 679.679416][T15281] ? __pfx____sys_sendmsg+0x10/0x10 [ 679.679429][T15281] ? get_pid_task+0x20/0x1f0 [ 679.679439][T15281] ? get_pid_task+0x20/0x1f0 [ 679.679448][T15281] ? get_pid_task+0x20/0x1f0 [ 679.679472][T15281] ? __fget_files+0x2a/0x420 [ 679.679485][T15281] ? __fget_files+0x3a2/0x420 [ 679.679503][T15281] __sys_sendmsg+0x177/0x240 [ 679.679517][T15281] ? __pfx___sys_sendmsg+0x10/0x10 [ 679.679539][T15281] __do_fast_syscall_32+0x27a/0x6a0 [ 679.679554][T15281] ? do_fast_syscall_32+0x33/0x70 [ 679.679566][T15281] ? asm_int80_emulation+0x1a/0x20 [ 679.679576][T15281] ? do_int80_emulation+0x299/0x500 [ 679.679588][T15281] ? trace_irq_disable+0x3b/0x140 [ 679.679601][T15281] do_fast_syscall_32+0x33/0x70 [ 679.679615][T15281] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 679.679627][T15281] RIP: 0023:0xf700f0ec [ 679.679638][T15281] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 679.679646][T15281] RSP: 002b:00000000f53fd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 679.679659][T15281] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000340 [ 679.679666][T15281] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 679.679673][T15281] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 679.679679][T15281] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 679.679685][T15281] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 679.679700][T15281] [ 679.766666][ T9923] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 679.780941][T15283] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2927'. [ 679.920061][ T9923] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 679.925394][ T9923] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 679.925428][ T9923] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 679.925464][ T9923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.957046][T15279] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 679.975768][ T9923] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 680.267638][T15286] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 680.267955][T15286] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 680.268260][T15286] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 680.268548][T15286] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 680.268850][T15286] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 680.278714][T15286] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 680.279029][T15286] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 680.279341][T15286] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 680.385641][ T9923] usb 5-1: USB disconnect, device number 2 [ 680.432470][ T5706] usb 3-1: USB disconnect, device number 3 [ 680.801519][T14906] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 680.807792][T14906] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 680.824771][T14906] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 680.831150][T14906] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 680.831753][T14906] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 681.337740][ T3336] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 681.340028][ T31] kauditd_printk_skb: 30 callbacks suppressed [ 681.340045][ T31] audit: type=1326 audit(1790212212.056:5101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15314 comm="syz.5.2937" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f740ec code=0x7ffc0000 [ 681.340930][ T31] audit: type=1326 audit(1790212212.056:5102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15314 comm="syz.5.2937" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f740ec code=0x7ffc0000 [ 681.341255][ T31] audit: type=1326 audit(1790212212.056:5103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15314 comm="syz.5.2937" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f740ec code=0x7ffc0000 [ 681.341289][ T31] audit: type=1326 audit(1790212212.056:5104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15314 comm="syz.5.2937" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f740ec code=0x7ffc0000 [ 681.341584][ T31] audit: type=1326 audit(1790212212.056:5105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15314 comm="syz.5.2937" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f740ec code=0x7ffc0000 [ 681.341899][ T31] audit: type=1326 audit(1790212212.056:5106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15314 comm="syz.5.2937" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f740ec code=0x7ffc0000 [ 681.342650][ T31] audit: type=1326 audit(1790212212.056:5107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15314 comm="syz.5.2937" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f740ec code=0x7ffc0000 [ 681.342687][ T31] audit: type=1326 audit(1790212212.056:5108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15314 comm="syz.5.2937" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f740ec code=0x7ffc0000 [ 681.342719][ T31] audit: type=1326 audit(1790212212.056:5109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15314 comm="syz.5.2937" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f740ec code=0x7ffc0000 [ 681.343091][ T31] audit: type=1326 audit(1790212212.056:5110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15314 comm="syz.5.2937" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7f740ec code=0x7ffc0000 [ 681.427199][T15309] gtp18: entered promiscuous mode [ 681.427223][T15309] gtp18: entered allmulticast mode [ 681.652347][T15323] FAULT_INJECTION: forcing a failure. [ 681.652347][T15323] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 681.652375][T15323] CPU: 0 UID: 0 PID: 15323 Comm: syz.0.2939 Tainted: G L syzkaller #0 PREEMPT(full) [ 681.652395][T15323] Tainted: [L]=SOFTLOCKUP [ 681.652401][T15323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 681.652409][T15323] Call Trace: [ 681.652416][T15323] [ 681.652423][T15323] dump_stack_lvl+0xe8/0x150 [ 681.652449][T15323] should_fail_ex+0x410/0x560 [ 681.652469][T15323] _copy_from_user+0x2d/0xb0 [ 681.652488][T15323] do_sys_poll+0x258/0x1110 [ 681.652514][T15323] ? __lock_acquire+0x747/0x2de0 [ 681.652532][T15323] ? __pfx_do_sys_poll+0x10/0x10 [ 681.652553][T15323] ? lock_acquire+0x115/0x350 [ 681.652640][T15323] ? __pfx_timespec64_add_safe+0x10/0x10 [ 681.652670][T15323] ? __fget_files+0x3a2/0x420 [ 681.652697][T15323] __ia32_sys_poll+0x190/0x360 [ 681.652718][T15323] ? __pfx___ia32_sys_poll+0x10/0x10 [ 681.652745][T15323] __do_fast_syscall_32+0x27a/0x6a0 [ 681.652767][T15323] ? do_fast_syscall_32+0x33/0x70 [ 681.652785][T15323] ? asm_int80_emulation+0x1a/0x20 [ 681.652801][T15323] ? do_int80_emulation+0x299/0x500 [ 681.652819][T15323] ? trace_irq_disable+0x3b/0x140 [ 681.652838][T15323] do_fast_syscall_32+0x33/0x70 [ 681.652859][T15323] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 681.652879][T15323] RIP: 0023:0xf700f0ec [ 681.652895][T15323] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 