last executing test programs: 10.439390018s ago: executing program 2 (id=954): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x4a}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) read(r3, 0x0, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x1) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000040)) connect$vsock_stream(r0, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x0, 0x80, 0x0, 0x4000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f00000000c0)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0xc040}}) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) io_uring_enter(r7, 0x47f6, 0x0, 0x2, 0x0, 0x300) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) 9.767934902s ago: executing program 2 (id=955): set_mempolicy(0x4005, &(0x7f0000000040)=0x1001, 0x4) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0xffffffff}, 0x1c) r1 = syz_io_uring_setup(0x24fb, &(0x7f0000000680)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x2}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x85, &(0x7f0000000540)={r5, 0x88, "0200000000000000703fcd09bdf0b493d4323725cdcff2eae49f89843a5318d5ba093aa761132b5e2e8c4eb4eb76aa3f3069d1d5a64a2c75a2d59986feff48dc51b23de50b4c052630642b3348c700b558041310b18d364b87808f6ec3b597fae6ac116b5b25b716a73e48c8c8f8ec21e15e7a5d6743243dfde88d2786c355a2c222145b4ddeb213"}, &(0x7f0000000500)=0x90) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x3, r6, 0x0}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) r8 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x40e8f3, 0x400, 0x0, 0x362}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x1, 0x0, r8, 0x0, &(0x7f0000000200)="357d454a84b45c372f52b643109221332106cd11e66b4fabf8eb11fe0d7e2aad7b801f96", 0x24, 0x3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r11 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) read$FUSE(r7, &(0x7f0000000e40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setaffinity(r14, 0x8, &(0x7f00000000c0)=0x4) r15 = syz_open_procfs(0x0, &(0x7f00000007c0)='coredump_filter\x00') unshare(0x2020600) r16 = mq_open(&(0x7f0000000280)='eth0\x00#\xbb\xc2\xf0\xa9;~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x40, 0xe, 0x0) mq_timedsend(r16, 0x0, 0x0, 0x6, 0x0) writev(r15, &(0x7f0000000240)=[{&(0x7f0000000140)='1', 0x1}, {&(0x7f0000000400)='9H', 0x2}], 0x2) syz_io_uring_submit(r12, r13, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r11, 0x47f6, 0x0, 0x2, 0x0, 0x300) 9.396214065s ago: executing program 3 (id=957): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) write(0xffffffffffffffff, &(0x7f0000000300)="0051235da1133b763eaa25699e2f112f1cb1c92b3b79c05e54ca7b21520ed3f488e1c4af1f1af8e974c67c6c87ec56609ddaad67f17bc1260a2affb1523d00089323e3ae26", 0x45) tee(r2, r5, 0x8f5, 0x100000000000000) write$cgroup_type(r5, &(0x7f0000000180), 0x9) write(r3, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, &(0x7f0000005480)=ANY=[@ANYBLOB]) setsockopt$MRT6_DONE(r2, 0x29, 0xc9, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0xfffff090, 0x8002) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$SCSI_IOCTL_GET_PCI(r6, 0x5393, &(0x7f0000000000)) 9.330556383s ago: executing program 2 (id=958): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000001600d940380200022bbd7000ffdbdf250a406000", @ANYRES32], 0x18}}, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000002f01780600000000", @ANYRES32=0x1, @ANYRES32, @ANYRES32=r2, @ANYBLOB="02000000020000000500"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 9.174079419s ago: executing program 1 (id=959): openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket(0x1000000010, 0x80002, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) mmap$fb(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, 0x8010, r0, 0xc0000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r3, 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b80000cd005fe7f7001900010000000000f8000000000000000000000008e8d6ac450000fffffffffffffe8000000000000000000000000000bb0000000000000000020000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100008000000000000000000000000002010000"], 0xb8}}, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r6 = io_uring_setup(0x4133, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r6, 0x18, &(0x7f0000000080)={0x4, r5, 0x2c, {0x6, 0xd377}, 0x43}, 0x1) ioctl$USBDEVFS_CONTROL(r5, 0xc0105500, &(0x7f00000003c0)={0x80, 0xa, 0x1, 0x3, 0x0, 0x7, 0x0}) r7 = socket$rxrpc(0x21, 0x2, 0xa) r8 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x43, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[], 0x2b30}, 0x1, 0x0, 0x0, 0x40000}, 0x4020) io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) io_submit(r9, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x0, 0x4, 0x0, 0x0, 0x2f3f, r2, 0x0, 0x0, 0x3, 0x0, 0x3, r10}]) bind$rxrpc(r7, &(0x7f00000001c0)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1b}}}, 0x24) 7.662998915s ago: executing program 1 (id=962): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket(0x2a, 0x2, 0xfffffffe) unshare(0x2040400) connect$tipc(r2, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) socket$unix(0x1, 0x1, 0x0) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000001c0)={0x9, 0x3, 0x3, 0x0, 0x7}) r5 = add_key(0x0, &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) keyctl$revoke(0x3, r5) r6 = syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x10000006, 0x30f}, &(0x7f0000000280), &(0x7f0000000300)) io_uring_enter(r6, 0x7277, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r7, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffc}}, 0x44) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet(0x2, 0x3, 0x2f) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000003c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000010c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r9, @ANYBLOB="05", @ANYRES16=r9], 0x0) rt_sigpending(0x0, 0x0) 6.572197092s ago: executing program 4 (id=965): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x4a}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) read(r3, 0x0, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x1) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000040)) connect$vsock_stream(r0, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x0, 0x80, 0x0, 0x4000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f00000000c0)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0xc040}}) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) io_uring_enter(r7, 0x47f6, 0x0, 0x2, 0x0, 0x300) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) 6.470647952s ago: executing program 2 (id=966): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket(0x2a, 0x2, 0xfffffffe) unshare(0x2040400) connect$tipc(r2, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) socket$unix(0x1, 0x1, 0x0) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000001c0)={0x9, 0x3, 0x3, 0x0, 0x7}) r5 = add_key(0x0, &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) keyctl$revoke(0x3, r5) r6 = syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x10000006, 0x30f}, &(0x7f0000000280), &(0x7f0000000300)) io_uring_enter(r6, 0x7277, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r7, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffc}}, 0x44) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet(0x2, 0x3, 0x2f) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) rt_sigpending(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3c}}, 0x0) 6.074237982s ago: executing program 3 (id=968): unshare(0x60600) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000001800)='\x00', 0x1}], 0x1, 0x2) vmsplice(r0, &(0x7f00000001c0)=[{&(0x7f0000001480)="fb", 0x1}], 0x1, 0xe) 5.595156319s ago: executing program 3 (id=969): set_mempolicy(0x4005, &(0x7f0000000040)=0x1001, 0x4) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0xffffffff}, 0x1c) r1 = syz_io_uring_setup(0x24fb, &(0x7f0000000680)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x2}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x85, &(0x7f0000000540)={r5, 0x88, "0200000000000000703fcd09bdf0b493d4323725cdcff2eae49f89843a5318d5ba093aa761132b5e2e8c4eb4eb76aa3f3069d1d5a64a2c75a2d59986feff48dc51b23de50b4c052630642b3348c700b558041310b18d364b87808f6ec3b597fae6ac116b5b25b716a73e48c8c8f8ec21e15e7a5d6743243dfde88d2786c355a2c222145b4ddeb213"}, &(0x7f0000000500)=0x90) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x3, r6, 0x0}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) r8 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x40e8f3, 0x400, 0x0, 0x362}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x1, 0x0, r8, 0x0, &(0x7f0000000200)="357d454a84b45c372f52b643109221332106cd11e66b4fabf8eb11fe0d7e2aad7b801f96", 0x24, 0x3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r11 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) read$FUSE(r7, &(0x7f0000000e40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setaffinity(r14, 0x8, &(0x7f00000000c0)=0x4) r15 = syz_open_procfs(0x0, &(0x7f00000007c0)='coredump_filter\x00') unshare(0x2020600) r16 = mq_open(&(0x7f0000000280)='eth0\x00#\xbb\xc2\xf0\xa9;~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x40, 0xe, 0x0) mq_timedsend(r16, 0x0, 0x0, 0x6, 0x0) writev(r15, &(0x7f0000000240)=[{&(0x7f0000000140)='1', 0x1}, {&(0x7f0000000400)='9H', 0x2}], 0x2) syz_io_uring_submit(r12, r13, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r11, 0x47f6, 0x0, 0x2, 0x0, 0x300) 5.587455258s ago: executing program 4 (id=970): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socket$netlink(0x10, 0x3, 0x12) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f0000000580)=[{{&(0x7f0000000280)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000380)=""/86, 0x56}, {&(0x7f00000000c0)=""/22, 0x16}], 0x3, &(0x7f0000000440)=""/164, 0xa4}, 0x998}, {{&(0x7f0000000500)=@ethernet={0x0, @local}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000600)=""/4096, 0x1000}], 0x1}, 0x4}], 0x2, 0x22, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) link(0x0, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x8e79f0352167ea94) r2 = syz_open_dev$vim2m(0x0, 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f080, 0x19}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f00000001c0)={0x3e, 0x0, [{0x2, 0x411, 0x0, 0x61ae, 0x5, 0x5, 0x7f}]}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000240)="008d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) socket(0x1e, 0x1, 0x0) 5.377466003s ago: executing program 4 (id=971): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800040000000000000b00200008000300", @ANYRES32=r2, @ANYBLOB="0a000600080211000001000030005080110001"], 0x58}}, 0x0) (fail_nth: 7) 5.143961364s ago: executing program 0 (id=972): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x81, 0x1, 0x1, 0x80}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000100), 0x1, 0x6d8300) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000001540)={0xc0000000, 0x9, "bc1fccd448e681382a542e9ea2fa96dc8d376751732903451bd2472430af00", 0x3, 0x7, 0x6, 0x1, 0x9, 0x4, 0x9, 0x9971a997, [0x5, 0x3, 0x80, 0x3]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x3a, 0x1, 0x0, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) unshare(0x62040200) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x98, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x6c, 0x3, 0x0, 0x1, [{0x68, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x5c, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x10000}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000000}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}]}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xfc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) gettid() r5 = socket$inet(0xa, 0x801, 0x84) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00', 0x0, [0x8, 0x1ff, 0x4, 0x4, 0x9]}, &(0x7f0000000000)=0x54) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="89070404", 0x4) getsockopt$inet_opts(r3, 0x0, 0x4, 0x0, &(0x7f00000001c0)) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r6 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, 0x0) syz_io_uring_submit(r7, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x23}) io_uring_enter(r6, 0x48e9, 0x0, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01464ba, &(0x7f0000000300)={0x8, 0x0, 0x0, 0xfbfbfbfb}) recvmmsg(r2, &(0x7f0000005780)=[{{&(0x7f0000000080)=@nl, 0x80, &(0x7f0000000040)=[{&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000000000)=""/8, 0x8}, {&(0x7f0000001440)=""/247, 0xf7}], 0x3, &(0x7f0000001240)=""/185, 0xb9}, 0x10000}, {{&(0x7f0000000140)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000001800), 0x0, &(0x7f0000001840)=""/23, 0x17}, 0x800005}, {{&(0x7f0000001880)=@x25={0x9, @remote}, 0x80, &(0x7f0000001d00)=[{&(0x7f0000001900)=""/92, 0x5c}, {&(0x7f0000001980)=""/182, 0xb6}, {&(0x7f0000001a40)=""/123, 0x7b}, {&(0x7f0000001ac0)=""/167, 0xa7}, {&(0x7f0000001b80)=""/229, 0xe5}, {&(0x7f0000001c80)=""/120, 0x78}], 0x6, &(0x7f0000001d40)}, 0x40}, {{&(0x7f0000001d80)=@nl=@proc, 0x80, &(0x7f0000003400)=[{&(0x7f0000001e00)=""/147, 0x93}, {&(0x7f0000001ec0)=""/106, 0x6a}, {&(0x7f0000001f40)=""/208, 0xd0}, {&(0x7f0000002040)=""/226, 0xe2}, {&(0x7f0000001380)=""/188, 0xbc}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000003200)=""/218, 0xda}, {&(0x7f0000003300)=""/241, 0xf1}], 0x8, &(0x7f0000003440)=""/179, 0xb3}, 0x6}, {{&(0x7f0000003500)=@x25={0x9, @remote}, 0x80, &(0x7f0000005740)=[{&(0x7f0000003580)=""/4096, 0x1000}, {&(0x7f0000004580)=""/167, 0xa7}, {&(0x7f0000004640)=""/4096, 0x1000}, {&(0x7f0000005640)=""/38, 0x26}], 0x4}, 0x1}], 0x5, 0x40, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000004, 0x31, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) 4.466082133s ago: executing program 4 (id=973): bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) r0 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100), &(0x7f0000000280)) io_uring_enter(r0, 0x15f1, 0xff98, 0x69, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4}) 4.298682879s ago: executing program 3 (id=974): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x81, 0x1, 0x1, 0x80}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000100), 0x1, 0x6d8300) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000001540)={0xc0000000, 0x9, "bc1fccd448e681382a542e9ea2fa96dc8d376751732903451bd2472430af00", 0x3, 0x7, 0x6, 0x1, 0x9, 0x4, 0x9, 0x9971a997, [0x5, 0x3, 0x80, 0x3]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x3a, 0x1, 0x0, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) unshare(0x62040200) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x98, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x6c, 0x3, 0x0, 0x1, [{0x68, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x5c, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x10000}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000000}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}]}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xfc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) gettid() r5 = socket$inet(0xa, 0x801, 0x84) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00', 0x0, [0x8, 0x1ff, 0x4, 0x4, 0x9]}, &(0x7f0000000000)=0x54) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="89070404", 0x4) getsockopt$inet_opts(r3, 0x0, 0x4, 0x0, &(0x7f00000001c0)) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r6 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, 0x0) syz_io_uring_submit(r7, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x23}) io_uring_enter(r6, 0x48e9, 0x0, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01464ba, &(0x7f0000000300)={0x8, 0x0, 0x0, 0xfbfbfbfb}) recvmmsg(r2, &(0x7f0000005780)=[{{&(0x7f0000000080)=@nl, 0x80, &(0x7f0000000040)=[{&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000000000)=""/8, 0x8}, {&(0x7f0000001440)=""/247, 0xf7}], 0x3, &(0x7f0000001240)=""/185, 0xb9}, 0x10000}, {{&(0x7f0000000140)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000001800), 0x0, &(0x7f0000001840)=""/23, 0x17}, 0x800005}, {{&(0x7f0000001880)=@x25={0x9, @remote}, 0x80, &(0x7f0000001d00)=[{&(0x7f0000001900)=""/92, 0x5c}, {&(0x7f0000001980)=""/182, 0xb6}, {&(0x7f0000001a40)=""/123, 0x7b}, {&(0x7f0000001ac0)=""/167, 0xa7}, {&(0x7f0000001b80)=""/229, 0xe5}, {&(0x7f0000001c80)=""/120, 0x78}], 0x6, &(0x7f0000001d40)}, 0x40}, {{&(0x7f0000001d80)=@nl=@proc, 0x80, &(0x7f0000003400)=[{&(0x7f0000001e00)=""/147, 0x93}, {&(0x7f0000001ec0)=""/106, 0x6a}, {&(0x7f0000001f40)=""/208, 0xd0}, {&(0x7f0000002040)=""/226, 0xe2}, {&(0x7f0000001380)=""/188, 0xbc}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000003200)=""/218, 0xda}, {&(0x7f0000003300)=""/241, 0xf1}], 0x8, &(0x7f0000003440)=""/179, 0xb3}, 0x6}, {{&(0x7f0000003500)=@x25={0x9, @remote}, 0x80, &(0x7f0000005740)=[{&(0x7f0000003580)=""/4096, 0x1000}, {&(0x7f0000004580)=""/167, 0xa7}, {&(0x7f0000004640)=""/4096, 0x1000}, {&(0x7f0000005640)=""/38, 0x26}], 0x4}, 0x1}], 0x5, 0x40, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000004, 0x31, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) 3.996808551s ago: executing program 2 (id=975): socket$inet6(0xa, 0x3, 0xff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) futex_waitv(&(0x7f00000047c0)=[{0x5, 0x0, 0x82}], 0x1, 0x0, 0x0, 0x1) syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0) r2 = openat$khugepaged_scan(0xffffff9c, 0x0, 0x1, 0x0) write$khugepaged_scan(r2, &(0x7f0000000040), 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f4070009040081000000fe000000000000000800040001", 0x21) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="2800000009000000000000000000000001"], 0x28) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) socket(0xa, 0x1, 0x1000) r5 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000780)={0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="400a01000011ef"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000140)={0x1, 0x7, 0x5, &(0x7f0000000100)={0x17, "537a1468df08000000758bd16868e0bf22c7b844c1b1f10186854fff98d2870c38"}}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40182, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r8, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) socket(0x1e, 0x2, 0x0) socket$kcm(0x2, 0x5, 0x84) 3.479741023s ago: executing program 1 (id=976): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x80}}]}}]}, 0x48}}, 0x20040084) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x4}, {0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0x11, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xb, 0x101, 0x7fff, 0x2002, 0xfffd, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x401, 0x4, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f0000000240)="800000800000210e3000cd7a0100", 0xe, 0x4, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 3.346022167s ago: executing program 0 (id=977): set_mempolicy(0x4005, &(0x7f0000000040)=0x1001, 0x4) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0xffffffff}, 0x1c) r1 = syz_io_uring_setup(0x24fb, &(0x7f0000000680)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x2}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x85, &(0x7f0000000540)={r5, 0x88, "0200000000000000703fcd09bdf0b493d4323725cdcff2eae49f89843a5318d5ba093aa761132b5e2e8c4eb4eb76aa3f3069d1d5a64a2c75a2d59986feff48dc51b23de50b4c052630642b3348c700b558041310b18d364b87808f6ec3b597fae6ac116b5b25b716a73e48c8c8f8ec21e15e7a5d6743243dfde88d2786c355a2c222145b4ddeb213"}, &(0x7f0000000500)=0x90) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x3, r6, 0x0}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) r8 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x40e8f3, 0x400, 0x0, 0x362}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x1, 0x0, r8, 0x0, &(0x7f0000000200)="357d454a84b45c372f52b643109221332106cd11e66b4fabf8eb11fe0d7e2aad7b801f96", 0x24, 0x3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r11 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) read$FUSE(r7, &(0x7f0000000e40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setaffinity(r13, 0x8, &(0x7f00000000c0)=0x4) r14 = syz_open_procfs(0x0, &(0x7f00000007c0)='coredump_filter\x00') unshare(0x2020600) r15 = mq_open(&(0x7f0000000280)='eth0\x00#\xbb\xc2\xf0\xa9;~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x40, 0xe, 0x0) mq_timedsend(r15, 0x0, 0x0, 0x6, 0x0) writev(r14, &(0x7f0000000240)=[{&(0x7f0000000140)='1', 0x1}, {&(0x7f0000000400)='9H', 0x2}], 0x2) io_uring_enter(r11, 0x47f6, 0x0, 0x2, 0x0, 0x300) 3.298380513s ago: executing program 4 (id=978): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) flistxattr(r1, &(0x7f0000000440)=""/201, 0xc9) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_clone(0x60218000, 0x0, 0x0, &(0x7f0000001440), 