last executing test programs: 8.924437494s ago: executing program 0 (id=557): openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0xffffffffffffff1d) syz_usb_connect$uac1(0x5, 0x8c, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)="1632800e13", 0x5}], 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, 0x0, &(0x7f0000000300)) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) 8.122214819s ago: executing program 0 (id=559): r0 = socket$inet6(0xa, 0x3, 0x3) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r1, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) recvmmsg(r1, &(0x7f0000002700)=[{{&(0x7f0000000000)=@hci, 0x4e, &(0x7f0000000140)=[{0x0}], 0x1}, 0x19}, {{0x0, 0x0, &(0x7f00000001c0), 0x2, &(0x7f0000002640)=""/169, 0xa9}, 0x80}], 0x2, 0x40000060, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) timer_create(0x6, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x105}) mprotect(&(0x7f0000005000/0x2000)=nil, 0x2000, 0x3000000) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r5 = accept$alg(r4, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) recvmmsg(r5, &(0x7f0000006100), 0x49f, 0x0, 0x0) r6 = fsopen(&(0x7f0000000000)='udf\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) read(r6, 0x0, 0x0) r7 = socket(0xa, 0x2, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r7) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff11000000000e1208000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000440)=ANY=[@ANYBLOB="7f2570d1", @ANYRES16=r8, @ANYRESHEX=r0], 0x3c}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x8c0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r10, r11, 0x4e, 0x5) connect$inet6(r7, 0x0, 0x0) 7.828963259s ago: executing program 1 (id=560): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000a00), 0x40, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xdfe5) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2c, r3, 0x301, 0x70bd29, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40006) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x73}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0xaf}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@rand_addr=0x64010101, 0x0, 0x32}, 0x0, @in=@private=0xa0100fe, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x1c) setsockopt$inet_mtu(r5, 0x0, 0xa, &(0x7f0000000140)=0x4, 0x4) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0xd4}}, 0x40880) 7.49695277s ago: executing program 0 (id=562): r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2, 0x0, 0x2}) 7.128747298s ago: executing program 0 (id=564): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r3, &(0x7f0000000080)="99", 0x1) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs$namespace(r2, &(0x7f00000000c0)='ns/ipc\x00') sendmsg$xdp(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000880)="c8", 0x1}], 0x1, 0x0, 0x0, 0x4810}, 0x4008800) sendmsg(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x8dff) 7.034291881s ago: executing program 1 (id=565): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000040)=0x7) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) readv(r0, &(0x7f0000000500), 0x0) write$UHID_CREATE(r0, &(0x7f0000000280)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000200)=""/108, 0x6c, 0xa, 0xffffff1d, 0x2, 0x4, 0x7}}, 0x120) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000002c0)=0x10) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000003ac0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000003a80)={&(0x7f0000000cc0)={0x2d50, 