681.652906][T15323] RSP: 002b:00000000f53fd50c EFLAGS: 00000206 ORIG_RAX: 00000000000000a8 [ 681.652922][T15323] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 00000000000000b5 [ 681.652932][T15323] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 0000000000000000 [ 681.652940][T15323] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 681.652947][T15323] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 681.652956][T15323] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 681.652976][T15323] [ 681.727995][ T5684] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 681.833795][ T3336] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 681.880590][ T5684] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 681.883398][ T5684] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 681.883428][ T5684] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 681.894700][ T5684] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.894727][ T5684] usb 4-1: Product: syz [ 681.894741][ T5684] usb 4-1: Manufacturer: syz [ 681.894753][ T5684] usb 4-1: SerialNumber: syz [ 681.906060][ T5684] usb 4-1: config 0 descriptor?? [ 681.908123][T15309] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 681.908370][T15309] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 682.101468][ T3336] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 682.135947][T15309] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 682.136084][T15309] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 682.341168][ T3336] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 682.947690][ T5626] Bluetooth: hci2: command tx timeout [ 683.071746][T15346] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2944'. [ 683.072816][T15346] FAULT_INJECTION: forcing a failure. [ 683.072816][T15346] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 683.072846][T15346] CPU: 1 UID: 0 PID: 15346 Comm: syz.5.2944 Tainted: G L syzkaller #0 PREEMPT(full) [ 683.072871][T15346] Tainted: [L]=SOFTLOCKUP [ 683.072878][T15346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 683.072890][T15346] Call Trace: [ 683.072898][T15346] [ 683.072907][T15346] dump_stack_lvl+0xe8/0x150 [ 683.072936][T15346] should_fail_ex+0x410/0x560 [ 683.072962][T15346] _copy_from_iter+0x1d3/0x1660 [ 683.072985][T15346] ? __alloc_skb+0x27a/0x7a0 [ 683.073008][T15346] ? __alloc_skb+0x27a/0x7a0 [ 683.073031][T15346] ? __alloc_skb+0x27a/0x7a0 [ 683.073052][T15346] ? __pfx__copy_from_iter+0x10/0x10 [ 683.073071][T15346] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 683.073099][T15346] ? __alloc_skb+0x27a/0x7a0 [ 683.073119][T15346] ? __alloc_skb+0x27a/0x7a0 [ 683.073145][T15346] ? netlink_sendmsg+0x650/0xb40 [ 683.073163][T15346] ? skb_put+0x112/0x210 [ 683.073188][T15346] netlink_sendmsg+0x6c0/0xb40 [ 683.073214][T15346] ? __pfx_netlink_sendmsg+0x10/0x10 [ 683.073237][T15346] ? apparmor_socket_sendmsg+0x98/0x360 [ 683.073258][T15346] ? __pfx_netlink_sendmsg+0x10/0x10 [ 683.073273][T15346] sock_sendmsg_nosec+0x13a/0x180 [ 683.073294][T15346] ____sys_sendmsg+0x54e/0x850 [ 683.073324][T15346] ? __pfx_____sys_sendmsg+0x10/0x10 [ 683.073365][T15346] ___sys_sendmsg+0x2a5/0x360 [ 683.073389][T15346] ? __lock_acquire+0x747/0x2de0 [ 683.073413][T15346] ? __pfx____sys_sendmsg+0x10/0x10 [ 683.073436][T15346] ? get_pid_task+0x20/0x1f0 [ 683.073458][T15346] ? get_pid_task+0x20/0x1f0 [ 683.073475][T15346] ? get_pid_task+0x20/0x1f0 [ 683.073527][T15346] ? __fget_files+0x2a/0x420 [ 683.073551][T15346] ? __fget_files+0x3a2/0x420 [ 683.073584][T15346] __sys_sendmsg+0x177/0x240 [ 683.073612][T15346] ? __pfx___sys_sendmsg+0x10/0x10 [ 683.073652][T15346] __do_fast_syscall_32+0x27a/0x6a0 [ 683.073678][T15346] ? do_fast_syscall_32+0x33/0x70 [ 683.073701][T15346] ? asm_int80_emulation+0x1a/0x20 [ 683.073719][T15346] ? do_int80_emulation+0x299/0x500 [ 683.073741][T15346] ? trace_irq_disable+0x3b/0x140 [ 683.073761][T15346] do_fast_syscall_32+0x33/0x70 [ 683.073782][T15346] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 683.073803][T15346] RIP: 0023:0xf7f740ec [ 683.073821][T15346] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 683.073835][T15346] RSP: 002b:00000000f543650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 683.073854][T15346] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000380 [ 683.073867][T15346] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 683.073878][T15346] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 683.073890][T15346] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 683.073901][T15346] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 683.073929][T15346] [ 683.457622][T15350] FAULT_INJECTION: forcing a failure. [ 683.457622][T15350] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 683.457655][T15350] CPU: 1 UID: 0 PID: 15350 Comm: syz.5.2945 Tainted: G L syzkaller #0 PREEMPT(full) [ 683.457679][T15350] Tainted: [L]=SOFTLOCKUP [ 683.457686][T15350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 683.457698][T15350] Call Trace: [ 683.457706][T15350] [ 683.457714][T15350] dump_stack_lvl+0xe8/0x150 [ 683.457746][T15350] should_fail_ex+0x410/0x560 [ 683.457772][T15350] _copy_from_iter+0x1d3/0x1660 [ 683.457799][T15350] ? __alloc_skb+0x27a/0x7a0 [ 683.457826][T15350] ? __alloc_skb+0x27a/0x7a0 [ 683.457851][T15350] ? __alloc_skb+0x27a/0x7a0 [ 683.457874][T15350] ? __pfx__copy_from_iter+0x10/0x10 [ 683.457893][T15350] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 683.457921][T15350] ? __alloc_skb+0x27a/0x7a0 [ 683.457955][T15350] ? __alloc_skb+0x27a/0x7a0 [ 683.457982][T15350] ? netlink_sendmsg+0x650/0xb40 [ 683.458000][T15350] ? skb_put+0x112/0x210 [ 683.458026][T15350] netlink_sendmsg+0x6c0/0xb40 [ 683.458053][T15350] ? __pfx_netlink_sendmsg+0x10/0x10 [ 683.458079][T15350] ? apparmor_socket_sendmsg+0x18b/0x360 [ 683.458103][T15350] ? __pfx_netlink_sendmsg+0x10/0x10 [ 683.458121][T15350] sock_sendmsg_nosec+0x13a/0x180 [ 683.458154][T15350] ____sys_sendmsg+0x54e/0x850 [ 683.458185][T15350] ? __pfx_____sys_sendmsg+0x10/0x10 [ 683.458226][T15350] ___sys_sendmsg+0x2a5/0x360 [ 683.458249][T15350] ? __lock_acquire+0x747/0x2de0 [ 683.458273][T15350] ? __pfx____sys_sendmsg+0x10/0x10 [ 683.458297][T15350] ? get_pid_task+0x20/0x1f0 [ 683.458316][T15350] ? get_pid_task+0x20/0x1f0 [ 683.458331][T15350] ? get_pid_task+0x20/0x1f0 [ 683.458381][T15350] ? __fget_files+0x2a/0x420 [ 683.458405][T15350] ? __fget_files+0x3a2/0x420 [ 683.458439][T15350] __sys_sendmsg+0x177/0x240 [ 683.458466][T15350] ? __pfx___sys_sendmsg+0x10/0x10 [ 683.458508][T15350] __do_fast_syscall_32+0x27a/0x6a0 [ 683.458535][T15350] ? do_fast_syscall_32+0x33/0x70 [ 683.458558][T15350] ? asm_int80_emulation+0x1a/0x20 [ 683.458576][T15350] ? do_int80_emulation+0x299/0x500 [ 683.458598][T15350] ? trace_irq_disable+0x3b/0x140 [ 683.458621][T15350] do_fast_syscall_32+0x33/0x70 [ 