last executing test programs: 5.146364595s ago: executing program 1 (id=309): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="af", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000b80)="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", 0x38e}, {&(0x7f00000003c0)="439e9c", 0x3}], 0x2}}], 0x2, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x8, 0x10208, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x6700000000000000) close_range(r0, 0xffffffffffffffff, 0x0) 5.006033015s ago: executing program 1 (id=310): ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000080)=0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000000a00)) inotify_init1(0x800) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, 0x0, &(0x7f0000000340)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0xd, 0x8563, 0x5}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x300, 0x0, 0x200040d4}, 0x24044040) 4.863670283s ago: executing program 1 (id=311): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000040)={'nat\x00', 0x0, 0x0, 0x0, [0x8, 0xd, 0x4, 0x5, 0x3, 0x9], 0x0, &(0x7f0000000000)=[{}, {}, {}]}, 0x50) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) r1 = syz_usb_connect$uac3(0x1, 0xda, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x17cc, 0x815, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc8, 0x3, 0x1, 0x6, 0xd0, 0x3, {0x8, 0xb, 0x0, 0x1, 0x1, 0x22, 0x30, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x3a, 0xb}, [@extension_unit={0x19, 0x24, 0xa, 0x1, 0x3, [0x1, 0x1, 0x0, 0x0, 0x1]}, @power_domain={0x10, 0x24, 0x10, 0x8, 0x400, 0x5, 0x6, "a829bade181f2e"}, @selector_unit={0x7, 0x24, 0xc, 0x57, 0x2, "2be5"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xd, 0x4, 0x80, 0xf5, "87"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x0, 0x1, 0x2, 0x2, "fa8e2e"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x3, 0x6, 0x5, {0xa, 0x25, 0x25, 0x3649, 0xa, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7, 0x1, 0xe9, 0x3}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x7, 0x2, 0x3, 0x30, 'Fs', "c61d"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x40, 0xa, 0x2, {0xa, 0x25, 0x25, 0x10001, 0x7, 0x6}}}}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x110, 0xf2, 0xc, 0xd, 0x10, 0xc}, 0x3b, &(0x7f0000000200)={0x5, 0xf, 0x3b, 0x4, [@wireless={0xb, 0x10, 0x1, 0x8, 0x92, 0x81, 0x3, 0x6, 0x2d}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x5, 0x1, 0xa5ca}, @ssp_cap={0x10, 0x10, 0xa, 0x7, 0x1, 0x9, 0x0, 0x5, [0xffc00f]}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "c80cbd7417e3f692d3de21eb7262f3bf"}]}, 0x8, [{0xfa, &(0x7f0000000240)=@string={0xfa, 0x3, "76727a4ee848f04c1d99eb4097e132d973dd0df45d5d02f0c7ee5de7eed591b063e5e4b896a53484cff0604273010f49327b694ede6ff7933822e4397d65ec98fc734e484b94c70069f507929ea9b3625183131e95d2697b7d522311aea3ef479497644f36ee13def55ccbb0e6bcadd337bcafb84cb941d6c50c7eb36f9b82fa4b5fbb0a6faa44f845ddfc7f5e1a86b964f613fcbb7efa7f9f205b77a2a425e9b1f65c4b638fb6558a12d92279497b0335aca90399630ad5e2df822fecf9bdf789199be87988a70d167def034d6b4da4b91c6e6c5039de9bf5e1dac82ec094534a93c2cc2e6af19a2b8ee73f1717af906068bc6d49891c09"}}, {0x8b, &(0x7f0000000340)=@string={0x8b, 0x3, "5a3c7f92a90d1a4a28c1d4759fd647b47d823dfaedfd443c6ef6052fe13ae9649303cabcdc2a967278b1260039e9e9ec1616899a63d2dc2de79aa70d7cb95d2a8f616475684ca6dbdbc5ece3843f9a02f6f6bc59147116ddbfd9f35736e64f931245831292b9a446bd839ac09ee89d27fcaec17fbde4a02366edc477ef3916b4a66de01fb9ddf6fc4d"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x100a}}, {0xbf, &(0x7f0000000440)=@string={0xbf, 0x3, "a2c810cf4abb5176145cba376b2c8c4456c7fdf99682e3573a6360dae461b4202570ee8f4a3135a8a5d05622e9fb6c0eb8de0a3557596e9e3eafa0f20db9a63fb3a59874a26edc4a303dd31ed35e3807563ba373bb5780aa532c024c708ac52f340afba22bc003a0c1221c5c2a3563baf49fbd25794abf5e1bddea7fddd6131d5c1a253a825528b71cb743685157b9954b6893b124c43cf1cbb874e15f67d4dceb3039522d1b82ce837e9a317b7577185ec052b26b255649b6143d1882"}}, {0xe5, &(0x7f0000000500)=@string={0xe5, 0x3, "486bfb1f85fcc6384fd6447e90419ead32cc8fbfff25af2611f02126e674441ef7ef9fad02a4c07362affcd08bfc8d5e2464a19d36c89a729468507b8ab6b5b7129b232cd46b458c3da92e2257aa66269f3b5e18964f19777d52c2c909d640a7a84b10172c554cd3b7b683eb9305a467ba0752de801f48879a2c21d3d0b81ae1f09ab9eda313af7404bc1fa67d54283afe04547e11192143751bd09e3179bfc0ba31b67077d57b2af34c5dc4132eea19e50157ee8f4fbaf64b34f57ea37edebd2a4c672912adca33fdbc6cafc9cfd014e534c022fcddcfc43335336c9fc2073a048501"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x448}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x3c01}}]}) syz_usb_control_io(r1, &(0x7f00000008c0)={0x18, &(0x7f0000000740)={0x40, 0x21, 0x6b, {0x6b, 0x30, "b5ae72535a025944dda66897225686464846d13bd7261df9fc127e989b2f11cc2df52bdf074cda85b9ea3f00fa22851226b3cac1ad4b98e9e6a28528c1f741cf84d170a8ee4dc57b0beb1b2b205e41fe07995828117c4431194d66c03b10523cd7704271ad63a155dc"}}, &(0x7f00000007c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x80c}}, &(0x7f0000000800)={0x0, 0xf, 0x1c, {0x5, 0xf, 0x1c, 0x2, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "c623259fa876456ee4bf77d443d67a3e"}]}}, &(0x7f0000000840)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x80, 0x81, 0x3, "fdad87fc", "87beb4c8"}}, &(0x7f0000000880)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x24, 0x4, 0xff, 0x55, 0xa9, 0x0, 0x1000}}}, &(0x7f0000000dc0)={0x44, &(0x7f0000000900)={0x40, 0x14, 0xc7, "510891a5a61942dd7841599f2051478f0d09d96fbd5c742bd8f0bc23fc4796850b37b6d44d81c767e4a159df13ca4f3ddadf2f57fa0283bc5cd8db6fff63897f407875b2915ee72c4d53d5091fc1e354e9ab415a96d6703a4d4fa194f436495bdec70e61ff00467b73636625ce8884e506d02e64106364971c7ec7fbced2a7ff55fbd572b7fb998ccbcf526287965462ce8a88ca206e5142d90ff1fb962252bc6e71dfa7759feb88c73cdf3ee0e07827c750cd8c2ff5aad4befa6420802854e0eb10ec0f873196"}, &(0x7f0000000a00)={0x0, 0xa, 0x1}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0xa9}, &(0x7f0000000a80)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000ac0)={0x20, 0x0, 0x4, {0x80, 0x20}}, &(0x7f0000000b00)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000b40)={0x40, 0x9, 0x1, 0x40}, &(0x7f0000000b80)={0x40, 0xb, 0x2, "481f"}, &(0x7f0000000bc0)={0x40, 0xf, 0x2, 0x54}, &(0x7f0000000c00)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000c40)={0x40, 0x17, 0x6}, &(0x7f0000000c80)={0x40, 0x19, 0x2, "93ec"}, &(0x7f0000000cc0)={0x40, 0x1a, 0x2, 0x7f}, &(0x7f0000000d00)={0x40, 0x1c, 0x1, 0xff}, &(0x7f0000000d40)={0x40, 0x1e, 0x1, 0x3}, &(0x7f0000000d80)={0x40, 0x21, 0x1, 0x3}}) (async) getpeername$inet(r0, &(0x7f0000000e40), &(0x7f0000000e80)=0x10) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffff9c, 0xc0406618, &(0x7f0000000ec0)={@desc={0x1, 0x0, @desc1}}) (async) r2 = socket$inet(0x2, 0x6, 0x0) (async) syz_usb_connect$uac3(0x4, 0xad, &(0x7f0000000f00)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x1235, 0x8012, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9b, 0x3, 0x1, 0xf1, 0x30, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x23, 0x30, 0x40}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x23, 0xe}, [@cluster_info_segment={0x6, 0x20, 0x7, 0xb5, 0x2}, @output_terminal={0x13, 0x24, 0x3, 0x6, 0x405, 0x3, 0x5, 0x4, 0x1, 0x1, 0x0, 0xfffe}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x9, 0x7f, 0x0, {0xa, 0x25, 0x25, 0x0, 0x3f, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x6, 0x7f, 0x8, 0x8}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x0, 0x1, 0x3a, 0x1, "", "4c5ce7"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x5, 0x8, 0x5, {0xa, 0x25, 0x25, 0xc3, 0x2}}}}}}}}]}}, &(0x7f0000001580)={0xa, &(0x7f0000000fc0)={0xa, 0x6, 0x250, 0x0, 0x3, 0x5, 0xff, 0x3}, 0xfb, &(0x7f0000001000)={0x5, 0xf, 0xfb, 0x6, [@generic={0xc6, 0x10, 0x3, "d87ce31c74a01d0971ba874b7dafda49795bb7c36a7f29da0fb2ae6563b957827319d54631bc9039336ed5961ba76c1d0cf23288ddb9cfd120a78fcbf98fe1350fd43876d24845ebf6bc7b98f9df734f7f0130e8b22138c6d16a82dac76116a576c988e9ea10791b0553feb3c9d1ec23ed14eef04b57070c3f5dceefb8663f84079b3636af6f926f216d48a8413786cd52bff455315bdc28088fe4cb896f67ec6a173b0b8fb556778f1fad44d8157b2294c65257fd62ec89e45a0d4e1d4b5cf5021abc"}, @ptm_cap={0x3}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x68, 0x8, 0x40, 0x101, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "c5ea1c72a6f40a460f6dcbb6bf08e061"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x40, 0xb, 0x0, 0x4, 0xbf}]}, 0xa, [{0x23, &(0x7f0000001100)=@string={0x23, 0x3, "fec0fe410042e3a3685e4654b31bbaad2044f17413a3c60f954eeb86da7beec4df"}}, {0x2f, &(0x7f0000001140)=@string={0x2f, 0x3, "d773cf741ad6ac8996f9cfdc6be995b8f3c91b1e56e78f956fbfda32498eb50659931fab9bbf02eacc40410f82"}}, {0x6b, &(0x7f0000001180)=@string={0x6b, 0x3, "acf14ad0b0460f82eb19f3dc87f1ae1a1cf50511ed1c2fdf5dfb216544242c801af7d5da893c71779d6c8ffaa8ad16220ca4ca4282aef31bf2010658bb528aad89dee04d696cc326650671bccb8252e4cdc1e86b3b2d7c2529f2b029a44aaeaf0bffedf61e0a7dc4d4"}}, {0x4, &(0x7f0000001200)=@lang_id={0x4, 0x3, 0x419}}, {0x4, &(0x7f0000001240)=@lang_id={0x4, 0x3, 0x2c01}}, {0x4, &(0x7f0000001280)=@lang_id={0x4, 0x3, 0x843}}, {0xd1, &(0x7f00000012c0)=@string={0xd1, 0x3, "dd408d5ecadb24c1ee6a7200968dde82785de7efda7feb1c1cbafe84f33259cf6e31051b76db1e7cadac903bd285b41601276ab0f42423681a9110e7f487db8a263d13d8211cc2ecc8c47785580767145ddc63663557e14c2858afaff3e7709124486710e2767fb7b463f16fb6349b4731f74244d522948acc02cedc9fc4db3cd4f371bf625ce97b9f85396b7e0865c11bf158d5db7c7afb28eb5c2924ec643bf107aa97c8d83d6f70e4455415333b2f9cabf4bf4b3fff8335707136000d1d1ee648d6ada6e4c4ed2945cf417af9e1"}}, {0x4f, &(0x7f00000013c0)=@string={0x4f, 0x3, "b2decb45f5c466b989943c53578ca976256661787d7c633e03e067db16ffadee494e4413e14b2ae9ca0035eed38ff487492ce06c19ca0dd62816cf44b4c29b9bace82681b6f1842f190e827b28"}}, {0x4, &(0x7f0000001440)=@lang_id={0x4, 0x3, 0x801}}, {0xd6, &(0x7f0000001480)=@string={0xd6, 0x3, "475ae97e04d9302e7c1a607c4bb55b04e9768521b10492c92b5deefb1ae1f4ee99ba71f8fdcd321e1e30898da287cc58e7c0b9789f64f09fff93219ea1d19d5afed92f355bb037c62c675df3560a11839425c624cff15dd2439521d68a0ee57245fe0b30eff0ad1fdfa74d5d8f434c4800cdf4ec9b97df1cb59e5efa2ef4c2cff998073be77a9ea367a543260529d70f70338a23be321ab39a7e888d383cc90555aca8dc21d11417efb6673e34623bf9ee6c43b197339c4a25ccd1a8cde77280d67e994e4173bc88d32188c6bda2a9e458fab641"}}]}) (async) r3 = syz_open_dev$vcsn(&(0x7f0000001600), 0x7, 0x182) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001740)={@ifindex, 0x26, 0x0, 0x10, &(0x7f0000001640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000001680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0], &(0x7f0000001700)=[0x0, 0x0, 0x0], 0x0}, 0x40) (async) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000017c0)={0x10001, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001780)={@fallback=r2, r3, 0xe, 0x28, 0x0, @void, @void, @void, @value=r5, r4}, 0x20) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000001800)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000001980)={r6, 0x0, 0x3b, 0x0, &(0x7f0000001840)="679af5daf92189326e02c8ce3ba293162106c8a45067e251c8fffd147496eb8652dda4b6b66a292b834f8b8019e65cf88af6998e430c7bbb1b0176", 0x0, 0xe11, 0x0, 0xca, 0x0, &(0x7f0000001880)="30e87ccf93907774d83107c36ecdba02542e5fa2ef0978c6a0c8fa932911966d3bb98a56eb0b85601191f9aa03f7be17942a52ec5912bb648b3913ae2cc46259138db2c047302af43e385b7df7adcfb341eee4aa765b38a0ccf94fa8b2f3cdfc392f4e7a60cc655f37310875accaf4bbae215edf4bfea144473bf08cb9e340cdba6ea615eb13531274886eef4f74dc242b369911d426d8e620c4a8697c44a17168416bf5a7321aa4ee8df18084dc9cec76d7ae77979048c701c72fc0fceb2f5a8e69eeccde03ccafe461", 0x0, 0x2, 0x0, 0x1}, 0x4c) (async) getsockopt$SO_NETNS_COOKIE(r0, 0x1, 0x47, &(0x7f0000001a00), &(0x7f0000001a40)=0x8) (async) openat$sysctl(0xffffff9c, &(0x7f0000001a80)='/proc/sys/net/ipv4/tcp_timestamps\x00', 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81e8943c, &(0x7f0000001ac0)) (async) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000001cc0)={'ipvs\x00'}, &(0x7f0000001d00)=0x1e) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000001d40)=@x86={0x9, 0x1, 0x5, 0x0, 0x5, 0x4, 0xef, 0x3, 0x8, 0x50, 0xd, 0x6, 0x0, 0x6, 0x200, 0x9, 0x3, 0x4, 0x30, '\x00', 0x0, 0x2000000000000}) (async) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000002f40)={0x1, 0x0, &(0x7f0000001d80)=""/173, &(0x7f0000001e40)=""/4096, &(0x7f0000002e40)=""/228, 0x3000}) ioctl$VIDIOC_TRY_FMT(r3, 0xc0cc5640, &(0x7f0000002f80)={0x8, @raw_data="715f24e3345775bdce8c9371d742562936c970b02d136079d5c497e80409a3b5d168e4817aba53122b9d1a2af13c284b26514575a73bb5070983bee657d48d2dac81c4fb3a8306e6a768b603cb827a9b4a7e8375f0d17c844ecaca2083336c2c594f737ef008cfda354bee13b2d857c713b507366a4708c9f397805502aaedd4930db07459a0faf09175a859889cc28cbb1056736c5dd4eafaf8e4db4142a87a68e0fc4af77ebf41144cd2f7126340db8b74f3ef6a56967421bf8722cd6c08f048b1a1040520de5b"}) (async) write$binfmt_misc(r3, &(0x7f0000003080)="d6169136342344515fec3c", 0xb) (async) r7 = getpid() sched_getaffinity(r7, 0x8, &(0x7f00000030c0)) r8 = openat$vicodec1(0xffffff9c, &(0x7f0000003100), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r8, 0xc040564a, &(0x7f0000003140)={0x2, 0x0, 0x0, 0x2, 0x8, 0x400, 0x3, 0x1}) (async) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) lstat(&(0x7f0000003180)='./file0\x00', &(0x7f00000031c0)) connect$tipc(0xffffffffffffffff, &(0x7f0000003240)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x2}}, 0x10) 3.847464047s ago: executing program 3 (id=317): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d0009000d0000000005000000", 0x29}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001800010400000000000000000a000000fe030001000000000800040001000000080006006400000006001500070000001400168008000100060000000800040001020304"], 0x48}, 0x1, 0x0, 0x0, 0xffffffff}, 0x0) 3.641616985s ago: executing program 3 (id=318): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ptrace(0x10, 0x0) ptrace$setregset(0x4205, 0x0, 0x2, &(0x7f0000000140)={0x0, 0xfffffddc}) bind$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0x14) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x3}, 0x8) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x0, &(0x7f00000002c0)}) 3.623284884s ago: executing program 3 (id=320): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="af", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000b80)="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", 0x38e}, {&(0x7f00000003c0)="439e9c", 0x3}], 0x2}}], 0x2, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x8, 0x10208, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x6700000000000000) close_range(r0, 0xffffffffffffffff, 0x0) 3.495184533s ago: executing program 3 (id=321): ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000080)=0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000000a00)) inotify_init1(0x800) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, 0x0, &(0x7f0000000340)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0xd, 0x8563, 0x5}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x300, 0x0, 0x200040d4}, 0x24044040) 3.333935199s ago: executing program 3 (id=323): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x18, &(0x7f0000000400)=@req3={0xc, 0x47, 0x8004, 0x4, 0x3, 0xfffffffe, 0xfffe0}, 0x1c) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x8000) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000008c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000240)={0x50, r9, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x8000, 0x30}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}]]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x40048a4) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000a40)={0x44, &(0x7f00000007c0)={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.228701704s ago: executing program 2 (id=324): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000440)={0x24, &(0x7f0000000240)={0x60, 0xd, 0x2, {0x2, 0xa}}, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x406}}, 0x0, &(0x7f0000000400)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0xfb, 0x1, {0x22, 0xd00}}}}, &(0x7f0000000700)={0x2c, &(0x7f0000000500)={0x20, 0x10, 0x89, "69b720d553f4f122fd0ee38582b97dade2d890db7f71139db4005e7d92f891e1c793060a6b156bc66e7fce38d9226391c21333807f4bdf3501379cd4dffdbcbaba0036c5d2711e391d522f9b97c10b69a5e97b39fa2fe652aa439f9789b440d855258ed6984b9858929693594263bdb622486d795b452f7d7d171b054c61478c783076fd6c863499cf"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x4}, 0x0, &(0x7f00000006c0)={0x20, 0x3, 0x1, 0xff}}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="200e06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f00000001c0), 0x78b5, 0x80) recvmmsg(0xffffffffffffffff, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f0000003440)}, 0x3}], 0x1, 0x2, 0x0) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000040)={&(0x7f0000000600)=[{0xcf, 0xc000, 0x1, &(0x7f0000000200)='f'}], 0x1}) r2 = syz_open_dev$loop(&(0x7f0000000140), 0xb7c8, 0xa8182) r3 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r5, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, 0x0, 0xf3a, 0x0) splice(r4, 0x0, r8, 0x0, 0x80, 0x6) write(r8, &(0x7f0000003300)="ac", 0x1) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xf603594}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0) write(r6, 0x0, 0x0) setresgid(0x0, 0x0, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) 2.571486489s ago: executing program 0 (id=326): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, 0x20) 2.490802579s ago: executing program 0 (id=327): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25cfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=@newtfilter={0x478, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r4, {0xffff, 0xfff3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x448, 0x2, [@TCA_BASIC_POLICE={0x444, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x10, 0xd, 0xd36, 0x4, 0x6bc, 0x80002, 0x7, 0xf, 0x800, 0x7, 0x7, 0xe7f, 0xffff, 0x7, 0x5, 0x1, 0xffffffff, 0x4, 0x909e, 0x89cd, 0xffffffff, 0x8, 0x9, 0x4, 0x5, 0x2, 0x8, 0x4, 0xf23, 0x3ff, 0x9, 0xa, 0x5, 0x0, 0xff, 0x7f, 0x4, 0x0, 0x3, 0x382, 0x40, 0x80, 0x8, 0x2, 0x4000005, 0x20002, 0x9, 0x4f, 0x4, 0x0, 0x7, 0x80000000, 0x80000001, 0x8000, 0x9e, 0xe4, 0x200000, 0x7fffffff, 0x5a, 0x9, 0xfffffff4, 0x4, 0x6, 0x6, 0x459, 0x2, 0xff, 0x14000000, 0x5f72, 0x3, 0x8, 0x7, 0x5, 0x0, 0x6, 0x0, 0x6, 0x1000, 0x5, 0x101, 0x2, 0x5, 0x7, 0x9, 0x1000, 0xb, 0x3, 0xfbb4, 0x4a, 0x0, 0x7, 0x8, 0x9, 0x0, 0x5, 0x101, 0x0, 0x3ff, 0x5, 0x800, 0x7fffffff, 0x2, 0x1, 0x3, 0x4, 0x101, 0x5, 0x19, 0x6c, 0x4000009, 0x4, 0xceb6, 0x5, 0x7, 0x53c0, 0x6, 0x5, 0x9, 0x1, 0x9, 0x2, 0x7, 0x8, 0x3, 0x3ff, 0x18, 0x6, 0xffffff7b, 0x15ef7157, 0xfffffffc, 0x5, 0x2, 0x7, 0x7fffffff, 0xdb5, 0x1000, 0x800, 0x8, 0x80000000, 0x100, 0x7, 0x1, 0x40, 0x1000, 0x3, 0xfffffffb, 0x5270e9b, 0x5, 0x7f, 0xb, 0x40, 0x9, 0x3, 0x0, 0x9, 0xb, 0x7, 0x1, 0x7, 0x3, 0x9, 0x0, 0xfe23, 0x6, 0x5, 0x8, 0xffffff7f, 0x3, 0xd, 0x80, 0x4, 0x9, 0x4, 0xff, 0x8001, 0x79, 0x40, 0x72e, 0x5c, 0x1, 0xb0, 0x6, 0x8, 0x9, 0x0, 0x80000001, 0x8, 0x4, 0x4, 0x200, 0x1, 0x1, 0x59ac, 0xebd7, 0x7, 0x10008, 0x4, 0x100, 0x0, 0x7, 0x138, 0x1, 0x8, 0xcb18, 0x0, 0xb, 0x5, 0xe489, 0x8, 0x5, 0x6, 0x56, 0x1800000, 0x80000000, 0xc4800000, 0x4251, 0x7fff, 0x8001, 0x101, 0x7, 0x5, 0x3, 0x4, 0x371, 0xaa67, 0x2, 0x0, 0x10, 0x8, 0x5a5, 0x400, 0x0, 0xfffeffff, 0xf, 0x8, 0x9, 0xc2b3, 0x0, 0x7fffffff, 0xfffffffa, 0x9, 0x3ff, 0x6, 0x7, 0x5, 0x7, 0x4, 0xc, 0x9, 0x1, 0x0, 0x10000, 0x4, 0x4, 0x8]}, @TCA_POLICE_TBF={0x30, 0x1, {0x4, 0x4, 0x6, 0x4d2, 0x4000000, {0x8, 0x2, 0xa, 0x8, 0x8, 0xc}, {0x4, 0x0, 0xa380, 0x7ff, 0x5, 0x7d487c2b}, 0x9, 0x15f}}]}]}}]}, 0x478}, 0x1, 0x0, 0x0, 0x10}, 0x8080) (fail_nth: 3) 2.251745349s