0x0, &(0x7f00000014c0)="95b50510ad87f1d6641f2fb25d5eba1220d63a1ce5dbd7a2d876a408fab3a622a1ab57ec6f19fea855f92e238f68d4fe2ad46aff43a6f982e5ebcacd08221fe6b2bb64304fd338d18793bc7e23e67ba39aa43e813ddbafb8876dc5153e154ed659a1b5f358052e2027b172d7b5349a764db335fe54bfbf3702e497c1b704b7bd0e16789b4b1750727de727931c919bbd116809664fb1") sched_setattr(r4, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x10008001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x3}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) ioctl$SNDCTL_TMR_START(r6, 0x5402) connect$inet(r5, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) ioctl$int_in(r5, 0x5421, 0x0) add_key$fscrypt_v1(&(0x7f00000001c0), 0x0, &(0x7f0000000340)={0x0, "ccb9490a299cd16d4bb6b1878b185d761fe6ef51f2fd0b4230da9e08134e22912f729cdb1b6f015a62c8ed3d596854d654201d7909d8f3933c1e69c07d17b758", 0x1e}, 0x48, 0xfffffffffffffffa) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xc3, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r11, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="3489d87d", @ANYRES16=r10, @ANYBLOB="010026bd70000400000005000000080009000200000008000c00a50a000008000b00000000000600010007000000"], 0x34}}, 0x20) socket$pppl2tp(0x18, 0x1, 0x1) 3.155630919s ago: executing program 1 (id=979): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socket$netlink(0x10, 0x3, 0x12) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000000580)=[{{&(0x7f0000000280)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000380)=""/86, 0x56}, {&(0x7f00000000c0)=""/22, 0x16}], 0x3, &(0x7f0000000440)=""/164, 0xa4}, 0x998}, {{&(0x7f0000000500)=@ethernet={0x0, @local}, 0x80, &(0x7f00000001c0)}, 0x4}], 0x2, 0x22, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) link(0x0, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x8e79f0352167ea94) r2 = syz_open_dev$vim2m(0x0, 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f080, 0x19}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f00000001c0)={0x3e, 0x0, [{0x2, 0x411, 0x0, 0x61ae, 0x5, 0x5, 0x7f}]}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000240)="008d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0}) socket(0x1e, 0x1, 0x0) 2.45485481s ago: executing program 0 (id=980): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x4a}) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r3, 0x0, 0x0) ioctl$TCFLSH(r2, 0x540b, 0x1) ioctl$TIOCL_PASTESEL(r2, 0x541c, 0x0) connect$vsock_stream(r0, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x0, 0x80, 0x0, 0x4000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f00000000c0)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0xc040}}) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) io_uring_enter(r7, 0x47f6, 0x0, 0x2, 0x0, 0x300) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) 1.979197726s ago: executing program 1 (id=981): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0xbc, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x20}}, {0x14, 0x4, @mcast1}}}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x89}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2a}}, {0x14, 0x4, @mcast1}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x86}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSBRK(0xffffffffffffffff, 0x5409, 0x9) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r5, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) sendmmsg$inet6(r5, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000003f80)=[{&(0x7f0000000c80)="0b0ec2a1e3fc84788972f461fec29e0fe5be85ea822a7348bd54a57f68a85a0200ad43c367bae5f7bd6c1e1d9017109e232e5bb561d280b32fa2b07a0cd31f1b8b9acdc89d4d5725350a9ec9303e53def89bcb6bb6ea83324927b43749f25be60c4f8707382b8e3062032c28dcccb784fdcfe6f2febd55e05bf1ccb63237c1d1bea4db828a5be79e518cf55a88e130609528b8aff64359e76eee93584aad3f751172c449fb", 0xa5}, {&(0x7f0000000680)="5f62f632763c84825847145170282f67ba6d5dadf0baf135d503e93a17ee560409202f4c5f0de32b0e53e4d26d04c825d923318fd574b1924b09ebb91d5be30b532a2fb95030c6be2a14ccfbce6eef05ea88d2413dc3fc0ae8a2e071f8764a4843611ae28b340100ddefa8ffed32420677397aa63e880adc56d03d8799429f33741886bd6c4065bba5005d74f67508dc3434165b51bf8f73bf1a7c158d8905e518e8", 0xa2}, {&(0x7f0000000380)="dfd1db04f5eef4b5714a69f5392e27d1b79a961a16fbdc4f01a9e38a1f95f939a209f049ad8d4f9447506fd73cec26b8246758f684013c99b717e119d15432e9d46da8a0c25e7e3771b0b146e56d2fcf8107332acc1c56948171260ed44c97919f70210c914c1098c9ac622d460000ae373480c9d8e590395ea4365569b8ea75ea1a9a181cfa88541804ec97980211c9b7eb2235d6f0b644fd31dda9bc2cc99434e0df4934d0", 0xa6}, {&(0x7f0000000740)="a405df87c6e89abd7ae7e6b8550f9923917c9d38e14a4e9ace3100b34d0056282b7ed43e9c6efe6245152417b33aa8f7231ef5c2928c6284654a2204c4c4f8ffdda3684a967d85159658c07e3a7c75d219403b0be9379f7b017bd850fd4c3a18d59f735980d1520b641a6fc2a58ba15bce382460c95db8299b404b8d0d5821a4604f59cfa04cd0d4496fc41b951e7f8ed2a6ac350002000000000000babffca7484a82e2b3bd3e55b4a6f0153a88f5", 0xaf}, {&(0x7f0000000800)="f76c72c4066a174e1300da0da7d191a618fc5793ff23c6328c6d61df0a2fb72441d4ded25cf7b5f31eb5d65e412665a6177f09ca3ac5cfd751577dec547711dc43b694a601fcb6575547ee6ec2a01c32b65d3429fbb9623a83d457d3ddea9eb90ab14b6b323a9358af0b55cff95844d5b47f6994a72f984e19e961cc00f6e364e141c8", 0x83}, {&(0x7f00000008c0)="4b000ffd096c1b77cd99b1458609c4b82100375ca9411e734cc8e9627df29e9b97a002d7f15ea9f42bd71401384ed6b5772b5c618c35c4aab72b1d515ceada9e64d7a35fd435e98f06243fcd53966c196ff3f47537912a1a5dec7e8e1fbf4543d1a6c80467d6ba3d241e3fd22efa09c638c98b4ce9fbe6d2053fcfa334eaee64efad2d349f048afb2635ae06c05697746fe073ed230c9c7c4643396305424c1c7eaa3ee09891995a607de26be9abcd2b65a4f9093da8a07eea61b1ff21ea3b323b191f95b997cfdface3dc21a664e38896f9f689bc06f4800d5c977102358770b0d8425f098be9383b5e487e7165e847191d5e95233e971edd", 0xf9}, {&(0x7f0000002380)="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", 0xbe8}, {&(0x7f0000002f80)="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", 0x1000}], 0x8}}], 0x1, 0x8800) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r1) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f00000009c0)={0x1b8, r6, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf792}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdf}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe6}]}, @TIPC_NLA_SOCK={0x88, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x100}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xf}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x64}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffe}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x55}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x64}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7f}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x80000}, 0x4000000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000480)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000300)=0x40) r7 = dup(r4) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_opts(r8, 0x0, 0xd, &(0x7f00000004c0)="f602388b53d054af1926228efaa5f99ccab22d3a5c2ef90e6e54c36e8f392986d1b59e89c2a6133f0932e9d6529d1feb1135d4b44d2244482a0f3d58d19bf314e835b619c0bd48002d191f11f403c988648ccd67a3a7b06c04710f3937af873f10a227684b3da7f28aeb87e7b11c591bd9fcc50be4b42bfbf4696ade3559f5ceea90eec72c8be5ee", 0x88) write$UHID_INPUT(r7, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d0"], 0x3c}, 0x1, 0x0, 0x0, 0x801}, 0x20040000) 1.624479062s ago: executing program 3 (id=982): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dri(&(0x7f00000002c0), 0x9, 0x46000) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f0000000000)={r2, r3, 0x1, 0x0, 0x3}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, &(0x7f0000000040)) r4 = socket(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x400000, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xfff1}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000011}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x2}, {0x0, 0xb}, {0xd, 0x7}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}}, 0x4008004) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) syz_emit_ethernet(0x82, &(0x7f0000000800)={@local, @empty, @val, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "43ea56", 0x44, 0x2f, 0x0, @private1, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x22eb}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x8, 0x88be, 0x86ddffff, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, {0x8, 0x22eb, 0x3, {{0x0, 0x2, 0x4}, 0x2, {0x0, 0x4}}}}}}}}}, 0x0) getresgid(&(0x7f0000000040), &(0x7f0000000180), &(0x7f00000016c0)) r8 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCSWINSZ(r8, 0x5414, &(0x7f0000000000)={0x3, 0xfffe, 0x40, 0x9}) r9 = socket(0x15, 0x80005, 0x0) getsockopt(r9, 0x200000000114, 0x2721, 0x0, &(0x7f0000000000)) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd29, 0xfffffffc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) syz_usb_connect(0x4, 0x98, &(0x7f0000000280)={{0x12, 0x1, 0x110, 0xbe, 0x7d, 0x56, 0xff, 0x5ac, 0x225, 0x63af, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x86, 0x1, 0x6d, 0xa, 0x30, 0x8, [{{0x9, 0x4, 0x1b, 0x8, 0x5, 0x3, 0x4b, 0x2, 0xd9, [], [{{0x9, 0x5, 0x80, 0x2, 0x10, 0xe2, 0xe, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x7, 0x9c2}, @generic={0x39, 0x0, "be3cc9880b140496790f4c486ff35f9cbdf254ab39bb5ffc2ff964637f727fde2c6a439a6493362681a039a47bff1fe244a19aa73ffd4f"}]}}, {{0x9, 0x5, 0x5, 0xc, 0x8, 0xf0, 0x2, 0xd}}, {{0x9, 0x5, 0xb, 0x2, 0x200, 0x5, 0x5, 0x6}}, {{0x9, 0x5, 0xf, 0x0, 0x20, 0xff, 0x40, 0xd9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x1}]}}, {{0x9, 0x5, 0x7, 0x8, 0x8, 0x6, 0xf, 0x4}}]}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x9, 0x7, 0x3b, 0x8, 0x3}, 0x10e, &(0x7f0000000340)={0x5, 0xf, 0x10e, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x18, 0x0, 0x7, 0xfffd}, @generic={0xf4, 0x10, 0x0, "7b6bc6729838052b62dd3c9f5378fb54c05e72f60e1fc9f674aefb4124e193834fcfa799b45dd043def3c1610b4e5a52c451638095aeed3dda5a66d328eaf3786e924888b3d0e85ca9bc20bf0599c68f25da7fec84565c008cea70cea36368504c575b4e604d00a9fef9d743f1878e79e7219d1d2961de03d40ed069d45d591625c7bd2dd92a6a3d6f18423ec604f80a3dfc3d7b6c6f7c482f586d42957bf8649a4452367aecb7e19dfec92487ecba350ce338809f2e886266735ff901981301256ce1c4fa61d2260efc43284ffcf6a745e67c7d239db41ea07e964fd8780b3ff290b30c902478f911f81e22e59dc419f3"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x0, 0x0, 0x8001}]}, 0x3, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x408}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x404}}, {0x4d, &(0x7f00000001c0)=@string={0x4d, 0x3, "87e7a3677be3a9a0319cfe8ddded24054716b683ac4bfc3616594300c03a9c05bf85feff32e8a05d66e141d2f79996305b33fef80fe8a294d123c447f967af746a3f54268c54d3e34f03c9"}}]}) 1.575475995s ago: executing program 0 (id=983): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r1) close(r1) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x45) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x8, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc04c560f, &(0x7f0000000040)=@fd={0x7, 0x2, 0x4, 0x800, 0xb, {0x0, 0xea60}, {0x1, 0x1, 0xe, 0x4, 0xf9, 0x8, "e012dd35"}, 0x8, 0x4, {}, 0x1}) ioctl$SNDCTL_DSP_GETISPACE(r2, 0x5015, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000730137000000000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb30f}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x2000000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x8004) 1.102267821s ago: executing program 1 (id=984): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000002580)={&(0x7f00000002c0)=[{0x50, 0x1801, 0x0, 0x0}, {0x7, 0x4221, 0x0, 0x0}], 0x2}) 887.44039ms ago: executing program 4 (id=985): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket(0x2a, 0x2, 0xfffffffe) unshare(0x2040400) connect$tipc(r2, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) socket$unix(0x1, 0x1, 0x0) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000001c0)={0x9, 0x3, 0x3, 0x0, 0x7}) r5 = add_key(0x0, &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) keyctl$revoke(0x3, r5) r6 = syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x10000006, 0x30f}, &(0x7f0000000280), &(0x7f0000000300)) io_uring_enter(r6, 0x7277, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r7, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffc}}, 0x44) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet(0x2, 0x3, 0x2f) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) rt_sigpending(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3c}}, 0x0) 836.486201ms ago: executing program 0 (id=986): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'\x00', 0x0}) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmmsg(r2, &(0x7f0000001700)=[{{&(0x7f0000000040)=@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x80, &(0x7f00000011c0)=[{&(0x7f00000000c0)="040d0861869d1a2cd074fefc8b70e2a050f228fddb35ece8afc84b1cc214a5f6042a181b586864b495347cfb9e34945e07d7a3", 0x33}, {&(0x7f0000000100)="b2e427b447c5cee59b8caf73acc4e4f94e52263b12bbd72b286d646446679da360f799d07cf8879326160ea9d68e0253da07ecae79d8c075df8fdf084ef79660d6d812d1cde300feddeeac602bfcaccc19315e5b9e69d64bef69dd7425643dd15f759283c1084d95c1308d818379293288ce68faed1b13a59705c468274dd07140682c2f930e83b28b6ee41b", 0x8c}, {&(0x7f00000001c0)="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", 0x1000}], 0x3}}, {{&(0x7f0000001200)=@x25, 0x80, &(0x7f0000001300)=[{&(0x7f0000001280)="99ee85e5a796039778eab6960ce90fb9c2506dff59ef31ae47536a7b5ba4968a35e19a18eff6b31e36defa3185fab83e81d24bece1bfbd7c4f1a6d63ee3024fafaaa6e4858e15b987a3d96b93116627d52e040907ee02885aaa8d746c16df61f", 0x60}], 0x1}}, {{&(0x7f0000001340)=@x25, 0x80, &(0x7f0000001580)=[{&(0x7f00000013c0)="640486672ed7283da57a522ecfb90696fcb8ba11ec99b8d4a757512464b51a2f9d561c9ca5c093d13fde74b9065f98a3a134eb4eda3c0e08ee1f9330986137dc9af168c48ff4a825640f1f434355606d3897bb2c26d4785f8e3653ea879841246dbe8a0033e6889c888394011854fbc7c1f0449dc428681cfb7f7847d3e8f46621230767dc293939b6d0f302861a02cad02a5d90d55ceb1919145bcce7c757961dbea2ca4d", 0xa5}, {&(0x7f0000001480)="c9fca81988c2b8663ff52b85d42221445cb38f13410d2e888c4b7b687d9c535145e7405f01116e5a38e4bf6434e1e399a5df22231f8f5a33bd4763531aaaa9d095348f4f58e1955bff1125fc98e2af3ac934c1c18463f7d3066ed14ab65c2145b73bbbdd0d0821359876fc5e6711c2e97438623427df1115456af6d0d0a4ff4935a605ce7f8eb4c7a3ad9876790ad6baa9bcd09a8a018a3fdcedce547c252287aaa9fbe34e7a60665ec489e965c913dfbd0f7eacaedbcc8169d24217d604314478e3b4b70a2f258afcbc25bd039e9a922756a81b1cddad71f6993cafd8cf", 0xde}], 0x2, &(0x7f00000015c0)=[{0x48, 0x0, 0x6, "076b81cc89476fdd81bbe8507b4cfe17433bca8f0a45362b83d2a7ca0e0c9e3ffc939294be916027cb19094489fbf32a7b5cf875bf210359ea"}, {0xbc, 0x29, 0x1256b828, "a966df08b4fe2782154a0a24eaeac6e63bd88590f0366cbd09e719c3ed082f8f772c3727c742972c68e821debfe950ae93b8656f08d7cd732fab045b7f98f73934aeeeda13ec0353bb932f3be0395cafca34f6de83414c7504758ff0cb7b1247a117019d48bc246ef8b90f16c95a4a66388ae5554433d8d10149e4edd3d54335f3d8a161029a1fc46be42cb8c08e07b85a103d4d66b572c83923e32eb08fd8d89bca07196c255fc2e11859ca7e96"}], 0x104}}], 0x3, 0x4008064) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001880)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x41000000}, 0xc, &(0x7f0000001840)={&(0x7f00000017c0)=@getnexthop={0x48, 0x6a, 0x408, 0x70bd26, 0x25dfdbfd, {}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_GROUPS={0x4}, @NHA_MASTER={0x8}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_GROUPS={0x4}, @NHA_GROUPS={0x4}, @NHA_FDB={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x5}, 0x4048890) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f00000018c0)={0x33, @local, 0x4e20, 0x2, 'nq\x00', 0x0, 0xfff, 0x54}, 0x2c) pipe2(&(0x7f0000001940)={0xffffffffffffffff, 0xffffffffffffffff}, 0xc4000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001900), r3) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000001b80)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001b40)={&(0x7f00000019c0)={0x154, r5, 0x400, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x4}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x118, 0x3, 0x0, 0x1, [{0xfc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xf5, 0x1, "f0b0c0afe207b1a6d98745ac1a9ad8cc231d82c2e93b84b9e16fb5e03be83e6beac50c2f63cd3e6f7b64e60c860f3e47256bd30ec4a62a8a49e573d3527d8ce3b422e4879776c88ab46f43b0f37c57ee2da98292a3007dc2ee14045d86429fe34ee2aa0eda147e494bda9b7df1d62bb6b3ca04c3d4b3582e9d160a810ca0fc7592492728cc0069544287b0368b442d1332412e4ea96089ca9b6c778b4c6aa324ce263342b0e89bc8a679eccf2cc21fbf2fe5f77a25803ee143cc8fe5bc7f90582c1fba8aa37b967ace89d6f5a720620a3a7f44625bc85e4ddeb6667d1085c74cbfca42ad7cf94a0f294cd26b773b079ad6"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7}}]}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x4}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x154}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$NL80211_CMD_SET_MAC_ACL(r3, &(0x7f0000001c80)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)={0x34, r5, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000004}, 0x800) setsockopt$inet6_tcp_int(r4, 0x6, 0x1b, &(0x7f0000001cc0)=0x608, 0x4) ioctl$IOCTL_STATUS_ACCEL_DEV(r4, 0x40046103, &(0x7f0000001d00)={0x0, 0xe92, 0x3, 0x0, 0x2, 0x7, 0xe1, 0x8, 0x91, 0x4, 0x2, "03059a6bf0da4bae4c28894645e1c48aec97f0d8612159e9ee8361541beb5892"}) r6 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r6, &(0x7f0000001d40)="bb9364d173d9da1658d7943e86fe682214cc9d1e4d239df2b0adc03750", 0x1d, 0x4000, &(0x7f0000001d80)={0x2, 0x0, @rand_addr=0x64010101, 0x4}, 0x10) r7 = openat$fuse(0xffffff9c, &(0x7f0000001dc0), 0x2, 0x0) ioctl$KVM_SMI(r4, 0xaeb7) read$FUSE(r7, &(0x7f0000001e00)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r9, &(0x7f0000003f40)={&(0x7f0000003e40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000003f00)={&(0x7f0000003e80)={0x50, r5, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6b1e557c, 0xc}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x67}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x65}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xe}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x72}]}, 0x50}}, 0x20040000) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000003f80)={{{@in6=@private0, @in6=@dev={0xfe, 0x80, '\x00', 0x3e}, 0x4e22, 0x0, 0x4e24, 0x8, 0x2, 0x20, 0x80, 0x19, r1, r8}, {0x2c, 0x3, 0x6, 0x695, 0x8001, 0x5, 0x8, 0x2}, {0x4, 0x6, 0x4000, 0x1}, 0x0, 0x0, 0x2, 0x1, 0x2}, {{@in=@broadcast, 0x4d5, 0x2b}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x1a}, 0x0, 0x2, 0x3, 0x8, 0x80000001, 0x2}}, 0xe4) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r4, 0x6, 0x21, &(0x7f0000004080)="fd8384e6e59d62741c400a0250736af7", 0x10) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000004100)={0x8, &(0x7f00000040c0)=[{0x6, 0x2, 0x0, 0x7fff}, {0x1, 0x27, 0x2}, {0x2, 0xf}, {0x2, 0x7, 0x5, 0x9}, {0x1, 0xfa, 0x4, 0x4}, {0x1, 0x6d, 0x5, 0x1}, {0x4, 0x6, 0xd9, 0x7}, {0x0, 0x21, 0x1, 0xee4e}]}) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000004140), 0xa, 0x5) openat$sndseq(0xffffff9c, &(0x7f0000004180), 0x444142) socket$can_j1939(0x1d, 0x2, 0x7) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000041c0), r10) ioctl$VHOST_GET_FEATURES(r3, 0x8008af00, &(0x7f0000004200)) r11 = syz_open_dev$vcsa(&(0x7f0000004240), 0xf, 0x2800) mmap$usbmon(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x80010, r11, 0xffff) 682.358309ms ago: executing program 0 (id=987): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x81, 0x1, 0x1, 0x80}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, 0x0, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000100), 0x1, 0x6d8300) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000001540)={0xc0000000, 0x9, "bc1fccd448e681382a542e9ea2fa96dc8d376751732903451bd2472430af00", 0x3, 0x7, 0x6, 0x1, 0x9, 0x4, 0x9, 0x9971a997, [0x5, 0x3, 0x80, 0x3]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x3a, 0x1, 0x0, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) unshare(0x62040200) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x19}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x98, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x6c, 0x3, 0x0, 0x1, [{0x68, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x5c, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x10000}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000000}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}]}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xfc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) gettid() r5 = socket$inet(0xa, 0x801, 0x84) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00', 0x0, [0x8, 0x1ff, 0x4, 0x4, 0x9]}, &(0x7f0000000000)=0x54) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="89070404", 0x4) getsockopt$inet_opts(r3, 