683.458645][T15350] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 683.458665][T15350] RIP: 0023:0xf7f740ec [ 683.458680][T15350] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 683.458694][T15350] RSP: 002b:00000000f543650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 683.458713][T15350] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080009b40 [ 683.458724][T15350] RDX: 0000000024000840 RSI: 0000000000000000 RDI: 0000000000000000 [ 683.458734][T15350] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 683.458744][T15350] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 683.458755][T15350] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 683.458780][T15350] [ 683.782030][T15303] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.782150][T15303] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.782316][T15303] bridge_slave_0: entered allmulticast mode [ 683.784539][T15303] bridge_slave_0: entered promiscuous mode [ 683.792275][T15303] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.793019][T15303] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.793209][T15303] bridge_slave_1: entered allmulticast mode [ 683.802920][T15303] bridge_slave_1: entered promiscuous mode [ 683.850166][ T3336] tipc: Resetting bearer [ 684.131371][ T3336] tipc: Disabling bearer [ 684.138837][ T3336] bond1 (unregistering): (slave bridge0): Releasing active interface [ 684.154955][ T3336] team0: Port device bridge1 removed [ 684.168699][ T3336] bond0 (unregistering): Released all slaves [ 684.183337][ T3336] bond1 (unregistering): Released all slaves [ 684.233604][T15303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 684.246077][T15303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 684.317660][T15303] team0: Port device team_slave_0 added [ 684.324153][T15303] team0: Port device team_slave_1 added [ 684.335459][ T5684] Error reading MAC address [ 684.363745][ T3336] tipc: Disabling bearer [ 684.377841][ T5684] usb 4-1: USB disconnect, device number 7 [ 684.386018][ T3336] tipc: Disabling bearer [ 684.386243][ T3336] tipc: Left network mode [ 684.460727][T15303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 684.460745][T15303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 684.460768][T15303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 684.466387][T15303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 684.466402][T15303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 684.466424][T15303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 684.880624][T15366] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2951'. [ 684.887420][T15366] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2951'. [ 684.893614][T15303] hsr_slave_0: entered promiscuous mode [ 684.912352][T15303] hsr_slave_1: entered promiscuous mode [ 684.921059][T15303] debugfs: 'hsr0' already exists in 'hsr' [ 684.921082][T15303] Cannot create hsr debugfs directory [ 684.922065][T15364] @: renamed from veth0 (while UP) [ 685.038375][ T5626] Bluetooth: hci2: command tx timeout [ 685.043447][ T5706] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 685.197891][ T5706] usb 4-1: Using ep0 maxpacket: 16 [ 685.198615][ T5706] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 685.205931][ T5706] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 685.205958][ T5706] usb 4-1: config 0 has no interface number 0 [ 685.206017][ T5706] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 685.206040][ T5706] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 685.278826][ T5706] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.278847][ T5706] usb 4-1: Product: syz [ 685.278855][ T5706] usb 4-1: Manufacturer: syz [ 685.278862][ T5706] usb 4-1: SerialNumber: syz [ 685.312206][ T5706] usb 4-1: config 0 descriptor?? [ 685.321199][T15362] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 685.321302][T15362] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 685.567084][T15362] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 685.567181][T15362] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 685.750905][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.750987][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.790561][ T5706] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 685.988677][T15388] gtp10: entered promiscuous mode [ 685.988724][T15388] gtp10: entered allmulticast mode [ 685.991319][ T5706] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 685.991353][ T5706] asix 4-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 685.991558][ T5706] asix 4-1:0.34: probe with driver asix failed with error -61 [ 686.187629][T15390] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2957'. [ 686.351733][ T31] kauditd_printk_skb: 32 callbacks suppressed [ 686.351756][ T31] audit: type=1326 audit(1790212217.066:5143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15393 comm="syz.5.2958" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf7f740ec code=0x7ffc0000 [ 686.351799][ T31] audit: type=1326 audit(1790212217.066:5144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15393 comm="syz.5.2958" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f740ec code=0x7ffc0000 [ 686.351830][ T31] audit: type=1326 audit(1790212217.066:5145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15393 comm="syz.5.2958" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f740ec code=0x7ffc0000 [ 686.353371][ T31] audit: type=1326 audit(1790212217.066:5146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15393 comm="syz.5.2958" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf7f740ec code=0x7ffc0000 [ 686.353438][ T31] audit: type=1326 audit(1790212217.066:5147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15393 comm="syz.5.2958" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f740ec code=0x7ffc0000 [ 686.353481][ T31] audit: type=1326 audit(1790212217.066:5148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15393 comm="syz.5.2958" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f740ec code=0x7ffc0000 [ 686.354716][ T31] audit: type=1326 audit(1790212217.066:5149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15393 comm="syz.5.2958" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f740ec code=0x7ffc0000 [ 686.354843][ T31] audit: type=1326 audit(1790212217.066:5150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15393 comm="syz.5.2958" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f740ec code=0x7ffc0000 [ 686.354997][ T31] audit: type=1326 audit(1790212217.066:5151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15393 comm="syz.5.2958" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f740ec code=0x7ffc0000 [ 686.406673][ T5706] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 686.457671][ T5281] 8021q: adding VLAN 0 to HW filter on device eth5 [ 686.559026][ T5706] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 