0xd, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x2d14, 0x3, 0x0, 0x1, [{0x13d8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xd0, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x91, 0x1, "17cd85e3c5dc3f80a99da22cf374917f5201df675df03f42055bf9efe66e0e36e1bcdc4a4b3210c5ecc65b6716737f14fa7d8b87bbfe294205ab38446398669456874302d4751a85a3687954b07e17a2a707eb037c6fdbb6179003aad0d605bab522775d5f1c3e8010d01b9b2e5e63f7d3761a536cfc23ab181d65ee6b0577940e5650d4e496da4ad93e0facce"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_DATA={0x107c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "f380b3efab96851c1c4828ed2039bcc0100cc63ff22c4a6d262c772831e6b6993f2963276c41a5c4d20078c39884964131e480542deabbf1db0c8415f42488fa6390f58d9890cc425f2f18e9cef64975a99eb90c2f149fa7bc2d0cb8827a7545c63ae1fb2af5b9ea15ef3617b6ca4a6b8be3c4068f093e25e5fa883ad6fa2f8318bba4612c96e5df36a67e26e9f2ae670282d98fee5842f5419e1503f6357b30be1fec8a14e79abcae234d12f48494bd14d1674ea03a3f71971ee7af82a0235d4e1d0a02836fc59d689aa57914943fece36eb801a44336cb368624d316bc125dabd4c914f839b7f50efc022255f2078cfc8ea7b3a513ea8a0bd7a5414f25d60f2b30449a4a85e51ecd02fc05f2b6a99f0a9ec028888ec76cf2300864dc13c4eccd2e95e458dfdba6501e39ccb05f5640177492da7d16061b4d1b1d3813af5ca8c9dee51665a7b63050375a4245336dc2797366c74d5117446e9260b7ef58af6428633d824e398ab846733fd384169fdadb8561200c57967231a2c77d87b0c9f64a6c16c2571c200caac8c0657956a4cc2545af19f3abe8e6be9e036e662cf80a61f169479e253afed18ce94714bb21418b26355f0a29e2184835de4c3b378a3ff65834ffb53490c6b599f35dca08448bd7a3cd89192516cd886c171454caacd0ef8e3e8f065ef9584394e6411196cde37947022877f00c2e0f6269fe46010b25f1eafaac2b392141dbdfbc3b1c9afe151ed7ff15501cbab82226f69d36ec5218878b51d5172ef9a5dbdc2c82e34e91a3daaefcd023ff0b1a0c99d49977794f3ee11bdab90f12ba0c95b362726e8573a93ded76fad93dc95ffab252ba7162dd61422d62125ed36d348d968081f0ac18c071efa330ae98a7b1e4bd9b70ba3bb0df033eaccd62b11b6972aa6560011df2fadacac043ad120efc182fdeb4890251075d1bd247aabfed4716d788d265b0a1a1a81afd995b3dccf72cde456cc28900e87b6c225f55c413f7077e4d951685a31623ba5fc408f45975c13ed4ca58f98c5c477c05f920fe044d73069200060331ae53c81d2de849543bf75897dc778cc68c0265d1171012adba515c745d83dabe1ff659399ae76babb860c38f3fdc40f84d3329d9828516ba2353c79f0b3276d93687408df5184df92f2c00af433ef5ab3d77a3c3f409daf519160ebb298c7f064bcc89cf80ccfa9dc5e43bf5b29845959ed98188c180be5c9762f6b844711b02e7000355eba0263f606496fa5d95b498e6ee07d4fb10893ff7cf1e8a4bd0107bc753961929e468cd69848fe278105dc6bbd9bfe026eb63435e33737224e8f7c4ca7bc4e32099c1045cda778e772a1514ca04e69d4cd2e5f5136a6bb2c9826163dc6ddc8c2eb7ec364499cefcd445e07bed83397cb6e12900043e82a34d21fcc6b2a2f695f8a508e5c3eb7675f92cfe0d92a0bd10bb52224826c7e0a0ab9799ce52b337c5db41f22af5f02fa8af940d1ab4782b58eece7731605253205a4720cbcff101b3f3a89be3438f6adbf4d5df47c9c4c5d0945412a63cc41242c1d90cd824847acc3ae51608047b800d012b98a4f836c736fab9ee3b78a5a077114c975ab476d897d8de3b777ebd5894ee31c4338a7351d96d1999cb1b3c9118ddab27577294ead7f7fa1ca44c91a4b802c51f4e5de22e4f283c9f74631ce70251fe830604a94fbaba64b4c23d10852ee386c55907f7ddd641f307f691f25af97f2443d585baa8174be57996dad006dc6c043241671b19aaefe0d255a8eeff2efdf238db56b8437d29c8ef2519331d362d50720424cd753e40b79350fb9a7349dba9ce9fb6ad9d566cf81e1974040c4d6235988149bed5961a9f54e931743dc5bf3537233d6ed7ef61e328edf39e261e7954d37d124cf6fbd3f1ace8564a226be2f7078e9a92e2f2b8dda84d9d955beeba4da098db895591dc4d93d05a61f0dd90dce9b79b516f611d6664a79b3c34df535145e58ddd505b1cef995fca455c64c6640afbbaca0147f2ba13c9f81cecd457d35664cf1658dfe0d2ef36bb5