ago: executing program 0 (id=328): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x10, 0xfffffffe, 0xae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1ee, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x8000000, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)=',', 0x1}], 0x1, 0x0, 0x0, 0x86dd}, 0x40045) 2.251503181s ago: executing program 4 (id=329): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)={0xd8, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x20}}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x89}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2a}}, {0x14, 0x4, @mcast1}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x4, 0x1, 0x86}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x34}]}, 0xd8}, 0x1, 0x0, 0x0, 0x24000801}, 0xffffff7f) 2.184492036s ago: executing program 4 (id=330): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ptrace(0x10, 0x0) ptrace$setregset(0x4205, 0x0, 0x2, &(0x7f0000000140)={0x0, 0xfffffddc}) bind$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0x14) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x3}, 0x8) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x0, &(0x7f00000002c0)}) 2.070442121s ago: executing program 4 (id=331): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x6, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc0f8565c, &(0x7f0000000200)={0x46f, 0x6, 0x4, {0x2, @pix_mp={0x0, 0xe8, 0x3447504d, 0x4, 0x4, [{0x5, 0x56}, {0x75, 0x9}, {0x7, 0x9}, {0x80, 0x3}, {0x3, 0x80}, {0x2, 0xfffff943}, {0x45f, 0x5}, {0xfffffff9}], 0xd, 0x5, 0x1, 0x1}}, 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$thread_pidfd(0xffffff9c, &(0x7f0000000300), 0x252002, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25cfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) socket(0x1d, 0x2, 0x6) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$VHOST_VDPA_SET_STATUS(0xffffffffffffffff, 0x4001af72, &(0x7f00000000c0)=0x2) r5 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000280)='.log\x00', 0x385883, 0x100) setsockopt$packet_int(r5, 0x107, 0xc, &(0x7f00000002c0)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d80)=@newtfilter={0x884, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r6, {0xffff, 0xfff3}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0x854, 0x2, [@TCA_BASIC_POLICE={0x850, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x10, 0xd, 0xd36, 0x4, 0x6bc, 0x80002, 0x7, 0xf, 0x800, 0x7, 0x7, 0xe7f, 0xffff, 0x7, 0x5, 0x1, 0xffffffff, 0x4, 0x909e, 0x89cd, 0xffffffff, 0x8, 0x9, 0x4, 0x5, 0x2, 0x8, 0x4, 0xf23, 0x3ff, 0x9, 0xa, 0x5, 0x0, 0xff, 0x7f, 0x4, 0x0, 0x3, 0x382, 0x40, 0x80, 0x8, 0x2, 0x4000005, 0x20002, 0x9, 0x4f, 0x4, 0x0, 0x7, 0x80000000, 0x80000001, 0x8000, 0x9e, 0x10adfd08, 0x200000, 0x7fffffff, 0x5a, 0x9, 0xfffffff4, 0x4, 0x6, 0x6, 0x459, 0x2, 0xff, 0x14000000, 0x5f72, 0x3, 0x8, 0x7, 0x5, 0x0, 0x6, 0x0, 0x6, 0x1000, 0x5, 0x101, 0x2, 0x5, 0x7, 0x9, 0x1000, 0xb, 0x3, 0xfbb4, 0x4a, 0x0, 0xdf0, 0x8, 0x9, 0x0, 0x5, 0x101, 0x0, 0x3ff, 0x5, 0x800, 0x7fffffff, 0x2, 0x1, 0x3, 0x4, 0x101, 0x5, 0x19, 0x6c, 0x4000009, 0x4, 0xceb6, 0x5, 0x7, 0x53c0, 0x6, 0x5, 0x9, 0x1, 0x9, 0x2, 0x7, 0x8, 0x3, 0x3ff, 0x18, 0x6, 0xffffff7b, 0x15ef7157, 0xfffffffc, 0x5, 0x2, 0x7, 0x7fffffff, 0xdb5, 0x1000, 0x800, 0x8, 0x80000000, 0x100, 0x7, 0x1, 0x40, 0x1000, 0x3, 0xfffffffb, 0x5270e9b, 0x5, 0x7f, 0xb, 0x40, 0x9, 0x3, 0x0, 0x9, 0xb, 0x7, 0x1, 0x7, 0x3, 0x9, 0x0, 0xfe23, 0x6, 0x5, 0x8, 0xffffff7f, 0x3, 0xd, 0x80, 0x4, 0x9, 0x4, 0xff, 0x8001, 0x79, 0x40, 0x72e, 0x5c, 0x1, 0xb0, 0x6, 0x8, 0x9, 0x0, 0x80000001, 0x8, 0x4, 0x4, 0x200, 0x1, 0x1, 0x59ac, 0xebd7, 0x7, 0x10008, 0x4, 0x100, 0x0, 0x7, 0x138, 0x1, 0x8, 0xcb18, 0x0, 0xb, 0x5, 0xe489, 0x8, 0x9, 0x6, 0x56, 0x1800000, 0x80000000, 0xc4800000, 0x4251, 0x7fff, 0x8001, 0x101, 0x7, 0x5, 0x3, 0x4, 0x371, 0xaa67, 0x2, 0x0, 0x10, 0x8, 0x5a5, 0x400, 0x0, 0xfffeffff, 0xf, 0x8, 0x9, 0xc2b3, 0x0, 0x7fffffff, 0xfffffffa, 0x5, 0x3ff, 0x6, 0x7, 0x5, 0x7, 0x4, 0xc, 0x9, 0x1, 0x0, 0x10000, 0x4, 0x4, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x4, 0x6, 0x4d2, 0x4000000, {0x8, 0x2, 0xa, 0x8, 0x8, 0xc}, {0x4, 0x0, 0xa380, 0x7ff, 0x5, 0x7d487c2b}, 0x9, 0x15f}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x10000, 0x3, 0x2, 0x7ff, 0x101, 0x0, 0x9, 0xc, 0x0, 0xffffffff, 0x8, 0x1000, 0x6, 0xffff, 0x2, 0x6, 0x2, 0x3, 0x0, 0x4, 0xbe, 0x0, 0x9, 0x1000, 0x2, 0x8, 0x5, 0xcc2, 0xff, 0x6, 0xe, 0x5, 0x8, 0xc, 0x1, 0x5, 0xc, 0x1, 0x2, 0x4, 0x4, 0x401, 0x4665, 0x485, 0x0, 0x2, 0xb35, 0x638, 0x6, 0x9, 0x8, 0x200, 0x0, 0x3, 0x7d, 0xffff, 0xd5c, 0x3, 0x1, 0x8, 0x7, 0x1, 0x0, 0xd16d, 0x7, 0x6, 0x7ff, 0x80000001, 0x3, 0xfffffffe, 0x7ff, 0xffffffff, 0x4, 0xffff, 0x5, 0x4, 0x8, 0x401, 0x7, 0x5, 0x2, 0x3, 0x1e, 0x5, 0x8, 0x3, 0x7f, 0x4, 0x1, 0x1000, 0x8, 0x7, 0x8, 0x4, 0x11, 0x4, 0x4, 0xffff8001, 0x6, 0x2, 0xa, 0x4, 0x8, 0x2, 0xfffffff7, 0x5, 0x2, 0x10001, 0xfffeffff, 0x8, 0x4d55, 0x101, 0x8, 0xffffffb7, 0x2, 0x6, 0x0, 0xfffff21b, 0x24d5, 0xd57, 0x7fff, 0x0, 0x80000000, 0x4, 0x7, 0x11895ce4, 0x4, 0x8000, 0x10000, 0x1, 0x3, 0x801, 0x0, 0x6, 0x45, 0xcf, 0xfffffff8, 0x8aa3, 0x4, 0x5, 0x7, 0x200, 0x7, 0x5ec1, 0x5, 0x1, 0x4, 0x3, 0x7f, 0x81, 0x882d, 0x0, 0x81, 0x3, 0x6, 0x4, 0x8, 0x6, 0x5bcc, 0x2, 0xff, 0x0, 0x8001, 0x10001, 0x4, 0x9, 0x237, 0x6, 0x92bd, 0x8, 0x2, 0x8001, 0x71, 0x3, 0x8, 0x401, 0x8, 0x9, 0x8, 0x6, 0x0, 0x5, 0x0, 0x32d, 0xe, 0x50, 0x0, 0x2, 0x9, 0x849, 0x5, 0xffffff01, 0x6, 0x401, 0x6, 0x558, 0xe, 0xdb00, 0x6, 0x100, 0x2, 0x0, 0x6, 0x101, 0xd1b, 0x7ff, 0x4, 0x4, 0x7, 0xe, 0x7ff, 0x4, 0x6, 0x7, 0x8001, 0x8, 0x3, 0x9, 0x46a9, 0x8001, 0x5, 0x1, 0x3, 0x8, 0x80000001, 0x5, 0x7, 0x7, 0x5, 0x6, 0x29, 0x5, 0xa, 0x4, 0x8, 0x5, 0x80000000, 0x6, 0x0, 0x4f, 0x7f, 0x72e2, 0x4, 0x3, 0x0, 0xfffffff9, 0x5, 0x80000000, 0x8, 0xc0000000, 0x43eebb45, 0xffff, 0x1, 0x40, 0xb]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfff}]}]}}]}, 0x884}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$IP_VS_SO_SET_DELDEST(r7, 0x0, 0x488, &(0x7f0000000140)={{0x2e, @loopback, 0x4e23, 0x0, 'lblc\x00', 0x21, 0x6, 0x26}, {@private=0xa010100, 0x4e23, 0x0, 0x9, 0x7, 0x9}}, 0x44) 1.901928834s ago: executing program 4 (id=332): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="af", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000b80)="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", 0x38e}, {&(0x7f00000003c0)="439e9c", 0x3}], 0x2}}], 0x2, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x8, 0x10208, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x6700000000000000) close_range(r0, 0xffffffffffffffff, 0x0) 1.691020703s ago: executing program 2 (id=333): ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000080)=0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000000a00)) inotify_init1(0x800) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, 0x0, &(0x7f0000000340)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0xd, 0x8563, 0x5}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x300, 0x0, 0x200040d4}, 0x24044040) 1.649275367s ago: executing program 1 (id=334): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000000080)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000002340)="f2d9358e85625e33b9de8d8e31ac5eff6dac7d80ca723b47931ebbe690259fb43bc3fb1543772f160fcd2e98855bfa0208c9283e4ffd7806c4140556a4285f42e3bcef70c1a28cc0ec7eb7e654c2b251146ea2a284984b49f48cf716f24f1116c8788f6004cbfe90bb3c791635", 0x6d}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000440)='4', 0x29}], 0x1}}], 0x2, 0x0) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000002c0), &(0x7f0000000300)=0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002400)=ANY=[@ANYRESHEX, @ANYRES16=r1, @ANYRESHEX=0x0, @ANYRES8=r0], 0x20) sendmsg$nl_route(r0, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010601000000000000000000000064000000738a457a000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}, 0x1, 0x0, 0x0, 0x48001}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffffffffffff55, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080003006400000008000200c8"], 0x2c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syncfs(r3) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x1d, 0x2, 0xc, 0x6}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) r4 = landlock_create_ruleset(&(0x7f00000001c0)={0xe020, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000280)={{0x0, 0x3}, 'syz1\x00', 0x33}) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000000300)={0x2020}, 0x2020) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(r8, &(0x7f0000000240)=@file={0x0, './file0/../file0\x00'}, 0x6e) 1.542432498s ago: executing program 2 (id=335): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x16, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030e00000027bd70000000000004000900a800000001d78771b90bd8a3b4914783c5432d69ca5b9538a900000003000600000000000200000000000001000000000000004002000100010000000000031600000000030005000000000002"], 0x70}, 0x1, 0x7}, 0x10) 1.531807933s ago: executing program 4 (id=336): socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$video(&(0x7f0000000280), 0x101, 0x16a700) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0xa, 0xa, 0x100) write(r2, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c2", 0x34) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000140), 0xb7c8, 0xa8182) r4 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, &(0x7f0000000280)=0x0, &(0x7f00000000c0)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x16f}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x4, 0x2100, 0x10000004, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb8fb, 0x0, 0x0, 0x1f0, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x1, 0x2, 0x3b2}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 1.324154946s ago: executing program 2 (id=337): add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000200)="000000000000000463656c6c00000002000000440000000600bfffffffffffffff00000000000000000000000000000000000000000000000000000000feffffffffffff0000000000000004000000000000000400000000000000140000000200"/112, 0x70, 0xffffffffffffffff) 1.235664261s ago: executing program 0 (id=338): add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000200)="000000000000000463656c6c0000000200000044a3000006000000000000000000000000000000000000000000000000000000000000000000fffffe00000000000000000000000000000004000000000000000400000000000000140000000800"/112, 0x70, 0xffffffffffffffff) 1.189623675s ago: executing program 3 (id=339): futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) (async) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000040), 0x10) (async) landlock_restrict_self(0xffffffffffffffff, 0xc) (async) futex(0x0, 0x9, 0x1, 0x0, 0x0, 0x1) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$pppoe(0x18, 0x1, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x50) (async) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r2 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) (async) syz_usb_control_io$printer(r2, 0x0, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) (async) r4 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x82) writev(r4, 0x0, 0x0) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000005d0d3087d07aa04d85b0102030109021b000f000000000904000001dbcc7a000905", @ANYRES32], 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) (async) ppoll(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) (async) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) (async) read(r3, 0x0, 0x0) 1.032059143s ago: executing program 2 (id=340): socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) rseq(&(0x7f0000000280), 0x20, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (fail_nth: 5) 1.016507646s ago: executing program 0 (id=341): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x0, 0x0}) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ptrace(0x10, 0x0) ptrace$setregset(0x4205, 0x0, 0x2, &(0x7f0000000140)={0x0, 0xfffffddc}) bind$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0x14) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x3}, 0x8) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x0, &(0x7f00000002c0)}) 393.193595ms ago: executing program 2 (id=342): socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x28}, 0x1, 0x0, 0x0, 0x45}, 0x20000084) keyctl$clear(0x3, 0xfffffffffffffffc) request_key(&(0x7f0000000140)='user\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000240)='$\x00', 0x0) r3 = epoll_create1(0x0) ioctl$sock_inet6_udp_SIOCINQ(r3, 0x541b, 0x0) bind$l2tp(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0xb, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0xfa0f, 0xffffffff}, 0x0) fcntl$getflags(0xffffffffffffffff, 0x40a) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, 0x0, 0x0) sendto$inet6(r6, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000d00)="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", 0x559, r7) fcntl$setstatus(r6, 0x4, 0x2000) ioctl$XFS_IOC_DIOINFO(0xffffffffffffffff, 0x800c581e, &(0x7f0000000040)) shutdown(r6, 0x1) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2c, 0x0, 0x0) fsopen(0x0, 0x0) 276.603378ms ago: executing program 0 (id=343): r0 = socket$inet6(0xa, 0x80002, 0x0) write$cgroup_devices(r0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000440)={0x24, &(0x7f0000000240)={0x60, 0xd, 0x2, {0x2, 0xa}}, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x406}}, 0x0, &(0x7f0000000400)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0xfb, 0x1, {0x22, 0xd00}}}}, &(0x7f0000000700)={0x2c, &(0x7f0000000500)={0x20, 0x10, 0x89, "69b720d553f4f122fd0ee38582b97dade2d890db7f71139db4005e7d92f891e1c793060a6b156bc66e7fce38d9226391c21333807f4bdf3501379cd4dffdbcbaba0036c5d2711e391d522f9b97c10b69a5e97b39fa2fe652aa439f9789b440d855258ed6984b9858929693594263bdb622486d795b452f7d7d171b054c61478c783076fd6c863499cf"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x4}, 0x0, &(0x7f00000006c0)={0x20, 0x3, 0x1, 0xff}}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="200e06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f00000001c0), 0x78b5, 0x80) recvmmsg(0xffffffffffffffff, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f0000003440)}, 0x3}], 0x1, 0x2, 0x0) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000040)={&(0x7f0000000600)=[{0xcf, 0xc000, 0x1, &(0x7f0000000200)='f'}], 0x1}) r2 = syz_open_dev$loop(&(0x7f0000000140), 0xb7c8, 0xa8182) r3 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r5, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r8, 0x0, 0xf3a, 0x0) splice(r4, 0x0, r8, 0x0, 0x80, 0x6) write(r8, &(0x7f0000003300)="ac", 0x1) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0xf603594}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0) write(r6, 0x0, 0x0) setresgid(0x0, 0x0, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) 263.33691ms ago: executing program 4 (id=344): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) open$dir(&(0x7f0000000000)='./file0\x00', 0x800, 0x20) rmdir(&(0x7f0000000140)='./file0/../file0\x00') r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000000)) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x4040850) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x0, 0x40, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x4) r7 = socket(0xa, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x800) r8 = openat$sequencer(0xffffffffffffff9c, 0x0, 0xa0602, 0x0) writev(r8, &(0x7f0000000840)=[{0x0}], 0x1) sendmsg$inet_sctp(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x4c000}, 0x4) r9 = socket$kcm(0x29, 0x2, 0x0) r10 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r10, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) sendfile(r9, r10, 0x0, 0x8000fb00) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r2, 0x0, 0x20008040) ioctl$I2C_PEC(r1, 0x708, 0x2) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000000c0)={0x1, 0x1, 0x7, &(0x7f0000000000)={0x17, "90f5000000f3c9f1bd0d00"}}) unshare(0x2c020400) 245.030762ms ago: executing program 1 (id=345): ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000080)=0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000000a00)) inotify_init1(0x800) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, 0x0, &(0x7f0000000340)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000080)={0x0, 0xd, 0x8563, 0x5}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x300, 0x0, 0x200040d4}, 0x24044040) 0s ago: executing program 1 (id=346): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x6}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="91100400000001039500000000000000ab89becd60798ba0c7b340b02956c1c3822c3f572da76a3b992d243e0b89f6b734d5fdf6cb7955ac9702e4a18821040f9856a1bf21bf5e9b77a91e739c3ee223bb727fb18bc991da02854893b585f4465da763f2ac1d5e22ab728ef23681fe8fdf16f570082bdfadcd7f48aa86c2c12a78db90a7781fa547451f272ad46f8e5733fb606f040417634328cbf1b47957851ce3cbc4eb683cc45e48df30ead552a32564e7d1ab13b4aa22e4dd4970134ec08873d32468bed08369a2ec7cef09ea5af2dfc3dbf2f13954a41a3e02b5e2fd65c37b0f22ce8f18ef"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) pipe2$watch_queue(0x0, 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0x42}}}}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040041}, 0x4000840) r3 = syz_open_dev$evdev(0x0, 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000100)={0x51, 0x0, 0x0, {0xffff, 0x1}, {0x24, 0x8002}, @cond=[{0x8, 0x5388, 0x8, 0x800, 0x0, 0x7}, {0x0, 0x5, 0x1, 0x0, 0x8000, 0x9}]}) write$char_usb(r3, 0x0, 0x0) setrlimit(0x8, &(0x7f0000000300)={0x4, 0x7}) setsockopt$sock_int(r2, 0x1, 0x3, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r2, 0x0, 0x2c, 0x24044000, &(0x7f0000000380)={0x2, 0x4e22, @remote}, 0x10) r4 = shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) socket(0x2d, 0x2, 0x0) shmctl$IPC_RMID(r4, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) syz_usb_connect(0x2, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8=r6, @ANYBLOB="79a9"], 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x8002, 0xa2000) r7 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) write$P9_RVERSION(r7, &(0x7f0000002200)=ANY=[], 0xfffffcd9) close_range(r5, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): 36] veth1_to_hsr: entered promiscuous mode [ 347.597638][ T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.600094][ T5753] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 348.113483][ T189] usb 4-1: USB disconnect, device number 2 [ 348.375730][ T5857] netlink: 12 bytes leftover after parsing attributes in process `syz.2.35'. [ 348.844520][ T5863] netlink: 24 bytes leftover after parsing attributes in process `syz.2.37'. [ 349.776057][ T5879] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 350.023029][ T5730] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 350.184744][ T5730] usb 1-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 350.208276][ T5730] usb 1-1: config 128 interface 0 has no altsetting 0 [ 350.208322][ T5730] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.781296][ T5908] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 350.781336][ T5908] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 351.112473][ T5913] fuse: Unknown parameter 'rootmode0000000000000060000' [ 351.177572][ T5913] netlink: 4 bytes leftover after parsing attributes in process `syz.4.51'. [ 351.315104][ T5919] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 352.036468][ T31] kauditd_printk_skb: 37 callbacks suppressed [ 352.036489][ T31] audit: type=1326 audit(1790177764.215:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5931 comm="syz.4.54" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff40ec code=0x7ffc0000 [ 352.037198][ T31] audit: type=1326 