686.560110][ T5706] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 686.560137][ T5706] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 686.562114][ T5706] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.562136][ T5706] usb 5-1: Product: syz [ 686.562149][ T5706] usb 5-1: Manufacturer: syz [ 686.562162][ T5706] usb 5-1: SerialNumber: syz [ 686.591990][ T5706] usb 5-1: config 0 descriptor?? [ 686.598664][T15388] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 686.598805][T15388] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 686.704860][ T3336] hsr_slave_0: left promiscuous mode [ 686.705845][ T3336] hsr_slave_1: left promiscuous mode [ 686.804863][T15388] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 686.804982][T15388] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 686.833226][T15408] FAULT_INJECTION: forcing a failure. [ 686.833226][T15408] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 686.833263][T15408] CPU: 0 UID: 0 PID: 15408 Comm: syz.0.2962 Tainted: G L syzkaller #0 PREEMPT(full) [ 686.833290][T15408] Tainted: [L]=SOFTLOCKUP [ 686.833310][T15408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 686.833322][T15408] Call Trace: [ 686.833332][T15408] [ 686.833341][T15408] dump_stack_lvl+0xe8/0x150 [ 686.833374][T15408] should_fail_ex+0x410/0x560 [ 686.833401][T15408] prepare_alloc_pages+0x223/0x600 [ 686.833429][T15408] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 686.833455][T15408] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 686.833480][T15408] ? __pfx_policy_nodemask+0x10/0x10 [ 686.833515][T15408] alloc_pages_mpol+0x21e/0x390 [ 686.833544][T15408] alloc_pages_noprof+0xb1/0x2b0 [ 686.833571][T15408] pte_alloc_one+0x22/0x370 [ 686.833597][T15408] __pte_alloc+0x25/0x1a0 [ 686.833621][T15408] do_pte_missing+0x2db7/0x34b0 [ 686.833658][T15408] handle_mm_fault+0x1a53/0x3750 [ 686.833694][T15408] ? handle_mm_fault+0xf1/0x3750 [ 686.833731][T15408] ? __pfx_handle_mm_fault+0x10/0x10 [ 686.833756][T15408] ? follow_page_pte+0xc8f/0xf10 [ 686.833805][T15408] __get_user_pages+0x1675/0x2750 [ 686.833838][T15408] ? do_fast_syscall_32+0x33/0x70 [ 686.833886][T15408] __gup_longterm_locked+0xd52/0x15c0 [ 686.833925][T15408] ? lock_acquire+0x115/0x350 [ 686.833951][T15408] pin_user_pages_remote+0xdc/0x130 [ 686.833979][T15408] ? __pfx_pin_user_pages_remote+0x10/0x10 [ 686.834008][T15408] ? down_read+0x2be/0x330 [ 686.834032][T15408] ? mm_access+0x188/0x2c0 [ 686.834058][T15408] process_vm_rw+0x650/0xba0 [ 686.834096][T15408] ? __pfx_process_vm_rw+0x10/0x10 [ 686.834173][T15408] ? __fget_files+0x3a2/0x420 [ 686.834210][T15408] ? ksys_write+0x242/0x270 [ 686.834243][T15408] __ia32_sys_process_vm_readv+0xdf/0x100 [ 686.834275][T15408] __do_fast_syscall_32+0x27a/0x6a0 [ 686.834297][T15408] ? do_fast_syscall_32+0x33/0x70 [ 686.834321][T15408] ? asm_int80_emulation+0x1a/0x20 [ 686.834339][T15408] ? do_int80_emulation+0x299/0x500 [ 686.834364][T15408] do_fast_syscall_32+0x33/0x70 [ 686.834387][T15408] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 686.834418][T15408] RIP: 0023:0xf700f0ec [ 686.834434][T15408] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 686.834447][T15408] RSP: 002b:00000000f53fd50c EFLAGS: 00000206 ORIG_RAX: 000000000000015b [ 686.834465][T15408] RAX: ffffffffffffffda RBX: 00000000000006f4 RCX: 0000000080008400 [ 686.834478][T15408] RDX: 0000000000000002 RSI: 0000000080008640 RDI: 0000000000000286 [ 686.834489][T15408] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 686.834499][T15408] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 686.834508][T15408] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 686.834533][T15408] [ 687.106788][ T5626] Bluetooth: hci2: command tx timeout [ 687.343883][ T31] audit: type=1800 audit(1790212218.056:5152): pid=15416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2965" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 687.482556][T15416] netlink: 'syz.5.2965': attribute type 3 has an invalid length. [ 687.482628][T15416] netlink: 'syz.5.2965': attribute type 3 has an invalid length. [ 687.482691][T15416] netlink: 'syz.5.2965': attribute type 3 has an invalid length. [ 687.482728][T15416] netlink: 'syz.5.2965': attribute type 3 has an invalid length. [ 687.482764][T15416] netlink: 'syz.5.2965': attribute type 3 has an invalid length. [ 687.482831][T15416] netlink: 'syz.5.2965': attribute type 3 has an invalid length. [ 687.482865][T15416] netlink: 'syz.5.2965': attribute type 3 has an invalid length. [ 687.482901][T15416] netlink: 'syz.5.2965': attribute type 3 has an invalid length. [ 687.482961][T15416] netlink: 'syz.5.2965': attribute type 3 has an invalid length. [ 687.482997][T15416] netlink: 'syz.5.2965': attribute type 3 has an invalid length. [ 687.500030][T15422] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 687.508426][T15421] IPVS: stopping backup sync thread 15422 ... [ 687.630817][T15424] fuse: Bad value for 'fd' [ 687.978378][ T3336] IPVS: stop unused estimator thread 0... [ 688.181061][ T25] usb 4-1: USB disconnect, device number 8 [ 688.807246][ T9923] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 688.943578][T15452] FAULT_INJECTION: forcing a failure. [ 688.943578][T15452] name failslab, interval 1, probability 0, space 0, times 0 [ 688.943610][T15452] CPU: 1 UID: 0 PID: 15452 Comm: syz.5.2972 Tainted: G L syzkaller #0 PREEMPT(full) [ 688.943634][T15452] Tainted: [L]=SOFTLOCKUP [ 688.943641][T15452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 688.943651][T15452] Call Trace: [ 688.943659][T15452] [ 688.943667][T15452] dump_stack_lvl+0xe8/0x150 [ 688.943699][T15452] should_fail_ex+0x410/0x560 [ 688.943727][T15452] should_failslab+0xa8/0x100 [ 688.943743][T15452] __kmalloc_cache_noprof+0xa3/0x600 [ 688.943758][T15452] ? xa_load+0x1db/0x210 [ 688.943781][T15452] ? snd_mixer_oss_get_volume1_sw+0x119/0x460 [ 688.943807][T15452] ? snd_mixer_oss_get_volume1_sw+0x119/0x460 [ 688.943840][T15452] snd_mixer_oss_get_volume1_sw+0x119/0x460 [ 688.943859][T15452] snd_mixer_oss_get_recsrc1_sw+0x8f/0x140 [ 688.943875][T15452] ? __pfx_snd_mixer_oss_get_recsrc1_sw+0x10/0x10 [ 688.943888][T15452] snd_mixer_oss_ioctl1+0x13ed/0x1960 [ 688.943907][T15452] ? __pfx_snd_mixer_oss_ioctl1+0x10/0x10 [ 688.943931][T15452] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 688.943966][T15452] ? hook_file_ioctl_compat+0x1f2/0x600 [ 688.944002][T15452] snd_mixer_oss_ioctl_card+0x114/0x170 [ 688.944018][T15452] ? __pfx_snd_mixer_oss_ioctl_card+0x10/0x10 [ 688.944033][T15452] ? __fget_files+0x3a2/0x420 [ 688.944048][T15452] snd_pcm_oss_ioctl+0x264/0xdf0 [ 688.944072][T15452] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 688.944105][T15452] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 688.944127][T15452] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 688.944150][T15452] ? __fget_files+0x3a2/0x420 [ 688.944167][T15452] ? fput+0xa0/0xd0 [ 688.944179][T15452] ? ksys_write+0x242/0x270 [ 688.944200][T15452] __do_fast_syscall_32+0x27a/0x6a0 [ 688.944221][T15452] ? do_fast_syscall_32+0x33/0x70 [ 688.944245][T15452] ? asm_int80_emulation+0x1a/0x20 [ 688.944262][T15452] ? do_int80_emulation+0x299/0x500 [ 688.944285][T15452] ? trace_irq_disable+0x3b/0x140 [ 688.944304][T15452] do_fast_syscall_32+0x33/0x70 [ 688.944317][T15452] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 688.944329][T15452] RIP: 0023:0xf7f740ec [ 688.944340][T15452] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 688.944348][T15452] RSP: 002b:00000000f543650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 688.944363][T15452] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080044dff [ 688.944376][T15452] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 688.944387][T15452] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 688.944398][T15452] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 688.944410][T15452] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 688.944440][T15452] [ 688.957695][ T9923] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 688.958398][ T9923] usb 4-1: config 0 has no interfaces? [ 688.961202][ T9923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.961226][ T9923] usb 4-1: Product: syz [ 688.961262][ T9923] usb 4-1: Manufacturer: syz [ 688.961276][ T9923] usb 4-1: SerialNumber: syz [ 688.972178][ T9923] usb 4-1: config 0 descriptor?? [ 689.064156][ T5706] Error reading MAC address [ 689.091634][ T5706] usb 5-1: USB disconnect, device number 3 [ 689.187904][ T5626] Bluetooth: hci2: command tx timeout [ 689.264509][T15445] FAULT_INJECTION: forcing a failure. [ 689.264509][T15445] name failslab, interval 1, probability 0, space 0, times 0 [ 689.264542][T15445] CPU: 0 UID: 0 PID: 15445 Comm: syz.3.2970 Tainted: G L syzkaller #0 PREEMPT(full) [ 689.264574][T15445] Tainted: [L]=SOFTLOCKUP [ 689.264581][T15445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 689.264593][T15445] Call Trace: [ 689.264600][T15445] [ 689.264608][T15445] dump_stack_lvl+0xe8/0x150 [ 689.264639][T15445] should_fail_ex+0x410/0x560 [ 689.264664][T15445] ? __alloc_skb+0x1db/0x7a0 [ 689.264685][T15445] should_failslab+0xa8/0x100 [ 689.264703][T15445] ? __alloc_skb+0x1db/0x7a0 [ 689.264720][T15445] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 689.264745][T15445] ? __alloc_skb+0x18d/0x7a0 [ 689.264765][T15445] ? __alloc_skb+0x1db/0x7a0 [ 689.264787][T15445] __alloc_skb+0x1db/0x7a0 [ 689.264810][T15445] netlink_sendmsg+0x5d4/0xb40 [ 689.264835][T15445] ? __pfx_netlink_sendmsg+0x10/0x10 [ 689.264856][T15445] ? apparmor_socket_sendmsg+0x98/0x360 [ 689.264876][T15445] ? __pfx_netlink_sendmsg+0x10/0x10 [ 689.264891][T15445] sock_sendmsg_nosec+0x13a/0x180 [ 689.264912][T15445] ____sys_sendmsg+0x54e/0x850 [ 689.264940][T15445] ? __pfx_____sys_sendmsg+0x10/0x10 [ 689.264981][T15445] ___sys_sendmsg+0x2a5/0x360 [ 689.265001][T15445] ? __lock_acquire+0x747/0x2de0 [ 689.265021][T15445] ? __pfx____sys_sendmsg+0x10/0x10 [ 689.265050][T15445] ? get_pid_task+0x20/0x1f0 [ 689.265067][T15445] ? get_pid_task+0x20/0x1f0 [ 689.265082][T15445] ? get_pid_task+0x20/0x1f0 [ 689.265125][T15445] ? __fget_files+0x2a/0x420 [ 689.265146][T15445] ? __fget_files+0x3a2/0x420 [ 689.265175][T15445] __sys_sendmsg+0x177/0x240 [ 689.265199][T15445] ? __pfx___sys_sendmsg+0x10/0x10 [ 689.265240][T15445] __do_fast_syscall_32+0x27a/0x6a0 [ 689.265265][T15445] ? do_fast_syscall_32+0x33/0x70 [ 689.265288][T15445] ? asm_int80_emulation+0x1a/0x20 [ 689.265306][T15445] ? do_int80_emulation+0x299/0x500 [ 689.265328][T15445] ? trace_irq_disable+0x3b/0x140 [ 689.265350][T15445] do_fast_syscall_32+0x33/0x70 [ 689.265373][T15445] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 689.265396][T15445] RIP: 0023:0xf7f130ec [ 689.265412][T15445] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 689.265426][T15445] RSP: 002b:00000000f53d650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 689.265446][T15445] RAX: ffffffffffffffda RBX: 0000000000000013 RCX: 0000000080000540 [ 689.265457][T15445] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 689.265468][T15445] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 689.265478][T15445] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 689.265489][T15445] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 689.265519][T15445] [ 689.291804][ T9923] usb 4-1: USB disconnect, device number 9 [ 689.737483][T15303] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 689.771683][T15303] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 689.778812][T15303] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 689.804701][T15303] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 689.809693][T15303] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 689.844283][T15303] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 689.854187][T15303] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 689.891938][T15303] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 690.338774][T15303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 690.405001][T15303] 8021q: adding VLAN 0 to HW filter on device team0 [ 690.443308][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.443416][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 690.499686][ T6553] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.499793][ T6553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 690.697194][T15494] IPVS: stopping backup sync thread 15497 ... [ 690.912432][T15502] vlan0: left promiscuous mode [ 690.912639][T15502] vlan0: entered allmulticast mode [ 690.961897][T15303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 691.099703][T15508] fuse: Bad value for 'fd' [ 691.120721][T15303] veth0_vlan: entered promiscuous mode [ 691.143777][T15303] veth1_vlan: entered promiscuous mode [ 691.209653][T15303] veth0_macvtap: entered promiscuous mode [ 691.230353][T15303] veth1_macvtap: entered promiscuous mode [ 691.243501][T15510] gtp2: entered promiscuous mode [ 691.243522][T15510] gtp2: entered allmulticast mode [ 691.270295][T15303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 691.289310][T15303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 691.407686][ T3336] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.409077][ T3336] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.409115][ T3336] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.409146][ T3336] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.528874][ T9923] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 691.615127][ T3336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 691.615150][ T3336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 691.674610][ T3336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 691.674631][ T3336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 