0x0, 0x4, 0x0, &(0x7f00000001c0)) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r6 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, 0x0) syz_io_uring_submit(r7, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x23}) io_uring_enter(r6, 0x48e9, 0x0, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01464ba, &(0x7f0000000300)={0x8, 0x0, 0x0, 0xfbfbfbfb}) recvmmsg(r2, &(0x7f0000005780)=[{{&(0x7f0000000080)=@nl, 0x80, &(0x7f0000000040)=[{&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000000000)=""/8, 0x8}, {&(0x7f0000001440)=""/247, 0xf7}], 0x3, &(0x7f0000001240)=""/185, 0xb9}, 0x10000}, {{&(0x7f0000000140)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000001800), 0x0, &(0x7f0000001840)=""/23, 0x17}, 0x800005}, {{&(0x7f0000001880)=@x25={0x9, @remote}, 0x80, &(0x7f0000001d00)=[{&(0x7f0000001900)=""/92, 0x5c}, {&(0x7f0000001980)=""/182, 0xb6}, {&(0x7f0000001a40)=""/123, 0x7b}, {&(0x7f0000001ac0)=""/167, 0xa7}, {&(0x7f0000001b80)=""/229, 0xe5}, {&(0x7f0000001c80)=""/120, 0x78}], 0x6, &(0x7f0000001d40)}, 0x40}, {{&(0x7f0000001d80)=@nl=@proc, 0x80, &(0x7f0000003400)=[{&(0x7f0000001e00)=""/147, 0x93}, {&(0x7f0000001ec0)=""/106, 0x6a}, {&(0x7f0000001f40)=""/208, 0xd0}, {&(0x7f0000002040)=""/226, 0xe2}, {&(0x7f0000001380)=""/188, 0xbc}, {&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000003200)=""/218, 0xda}, {&(0x7f0000003300)=""/241, 0xf1}], 0x8, &(0x7f0000003440)=""/179, 0xb3}, 0x6}, {{&(0x7f0000003500)=@x25={0x9, @remote}, 0x80, &(0x7f0000005740)=[{&(0x7f0000003580)=""/4096, 0x1000}, {&(0x7f0000004580)=""/167, 0xa7}, {&(0x7f0000004640)=""/4096, 0x1000}, {&(0x7f0000005640)=""/38, 0x26}], 0x4}, 0x1}], 0x5, 0x40, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000004, 0x31, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) 442.624439ms ago: executing program 3 (id=988): bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) r0 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100), &(0x7f0000000280)) io_uring_enter(r0, 0x15f1, 0xff98, 0x69, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000100)={0x4}) 0s ago: executing program 2 (id=989): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x80}}]}}]}, 0x48}}, 0x20040084) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x4}, {0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0x11, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xb, 0x101, 0x7fff, 0x2002, 0xfffd, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x401, 0x4, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f0000000240)="800000800000210e3000cd7a0100", 0xe, 0x4, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) kernel console output (not intermixed with test programs): ng dummy_hcd [ 175.166815][ T5823] usb 4-1: Using ep0 maxpacket: 8 [ 175.174608][ T5823] usb 4-1: unable to get BOS descriptor or descriptor too short [ 175.182989][ T5823] usb 4-1: too many configurations: 89, using maximum allowed: 8 [ 175.195130][ T5823] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 175.210210][ T5823] usb 4-1: can't read configurations, error -61 [ 175.334784][ T5916] usb 5-1: USB disconnect, device number 8 [ 175.362749][ T5823] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 175.539946][ T5823] usb 4-1: Using ep0 maxpacket: 8 [ 175.561736][ T5823] usb 4-1: unable to get BOS descriptor or descriptor too short [ 175.575956][ T5823] usb 4-1: too many configurations: 89, using maximum allowed: 8 [ 175.591250][ T5823] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 175.599445][ T5823] usb 4-1: can't read configurations, error -61 [ 175.606242][ T5823] usb usb4-port1: attempt power cycle [ 175.646165][ T7804] x_tables: duplicate underflow at hook 3 [ 175.847447][ T1210] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 175.945769][ T7807] syzkaller0: entered promiscuous mode [ 175.946882][ T5823] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 175.952072][ T7807] syzkaller0: entered allmulticast mode [ 175.982131][ T5823] usb 4-1: Using ep0 maxpacket: 8 [ 175.995204][ T5823] usb 4-1: unable to get BOS descriptor or descriptor too short [ 176.003439][ T5823] usb 4-1: too many configurations: 89, using maximum allowed: 8 [ 176.006246][ T5902] usb 3-1: USB disconnect, device number 12 [ 176.025277][ T5823] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 176.045762][ T5823] usb 4-1: can't read configurations, error -61 [ 176.176919][ T5823] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 176.218441][ T5823] usb 4-1: Using ep0 maxpacket: 8 [ 176.231388][ T5823] usb 4-1: unable to get BOS descriptor or descriptor too short [ 176.245446][ T5823] usb 4-1: too many configurations: 89, using maximum allowed: 8 [ 176.258882][ T5823] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 176.270284][ T5823] usb 4-1: can't read configurations, error -61 [ 176.279071][ T5823] usb usb4-port1: unable to enumerate USB device [ 177.173345][ T7838] netlink: 8 bytes leftover after parsing attributes in process `syz.2.535'. [ 177.337298][ T7841] netlink: 4 bytes leftover after parsing attributes in process `syz.2.536'. [ 177.693190][ T7841] bond1: Invalid ad_actor_system MAC address. [ 177.731290][ T7841] bond1: option ad_actor_system: invalid value (4294967295) [ 177.759466][ T7841] bond1 (unregistering): Released all slaves [ 177.889772][ T7849] syzkaller0: entered promiscuous mode [ 177.895282][ T7849] syzkaller0: entered allmulticast mode [ 178.177047][ T5916] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 178.397114][ T5916] usb 5-1: no configurations [ 178.523340][ T5916] usb 5-1: can't read configurations, error -22 [ 178.677160][ T5916] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 178.873797][ T7877] netlink: 'syz.2.547': attribute type 13 has an invalid length. [ 178.898637][ T5916] usb 5-1: no configurations [ 178.903272][ T5916] usb 5-1: can't read configurations, error -22 [ 178.969797][ T5916] usb usb5-port1: attempt power cycle [ 178.983293][ T7872] netlink: 4 bytes leftover after parsing attributes in process `syz.2.547'. [ 179.347513][ T5916] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 179.371067][ T5916] usb 5-1: no configurations [ 179.375751][ T5916] usb 5-1: can't read configurations, error -22 [ 179.507425][ T5916] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 179.528776][ T5916] usb 5-1: no configurations [ 179.533404][ T5916] usb 5-1: can't read configurations, error -22 [ 179.540224][ T5916] usb usb5-port1: unable to enumerate USB device [ 179.926012][ T7891] syzkaller0: entered promiscuous mode [ 179.931830][ T7891] syzkaller0: entered allmulticast mode [ 180.146857][ T10] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 180.326172][ T10] usb 4-1: config 0 has an invalid interface number: 49 but max is 0 [ 180.357573][ T10] usb 4-1: config 0 has no interface number 0 [ 180.363721][ T10] usb 4-1: config 0 interface 49 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 180.393782][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=2d.ad [ 180.446918][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.459054][ T10] usb 4-1: config 0 descriptor?? [ 180.482759][ T7889] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 180.617058][ T10] xbox_remote_probe: Unexpected desc.bNumEndpoints: 2 [ 181.057254][ T5902] usb 4-1: USB disconnect, device number 19 [ 181.348830][ T7914] netlink: 116 bytes leftover after parsing attributes in process `syz.4.559'. [ 181.553929][ T7920] netlink: 'syz.3.560': attribute type 13 has an invalid length. [ 181.578596][ T7922] syzkaller0: entered promiscuous mode [ 181.594340][ T7922] syzkaller0: entered allmulticast mode [ 181.676889][ T5902] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 181.868824][ T5902] usb 5-1: config 136 has an invalid interface number: 5 but max is 2 [ 181.878632][ T5902] usb 5-1: config 136 has an invalid interface number: 195 but max is 2 [ 181.901868][ T5902] usb 5-1: config 136 has an invalid interface number: 5 but max is 2 [ 181.916858][ T5902] usb 5-1: config 136 has an invalid interface number: 160 but max is 2 [ 181.931832][ T5902] usb 5-1: config 136 has no interface number 0 [ 181.946839][ T5902] usb 5-1: config 136 has no interface number 1 [ 181.976980][ T5902] usb 5-1: config 136 has no interface number 2 [ 181.993493][ T5902] usb 5-1: config 136 interface 5 altsetting 16 bulk endpoint 0xC has invalid maxpacket 32 [ 182.014311][ T5902] usb 5-1: config 136 interface 5 altsetting 5 bulk endpoint 0x4 has invalid maxpacket 64 [ 182.028532][ T5902] usb 5-1: config 136 interface 5 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 182.067183][ T5902] usb 5-1: too many endpoints for config 136 interface 160 altsetting 57: 62, using maximum allowed: 30 [ 182.136869][ T5902] usb 5-1: config 136 interface 160 altsetting 57 bulk endpoint 0xA has invalid maxpacket 32 [ 182.167351][ T5902] usb 5-1: config 136 interface 160 altsetting 57 has 1 endpoint descriptor, different from the interface descriptor's value: 62 [ 182.252317][ T5902] usb 5-1: config 136 interface 5 has no altsetting 0 [ 182.259245][ T5902] usb 5-1: config 136 interface 5 has no altsetting 1 [ 182.266131][ T5902] usb 5-1: config 136 interface 195 has no altsetting 0 [ 182.273167][ T5902] usb 5-1: config 136 interface 160 has no altsetting 0 [ 182.323041][ T7932] usb usb1: usbfs: process 7932 (syz.1.564) did not claim interface 0 before use [ 182.323106][ T5902] usb 5-1: New USB device found, idVendor=19d2, idProduct=1270, bcdDevice=69.0b [ 182.348593][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.356675][ T5902] usb 5-1: Product: syz [ 182.493745][ T5902] usb 5-1: Manufacturer: syz [ 182.525533][ T5902] usb 5-1: SerialNumber: syz [ 182.603852][ T7914] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 182.817119][ T5823] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 182.876202][ T5902] usb 5-1: USB disconnect, device number 13 [ 183.022596][ T5823] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 183.041033][ T5823] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.089796][ T5823] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 183.103451][ T5823] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 183.125950][ T5823] usb 2-1: Manufacturer: syz [ 183.149871][ T5823] usb 2-1: config 0 descriptor?? [ 183.256820][ T5823] rc_core: IR keymap rc-hauppauge not found [ 183.262786][ T5823] Registered IR keymap rc-empty [ 183.294116][ T5823] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 183.327118][ T5823] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input7 [ 183.462895][ T7964] tipc: Started in network mode [ 183.468474][ T7964] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 183.563112][ T7964] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000 [ 183.670353][ T7964] tipc: Enabled bearer , priority 10 [ 183.755594][ T5902] usb 2-1: USB disconnect, device number 11 [ 183.939649][ T7972] FAULT_INJECTION: forcing a failure. [ 183.939649][ T7972] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 183.948096][ T7973] syzkaller0: entered promiscuous mode [ 183.979239][ T7973] syzkaller0: entered allmulticast mode [ 183.995865][ T7972] CPU: 1 UID: 0 PID: 7972 Comm: syz.2.575 Tainted: G L syzkaller #0 PREEMPT(full) [ 183.995888][ T7972] Tainted: [L]=SOFTLOCKUP [ 183.995891][ T7972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 183.995897][ T7972] Call Trace: [ 183.995901][ T7972] [ 183.995906][ T7972] dump_stack_lvl+0xe8/0x150 [ 183.995924][ T7972] should_fail_ex+0x412/0x560 [ 183.995941][ T7972] _copy_to_user+0x31/0xb0 [ 183.995953][ T7972] simple_read_from_buffer+0xe1/0x170 [ 183.995966][ T7972] proc_fail_nth_read+0x1bb/0x230 [ 183.995978][ T7972] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 183.995989][ T7972] ? rw_verify_area+0x2a6/0x4d0 [ 183.996003][ T7972] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 183.996015][ T7972] vfs_read+0x20c/0xa70 [ 183.996028][ T7972] ? fdget_pos+0x246/0x320 [ 183.996049][ T7972] ? __pfx___mutex_lock+0x10/0x10 [ 183.996070][ T7972] ? __pfx_vfs_read+0x10/0x10 [ 183.996086][ T7972] ? __fget_files+0x2a/0x420 [ 183.996107][ T7972] ? __fget_files+0x3a0/0x420 [ 183.996122][ T7972] ? __fget_files+0x2a/0x420 [ 183.996143][ T7972] ksys_read+0x150/0x270 [ 183.996160][ T7972] ? __pfx_ksys_read+0x10/0x10 [ 183.996179][ T7972] ? asm_int80_emulation+0x1a/0x20 [ 183.996193][ T7972] ? asm_int80_emulation+0x1a/0x20 [ 183.996205][ T7972] do_int80_emulation+0x111/0x400 [ 183.996223][ T7972] ? clear_bhb_loop+0x60/0xb0 [ 183.996236][ T7972] ? clear_bhb_loop+0x60/0xb0 [ 183.996252][ T7972] asm_int80_emulation+0x1a/0x20 [ 183.996266][ T7972] RIP: 0023:0xf71e572b [ 183.996280][ T7972] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 183.996290][ T7972] RSP: 002b:00000000f54a64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 183.996306][ T7972] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54a65d0 [ 183.996314][ T7972] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 183.996321][ T7972] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 183.996329][ T7972] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 183.996337][ T7972] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 183.996362][ T7972] [ 184.678529][ T10] tipc: Node number set to 1 [ 184.698465][ T7981] FAULT_INJECTION: forcing a failure. [ 184.698465][ T7981] name failslab, interval 1, probability 0, space 0, times 0 [ 184.771205][ T7981] CPU: 1 UID: 0 PID: 7981 Comm: syz.3.577 Tainted: G L syzkaller #0 PREEMPT(full) [ 184.771232][ T7981] Tainted: [L]=SOFTLOCKUP [ 184.771237][ T7981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 184.771246][ T7981] Call Trace: [ 184.771253][ T7981] [ 184.771260][ T7981] dump_stack_lvl+0xe8/0x150 [ 184.771285][ T7981] should_fail_ex+0x412/0x560 [ 184.771310][ T7981] should_failslab+0xa8/0x100 [ 184.771329][ T7981] __kmalloc_noprof+0xde/0x7e0 [ 184.771343][ T7981] ? tomoyo_encode+0x28b/0x550 [ 184.771367][ T7981] tomoyo_encode+0x28b/0x550 [ 184.771391][ T7981] tomoyo_realpath_from_path+0x58d/0x5d0 [ 184.771419][ T7981] ? tomoyo_path_number_perm+0x219/0x630 [ 184.771437][ T7981] tomoyo_path_number_perm+0x246/0x630 [ 184.771455][ T7981] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 184.771469][ T7981] ? __lock_acquire+0x6b5/0x2cf0 [ 184.771512][ T7981] ? __fget_files+0x2a/0x420 [ 184.771535][ T7981] ? __fget_files+0x3a0/0x420 [ 184.771550][ T7981] ? __fget_files+0x2a/0x420 [ 184.771571][ T7981] security_file_ioctl_compat+0xc3/0x2a0 [ 184.771591][ T7981] __ia32_compat_sys_ioctl+0x139/0x950 [ 184.771619][ T7981] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 184.771637][ T7981] ? __fget_files+0x3a0/0x420 [ 184.771660][ T7981] ? fput+0xa0/0xd0 [ 184.771679][ T7981] ? ksys_write+0x242/0x270 [ 184.771696][ T7981] ? __pfx_ksys_write+0x10/0x10 [ 184.771719][ T7981] __do_fast_syscall_32+0x1d2/0x540 [ 184.771732][ T7981] ? lockdep_hardirqs_on+0x7a/0x110 [ 184.771749][ T7981] ? do_fast_syscall_32+0x33/0x70 [ 184.771767][ T7981] ? asm_int80_emulation+0x1a/0x20 [ 184.771780][ T7981] ? do_int80_emulation+0x20e/0x400 [ 184.771803][ T7981] do_fast_syscall_32+0x33/0x70 [ 184.771823][ T7981] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 184.771838][ T7981] RIP: 0023:0xf7fa3539 [ 184.771852][ T7981] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 184.771864][ T7981] RSP: 002b:00000000f546650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 184.771881][ T7981] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005393 [ 184.771892][ T7981] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 184.771901][ T7981] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 184.771909][ T7981] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 184.771918][ T7981] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 184.771944][ T7981] [ 184.771970][ T7981] ERROR: Out of memory at tomoyo_realpath_from_path. [ 185.271016][ T7993] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 186.427165][ T8017] usb usb1: usbfs: process 8017 (syz.0.588) did not claim interface 0 before use [ 186.716143][ T8023] syzkaller0: entered promiscuous mode [ 186.804802][ T8023] syzkaller0: entered allmulticast mode [ 188.926195][ T8065] usb usb1: usbfs: process 8065 (syz.4.601) did not claim interface 0 before use [ 189.216877][ T1210] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 189.229908][ T8077] syzkaller0: entered promiscuous mode [ 189.235425][ T8077] syzkaller0: entered allmulticast mode [ 189.410674][ T1210] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 189.426189][ T1210] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.449114][ T1210] usb 2-1: Product: syz [ 189.453413][ T1210] usb 2-1: Manufacturer: syz [ 189.464232][ T1210] usb 2-1: SerialNumber: syz [ 189.913334][ T1210] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 189.961895][ T5916] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 189.970596][ T1210] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 189.984602][ T1210] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 190.011787][ T1210] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 190.024606][ T1210] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 190.044999][ T1210] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 190.064584][ T1210] usb 2-1: USB disconnect, device number 12 [ 190.127079][ T5916] usb 3-1: Using ep0 maxpacket: 8 [ 190.134009][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.145855][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.155930][ T5916] usb 3-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 190.168434][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.206258][ T5916] usb 3-1: config 0 descriptor?? [ 190.400034][ T8111] usb usb1: usbfs: process 8111 (syz.1.617) did not claim interface 0 before use [ 190.640551][ T5916] usbhid 3-1:0.0: can't add hid device: -71 [ 190.646599][ T5916] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 190.711507][ T5916] usb 3-1: USB disconnect, device number 13 [ 190.868301][ T8122] FAULT_INJECTION: forcing a failure. [ 190.868301][ T8122] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.883304][ T8121] FAULT_INJECTION: forcing a failure. [ 190.883304][ T8121] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.905667][ T8122] CPU: 1 UID: 0 PID: 8122 Comm: syz.3.620 Tainted: G L syzkaller #0 PREEMPT(full) [ 190.905694][ T8122] Tainted: [L]=SOFTLOCKUP [ 190.905700][ T8122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 190.905709][ T8122] Call Trace: [ 190.905716][ T8122] [ 190.905730][ T8122] dump_stack_lvl+0xe8/0x150 [ 190.905754][ T8122] should_fail_ex+0x412/0x560 [ 190.905780][ T8122] _copy_from_user+0x2d/0xb0 [ 190.905799][ T8122] snd_seq_write+0x309/0x820 [ 190.905818][ T8122] ? kstrtouint+0x6e/0xe0 [ 190.905846][ T8122] ? __pfx_snd_seq_write+0x10/0x10 [ 190.905865][ T8122] ? bpf_lsm_file_permission+0x9/0x20 [ 190.905880][ T8122] ? security_file_permission+0x75/0x260 [ 190.905898][ T8122] ? rw_verify_area+0x255/0x4d0 [ 190.905923][ T8122] vfs_writev+0x4bd/0x990 [ 190.905943][ T8122] ? __pfx_snd_seq_write+0x10/0x10 [ 190.905965][ T8122] ? __pfx_vfs_writev+0x10/0x10 [ 190.905996][ T8122] ? __fget_files+0x2a/0x420 [ 190.906018][ T8122] ? __fget_files+0x3a0/0x420 [ 190.906033][ T8122] ? __fget_files+0x2a/0x420 [ 190.906059][ T8122] do_writev+0x154/0x2e0 [ 190.906079][ T8122] ? __pfx_do_writev+0x10/0x10 [ 190.906097][ T8122] ? __pfx_ksys_write+0x10/0x10 [ 190.906120][ T8122] __do_fast_syscall_32+0x1d2/0x540 [ 190.906134][ T8122] ? lockdep_hardirqs_on+0x7a/0x110 [ 190.906151][ T8122] ? do_fast_syscall_32+0x33/0x70 [ 190.906170][ T8122] ? asm_int80_emulation+0x1a/0x20 [ 190.906183][ T8122] ? do_int80_emulation+0x20e/0x400 [ 190.906206][ T8122] do_fast_syscall_32+0x33/0x70 [ 190.906227][ T8122] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 190.906244][ T8122] RIP: 0023:0xf7fa3539 [ 190.906258][ T8122] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 190.906270][ T8122] RSP: 002b:00000000f546650c EFLAGS: 00000206 ORIG_RAX: 0000000000000092 [ 190.906286][ T8122] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000580 [ 190.906297][ T8122] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 190.906306][ T8122] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 190.906314][ T8122] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 190.906323][ T8122] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 190.906349][ T8122] [ 191.070970][ T8121] CPU: 0 UID: 0 PID: 8121 Comm: syz.4.621 Tainted: G L syzkaller #0 PREEMPT(full) [ 191.070996][ T8121] Tainted: [L]=SOFTLOCKUP [ 191.071002][ T8121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 191.071010][ T8121] Call Trace: [ 191.071017][ T8121] [ 191.071025][ T8121] dump_stack_lvl+0xe8/0x150 [ 191.071049][ T8121] should_fail_ex+0x412/0x560 [ 191.071074][ T8121] _copy_from_user+0x2d/0xb0 [ 191.071091][ T8121] input_event_from_user+0x100/0x290 [ 191.071109][ T8121] ? __pfx_input_event_from_user+0x10/0x10 [ 191.071134][ T8121] evdev_write+0x2c7/0x4c0 [ 191.071155][ T8121] ? __pfx_evdev_write+0x10/0x10 [ 191.071170][ T8121] ? bpf_lsm_file_permission+0x9/0x20 [ 191.071185][ T8121] ? security_file_permission+0x75/0x260 [ 191.071202][ T8121] ? rw_verify_area+0x255/0x4d0 [ 191.071222][ T8121] ? __pfx_evdev_write+0x10/0x10 [ 191.071238][ T8121] vfs_write+0x29a/0xb90 [ 191.071260][ T8121] ? __pfx_vfs_write+0x10/0x10 [ 191.071276][ T8121] ? __fget_files+0x2a/0x420 [ 191.071295][ T8121] ? __fget_files+0x2a/0x420 [ 191.071327][ T8121] ? __fget_files+0x3a0/0x420 [ 191.071343][ T8121] ? __fget_files+0x2a/0x420 [ 191.071367][ T8121] ksys_write+0x150/0x270 [ 191.071384][ T8121] ? __pfx_ksys_write+0x10/0x10 [ 191.071398][ T8121] ? __pfx_ksys_write+0x10/0x10 [ 191.071420][ T8121] __do_fast_syscall_32+0x1d2/0x540 [ 191.071434][ T8121] ? lockdep_hardirqs_on+0x7a/0x110 [ 191.071451][ T8121] ? do_fast_syscall_32+0x33/0x70 [ 191.071469][ T8121] ? asm_int80_emulation+0x1a/0x20 [ 191.071483][ T8121] ? do_int80_emulation+0x20e/0x400 [ 191.071506][ T8121] do_fast_syscall_32+0x33/0x70 [ 191.071525][ T8121] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 191.071542][ T8121] RIP: 0023:0xf73bd539 [ 191.071556][ T8121] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 191.071568][ T8121] RSP: 002b:00000000f53e650c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 191.071584][ T8121] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 191.071594][ T8121] RDX: 00000000000012d8 RSI: 0000000000000000 RDI: 0000000000000000 [ 191.071603][ T8121] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 191.071611][ T8121] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 191.071620][ T8121] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 191.071645][ T8121] [ 191.436822][ T8126] syzkaller0: entered promiscuous mode [ 191.442345][ T8126] syzkaller0: entered allmulticast mode [ 191.907161][ T128] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 192.112667][ T128] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 192.123445][ T128] usb 4-1: config 0 has no interface number 0 [ 192.163749][ T128] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 192.181952][ T8147] usb usb1: usbfs: process 8147 (syz.2.629) did not claim interface 0 before use [ 192.240394][ T128] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 192.256834][ T128] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.276827][ T128] usb 4-1: Product: syz [ 192.281033][ T128] usb 4-1: Manufacturer: syz [ 192.301005][ T128] usb 4-1: SerialNumber: syz [ 192.337270][ T128] usb 4-1: config 0 descriptor?? [ 192.358237][ T128] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 193.133137][ T8133] netlink: 4 bytes leftover after parsing attributes in process `syz.3.624'. [ 193.217695][ T10] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 193.269303][ T8169] syzkaller0: entered promiscuous mode [ 193.281572][ T8169] syzkaller0: entered allmulticast mode [ 193.377073][ T10] usb 5-1: device descriptor read/64, error -71 [ 193.646900][ T10] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 193.787107][ T10] usb 5-1: device descriptor read/64, error -71 [ 193.864780][ T8181] usb usb1: usbfs: process 8181 (syz.1.641) did not claim interface 0 before use [ 193.899250][ T10] usb usb5-port1: attempt power cycle [ 194.259912][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.266262][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.279747][ T10] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 194.329314][ T10] usb 5-1: device descriptor read/8, error -71 [ 194.578709][ T10] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 194.647624][ T5916] usb 4-1: USB disconnect, device number 20 [ 194.655747][ T10] usb 5-1: device descriptor read/8, error -71 [ 194.697981][ T5916] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 194.790067][ T10] usb usb5-port1: unable to enumerate USB device [ 194.910561][ T8200] FAULT_INJECTION: forcing a failure. [ 194.910561][ T8200] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 194.928837][ T8200] CPU: 0 UID: 0 PID: 8200 Comm: syz.0.646 Tainted: G L syzkaller #0 PREEMPT(full) [ 194.928866][ T8200] Tainted: [L]=SOFTLOCKUP [ 194.928871][ T8200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 194.928881][ T8200] Call Trace: [ 194.928888][ T8200] [ 194.928896][ T8200] dump_stack_lvl+0xe8/0x150 [ 194.928920][ T8200] should_fail_ex+0x412/0x560 [ 194.928946][ T8200] _copy_to_user+0x31/0xb0 [ 194.928966][ T8200] simple_read_from_buffer+0xe1/0x170 [ 194.928989][ T8200] proc_fail_nth_read+0x1bb/0x230 [ 194.929009][ T8200] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 194.929028][ T8200] ? rw_verify_area+0x2a6/0x4d0 [ 194.929049][ T8200] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 194.929066][ T8200] vfs_read+0x20c/0xa70 [ 194.929080][ T8200] ? fdget_pos+0x246/0x320 [ 194.929102][ T8200] ? __pfx___mutex_lock+0x10/0x10 [ 194.929123][ T8200] ? __pfx_vfs_read+0x10/0x10 [ 194.929140][ T8200] ? __fget_files+0x2a/0x420 [ 194.929161][ T8200] ? __fget_files+0x3a0/0x420 [ 194.929178][ T8200] ? __fget_files+0x2a/0x420 [ 194.929203][ T8200] ksys_read+0x150/0x270 [ 194.929220][ T8200] ? __pfx_ksys_read+0x10/0x10 [ 194.929239][ T8200] ? asm_int80_emulation+0x1a/0x20 [ 194.929257][ T8200] ? asm_int80_emulation+0x1a/0x20 [ 194.929272][ T8200] do_int80_emulation+0x111/0x400 [ 194.929293][ T8200] ? clear_bhb_loop+0x60/0xb0 [ 194.929314][ T8200] ? clear_bhb_loop+0x60/0xb0 [ 194.929332][ T8200] asm_int80_emulation+0x1a/0x20 [ 194.929347][ T8200] RIP: 0023:0xf71f572b [ 194.929362][ T8200] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 194.929375][ T8200] RSP: 002b:00000000f54b64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 194.929392][ T8200] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54b65d0 [ 194.929403][ T8200] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 194.929411][ T8200] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 194.929420][ T8200] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 194.929429][ T8200] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 194.929455][ T8200] [ 195.006780][ T8203] netlink: 16 bytes leftover after parsing attributes in process `syz.2.647'. [ 195.590731][ T128] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 195.754448][ T128] usb 2-1: device descriptor read/64, error -71 [ 195.985743][ T8236] syzkaller0: entered promiscuous mode [ 195.996060][ T8236] syzkaller0: entered allmulticast mode [ 196.005502][ T128] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 196.037309][ T5902] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 196.158893][ T128] usb 2-1: device descriptor read/64, error -71 [ 196.233244][ T5902] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 196.248272][ T5902] usb 4-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 196.258213][ T5902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.269338][ T128] usb usb2-port1: attempt power cycle [ 196.277255][ T5902] usb 4-1: config 0 descriptor?? [ 196.354178][ T8242] usb usb1: usbfs: process 8242 (syz.4.661) did not claim interface 0 before use [ 196.616839][ T128] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 196.637771][ T128] usb 2-1: device descriptor read/8, error -71 [ 196.714866][ T5902] waltop 0003:172F:0037.0003: collection stack underflow [ 196.723309][ T5902] waltop 0003:172F:0037.0003: item 0 1 0 12 parsing failed [ 196.734335][ T5902] waltop 0003:172F:0037.0003: probe with driver waltop failed with error -22 [ 196.887446][ T128] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 196.962326][ T8230] bond0: (slave veth0_to_hsr): Error: Device can not be enslaved while up [ 197.048919][ T128] usb 2-1: device descriptor read/8, error -71 [ 197.157324][ T128] usb usb2-port1: unable to enumerate USB device [ 197.299933][ T8263] FAULT_INJECTION: forcing a failure. [ 197.299933][ T8263] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.333429][ T8263] CPU: 1 UID: 0 PID: 8263 Comm: syz.4.669 Tainted: G L syzkaller #0 PREEMPT(full) [ 197.333457][ T8263] Tainted: [L]=SOFTLOCKUP [ 197.333462][ T8263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 197.333470][ T8263] Call Trace: [ 197.333476][ T8263] [ 197.333482][ T8263] dump_stack_lvl+0xe8/0x150 [ 197.333505][ T8263] should_fail_ex+0x412/0x560 [ 197.333528][ T8263] _copy_to_user+0x31/0xb0 [ 197.333546][ T8263] simple_read_from_buffer+0xe1/0x170 [ 197.333569][ T8263] proc_fail_nth_read+0x1bb/0x230 [ 197.333589][ T8263] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 197.333607][ T8263] ? rw_verify_area+0x2a6/0x4d0 [ 197.333642][ T8263] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 197.333661][ T8263] vfs_read+0x20c/0xa70 [ 197.333674][ T8263] ? fdget_pos+0x246/0x320 [ 197.333697][ T8263] ? __pfx___mutex_lock+0x10/0x10 [ 197.333719][ T8263] ? __pfx_vfs_read+0x10/0x10 [ 197.333735][ T8263] ? __fget_files+0x2a/0x420 [ 197.333756][ T8263] ? __fget_files+0x3a0/0x420 [ 197.333773][ T8263] ? __fget_files+0x2a/0x420 [ 197.333798][ T8263] ksys_read+0x150/0x270 [ 197.333815][ T8263] ? __pfx_ksys_read+0x10/0x10 [ 197.333834][ T8263] ? asm_int80_emulation+0x1a/0x20 [ 197.333852][ T8263] ? asm_int80_emulation+0x1a/0x20 [ 197.333867][ T8263] do_int80_emulation+0x111/0x400 [ 197.333887][ T8263] ? clear_bhb_loop+0x60/0xb0 [ 197.333901][ T8263] ? clear_bhb_loop+0x60/0xb0 [ 197.333919][ T8263] asm_int80_emulation+0x1a/0x20 [ 197.333933][ T8263] RIP: 0023:0xf712572b [ 197.333948][ T8263] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 197.333961][ T8263] RSP: 002b:00000000f53e64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 197.333998][ T8263] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53e65d0 [ 197.334009][ T8263] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 197.334018][ T8263] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 197.334026][ T8263] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 197.334035][ T8263] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 197.334060][ T8263] [ 197.795054][ T8268] syzkaller0: entered promiscuous mode [ 197.800898][ T8268] syzkaller0: entered allmulticast mode [ 198.787322][ T10] usb 4-1: USB disconnect, device number 21 [ 198.831157][ T8298] FAULT_INJECTION: forcing a failure. [ 198.831157][ T8298] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 198.865654][ T8298] CPU: 0 UID: 0 PID: 8298 Comm: syz.1.681 Tainted: G L syzkaller #0 PREEMPT(full) [ 198.865681][ T8298] Tainted: [L]=SOFTLOCKUP [ 198.865687][ T8298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 198.865696][ T8298] Call Trace: [ 198.865703][ T8298] [ 198.865710][ T8298] dump_stack_lvl+0xe8/0x150 [ 198.865735][ T8298] should_fail_ex+0x412/0x560 [ 198.865760][ T8298] _copy_from_iter+0x1d3/0x1670 [ 198.865782][ T8298] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 198.865808][ T8298] ? policy_nodemask+0x27c/0x710 [ 198.865835][ T8298] ? __pfx__copy_from_iter+0x10/0x10 [ 198.865862][ T8298] ? set_page_refcounted+0xa0/0x1e0 [ 198.865879][ T8298] ? page_copy_sane+0x4e/0x270 [ 198.865896][ T8298] copy_page_from_iter+0xdd/0x170 [ 198.865915][ T8298] tun_get_user+0x1d4b/0x3dd0 [ 198.865931][ T8298] ? tun_get_user+0x6ff/0x3dd0 [ 198.865964][ T8298] ? aa_file_perm+0x440/0x1630 [ 198.865985][ T8298] ? __pfx_tun_get_user+0x10/0x10 [ 198.866004][ T8298] ? __lock_acquire+0x6b5/0x2cf0 [ 198.866034][ T8298] ? ref_tracker_alloc+0x363/0x4d0 [ 198.866057][ T8298] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 198.866078][ T8298] ? tun_get+0x1c/0x2f0 [ 198.866095][ T8298] ? tun_get+0x1c/0x2f0 [ 198.866117][ T8298] ? tun_get+0x1c/0x2f0 [ 198.866133][ T8298] ? tun_get+0x1c/0x2f0 [ 198.866154][ T8298] tun_chr_write_iter+0x113/0x200 [ 198.866174][ T8298] vfs_write+0x61d/0xb90 [ 198.866197][ T8298] ? __pfx_vfs_write+0x10/0x10 [ 198.866221][ T8298] ? __fget_files+0x2a/0x420 [ 198.866247][ T8298] ksys_write+0x150/0x270 [ 198.866265][ T8298] ? __pfx_ksys_write+0x10/0x10 [ 198.866285][ T8298] ? asm_int80_emulation+0x1a/0x20 [ 198.866303][ T8298] ? asm_int80_emulation+0x1a/0x20 [ 198.866318][ T8298] do_int80_emulation+0x111/0x400 [ 198.866339][ T8298] ? clear_bhb_loop+0x60/0xb0 [ 198.866354][ T8298] ? clear_bhb_loop+0x60/0xb0 [ 198.866372][ T8298] asm_int80_emulation+0x1a/0x20 [ 198.866386][ T8298] RIP: 0023:0xf71f572b [ 198.866401][ T8298] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 198.866414][ T8298] RSP: 002b:00000000f54b644c EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 198.866432][ T8298] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 00000000800007c0 [ 198.866443][ T8298] RDX: 000000000000003e RSI: 0000000000000000 RDI: 0000000000000000 [ 198.866453][ T8298] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 198.866462][ T8298] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 198.866471][ T8298] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 198.866496][ T8298] [ 199.276083][ T8307] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.366499][ T8310] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.390305][ T8307] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 200.150844][ T8333] FAULT_INJECTION: forcing a failure. [ 200.150844][ T8333] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 200.198037][ T8333] CPU: 0 UID: 0 PID: 8333 Comm: syz.1.691 Tainted: G L syzkaller #0 PREEMPT(full) [ 200.198064][ T8333] Tainted: [L]=SOFTLOCKUP [ 200.198070][ T8333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 200.198079][ T8333] Call Trace: [ 200.198086][ T8333] [ 200.198094][ T8333] dump_stack_lvl+0xe8/0x150 [ 200.198119][ T8333] should_fail_ex+0x412/0x560 [ 200.198143][ T8333] _copy_from_iter+0x1d3/0x1670 [ 200.198176][ T8333] ? __pfx__copy_from_iter+0x10/0x10 [ 200.198199][ T8333] ? rcu_is_watching+0x15/0xb0 [ 200.198218][ T8333] ? trace_kmalloc+0x1f/0xb0 [ 200.198253][ T8333] ? __kmalloc_noprof+0x42d/0x7e0 [ 200.198266][ T8333] ? kernfs_fop_write_iter+0x158/0x540 [ 200.198289][ T8333] kernfs_fop_write_iter+0x19b/0x540 [ 200.198316][ T8333] vfs_write+0x61d/0xb90 [ 200.198340][ T8333] ? __pfx_vfs_write+0x10/0x10 [ 200.198364][ T8333] ? __fget_files+0x2a/0x420 [ 200.198391][ T8333] ksys_write+0x150/0x270 [ 200.198408][ T8333] ? __pfx_ksys_write+0x10/0x10 [ 200.198422][ T8333] ? __pfx_ksys_write+0x10/0x10 [ 200.198446][ T8333] __do_fast_syscall_32+0x1d2/0x540 [ 200.198461][ T8333] ? lockdep_hardirqs_on+0x7a/0x110 [ 200.198477][ T8333] ? do_fast_syscall_32+0x33/0x70 [ 200.198495][ T8333] ? asm_int80_emulation+0x1a/0x20 [ 200.198508][ T8333] ? do_int80_emulation+0x20e/0x400 [ 200.198531][ T8333] do_fast_syscall_32+0x33/0x70 [ 200.198552][ T8333] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 200.198575][ T8333] RIP: 0023:0xf748d539 [ 200.198590][ T8333] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 200.198603][ T8333] RSP: 002b:00000000f54b650c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 200.198620][ T8333] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000100 [ 200.198631][ T8333] RDX: 0000000000000027 RSI: 0000000000000000 RDI: 0000000000000000 [ 200.198641][ T8333] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 200.198650][ T8333] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 200.198662][ T8333] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 200.198689][ T8333] [ 200.472757][ T8337] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 200.478819][ T8337] syzkaller1: Refused to change device type [ 200.689952][ T8342] FAULT_INJECTION: forcing a failure. [ 200.689952][ T8342] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 200.696353][ T8344] bridge0: entered promiscuous mode [ 200.727249][ T8344] vlan2: entered promiscuous mode [ 200.747086][ T8342] CPU: 0 UID: 0 PID: 8342 Comm: syz.1.694 Tainted: G L syzkaller #0 PREEMPT(full) [ 200.747112][ T8342] Tainted: [L]=SOFTLOCKUP [ 200.747117][ T8342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 200.747126][ T8342] Call Trace: [ 200.747132][ T8342] [ 200.747138][ T8342] dump_stack_lvl+0xe8/0x150 [ 200.747161][ T8342] should_fail_ex+0x412/0x560 [ 200.747186][ T8342] _copy_to_user+0x31/0xb0 [ 200.747205][ T8342] simple_read_from_buffer+0xe1/0x170 [ 200.747228][ T8342] proc_fail_nth_read+0x1bb/0x230 [ 200.747248][ T8342] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 200.747268][ T8342] ? rw_verify_area+0x2a6/0x4d0 [ 200.747288][ T8342] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 200.747306][ T8342] vfs_read+0x20c/0xa70 [ 200.747319][ T8342] ? fdget_pos+0x246/0x320 [ 200.747341][ T8342] ? __pfx___mutex_lock+0x10/0x10 [ 200.747363][ T8342] ? __pfx_vfs_read+0x10/0x10 [ 200.747380][ T8342] ? __fget_files+0x2a/0x420 [ 200.747400][ T8342] ? __fget_files+0x3a0/0x420 [ 200.747416][ T8342] ? __fget_files+0x2a/0x420 [ 200.747443][ T8342] ksys_read+0x150/0x270 [ 200.747460][ T8342] ? __pfx_ksys_read+0x10/0x10 [ 200.747479][ T8342] ? asm_int80_emulation+0x1a/0x20 [ 200.747498][ T8342] ? asm_int80_emulation+0x1a/0x20 [ 200.747513][ T8342] do_int80_emulation+0x111/0x400 [ 200.747534][ T8342] ? clear_bhb_loop+0x60/0xb0 [ 200.747549][ T8342] ? clear_bhb_loop+0x60/0xb0 [ 200.747567][ T8342] asm_int80_emulation+0x1a/0x20 [ 200.747582][ T8342] RIP: 0023:0xf71f572b [ 200.747596][ T8342] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 200.747608][ T8342] RSP: 002b:00000000f54b64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 200.747626][ T8342] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54b65d0 [ 200.747637][ T8342] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 200.747645][ T8342] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 200.747652][ T8342] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 200.747659][ T8342] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 200.747679][ T8342] [ 200.974734][ T5916] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 200.988171][ T8344] bridge0: port 3(vlan2) entered blocking state [ 200.996922][ T8344] bridge0: port 3(vlan2) entered disabled state [ 201.003444][ T8344] vlan2: entered allmulticast mode [ 201.008670][ T8344] bridge0: entered allmulticast mode [ 201.038518][ T8344] vlan2: left allmulticast mode [ 201.043419][ T8344] bridge0: left allmulticast mode [ 201.317380][ T5916] usb 4-1: config 0 has no interfaces? [ 201.333493][ T5916] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=f7.3b [ 201.344127][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.363701][ T5916] usb 4-1: Product: syz [ 201.376561][ T5916] usb 4-1: Manufacturer: syz [ 201.381632][ T5916] usb 4-1: SerialNumber: syz [ 201.403610][ T5916] usb 4-1: config 0 descriptor?? [ 201.751270][ T30] audit: type=1326 audit(1769344806.122:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8358 comm="syz.4.699" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd539 code=0x7ffc0000 [ 201.818006][ T10] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 201.865278][ T30] audit: type=1326 audit(1769344806.122:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8358 comm="syz.4.699" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd539 code=0x7ffc0000 [ 201.938103][ T30] audit: type=1326 audit(1769344806.122:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8358 comm="syz.4.699" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf73bd539 code=0x7ffc0000 [ 201.993835][ T30] audit: type=1326 audit(1769344806.122:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8358 comm="syz.4.699" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd539 code=0x7ffc0000 [ 202.047150][ T10] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 202.059722][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.080822][ T30] audit: type=1326 audit(1769344806.122:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8358 comm="syz.4.699" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd539 code=0x7ffc0000 [ 202.108051][ T10] usb 2-1: config 0 descriptor?? [ 202.126267][ T10] cp210x 2-1:0.0: cp210x converter detected [ 203.097222][ T8375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.108272][ T8375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.175223][ T128] usb 4-1: USB disconnect, device number 22 [ 203.827560][ T48] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 203.914352][ T8389] FAULT_INJECTION: forcing a failure. [ 203.914352][ T8389] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.935732][ T8389] CPU: 1 UID: 0 PID: 8389 Comm: syz.4.708 Tainted: G L syzkaller #0 PREEMPT(full) [ 203.935750][ T8389] Tainted: [L]=SOFTLOCKUP [ 203.935754][ T8389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 203.935763][ T8389] Call Trace: [ 203.935769][ T8389] [ 203.935776][ T8389] dump_stack_lvl+0xe8/0x150 [ 203.935802][ T8389] should_fail_ex+0x412/0x560 [ 203.935828][ T8389] _copy_to_user+0x31/0xb0 [ 203.935847][ T8389] simple_read_from_buffer+0xe1/0x170 [ 203.935863][ T8389] proc_fail_nth_read+0x1bb/0x230 [ 203.935875][ T8389] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 203.935886][ T8389] ? rw_verify_area+0x2a6/0x4d0 [ 203.935900][ T8389] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 203.935911][ T8389] vfs_read+0x20c/0xa70 [ 203.935923][ T8389] ? fdget_pos+0x246/0x320 [ 203.935946][ T8389] ? __pfx___mutex_lock+0x10/0x10 [ 203.935967][ T8389] ? __pfx_vfs_read+0x10/0x10 [ 203.935984][ T8389] ? __fget_files+0x2a/0x420 [ 203.936003][ T8389] ? __fget_files+0x3a0/0x420 [ 203.936014][ T8389] ? __fget_files+0x2a/0x420 [ 203.936029][ T8389] ksys_read+0x150/0x270 [ 203.936039][ T8389] ? __pfx_ksys_read+0x10/0x10 [ 203.936050][ T8389] ? asm_int80_emulation+0x1a/0x20 [ 203.936061][ T8389] ? asm_int80_emulation+0x1a/0x20 [ 203.936075][ T8389] do_int80_emulation+0x111/0x400 [ 203.936098][ T8389] ? clear_bhb_loop+0x60/0xb0 [ 203.936112][ T8389] ? clear_bhb_loop+0x60/0xb0 [ 203.936130][ T8389] asm_int80_emulation+0x1a/0x20 [ 203.936144][ T8389] RIP: 0023:0xf712572b [ 203.936155][ T8389] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 203.936163][ T8389] RSP: 002b:00000000f53e64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 203.936173][ T8389] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53e65d0 [ 203.936180][ T8389] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 203.936185][ T8389] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 203.936190][ T8389] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 203.936195][ T8389] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 203.936211][ T8389] [ 204.250992][ T8391] FAULT_INJECTION: forcing a failure. [ 204.250992][ T8391] name failslab, interval 1, probability 0, space 0, times 0 [ 204.264104][ T8391] CPU: 1 UID: 0 PID: 8391 Comm: syz.3.709 Tainted: G L syzkaller #0 PREEMPT(full) [ 204.264130][ T8391] Tainted: [L]=SOFTLOCKUP [ 204.264136][ T8391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 204.264146][ T8391] Call Trace: [ 204.264152][ T8391] [ 204.264159][ T8391] dump_stack_lvl+0xe8/0x150 [ 204.264184][ T8391] should_fail_ex+0x412/0x560 [ 204.264210][ T8391] should_failslab+0xa8/0x100 [ 204.264229][ T8391] __kmalloc_noprof+0xde/0x7e0 [ 204.264245][ T8391] ? tomoyo_encode+0x28b/0x550 [ 204.264269][ T8391] tomoyo_encode+0x28b/0x550 [ 204.264300][ T8391] tomoyo_realpath_from_path+0x58d/0x5d0 [ 204.264330][ T8391] ? tomoyo_path_number_perm+0x219/0x630 [ 204.264348][ T8391] tomoyo_path_number_perm+0x246/0x630 [ 204.264368][ T8391] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 204.264385][ T8391] ? __lock_acquire+0x6b5/0x2cf0 [ 204.264437][ T8391] ? __fget_files+0x2a/0x420 [ 204.264460][ T8391] ? __fget_files+0x3a0/0x420 [ 204.264476][ T8391] ? __fget_files+0x2a/0x420 [ 204.264497][ T8391] security_file_ioctl_compat+0xc3/0x2a0 [ 204.264517][ T8391] __ia32_compat_sys_ioctl+0x139/0x950 [ 204.264536][ T8391] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 204.264554][ T8391] ? __fget_files+0x3a0/0x420 [ 204.264578][ T8391] ? fput+0xa0/0xd0 [ 204.264596][ T8391] ? ksys_write+0x242/0x270 [ 204.264613][ T8391] ? __pfx_ksys_write+0x10/0x10 [ 204.264636][ T8391] __do_fast_syscall_32+0x1d2/0x540 [ 204.264650][ T8391] ? lockdep_hardirqs_on+0x7a/0x110 [ 204.264668][ T8391] ? do_fast_syscall_32+0x33/0x70 [ 204.264687][ T8391] ? asm_int80_emulation+0x1a/0x20 [ 204.264700][ T8391] ? do_int80_emulation+0x20e/0x400 [ 204.264724][ T8391] do_fast_syscall_32+0x33/0x70 [ 204.264744][ T8391] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 204.264761][ T8391] RIP: 0023:0xf7fa3539 [ 204.264776][ T8391] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 204.264789][ T8391] RSP: 002b:00000000f546650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 204.264807][ T8391] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000400c9206 [ 204.264817][ T8391] RDX: 0000000080000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 204.264827][ T8391] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 204.264836][ T8391] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 204.264845][ T8391] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 204.264871][ T8391] [ 204.264891][ T8391] ERROR: Out of memory at tomoyo_realpath_from_path. [ 204.559361][ T48] usb 3-1: config 5 has an invalid interface number: 123 but max is 0 [ 204.568283][ T48] usb 3-1: config 5 has no interface number 0 [ 204.574422][ T48] usb 3-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 204.606798][ T48] usb 3-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xE6, changing to 0x86 [ 204.626784][ T48] usb 3-1: config 5 interface 123 altsetting 7 endpoint 0x86 has invalid wMaxPacketSize 0 [ 204.649633][ T48] usb 3-1: config 5 interface 123 has no altsetting 0 [ 204.698108][ T48] usb 3-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 204.712966][ T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.742478][ T48] usb 3-1: Product: syz [ 204.776622][ T48] usb 3-1: Manufacturer: syz [ 204.791222][ T48] usb 3-1: SerialNumber: syz [ 204.917775][ T8397] usb usb1: usbfs: process 8397 (syz.3.712) did not claim interface 0 before use [ 205.129480][ T48] ni6501 3-1:5.123: driver 'ni6501' failed to auto-configure device. [ 205.145963][ T8400] netlink: 27 bytes leftover after parsing attributes in process `syz.4.713'. [ 205.163565][ T48] usb 3-1: USB disconnect, device number 14 [ 205.330306][ T10] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 205.347135][ T10] cp210x 2-1:0.0: querying part number failed [ 205.375010][ T10] usb 2-1: cp210x converter now attached to ttyUSB0 [ 205.407272][ T10] usb 2-1: USB disconnect, device number 17 [ 205.443614][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 205.467561][ T10] cp210x 2-1:0.0: device disconnected [ 205.494048][ T30] audit: type=1800 audit(1769344809.892:59): pid=8407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.716" name="file0" dev="tmpfs" ino=765 res=0 errno=0 [ 205.574726][ T30] audit: type=1804 audit(1769344809.922:60): pid=8407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.716" name="/newroot/146/file0" dev="tmpfs" ino=765 res=1 errno=0 [ 205.888094][ T8410] loop2: detected capacity change from 0 to 7 [ 205.919907][ T5821] Dev loop2: unable to read RDB block 7 [ 205.944090][ T5821] loop2: AHDI p1 p2 p3 [ 205.948537][ T5821] loop2: partition table partially beyond EOD, truncated [ 205.976923][ T5821] loop2: p1 start 1601398130 is beyond EOD, truncated [ 205.991947][ T5821] loop2: p2 start 1702059890 is beyond EOD, truncated [ 206.016152][ T8410] Dev loop2: unable to read RDB block 7 [ 206.022122][ T8410] loop2: AHDI p1 p2 p3 [ 206.026429][ T8410] loop2: partition table partially beyond EOD, truncated [ 206.037164][ T8410] loop2: p1 start 1601398130 is beyond EOD, truncated [ 206.057360][ T8410] loop2: p2 start 1702059890 is beyond EOD, truncated [ 206.287843][ T5823] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 206.439890][ T5823] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 206.455426][ T5823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.473986][ T5823] usb 2-1: Product: syz [ 206.484080][ T5823] usb 2-1: Manufacturer: syz [ 206.503430][ T5823] usb 2-1: SerialNumber: syz [ 206.519727][ T5823] usb 2-1: config 0 descriptor?? [ 206.745475][ T8407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.774795][ T8407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.811416][ T48] usb 2-1: USB disconnect, device number 18 [ 207.155725][ T8437] netlink: 20 bytes leftover after parsing attributes in process `syz.2.724'. [ 207.300438][ T8444] FAULT_INJECTION: forcing a failure. [ 207.300438][ T8444] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.313714][ T8444] CPU: 1 UID: 0 PID: 8444 Comm: syz.4.725 Tainted: G L syzkaller #0 PREEMPT(full) [ 207.313732][ T8444] Tainted: [L]=SOFTLOCKUP [ 207.313735][ T8444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 207.313741][ T8444] Call Trace: [ 207.313748][ T8444] [ 207.313752][ T8444] dump_stack_lvl+0xe8/0x150 [ 207.313770][ T8444] should_fail_ex+0x412/0x560 [ 207.313787][ T8444] _copy_from_user+0x2d/0xb0 [ 207.313799][ T8444] move_addr_to_kernel+0x7e/0x160 [ 207.313812][ T8444] get_compat_msghdr+0x3d8/0x4c0 [ 207.313825][ T8444] ? __pfx_get_compat_msghdr+0x10/0x10 [ 207.313841][ T8444] ___sys_sendmsg+0x201/0x360 [ 207.313850][ T8444] ? __lock_acquire+0x6b5/0x2cf0 [ 207.313863][ T8444] ? __pfx____sys_sendmsg+0x10/0x10 [ 207.313873][ T8444] ? kstrtoull+0x12f/0x1d0 [ 207.313899][ T8444] ? __fget_files+0x2a/0x420 [ 207.313911][ T8444] ? __fget_files+0x3a0/0x420 [ 207.313927][ T8444] __sys_sendmmsg+0x2e7/0x4e0 [ 207.313938][ T8444] ? __pfx___sys_sendmmsg+0x10/0x10 [ 207.313984][ T8444] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 207.314006][ T8444] ? ksys_write+0x242/0x270 [ 207.314016][ T8444] ? __pfx_ksys_write+0x10/0x10 [ 207.314027][ T8444] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 207.314038][ T8444] __do_fast_syscall_32+0x1d2/0x540 [ 207.314047][ T8444] ? lockdep_hardirqs_on+0x7a/0x110 [ 207.314059][ T8444] ? do_fast_syscall_32+0x33/0x70 [ 207.314072][ T8444] ? asm_int80_emulation+0x1a/0x20 [ 207.314081][ T8444] ? do_int80_emulation+0x20e/0x400 [ 207.314096][ T8444] do_fast_syscall_32+0x33/0x70 [ 207.314110][ T8444] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 207.314121][ T8444] RIP: 0023:0xf73bd539 [ 207.314130][ T8444] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 207.314138][ T8444] RSP: 002b:00000000f53e650c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 207.314149][ T8444] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000380 [ 207.314155][ T8444] RDX: 0000000000000001 RSI: 000000000004c040 RDI: 0000000000000000 [ 207.314161][ T8444] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 207.314166][ T8444] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 207.314171][ T8444] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 207.314184][ T8444] [ 208.019771][ T8452] netlink: 'syz.4.728': attribute type 4 has an invalid length. [ 208.034126][ T8452] netlink: 4 bytes leftover after parsing attributes in process `syz.4.728'. [ 208.060562][ T8452] netlink: 16 bytes leftover after parsing attributes in process `syz.4.728'. [ 208.138323][ T8453] netlink: 27 bytes leftover after parsing attributes in process `syz.3.727'. [ 209.590045][ T8485] FAULT_INJECTION: forcing a failure. [ 209.590045][ T8485] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 209.676900][ T8485] CPU: 0 UID: 0 PID: 8485 Comm: syz.1.738 Tainted: G L syzkaller #0 PREEMPT(full) [ 209.676927][ T8485] Tainted: [L]=SOFTLOCKUP [ 209.676933][ T8485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 209.676942][ T8485] Call Trace: [ 209.676950][ T8485] [ 209.676956][ T8485] dump_stack_lvl+0xe8/0x150 [ 209.676982][ T8485] should_fail_ex+0x412/0x560 [ 209.677007][ T8485] _copy_from_user+0x2d/0xb0 [ 209.677025][ T8485] bpf_obj_get_info_by_fd+0x511/0x3280 [ 209.677049][ T8485] ? __lock_acquire+0x6b5/0x2cf0 [ 209.677069][ T8485] ? _parse_integer_limit+0x1ae/0x1f0 [ 209.677092][ T8485] ? __pfx_bpf_obj_get_info_by_fd+0x10/0x10 [ 209.677111][ T8485] ? kstrtoull+0x12f/0x1d0 [ 209.677132][ T8485] ? __lock_acquire+0x6b5/0x2cf0 [ 209.677150][ T8485] ? get_pid_task+0x20/0x1f0 [ 209.677170][ T8485] ? get_pid_task+0x20/0x1f0 [ 209.677219][ T8485] ? bpf_lsm_bpf+0x9/0x20 [ 209.677234][ T8485] ? security_bpf+0x7e/0x2d0 [ 209.677254][ T8485] __sys_bpf+0x61c/0x920 [ 209.677275][ T8485] ? __pfx___sys_bpf+0x10/0x10 [ 209.677307][ T8485] ? fput+0xa0/0xd0 [ 209.677327][ T8485] ? ksys_write+0x242/0x270 [ 209.677343][ T8485] ? __pfx_ksys_write+0x10/0x10 [ 209.677362][ T8485] __ia32_sys_bpf+0x7c/0x90 [ 209.677382][ T8485] __do_fast_syscall_32+0x1d2/0x540 [ 209.677396][ T8485] ? lockdep_hardirqs_on+0x7a/0x110 [ 209.677414][ T8485] ? do_fast_syscall_32+0x33/0x70 [ 209.677432][ T8485] ? asm_int80_emulation+0x1a/0x20 [ 209.677446][ T8485] ? do_int80_emulation+0x20e/0x400 [ 209.677469][ T8485] do_fast_syscall_32+0x33/0x70 [ 209.677490][ T8485] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 209.677507][ T8485] RIP: 0023:0xf748d539 [ 209.677521][ T8485] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 209.677534][ T8485] RSP: 002b:00000000f54b650c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 209.677551][ T8485] RAX: ffffffffffffffda RBX: 000000000000000f RCX: 0000000080000680 [ 209.677562][ T8485] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 209.677571][ T8485] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 209.677580][ T8485] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 209.677589][ T8485] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 209.677614][ T8485] [ 210.018245][ T128] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 210.317252][ T128] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 210.326980][ T128] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.376808][ T128] usb 4-1: Product: syz [ 210.381133][ T128] usb 4-1: Manufacturer: syz [ 210.396784][ T128] usb 4-1: SerialNumber: syz [ 210.422651][ T128] usb 4-1: config 0 descriptor?? [ 210.783929][ T8499] FAULT_INJECTION: forcing a failure. [ 210.783929][ T8499] name failslab, interval 1, probability 0, space 0, times 0 [ 210.812070][ T8499] CPU: 0 UID: 0 PID: 8499 Comm: syz.4.743 Tainted: G L syzkaller #0 PREEMPT(full) [ 210.812102][ T8499] Tainted: [L]=SOFTLOCKUP [ 210.812108][ T8499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 210.812119][ T8499] Call Trace: [ 210.812126][ T8499] [ 210.812134][ T8499] dump_stack_lvl+0xe8/0x150 [ 210.812160][ T8499] should_fail_ex+0x412/0x560 [ 210.812187][ T8499] should_failslab+0xa8/0x100 [ 210.812207][ T8499] __kmalloc_noprof+0xde/0x7e0 [ 210.812224][ T8499] ? tomoyo_encode+0x28b/0x550 [ 210.812250][ T8499] tomoyo_encode+0x28b/0x550 [ 210.812285][ T8499] tomoyo_realpath_from_path+0x58d/0x5d0 [ 210.812313][ T8499] ? tomoyo_domain+0xd7/0x130 [ 210.812339][ T8499] ? tomoyo_path_number_perm+0x219/0x630 [ 210.812363][ T8499] tomoyo_path_number_perm+0x246/0x630 [ 210.812388][ T8499] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 210.812413][ T8499] ? __lock_acquire+0x6b5/0x2cf0 [ 210.812487][ T8499] ? __fget_files+0x2a/0x420 [ 210.812541][ T8499] ? __fget_files+0x3a0/0x420 [ 210.812555][ T8499] ? __fget_files+0x2a/0x420 [ 210.812575][ T8499] security_file_ioctl_compat+0xc3/0x2a0 [ 210.812598][ T8499] __ia32_compat_sys_ioctl+0x139/0x950 [ 210.812616][ T8499] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 210.812639][ T8499] ? __fget_files+0x3a0/0x420 [ 210.812660][ T8499] ? fput+0xa0/0xd0 [ 210.812678][ T8499] ? ksys_write+0x242/0x270 [ 210.812694][ T8499] ? __pfx_ksys_write+0x10/0x10 [ 210.812715][ T8499] __do_fast_syscall_32+0x1d2/0x540 [ 210.812729][ T8499] ? lockdep_hardirqs_on+0x7a/0x110 [ 210.812746][ T8499] ? do_fast_syscall_32+0x33/0x70 [ 210.812764][ T8499] ? asm_int80_emulation+0x1a/0x20 [ 210.812777][ T8499] ? do_int80_emulation+0x20e/0x400 [ 210.812795][ T8499] do_fast_syscall_32+0x33/0x70 [ 210.812815][ T8499] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 210.812826][ T8499] RIP: 0023:0xf73bd539 [ 210.812836][ T8499] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 210.812844][ T8499] RSP: 002b:00000000f53e650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 210.812856][ T8499] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008946 [ 210.812862][ T8499] RDX: 0000000080000f80 RSI: 0000000000000000 RDI: 0000000000000000 [ 210.812868][ T8499] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 210.812873][ T8499] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 210.812879][ T8499] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 210.812892][ T8499] [ 211.069755][ T8499] ERROR: Out of memory at tomoyo_realpath_from_path. [ 211.438308][ T8487] macvtap0: entered allmulticast mode [ 211.467848][ T8487] veth0_macvtap: entered allmulticast mode [ 211.987045][ T128] usb 4-1: Firmware version (0.0) predates our first public release. [ 212.019507][ T128] usb 4-1: Please update to version 0.2 or newer [ 212.144093][ T128] usb 4-1: USB disconnect, device number 23 [ 212.651592][ T30] audit: type=1326 audit(1769344817.052:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8530 comm="syz.3.752" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa3539 code=0x0 [ 212.907179][ T128] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 213.191715][ T128] usb 5-1: unable to get BOS descriptor or descriptor too short [ 213.220724][ T128] usb 5-1: config 66 interface 0 has no altsetting 0 [ 213.252430][ T128] usb 5-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 213.292675][ T128] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.410738][ T128] usb 5-1: Product: syz [ 213.423608][ T128] usb 5-1: Manufacturer: syz [ 213.428404][ T128] usb 5-1: SerialNumber: syz [ 213.651529][ T128] ati_remote2 5-1:66.0: ati_remote2_probe(): interface 0 must have an endpoint [ 213.661519][ T8548] input: syz0 as /devices/virtual/input/input8 [ 213.674365][ T128] usb 5-1: USB disconnect, device number 18 [ 213.750950][ T8549] FAULT_INJECTION: forcing a failure. [ 213.750950][ T8549] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.764269][ T8549] CPU: 1 UID: 0 PID: 8549 Comm: syz.2.757 Tainted: G L syzkaller #0 PREEMPT(full) [ 213.764289][ T8549] Tainted: [L]=SOFTLOCKUP [ 213.764292][ T8549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 213.764304][ T8549] Call Trace: [ 213.764309][ T8549] [ 213.764314][ T8549] dump_stack_lvl+0xe8/0x150 [ 213.764332][ T8549] should_fail_ex+0x412/0x560 [ 213.764350][ T8549] _copy_to_user+0x31/0xb0 [ 213.764362][ T8549] simple_read_from_buffer+0xe1/0x170 [ 213.764376][ T8549] proc_fail_nth_read+0x1bb/0x230 [ 213.764388][ T8549] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 213.764399][ T8549] ? rw_verify_area+0x2a6/0x4d0 [ 213.764413][ T8549] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 213.764423][ T8549] vfs_read+0x20c/0xa70 [ 213.764431][ T8549] ? fdget_pos+0x246/0x320 [ 213.764445][ T8549] ? __pfx___mutex_lock+0x10/0x10 [ 213.764459][ T8549] ? __pfx_vfs_read+0x10/0x10 [ 213.764468][ T8549] ? __fget_files+0x2a/0x420 [ 213.764481][ T8549] ? __fget_files+0x3a0/0x420 [ 213.764492][ T8549] ? __fget_files+0x2a/0x420 [ 213.764507][ T8549] ksys_read+0x150/0x270 [ 213.764517][ T8549] ? __pfx_ksys_read+0x10/0x10 [ 213.764532][ T8549] ? asm_int80_emulation+0x1a/0x20 [ 213.764544][ T8549] ? asm_int80_emulation+0x1a/0x20 [ 213.764552][ T8549] do_int80_emulation+0x111/0x400 [ 213.764567][ T8549] ? clear_bhb_loop+0x60/0xb0 [ 213.764575][ T8549] ? clear_bhb_loop+0x60/0xb0 [ 213.764586][ T8549] asm_int80_emulation+0x1a/0x20 [ 213.764595][ T8549] RIP: 0023:0xf71e572b [ 213.764604][ T8549] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 213.764612][ T8549] RSP: 002b:00000000f54854bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 213.764623][ T8549] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000f54855d0 [ 213.764629][ T8549] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 213.764634][ T8549] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 213.764639][ T8549] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 213.764645][ T8549] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 213.764658][ T8549] [ 214.025880][ T8551] bond0: (slave bond_slave_1): Releasing backup interface [ 214.036917][ T24] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 214.103365][ T8553] netlink: 12 bytes leftover after parsing attributes in process `syz.2.759'. [ 214.188657][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.199897][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.210864][ T24] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 214.220402][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.231331][ T24] usb 4-1: config 0 descriptor?? [ 214.664329][ T8545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.676416][ T8545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.897613][ T8579] trusted_key: syz.4.768 sent an empty control message without MSG_MORE. [ 216.154955][ T5823] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 216.636953][ T5823] usb 5-1: Using ep0 maxpacket: 32 [ 216.646297][ T5823] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 216.671691][ T5823] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.696912][ T5823] usb 5-1: Product: syz [ 216.707170][ T5823] usb 5-1: Manufacturer: syz [ 216.723828][ T5823] usb 5-1: SerialNumber: syz [ 216.760346][ T5823] usb 5-1: config 0 descriptor?? [ 216.983198][ T5823] peak_usb 5-1:0.0 can0: unable to request usb[type=0 value=0] err=-32 [ 