audit(1790177764.215:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5931 comm="syz.4.54" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff40ec code=0x7ffc0000 [ 352.100595][ T31] audit: type=1326 audit(1790177764.275:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5931 comm="syz.4.54" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7ff40ec code=0x7ffc0000 [ 352.100861][ T31] audit: type=1326 audit(1790177764.275:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5931 comm="syz.4.54" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff40ec code=0x7ffc0000 [ 352.101503][ T31] audit: type=1326 audit(1790177764.275:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5931 comm="syz.4.54" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff40ec code=0x7ffc0000 [ 352.182792][ T31] audit: type=1326 audit(1790177764.355:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5931 comm="syz.4.54" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=337 compat=1 ip=0xf7ff40ec code=0x7ffc0000 [ 352.184100][ T31] audit: type=1326 audit(1790177764.365:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5931 comm="syz.4.54" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff40ec code=0x7ffc0000 [ 352.184151][ T31] audit: type=1326 audit(1790177764.365:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5931 comm="syz.4.54" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff40ec code=0x7ffc0000 [ 352.669427][ T5945] netlink: 'syz.1.57': attribute type 10 has an invalid length. [ 352.748432][ T5945] team0 (unregistering): Port device team_slave_0 removed [ 352.766263][ T5945] team0 (unregistering): Port device team_slave_1 removed [ 352.828559][ T31] audit: type=1326 audit(1790177765.005:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5944 comm="syz.1.57" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f830ec code=0x7ffc0000 [ 352.828619][ T31] audit: type=1326 audit(1790177765.005:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5944 comm="syz.1.57" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f830ec code=0x7ffc0000 [ 352.970845][ T5945] ======================================================= [ 352.970845][ T5945] WARNING: The mand mount option has been deprecated and [ 352.970845][ T5945] and is ignored by this kernel. Remove the mand [ 352.970845][ T5945] option from the mount to silence this warning. [ 352.970845][ T5945] ======================================================= [ 353.180554][ T5730] usb 1-1: string descriptor 0 read error: -71 [ 353.265174][ T30] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 353.289765][ T5730] usb 1-1: selecting invalid altsetting 3 [ 353.289792][ T5730] comedi comedi5: could not set alternate setting 3 in high speed [ 353.289809][ T5730] usbduxsigma 1-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 353.342233][ T5960] netlink: 'syz.0.64': attribute type 1 has an invalid length. [ 353.356974][ T5730] usbduxsigma 1-1:128.0: probe with driver usbduxsigma failed with error -22 [ 353.387456][ T5730] usb 1-1: USB disconnect, device number 2 [ 353.413762][ T30] usb 2-1: Using ep0 maxpacket: 32 [ 353.415032][ T30] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 353.421365][ T30] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 353.421394][ T30] usb 2-1: config 0 has no interface number 0 [ 353.441481][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.441558][ T30] usb 2-1: Product: syz [ 353.441601][ T30] usb 2-1: Manufacturer: syz [ 353.441643][ T30] usb 2-1: SerialNumber: syz [ 353.459311][ T5960] netlink: 12 bytes leftover after parsing attributes in process `syz.0.64'. [ 353.502370][ T30] usb 2-1: config 0 descriptor?? [ 353.531158][ T30] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 353.531203][ T30] usb 2-1: selecting invalid altsetting 1 [ 353.531220][ T30] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 353.579812][ T30] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 353.582191][ T30] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 353.582254][ T30] usb 2-1: media controller created [ 353.691046][ T30] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 353.848293][ T30] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 353.848371][ T30] zl10353_read_register: readreg error (reg=127, ret==-71) [ 353.886105][ T30] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 354.052516][ T5969] netlink: 192 bytes leftover after parsing attributes in process `syz.2.65'. [ 354.115857][ T30] usb 2-1: USB disconnect, device number 3 [ 354.123191][ T5664] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 354.263734][ T5664] usb 5-1: device descriptor read/64, error -71 [ 354.337881][ T5975] veth0_to_team: mtu less than device minimum [ 354.514459][ T5664] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 354.643683][ T5664] usb 5-1: device descriptor read/64, error -71 [ 354.753736][ T5664] usb usb5-port1: attempt power cycle [ 354.812928][ T189] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 354.963063][ T189] usb 2-1: Using ep0 maxpacket: 16 [ 354.963992][ T189] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 354.965675][ T189] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 354.968747][ T189] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.968768][ T189] usb 2-1: Product: syz [ 354.968780][ T189] usb 2-1: Manufacturer: syz [ 354.968793][ T189] usb 2-1: SerialNumber: syz [ 354.993599][ T5730] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 355.010331][ T189] usb 2-1: config 0 descriptor?? [ 355.081985][ T189] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 355.082030][ T189] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 355.123236][ T5664] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 355.147388][ T5664] usb 5-1: device descriptor read/8, error -71 [ 355.161785][ T5730] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 355.170433][ T5730] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x8 has an invalid bInterval 0, changing to 4 [ 355.170538][ T5730] usb 4-1: config 0 interface 0 has no altsetting 0 [ 355.208071][ T5730] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 355.208101][ T5730] usb 4-1: Product: syz [ 355.208112][ T5730] usb 4-1: Manufacturer: syz [ 355.208123][ T5730] usb 4-1: SerialNumber: syz [ 355.223573][ T5730] usb 4-1: config 0 descriptor?? [ 355.287992][ T5730] usb 4-1: selecting invalid altsetting 0 [ 355.383956][ T5664] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 355.408022][ T5664] usb 5-1: device descriptor read/8, error -71 [ 355.524727][ T5664] usb usb5-port1: unable to enumerate USB device [ 355.624347][ T5986] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 355.629125][ T5986] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 355.629601][ T5986] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 355.649042][ T5986] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 355.667058][ T5986] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 355.667577][ T5986] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 355.668057][ T5986] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 355.668799][ T5986] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 355.671687][ T5986] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 355.697955][ T5986] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 355.708215][ T5986] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 355.710807][ T5730] usb 4-1: USB disconnect, device number 3 [ 355.718785][ T5986] usb 4-1: cannot submit urb 0, error -19: no device [ 355.744854][ T5986] usb 4-1: cannot submit urb 0, error -19: no device [ 355.745345][ T5986] usb 4-1: cannot submit urb 0, error -19: no device [ 355.789293][ T189] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 356.203563][ T5983] netlink: 'syz.1.70': attribute type 3 has an invalid length. [ 356.274063][ T189] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 356.274122][ T189] em28xx 2-1:0.0: board has no eeprom [ 356.365970][ T5996] netlink: 4 bytes leftover after parsing attributes in process `syz.0.73'. [ 356.564252][ T5998] FAULT_INJECTION: forcing a failure. [ 356.564252][ T5998] name failslab, interval 1, probability 0, space 0, times 1 [ 356.564298][ T5998] CPU: 0 UID: 0 PID: 5998 Comm: syz.0.74 Not tainted syzkaller #0 PREEMPT(full) [ 356.564323][ T5998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 356.564345][ T5998] Call Trace: [ 356.564357][ T5998] [ 356.564365][ T5998] dump_stack_lvl+0xe8/0x150 [ 356.564411][ T5998] should_fail_ex+0x410/0x560 [ 356.564440][ T5998] ? __alloc_skb+0x1db/0x7a0 [ 356.564465][ T5998] should_failslab+0xa8/0x100 [ 356.564493][ T5998] ? __alloc_skb+0x1db/0x7a0 [ 356.564515][ T5998] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 356.564549][ T5998] ? __alloc_skb+0x18d/0x7a0 [ 356.564573][ T5998] ? __alloc_skb+0x1db/0x7a0 [ 356.564611][ T5998] __alloc_skb+0x1db/0x7a0 [ 356.564640][ T5998] netlink_sendmsg+0x5d4/0xb40 [ 356.564683][ T5998] ? __pfx_netlink_sendmsg+0x10/0x10 [ 356.564723][ T5998] ? apparmor_socket_sendmsg+0x98/0x360 [ 356.564750][ T5998] ? __pfx_netlink_sendmsg+0x10/0x10 [ 356.564782][ T5998] sock_sendmsg_nosec+0x13a/0x180 [ 356.564823][ T5998] ____sys_sendmsg+0x54e/0x850 [ 356.564857][ T5998] ? __pfx_____sys_sendmsg+0x10/0x10 [ 356.564902][ T5998] ___sys_sendmsg+0x2a5/0x360 [ 356.564930][ T5998] ? __lock_acquire+0x747/0x2de0 [ 356.564957][ T5998] ? __pfx____sys_sendmsg+0x10/0x10 [ 356.564991][ T5998] ? kstrtoull+0x137/0x1d0 [ 356.565053][ T5998] ? __fget_files+0x2a/0x420 [ 356.565082][ T5998] ? __fget_files+0x3a2/0x420 [ 356.565124][ T5998] __sys_sendmmsg+0x2de/0x4d0 [ 356.565159][ T5998] ? __pfx___sys_sendmmsg+0x10/0x10 [ 356.565217][ T5998] ? fput+0xa0/0xd0 [ 356.565244][ T5998] ? ksys_write+0x242/0x270 [ 356.565285][ T5998] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 356.565321][ T5998] __do_fast_syscall_32+0x27a/0x6a0 [ 356.565349][ T5998] ? do_fast_syscall_32+0x33/0x70 [ 356.565373][ T5998] ? asm_int80_emulation+0x1a/0x20 [ 356.565395][ T5998] ? do_int80_emulation+0x299/0x500 [ 356.565419][ T5998] ? trace_irq_disable+0x3b/0x140 [ 356.565467][ T5998] do_fast_syscall_32+0x33/0x70 [ 356.565493][ T5998] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 356.565520][ T5998] RIP: 0023:0xf707f0ec [ 356.565548][ T5998] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 356.565566][ T5998] RSP: 002b:00000000f546d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 356.565601][ T5998] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 356.565616][ T5998] RDX: 000000000000009f RSI: 0000000000000000 RDI: 0000000000000000 [ 356.565630][ T5998] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 356.565643][ T5998] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 356.565656][ T5998] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 356.565687][ T5998] [ 356.596713][ T189] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 356.596748][ T189] em28xx 2-1:0.0: dvb set to bulk mode. [ 356.845892][ T10] em28xx 2-1:0.0: Binding DVB extension [ 356.909415][ T189] usb 2-1: USB disconnect, device number 4 [ 356.928593][ T189] em28xx 2-1:0.0: Disconnecting em28xx [ 357.138216][ T10] em28xx 2-1:0.0: Registering input extension [ 357.141777][ T189] em28xx 2-1:0.0: Closing input extension [ 357.387621][ T189] em28xx: Freeing device [ 357.392588][ T6003] netlink: 'syz.4.76': attribute type 10 has an invalid length. [ 357.392675][ T6003] ipvlan0: entered allmulticast mode [ 357.392693][ T6003] veth0_vlan: entered allmulticast mode [ 357.424173][ T6003] team0: Device ipvlan0 failed to register rx_handler [ 357.705660][ T6003] bond1: (slave bond_slave_1): Device is not our slave [ 357.705682][ T6003] bond1: option active_slave: invalid value (bond_slave_1) [ 357.733919][ T6015] fuse: Bad value for 'fd' [ 357.760720][ T6003] bond1 (unregistering): Released all slaves [ 357.978726][ T6012] bond1: option arp_all_targets: invalid value (1073741825) [ 357.981720][ T6012] bond1 (unregistering): Released all slaves [ 358.150850][ T6023] netlink: 44 bytes leftover after parsing attributes in process `syz.3.81'. [ 358.314391][ T31] audit: type=1326 audit(1790177770.495:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6024 comm="syz.2.82" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 358.314447][ T31] audit: type=1326 audit(1790177770.495:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6024 comm="syz.2.82" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 358.319632][ T31] audit: type=1326 audit(1790177770.495:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6024 comm="syz.2.82" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 358.319688][ T31] audit: type=1326 audit(1790177770.495:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6024 comm="syz.2.82" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 358.320528][ T31] audit: type=1326 audit(1790177770.495:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6024 comm="syz.2.82" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 358.320577][ T31] audit: type=1326 audit(1790177770.495:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6024 comm="syz.2.82" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 358.320622][ T31] audit: type=1326 audit(1790177770.495:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6024 comm="syz.2.82" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 358.320995][ T31] audit: type=1326 audit(1790177770.495:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6024 comm="syz.2.82" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=426 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 358.321227][ T31] audit: type=1326 audit(1790177770.495:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6024 comm="syz.2.82" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 358.913860][ T6041] sctp: [Deprecated]: syz.3.86 (pid 6041) Use of int in max_burst socket option. [ 358.913860][ T6041] Use struct sctp_assoc_value instead [ 358.949353][ T6039] vxlan0: entered allmulticast mode [ 358.964957][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.965177][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.965897][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.965937][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.391909][ T6043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.88'. [ 359.882918][ T30] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 360.018091][ T31] audit: type=1326 audit(1790177772.195:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6063 comm="syz.3.95" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 360.057177][ T30] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 360.059359][ T30] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 360.059386][ T30] usb 5-1: config 0 has no interfaces? [ 360.062463][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.062492][ T30] usb 5-1: Product: syz [ 360.062508][ T30] usb 5-1: Manufacturer: syz [ 360.062524][ T30] usb 5-1: SerialNumber: syz [ 360.113370][ T5664] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 360.117805][ T30] usb 5-1: config 0 descriptor?? [ 360.173130][ T25] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 360.246317][ T6069] openvswitch: netlink: Message has 56 unknown bytes. [ 360.263654][ T5664] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 360.264792][ T5664] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 360.264816][ T5664] usb 2-1: config 0 has no interfaces? [ 360.267749][ T5664] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.267776][ T5664] usb 2-1: Product: syz [ 360.267792][ T5664] usb 2-1: Manufacturer: syz [ 360.267808][ T5664] usb 2-1: SerialNumber: syz [ 360.272328][ T5664] usb 2-1: config 0 descriptor?? [ 360.310433][ T25] usb 3-1: device descriptor read/64, error -71 [ 360.367421][ T189] usb 5-1: USB disconnect, device number 7 [ 360.455323][ T6073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.99'. [ 360.473946][ T6073] vlan2: entered promiscuous mode [ 360.473970][ T6073] veth1_to_hsr: entered promiscuous mode [ 360.519488][ T5664] usb 2-1: USB disconnect, device number 5 [ 360.593101][ T25] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 360.725089][ T25] usb 3-1: device descriptor read/64, error -71 [ 360.827729][ T6083] netlink: 'syz.3.104': attribute type 1 has an invalid length. [ 360.831647][ T6083] netlink: 28 bytes leftover after parsing attributes in process `syz.3.104'. [ 360.831682][ T6083] veth0_macvtap: entered allmulticast mode [ 360.862958][ T25] usb usb3-port1: attempt power cycle [ 360.945700][ T6085] sctp: [Deprecated]: syz.0.103 (pid 6085) Use of int in max_burst socket option. [ 360.945700][ T6085] Use struct sctp_assoc_value instead [ 361.216784][ T25] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 361.220718][ T6096] syz.0.110 uses obsolete (PF_INET,SOCK_PACKET) [ 361.246471][ T25] usb 3-1: device descriptor read/8, error -71 [ 361.272978][ T189] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 361.277297][ T6093] kvm: pic: level sensitive irq not supported [ 361.277458][ T6093] kvm: pic: level sensitive irq not supported [ 361.277538][ T6093] kvm: pic: level sensitive irq not supported [ 361.277617][ T6093] kvm: pic: level sensitive irq not supported [ 361.277697][ T6093] kvm: pic: level sensitive irq not supported [ 361.277777][ T6093] kvm: pic: level sensitive irq not supported [ 361.277856][ T6093] kvm: pic: level sensitive irq not supported [ 361.277935][ T6093] kvm: pic: level sensitive irq not supported [ 361.278123][ T6093] kvm: pic: level sensitive irq not supported [ 361.278201][ T6093] kvm: pic: level sensitive irq not supported [ 361.422989][ T189] usb 5-1: Using ep0 maxpacket: 16 [ 361.424609][ T189] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 361.426646][ T189] usb 5-1: config index 0 descriptor too short (expected 37359, got 202) [ 361.426674][ T189] usb 5-1: config 33 has too many interfaces: 95, using maximum allowed: 32 [ 361.426696][ T189] usb 5-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config [ 361.426754][ T189] usb 5-1: config 33 has 1 interface, different from the descriptor's value: 95 [ 361.428924][ T189] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.428951][ T189] usb 5-1: Product: syz [ 361.428968][ T189] usb 5-1: Manufacturer: syz [ 361.429000][ T189] usb 5-1: SerialNumber: syz [ 361.505791][ T25] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 361.523696][ T25] usb 3-1: device descriptor read/8, error -71 [ 361.524924][ T189] usb 5-1: 0:2 : does not exist [ 361.635413][ T25] usb usb3-port1: unable to enumerate USB device [ 361.653021][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 361.701423][ T189] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 361.755619][ T189] usb 5-1: USB disconnect, device number 8 [ 361.792791][ T5675] udevd[5675]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:33.