a4dce4581cc6b1be7b1ae1c23da65599e11999a969422e08531113a78c04b2434c8c9a0fe88ad590b4cc8766832685b28ecb88e34bd29c38d8ea327d5247066f95a52ac7c80fa94fd34438e57ad3cd938d1783f5bb9f3b415996a688c0c4d588ca5411f25143c80e8b195d701bbef2b7329eb73f0be99a49c4ae92852ee3184e0b7d6cfc49974ee254b044e06d599830070120ba0b025a677eb8dd18ae32c2c7542743f761a861f08e1eea0dcd66fd4cdbf1c98e0059a2e57a29d44db25ce157e350786531bf24b124e31d2ce7788c08a099f719df69e30c6aa5e309598c5f9ef5c8e27741d15d68e914403b8d2dcee35215039a6abd4c0809b959b04614f8d0a5eadae64ac7be849e392c5f6dbf4b23b674ef9dd26c4a2e21dac680a5e530af91523e632f04899b91d0af076ef3e097dc8b7fb65321221abe4bae20f334da4ec41ca63b58c30beae64869e447a70010ab15d18cccbdedcc34d5d7f2dcc1059c13b2277c262bd9c04d053ce1d4f495edeba89c7e57f1c345dbef288def84de1866ca80fb6c644544cb396cea2e8c9028abc24db0205009008cf3ae5205b7e88832f6e04437b07ddeaf51556c0b0fc6049ac6fc4b27a3e54944621a6342dd20a47169bc56780bb48ccae0e9663f49ad322cb983d1ed565b021a969d027b8a9fdfe4fc9d5a9c1330d07b60b4258828b63200dd5e2fbf13061cc896535b0a1282611a0034841344667a27354724452fee5e9f919fb4efd87053edbbfe058c73555a219f72be395c11512443a12cdb2f98f3fd969752b177e26e9153af989d5ba8465e18f1b0660eddd22f3d675f5d82b6990c1989dba195b46168d44598e7a36cb4fd8f6dee438e6c58e7169805a9225af6a5ad5b80be44243ce160acb8f69747e27a75a885092d9278126355abb475375ce3efbddcce08ad1e2f0db6cf3124fc25ddd69a15bfc9afec54b5e91925d35b65afb6ec9be36301c76545da2620e0989068acb95d9effb27052a1e236223584634338a8c8401245892b6d6608595787a8bf99b5cd692c48bfc26f76fa6c03ca96d105a6a86ce67abf89587962585af00a6944d4cfd81113942bb2a420c2075f5e62d39e44ddc629d0940b82f9713677d1bf17f6d16404999546fae8e57e188bf5f428a952182c587bf7175cfaa92abe8eccd01dd9240ed0db72d18f3cb65c4f0a6b51b35c7da206d79b78fdbd6456536c83d70fd4a3602a429a9523b34822c71329ed2d305a8dac9e23ad973dfad9d1fc58e4108a9537dfc61d80681bbce72f246dea3bfba63b4840c3b09458e08eb40b699a2b069fd9e3835698e20e664145a73baf5356c39d95d4b22cb8b5ea3b6f6f17c73302b7cd335ecca237bf1ac6ce7448f52b014f62358e6f7b3fd1caf05deb3dd434052c855710b298579494f980336afd49e62d722cc5b360b18cb2449bfd8db159de68dac52a00dec484622e5f9ac1559ffc73cd5a58064625e6fdf2abd0c81f3a06409242f4b18d71c2331e78a48b32e9e427cf16a43bd40d54700de860e29173456558fcd3ecbb3ce5236f6cbf5c2b0fccfc3a2ba961d63c894f48cd591a9fd5d690d41c3e0cd2ad32dd52b4f30e238befad13b4180e989ab036ad8cf8a2ac9b568c6beec0d1d4da625d83cdcf92e046d1f277967119bd290567652d7d4d5faa920a741d678e2b0fe1dba727c024f375dcac443b5c57ac21d9a1d2f64326a99d96e53ff67ceb4a3251e84522151c7357e156ebfa14bf796b2e4662a938e9e18a243ed1da47f1b526e446f25d41daeba1020dd993861e795788b9911f5e0a0502f9afcd5e717b9c89e7501dba3bb47a5d3d416a923a7feaf4e574facec8378ab32eec263dad09e88c482c8255ef1960d77a18961b7e522795cb19cac7283e41005310607ee913a2de79683aa4b9769939d02be008862c561d95302369c60430eae7de0fce575c15f6fe80aea7203ca8d4b39ccab4b0499fcc1e795524640af4f4fff436a8fb12e77e18c8b29381115bfea372e4d7d5d82edf839d1c128a9fa0c97ae0c343195298e9df51a66f88df00bc1834115ba8e07be864483f13bba724c8193cc696d5e18b6f7a0c78f6202053e9e82481ce1a2a82883d2bba317b092cfdfd1936a207a5278518156587072325ed206f7722adf8860e17730b0db6dbf5e230dbf15cfa1f0077cdda0f385b0d6d6bd697459210ae24526422cf8cd202e78d14fa84b96edca79a1fac336f07bd628bf28121a4ad2839ca47387a7d83c34d6603ff7fa6de06a9bc3ab49a0e322578273dc54d262249d53f90ce0438327ac06792aaf10a1964e0ea8fb39fbe3b2b942d5ea53867c49d720cf4f13c8f6f4f66bf1545efcf764dbb520f3ce209bf96e4e92ccf1aeae4df204bfe16a123861284a1640c7fb8c491050402e2f9db7ea5af6db5a50c6cb4ef8f2239181eff7a28b4d75cfc504f687b8daeb5b6fd2211ef3304652ce0ee956e8c3b96178961a8