217.008498][ T5823] peak_usb 5-1:0.0: unable to read PCAN-USB Pro bootloader info (err -32) [ 217.127654][ T5823] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -32 [ 217.176895][ T128] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 217.336786][ T128] usb 3-1: Using ep0 maxpacket: 32 [ 217.348346][ T128] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 217.363650][ T128] usb 3-1: New USB device found, idVendor=0525, idProduct=2888, bcdDevice=d0.43 [ 217.373128][ T128] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.386102][ T128] usb 3-1: config 0 descriptor?? [ 217.537935][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 217.543949][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 217.579433][ T24] usb 4-1: USB disconnect, device number 24 [ 217.604952][ T128] cdc_subset 3-1:0.0: probe with driver cdc_subset failed with error -22 [ 217.688276][ T5916] usb 3-1: USB disconnect, device number 15 [ 218.494445][ T5916] usb 5-1: USB disconnect, device number 19 [ 219.871602][ T8658] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.901415][ T5823] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 219.971432][ T8658] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.076864][ T5823] usb 3-1: Using ep0 maxpacket: 32 [ 220.088250][ T5823] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 220.101841][ T5823] usb 3-1: config 0 has no interface number 0 [ 220.116365][ T5823] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 220.125703][ T5823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.133888][ T5823] usb 3-1: Product: syz [ 220.139628][ T5823] usb 3-1: Manufacturer: syz [ 220.155238][ T5823] usb 3-1: SerialNumber: syz [ 220.174661][ T5823] usb 3-1: config 0 descriptor?? [ 220.198353][ T5823] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 220.404394][ T5823] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 220.436470][ T5823] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 220.950646][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 220.958454][ T5823] usb 3-1: USB disconnect, device number 16 [ 220.988879][ T5823] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 221.060371][ T5823] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 221.117172][ T5823] quatech2 3-1:0.51: device disconnected [ 223.488176][ T128] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 223.687761][ T128] usb 3-1: no configurations [ 223.702466][ T128] usb 3-1: can't read configurations, error -22 [ 223.854030][ T5840] cgroup: fork rejected by pids controller in /syz3 [ 223.861298][ T128] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 224.040038][ T128] usb 3-1: no configurations [ 224.044737][ T128] usb 3-1: can't read configurations, error -22 [ 224.053359][ T6586] syz_tun (unregistering): left allmulticast mode [ 224.121840][ T128] usb usb3-port1: attempt power cycle [ 224.476827][ T128] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 224.522118][ T128] usb 3-1: no configurations [ 224.533472][ T128] usb 3-1: can't read configurations, error -22 [ 224.595559][ T7538] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.686838][ T128] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 224.741102][ T128] usb 3-1: no configurations [ 224.757976][ T128] usb 3-1: can't read configurations, error -22 [ 224.787684][ T128] usb usb3-port1: unable to enumerate USB device [ 224.799506][ T7538] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.893252][ T7538] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.940602][ T5145] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 224.952730][ T5145] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 224.961531][ T5145] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 224.974041][ T5145] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 224.981996][ T5145] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 225.020781][ T5831] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 225.029333][ T5831] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 225.036616][ T5831] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 225.061201][ T7538] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.072081][ T5831] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 225.081223][ T5831] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 225.096880][ T24] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 225.278955][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 225.292266][ T24] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 225.302448][ T24] usb 2-1: config 0 has no interface number 0 [ 225.311734][ T24] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 225.327683][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.336181][ T24] usb 2-1: Product: syz [ 225.340860][ T24] usb 2-1: Manufacturer: syz [ 225.345501][ T24] usb 2-1: SerialNumber: syz [ 225.353865][ T24] usb 2-1: config 0 descriptor?? [ 225.362715][ T7538] bridge_slave_1: left allmulticast mode [ 225.369210][ T7538] bridge_slave_1: left promiscuous mode [ 225.378686][ T24] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 225.391965][ T7538] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.400489][ T24] usb 2-1: selecting invalid altsetting 1 [ 225.410265][ T24] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 225.418782][ T7538] bridge_slave_0: left allmulticast mode [ 225.424555][ T7538] bridge_slave_0: left promiscuous mode [ 225.430684][ T7538] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.443438][ T24] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 225.463279][ T24] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 225.472012][ T24] usb 2-1: media controller created [ 225.525234][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 225.614645][ T24] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 225.632821][ T24] zl10353_read_register: readreg error (reg=127, ret==-71) [ 225.644066][ T24] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 225.752078][ T24] usb 2-1: USB disconnect, device number 19 [ 226.034099][ T7538] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.056512][ T7538] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.121178][ T7538] bond0 (unregistering): Released all slaves [ 226.879626][ T7538] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.905722][ T7538] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.138217][ T5831] Bluetooth: hci3: command tx timeout [ 227.271916][ T7538] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.306810][ T7538] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.337528][ T7538] batman_adv: batadv0: Removing interface: dummy0 [ 227.378670][ T7538] hsr0: left allmulticast mode [ 227.384098][ T7538] veth1_macvtap: left promiscuous mode [ 227.399357][ T7538] veth0_macvtap: left allmulticast mode [ 227.404990][ T7538] veth0_macvtap: left promiscuous mode [ 227.446988][ T7538] veth1_vlan: left promiscuous mode [ 227.452491][ T7538] veth0_vlan: left promiscuous mode [ 227.614898][ T8761] netlink: 4 bytes leftover after parsing attributes in process `syz.2.811'. [ 227.760856][ T7538] macvtap0 (unregistering): left allmulticast mode [ 229.013712][ T7538] team0 (unregistering): Port device team_slave_1 removed [ 229.098259][ T7538] team0 (unregistering): Port device team_slave_0 removed [ 229.210153][ T5831] Bluetooth: hci3: command tx timeout [ 229.758962][ T8724] chnl_net:caif_netlink_parms(): no params data found [ 230.216843][ T128] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 230.254833][ T8724] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.283939][ T8724] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.297371][ T8724] bridge_slave_0: entered allmulticast mode [ 230.309826][ T8724] bridge_slave_0: entered promiscuous mode [ 230.320235][ T8724] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.346957][ T8724] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.367263][ T8724] bridge_slave_1: entered allmulticast mode [ 230.378779][ T8724] bridge_slave_1: entered promiscuous mode [ 230.398908][ T128] usb 3-1: Using ep0 maxpacket: 16 [ 230.415613][ T128] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 230.455442][ T8790] FAULT_INJECTION: forcing a failure. [ 230.455442][ T8790] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 230.466519][ T128] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 230.470583][ T8790] CPU: 1 UID: 0 PID: 8790 Comm: syz.1.819 Tainted: G L syzkaller #0 PREEMPT(full) [ 230.470608][ T8790] Tainted: [L]=SOFTLOCKUP [ 230.470614][ T8790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 230.470623][ T8790] Call Trace: [ 230.470630][ T8790] [ 230.470637][ T8790] dump_stack_lvl+0xe8/0x150 [ 230.470663][ T8790] should_fail_ex+0x412/0x560 [ 230.470687][ T8790] strncpy_from_user+0x36/0x2b0 [ 230.470710][ T8790] mptcp_setsockopt+0x1380/0x36a0 [ 230.470735][ T8790] ? aa_sk_perm+0x15a/0x960 [ 230.470760][ T8790] ? __pfx_mptcp_setsockopt+0x10/0x10 [ 230.470778][ T8790] ? __pfx_aa_sk_perm+0x10/0x10 [ 230.470798][ T8790] ? __fget_files+0x2a/0x420 [ 230.470814][ T8790] ? aa_sock_opt_perm+0xff/0x1a0 [ 230.470835][ T8790] ? sock_common_setsockopt+0x36/0xc0 [ 230.470853][ T8790] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 230.470873][ T8790] do_sock_setsockopt+0x17c/0x1b0 [ 230.470898][ T8790] __ia32_sys_setsockopt+0x13d/0x1b0 [ 230.470923][ T8790] __do_fast_syscall_32+0x1d2/0x540 [ 230.470936][ T8790] ? lockdep_hardirqs_on+0x7a/0x110 [ 230.470954][ T8790] ? do_fast_syscall_32+0x33/0x70 [ 230.470972][ T8790] ? asm_int80_emulation+0x1a/0x20 [ 230.470985][ T8790] ? do_int80_emulation+0x20e/0x400 [ 230.471008][ T8790] do_fast_syscall_32+0x33/0x70 [ 230.471028][ T8790] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 230.471044][ T8790] RIP: 0023:0xf748d539 [ 230.471058][ T8790] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 230.471071][ T8790] RSP: 002b:00000000f54b650c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 230.471087][ T8790] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000006 [ 230.471097][ T8790] RDX: 000000000000000d RSI: 00000000800033c0 RDI: 0000000000000004 [ 230.471107][ T8790] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 230.471115][ T8790] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 230.471123][ T8790] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 230.471147][ T8790] [ 230.697858][ T128] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.703485][ T8724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.705871][ T128] usb 3-1: Product: syz [ 230.737352][ T8724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.737518][ T128] usb 3-1: Manufacturer: syz [ 230.778423][ T128] usb 3-1: SerialNumber: syz [ 230.791782][ T128] usb 3-1: config 0 descriptor?? [ 230.819479][ T128] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 230.842692][ T128] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 230.869286][ T8724] team0: Port device team_slave_0 added [ 230.894271][ T8724] team0: Port device team_slave_1 added [ 231.018582][ T8724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.025569][ T8724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 231.104606][ T8724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.201054][ T8724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.210012][ T8724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 231.243835][ T8724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.296790][ T5831] Bluetooth: hci3: command tx timeout [ 231.432684][ T5902] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 231.513761][ T128] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 231.561597][ T8724] hsr_slave_0: entered promiscuous mode [ 231.570623][ T8724] hsr_slave_1: entered promiscuous mode [ 231.580746][ T8724] debugfs: 'hsr0' already exists in 'hsr' [ 231.591774][ T8724] Cannot create hsr debugfs directory [ 231.667092][ T5902] usb 5-1: Using ep0 maxpacket: 16 [ 231.675590][ T5902] usb 5-1: config 0 has no interfaces? [ 231.682054][ T5902] usb 5-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 231.692286][ T5902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.720011][ T5902] usb 5-1: config 0 descriptor?? [ 232.008905][ T8775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.017563][ T128] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 232.026141][ T128] em28xx 3-1:0.0: board has no eeprom [ 232.027117][ T24] usb 5-1: USB disconnect, device number 20 [ 232.032133][ T8775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.113823][ T8775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.122910][ T8775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.187330][ T8775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.196257][ T8775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.490218][ T8724] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 232.504043][ T8724] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 232.519981][ T128] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 232.538760][ T8724] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 232.543574][ T128] em28xx 3-1:0.0: dvb set to bulk mode. [ 232.557180][ T5902] em28xx 3-1:0.0: Binding DVB extension [ 232.684397][ T8724] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 232.961778][ T8724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.970546][ T128] usb 3-1: USB disconnect, device number 21 [ 233.025638][ T128] em28xx 3-1:0.0: Disconnecting em28xx [ 233.388883][ T5831] Bluetooth: hci3: command tx timeout [ 233.406810][ T5908] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 233.458224][ T8724] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.500390][ T5902] em28xx 3-1:0.0: Registering input extension [ 233.519066][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.526244][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.540120][ T128] em28xx 3-1:0.0: Closing input extension [ 233.590123][ T128] em28xx 3-1:0.0: Freeing device [ 233.751036][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.758260][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.895762][ T8724] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 233.906786][ T8724] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 233.940768][ T8724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.959755][ T5908] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 233.981046][ T5908] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 233.994666][ T8724] veth0_vlan: entered promiscuous mode [ 234.026145][ T8724] veth1_vlan: entered promiscuous mode [ 234.031865][ T5902] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 234.058493][ T8724] veth0_macvtap: entered promiscuous mode [ 234.067881][ T8724] veth1_macvtap: entered promiscuous mode [ 234.125831][ T8724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.140112][ T8724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.168329][ T5908] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 234.178962][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 234.188724][ T5908] usb 5-1: SerialNumber: syz [ 234.201059][ T5902] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 234.212217][ T5902] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 234.232898][ T5902] usb 2-1: config 1 has no interface number 1 [ 234.249057][ T5902] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 234.269990][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.285659][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.310136][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.325627][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.357750][ T5902] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 234.397205][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.423746][ T5902] usb 2-1: Product: syz [ 234.450046][ T5902] usb 2-1: Manufacturer: syz [ 234.455527][ T5902] usb 2-1: SerialNumber: syz [ 234.856629][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.864716][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.902483][ T5902] usb 2-1: 2:1 : no UAC_FORMAT_TYPE desc [ 234.973245][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.993274][ T5902] usb 2-1: USB disconnect, device number 20 [ 235.008774][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.087619][ T5829] udevd[5829]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 235.276380][ T8863] FAULT_INJECTION: forcing a failure. [ 235.276380][ T8863] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 235.317113][ T8863] CPU: 1 UID: 0 PID: 8863 Comm: syz.2.829 Tainted: G L syzkaller #0 PREEMPT(full) [ 235.317141][ T8863] Tainted: [L]=SOFTLOCKUP [ 235.317147][ T8863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 235.317157][ T8863] Call Trace: [ 235.317164][ T8863] [ 235.317172][ T8863] dump_stack_lvl+0xe8/0x150 [ 235.317197][ T8863] should_fail_ex+0x412/0x560 [ 235.317223][ T8863] _copy_to_user+0x31/0xb0 [ 235.317238][ T8863] kvm_arch_vcpu_ioctl+0x1c71/0x2c60 [ 235.317249][ T8863] ? __lock_acquire+0x6b5/0x2cf0 [ 235.317262][ T8863] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 235.317272][ T8863] ? __lock_acquire+0x6b5/0x2cf0 [ 235.317282][ T8863] ? __lock_acquire+0x6b5/0x2cf0 [ 235.317302][ T8863] ? unwind_next_frame+0xa5/0x23c0 [ 235.317328][ T8863] ? unwind_next_frame+0xa5/0x23c0 [ 235.317348][ T8863] ? is_bpf_text_address+0x26/0x2b0 [ 235.317378][ T8863] ? is_bpf_text_address+0x26/0x2b0 [ 235.317395][ T8863] ? is_bpf_text_address+0x292/0x2b0 [ 235.317408][ T8863] ? is_bpf_text_address+0x26/0x2b0 [ 235.317423][ T8863] ? kernel_text_address+0xa5/0xe0 [ 235.317437][ T8863] ? __kernel_text_address+0xd/0x30 [ 235.317459][ T8863] ? __lock_acquire+0x6b5/0x2cf0 [ 235.317486][ T8863] ? stack_trace_save+0xa9/0x100 [ 235.317506][ T8863] ? __pfx_stack_trace_save+0x10/0x10 [ 235.317527][ T8863] ? stack_depot_save_flags+0x33/0x810 [ 235.317543][ T8863] ? __mutex_trylock_common+0x158/0x260 [ 235.317557][ T8863] ? __pfx___mutex_trylock_common+0x10/0x10 [ 235.317570][ T8863] ? rcu_is_watching+0x15/0xb0 [ 235.317582][ T8863] ? trace_contention_end+0x39/0x100 [ 235.317599][ T8863] ? __mutex_lock+0x319/0x1300 [ 235.317631][ T8863] ? kvm_vcpu_ioctl+0x280/0xfd0 [ 235.317654][ T8863] ? __pfx___mutex_lock+0x10/0x10 [ 235.317677][ T8863] ? kasan_quarantine_put+0xbb/0x1f0 [ 235.317692][ T8863] kvm_vcpu_ioctl+0x7e4/0xfd0 [ 235.317707][ T8863] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 235.317719][ T8863] ? do_vfs_ioctl+0x1166/0x1530 [ 235.317729][ T8863] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 235.317773][ T8863] kvm_vcpu_compat_ioctl+0x204/0x390 [ 235.317796][ T8863] ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10 [ 235.317816][ T8863] ? __fget_files+0x3a0/0x420 [ 235.317829][ T8863] ? __fget_files+0x2a/0x420 [ 235.317841][ T8863] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 235.317854][ T8863] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 235.317865][ T8863] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 235.317882][ T8863] ? __fget_files+0x3a0/0x420 [ 235.317906][ T8863] ? fput+0xa0/0xd0 [ 235.317925][ T8863] ? ksys_write+0x242/0x270 [ 235.317942][ T8863] ? __pfx_ksys_write+0x10/0x10 [ 235.317965][ T8863] __do_fast_syscall_32+0x1d2/0x540 [ 235.317975][ T8863] ? lockdep_hardirqs_on+0x7a/0x110 [ 235.317987][ T8863] ? do_fast_syscall_32+0x33/0x70 [ 235.318000][ T8863] ? asm_int80_emulation+0x1a/0x20 [ 235.318012][ T8863] ? do_int80_emulation+0x20e/0x400 [ 235.318028][ T8863] do_fast_syscall_32+0x33/0x70 [ 235.318047][ T8863] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 235.318065][ T8863] RIP: 0023:0xf747d539 [ 235.318080][ T8863] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 235.318093][ T8863] RSP: 002b:00000000f54a650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 235.318111][ T8863] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000008400ae8e [ 235.318120][ T8863] RDX: 0000000080000c40 RSI: 0000000000000000 RDI: 0000000000000000 [ 235.318127][ T8863] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 235.318132][ T8863] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 235.318137][ T8863] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 235.318151][ T8863] [ 235.793240][ T5908] usb 5-1: 0:2 : does not exist [ 235.803011][ T5908] usb 5-1: unit 5 not found! [ 235.879803][ T5908] usb 5-1: USB disconnect, device number 21 [ 236.040503][ T8878] netlink: 4 bytes leftover after parsing attributes in process `syz.1.833'. [ 236.067178][ T5902] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 236.130457][ T5821] udevd[5821]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 236.147661][ T8878] netlink: 28 bytes leftover after parsing attributes in process `syz.1.833'. [ 236.259152][ T5902] usb 4-1: Using ep0 maxpacket: 32 [ 236.272399][ T5902] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=66.3d [ 236.295027][ T5902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.322238][ T5902] usb 4-1: config 0 descriptor?? [ 236.343156][ T5902] cx82310_eth 4-1:0.0: probe with driver cx82310_eth failed with error -22 [ 236.354096][ T5902] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 236.428891][ T5908] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 236.464925][ T8892] netlink: 'syz.2.837': attribute type 21 has an invalid length. [ 236.492695][ T8892] FAULT_INJECTION: forcing a failure. [ 236.492695][ T8892] name failslab, interval 1, probability 0, space 0, times 0 [ 236.508442][ T8892] CPU: 1 UID: 0 PID: 8892 Comm: syz.2.837 Tainted: G L syzkaller #0 PREEMPT(full) [ 236.508470][ T8892] Tainted: [L]=SOFTLOCKUP [ 236.508475][ T8892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 236.508484][ T8892] Call Trace: [ 236.508491][ T8892] [ 236.508498][ T8892] dump_stack_lvl+0xe8/0x150 [ 236.508523][ T8892] should_fail_ex+0x412/0x560 [ 236.508547][ T8892] should_failslab+0xa8/0x100 [ 236.508568][ T8892] kmem_cache_alloc_noprof+0x87/0x6e0 [ 236.508589][ T8892] ? skb_clone+0x212/0x3a0 [ 236.508616][ T8892] skb_clone+0x212/0x3a0 [ 236.508632][ T8892] __netlink_deliver_tap+0x404/0x850 [ 236.508654][ T8892] ? netlink_deliver_tap+0x2e/0x1b0 [ 236.508667][ T8892] netlink_deliver_tap+0x19c/0x1b0 [ 236.508681][ T8892] netlink_sendskb+0x68/0x140 [ 236.508700][ T8892] netlink_unicast+0x3a3/0x9b0 [ 236.508727][ T8892] ? __pfx_netlink_unicast+0x10/0x10 [ 236.508750][ T8892] netlink_rcv_skb+0x2b6/0x4b0 [ 236.508763][ T8892] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 236.508782][ T8892] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 236.508808][ T8892] ? netlink_deliver_tap+0x2e/0x1b0 [ 236.508826][ T8892] netlink_unicast+0x80f/0x9b0 [ 236.508849][ T8892] ? __pfx_netlink_unicast+0x10/0x10 [ 236.508865][ T8892] ? __alloc_skb+0x193/0x390 [ 236.508881][ T8892] ? netlink_sendmsg+0x650/0xb40 [ 236.508892][ T8892] ? skb_put+0x11b/0x210 [ 236.508911][ T8892] netlink_sendmsg+0x813/0xb40 [ 236.508930][ T8892] ? __pfx_netlink_sendmsg+0x10/0x10 [ 236.508945][ T8892] ? __asan_memset+0x22/0x50 [ 236.508960][ T8892] ? aa_sock_msg_perm+0xf1/0x1b0 [ 236.508977][ T8892] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 236.508988][ T8892] ? __pfx_netlink_sendmsg+0x10/0x10 [ 236.509001][ T8892] __sock_sendmsg+0x21c/0x270 [ 236.509018][ T8892] ____sys_sendmsg+0x4d7/0x810 [ 236.509037][ T8892] ? __pfx_____sys_sendmsg+0x10/0x10 [ 236.509052][ T8892] ? kstrtoull+0x12f/0x1d0 [ 236.509074][ T8892] ___sys_sendmsg+0x2a5/0x360 [ 236.509085][ T8892] ? __lock_acquire+0x6b5/0x2cf0 [ 236.509102][ T8892] ? __pfx____sys_sendmsg+0x10/0x10 [ 236.509115][ T8892] ? get_pid_task+0x20/0x1f0 [ 236.509130][ T8892] ? get_pid_task+0x20/0x1f0 [ 236.509143][ T8892] ? get_pid_task+0x20/0x1f0 [ 236.509176][ T8892] ? __fget_files+0x2a/0x420 [ 236.509190][ T8892] ? __fget_files+0x3a0/0x420 [ 236.509211][ T8892] __sys_sendmsg+0x183/0x260 [ 236.509224][ T8892] ? __pfx___sys_sendmsg+0x10/0x10 [ 236.509244][ T8892] ? __pfx_ksys_write+0x10/0x10 [ 236.509262][ T8892] __do_fast_syscall_32+0x1d2/0x540 [ 236.509274][ T8892] ? lockdep_hardirqs_on+0x7a/0x110 [ 236.509289][ T8892] ? do_fast_syscall_32+0x33/0x70 [ 236.509304][ T8892] ? asm_int80_emulation+0x1a/0x20 [ 236.509315][ T8892] ? do_int80_emulation+0x20e/0x400 [ 236.509334][ T8892] do_fast_syscall_32+0x33/0x70 [ 236.509351][ T8892] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 236.509365][ T8892] RIP: 0023:0xf747d539 [ 236.509376][ T8892] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 236.509387][ T8892] RSP: 002b:00000000f54a650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 236.509400][ T8892] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000040 [ 236.509409][ T8892] RDX: 0000000004000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 236.509416][ T8892] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 236.509423][ T8892] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 236.509430][ T8892] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 236.509450][ T8892] [ 236.865252][ T5908] usb 2-1: device descriptor read/64, error -71 [ 236.905229][ T8895] lo: Caught tx_queue_len zero misconfig [ 237.120136][ T5908] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 237.214418][ T8911] FAULT_INJECTION: forcing a failure. [ 237.214418][ T8911] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 237.235646][ T8911] CPU: 0 UID: 0 PID: 8911 Comm: syz.4.840 Tainted: G L syzkaller #0 PREEMPT(full) [ 237.235673][ T8911] Tainted: [L]=SOFTLOCKUP [ 237.235686][ T8911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 237.235696][ T8911] Call Trace: [ 237.235702][ T8911] [ 237.235709][ T8911] dump_stack_lvl+0xe8/0x150 [ 237.235734][ T8911] should_fail_ex+0x412/0x560 [ 237.235756][ T8911] _copy_from_user+0x2d/0xb0 [ 237.235773][ T8911] fanout_set_data+0x2f6/0x430 [ 237.235795][ T8911] ? __pfx_fanout_set_data+0x10/0x10 [ 237.235812][ T8911] ? get_pid_task+0x20/0x1f0 [ 237.235830][ T8911] ? get_pid_task+0x20/0x1f0 [ 237.235845][ T8911] ? get_pid_task+0x20/0x1f0 [ 237.235869][ T8911] packet_setsockopt+0x8b6/0x1510 [ 237.235888][ T8911] ? __pfx_packet_setsockopt+0x10/0x10 [ 237.235909][ T8911] ? aa_sk_perm+0x15a/0x960 [ 237.235927][ T8911] ? aa_sk_perm+0x82d/0x960 [ 237.235944][ T8911] ? __pfx_vfs_write+0x10/0x10 [ 237.235962][ T8911] ? kmem_cache_free+0x195/0x610 [ 237.235977][ T8911] ? __pfx_aa_sk_perm+0x10/0x10 [ 237.235996][ T8911] ? aa_sock_opt_perm+0xff/0x1a0 [ 237.236017][ T8911] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 237.236030][ T8911] ? __pfx_packet_setsockopt+0x10/0x10 [ 237.236048][ T8911] do_sock_setsockopt+0x17c/0x1b0 [ 237.236073][ T8911] __ia32_sys_setsockopt+0x13d/0x1b0 [ 237.236099][ T8911] __do_fast_syscall_32+0x1d2/0x540 [ 237.236113][ T8911] ? lockdep_hardirqs_on+0x7a/0x110 [ 237.236130][ T8911] ? do_fast_syscall_32+0x33/0x70 [ 237.236148][ T8911] ? asm_int80_emulation+0x1a/0x20 [ 237.236161][ T8911] ? do_int80_emulation+0x20e/0x400 [ 237.236182][ T8911] do_fast_syscall_32+0x33/0x70 [ 237.236201][ T8911] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 237.236217][ T8911] RIP: 0023:0xf73bd539 [ 237.236231][ T8911] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 237.236243][ T8911] RSP: 002b:00000000f53e650c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 237.236260][ T8911] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000107 [ 237.236270][ T8911] RDX: 0000000000000016 RSI: 0000000000000000 RDI: 0000000000000004 [ 237.236278][ T8911] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 237.236286][ T8911] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 237.236295][ T8911] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 237.236319][ T8911] [ 237.488588][ T5908] usb 2-1: device descriptor read/64, error -71 [ 237.597207][ T5908] usb usb2-port1: attempt power cycle [ 237.946857][ T5908] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 237.977475][ T5908] usb 2-1: device descriptor read/8, error -71 [ 238.228786][ T5908] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 238.257461][ T5908] usb 2-1: device descriptor read/8, error -71 [ 238.344697][ T10] usb 4-1: USB disconnect, device number 25 [ 238.379968][ T5908] usb usb2-port1: unable to enumerate USB device [ 239.037042][ T5916] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 239.290291][ T10] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 239.380357][ T5916] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 239.390828][ T5916] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 239.431293][ T5916] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 239.457082][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 239.488071][ T5916] usb 4-1: SerialNumber: syz [ 239.516777][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 239.567033][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.626764][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.672788][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 239.712120][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.807665][ T10] usb 3-1: config 0 descriptor?? [ 239.835950][ T10] hub 3-1:0.0: USB hub found [ 240.036137][ T10] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 240.457408][ T10] hid-generic 0003:046D:C31C.0004: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.2-1/input0 [ 240.953677][ T8980] netlink: 10210 bytes leftover after parsing attributes in process `syz.2.844'. [ 241.605765][ T5916] usb 4-1: 0:2 : does not exist [ 241.657381][ T5916] usb 4-1: unit 5 not found! [ 241.705196][ T5916] usb 4-1: USB disconnect, device number 26 [ 241.796172][ T5821] udevd[5821]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 242.016834][ T8998] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 242.058059][ T9000] fuse: Bad value for 'group_id' [ 242.066834][ T9000] fuse: Bad value for 'group_id' [ 242.138478][ T10] usb 3-1: reset high-speed USB device number 22 using dummy_hcd [ 242.596886][ T5902] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 242.756823][ T5902] usb 2-1: Using ep0 maxpacket: 32 [ 242.763845][ T5902] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.775512][ T5902] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.796904][ T5902] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 242.805977][ T5902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.818384][ T5902] usb 2-1: config 0 descriptor?? [ 242.831399][ T5902] hub 2-1:0.0: USB hub found [ 242.938433][ T5908] usb 3-1: USB disconnect, device number 22 [ 243.044179][ T5902] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 243.353490][ T24] usb 4-1: new low-speed USB device number 27 using dummy_hcd [ 243.492686][ T5902] hid-generic 0003:046D:C31C.0005: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0 [ 243.521253][ T24] usb 4-1: Invalid ep0 maxpacket: 16 [ 243.563230][ T9034] FAULT_INJECTION: forcing a failure. [ 243.563230][ T9034] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.588286][ T9034] CPU: 0 UID: 0 PID: 9034 Comm: syz.4.867 Tainted: G L syzkaller #0 PREEMPT(full) [ 243.588315][ T9034] Tainted: [L]=SOFTLOCKUP [ 243.588321][ T9034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 243.588344][ T9034] Call Trace: [ 243.588351][ T9034] [ 243.588359][ T9034] dump_stack_lvl+0xe8/0x150 [ 243.588383][ T9034] should_fail_ex+0x412/0x560 [ 243.588409][ T9034] _copy_to_user+0x31/0xb0 [ 243.588429][ T9034] simple_read_from_buffer+0xe1/0x170 [ 243.588451][ T9034] proc_fail_nth_read+0x1bb/0x230 [ 243.588472][ T9034] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 243.588491][ T9034] ? rw_verify_area+0x2a6/0x4d0 [ 243.588512][ T9034] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 243.588530][ T9034] vfs_read+0x20c/0xa70 [ 243.588543][ T9034] ? fdget_pos+0x246/0x320 [ 243.588566][ T9034] ? __pfx___mutex_lock+0x10/0x10 [ 243.588587][ T9034] ? __pfx_vfs_read+0x10/0x10 [ 243.588604][ T9034] ? __fget_files+0x2a/0x420 [ 243.588625][ T9034] ? __fget_files+0x3a0/0x420 [ 243.588642][ T9034] ? __fget_files+0x2a/0x420 [ 243.588667][ T9034] ksys_read+0x150/0x270 [ 243.588685][ T9034] ? __pfx_ksys_read+0x10/0x10 [ 243.588703][ T9034] ? asm_int80_emulation+0x1a/0x20 [ 243.588722][ T9034] ? asm_int80_emulation+0x1a/0x20 [ 243.588737][ T9034] do_int80_emulation+0x111/0x400 [ 243.588758][ T9034] ? clear_bhb_loop+0x60/0xb0 [ 243.588772][ T9034] ? clear_bhb_loop+0x60/0xb0 [ 243.588790][ T9034] asm_int80_emulation+0x1a/0x20 [ 243.588804][ T9034] RIP: 0023:0xf712572b [ 243.588819][ T9034] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 243.588832][ T9034] RSP: 002b:00000000f53e64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 243.588849][ T9034] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f53e65d0 [ 243.588859][ T9034] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 243.588868][ T9034] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 243.588877][ T9034] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 243.588887][ T9034] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 243.588913][ T9034] [ 243.656820][ T24] usb 4-1: new low-speed USB device number 28 using dummy_hcd [ 243.827255][ T5916] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 243.841000][ T9036] netlink: 10210 bytes leftover after parsing attributes in process `syz.1.872'. [ 243.990292][ T5916] usb 3-1: config 1 interface 0 altsetting 84 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.005297][ T5916] usb 3-1: config 1 interface 0 has no altsetting 0 [ 244.019142][ T5916] usb 3-1: New USB device found, idVendor=05ac, idProduct=0263, bcdDevice= 0.40 [ 244.028463][ T24] usb 4-1: Invalid ep0 maxpacket: 16 [ 244.034723][ T24] usb usb4-port1: attempt power cycle [ 244.040363][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.054541][ T5916] usb 3-1: Product: syz [ 244.059169][ T5916] usb 3-1: Manufacturer: syz [ 244.063961][ T5916] usb 3-1: SerialNumber: syz [ 244.279867][ T5916] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input10 [ 244.367985][ T5178] bcm5974 3-1:1.0: could not read from device [ 244.406839][ T24] usb 4-1: new low-speed USB device number 29 using dummy_hcd [ 244.433247][ T5916] usb 3-1: USB disconnect, device number 23 [ 244.443559][ T5178] bcm5974 3-1:1.0: could not read from device [ 244.604799][ T5829] bcm5974 3-1:1.0: could not read from device [ 244.633740][ T5829] udevd[5829]: Error opening device "/dev/input/event4": No such file or directory [ 244.647338][ T24] usb 4-1: Invalid ep0 maxpacket: 16 [ 244.647390][ T5829] udevd[5829]: Unable to EVIOCGABS device "/dev/input/event4" [ 244.662292][ T5829] udevd[5829]: Unable to EVIOCGABS device "/dev/input/event4" [ 244.801267][ T24] usb 4-1: new low-speed USB device number 30 using dummy_hcd [ 244.867003][ T5829] udevd[5829]: Unable to EVIOCGABS device "/dev/input/event4" [ 244.874770][ T5829] udevd[5829]: Unable to EVIOCGABS device "/dev/input/event4" [ 244.883860][ T24] usb 4-1: Invalid ep0 maxpacket: 16 [ 244.905434][ T24] usb usb4-port1: unable to enumerate USB device [ 245.047618][ T5902] usb 2-1: reset high-speed USB device number 25 using dummy_hcd [ 245.790652][ T5902] usb 2-1: device descriptor read/64, error -71 [ 246.047576][ T5902] usb 2-1: reset high-speed USB device number 25 using dummy_hcd [ 246.058469][ T5902] usb 2-1: device reset changed ep0 maxpacket size! [ 246.071236][ T5908] usb 2-1: USB disconnect, device number 25 [ 246.226853][ T5908] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 246.386393][ T9083] netlink: 'syz.0.883': attribute type 2 has an invalid length. [ 246.394188][ T9083] netlink: 132 bytes leftover after parsing attributes in process `syz.0.883'. [ 246.506828][ T5908] usb 2-1: Using ep0 maxpacket: 16 [ 246.518425][ T5908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.546463][ T5908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.576784][ T5908] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 246.613066][ T5908] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 246.639444][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.761305][ T5908] usb 2-1: config 0 descriptor?? [ 247.390209][ T9102] netlink: 72 bytes leftover after parsing attributes in process `syz.1.876'. [ 247.414142][ T5908] input: HID 0955:7214 Haptics as /devices/virtual/input/input11 [ 247.436233][ T5908] shield 0003:0955:7214.0006: Registered Thunderstrike controller [ 247.481681][ T5908] shield 0003:0955:7214.0006: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 247.612411][ T9102] random: crng reseeded on system resumption [ 248.554540][ T128] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 248.567113][ T5908] usb 2-1: USB disconnect, device number 26 [ 248.577631][ T128] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 248.631013][ T128] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 248.666099][ T9113] batadv_slave_0: Caught tx_queue_len zero misconfig [ 248.673929][ T128] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 250.066868][ T5823] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 250.295302][ T5823] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.334025][ T5823] usb 5-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 250.362421][ T5823] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.413822][ T5823] usb 5-1: config 0 descriptor?? [ 250.524403][ T128] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 250.885420][ T128] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.916891][ T128] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.926686][ T128] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 250.997134][ T128] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 251.055341][ T128] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.147480][ T128] usb 3-1: config 0 descriptor?? [ 251.565029][ T128] usbhid 3-1:0.0: can't add hid device: -71 [ 251.584383][ T128] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 251.642010][ T128] usb 3-1: USB disconnect, device number 24 [ 251.670713][ T5823] logitech-djreceiver 0003:046D:C71F.0007: hidraw0: USB HID v0.00 Device [HID 046d:c71f] on usb-dummy_hcd.4-1/input0 [ 251.893608][ T9126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.942085][ T9126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.948649][ T9157] syzkaller0: entered promiscuous mode [ 251.965502][ T9157] syzkaller0: entered allmulticast mode [ 252.669724][ T5823] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 253.138882][ T24] usb 5-1: reset high-speed USB device number 22 using dummy_hcd [ 253.216896][ T5823] usb 3-1: Using ep0 maxpacket: 32 [ 253.395564][ T5823] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b23, bcdDevice= 0.00 [ 253.483544][ T5823] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.515842][ T5823] usb 3-1: config 0 descriptor?? [ 253.951506][ T9178] bridge0: entered promiscuous mode [ 253.957952][ T5823] hid-corsair-void 0003:1B1C:1B23.0008: hidraw1: USB HID v0.00 Device [HID 1b1c:1b23] on usb-dummy_hcd.2-1/input0 [ 253.989294][ T9178] bridge0: port 3(macvtap1) entered blocking state [ 254.010687][ T9178] bridge0: port 3(macvtap1) entered disabled state [ 254.020825][ T9178] macvtap1: entered allmulticast mode [ 254.026420][ T9178] bridge0: entered allmulticast mode [ 254.037191][ T9178] macvtap1: left allmulticast mode [ 254.042620][ T9178] bridge0: left allmulticast mode [ 254.073041][ T9178] bridge0: left promiscuous mode [ 254.134540][ T9162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.145752][ T9162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.255549][ T5823] hid-corsair-void 0003:1B1C:1B23.0008: failed to request firmware (reason: -71) [ 254.255816][ T128] usb 3-1: USB disconnect, device number 25 [ 254.265161][ T5912] hid-corsair-void 0003:1B1C:1B23.0008: failed to request battery (reason: -71) [ 254.297074][ T5916] usb 5-1: USB disconnect, device number 22 [ 254.517885][ T30] audit: type=1326 audit(1769344858.902:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9189 comm="syz.3.914" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34539 code=0x7ffc0000 [ 254.544467][ T30] audit: type=1326 audit(1769344858.902:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9189 comm="syz.3.914" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34539 code=0x7ffc0000 [ 254.831855][ T30] audit: type=1326 audit(1769344858.902:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9189 comm="syz.3.914" exe="/root/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf7f34539 code=0x7ffc0000 [ 255.002758][ T30] audit: type=1326 audit(1769344858.902:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9189 comm="syz.3.914" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34539 code=0x7ffc0000 [ 255.094321][ T30] audit: type=1326 audit(1769344858.902:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9189 comm="syz.3.914" exe="/root/syz-executor" sig=0 arch=40000003 syscall=228 compat=1 ip=0xf7f34539 code=0x7ffc0000 [ 255.170714][ T30] audit: type=1326 audit(1769344858.902:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9189 comm="syz.3.914" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34539 code=0x7ffc0000 [ 255.258191][ T30] audit: type=1326 audit(1769344858.902:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9189 comm="syz.3.914" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f34539 code=0x7ffc0000 [ 255.331059][ T30] audit: type=1326 audit(1769344858.902:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9189 comm="syz.3.914" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34539 code=0x7ffc0000 [ 255.383825][ T30] audit: type=1326 audit(1769344858.902:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9189 