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 361.810690][ T10] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 361.831138][ T10] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 361.831165][ T10] usb 4-1: config 3 has no interfaces? [ 361.856862][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.856882][ T10] usb 4-1: Product: syz [ 361.856892][ T10] usb 4-1: Manufacturer: syz [ 361.856903][ T10] usb 4-1: SerialNumber: syz [ 362.151855][ T10] usb 4-1: USB disconnect, device number 4 [ 362.563056][ T189] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 362.715635][ T189] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 362.717316][ T189] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 362.717351][ T189] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 362.717375][ T189] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 362.720591][ T189] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.720619][ T189] usb 5-1: Product: syz [ 362.720635][ T189] usb 5-1: Manufacturer: syz [ 362.720651][ T189] usb 5-1: SerialNumber: syz [ 362.758087][ T189] usb 5-1: config 0 descriptor?? [ 363.144752][ T189] adutux 5-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 363.169462][ T189] usb 5-1: USB disconnect, device number 9 [ 363.323321][ T31] kauditd_printk_skb: 74 callbacks suppressed [ 363.323343][ T31] audit: type=1326 audit(1790177775.505:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6134 comm="syz.2.122" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 363.326232][ T31] audit: type=1326 audit(1790177775.505:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6134 comm="syz.2.122" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 363.326287][ T31] audit: type=1326 audit(1790177775.505:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6134 comm="syz.2.122" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 363.326330][ T31] audit: type=1326 audit(1790177775.505:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6134 comm="syz.2.122" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 363.327717][ T31] audit: type=1326 audit(1790177775.505:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6134 comm="syz.2.122" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 363.328633][ T31] audit: type=1326 audit(1790177775.505:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6134 comm="syz.2.122" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 363.328876][ T31] audit: type=1326 audit(1790177775.505:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6134 comm="syz.2.122" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 363.329035][ T31] audit: type=1326 audit(1790177775.505:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6134 comm="syz.2.122" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 363.330501][ T31] audit: type=1326 audit(1790177775.505:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6134 comm="syz.2.122" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=26 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 363.363797][ T31] audit: type=1326 audit(1790177775.525:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6134 comm="syz.2.122" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 363.389455][ T6135] netlink: 'syz.2.122': attribute type 4 has an invalid length. [ 363.866005][ T6142] fuse: Unknown parameter '0x0000000000000003' [ 364.413009][ T5799] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 364.550390][ T6158] FAULT_INJECTION: forcing a failure. [ 364.550390][ T6158] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 364.550447][ T6158] CPU: 1 UID: 0 PID: 6158 Comm: syz.0.130 Not tainted syzkaller #0 PREEMPT(full) [ 364.550475][ T6158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 364.550496][ T6158] Call Trace: [ 364.550510][ T6158] [ 364.550520][ T6158] dump_stack_lvl+0xe8/0x150 [ 364.550570][ T6158] should_fail_ex+0x410/0x560 [ 364.550604][ T6158] _copy_from_user+0x2d/0xb0 [ 364.550636][ T6158] cmsghdr_from_user_compat_to_kern+0x534/0x810 [ 364.550675][ T6158] ? lock_acquire+0x115/0x350 [ 364.550711][ T6158] ? __pfx_cmsghdr_from_user_compat_to_kern+0x10/0x10 [ 364.550762][ T6158] ____sys_sendmsg+0x217/0x850 [ 364.550802][ T6158] ? __pfx_____sys_sendmsg+0x10/0x10 [ 364.550853][ T6158] ___sys_sendmsg+0x2a5/0x360 [ 364.550883][ T6158] ? __lock_acquire+0x747/0x2de0 [ 364.550913][ T6158] ? __pfx____sys_sendmsg+0x10/0x10 [ 364.550951][ T6158] ? kstrtoull+0x137/0x1d0 [ 364.551020][ T6158] ? __fget_files+0x2a/0x420 [ 364.551058][ T6158] ? __fget_files+0x3a2/0x420 [ 364.551104][ T6158] __sys_sendmmsg+0x2de/0x4d0 [ 364.551143][ T6158] ? __pfx___sys_sendmmsg+0x10/0x10 [ 364.551209][ T6158] ? fput+0xa0/0xd0 [ 364.551239][ T6158] ? ksys_write+0x242/0x270 [ 364.551285][ T6158] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 364.551325][ T6158] __do_fast_syscall_32+0x27a/0x6a0 [ 364.551356][ T6158] ? do_fast_syscall_32+0x33/0x70 [ 364.551383][ T6158] ? asm_int80_emulation+0x1a/0x20 [ 364.551408][ T6158] ? do_int80_emulation+0x299/0x500 [ 364.551435][ T6158] ? trace_irq_disable+0x3b/0x140 [ 364.551465][ T6158] do_fast_syscall_32+0x33/0x70 [ 364.551495][ T6158] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 364.551525][ T6158] RIP: 0023:0xf707f0ec [ 364.551554][ T6158] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 364.551575][ T6158] RSP: 002b:00000000f546d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 364.551602][ T6158] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080002900 [ 364.551619][ T6158] RDX: 0000000000000001 RSI: 0000000004000000 RDI: 0000000000000000 [ 364.551634][ T6158] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 364.551649][ T6158] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 364.551663][ T6158] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 364.551698][ T6158] [ 364.630553][ T5799] usb 4-1: unable to get BOS descriptor or descriptor too short [ 364.641737][ T5799] usb 4-1: not running at top speed; connect to a high speed hub [ 364.641869][ T5799] usb 4-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 364.687395][ T5799] usb 4-1: config 1 has an invalid descriptor of length 231, skipping remainder of the config [ 364.687645][ T5799] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 364.687769][ T5799] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 364.880992][ T5799] usb 4-1: string descriptor 0 read error: -22 [ 364.881164][ T5799] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.992330][ T5799] usb 4-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 364.992364][ T5799] usb 4-1: found format II with max.bitrate = 512, frame size=4095 [ 365.000204][ T5799] usb 4-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 365.000329][ T5799] usb 4-1: found format II with max.bitrate = 512, frame size=4095 [ 365.240221][ T6160] FAULT_INJECTION: forcing a failure. [ 365.240221][ T6160] name failslab, interval 1, probability 0, space 0, times 0 [ 365.240296][ T6160] CPU: 1 UID: 0 PID: 6160 Comm: syz.0.132 Not tainted syzkaller #0 PREEMPT(full) [ 365.240324][ T6160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 365.240340][ T6160] Call Trace: [ 365.240350][ T6160] [ 365.240360][ T6160] dump_stack_lvl+0xe8/0x150 [ 365.240402][ T6160] should_fail_ex+0x410/0x560 [ 365.240434][ T6160] ? __alloc_skb+0x1db/0x7a0 [ 365.240461][ T6160] should_failslab+0xa8/0x100 [ 365.240503][ T6160] ? __alloc_skb+0x1db/0x7a0 [ 365.240529][ T6160] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 365.240567][ T6160] ? __alloc_skb+0x18d/0x7a0 [ 365.240595][ T6160] ? __alloc_skb+0x1db/0x7a0 [ 365.240629][ T6160] __alloc_skb+0x1db/0x7a0 [ 365.240663][ T6160] audit_log_start+0x1b3/0xa10 [ 365.240704][ T6160] ? __pfx_audit_log_start+0x10/0x10 [ 365.240744][ T6160] ? get_pid_task+0x20/0x1f0 [ 365.240768][ T6160] ? get_pid_task+0x20/0x1f0 [ 365.240800][ T6160] audit_seccomp+0x63/0x190 [ 365.240829][ T6160] ? clear_bhb_loop+0x70/0xc0 [ 365.240854][ T6160] ? clear_bhb_loop+0xe/0xc0 [ 365.240885][ T6160] __seccomp_filter+0xd14/0x1de0 [ 365.240931][ T6160] ? __pfx___seccomp_filter+0x10/0x10 [ 365.240962][ T6160] ? __mutex_unlock_slowpath+0x731/0x900 [ 365.240994][ T6160] ? __fget_files+0x2a/0x420 [ 365.241030][ T6160] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 365.241059][ T6160] ? __fget_files+0x3a2/0x420 [ 365.241115][ T6160] ? __seccomp_permit_syscall+0xe7/0x2b0 [ 365.241151][ T6160] __do_fast_syscall_32+0x235/0x6a0 [ 365.241181][ T6160] ? do_fast_syscall_32+0x33/0x70 [ 365.241208][ T6160] ? asm_int80_emulation+0x1a/0x20 [ 365.241232][ T6160] ? do_int80_emulation+0x299/0x500 [ 365.241259][ T6160] ? trace_irq_disable+0x3b/0x140 [ 365.241288][ T6160] do_fast_syscall_32+0x33/0x70 [ 365.241317][ T6160] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 365.241347][ T6160] RIP: 0023:0xf707f0ec [ 365.241370][ T6160] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 365.241392][ T6160] RSP: 002b:00000000f546d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 365.241418][ T6160] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 00000000800000c0 [ 365.241436][ T6160] RDX: 0000000000010106 RSI: 0000000000000002 RDI: 0000000000000000 [ 365.241451][ T6160] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 365.241466][ T6160] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 365.241488][ T6160] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 365.241523][ T6160] [ 365.656064][ T6145] netlink: 16 bytes leftover after parsing attributes in process `syz.3.126'. [ 366.010776][ T6145] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 366.121356][ T6145] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 366.121705][ T6145] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 366.139856][ T6145] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 366.139970][ T6145] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 366.140012][ T6145] kvm: requested 93028 ns i8254 timer period limited to 200000 ns [ 366.140054][ T6145] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 366.140130][ T6145] kvm: requested 10057 ns i8254 timer period limited to 200000 ns [ 366.140309][ T6145] kvm: requested 155047 ns i8254 timer period limited to 200000 ns [ 366.140353][ T6145] kvm: requested 160914 ns i8254 timer period limited to 200000 ns [ 366.155520][ T25] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 366.315672][ T25] usb 5-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.00 [ 366.316893][ T25] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 366.316994][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.405683][ T25] snd-ua101 5-1:1.0: probe with driver snd-ua101 failed with error -2 [ 366.582381][ T10] usb 5-1: USB disconnect, device number 10 [ 366.677541][ T6183] binder: 6181:6183 ioctl 5000940e 800005c0 returned -22 [ 366.677658][ T6183] binder: 6181:6183 ioctl 5000940e 800005c0 returned -22 [ 366.677770][ T6183] binder: 6181:6183 ioctl 5000940e 800005c0 returned -22 [ 366.677865][ T6183] binder: 6181:6183 ioctl 5000940e 800005c0 returned -22 [ 366.677962][ T6183] binder: 6181:6183 ioctl 5000940e 800005c0 returned -22 [ 366.678056][ T6183] binder: 6181:6183 ioctl 5000940e 800005c0 returned -22 [ 366.678150][ T6183] binder: 6181:6183 ioctl 5000940e 800005c0 returned -22 [ 366.678244][ T6183] binder: 6181:6183 ioctl 5000940e 800005c0 returned -22 [ 366.678340][ T6183] binder: 6181:6183 ioctl 5000940e 800005c0 returned -22 [ 366.678442][ T6183] binder: 6181:6183 ioctl 5000940e 800005c0 returned -22 [ 366.678536][ T6183] binder: 6181:6183 ioctl 5000940e 800005c0 returned -22 [ 366.678625][ T6183] binder: 6181:6183 ioctl 5000940e 800005c0 returned -22 [ 366.776842][ T6183] binder: 6181:6183 ioctl 5000940e 800005c0 returned -22 [ 366.776955][ T6183] binder: 6181:6183 ioctl 5000940e 800005c0 returned -22 [ 366.777049][ T6183] binder: 6181:6183 ioctl 5000940e 800005c0 returned -22 [ 366.777143][ T6183] binder: 6181:6183 ioctl 5000940e 800005c0 returned -22 [ 366.777241][ T6183] binder: 6181:6183 ioctl 5000940e 800005c0 returned -22 [ 366.777335][ T6183] binder: 6181:6183 ioctl 5000940e 800005c0 returned -22 [ 366.777429][ T6183] binder: 6181:6183 ioctl 5000940e 800005c0 returned -22 [ 366.777533][ T6183] binder: 6181:6183 ioctl 5000940e 800005c0 returned -22 [ 366.777629][ T6183] binder: 6181:6183 ioctl 5000940e 800005c0 returned -22 [ 366.777723][ T6183] binder: 6181:6183 ioctl 5000940e 800005c0 returned -22 [ 366.777824][ T6183] binder: 6181:6183 ioctl 5000940e 800005c0 returned -22 [ 366.777917][ T6183] binder: 6181:6183 ioctl 5000940e 800005c0 returned -22 [ 366.778012][ T6183] binder: 6181:6183 ioctl 5000940e 800005c0 returned -22 [ 366.778104][ T6183] binder: 6181:6183 ioctl 5000940e 800005c0 returned -22 [ 366.778214][ T6183] binder: 6181:6183 ioctl 5000940e 800005c0 returned -22 [ 366.781911][ T6183] binder: 6181:6183 ioctl 5000940e 800005c0 returned -22 [ 366.782014][ T6183] binder: 6181:6183 ioctl 5000940e 800005c0 returned -22 [ 366.782107][ T6183] binder: 6181:6183 ioctl 5000940e 800005c0 returned -22 [ 366.782199][ T6183] binder: 6181:6183 ioctl 5000940e 800005c0 returned -22 [ 366.782290][ T6183] binder: 6181:6183 ioctl 5000940e 800005c0 returned -22 [ 366.782373][ T6183] binder: 6181:6183 ioctl 5000940e 800005c0 returned -22 [ 367.169732][ T5799] usb 4-1: USB disconnect, device number 5 [ 367.230800][ T6191] fuse: Unknown parameter '0x0000000000000003' [ 367.333737][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 367.459859][ T6198] netlink: 'syz.4.142': attribute type 4 has an invalid length. [ 367.484272][ T10] usb 1-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 367.485483][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 367.485530][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.500658][ T10] usb 1-1: config 0 descriptor?? [ 367.862156][ T6210] syzkaller0: entered promiscuous mode [ 367.862210][ T6210] syzkaller0: entered allmulticast mode [ 367.879755][ T6210] tipc: Started in network mode [ 367.879796][ T6210] tipc: Node identity 627b1dadd44f, cluster identity 4711 [ 367.880976][ T6210] tipc: Enabled bearer , priority 0 [ 367.882500][ T6209] tipc: Resetting bearer [ 367.928667][ T6209] tipc: Disabling bearer [ 368.000127][ T10] elecom 0003:056E:011C.0001: item fetching failed at offset 2/40 [ 368.010985][ T10] elecom 0003:056E:011C.0001: probe with driver elecom failed with error -22 [ 368.083127][ T5716] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 368.106424][ T6218] netlink: 4 bytes leftover after parsing attributes in process `syz.2.148'. [ 368.172466][ T6162] ipvlan2: entered promiscuous mode [ 368.189515][ T6162] team0: Device ipvlan2 failed to register rx_handler [ 368.236690][ T5716] usb 5-1: Using ep0 maxpacket: 32 [ 368.239199][ T5716] usb 5-1: unable to get BOS descriptor or descriptor too short [ 368.239250][ T5716] usb 5-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 368.241015][ T5716] usb 5-1: config 128 has an invalid interface number: 127 but max is 3 [ 368.241043][ T5716] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 368.241062][ T5716] usb 5-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 368.241085][ T5716] usb 5-1: config 128 has no interface number 0 [ 368.241126][ T5716] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 368.241150][ T5716] usb 5-1: config 128 interface 127 has no altsetting 0 [ 368.247816][ T5716] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.247890][ T5716] usb 5-1: Product: syz [ 368.247932][ T5716] usb 5-1: Manufacturer: syz [ 368.248004][ T5716] usb 5-1: SerialNumber: syz [ 368.399055][ T10] usb 1-1: USB disconnect, device number 3 [ 368.580853][ T6212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.582651][ T6212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.607913][ T6224] netlink: 192 bytes leftover after parsing attributes in process `syz.2.149'. [ 368.623481][ T25] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 368.772596][ T6229] input: syz0 as /devices/virtual/input/input6 [ 368.785759][ T25] usb 2-1: unable to get BOS descriptor or descriptor too short [ 368.787154][ T25] usb 2-1: not running at top speed; connect to a high speed hub [ 368.787188][ T25] usb 2-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40 [ 368.828314][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.828344][ T25] usb 2-1: Product: syz [ 368.828360][ T25] usb 2-1: Manufacturer: syz [ 368.828376][ T25] usb 2-1: SerialNumber: syz [ 369.104380][ T6223] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.106601][ T6223] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.149377][ T6223] bridge0: entered allmulticast mode [ 369.189685][ T6227] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.189869][ T6227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.191918][ T6227] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.192107][ T6227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.226043][ T6227] bridge0: left allmulticast mode [ 369.262739][ T25] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 369.271414][ T25] usb 2-1: MIDIStreaming interface descriptor not found [ 369.422622][ T25] usb 2-1: USB disconnect, device number 6 [ 369.645628][ T6235] netlink: 'syz.0.152': attribute type 5 has an invalid length. [ 369.689646][ T5716] usb 5-1: USB disconnect, device number 11 [ 369.838741][ T5658] udevd[5658]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 369.859005][ T6204] udevd[6204]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:128.127/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 369.921246][ T31] kauditd_printk_skb: 74 callbacks suppressed [ 369.921266][ T31] audit: type=1326 audit(1790177782.095:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6237 comm="syz.0.153" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 369.921311][ T31] audit: type=1326 audit(1790177782.095:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6237 comm="syz.0.153" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 369.923717][ T31] audit: type=1326 audit(1790177782.095:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6237 comm="syz.0.153" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 369.923857][ T31] audit: type=1326 audit(1790177782.095:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6237 comm="syz.0.153" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 369.936622][ T31] audit: type=1326 audit(1790177782.115:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6237 comm="syz.0.153" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 369.956917][ T31] audit: type=1326 audit(1790177782.135:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6237 comm="syz.0.153" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 369.956972][ T31] audit: type=1326 audit(1790177782.135:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6237 comm="syz.0.153" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 369.957016][ T31] audit: type=1326 audit(1790177782.135:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6237 comm="syz.0.153" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 369.972494][ T31] audit: type=1326 audit(1790177782.145:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6237 comm="syz.0.153" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=228 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 369.972677][ T31] audit: type=1326 audit(1790177782.145:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6237 comm="syz.0.153" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707f0ec code=0x7ffc0000 [ 370.424532][ T6240] bridge_slave_0: left allmulticast mode [ 370.424559][ T6240] bridge_slave_0: left promiscuous mode [ 370.426455][ T6240] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.473178][ T6240] bridge_slave_1: left allmulticast mode [ 370.473206][ T6240] bridge_slave_1: left promiscuous mode [ 370.473427][ T6240] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.516702][ T6240] bond0: (slave bond_slave_0): Releasing backup interface [ 370.560192][ T6240] bond0: (slave bond_slave_1): Releasing backup interface [ 370.620794][ T6240] team0: Port device team_slave_0 removed [ 370.673539][ T6240] team0: Port device team_slave_1 removed [ 370.674569][ T6240] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 370.674591][ T6240] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 370.741919][ T6240] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 370.741977][ T6240] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 