dcbbaa664403429fff04f4e5b0f979d46b4ffee064bfb7bbc4ce2cec7d32e2c466cdb7f7a47ceea0c90867e9ce9adb22ba41c29e85174db49640da29a0d0526f049b0441068db28d5ae0863aa944e499555ac8e3f0f49978d837d5d072557c58f94796cac46b69a6525f1e014985bc487f644f73dd92f5c5476e3275dbd3f808373871d6fb23cea1bed3bc9fae783fecacc80db90d3d2b79f459d65f8a8257f5c5deb31974e2e561ad29ba2987472b98c016d0c7ab515e11add3867bca041a37f0a737f98d3df3fe87ad99b428cb6a9a1f4c54dd4414f5e51abe9a44265ccfefaf80874bb56353c8dae68db2e7bf4f3c12fd787427b10088f847ac181aeb513d16d433089bd5ebf18cec94f458bb0a72f4db6f2d5b2be92acece889201d384197534badfb3b7c90a54bead8e92eccbc1c512e5ec08f015df1cb17cb028d2567247725aff651bed3f4ff5bad692970072b2ee8328c2c4a7ed1fe32da1f4eacfedc65357e21aa2fc4e906d5feb46096caf7ee677f631e709622c6076810c474c984e61a51b753a8d14c5cf3c1c85043ef575930f091c9d346cd60147ef5f2b5a32d429dd083db6abf8218e798292f98a155841c1443b19800d9b6760f293f4daeee6362ad047523f54cb6a1e3b05c8363fb017d50d36b3604dc3c74e57b850fdd56a86eeffce4e2e5ad6054e5dd3d497eb73ccef3c841d27f13ad7db7eff772e8e92d212be53e7374e445a56e90a149af811fff0f21376babb11c8dabba57c312cf7a63f6b9d03e07a3fd2c16b9bdd4239c8e2ea5fec107cb89986f7c5ad9256f476ac7fe23c5868915cbb6733ad5ae435b55be787e043b15bbb7b9bd250043fdd2e6d54d72c156496e214c8eeab7ebf3b2dc543bc91d25ec10ccd59dd2e28ddc36d36de1c732097d27a945a352bd779f6da10f02a22c2ff23559fe8dcecd773339079d40596df1a9f5d5c4bf12433c4af9dad0dcdfcc73f843ff76efbd81f52735cff0c95bfa4cfe26cb978ba88504d5a5325aa08633d1776c30defea1f0dd06d6821eed030f5652f118056ecdfe84d9a9d683fec3ce9b812b4ac64c8d03bca5dca36e6542f698ed51af4f152c61b1feea57399ce1fa208d521cac610ed144c8b9f59e98e3007754268ab7d0377001650794c73737082f90b28da16e7c85bbce1ca503eafb33fd9579f2739df74ecce79f1ef1097934ce150e8f8d3721efe87fb19e854735ddc354e48507fe48d6a7734b88d8aa00305303"}, @NFTA_DATA_VALUE={0x26, 0x1, "f88346fd8a4f7746aecb37faa5becb9f9eaa2e65312e71c88ffa483e74473078259c"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_KEY={0xec, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe8, 0x1, "df35600773afb6d65623b30696fb6183a2b21c46a606da2d8d1e9a12e3ef7c26a41229f8b8b217dbf772a4c8bf79557a109f614c043d1204f06d44f4005dbe91353fca37467104190554909a703356464d580d7584c31b19eddcf107727fabc504730bea98cb2cceb21142f6a962956a37b514c14ad747eda8b25ab3fe1dd96a9f6a9fb1aea77fa08874707230c2560ce877edae7f927b3e38f700626e632a7f45951275a288117f113763a676ff97f00ee615f56355f3f752a4c6ffb1ae1cdfbc80f1d50bcf099077bbdbab4e2c68fa3ca789366facebc3ed5ae4f4b69a9bf9b3f4f403"}]}, @NFTA_SET_ELEM_EXPR={0x44, 0x7, 0x0, 0x1, @reject={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x3b}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x35}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x7}]}}}, @NFTA_SET_ELEM_EXPRESSIONS={0x13c, 0xb, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x48, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xe}]}}}, {0x48, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_RANGE_TO_DATA={0x24, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x2c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x2}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xd}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x15a4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xfba5}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPR={0x152c, 0x7, 0x0, 0x1, @cmp={{0x8}, @val={0x1520, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x1014, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_CMP_DATA={0x9c, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x10, 