691.684954][ T9923] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 691.688099][ T9923] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 691.688127][ T9923] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 691.691726][ T9923] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.691750][ T9923] usb 6-1: Product: syz [ 691.691763][ T9923] usb 6-1: Manufacturer: syz [ 691.691776][ T9923] usb 6-1: SerialNumber: syz [ 691.702037][ T9923] usb 6-1: config 0 descriptor?? [ 691.703646][T15510] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 691.703778][T15510] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 691.715628][T15514] syzkaller0: entered allmulticast mode [ 838.288342][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 143s! [syz-executor:15303] [ 838.288387][ C0] Modules linked in: [ 838.288401][ C0] irq event stamp: 215517 [ 838.305167][ C0] hardirqs last enabled at (215516): [] irqentry_exit+0x218/0x910 [ 838.314667][ C0] hardirqs last disabled at (215517): [] sysvec_apic_timer_interrupt+0xe/0xc0 [ 838.325107][ C0] softirqs last enabled at (186044): [] __irq_exit_rcu+0xcb/0x220 [ 838.334566][ C0] softirqs last disabled at (186069): [] __irq_exit_rcu+0xcb/0x220 [ 838.344063][ C0] CPU: 0 UID: 0 PID: 15303 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 838.344100][ C0] Tainted: [L]=SOFTLOCKUP [ 838.344109][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 838.344117][ C0] RIP: 0010:kasan_check_range+0x97/0x2c0 [ 838.344138][ C0] Code: 00 fc ff df 4d 8d 34 19 4d 89 f4 4d 29 dc 49 83 fc 10 7f 29 4d 85 e4 0f 84 3d 01 00 00 4c 89 cb 48 f7 d3 4c 01 fb 41 80 3b 00 <0f> 85 9e 01 00 00 49 ff c3 48 ff c3 75 ee e9 1d 01 00 00 44 89 dd [ 838.344148][ C0] RSP: 0018:ffffc900000075c0 EFLAGS: 00000246 [ 838.344159][ C0] RAX: 0000607edaf66701 RBX: fffffffffffffffe RCX: ffffffff89efc4ee [ 838.344168][ C0] RDX: 0000000000000000 RSI: 0000000000000010 RDI: ffff88807eb72e48 [ 838.344175][ C0] RBP: ffff88807eb72e38 R08: ffff88807eb72e57 R09: 1ffff1100fd6e5ca [ 838.344183][ C0] R10: dffffc0000000000 R11: ffffed100fd6e5c9 R12: 0000000000000002 [ 838.344191][ C0] R13: 1ffff1100fd6e5ce R14: ffffed100fd6e5cb R15: 1ffff1100fd6e5c9 [ 838.344199][ C0] FS: 0000000000000000(0000) GS:ffff888124ccb000(0063) knlGS:000000005665f480 [ 838.344208][ C0] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 838.344216][ C0] CR2: 00000000f5160a89 CR3: 000000004df5e000 CR4: 00000000003526f0 [ 838.344229][ C0] Call Trace: [ 838.344238][ C0] [ 838.344244][ C0] ? basic_classify+0x16e/0x2d0 [ 838.344261][ C0] __asan_memcpy+0x29/0x70 [ 838.344274][ C0] basic_classify+0x16e/0x2d0 [ 838.344292][ C0] tcf_classify+0x43d/0x1160 [ 838.344314][ C0] hfsc_enqueue+0x322/0xf80 [ 838.344331][ C0] ? __pfx_hfsc_enqueue+0x10/0x10 [ 838.344382][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 838.344399][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 838.344416][ C0] dev_qdisc_enqueue+0x4e/0x260 [ 838.344427][ C0] ? __dev_queue_xmit+0x1b2b/0x3820 [ 838.344445][ C0] __dev_queue_xmit+0x1b45/0x3820 [ 838.344466][ C0] ? ___neigh_create+0x1cd2/0x22b0 [ 838.344479][ C0] ? __dev_queue_xmit+0x29b/0x3820 [ 838.344495][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 838.344512][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 838.344528][ C0] ? neigh_resolve_output+0x428/0x720 [ 838.344543][ C0] ? eth_header+0x11b/0x200 [ 838.344555][ C0] ? __asan_memcpy+0x40/0x70 [ 838.344577][ C0] ? ip_finish_output2+0x3de/0x10b0 [ 838.344589][ C0] ip_finish_output2+0xc4b/0x10b0 [ 838.344601][ C0] ? ip_skb_dst_mtu+0x811/0xa50 [ 838.344614][ C0] ? ip_finish_output2+0x3de/0x10b0 [ 838.344627][ C0] ? ip_finish_output+0x40b/0x530 [ 838.344639][ C0] ip_output+0x29f/0x450 [ 838.344650][ C0] ? ip_output+0x5a/0x450 [ 838.344661][ C0] igmp_ifc_timer_expire+0xba5/0x10e0 [ 838.344676][ C0] ? igmp_ifc_timer_expire+0x28/0x10e0 [ 838.344692][ C0] call_timer_fn+0x18d/0x5f0 [ 838.344707][ C0] ? __pfx_igmp_ifc_timer_expire+0x10/0x10 [ 838.344720][ C0] ? call_timer_fn+0xd5/0x5f0 [ 838.344732][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 838.344755][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 838.344768][ C0] ? __pfx_igmp_ifc_timer_expire+0x10/0x10 [ 838.344782][ C0] __run_timer_base+0x652/0x8b0 [ 838.344802][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 838.344816][ C0] ? ktime_get+0x1f5/0x220 [ 838.344827][ C0] ? lapic_next_event+0x11/0x20 [ 838.344847][ C0] run_timer_softirq+0xb7/0x170 [ 838.344859][ C0] handle_softirqs+0x226/0x860 [ 838.344876][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 838.344894][ C0] __irq_exit_rcu+0xcb/0x220 [ 838.344908][ C0] irq_exit_rcu+0x9/0x30 [ 838.344920][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 838.344935][ C0] [ 838.344939][ C0] [ 838.344943][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 838.344963][ C0] RIP: 0010:vsnprintf+0x837/0xef0 [ 838.344973][ C0] Code: 89 e8 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 ef e8 0e 17 56 f6 4c 89 e9 4d 8b 6d 00 49 8d 45 08 48 89 01 4c 89 e8 48 c1 e8 03 <42> 80 3c 30 00 74 08 4c 89 ef e8 ea 16 56 f6 49 8b 5d 00 e9 b9 00 [ 838.344982][ C0] RSP: 0018:ffffc9000cb278a8 EFLAGS: 00000a06 [ 838.344992][ C0] RAX: 1ffff92001964f2d RBX: 0000000000000020 RCX: ffff888079af1f40 [ 838.345000][ C0] RDX: 0000000000000000 RSI: 0000000000000018 RDI: 0000000000000029 [ 838.345007][ C0] RBP: ffffc9000cb27ac0 R08: ffff888079af1f40 R09: 0000000000000008 [ 838.345014][ C0] R10: 0000000000000007 R11: 0000000000000000 R12: ffffc9000cb27a81 [ 838.345021][ C0] R13: ffffc9000cb27968 R14: dffffc0000000000 R15: ffffffff8c647564 [ 838.345038][ C0] ? vsnprintf+0x1a3/0xef0 [ 838.345053][ C0] snprintf+0xe8/0x140 [ 838.345063][ C0] ? tomoyo_check_acl+0x2df/0x400 [ 838.345078][ C0] ? __pfx_snprintf+0x10/0x10 [ 838.345090][ C0] ? tomoyo_check_acl+0x386/0x400 [ 838.345104][ C0] tomoyo_path_number_perm+0x39d/0x5f0 [ 838.345117][ C0] ? tomoyo_path_number_perm+0x219/0x5f0 [ 838.345129][ C0] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 838.345144][ C0] ? d_splice_alias+0x12/0x30 [ 838.345169][ C0] ? __pfx_current_check_access_path+0x10/0x10 [ 838.345183][ C0] ? _raw_spin_unlock+0x28/0x50 [ 838.345194][ C0] ? d_alloc+0x144/0x190 [ 838.345211][ C0] ? lookup_one_qstr_excl+0x1d4/0x360 [ 838.345229][ C0] tomoyo_path_mkdir+0xb0/0xf0 [ 838.345244][ C0] ? __pfx_tomoyo_path_mkdir+0x10/0x10 [ 838.345261][ C0] ? __pfx_filename_create+0x10/0x10 [ 838.345275][ C0] security_path_mkdir+0x169/0x350 [ 838.345292][ C0] filename_mkdirat+0x200/0x510 [ 838.345307][ C0] ? __pfx_filename_mkdirat+0x10/0x10 [ 838.345318][ C0] ? strncpy_from_user+0x150/0x2c0 [ 838.345347][ C0] ? do_getname+0x151/0x250 [ 838.345362][ C0] __se_sys_mkdirat+0x35/0x150 [ 838.345376][ C0] __do_fast_syscall_32+0x27a/0x6a0 [ 838.345391][ C0] ? do_fast_syscall_32+0x33/0x70 [ 838.345405][ C0] ? asm_int80_emulation+0x1a/0x20 [ 838.345415][ C0] ? do_int80_emulation+0x299/0x500 [ 838.345431][ C0] do_fast_syscall_32+0x33/0x70 [ 838.345445][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 838.345458][ C0] RIP: 0023:0xf7fd30ec [ 838.345472][ C0] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 838.345480][ C0] RSP: 002b:00000000f75bff48 EFLAGS: 00000206 ORIG_RAX: 0000000000000128 [ 838.345491][ C0] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f72a1c88 [ 838.345498][ C0] RDX: 00000000000001ff RSI: 00000000f72a1c88 RDI: 0000000030000000 [ 838.345505][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 838.345511][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 838.345518][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 838.345532][ C0] [ 838.345538][ C0] Sending NMI from CPU 0 to CPUs 1: [ 838.345617][ C1] NMI backtrace for cpu 1 [ 838.345635][ C1] CPU: 1 UID: 0 PID: 15514 Comm: syz.3.2983 Tainted: G L syzkaller #0 PREEMPT(full) [ 838.345661][ C1] Tainted: [L]=SOFTLOCKUP [ 838.345668][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 838.345680][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 838.345705][ C1] Code: 9c 88 02 e9 83 08 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 a1 23 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 838.345721][ C1] RSP: 0018:ffffc90009996948 EFLAGS: 000002c7 [ 838.345737][ C1] RAX: ffffffff81771e2c RBX: 0000000000000003 RCX: 0000000000080000 [ 838.345751][ C1] RDX: ffffc90005919000 RSI: 0000000000064780 RDI: 0000000000064781 [ 838.345765][ C1] RBP: 0000000000000003 R08: ffffffff907a517f R09: 1ffffffff20f4a2f [ 838.345785][ C1] R10: dffffc0000000000 R11: fffffbfff20f4a30 R12: 0000000000000200 [ 838.345799][ C1] R13: 0000000000000000 R14: ffff8880557ac158 R15: dffffc0000000000 [ 838.345813][ C1] FS: 0000000000000000(0000) GS:ffff888124dcb000(0063) knlGS:00000000f53d6b40 [ 838.345830][ C1] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 838.345853][ C1] CR2: 00000000f7406288 CR3: 0000000054f56000 CR4: 00000000003526f0 [ 838.345871][ C1] Call Trace: [ 838.345879][ C1] [ 838.345886][ C1] kvm_wait+0x111/0x160 [ 838.345912][ C1] __pv_queued_spin_lock_slowpath+0x74a/0xbc0 [ 838.345942][ C1] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 838.345968][ C1] ? irqentry_exit+0x218/0x910 [ 838.345990][ C1] ? trace_save_cmdline+0x300/0x500 [ 838.346025][ C1] do_raw_spin_lock+0x26c/0x2f0 [ 838.346053][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 838.346080][ C1] ? lock_acquire+0x232/0x350 [ 838.346102][ C1] __dev_queue_xmit+0xd56/0x3820 [ 838.346134][ C1] ? __lock_acquire+0x747/0x2de0 [ 838.346156][ C1] ? __dev_queue_xmit+0x29b/0x3820 [ 838.346184][ C1] ? tipc_net+0x45/0x270 [ 838.346216][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 838.346244][ C1] ? tipc_net+0x45/0x270 [ 838.346271][ C1] ? tipc_net+0x205/0x270 [ 838.346299][ C1] ? tipc_crypto_xmit+0x1e2/0x2220 [ 838.346335][ C1] ? eth_header+0x11b/0x200 [ 838.346353][ C1] ? __asan_memcpy+0x40/0x70 [ 838.346371][ C1] ? eth_header+0x11b/0x200 [ 838.346389][ C1] ? __pfx_eth_header+0x10/0x10 [ 838.346407][ C1] tipc_l2_send_msg+0x331/0x400 [ 838.346432][ C1] tipc_bearer_xmit_skb+0x2b3/0x400 [ 838.346455][ C1] ? tipc_bearer_xmit_skb+0xa9/0x400 [ 838.346477][ C1] ? __pfx_tipc_bearer_xmit_skb+0x10/0x10 [ 838.346508][ C1] __tipc_nl_bearer_enable+0x10ec/0x1480 [ 838.346534][ C1] ? __pfx___mutex_trylock_common+0x10/0x10 [ 838.346561][ C1] ? __pfx___tipc_nl_bearer_enable+0x10/0x10 [ 838.346590][ C1] ? __asan_memcpy+0x40/0x70 [ 838.346608][ C1] ? nla_put+0xd0/0x150 [ 838.346635][ C1] ? tipc_nl_compat_bearer_enable+0x35f/0x500 [ 838.346658][ C1] ? __pfx_tipc_nl_compat_bearer_enable+0x10/0x10 [ 838.346680][ C1] ? __nla_parse+0x40/0x60 [ 838.346706][ C1] tipc_nl_compat_doit+0x407/0x650 [ 838.346728][ C1] ? __pfx_tipc_nl_compat_doit+0x10/0x10 [ 838.346752][ C1] ? bpf_lsm_capable+0x9/0x20 [ 838.346769][ C1] ? security_capable+0x7e/0x2c0 [ 838.346795][ C1] tipc_nl_compat_recv+0x8d3/0xcf0 [ 838.346813][ C1] ? lock_acquire+0x115/0x350 [ 838.346832][ C1] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 838.346857][ C1] ? __mutex_trylock_common+0x15f/0x270 [ 838.346882][ C1] ? __pfx___tipc_nl_bearer_enable+0x10/0x10 [ 838.346905][ C1] ? __pfx_tipc_nl_compat_bearer_enable+0x10/0x10 [ 838.346925][ C1] ? __pfx___mutex_trylock_common+0x10/0x10 [ 838.346952][ C1] ? trace_contention_end+0x3d/0x140 [ 838.346975][ C1] ? genl_family_rcv_msg_attrs_parse+0xe9/0x2f0 [ 838.347005][ C1] genl_family_rcv_msg_doit+0x233/0x340 [ 838.347033][ C1] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 838.347063][ C1] ? __lock_acquire+0x747/0x2de0 [ 838.347087][ C1] genl_rcv_msg+0x614/0x7a0 [ 838.347112][ C1] ? __pfx_genl_rcv_msg+0x10/0x10 [ 838.347135][ C1] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 838.347160][ C1] netlink_rcv_skb+0x226/0x4a0 [ 838.347190][ C1] ? __pfx_genl_rcv_msg+0x10/0x10 [ 838.347213][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 838.347250][ C1] ? down_read+0x2be/0x330 [ 838.347277][ C1] genl_rcv+0x28/0x40 [ 838.347298][ C1] netlink_unicast+0x7bd/0x940 [ 838.347331][ C1] netlink_sendmsg+0x813/0xb40 [ 838.347353][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 838.347376][ C1] ? apparmor_socket_sendmsg+0x98/0x360 [ 838.347398][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 838.347416][ C1] sock_sendmsg_nosec+0x13a/0x180 [ 838.347437][ C1] ____sys_sendmsg+0x54e/0x850 [ 838.347466][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 838.347496][ C1] ? __pfx_futex_wake_mark+0x10/0x10 [ 838.347527][ C1] ___sys_sendmsg+0x2a5/0x360 [ 838.347552][ C1] ? __lock_acquire+0x747/0x2de0 [ 838.347573][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 838.347601][ C1] ? futex_wait+0x2a2/0x390 [ 838.347643][ C1] ? __fget_files+0x2a/0x420 [ 838.347669][ C1] ? __fget_files+0x3a2/0x420 [ 838.347699][ C1] __sys_sendmsg+0x177/0x240 [ 838.347726][ C1] ? __pfx___sys_sendmsg+0x10/0x10 [ 838.347761][ C1] __do_fast_syscall_32+0x27a/0x6a0 [ 838.347788][ C1] ? do_fast_syscall_32+0x33/0x70 [ 838.347813][ C1] ? asm_int80_emulation+0x1a/0x20 [ 838.347831][ C1] ? do_int80_emulation+0x299/0x500 [ 838.347862][ C1] ? trace_irq_disable+0x3b/0x140 [ 838.347884][ C1] do_fast_syscall_32+0x33/0x70 [ 838.347910][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 838.347933][ C1] RIP: 0023:0xf7f130ec [ 838.347949][ C1] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 838.347964][ C1] RSP: 002b:00000000f53d650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 838.347983][ C1] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00000000800002c0 [ 838.347997][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 838.348008][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 838.348020][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 838.348032][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 838.348052][ C1] [ 838.348591][ C0] Kernel panic - not syncing: softlockup: hung tasks [ 839.617382][ C0] CPU: 0 UID: 0 PID: 15303 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 839.628596][ C0] Tainted: [L]=SOFTLOCKUP [ 839.632906][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 839.643143][ C0] Call Trace: [ 839.646427][ C0] [ 839.649789][ C0] vpanic+0x56d/0xa60 [ 839.654558][ C0] ? __pfx_vpanic+0x10/0x10 [ 839.659063][ C0] panic+0xc5/0xd0 [ 839.662777][ C0] ? __pfx_panic+0x10/0x10 [ 839.667195][ C0] ? printk_trigger_flush+0x13d/0x180 [ 839.672664][ C0] watchdog_timer_fn+0x785/0x790 [ 839.677615][ C0] ? __pfx_watchdog_timer_fn+0x10/0x10 [ 839.683099][ C0] __hrtimer_run_queues+0x371/0xa10 [ 839.688410][ C0] hrtimer_interrupt+0x4cd/0xaa0 [ 839.693376][ C0] __sysvec_apic_timer_interrupt+0x102/0x430 [ 839.699350][ C0] sysvec_apic_timer_interrupt+0x52/0xc0 [ 839.704987][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 839.710959][ C0] RIP: 0010:kasan_check_range+0x97/0x2c0 [ 839.716583][ C0] Code: 00 fc ff df 4d 8d 34 19 4d 89 f4 4d 29 dc 49 83 fc 10 7f 29 4d 85 e4 0f 84 3d 01 00 00 4c 89 cb 48 f7 d3 4c 01 fb 41 80 3b 00 <0f> 85 9e 01 00 00 49 ff c3 48 ff c3 75 ee e9 1d 01 00 00 44 89 dd [ 839.736190][ C0] RSP: 0018:ffffc900000075c0 EFLAGS: 00000246 [ 839.742285][ C0] RAX: 0000607edaf66701 RBX: fffffffffffffffe RCX: ffffffff89efc4ee [ 839.750281][ C0] RDX: 0000000000000000 RSI: 0000000000000010 RDI: ffff88807eb72e48 [ 839.758286][ C0] RBP: ffff88807eb72e38 R08: ffff88807eb72e57 R09: 1ffff1100fd6e5ca [ 839.766277][ C0] R10: dffffc0000000000 R11: ffffed100fd6e5c9 R12: 0000000000000002 [ 839.774342][ C0] R13: 1ffff1100fd6e5ce R14: ffffed100fd6e5cb R15: 1ffff1100fd6e5c9 [ 839.782412][ C0] ? basic_classify+0x16e/0x2d0 [ 839.787285][ C0] ? basic_classify+0x16e/0x2d0 [ 839.792357][ C0] __asan_memcpy+0x29/0x70 [ 839.796789][ C0] basic_classify+0x16e/0x2d0 [ 839.801484][ C0] tcf_classify+0x43d/0x1160 [ 839.806074][ C0] hfsc_enqueue+0x322/0xf80 [ 839.810604][ C0] ? __pfx_hfsc_enqueue+0x10/0x10 [ 839.815629][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 839.820687][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 839.826064][ C0] dev_qdisc_enqueue+0x4e/0x260 [ 839.830912][ C0] ? __dev_queue_xmit+0x1b2b/0x3820 [ 839.836116][ C0] __dev_queue_xmit+0x1b45/0x3820 [ 839.841154][ C0] ? ___neigh_create+0x1cd2/0x22b0 [ 839.846276][ C0] ? __dev_queue_xmit+0x29b/0x3820 [ 839.851403][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 839.856612][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 839.862061][ C0] ? neigh_resolve_output+0x428/0x720 [ 839.867531][ C0] ? eth_header+0x11b/0x200 [ 839.872042][ C0] ? __asan_memcpy+0x40/0x70 [ 839.876660][ C0] ? ip_finish_output2+0x3de/0x10b0 [ 839.881868][ C0] ip_finish_output2+0xc4b/0x10b0 [ 839.886906][ C0] ? ip_skb_dst_mtu+0x811/0xa50 [ 839.891786][ C0] ? ip_finish_output2+0x3de/0x10b0 [ 839.896978][ C0] ? ip_finish_output+0x40b/0x530 [ 839.902003][ C0] ip_output+0x29f/0x450 [ 839.906238][ C0] ? ip_output+0x5a/0x450 [ 839.910574][ C0] igmp_ifc_timer_expire+0xba5/0x10e0 [ 839.915940][ C0] ? igmp_ifc_timer_expire+0x28/0x10e0 [ 839.921421][ C0] call_timer_fn+0x18d/0x5f0 [ 839.926013][ C0] ? __pfx_igmp_ifc_timer_expire+0x10/0x10 [ 839.931811][ C0] ? call_timer_fn+0xd5/0x5f0 [ 839.936487][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 839.941747][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 839.947518][ C0] ? __pfx_igmp_ifc_timer_expire+0x10/0x10 [ 839.953425][ C0] __run_timer_base+0x652/0x8b0 [ 839.958284][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 839.963655][ C0] ? ktime_get+0x1f5/0x220 [ 839.968075][ C0] ? lapic_next_event+0x11/0x20 [ 839.972936][ C0] run_timer_softirq+0xb7/0x170 [ 839.977793][ C0] handle_softirqs+0x226/0x860 [ 839.982583][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 839.987371][ C0] __irq_exit_rcu+0xcb/0x220 [ 839.991982][ C0] irq_exit_rcu+0x9/0x30 [ 839.996214][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 840.001854][ C0] [ 840.004775][ C0] [ 840.007695][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 840.013666][ C0] RIP: 0010:vsnprintf+0x837/0xef0 [ 840.018679][ C0] Code: 89 e8 48 c1 e8 03 42 80 3c 30 00 74 08 4c 89 ef e8 0e 17 56 f6 4c 89 e9 4d 8b 6d 00 49 8d 45 08 48 89 01 4c 89 e8 48 c1 e8 03 <42> 80 3c 30 00 74 08 4c 89 ef e8 ea 16 56 f6 49 8b 5d 00 e9 b9 00 [ 840.038324][ C0] RSP: 0018:ffffc9000cb278a8 EFLAGS: 00000a06 [ 840.044388][ C0] RAX: 1ffff92001964f2d RBX: 0000000000000020 RCX: ffff888079af1f40 [ 840.052359][ C0] RDX: 0000000000000000 RSI: 0000000000000018 RDI: 0000000000000029 [ 840.060328][ C0] RBP: ffffc9000cb27ac0 R08: ffff888079af1f40 R09: 0000000000000008 [ 840.068290][ C0] R10: 0000000000000007 R11: 0000000000000000 R12: ffffc9000cb27a81 [ 840.076253][ C0] R13: ffffc9000cb27968 R14: dffffc0000000000 R15: ffffffff8c647564 [ 840.084255][ C0] ? vsnprintf+0x1a3/0xef0 [ 840.088705][ C0] snprintf+0xe8/0x140 [ 840.092768][ C0] ? tomoyo_check_acl+0x2df/0x400 [ 840.097789][ C0] ? __pfx_snprintf+0x10/0x10 [ 840.102460][ C0] ? tomoyo_check_acl+0x386/0x400 [ 840.107487][ C0] tomoyo_path_number_perm+0x39d/0x5f0 [ 840.112937][ C0] ? tomoyo_path_number_perm+0x219/0x5f0 [ 840.118589][ C0] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 840.124576][ C0] ? d_splice_alias+0x12/0x30 [ 840.129314][ C0] ? __pfx_current_check_access_path+0x10/0x10 [ 840.135484][ C0] ? _raw_spin_unlock+0x28/0x50 [ 840.140325][ C0] ? d_alloc+0x144/0x190 [ 840.144566][ C0] ? lookup_one_qstr_excl+0x1d4/0x360 [ 840.149962][ C0] tomoyo_path_mkdir+0xb0/0xf0 [ 840.154737][ C0] ? __pfx_tomoyo_path_mkdir+0x10/0x10 [ 840.160196][ C0] ? __pfx_filename_create+0x10/0x10 [ 840.165493][ C0] security_path_mkdir+0x169/0x350 [ 840.170623][ C0] filename_mkdirat+0x200/0x510 [ 840.175475][ C0] ? __pfx_filename_mkdirat+0x10/0x10 [ 840.180843][ C0] ? strncpy_from_user+0x150/0x2c0 [ 840.185957][ C0] ? do_getname+0x151/0x250 [ 840.190462][ C0] __se_sys_mkdirat+0x35/0x150 [ 840.195219][ C0] __do_fast_syscall_32+0x27a/0x6a0 [ 840.200409][ C0] ? do_fast_syscall_32+0x33/0x70 [ 840.205425][ C0] ? asm_int80_emulation+0x1a/0x20 [ 840.210548][ C0] ? do_int80_emulation+0x299/0x500 [ 840.215744][ C0] do_fast_syscall_32+0x33/0x70 [ 840.220589][ C0] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 840.226927][ C0] RIP: 0023:0xf7fd30ec [ 840.231005][ C0] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 840.250617][ C0] RSP: 002b:00000000f75bff48 EFLAGS: 00000206 ORIG_RAX: 0000000000000128 [ 840.259031][ C0] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f72a1c88 [ 840.267013][ C0] RDX: 00000000000001ff RSI: 00000000f72a1c88 RDI: 0000000030000000 [ 840.275025][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 840.283004][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 840.290985][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 840.298971][ C0] [ 840.302189][ C0] Kernel Offset: disabled [ 840.306549][ C0] Rebooting in 86400 seconds..