370.776536][ T6240] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 370.861206][ T6246] team0: Port device xfrm0 added [ 370.896867][ T6248] tipc: Started in network mode [ 370.896899][ T6248] tipc: Node identity 2a666800b938, cluster identity 4711 [ 370.897188][ T6248] tipc: Enabled bearer , priority 0 [ 370.898428][ T6249] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 371.135042][ T6260] FAULT_INJECTION: forcing a failure. [ 371.135042][ T6260] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 371.135077][ T6260] CPU: 1 UID: 0 PID: 6260 Comm: syz.3.162 Not tainted syzkaller #0 PREEMPT(full) [ 371.135101][ T6260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 371.135114][ T6260] Call Trace: [ 371.135124][ T6260] [ 371.135133][ T6260] dump_stack_lvl+0xe8/0x150 [ 371.135170][ T6260] should_fail_ex+0x410/0x560 [ 371.135198][ T6260] _copy_to_user+0x31/0xb0 [ 371.135228][ T6260] pagemap_read+0x4dc/0x7c0 [ 371.135269][ T6260] ? __pfx_pagemap_read+0x10/0x10 [ 371.135306][ T6260] ? rw_verify_area+0x24a/0x4c0 [ 371.135342][ T6260] ? __pfx_pagemap_read+0x10/0x10 [ 371.135373][ T6260] vfs_read+0x213/0xa80 [ 371.135414][ T6260] ? __pfx_vfs_read+0x10/0x10 [ 371.135458][ T6260] ? __fget_files+0x2a/0x420 [ 371.135491][ T6260] ? __fget_files+0x2a/0x420 [ 371.135520][ T6260] ? __fget_files+0x3a2/0x420 [ 371.135550][ T6260] ? __fget_files+0x2a/0x420 [ 371.135590][ T6260] ksys_pread64+0x126/0x1c0 [ 371.135626][ T6260] ? __pfx_ksys_pread64+0x10/0x10 [ 371.135664][ T6260] ? __ia32_sys_ia32_pread64+0x20/0xd0 [ 371.135701][ T6260] __do_fast_syscall_32+0x27a/0x6a0 [ 371.135728][ T6260] ? do_fast_syscall_32+0x33/0x70 [ 371.135753][ T6260] ? asm_int80_emulation+0x1a/0x20 [ 371.135774][ T6260] ? do_int80_emulation+0x299/0x500 [ 371.135798][ T6260] ? trace_irq_disable+0x3b/0x140 [ 371.135825][ T6260] do_fast_syscall_32+0x33/0x70 [ 371.135850][ T6260] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 371.135877][ T6260] RIP: 0023:0xf705f0ec [ 371.135897][ T6260] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 371.135915][ T6260] RSP: 002b:00000000f544d50c EFLAGS: 00000206 ORIG_RAX: 00000000000000b4 [ 371.135939][ T6260] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080001240 [ 371.135955][ T6260] RDX: 00000000ffffff8c RSI: 0000000000200000 RDI: 0000000000000000 [ 371.135969][ T6260] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 371.135982][ T6260] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 371.135995][ T6260] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 371.136027][ T6260] [ 371.419438][ T6261] netlink: 44 bytes leftover after parsing attributes in process `syz.0.161'. [ 371.523544][ T6267] netlink: 24 bytes leftover after parsing attributes in process `syz.3.164'. [ 371.614118][ T6269] netlink: 8 bytes leftover after parsing attributes in process `syz.3.165'. [ 371.641945][ T6269] vlan2: entered promiscuous mode [ 371.703137][ T6271] FAULT_INJECTION: forcing a failure. [ 371.703137][ T6271] name failslab, interval 1, probability 0, space 0, times 0 [ 371.703176][ T6271] CPU: 1 UID: 0 PID: 6271 Comm: syz.1.166 Not tainted syzkaller #0 PREEMPT(full) [ 371.703200][ T6271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 371.703213][ T6271] Call Trace: [ 371.703222][ T6271] [ 371.703231][ T6271] dump_stack_lvl+0xe8/0x150 [ 371.703269][ T6271] should_fail_ex+0x410/0x560 [ 371.703309][ T6271] should_failslab+0xa8/0x100 [ 371.703340][ T6271] __kmalloc_cache_noprof+0xa3/0x600 [ 371.703361][ T6271] ? stack_trace_save+0xa9/0x100 [ 371.703404][ T6271] ? rtnl_newlink+0x143/0x1c30 [ 371.703428][ T6271] ? rtnl_newlink+0x143/0x1c30 [ 371.703459][ T6271] rtnl_newlink+0x143/0x1c30 [ 371.703485][ T6271] ? kasan_save_track+0x4f/0x80 [ 371.703507][ T6271] ? kasan_save_track+0x3e/0x80 [ 371.703529][ T6271] ? __kasan_slab_free+0x5c/0x80 [ 371.703551][ T6271] ? kmem_cache_free+0x182/0x650 [ 371.703572][ T6271] ? nlmon_xmit+0xb0/0x100 [ 371.703593][ T6271] ? dev_hard_start_xmit+0x2cd/0x830 [ 371.703621][ T6271] ? __dev_queue_xmit+0x14c0/0x3820 [ 371.703650][ T6271] ? __netlink_deliver_tap+0x5b4/0x860 [ 371.703681][ T6271] ? netlink_deliver_tap+0x19c/0x1b0 [ 371.703711][ T6271] ? netlink_unicast+0x781/0x940 [ 371.703736][ T6271] ? netlink_sendmsg+0x813/0xb40 [ 371.703769][ T6271] ? __pfx_rtnl_newlink+0x10/0x10 [ 371.703792][ T6271] ? __se_sys_splice+0x353/0x490 [ 371.703824][ T6271] ? __do_fast_syscall_32+0x27a/0x6a0 [ 371.703849][ T6271] ? do_fast_syscall_32+0x33/0x70 [ 371.703873][ T6271] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 371.703937][ T6271] ? kasan_quarantine_put+0xbb/0x1f0 [ 371.703961][ T6271] ? lockdep_hardirqs_on+0x7b/0x110 [ 371.703988][ T6271] ? nlmon_xmit+0xb0/0x100 [ 371.704009][ T6271] ? kmem_cache_free+0x182/0x650 [ 371.704049][ T6271] ? __lock_acquire+0x747/0x2de0 [ 371.704082][ T6271] ? __local_bh_enable_ip+0xd6/0x140 [ 371.704113][ T6271] ? lockdep_hardirqs_on+0x7b/0x110 [ 371.704135][ T6271] ? __dev_queue_xmit+0x29b/0x3820 [ 371.704164][ T6271] ? __local_bh_enable_ip+0xd6/0x140 [ 371.704191][ T6271] ? __dev_queue_xmit+0x29b/0x3820 [ 371.704230][ T6271] ? lock_acquire+0x115/0x350 [ 371.704252][ T6271] ? __pfx_rtnl_newlink+0x10/0x10 [ 371.704291][ T6271] ? __pfx_rtnl_newlink+0x10/0x10 [ 371.704315][ T6271] rtnetlink_rcv_msg+0x802/0xc00 [ 371.704345][ T6271] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 371.704370][ T6271] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 371.704401][ T6271] ? ref_tracker_free+0x689/0x830 [ 371.704431][ T6271] ? __pfx_ref_tracker_free+0x10/0x10 [ 371.704457][ T6271] ? __asan_memcpy+0x40/0x70 [ 371.704489][ T6271] ? __skb_clone+0x5c/0x6c0 [ 371.704524][ T6271] netlink_rcv_skb+0x226/0x4a0 [ 371.704557][ T6271] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 371.704585][ T6271] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 371.704631][ T6271] ? netlink_deliver_tap+0x2e/0x1b0 [ 371.704662][ T6271] ? netlink_deliver_tap+0x2e/0x1b0 [ 371.704700][ T6271] netlink_unicast+0x7bd/0x940 [ 371.704740][ T6271] netlink_sendmsg+0x813/0xb40 [ 371.704770][ T6271] ? up_write+0x19d/0x4a0 [ 371.704806][ T6271] ? __pfx_netlink_sendmsg+0x10/0x10 [ 371.704847][ T6271] ? apparmor_socket_sendmsg+0x98/0x360 [ 371.704870][ T6271] ? trace_contention_end+0x3d/0x140 [ 371.704900][ T6271] ? __pfx_netlink_sendmsg+0x10/0x10 [ 371.704931][ T6271] sock_sendmsg_nosec+0x13a/0x180 [ 371.704969][ T6271] sock_sendmsg+0x1ca/0x2d0 [ 371.705009][ T6271] ? __pfx_sock_sendmsg+0x10/0x10 [ 371.705056][ T6271] ? __asan_memset+0x22/0x50 [ 371.705089][ T6271] ? iov_iter_bvec+0xb8/0x180 [ 371.705116][ T6271] splice_to_socket+0xb5e/0x12a0 [ 371.705170][ T6271] ? __pfx_splice_to_socket+0x10/0x10 [ 371.705226][ T6271] ? get_pid_task+0x20/0x1f0 [ 371.705261][ T6271] ? bpf_lsm_file_permission+0x9/0x20 [ 371.705291][ T6271] ? security_file_permission+0x75/0x260 [ 371.705328][ T6271] ? rw_verify_area+0x203/0x4c0 [ 371.705360][ T6271] ? __pfx_splice_to_socket+0x10/0x10 [ 371.705401][ T6271] do_splice+0xf14/0x1970 [ 371.705439][ T6271] ? lock_acquire+0x115/0x350 [ 371.705479][ T6271] ? __pfx_do_splice+0x10/0x10 [ 371.705522][ T6271] __se_sys_splice+0x353/0x490 [ 371.705562][ T6271] ? __pfx___se_sys_splice+0x10/0x10 [ 371.705600][ T6271] ? __ia32_sys_splice+0x21/0xf0 [ 371.705637][ T6271] __do_fast_syscall_32+0x27a/0x6a0 [ 371.705664][ T6271] ? do_fast_syscall_32+0x33/0x70 [ 371.705688][ T6271] ? asm_int80_emulation+0x1a/0x20 [ 371.705710][ T6271] ? do_int80_emulation+0x299/0x500 [ 371.705733][ T6271] ? trace_irq_disable+0x3b/0x140 [ 371.705760][ T6271] do_fast_syscall_32+0x33/0x70 [ 371.705785][ T6271] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 371.705812][ T6271] RIP: 0023:0xf7f830ec [ 371.705832][ T6271] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 371.705850][ T6271] RSP: 002b:00000000f544650c EFLAGS: 00000206 ORIG_RAX: 0000000000000139 [ 371.705875][ T6271] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 371.705890][ T6271] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000010500 [ 371.705903][ T6271] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 371.705916][ T6271] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 371.705929][ T6271] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 371.705961][ T6271] [ 371.906712][ T5730] tipc: Node number set to 2472437760 [ 372.454426][ T6275] fuse: Unknown parameter 'rootmode0000000000000060000' [ 372.469582][ T6275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.171'. [ 372.528803][ T6280] netlink: 'syz.0.170': attribute type 1 has an invalid length. [ 372.616148][ T6285] netlink: 28 bytes leftover after parsing attributes in process `syz.0.170'. [ 372.616728][ T6280] bond1: entered promiscuous mode [ 372.617180][ T6280] 8021q: adding VLAN 0 to HW filter on device bond1 [ 372.619434][ T6285] bond1: entered allmulticast mode [ 372.757519][ T6280] bond1: (slave bridge1): making interface the new active one [ 372.757549][ T6280] bridge1: entered promiscuous mode [ 372.757719][ T6280] bridge1: entered allmulticast mode [ 372.820396][ T6280] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 372.891990][ T6297] netlink: 8 bytes leftover after parsing attributes in process `syz.2.174'. [ 372.919638][ T6298] FAULT_INJECTION: forcing a failure. [ 372.919638][ T6298] name failslab, interval 1, probability 0, space 0, times 0 [ 372.919665][ T6298] CPU: 0 UID: 0 PID: 6298 Comm: syz.4.175 Not tainted syzkaller #0 PREEMPT(full) [ 372.919681][ T6298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 372.919691][ T6298] Call Trace: [ 372.919697][ T6298] [ 372.919704][ T6298] dump_stack_lvl+0xe8/0x150 [ 372.919730][ T6298] should_fail_ex+0x410/0x560 [ 372.919753][ T6298] should_failslab+0xa8/0x100 [ 372.919773][ T6298] ? audit_log_start+0x103/0xa10 [ 372.919794][ T6298] kmem_cache_alloc_noprof+0xa1/0x600 [ 372.919819][ T6298] ? auditd_test_task+0x22/0x280 [ 372.919839][ T6298] ? auditd_test_task+0x22/0x280 [ 372.919857][ T6298] ? audit_log_start+0x103/0xa10 [ 372.919882][ T6298] audit_log_start+0x103/0xa10 [ 372.919910][ T6298] ? __pfx_audit_log_start+0x10/0x10 [ 372.919935][ T6298] ? get_pid_task+0x20/0x1f0 [ 372.919951][ T6298] ? get_pid_task+0x20/0x1f0 [ 372.919970][ T6298] audit_seccomp+0x63/0x190 [ 372.919988][ T6298] ? clear_bhb_loop+0x70/0xc0 [ 372.920004][ T6298] ? clear_bhb_loop+0xe/0xc0 [ 372.920023][ T6298] __seccomp_filter+0xd14/0x1de0 [ 372.920052][ T6298] ? __pfx___seccomp_filter+0x10/0x10 [ 372.920071][ T6298] ? __mutex_unlock_slowpath+0x731/0x900 [ 372.920092][ T6298] ? __fget_files+0x2a/0x420 [ 372.920114][ T6298] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 372.920132][ T6298] ? __fget_files+0x3a2/0x420 [ 372.920167][ T6298] ? __seccomp_permit_syscall+0xe7/0x2b0 [ 372.920189][ T6298] __do_fast_syscall_32+0x235/0x6a0 [ 372.920208][ T6298] ? do_fast_syscall_32+0x33/0x70 [ 372.920225][ T6298] ? asm_int80_emulation+0x1a/0x20 [ 372.920240][ T6298] ? do_int80_emulation+0x299/0x500 [ 372.920265][ T6298] do_fast_syscall_32+0x33/0x70 [ 372.920283][ T6298] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 372.920303][ T6298] RIP: 0023:0xf7ff40ec [ 372.920316][ T6298] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 372.920329][ T6298] RSP: 002b:00000000f54b650c EFLAGS: 00000206 ORIG_RAX: 00000000000001aa [ 372.920346][ T6298] RAX: ffffffffffffffda RBX: 00000000ffffffff RCX: 0000000000000001 [ 372.920357][ T6298] RDX: 0000000000006e6d RSI: 0000000000000000 RDI: 0000000000000000 [ 372.920367][ T6298] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 372.920376][ T6298] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 372.920385][ T6298] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 372.920406][ T6298] [ 373.392658][ T6305] netlink: 4 bytes leftover after parsing attributes in process `syz.4.177'. [ 373.407964][ T6305] netlink: 4 bytes leftover after parsing attributes in process `syz.4.177'. [ 373.429180][ T6305] netlink: 4 bytes leftover after parsing attributes in process `syz.4.177'. [ 373.431017][ T6305] netlink: 4 bytes leftover after parsing attributes in process `syz.4.177'. [ 373.462933][ T189] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 373.626826][ T189] usb 4-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 373.628723][ T189] usb 4-1: config 128 interface 0 has no altsetting 0 [ 373.628766][ T189] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.694048][ T5716] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 373.824730][ T5716] usb 1-1: device descriptor read/64, error -71 [ 374.063815][ T5716] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 374.104757][ T6320] pimreg: entered allmulticast mode [ 374.118747][ T6322] pimreg: left allmulticast mode [ 374.193629][ T5716] usb 1-1: device descriptor read/64, error -71 [ 374.304936][ T5716] usb usb1-port1: attempt power cycle [ 374.643738][ T5716] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 374.667885][ T5716] usb 1-1: device descriptor read/8, error -71 [ 374.903213][ T5716] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 374.927645][ T5716] usb 1-1: device descriptor read/8, error -71 [ 375.034864][ T5716] usb usb1-port1: unable to enumerate USB device [ 375.294850][ T6330] fuse: Unknown parameter 'rootmode0000000000000060000' [ 375.401627][ T6320] syz.4.180 (6320): drop_caches: 2 [ 375.650003][ T6334] process 'syz.4.184' launched './file0' with NULL argv: empty string added [ 375.873044][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 376.214093][ T189] usb 4-1: string descriptor 0 read error: -71 [ 376.273224][ T189] usb 4-1: selecting invalid altsetting 3 [ 376.273244][ T189] comedi comedi5: could not set alternate setting 3 in high speed [ 376.273256][ T189] usbduxsigma 4-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 376.335673][ T189] usbduxsigma 4-1:128.0: probe with driver usbduxsigma failed with error -22 [ 376.367946][ T189] usb 4-1: USB disconnect, device number 6 [ 376.883407][ T10] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 376.923249][ T189] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 377.041723][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 377.042234][ T10] usb 4-1: not running at top speed; connect to a high speed hub [ 377.042269][ T10] usb 4-1: New USB device found, idVendor=041e, idProduct=323b, bcdDevice= 0.40 [ 377.070206][ T10] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 377.070254][ T10] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 4 [ 377.101895][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.101928][ T10] usb 4-1: Product: 챨惃蔨ﰯ꜅܄懠뺛齛쉫侚ﵪ [ 377.101946][ T10] usb 4-1: Manufacturer: и [ 377.101962][ T10] usb 4-1: SerialNumber: ᐊ [ 377.105487][ T189] usb 1-1: Using ep0 maxpacket: 32 [ 377.106357][ T189] usb 1-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 377.129466][ T189] usb 1-1: config index 0 descriptor too short (expected 3659, got 75) [ 377.129496][ T189] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 377.171357][ T189] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.171385][ T189] usb 1-1: Product: syz [ 377.171401][ T189] usb 1-1: Manufacturer: syz [ 377.171417][ T189] usb 1-1: SerialNumber: syz [ 377.217643][ T189] usb 1-1: config 0 descriptor?? [ 377.234206][ T189] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 377.372746][ T6358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.382477][ T6358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.400126][ T6358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.400604][ T6358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.422049][ T6358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.422566][ T6358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.450442][ T6358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.458203][ T6358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.470987][ T6358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.481551][ T6358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.501517][ T6352] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 377.533626][ T6376] fuse: Unknown parameter 'rootmode0000000000000060000' [ 377.551240][ T6376] __nla_validate_parse: 6 callbacks suppressed [ 377.551254][ T6376] netlink: 4 bytes leftover after parsing attributes in process `syz.4.193'. [ 377.649318][ T10] usb 4-1: 3:0: cannot get min/max values for control 2 (id 3) [ 377.649363][ T10] usb 4-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 377.649377][ T10] usb 4-1: [3] FU [Headset Playback Volume] ch = 1, val = 0/1/1 [ 377.691038][ T10] usb 4-1: 3:0: failed to get current value for ch 0 (-71) [ 377.744442][ T189] gspca_sunplus: reg_r err -110 [ 377.789139][ T6378] 8021q: VLANs not supported on ip_vti0 [ 377.819328][ T10] usb 4-1: USB disconnect, device number 7 [ 377.932442][ T6204] udevd[6204]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 377.963024][ T6385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.963499][ T6385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.173295][ T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 378.203206][ T6391] fuse: Bad value for 'rootmode' [ 378.270032][ T6399] netlink: 8 bytes leftover after parsing attributes in process `syz.2.197'. [ 378.270061][ T6399] netlink: 'syz.2.197': attribute type 5 has an invalid length. [ 378.270073][ T6399] netlink: 20 bytes leftover after parsing attributes in process `syz.2.197'. [ 378.322953][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 378.323753][ T10] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 378.325012][ T10] usb 5-1: config index 0 descriptor too short (expected 51443, got 18) [ 378.331813][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.331841][ T10] usb 5-1: Product: syz [ 378.331856][ T10] usb 5-1: Manufacturer: syz [ 378.331872][ T10] usb 5-1: SerialNumber: syz [ 378.399449][ T10] r8152-cfgselector 5-1: Unknown version 0x0000 [ 378.399478][ T10] r8152-cfgselector 5-1: config 0 descriptor?? [ 378.428938][ T6399] geneve2: entered promiscuous mode [ 378.428967][ T6399] geneve2: entered allmulticast mode [ 378.464484][ T12] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 378.465158][ T5937] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 378.465200][ T5937] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 378.465244][ T5937] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 378.632741][ T10] r8152-cfgselector 5-1: Unknown version 0x0000 [ 378.642774][ T10] r8152-cfgselector 5-1: No union descriptors [ 378.666598][ T10] r8152-cfgselector 5-1: USB disconnect, device number 12 [ 378.716789][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.716879][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.843168][ T189] sunplus 1-1:0.0: probe with driver sunplus failed with error -110 [ 378.931655][ T6412] netlink: 'syz.0.191': attribute type 3 has an invalid length. [ 378.931736][ T6412] netlink: 'syz.0.191': attribute type 3 has an invalid length. [ 378.931821][ T6412] netlink: 'syz.0.191': attribute type 3 has an invalid length. [ 378.931867][ T6412] netlink: 'syz.0.191': attribute type 3 has an invalid length. [ 378.931913][ T6412] netlink: 'syz.0.191': attribute type 3 has an invalid length. [ 378.931959][ T6412] netlink: 'syz.0.191': attribute type 3 has an invalid length. [ 378.932004][ T6412] netlink: 'syz.0.191': attribute type 3 has an invalid length. [ 378.932050][ T6412] netlink: 'syz.0.191': attribute type 3 has an invalid length. [ 378.932095][ T6412] netlink: 'syz.0.191': attribute type 3 has an invalid length. [ 379.274485][ T25] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 379.409250][ T6429] FAULT_INJECTION: forcing a failure. [ 379.409250][ T6429] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 