0x1, "a56794b8664ac9890d07c8fd"}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CMP_DATA={0x13c, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x6b, 0x1, "72e1cda85e69c14135fbea31187746f36f7125127e583ccf2360a8000ac8e991f0f833a4de6d41d6348f942e626a69a9c7c96fe837c9745be7274975d3cff7838d4bb2088993c0209b846bd296a40da798876f30befc31bb3183cea5f46869db9808d9cd39f96d"}, @NFTA_DATA_VALUE={0x7b, 0x1, "3d8fffb55f695ba273feede19e7425a686cea3dbe6573962ee07b17aa4e7d69200f8078e08f3085e722e9f25ee2e8d8d6b8740f5d71f3a4ee76ee7e804fa929f4bb9017f295a6fbc433c2567a26f5ab93992aae5d90c7cc1a18cf2a53f33335a25c3373513f45c9701006408b62367d9114773edb175b5"}, @NFTA_DATA_VALUE={0xa, 0x1, "e4118006d26c"}]}, @NFTA_CMP_DATA={0x310, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x15, 0x1, "3cf3bc94b881ced695e50973296a893232"}, @NFTA_DATA_VALUE={0xee, 0x1, "44873abb78e4d427dad4422668e4bc4f8405705f7f03919bcd705daaa61d28239366e1ae0b3c49fa1bc9739f57cc90b9cd9bc5f7615e973d12bff3a741d2084d46b5276eebfaeb20bd72cccd560786b9613806d616b686c99d66a1a05e91950ad7f70eaa03e59454395ef480b3af8fdc60f3b3797bfff2ee43dbb95eed196c64f35e025f4af73bb36231b545e22af987e75f5867b1abf6278564db39731b3908f302d16daa34d309bbf0fa1bb95e8c69d50a7b80d5242c2ddb5a2625483ad664c215b778202f30033c23bfddd56ca0d687d35a2006f38b6b7c0e2b325e2cf5780ae42bde0b9729610840"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x9f, 0x1, "ccf1bcc24ae6e79a9c8a3eabdd5d03f21ccd412b6dc93f3cc5e063956baefdd175f5e95e09222c006848010492eddd645ee00fb3b4d5f5a41fe9b020f6d651d6e912c0c678acccdf9043a53a172fcaa72f8a324f8ac9afb6645080387428839cc95e2a7a78fec598bc28d463273b6317aab0e27a651f6c7df2c380e67ca685f8d5c3ec7ab168b8a65c8a22e22ec5cc79cc44140b2312d62cfb3fb4"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x6e, 0x1, "2de0b71209db726c8ec51f64f34788829ef85d306098ce8448d1ab93fc52f67d16fcb13c3f104637d6e49f2752d5a75a721d309165708cca3390f2f63b202abb3346998b901e866ca139fb57bfec83ebc7abd594ebddbe6c063a1851c52cca733413a0be7c7240a9accb"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffff8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x5}]}}}, @NFTA_SET_ELEM_EXPR={0x50, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xe086}]}}}]}, {0x100, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x81, 0x6, 0x1, 0x0, "40e185758fdfc0e9c6eee5e9dcdc340ad1f0d8bc64450142e77cae6f6c7785b8154163fe974ec77dbb2495dad6bcf593011424b25af571c906f878306168ec247f34dd604602d3912219597e9d5937ce9f37c1bd50f47e9bfeb4425710026386f3431f01f3310122ad57d876725bf84b7a6073c5b16e35583799714a64"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x58, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x39, 0x1, "330bd42e205201819347a3034fc170da617b1fe0eb1957f8f2be342311c47be85d6c1b8a4278deb571e5ce38a1e4b0639e7ad708f3"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}]}, {0x294, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x278, 0xb, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0xa}]}}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x1cc, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1b8, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x198, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x76, 0x1, "9a8fac14957250dd45fdb0de79e291a1bf513d301eedb08d4c1f4685edeb0d555a030940d13d32414859833c779ec431a0a6ed7da45617dfc1226a2a6440a01b9a9a8ff7429c47c32633fed99860db1341af111f2a887d5d22703b6d2425f44d1d75b5a6e86280c10219862ca78dfa17f002"}, @NFTA_DATA_VALUE={0x14, 0x1, "e9c4af259d2d3e23b2870290ce462a9b"}, @NFTA_DATA_VALUE={0xe1, 