comm="syz.3.914" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f34539 code=0x7ffc0000 [ 255.426103][ T30] audit: type=1326 audit(1769344858.902:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9189 comm="syz.3.914" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f34539 code=0x7ffc0000 [ 255.689352][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.695885][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.253236][ T9220] fuse: Unknown parameter '' [ 256.261517][ T9220] netlink: 32 bytes leftover after parsing attributes in process `syz.4.920'. [ 258.016813][ T128] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 258.186800][ T128] usb 4-1: Using ep0 maxpacket: 32 [ 258.198175][ T128] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 258.225558][ T128] usb 4-1: config 0 has no interface number 0 [ 258.243760][ T128] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 258.262797][ T128] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.274555][ T128] usb 4-1: Product: syz [ 258.284563][ T128] usb 4-1: Manufacturer: syz [ 258.292789][ T128] usb 4-1: SerialNumber: syz [ 258.313031][ T128] usb 4-1: config 0 descriptor?? [ 258.329404][ T128] smsc95xx v2.0.0 [ 258.847903][ T128] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 258.891430][ T128] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 259.075523][ T9243] netlink: 76 bytes leftover after parsing attributes in process `syz.1.927'. [ 259.220185][ T5879] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 259.398657][ T5879] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 259.413629][ T5879] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 259.439149][ T5879] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 259.464126][ T5879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.550917][ T5879] usb 5-1: config 0 descriptor?? [ 259.804756][ T5879] Bluetooth: Can't get state to change to load ram patch err [ 259.816802][ T5879] Bluetooth: Loading patch file failed [ 259.822341][ T5879] ath3k 5-1:0.0: probe with driver ath3k failed with error -121 [ 260.051162][ T5916] usb 5-1: USB disconnect, device number 23 [ 260.675480][ T9227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.736658][ T9227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.788392][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 260.788407][ T30] audit: type=1326 audit(1769344865.192:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9264 comm="syz.4.933" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73bd539 code=0x0 [ 260.834240][ T128] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -32 [ 260.855974][ T128] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -32 [ 261.973101][ T9284] program syz.0.938 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 262.132452][ T9288] netlink: 'syz.2.939': attribute type 15 has an invalid length. [ 262.237490][ T128] usb 4-1: USB disconnect, device number 31 [ 262.409206][ T9285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.558971][ T9285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.173673][ T128] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 263.376515][ T128] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 263.494155][ T9315] netlink: 14 bytes leftover after parsing attributes in process `syz.3.944'. [ 263.592071][ T128] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 263.636628][ T128] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 263.667598][ T128] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 263.675638][ T128] usb 5-1: SerialNumber: syz [ 263.845636][ T9315] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 263.873943][ T9315] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 263.908302][ T9315] bond0 (unregistering): Released all slaves [ 264.386853][ T5879] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 264.579486][ T5879] usb 3-1: Using ep0 maxpacket: 8 [ 264.642203][ T5879] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 17 [ 264.670407][ T5879] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=c8.07 [ 264.696449][ T5879] usb 3-1: New USB device strings: Mfr=209, Product=185, SerialNumber=60 [ 264.709497][ T5879] usb 3-1: Product: syz [ 264.715365][ T5879] usb 3-1: Manufacturer: syz [ 264.723096][ T5879] usb 3-1: SerialNumber: syz [ 264.749623][ T5879] usb 3-1: config 0 descriptor?? [ 264.964356][ T5879] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 264.992913][ T9329] Cannot find add_set index 2 as target [ 265.375037][ T5879] gspca_sunplus: reg_w_riv err -71 [ 265.381549][ T5879] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 265.399606][ T5879] usb 3-1: USB disconnect, device number 26 [ 265.946434][ T128] usb 5-1: 0:2 : does not exist [ 265.966813][ T128] usb 5-1: unit 5 not found! [ 266.059241][ T128] usb 5-1: USB disconnect, device number 24 [ 266.132773][ T5821] udevd[5821]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 268.518680][ T9380] netlink: 14 bytes leftover after parsing attributes in process `syz.0.961'. [ 268.981463][ T9380] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 269.193085][ T9380] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.310945][ T9388] syz.4.963 (9388): attempted to duplicate a private mapping with mremap. This is not supported. [ 269.690902][ T9380] bond0 (unregistering): Released all slaves [ 270.426817][ T128] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 270.868329][ T128] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 270.909315][ T128] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 271.179415][ T128] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 271.192584][ T128] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 271.215428][ T128] usb 2-1: SerialNumber: syz [ 271.726420][ T9422] FAULT_INJECTION: forcing a failure. [ 271.726420][ T9422] name failslab, interval 1, probability 0, space 0, times 0 [ 271.815087][ T9422] CPU: 0 UID: 0 PID: 9422 Comm: syz.4.971 Tainted: G L syzkaller #0 PREEMPT(full) [ 271.815115][ T9422] Tainted: [L]=SOFTLOCKUP [ 271.815124][ T9422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 271.815133][ T9422] Call Trace: [ 271.815140][ T9422] [ 271.815147][ T9422] dump_stack_lvl+0xe8/0x150 [ 271.815179][ T9422] should_fail_ex+0x412/0x560 [ 271.815205][ T9422] should_failslab+0xa8/0x100 [ 271.815225][ T9422] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 271.815248][ T9422] ? __alloc_skb+0x1d7/0x390 [ 271.815266][ T9422] ? __local_bh_enable_ip+0xd0/0x130 [ 271.815284][ T9422] ? __alloc_skb+0x193/0x390 [ 271.815304][ T9422] __alloc_skb+0x1d7/0x390 [ 271.815328][ T9422] netlink_ack+0x146/0xa50 [ 271.815342][ T9422] ? __pfx_genl_rcv_msg+0x10/0x10 [ 271.815360][ T9422] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 271.815375][ T9422] ? __pfx_nl80211_post_doit+0x10/0x10 [ 271.815393][ T9422] ? __pfx_ref_tracker_free+0x10/0x10 [ 271.815420][ T9422] netlink_rcv_skb+0x2b6/0x4b0 [ 271.815437][ T9422] ? __pfx_genl_rcv_msg+0x10/0x10 [ 271.815457][ T9422] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 271.815470][ T9422] ? genl_rcv+0x19/0x40 [ 271.815504][ T9422] ? down_read+0x272/0x2e0 [ 271.815517][ T9422] ? genl_rcv+0xd/0x40 [ 271.815537][ T9422] genl_rcv+0x28/0x40 [ 271.815553][ T9422] netlink_unicast+0x80f/0x9b0 [ 271.815581][ T9422] ? __pfx_netlink_unicast+0x10/0x10 [ 271.815600][ T9422] ? __alloc_skb+0x193/0x390 [ 271.815619][ T9422] ? netlink_sendmsg+0x650/0xb40 [ 271.815633][ T9422] ? skb_put+0x11b/0x210 [ 271.815653][ T9422] netlink_sendmsg+0x813/0xb40 [ 271.815678][ T9422] ? __pfx_netlink_sendmsg+0x10/0x10 [ 271.815696][ T9422] ? __asan_memset+0x22/0x50 [ 271.815715][ T9422] ? aa_sock_msg_perm+0xf1/0x1b0 [ 271.815735][ T9422] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 271.815749][ T9422] ? __pfx_netlink_sendmsg+0x10/0x10 [ 271.815766][ T9422] __sock_sendmsg+0x21c/0x270 [ 271.815787][ T9422] ____sys_sendmsg+0x4d7/0x810 [ 271.815812][ T9422] ? __pfx_____sys_sendmsg+0x10/0x10 [ 271.815832][ T9422] ? kstrtoull+0x12f/0x1d0 [ 271.815858][ T9422] ___sys_sendmsg+0x2a5/0x360 [ 271.815871][ T9422] ? __lock_acquire+0x6b5/0x2cf0 [ 271.815892][ T9422] ? __pfx____sys_sendmsg+0x10/0x10 [ 271.815910][ T9422] ? get_pid_task+0x20/0x1f0 [ 271.815927][ T9422] ? get_pid_task+0x20/0x1f0 [ 271.815940][ T9422] ? get_pid_task+0x20/0x1f0 [ 271.815981][ T9422] ? __fget_files+0x2a/0x420 [ 271.815997][ T9422] ? __fget_files+0x3a0/0x420 [ 271.816020][ T9422] __sys_sendmsg+0x183/0x260 [ 271.816038][ T9422] ? __pfx___sys_sendmsg+0x10/0x10 [ 271.816061][ T9422] ? __pfx_ksys_write+0x10/0x10 [ 271.816082][ T9422] __do_fast_syscall_32+0x1d2/0x540 [ 271.816095][ T9422] ? lockdep_hardirqs_on+0x7a/0x110 [ 271.816113][ T9422] ? do_fast_syscall_32+0x33/0x70 [ 271.816130][ T9422] ? asm_int80_emulation+0x1a/0x20 [ 271.816143][ T9422] ? do_int80_emulation+0x20e/0x400 [ 271.816167][ T9422] do_fast_syscall_32+0x33/0x70 [ 271.816196][ T9422] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 271.816213][ T9422] RIP: 0023:0xf73bd539 [ 271.816229][ T9422] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 271.816242][ T9422] RSP: 002b:00000000f53e650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 271.816258][ T9422] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800006c0 [ 271.816268][ T9422] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 271.816277][ T9422] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 271.816285][ T9422] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 271.816294][ T9422] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 271.816317][ T9422] [ 273.153271][ T128] usb 2-1: 0:2 : does not exist [ 273.202648][ T128] usb 2-1: unit 5 not found! [ 273.533969][ T128] usb 2-1: USB disconnect, device number 27 [ 273.713631][ T5821] udevd[5821]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 273.819714][ T5902] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 274.115314][ T9446] netlink: 14 bytes leftover after parsing attributes in process `syz.4.978'. [ 274.222451][ T5902] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 274.306738][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.328050][ T5902] usb 3-1: Product: syz [ 274.352656][ T5902] usb 3-1: Manufacturer: syz [ 274.381528][ T5902] usb 3-1: SerialNumber: syz [ 274.417106][ T5902] usb 3-1: config 0 descriptor?? [ 274.490871][ T5902] hub 3-1:0.0: bad descriptor, ignoring hub [ 274.520212][ T5902] hub 3-1:0.0: probe with driver hub failed with error -5 [ 274.718338][ T5902] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 274.738773][ T5902] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 274.793135][ T9446] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 274.797475][ T5902] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 275.084968][ T5902] usb 3-1: media controller created [ 275.219611][ T9446] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 275.356452][ T5902] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 275.417887][ T9446] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 275.548267][ T9446] bond0 (unregistering): Released all slaves [ 275.576369][ T5902] DVB: Unable to find symbol dib7000p_attach() [ 275.603047][ T5902] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 275.987965][ T5902] rc_core: IR keymap rc-dib0700-rc5 not found [ 276.017021][ T5902] Registered IR keymap rc-empty [ 276.032134][ T5902] dvb-usb: could not initialize remote control. [ 276.054633][ T5902] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 276.157031][ T128] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 276.171639][ T9476] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:20000 [ 276.329462][ T128] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 276.341018][ T128] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 276.351265][ T128] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 276.364219][ T128] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.499240][ T128] usb 2-1: config 0 descriptor?? [ 276.524356][ T128] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 276.534973][ T128] dvb-usb: bulk message failed: -22 (3/0) [ 276.580578][ T128] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 276.610095][ T128] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 276.626353][ T128] usb 2-1: media controller created [ 276.636065][ T128] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 276.720779][ T128] dvb-usb: bulk message failed: -22 (6/0) [ 276.743263][ T128] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 276.771733][ T128] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input13 [ 276.904482][ T128] dvb-usb: schedule remote query interval to 150 msecs. [ 276.919302][ T128] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 276.954835][ T9472] ------------[ cut here ]------------ [ 276.960741][ T9472] usb 3-1: BOGUS control dir, pipe 80001b80 doesn't match bRequestType c0 [ 276.969345][ T9472] WARNING: drivers/usb/core/urb.c:414 at usb_submit_urb+0x1052/0x18b0, CPU#0: syz.1.984/9472 [ 276.979637][ T9472] Modules linked in: [ 276.983778][ T9472] CPU: 0 UID: 0 PID: 9472 Comm: syz.1.984 Tainted: G L syzkaller #0 PREEMPT(full) [ 276.994824][ T9472] Tainted: [L]=SOFTLOCKUP [ 276.999169][ T9472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 277.009247][ T9472] RIP: 0010:usb_submit_urb+0x1114/0x18b0 [ 277.014891][ T9472] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c2 f2 ff ff 89 e9 [ 277.034608][ T9472] RSP: 0000:ffffc9001af6f768 EFLAGS: 00010246 [ 277.040714][ T9472] RAX: 0000000000000000 RBX: ffff88803496ae00 RCX: 0000000080001b80 [ 277.048715][ T9472] RDX: ffff8880562d9f00 RSI: ffffffff8c3dcd80 RDI: ffffffff8fdbb030 [ 277.056930][ T9472] RBP: 1ffff1100d56e99c R08: 00000000000000c0 R09: 0000000000400000 [ 277.065171][ T9472] R10: 000000000000a2c8 R11: fffff520035edf18 R12: ffff8880202d5100 [ 277.073270][ T9472] R13: ffff88806ab74ce0 R14: 0000000080001b80 R15: ffff8880562d9f00 [ 277.081963][ T9472] FS: 0000000000000000(0000) GS:ffff888125926000(0063) knlGS:00000000f54b6b40 [ 277.091014][ T9472] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 277.097643][ T9472] CR2: 0000000056a401fc CR3: 0000000030ece000 CR4: 00000000003526f0 [ 277.105614][ T9472] Call Trace: [ 277.108968][ T9472] [ 277.111904][ T9472] ? __init_swait_queue_head+0xa9/0x150 [ 277.117664][ T9472] usb_start_wait_urb+0x12b/0x510 [ 277.122734][ T9472] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 277.128321][ T9472] usb_control_msg+0x232/0x3e0 [ 277.133079][ T9472] dib0700_i2c_xfer+0xbb2/0xf80 [ 277.137950][ T9472] __i2c_transfer+0x79a/0x1ee0 [ 277.142701][ T9472] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 277.148529][ T9472] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 277.154336][ T9472] ? i2c_transfer+0xc8/0x2d0 [ 277.159068][ T9472] i2c_transfer+0x1cc/0x2d0 [ 277.163561][ T9472] i2cdev_ioctl_rdwr+0x460/0x740 [ 277.168653][ T9472] compat_i2cdev_ioctl+0x59f/0x5c0 [ 277.173770][ T9472] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 277.179421][ T9472] ? __fget_files+0x3a0/0x420 [ 277.184088][ T9472] ? __fget_files+0x2a/0x420 [ 277.188702][ T9472] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 277.194238][ T9472] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 277.199755][ T9472] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 277.205728][ T9472] ? kmem_cache_free+0x195/0x610 [ 277.210711][ T9472] ? __se_sys_futex_time32+0x3ab/0x440 [ 277.216167][ T9472] ? rcu_is_watching+0x15/0xb0 [ 277.221559][ T9472] __do_fast_syscall_32+0x1d2/0x540 [ 277.226785][ T9472] ? lockdep_hardirqs_on+0x7a/0x110 [ 277.231977][ T9472] ? do_fast_syscall_32+0x33/0x70 [ 277.237055][ T9472] ? asm_int80_emulation+0x1a/0x20 [ 277.242170][ T9472] ? do_int80_emulation+0x20e/0x400 [ 277.247447][ T9472] do_fast_syscall_32+0x33/0x70 [ 277.252328][ T9472] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 277.258987][ T9472] RIP: 0023:0xf748d539 [ 277.263081][ T9472] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 277.282965][ T9472] RSP: 002b:00000000f54b650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 277.291519][ T9472] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000707 [ 277.299563][ T9472] RDX: 0000000080002580 RSI: 0000000000000000 RDI: 0000000000000000 [ 277.307611][ T9472] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 277.315617][ T9472] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 277.323704][ T9472] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 277.331759][ T9472] [ 277.334818][ T9472] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 277.342127][ T9472] CPU: 0 UID: 0 PID: 9472 Comm: syz.1.984 Tainted: G L syzkaller #0 PREEMPT(full) [ 277.352907][ T9472] Tainted: [L]=SOFTLOCKUP [ 277.357259][ T9472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 277.367345][ T9472] Call Trace: [ 277.370646][ T9472] [ 277.373600][ T9472] vpanic+0x1e0/0x670 [ 277.377607][ T9472] panic+0xc5/0xd0 [ 277.381349][ T9472] ? __pfx_panic+0x10/0x10 [ 277.385801][ T9472] __warn+0x315/0x4a0 [ 277.389802][ T9472] ? usb_submit_urb+0x1052/0x18b0 [ 277.394851][ T9472] ? usb_submit_urb+0x1052/0x18b0 [ 277.399883][ T9472] __report_bug+0x29a/0x540 [ 277.404397][ T9472] ? usb_submit_urb+0x1052/0x18b0 [ 277.409414][ T9472] ? __pfx___report_bug+0x10/0x10 [ 277.414435][ T9472] ? lockdep_hardirqs_on+0x7a/0x110 [ 277.419620][ T9472] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 277.425439][ T9472] report_bug_entry+0x19a/0x290 [ 277.430279][ T9472] ? usb_submit_urb+0x1114/0x18b0 [ 277.435292][ T9472] ? usb_submit_urb+0x1119/0x18b0 [ 277.440315][ T9472] handle_bug+0xca/0x200 [ 277.444586][ T9472] exc_invalid_op+0x1a/0x50 [ 277.449285][ T9472] asm_exc_invalid_op+0x1a/0x20 [ 277.454147][ T9472] RIP: 0010:usb_submit_urb+0x1114/0x18b0 [ 277.459795][ T9472] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c2 f2 ff ff 89 e9 [ 277.479409][ T9472] RSP: 0000:ffffc9001af6f768 EFLAGS: 00010246 [ 277.485478][ T9472] RAX: 0000000000000000 RBX: ffff88803496ae00 RCX: 0000000080001b80 [ 277.493444][ T9472] RDX: ffff8880562d9f00 RSI: ffffffff8c3dcd80 RDI: ffffffff8fdbb030 [ 277.501408][ T9472] RBP: 1ffff1100d56e99c R08: 00000000000000c0 R09: 0000000000400000 [ 277.509372][ T9472] R10: 000000000000a2c8 R11: fffff520035edf18 R12: ffff8880202d5100 [ 277.517353][ T9472] R13: ffff88806ab74ce0 R14: 0000000080001b80 R15: ffff8880562d9f00 [ 277.525417][ T9472] ? usb_submit_urb+0x10a3/0x18b0 [ 277.530447][ T9472] ? __init_swait_queue_head+0xa9/0x150 [ 277.535993][ T9472] usb_start_wait_urb+0x12b/0x510 [ 277.541015][ T9472] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 277.546567][ T9472] usb_control_msg+0x232/0x3e0 [ 277.551329][ T9472] dib0700_i2c_xfer+0xbb2/0xf80 [ 277.556194][ T9472] __i2c_transfer+0x79a/0x1ee0 [ 277.560951][ T9472] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 277.566759][ T9472] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 277.572570][ T9472] ? i2c_transfer+0xc8/0x2d0 [ 277.577239][ T9472] i2c_transfer+0x1cc/0x2d0 [ 277.581740][ T9472] i2cdev_ioctl_rdwr+0x460/0x740 [ 277.586675][ T9472] compat_i2cdev_ioctl+0x59f/0x5c0 [ 277.591788][ T9472] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 277.597418][ T9472] ? __fget_files+0x3a0/0x420 [ 277.602089][ T9472] ? __fget_files+0x2a/0x420 [ 277.606680][ T9472] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 277.612226][ T9472] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 277.617681][ T9472] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 277.623652][ T9472] ? kmem_cache_free+0x195/0x610 [ 277.628593][ T9472] ? __se_sys_futex_time32+0x3ab/0x440 [ 277.634055][ T9472] ? rcu_is_watching+0x15/0xb0 [ 277.638823][ T9472] __do_fast_syscall_32+0x1d2/0x540 [ 277.644012][ T9472] ? lockdep_hardirqs_on+0x7a/0x110 [ 277.649204][ T9472] ? do_fast_syscall_32+0x33/0x70 [ 277.654225][ T9472] ? asm_int80_emulation+0x1a/0x20 [ 277.659336][ T9472] ? do_int80_emulation+0x20e/0x400 [ 277.664541][ T9472] do_fast_syscall_32+0x33/0x70 [ 277.669387][ T9472] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 277.675800][ T9472] RIP: 0023:0xf748d539 [ 277.679862][ T9472] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 277.699464][ T9472] RSP: 002b:00000000f54b650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 277.707874][ T9472] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000707 [ 277.715837][ T9472] RDX: 0000000080002580 RSI: 0000000000000000 RDI: 0000000000000000 [ 277.723820][ T9472] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 277.731783][ T9472] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 277.739744][ T9472] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 277.747720][ T9472] [ 277.751106][ T9472] Kernel Offset: disabled [ 277.755425][ T9472] Rebooting in 86400 seconds..