379.409289][ T6429] CPU: 0 UID: 0 PID: 6429 Comm: syz.3.207 Not tainted syzkaller #0 PREEMPT(full) [ 379.409313][ T6429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 379.409326][ T6429] Call Trace: [ 379.409335][ T6429] [ 379.409344][ T6429] dump_stack_lvl+0xe8/0x150 [ 379.409382][ T6429] should_fail_ex+0x410/0x560 [ 379.409412][ T6429] _copy_from_iter+0x1d3/0x1660 [ 379.409445][ T6429] ? __alloc_skb+0x27a/0x7a0 [ 379.409475][ T6429] ? __alloc_skb+0x27a/0x7a0 [ 379.409501][ T6429] ? __alloc_skb+0x27a/0x7a0 [ 379.409526][ T6429] ? __pfx__copy_from_iter+0x10/0x10 [ 379.409549][ T6429] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 379.409583][ T6429] ? __alloc_skb+0x27a/0x7a0 [ 379.409605][ T6429] ? __alloc_skb+0x27a/0x7a0 [ 379.409635][ T6429] ? netlink_sendmsg+0x650/0xb40 [ 379.409666][ T6429] ? skb_put+0x112/0x210 [ 379.409694][ T6429] netlink_sendmsg+0x6c0/0xb40 [ 379.409739][ T6429] ? __pfx_netlink_sendmsg+0x10/0x10 [ 379.409787][ T6429] ? apparmor_socket_sendmsg+0x98/0x360 [ 379.409813][ T6429] ? __pfx_netlink_sendmsg+0x10/0x10 [ 379.409844][ T6429] sock_sendmsg_nosec+0x13a/0x180 [ 379.409881][ T6429] ____sys_sendmsg+0x54e/0x850 [ 379.409915][ T6429] ? __pfx_____sys_sendmsg+0x10/0x10 [ 379.409960][ T6429] ___sys_sendmsg+0x2a5/0x360 [ 379.409987][ T6429] ? __lock_acquire+0x747/0x2de0 [ 379.410014][ T6429] ? __pfx____sys_sendmsg+0x10/0x10 [ 379.410047][ T6429] ? kstrtoull+0x137/0x1d0 [ 379.410108][ T6429] ? __fget_files+0x2a/0x420 [ 379.410137][ T6429] ? __fget_files+0x3a2/0x420 [ 379.410178][ T6429] __sys_sendmmsg+0x2de/0x4d0 [ 379.410229][ T6429] ? __pfx___sys_sendmmsg+0x10/0x10 [ 379.410292][ T6429] ? fput+0xa0/0xd0 [ 379.410320][ T6429] ? ksys_write+0x242/0x270 [ 379.410360][ T6429] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 379.410396][ T6429] __do_fast_syscall_32+0x27a/0x6a0 [ 379.410423][ T6429] ? do_fast_syscall_32+0x33/0x70 [ 379.410447][ T6429] ? asm_int80_emulation+0x1a/0x20 [ 379.410469][ T6429] ? do_int80_emulation+0x299/0x500 [ 379.410493][ T6429] ? trace_irq_disable+0x3b/0x140 [ 379.410520][ T6429] do_fast_syscall_32+0x33/0x70 [ 379.410547][ T6429] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 379.410574][ T6429] RIP: 0023:0xf705f0ec [ 379.410595][ T6429] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 379.410613][ T6429] RSP: 002b:00000000f544d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 379.410637][ T6429] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 379.410652][ T6429] RDX: 000000000000009f RSI: 0000000000000000 RDI: 0000000000000000 [ 379.410665][ T6429] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 379.410678][ T6429] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 379.410691][ T6429] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 379.410722][ T6429] [ 379.433485][ T25] usb 3-1: Invalid ep0 maxpacket: 64 [ 379.580663][ T25] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 379.754920][ T25] usb 3-1: Invalid ep0 maxpacket: 64 [ 379.755539][ T25] usb usb3-port1: attempt power cycle [ 380.092952][ T5730] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 380.115390][ T25] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 380.135303][ T25] usb 3-1: Invalid ep0 maxpacket: 64 [ 380.243720][ T5730] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 380.245218][ T5730] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x8 has an invalid bInterval 0, changing to 4 [ 380.245854][ T5730] usb 5-1: config 0 interface 0 has no altsetting 0 [ 380.257674][ T5730] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 380.257771][ T5730] usb 5-1: Product: syz [ 380.257819][ T5730] usb 5-1: Manufacturer: syz [ 380.257866][ T5730] usb 5-1: SerialNumber: syz [ 380.268227][ T25] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 380.291510][ T25] usb 3-1: Invalid ep0 maxpacket: 64 [ 380.299444][ T25] usb usb3-port1: unable to enumerate USB device [ 380.324969][ T5730] usb 5-1: config 0 descriptor?? [ 380.347851][ T5730] usb 5-1: selecting invalid altsetting 0 [ 380.631402][ T6442] nvme_fabrics: unknown parameter or missing value 'syz1' in ctrl creation request [ 380.657598][ T6430] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 380.660540][ T6430] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 380.660987][ T6430] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 380.661411][ T6430] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 380.687575][ T6430] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 380.688026][ T6430] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 380.688732][ T6430] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 380.689209][ T6430] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 380.728338][ T6430] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 380.739911][ T6430] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 380.758541][ T6430] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 380.773324][ T31] kauditd_printk_skb: 45 callbacks suppressed [ 380.773344][ T31] audit: type=1326 audit(1790177792.955:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6441 comm="syz.3.212" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 380.773581][ T31] audit: type=1326 audit(1790177792.955:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6441 comm="syz.3.212" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 380.854084][ T31] audit: type=1326 audit(1790177793.035:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6441 comm="syz.3.212" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 380.854681][ T31] audit: type=1326 audit(1790177793.035:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6441 comm="syz.3.212" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 380.854732][ T31] audit: type=1326 audit(1790177793.035:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6441 comm="syz.3.212" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 380.861237][ T31] audit: type=1326 audit(1790177793.035:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6441 comm="syz.3.212" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 380.861408][ T31] audit: type=1326 audit(1790177793.035:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6441 comm="syz.3.212" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 380.861573][ T31] audit: type=1326 audit(1790177793.035:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6441 comm="syz.3.212" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 380.933259][ T31] audit: type=1326 audit(1790177793.095:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6441 comm="syz.3.212" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 380.987972][ T31] audit: type=1326 audit(1790177793.155:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6441 comm="syz.3.212" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 381.136895][ T5730] usb 1-1: USB disconnect, device number 8 [ 381.164910][ T25] usb 5-1: USB disconnect, device number 13 [ 381.533264][ T5730] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 381.627996][ T6459] 8021q: VLANs not supported on vxcan1 [ 381.628093][ T6459] 8021q: VLANs not supported on vxcan1 [ 381.628176][ T6459] 8021q: VLANs not supported on vxcan1 [ 381.678391][ T6459] 8021q: VLANs not supported on vxcan1 [ 381.678503][ T6459] 8021q: VLANs not supported on vxcan1 [ 381.678593][ T6459] 8021q: VLANs not supported on vxcan1 [ 381.678677][ T6459] 8021q: VLANs not supported on vxcan1 [ 381.678758][ T6459] 8021q: VLANs not supported on vxcan1 [ 381.678838][ T6459] 8021q: VLANs not supported on vxcan1 [ 381.678949][ T6459] 8021q: VLANs not supported on vxcan1 [ 381.679034][ T6459] 8021q: VLANs not supported on vxcan1 [ 381.679117][ T6459] 8021q: VLANs not supported on vxcan1 [ 381.679206][ T6459] 8021q: VLANs not supported on vxcan1 [ 381.679293][ T6459] 8021q: VLANs not supported on vxcan1 [ 381.679377][ T6459] 8021q: VLANs not supported on vxcan1 [ 381.679461][ T6459] 8021q: VLANs not supported on vxcan1 [ 381.679546][ T6459] 8021q: VLANs not supported on vxcan1 [ 381.679632][ T6459] 8021q: VLANs not supported on vxcan1 [ 381.679715][ T6459] 8021q: VLANs not supported on vxcan1 [ 381.680787][ T6459] 8021q: VLANs not supported on vxcan1 [ 381.680873][ T6459] 8021q: VLANs not supported on vxcan1 [ 381.680971][ T6459] 8021q: VLANs not supported on vxcan1 [ 381.681053][ T6459] 8021q: VLANs not supported on vxcan1 [ 381.681138][ T6459] 8021q: VLANs not supported on vxcan1 [ 381.681222][ T6459] 8021q: VLANs not supported on vxcan1 [ 381.686171][ T5730] usb 1-1: Using ep0 maxpacket: 32 [ 381.688030][ T5730] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 381.691131][ T5730] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.699809][ T6459] 8021q: VLANs not supported on vxcan1 [ 381.699915][ T6459] 8021q: VLANs not supported on vxcan1 [ 381.699997][ T6459] 8021q: VLANs not supported on vxcan1 [ 381.700092][ T6459] 8021q: VLANs not supported on vxcan1 [ 381.700174][ T6459] 8021q: VLANs not supported on vxcan1 [ 381.700271][ T6459] 8021q: VLANs not supported on vxcan1 [ 381.700352][ T6459] 8021q: VLANs not supported on vxcan1 [ 381.700367][ T6460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 381.700431][ T6459] 8021q: VLANs not supported on vxcan1 [ 381.882063][ T6460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 381.901875][ T5730] usb 1-1: config 0 descriptor?? [ 381.928047][ T5730] gspca_main: sq930x-2.14.0 probing 041e:403c [ 381.943334][ T6460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 381.949407][ T6460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 381.954702][ T6460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 381.956127][ T6460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.035648][ T6460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.059869][ T6460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.087468][ T6460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.142334][ T6460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.158376][ T6460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.329587][ T6460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.345854][ T6460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.377585][ T6460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.381358][ T6460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.410949][ T6460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.427133][ T6460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.442554][ T6460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.456471][ T6460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.457904][ T6460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.459430][ T6460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.506982][ T6460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.525230][ T6460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.533778][ T6460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.569736][ T6460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.593644][ T6460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.615555][ T6460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.617031][ T5730] gspca_sq930x: ucbus_write failed -71 [ 382.617114][ T5730] sq930x 1-1:0.0: probe with driver sq930x failed with error -71 [ 382.635222][ T5730] usb 1-1: USB disconnect, device number 9 [ 382.639476][ T6460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.640809][ T6460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.679033][ T6460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.693953][ T6460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.702056][ T6460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.735480][ T6460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.740317][ T6460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.764545][ T6460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.771849][ T6460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.798366][ T6460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.817458][ T6460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.821934][ T6460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 383.143357][ T5730] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 383.293875][ T5730] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 383.296743][ T5730] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 383.296781][ T5730] usb 3-1: config 0 has no interfaces? [ 383.316937][ T5730] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.317013][ T5730] usb 3-1: Product: syz [ 383.317055][ T5730] usb 3-1: Manufacturer: syz [ 383.317097][ T5730] usb 3-1: SerialNumber: syz [ 383.342104][ T5730] usb 3-1: config 0 descriptor?? [ 383.495083][ T6502] netlink: 192 bytes leftover after parsing attributes in process `syz.0.226'. [ 383.571056][ T6481] FAULT_INJECTION: forcing a failure. [ 383.571056][ T6481] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 383.571098][ T6481] CPU: 1 UID: 0 PID: 6481 Comm: syz.2.221 Not tainted syzkaller #0 PREEMPT(full) [ 383.571127][ T6481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 383.571139][ T6481] Call Trace: [ 383.571148][ T6481] [ 383.571157][ T6481] dump_stack_lvl+0xe8/0x150 [ 383.571197][ T6481] should_fail_ex+0x410/0x560 [ 383.571219][ T6481] prepare_alloc_pages+0x223/0x600 [ 383.571241][ T6481] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 383.571260][ T6481] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 383.571280][ T6481] ? __pfx_policy_nodemask+0x10/0x10 [ 383.571307][ T6481] alloc_pages_mpol+0x21e/0x390 [ 383.571331][ T6481] folio_alloc_mpol_noprof+0x39/0x160 [ 383.571352][ T6481] vma_alloc_folio_noprof+0xe1/0x1e0 [ 383.571373][ T6481] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 383.571403][ T6481] do_wp_page+0x117d/0x4b80 [ 383.571437][ T6481] ? __pfx_do_wp_page+0x10/0x10 [ 383.571455][ T6481] ? do_raw_spin_lock+0x12b/0x2f0 [ 383.571480][ T6481] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 383.571509][ T6481] handle_mm_fault+0x15d7/0x3750 [ 383.571538][ T6481] ? handle_mm_fault+0xf1/0x3750 [ 383.571567][ T6481] ? __pfx_handle_mm_fault+0x10/0x10 [ 383.571588][ T6481] ? follow_page_pte+0xc8f/0xf10 [ 383.571615][ T6481] ? __pfx_follow_page_pte+0x10/0x10 [ 383.571645][ T6481] __get_user_pages+0x1675/0x2750 [ 383.571688][ T6481] __gup_longterm_locked+0xd52/0x15c0 [ 383.571717][ T6481] ? sanity_check_pinned_pages+0x817/0x8d0 [ 383.571742][ T6481] gup_fast_fallback+0x1d92/0x20e0 [ 383.571784][ T6481] ? __pfx_gup_fast_fallback+0x10/0x10 [ 383.571805][ T6481] ? is_valid_gup_args+0x11f/0x200 [ 383.571826][ T6481] ? pin_user_pages_fast+0x4d/0xb0 [ 383.571848][ T6481] iov_iter_extract_pages+0x3a1/0x690 [ 383.571875][ T6481] iov_iter_extract_bvecs+0x218/0xad0 [ 383.571904][ T6481] ? lock_acquire+0x115/0x350 [ 383.571919][ T6481] ? percpu_ref_put+0x1e/0x230 [ 383.571946][ T6481] bio_iov_iter_get_pages+0x5ae/0xee0 [ 383.571980][ T6481] blkdev_direct_IO+0x1025/0x17b0 [ 383.572009][ T6481] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 383.572033][ T6481] ? aa_file_perm+0x4ed/0x15f0 [ 383.572084][ T6481] ? __lock_acquire+0x747/0x2de0 [ 383.572110][ T6481] ? __pfx_aa_file_perm+0x10/0x10 [ 383.572139][ T6481] ? kiocb_write_and_wait+0xad/0x1b0 [ 383.572172][ T6481] blkdev_read_iter+0x223/0x420 [ 383.572207][ T6481] do_iter_readv_writev+0x612/0x8c0 [ 383.572233][ T6481] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 383.572261][ T6481] ? bpf_lsm_file_permission+0x9/0x20 [ 383.572284][ T6481] ? security_file_permission+0x75/0x260 [ 383.572311][ T6481] ? rw_verify_area+0x24a/0x4c0 [ 383.572338][ T6481] vfs_readv+0x28d/0x850 [ 383.572363][ T6481] ? __pfx_vfs_readv+0x10/0x10 [ 383.572394][ T6481] ? __fget_files+0x2a/0x420 [ 383.572419][ T6481] ? __fget_files+0x3a2/0x420 [ 383.572440][ T6481] ? __fget_files+0x2a/0x420 [ 383.572468][ T6481] __ia32_compat_sys_preadv2+0x22d/0x330 [ 383.572488][ T6481] ? __pfx___ia32_compat_sys_preadv2+0x10/0x10 [ 383.572513][ T6481] __do_fast_syscall_32+0x27a/0x6a0 [ 383.572533][ T6481] ? do_fast_syscall_32+0x33/0x70 [ 383.572551][ T6481] ? asm_int80_emulation+0x1a/0x20 [ 383.572566][ T6481] ? do_int80_emulation+0x299/0x500 [ 383.572583][ T6481] ? trace_irq_disable+0x3b/0x140 [ 383.572602][ T6481] do_fast_syscall_32+0x33/0x70 [ 383.572621][ T6481] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 383.572640][ T6481] RIP: 0023:0xf6fff0ec [ 383.572655][ T6481] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 383.572668][ T6481] RSP: 002b:00000000f53ed50c EFLAGS: 00000206 ORIG_RAX: 000000000000017a [ 383.572685][ T6481] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 383.572696][ T6481] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000000 [ 383.572704][ T6481] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 383.572713][ T6481] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 383.572722][ T6481] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 383.572744][ T6481] [ 384.038604][ T5730] usb 3-1: USB disconnect, device number 10 [ 384.289002][ T6512] netlink: 4 bytes leftover after parsing attributes in process `syz.1.231'. [ 384.291680][ T6512] netlink: 4 bytes leftover after parsing attributes in process `syz.1.231'. [ 384.302072][ T6512] netlink: 4 bytes leftover after parsing attributes in process `syz.1.231'. [ 384.321984][ T6512] netlink: 4 bytes leftover after parsing attributes in process `syz.1.231'. [ 384.634802][ T6516] FAULT_INJECTION: forcing a failure. [ 384.634802][ T6516] name failslab, interval 1, probability 0, space 0, times 0 [ 384.634828][ T6516] CPU: 0 UID: 0 PID: 6516 Comm: syz.1.233 Not tainted syzkaller #0 PREEMPT(full) [ 384.634845][ T6516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 384.634855][ T6516] Call Trace: [ 384.634861][ T6516] [ 384.634868][ T6516] dump_stack_lvl+0xe8/0x150 [ 384.634896][ T6516] should_fail_ex+0x410/0x560 [ 384.634917][ T6516] should_failslab+0xa8/0x100 [ 384.634939][ T6516] __kmalloc_noprof+0xfe/0x720 [ 384.634954][ T6516] ? tomoyo_encode+0x2ad/0x570 [ 384.634973][ T6516] ? tomoyo_encode+0x2ad/0x570 [ 384.634998][ T6516] tomoyo_encode+0x2ad/0x570 [ 384.635022][ T6516] tomoyo_realpath_from_path+0x5fa/0x640 [ 384.635050][ T6516] ? tomoyo_path_number_perm+0x219/0x5f0 [ 384.635067][ T6516] tomoyo_path_number_perm+0x246/0x5f0 [ 384.635085][ T6516] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 384.635102][ T6516] ? __lock_acquire+0x747/0x2de0 [ 384.635131][ T6516] ? hook_file_ioctl_compat+0x1f2/0x600 [ 384.635165][ T6516] ? __fget_files+0x2a/0x420 [ 384.635191][ T6516] ? __fget_files+0x3a2/0x420 [ 384.635212][ T6516] ? __fget_files+0x2a/0x420 [ 384.635239][ T6516] security_file_ioctl_compat+0xc3/0x2a0 [ 384.635257][ T6516] __ia32_compat_sys_ioctl+0x139/0x950 [ 384.635277][ T6516] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 384.635294][ T6516] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 384.635313][ T6516] ? __fget_files+0x3a2/0x420 [ 384.635339][ T6516] ? fput+0xa0/0xd0 [ 384.635358][ T6516] ? ksys_write+0x242/0x270 [ 384.635390][ T6516] __do_fast_syscall_32+0x27a/0x6a0 [ 384.635409][ T6516] ? do_fast_syscall_32+0x33/0x70 [ 384.635426][ T6516] ? asm_int80_emulation+0x1a/0x20 [ 384.635441][ T6516] ? do_int80_emulation+0x299/0x500 [ 384.635458][ T6516] ? trace_irq_disable+0x3b/0x140 [ 384.635477][ T6516] do_fast_syscall_32+0x33/0x70 [ 384.635495][ T6516] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 384.635515][ T6516] RIP: 0023:0xf7f830ec [ 384.635528][ T6516] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 384.635541][ T6516] RSP: 002b:00000000f544650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 384.635558][ T6516] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0145608 [ 384.635595][ T6516] RDX: 00000000800007c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 384.635608][ T6516] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 384.635620][ T6516] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 384.635638][ T6516] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 384.635660][ T6516] [ 384.635704][ T6516] ERROR: Out of memory at tomoyo_realpath_from_path. [ 384.950833][ T6518] FAULT_INJECTION: forcing a failure. [ 384.950833][ T6518] name failslab, interval 1, probability 0, space 0, times 0 [ 384.950869][ T6518] CPU: 0 UID: 0 PID: 6518 Comm: syz.2.234 Not tainted syzkaller #0 PREEMPT(full) [ 384.950894][ T6518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 384.950907][ T6518] Call Trace: [ 384.950916][ T6518] [ 384.950925][ T6518] dump_stack_lvl+0xe8/0x150 [ 384.950961][ T6518] should_fail_ex+0x410/0x560 [ 384.950990][ T6518] ? __alloc_skb+0x1db/0x7a0 [ 384.951014][ T6518] should_failslab+0xa8/0x100 [ 384.951042][ T6518] ? __alloc_skb+0x1db/0x7a0 [ 384.951064][ T6518] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 384.951108][ T6518] ? __alloc_skb+0x18d/0x7a0 [ 384.951132][ T6518] ? __alloc_skb+0x1db/0x7a0 [ 384.951168][ T6518] __alloc_skb+0x1db/0x7a0 [ 384.951205][ T6518] netlink_ack+0x136/0xb30 [ 384.951234][ T6518] ? __pfx_genl_rcv_msg+0x10/0x10 [ 384.951276][ T6518] netlink_rcv_skb+0x2a4/0x4a0 [ 384.951310][ T6518] ? __pfx_genl_rcv_msg+0x10/0x10 [ 384.951336][ T6518] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 384.951383][ T6518] ? down_read+0x2be/0x330 [ 384.951414][ T6518] genl_rcv+0x28/0x40 [ 384.951436][ T6518] netlink_unicast+0x7bd/0x940 [ 384.951477][ T6518] netlink_sendmsg+0x813/0xb40 [ 384.951519][ T6518] ? __pfx_netlink_sendmsg+0x10/0x10 [ 384.951559][ T6518] ? apparmor_socket_sendmsg+0x98/0x360 [ 384.951586][ T6518] ? __pfx_netlink_sendmsg+0x10/0x10 [ 384.951617][ T6518] sock_sendmsg_nosec+0x13a/0x180 [ 384.951655][ T6518] ____sys_sendmsg+0x54e/0x850 [ 384.951691][ T6518] ? __pfx_____sys_sendmsg+0x10/0x10 [ 384.951738][ T6518] ___sys_sendmsg+0x2a5/0x360 [ 384.951765][ T6518] ? __lock_acquire+0x747/0x2de0 [ 384.951793][ T6518] ? __pfx____sys_sendmsg+0x10/0x10 [ 384.951821][ T6518] ? get_pid_task+0x20/0x1f0 [ 384.951842][ T6518] ? get_pid_task+0x20/0x1f0 [ 384.951861][ T6518] ? get_pid_task+0x20/0x1f0 [ 384.951915][ T6518] ? __fget_files+0x2a/0x420 [ 384.951945][ T6518] ? __fget_files+0x3a2/0x420 [ 384.951986][ T6518] __sys_sendmsg+0x177/0x240 [ 384.952017][ T6518] ? __pfx___sys_sendmsg+0x10/0x10 [ 384.952067][ T6518] __do_fast_syscall_32+0x27a/0x6a0 [ 384.952094][ T6518] ? do_fast_syscall_32+0x33/0x70 [ 384.952118][ T6518] ? asm_int80_emulation+0x1a/0x20 [ 384.952139][ T6518] ? do_int80_emulation+0x299/0x500 [ 384.952164][ T6518] ? trace_irq_disable+0x3b/0x140 [ 384.952197][ T6518] do_fast_syscall_32+0x33/0x70 [ 384.952224][ T6518] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 384.952251][ T6518] RIP: 0023:0xf6fff0ec [ 384.952271][ T6518] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 384.952289][ T6518] RSP: 002b:00000000f53ed50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 384.952313][ T6518] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000240 [ 384.952328][ T6518] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 384.952341][ T6518] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 384.952353][ T6518] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 384.952366][ T6518] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 384.952398][ T6518] [ 385.358229][ T6523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.360885][ T6523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.492243][ T6529] fuse: Unknown parameter 'rootmode0000000000000060000' [ 385.582936][ T189] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 385.712925][ T189] usb 5-1: device descriptor read/64, error -71 [ 385.972938][ T189] usb 5-1: new low-speed USB device number 15 using dummy_hcd [ 386.112949][ T189] usb 5-1: device descriptor read/64, error -71 [ 386.223332][ T189] usb usb5-port1: attempt power cycle [ 386.562914][ T189] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 386.584159][ T189] usb 5-1: device descriptor read/8, error -71 [ 386.653099][ T6561] netlink: 192 bytes leftover after parsing attributes in process `syz.0.245'. [ 386.700122][ T31] kauditd_printk_skb: 46 callbacks suppressed [ 386.700146][ T31] audit: type=1326 audit(1790177798.875:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6565 comm="syz.2.250" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 386.701054][ T31] audit: type=1326 audit(1790177798.875:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6565 comm="syz.2.250" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 386.701617][ T31] audit: type=1326 audit(1790177798.875:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6565 comm="syz.2.250" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 386.735013][ T31] audit: type=1326 audit(1790177798.875:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6565 comm="syz.2.250" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 386.735072][ T31] audit: type=1326 audit(1790177798.885:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6565 comm="syz.2.250" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 386.759668][ T31] audit: type=1326 audit(1790177798.915:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6565 comm="syz.2.250" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 386.759723][ T31] audit: type=1326 audit(1790177798.915:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6565 comm="syz.2.250" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=26 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 386.759755][ T31] audit: type=1326 audit(1790177798.915:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6565 comm="syz.2.250" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 386.835006][ T31] audit: type=1326 audit(1790177798.915:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6565 comm="syz.2.250" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 386.835048][ T31] audit: type=1326 audit(1790177798.985:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6565 comm="syz.2.250" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=26 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 386.933675][ T189] usb 5-1: new low-speed USB device number 17 using dummy_hcd [ 386.973659][ T189] usb 5-1: device descriptor read/8, error -71 [ 387.084095][ T189] usb usb5-port1: unable to enumerate USB device [ 387.089569][ T6568] fuse: Unknown parameter 'rootmode0000000000000060000' [ 387.578737][ T6577] hub 1-0:1.0: USB hub found [ 387.580925][ T6577] hub 1-0:1.0: 1 port detected [ 387.621943][ T6576] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.255' sets config #1 [ 387.923086][ T25] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 388.086210][ T25] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 388.087511][ T25] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 388.087559][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 388.087587][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 388.087612][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 388.088950][ T25] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 388.088976][ T25] usb 2-1: Manufacturer: syz [ 388.146689][ T25] usb 2-1: config 0 descriptor?? [ 388.625483][ T6598] fuse: Unknown parameter 'rootmode0000000000000060000' [ 388.892505][ T6607] netlink: 12 bytes leftover after parsing attributes in process `syz.4.265'. [ 388.892552][ T6607] netlink: 4 bytes leftover after parsing attributes in process `syz.4.265'. [ 389.024413][ T25] usbhid 2-1:0.0: can't add hid device: -71 [ 389.024529][ T25] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 389.054640][ T25] usb 2-1: USB disconnect, device number 7 [ 389.638463][ T6624] netlink: 4 bytes leftover after parsing attributes in process `syz.0.268'. [ 389.768734][ T6629] team0: entered allmulticast mode [ 389.768760][ T6629] team_slave_0: entered allmulticast mode [ 389.768780][ T6629] team_slave_1: entered allmulticast mode [ 390.227411][ T6639] fuse: Unknown parameter 'rootmode0000000000000060000' [ 390.721393][ T6661] xt_socket: unknown flags 0x20 [ 390.731159][ T6661] xt_socket: unknown flags 0x20 [ 390.809287][ T6666] FAULT_INJECTION: forcing a failure. [ 390.809287][ T6666] name failslab, interval 1, probability 0, space 0, times 0 [ 390.809314][ T6666] CPU: 0 UID: 0 PID: 6666 Comm: syz.0.282 Not tainted syzkaller #0 PREEMPT(full) [ 390.809331][ T6666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 390.809342][ T6666] Call Trace: [ 390.809348][ T6666] [ 390.809354][ T6666] dump_stack_lvl+0xe8/0x150 [ 390.809382][ T6666] should_fail_ex+0x410/0x560 [ 390.809404][ T6666] should_failslab+0xa8/0x100 [ 390.809425][ T6666] ? skb_clone+0x212/0x3a0 [ 390.809446][ T6666] kmem_cache_alloc_noprof+0xa1/0x600 [ 390.809473][ T6666] ? skb_clone+0x212/0x3a0 [ 390.809499][ T6666] skb_clone+0x212/0x3a0 [ 390.809523][ T6666] __netlink_deliver_tap+0x413/0x860 [ 390.809556][ T6666] ? netlink_deliver_tap+0x2e/0x1b0 [ 390.809580][ T6666] netlink_deliver_tap+0x19c/0x1b0 [ 390.809605][ T6666] netlink_unicast+0x781/0x940 [ 390.809637][ T6666] netlink_sendmsg+0x813/0xb40 [ 390.809662][ T6666] ? up_write+0x19d/0x4a0 [ 390.809719][ T6666] ? __pfx_netlink_sendmsg+0x10/0x10 [ 390.809760][ T6666] ? apparmor_socket_sendmsg+0x98/0x360 [ 390.809787][ T6666] ? trace_contention_end+0x3d/0x140 [ 390.809810][ T6666] ? __pfx_netlink_sendmsg+0x10/0x10 [ 390.809832][ T6666] sock_sendmsg_nosec+0x13a/0x180 [ 390.809859][ T6666] sock_sendmsg+0x1ca/0x2d0 [ 390.809888][ T6666] ? __pfx_sock_sendmsg+0x10/0x10 [ 390.809938][ T6666] ? __asan_memset+0x22/0x50 [ 390.809972][ T6666] ? iov_iter_bvec+0xb8/0x180 [ 390.810000][ T6666] splice_to_socket+0xb5e/0x12a0 [ 390.810056][ T6666] ? __pfx_splice_to_socket+0x10/0x10 [ 390.810124][ T6666] ? get_pid_task+0x20/0x1f0 [ 390.810155][ T6666] ? bpf_lsm_file_permission+0x9/0x20 [ 390.810177][ T6666] ? security_file_permission+0x75/0x260 [ 390.810204][ T6666] ? rw_verify_area+0x203/0x4c0 [ 390.810227][ T6666] ? __pfx_splice_to_socket+0x10/0x10 [ 390.810252][ T6666] do_splice+0xf14/0x1970 [ 390.810279][ T6666] ? lock_acquire+0x115/0x350 [ 390.810307][ T6666] ? __pfx_do_splice+0x10/0x10 [ 390.810338][ T6666] __se_sys_splice+0x353/0x490 [ 390.810367][ T6666] ? __pfx___se_sys_splice+0x10/0x10 [ 390.810394][ T6666] ? __ia32_sys_splice+0x21/0xf0 [ 390.810421][ T6666] __do_fast_syscall_32+0x27a/0x6a0 [ 390.810441][ T6666] ? do_fast_syscall_32+0x33/0x70 [ 390.810458][ T6666] ? asm_int80_emulation+0x1a/0x20 [ 390.810473][ T6666] ? do_int80_emulation+0x299/0x500 [ 390.810495][ T6666] ? trace_irq_disable+0x3b/0x140 [ 390.810514][ T6666] do_fast_syscall_32+0x33/0x70 [ 390.810533][ T6666] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 390.810552][ T6666] RIP: 0023:0xf707f0ec [ 390.810567][ T6666] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 390.810581][ T6666] RSP: 002b:00000000f546d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000139 [ 390.810598][ T6666] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 390.810611][ T6666] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000010500 [ 390.810621][ T6666] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 390.810630][ T6666] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 390.810639][ T6666] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 390.810661][ T6666] [ 391.175429][ T6666] validate_nla: 45 callbacks suppressed [ 391.175452][ T6666] netlink: 'syz.0.282': attribute type 5 has an invalid length. [ 391.639074][ T6687] netlink: 44 bytes leftover after parsing attributes in process `syz.2.290'. [ 391.915952][ T6691] netlink: 'syz.0.289': attribute type 7 has an invalid length. [ 391.915976][ T6691] netlink: 'syz.0.289': attribute type 8 has an invalid length. [ 391.915990][ T6691] netlink: 'syz.0.289': attribute type 13 has an invalid length. [ 391.947313][ T5664] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 392.114323][ T5664] usb 3-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 392.118341][ T5664] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.118366][ T5664] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.118383][ T5664] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 392.118414][ T5664] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.180030][ T5664] usb 3-1: config 0 descriptor?? [ 392.233141][ T189] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 392.438556][ T189] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 392.450054][ T189] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 392.450137][ T189] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 392.450200][ T189] usb 2-1: config 1 has no interface number 0 [ 392.450315][ T189] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.450391][ T189] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 392.450476][ T189] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 392.512931][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 392.541060][ T189] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.541092][ T189] usb 2-1: Product: syz [ 392.541106][ T189] usb 2-1: Manufacturer: syz [ 392.541133][ T189] usb 2-1: SerialNumber: syz [ 392.639896][ T5664] input: HID 04b4:0001 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:04B4:0001.0002/input/input7 [ 392.801331][ T5664] cypress 0003:04B4:0001.0002: input,hidraw0: USB HID v0.00 Joystick [HID 04b4:0001] on usb-dummy_hcd.2-1/input0 [ 392.836004][ T5664] usb 3-1: USB disconnect, device number 11 [ 393.286375][ T6700] fido_id[6700]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 393.373051][ T25] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 393.546697][ T25] usb 5-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 393.570429][ T25] usb 5-1: config 128 interface 0 has no altsetting 0 [ 393.570476][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.868856][ T189] cdc_ncm 2-1:1.1: bind() failure [ 394.280970][ T31] kauditd_printk_skb: 114 callbacks suppressed [ 394.281024][ T31] audit: type=1326 audit(1790177806.455:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6710 comm="syz.3.296" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 394.281579][ T31] audit: type=1326 audit(1790177806.455:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6710 comm="syz.3.296" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 394.378146][ T31] audit: type=1326 audit(1790177806.535:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6710 comm="syz.3.296" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 394.378216][ T31] audit: type=1326 audit(1790177806.535:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6710 comm="syz.3.296" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 394.378263][ T31] audit: type=1326 audit(1790177806.535:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6710 comm="syz.3.296" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 394.378310][ T31] audit: type=1326 audit(1790177806.545:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6710 comm="syz.3.296" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 394.378343][ T31] audit: type=1326 audit(1790177806.545:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6710 comm="syz.3.296" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 394.378408][ T31] audit: type=1326 audit(1790177806.545:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6710 comm="syz.3.296" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 394.378459][ T31] audit: type=1326 audit(1790177806.545:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6710 comm="syz.3.296" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=26 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 394.378491][ T31] audit: type=1326 audit(1790177806.545:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6710 comm="syz.3.296" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 395.892074][ T25] usb 5-1: string descriptor 0 read error: -71 [ 395.942876][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 395.973075][ T25] usb 5-1: selecting invalid altsetting 3 [ 395.973103][ T25] comedi comedi5: could not set alternate setting 3 in high speed [ 395.973119][ T25] usbduxsigma 5-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 396.041280][ T25] usbduxsigma 5-1:128.0: probe with driver usbduxsigma failed with error -22 [ 396.055170][ T25] usb 5-1: USB disconnect, device number 18 [ 396.229037][ T189] usb 2-1: USB disconnect, device number 8 [ 396.232922][ T5716] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 396.402888][ T5716] usb 3-1: Using ep0 maxpacket: 32 [ 396.405564][ T5716] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 396.407258][ T6738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.304'. [ 396.407294][ T5716] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 396.407319][ T5716] usb 3-1: config 0 has no interface number 0 [ 396.407360][ T5716] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 396.411530][ T5716] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.411559][ T5716] usb 3-1: Product: syz [ 396.411576][ T5716] usb 3-1: Manufacturer: syz [ 396.411592][ T5716] usb 3-1: SerialNumber: syz [ 396.507511][ T5716] usb 3-1: config 0 descriptor?? [ 396.512284][ T6730] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 396.549407][ T6738] vlan2: entered promiscuous mode [ 396.549461][ T6738] veth1_to_hsr: entered promiscuous mode [ 396.809762][ T6730] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 397.095812][ T5716] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 397.096066][ T5716] asix 3-1:0.188: probe with driver asix failed with error -71 [ 397.125965][ T5716] usb 3-1: USB disconnect, device number 12 [ 397.149164][ T5669] udevd[5669]: setting mode of /dev/bus/usb/003/012 to 020664 failed: No such file or directory [ 397.149291][ T5669] udevd[5669]: setting owner of /dev/bus/usb/003/012 to uid=0, gid=0 failed: No such file or directory [ 397.292447][ T6758] loop6: detected capacity change from 0 to 524288000 [ 397.363045][ T6758] Invalid logical block size (255) [ 397.454567][ T10] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 397.615382][ T10] usb 2-1: Invalid ep0 maxpacket: 16 [ 397.730194][ T6764] sctp: [Deprecated]: syz.4.313 (pid 6764) Use of int in max_burst socket option. [ 397.730194][ T6764] Use struct sctp_assoc_value instead [ 397.753200][ T6764] vxlan0: entered allmulticast mode [ 397.753472][ T10] usb 2-1: new low-speed USB device number 10 using dummy_hcd [ 397.765140][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.765192][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.765229][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.765266][ T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 397.904429][ T10] usb 2-1: Invalid ep0 maxpacket: 16 [ 397.904737][ T10] usb usb2-port1: attempt power cycle [ 397.979644][ T6770] sctp: [Deprecated]: syz.2.314 (pid 6770) Use of int in max_burst socket option. [ 397.979644][ T6770] Use struct sctp_assoc_value instead [ 398.082077][ T6766] vxlan0: entered allmulticast mode [ 398.177035][ T5938] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 398.177088][ T5938] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 398.177125][ T5938] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 398.177162][ T5938] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 398.265924][ T10] usb 2-1: new low-speed USB device number 11 using dummy_hcd [ 398.269659][ T6778] netlink: 'syz.3.317': attribute type 9 has an invalid length. [ 398.296206][ T10] usb 2-1: Invalid ep0 maxpacket: 16 [ 398.353708][ T189] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 398.424276][ T10] usb 2-1: new low-speed USB device number 12 using dummy_hcd [ 398.448408][ T10] usb 2-1: Invalid ep0 maxpacket: 16 [ 398.448896][ T10] usb usb2-port1: unable to enumerate USB device [ 398.513911][ T189] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 398.517129][ T189] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 398.517154][ T189] usb 1-1: config 0 has no interfaces? [ 398.521561][ T189] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.521590][ T189] usb 1-1: Product: syz [ 398.521605][ T189] usb 1-1: Manufacturer: syz [ 398.521620][ T189] usb 1-1: SerialNumber: syz [ 398.531298][ T189] usb 1-1: config 0 descriptor?? [ 398.629537][ T6786] netlink: 36 bytes leftover after parsing attributes in process `syz.3.321'. [ 398.630946][ T6786] netlink: 36 bytes leftover after parsing attributes in process `syz.3.321'. [ 398.723108][ T5664] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 398.750381][ T189] usb 1-1: USB disconnect, device number 10 [ 398.875314][ T5664] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 398.876560][ T5664] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 398.876579][ T5664] usb 5-1: config 1 has an invalid interface descriptor of length 3, skipping [ 398.876592][ T5664] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 398.876661][ T5664] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 398.876676][ T5664] usb 5-1: config 1 has no interface number 1 [ 398.876703][ T5664] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 398.876730][ T5664] usb 5-1: config 1 interface 2 altsetting 1 has an endpoint descriptor with address 0x4F, changing to 0xF [ 398.876749][ T5664] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 398.876767][ T5664] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0xF has invalid wMaxPacketSize 0 [ 398.878767][ T5664] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.878785][ T5664] usb 5-1: Product: syz [ 398.878796][ T5664] usb 5-1: Manufacturer: syz [ 398.878807][ T5664] usb 5-1: SerialNumber: syz [ 398.983145][ T30] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 399.134314][ T30] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 399.137008][ T30] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 399.137046][ T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.170400][ T30] usb 4-1: config 0 descriptor?? [ 399.181333][ T5664] usb 5-1: Failed to set altset [ 399.181385][ T5664] usb 5-1: 0:2: cannot create sequencer device [ 399.198110][ T30] pwc: Askey VC010 type 2 USB webcam detected. [ 399.199517][ T5664] usb 5-1: Failed to set altset [ 399.245742][ T5664] snd-usb-audio 5-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 399.248252][ T5664] usb 5-1: USB disconnect, device number 19 [ 399.279709][ T6204] udevd[6204]: setting mode of /dev/bus/usb/005/019 to 020664 failed: No such file or directory [ 399.279832][ T6204] udevd[6204]: setting owner of /dev/bus/usb/005/019 to uid=0, gid=0 failed: No such file or directory [ 399.328745][ T6204] udevd[6204]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 399.422199][ T6790] netlink: 12 bytes leftover after parsing attributes in process `syz.3.323'. [ 399.522331][ T6790] bridge1: port 1(dummy0) entered blocking state [ 399.522559][ T6790] bridge1: port 1(dummy0) entered disabled state [ 399.534612][ T6790] dummy0: entered allmulticast mode [ 399.540005][ T6790] dummy0: entered promiscuous mode [ 399.559866][ T6790] netlink: 'syz.3.323': attribute type 10 has an invalid length. [ 399.559885][ T6790] netlink: 40 bytes leftover after parsing attributes in process `syz.3.323'. [ 399.579683][ T6790] bridge1: port 1(dummy0) entered blocking state [ 399.580232][ T6790] bridge1: port 1(dummy0) entered forwarding state [ 399.595668][ T6790] dummy0: left allmulticast mode [ 399.596415][ T6790] bridge1: port 1(dummy0) entered disabled state [ 399.851605][ T30] pwc: recv_control_msg error -32 req 02 val 2b00 [ 399.861991][ T30] pwc: recv_control_msg error -32 req 02 val 2700 [ 399.871150][ T30] pwc: recv_control_msg error -32 req 02 val 2c00 [ 399.872044][ T30] pwc: recv_control_msg error -32 req 04 val 1000 [ 399.887270][ T30] pwc: recv_control_msg error -32 req 04 val 1300 [ 400.100556][ T30] pwc: recv_control_msg error -71 req 02 val 2000 [ 400.101120][ T30] pwc: recv_control_msg error -71 req 02 val 2100 [ 400.101582][ T30] pwc: recv_control_msg error -71 req 04 val 1500 [ 400.102012][ T30] pwc: recv_control_msg error -71 req 02 val 2500 [ 400.111933][ T30] pwc: recv_control_msg error -71 req 02 val 2400 [ 400.119008][ T30] pwc: recv_control_msg error -71 req 02 val 2600 [ 400.142124][ T30] pwc: recv_control_msg error -71 req 02 val 2900 [ 400.156771][ T30] pwc: recv_control_msg error -71 req 02 val 2800 [ 400.157501][ T30] pwc: recv_control_msg error -71 req 04 val 1100 [ 400.157941][ T30] pwc: recv_control_msg error -71 req 04 val 1200 [ 400.195588][ T30] pwc: Registered as video103. [ 400.200854][ T30] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input8 [ 400.249109][ T30] usb 4-1: USB disconnect, device number 8 [ 400.423864][ T6819] netlink: 36 bytes leftover after parsing attributes in process `syz.2.333'. [ 400.425267][ T6819] netlink: 36 bytes leftover after parsing attributes in process `syz.2.333'. [ 400.710304][ T6824] sctp: [Deprecated]: syz.1.334 (pid 6824) Use of int in max_burst socket option. [ 400.710304][ T6824] Use struct sctp_assoc_value instead [ 400.756293][ T6824] vxlan0: entered allmulticast mode [ 400.772982][ T5744] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.773033][ T5744] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.773070][ T5744] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 400.773107][ T5744] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 401.018384][ T31] kauditd_printk_skb: 20 callbacks suppressed [ 401.018406][ T31] audit: type=1326 audit(1790177813.195:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6841 comm="syz.2.340" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 401.018855][ T31] audit: type=1326 audit(1790177813.195:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6841 comm="syz.2.340" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 401.019001][ T31] audit: type=1326 audit(1790177813.195:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6841 comm="syz.2.340" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 401.021794][ T31] audit: type=1326 audit(1790177813.195:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6841 comm="syz.2.340" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71375ab code=0x7ffc0000 [ 401.021846][ T31] audit: type=1326 audit(1790177813.195:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6841 comm="syz.2.340" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf71375ab code=0x7ffc0000 [ 401.021954][ T6842] FAULT_INJECTION: forcing a failure. [ 401.021954][ T6842] name failslab, interval 1, probability 0, space 0, times 0 [ 401.021986][ T6842] CPU: 1 UID: 0 PID: 6842 Comm: syz.2.340 Not tainted syzkaller #0 PREEMPT(full) [ 401.022011][ T6842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 401.022025][ T6842] Call Trace: [ 401.022034][ T6842] [ 401.022043][ T6842] dump_stack_lvl+0xe8/0x150 [ 401.022082][ T6842] should_fail_ex+0x410/0x560 [ 401.022112][ T6842] should_failslab+0xa8/0x100 [ 401.022141][ T6842] ? audit_log_start+0x103/0xa10 [ 401.022174][ T6842] kmem_cache_alloc_noprof+0xa1/0x600 [ 401.022210][ T6842] ? auditd_test_task+0x22/0x280 [ 401.022239][ T6842] ? auditd_test_task+0x22/0x280 [ 401.022267][ T6842] ? audit_log_start+0x103/0xa10 [ 401.022304][ T6842] audit_log_start+0x103/0xa10 [ 401.022339][ T6842] ? __pfx_audit_log_start+0x10/0x10 [ 401.022362][ T6842] ? __fget_files+0x2a/0x420 [ 401.022387][ T6842] ? __fget_files+0x3a2/0x420 [ 401.022411][ T6842] ? __fget_files+0x2a/0x420 [ 401.022440][ T6842] ? fdget+0x183/0x1e0 [ 401.022471][ T6842] audit_seccomp+0x63/0x190 [ 401.022493][ T6842] ? clear_bhb_loop+0x70/0xc0 [ 401.022512][ T6842] ? clear_bhb_loop+0xe/0xc0 [ 401.022536][ T6842] __seccomp_filter+0xd14/0x1de0 [ 401.022575][ T6842] ? __pfx___seccomp_filter+0x10/0x10 [ 401.022597][ T6842] ? __mutex_unlock_slowpath+0x731/0x900 [ 401.022631][ T6842] ? __sys_recvmmsg+0x1a5/0x290 [ 401.022674][ T6842] ? __seccomp_permit_syscall+0xe7/0x2b0 [ 401.022702][ T6842] do_int80_emulation+0x153/0x500 [ 401.022723][ T6842] ? trace_irq_disable+0x3b/0x140 [ 401.022742][ T6842] ? asm_int80_emulation+0x1a/0x20 [ 401.022760][ T6842] ? clear_bhb_loop+0x70/0xc0 [ 401.022779][ T6842] ? clear_bhb_loop+0x70/0xc0 [ 401.022812][ T6842] asm_int80_emulation+0x1a/0x20 [ 401.022833][ T6842] RIP: 0023:0xf71375ab [ 401.022865][ T6842] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 401.022883][ T6842] RSP: 002b:00000000f53ed4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 401.022906][ T6842] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f53ed5d0 [ 401.022922][ T6842] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 401.022935][ T6842] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 401.022947][ T6842] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 401.022960][ T6842] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 401.022990][ T6842] [ 401.029730][ T31] audit: type=1326 audit(1790177813.195:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6841 comm="syz.2.340" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=337 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 401.055305][ T6842] audit: audit_lost=4 audit_rate_limit=0 audit_backlog_limit=64 [ 401.055329][ T6842] audit: out of memory in audit_log_start [ 401.055959][ T31] audit: type=1326 audit(1790177813.235:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6841 comm="syz.2.340" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf71375ab code=0x7ffc0000 [ 401.294988][ T5730] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 401.304208][ T31] audit: type=1326 audit(1790177813.455:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6841 comm="syz.2.340" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf71375ab code=0x7ffc0000 [ 401.532921][ T5730] usb 4-1: Using ep0 maxpacket: 16 [ 401.533678][ T5730] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 401.538408][ T5730] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.538436][ T5730] usb 4-1: Product: syz [ 401.538451][ T5730] usb 4-1: Manufacturer: syz [ 401.538466][ T5730] usb 4-1: SerialNumber: syz [ 401.541804][ T5730] usb 4-1: config 0 descriptor?? [ 401.773786][ T5730] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 401.785005][ T5730] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 401.803523][ T5730] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 401.803586][ T5730] usb 4-1: media controller created [ 401.832583][ T5730] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 401.914321][ T6853] netlink: 36 bytes leftover after parsing attributes in process `syz.1.345'. [ 401.936153][ T6853] netlink: 36 bytes leftover after parsing attributes in process `syz.1.345'. [ 401.984811][ T6838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 401.985285][ T6838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.396256][ T5730] zl10353_read_register: readreg error (reg=127, ret==0) [ 402.396338][ T5730] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 402.396359][ T5730] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 402.428836][ T6849] ------------[ cut here ]------------ [ 402.428856][ T6849] usb 4-1: BOGUS control dir, pipe 80000980 doesn't match bRequestType c0 [ 402.428873][ T6849] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1057/0x18b0, CPU#0: syz.0.343/6849 [ 402.454067][ T6849] Modules linked in: [ 402.457989][ T6849] CPU: 0 UID: 0 PID: 6849 Comm: syz.0.343 Not tainted syzkaller #0 PREEMPT(full) [ 402.467276][ T6849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 402.477577][ T6849] RIP: 0010:usb_submit_urb+0x1100/0x18b0 [ 402.483316][ T6849] Code: b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 b2 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 18 4c 89 f2 44 89 f9 <67> 48 0f b9 3a 48 bd 00 00 00 00 00 fc ff df e9 ba f2 ff ff 44 89 [ 402.503583][ T6849] RSP: 0000:ffffc9000752f778 EFLAGS: 00010246 [ 402.509672][ T6849] RAX: 0000000000000000 RBX: ffff888056923f00 RCX: 0000000080000980 [ 402.518039][ T6849] RDX: ffff8880226fa7a0 RSI: ffffffff8cc51f20 RDI: ffffffff9087dfc0 [ 402.527139][ T6849] RBP: dffffc0000000000 R08: 00000000000000c0 R09: 0000000000000000 [ 402.535218][ T6849] R10: ffffc9000752f860 R11: fffff52000ea5f18 R12: 1ffff11004558e98 [ 402.543254][ T6849] R13: ffff888022ac74c0 R14: ffff8880226fa7a0 R15: 0000000080000980 [ 402.551236][ T6849] FS: 0000000000000000(0000) GS:ffff888124cd2000(0063) knlGS:00000000f546db40 [ 402.560327][ T6849] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 402.567210][ T6849] CR2: 00007f5f8d2fb8c8 CR3: 000000007a5d6000 CR4: 00000000003526f0 [ 402.575392][ T6849] Call Trace: [ 402.578702][ T6849] [ 402.581648][ T6849] usb_start_wait_urb+0x13f/0x5b0 [ 402.586893][ T6849] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 402.592493][ T6849] usb_control_msg+0x234/0x3e0 [ 402.598256][ T6849] dtv5100_i2c_msg+0x231/0x2f0 [ 402.603488][ T6849] dtv5100_i2c_xfer+0x1a5/0x610 [ 402.608362][ T6849] __i2c_transfer+0x7bf/0x1fe0 [ 402.613204][ T6849] ? rt_mutex_lock_nested+0x167/0x1c0 [ 402.618618][ T6849] ? i2c_transfer+0xc7/0x2d0 [ 402.623313][ T6849] i2c_transfer+0x1cb/0x2d0 [ 402.627843][ T6849] i2cdev_ioctl_rdwr+0x460/0x740 [ 402.632885][ T6849] compat_i2cdev_ioctl+0x59f/0x5c0 [ 402.638011][ T6849] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 402.643699][ T6849] ? __fget_files+0x3a2/0x420 [ 402.648395][ T6849] ? __fget_files+0x2a/0x420 [ 402.653122][ T6849] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 402.658726][ T6849] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 402.664335][ T6849] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 402.670355][ T6849] ? kmem_cache_free+0x182/0x650 [ 402.675364][ T6849] ? __se_sys_futex_time32+0x3ab/0x440 [ 402.680870][ T6849] ? rcu_is_watching+0x16/0xb0 [ 402.685764][ T6849] __do_fast_syscall_32+0x27a/0x6a0 [ 402.690984][ T6849] ? do_fast_syscall_32+0x33/0x70 [ 402.696242][ T6849] ? asm_int80_emulation+0x1a/0x20 [ 402.702097][ T6849] ? do_int80_emulation+0x299/0x500 [ 402.707722][ T6849] ? trace_irq_disable+0x3b/0x140 [ 402.713390][ T6849] do_fast_syscall_32+0x33/0x70 [ 402.718283][ T6849] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 402.724658][ T6849] RIP: 0023:0xf707f0ec [ 402.728821][ T6849] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 402.748516][ T6849] RSP: 002b:00000000f546d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 402.757020][ T6849] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000707 [ 402.765089][ T6849] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 402.773117][ T6849] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 402.781106][ T6849] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 402.789137][ T6849] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 402.797388][ T6849] [ 402.800429][ T6849] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 402.807718][ T6849] CPU: 0 UID: 0 PID: 6849 Comm: syz.0.343 Not tainted syzkaller #0 PREEMPT(full) [ 402.816916][ T6849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 402.826976][ T6849] Call Trace: [ 402.830264][ T6849] [ 402.833199][ T6849] vpanic+0x56d/0xa60 [ 402.837204][ T6849] ? __pfx__printk+0x10/0x10 [ 402.841801][ T6849] ? __pfx_vpanic+0x10/0x10 [ 402.846316][ T6849] ? is_bpf_text_address+0x292/0x2b0 [ 402.851630][ T6849] ? is_bpf_text_address+0x26/0x2b0 [ 402.856847][ T6849] panic+0xc5/0xd0 [ 402.860584][ T6849] ? __pfx_panic+0x10/0x10 [ 402.865039][ T6849] __warn+0x315/0x4c0 [ 402.869038][ T6849] ? usb_submit_urb+0x1057/0x18b0 [ 402.874078][ T6849] ? usb_submit_urb+0x1057/0x18b0 [ 402.879118][ T6849] __report_bug+0x276/0x570 [ 402.883648][ T6849] ? usb_submit_urb+0x1057/0x18b0 [ 402.888686][ T6849] ? __pfx___report_bug+0x10/0x10 [ 402.893712][ T6849] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 402.899538][ T6849] ? kasan_save_track+0x4f/0x80 [ 402.904408][ T6849] report_bug_entry+0x19b/0x290 [ 402.909290][ T6849] ? usb_submit_urb+0x1100/0x18b0 [ 402.914325][ T6849] ? usb_submit_urb+0x1105/0x18b0 [ 402.919366][ T6849] handle_bug+0xce/0x200 [ 402.923620][ T6849] exc_invalid_op+0x1a/0x50 [ 402.928126][ T6849] asm_exc_invalid_op+0x1a/0x20 [ 402.932979][ T6849] RIP: 0010:usb_submit_urb+0x1100/0x18b0 [ 402.938622][ T6849] Code: b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 0f 85 b2 05 00 00 45 0f b6 45 00 48 8b 3c 24 48 8b 74 24 18 4c 89 f2 44 89 f9 <67> 48 0f b9 3a 48 bd 00 00 00 00 00 fc ff df e9 ba f2 ff ff 44 89 [ 402.958235][ T6849] RSP: 0000:ffffc9000752f778 EFLAGS: 00010246 [ 402.964307][ T6849] RAX: 0000000000000000 RBX: ffff888056923f00 RCX: 0000000080000980 [ 402.972282][ T6849] RDX: ffff8880226fa7a0 RSI: ffffffff8cc51f20 RDI: ffffffff9087dfc0 [ 402.980278][ T6849] RBP: dffffc0000000000 R08: 00000000000000c0 R09: 0000000000000000 [ 402.988258][ T6849] R10: ffffc9000752f860 R11: fffff52000ea5f18 R12: 1ffff11004558e98 [ 402.996233][ T6849] R13: ffff888022ac74c0 R14: ffff8880226fa7a0 R15: 0000000080000980 [ 403.004228][ T6849] ? usb_submit_urb+0x1091/0x18b0 [ 403.009300][ T6849] usb_start_wait_urb+0x13f/0x5b0 [ 403.014356][ T6849] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 403.019925][ T6849] usb_control_msg+0x234/0x3e0 [ 403.024700][ T6849] dtv5100_i2c_msg+0x231/0x2f0 [ 403.029470][ T6849] dtv5100_i2c_xfer+0x1a5/0x610 [ 403.034332][ T6849] __i2c_transfer+0x7bf/0x1fe0 [ 403.039107][ T6849] ? rt_mutex_lock_nested+0x167/0x1c0 [ 403.044487][ T6849] ? i2c_transfer+0xc7/0x2d0 [ 403.049078][ T6849] i2c_transfer+0x1cb/0x2d0 [ 403.053597][ T6849] i2cdev_ioctl_rdwr+0x460/0x740 [ 403.058569][ T6849] compat_i2cdev_ioctl+0x59f/0x5c0 [ 403.063692][ T6849] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 403.069352][ T6849] ? __fget_files+0x3a2/0x420 [ 403.074037][ T6849] ? __fget_files+0x2a/0x420 [ 403.078641][ T6849] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 403.084198][ T6849] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 403.089669][ T6849] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 403.095681][ T6849] ? kmem_cache_free+0x182/0x650 [ 403.100651][ T6849] ? __se_sys_futex_time32+0x3ab/0x440 [ 403.106144][ T6849] ? rcu_is_watching+0x16/0xb0 [ 403.110944][ T6849] __do_fast_syscall_32+0x27a/0x6a0 [ 403.116178][ T6849] ? do_fast_syscall_32+0x33/0x70 [ 403.121218][ T6849] ? asm_int80_emulation+0x1a/0x20 [ 403.126329][ T6849] ? do_int80_emulation+0x299/0x500 [ 403.131531][ T6849] ? trace_irq_disable+0x3b/0x140 [ 403.136581][ T6849] do_fast_syscall_32+0x33/0x70 [ 403.141438][ T6849] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 403.147778][ T6849] RIP: 0023:0xf707f0ec [ 403.151865][ T6849] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 403.171480][ T6849] RSP: 002b:00000000f546d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 403.179908][ T6849] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000707 [ 403.187906][ T6849] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 403.195903][ T6849] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 403.203899][ T6849] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 403.211887][ T6849] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 403.219899][ T6849] [ 403.223123][ T6849] Kernel Offset: disabled [ 403.227467][ T6849] Rebooting in 86400 seconds..