0x1, "e9c21c8776fc3a5879aac4105aed33f14afd055860be2f39576dc94cf0259b25cf474053be3a865b9fe6311c5a0ec8e025d5133cc25b341bbccfffe1e98dc5cec116371d2c21786d01517731f75771ff322b48e579937b9849440bf8836f2effa525cd458608a6c89a5cedbc1727e81046e85c279a6e197ddf8aa820b60a3c48114cb37b1422a4753239a434e39aba55179b72b02afa9463eff274c9ceb5f26571c56a9b6708d72005b0fc6cef5d1234935832b4cba0d79ac8e0e5b99b9b8bcd2cc59acf78ef3e4470d8e63f8c7d77f197aab37970cf6f1f06195bd7b2"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_IMMEDIATE_DATA={0x4}]}}}, {0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x97}]}}}, {0x34, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x6499}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}]}, 0x2d50}, 0x1, 0x0, 0x0, 0x1}, 0x0) unshare(0x2040680) socket(0x1d, 0x2, 0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) r4 = socket(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'hsr0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000240)="01154e00010000112233445588fb000100011614", 0x14, 0x0, &(0x7f0000000040)={0x11, 0xd, r5, 0x0, 0xff, 0x0}, 0x14) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x81, 0x98, 0xb7, 0x10, 0xbb4, 0xa1b, 0xcb45, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0x69, 0x0, 0x2, "", [{{0x9, 0x4, 0xe6, 0x7d, 0x0, 0x7d, 0xf4, 0xf7, 0x8}}]}}]}}, &(0x7f0000000c80)={0x0, 0x0, 0x2c, &(0x7f0000000b40)={0x5, 0xf, 0x2c, 0x2, [@wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x3, 0x8, 0x6, 0x4}, @generic={0x1c, 0x10, 0xa, "ed43f910f12ef7d201e7d38f5deebf84562aa90c283603c62c"}]}}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000140)={r7}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0)={r7, 0x1ff, 0x9}, &(0x7f0000000100)=0x8) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10, &(0x7f0000000100)=0x40049, 0x4) 6.061680233s ago: executing program 3 (id=568): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) syz_emit_ethernet(0x1b8, &(0x7f0000000500)={@broadcast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "381f34", 0x182, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8100, 0x0, 0x892f, [0x8]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [], "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"}, {}, {0xa888, 0x88be, 0x8000000, {{}, 0x1, {0x20000}}}}}}}}}, 0x0) r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) ioctl$KVM_SET_MSRS(r0, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f00000002c0)={0x8, 0x2, 0x8}) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x0, 0x400, 0x80, 0x89, 0x0, 0x8, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000300)=0x3) ioctl$TCFLSH(r4, 0x540b, 0x0) r5 = io_uring_setup(0x23ea, &(0x7f00000001c0)={0x0, 0xb1d4, 0x400, 0x0, 0x200019f}) r6 = semget$private(0x0, 0x6, 0x3b1) semop(r6, &(0x7f0000000000)=[{0x0, 0xea, 0x1000}, {0x0, 0x0, 0x1000}], 0x2) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.986128479s ago: executing program 0 (id=570): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) lsm_get_self_attr(0x64, 0x0, 0x0, 0x0) r0 = syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newsa={0x14c, 0x10, 0x1, 0x0, 0x0, {{@in=@broadcast, @in6=@empty}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x100}, {}, 0x0, 0x0, 0xa, 0x1}, [@coaddr={0x14, 0xe, @in=@empty}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x14c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$lan78xx(r0, &(0x7f0000000400)={0x14, &(0x7f0000000080)={0x20, 0x8, 0xb7, {0xb7, 0xf, "168133f9b99327e2ce7b99bb6facbdcb3c2f290634c40a0cadd67afa1369904c715705b8b92f9a16b94108b07da7288f435125917029a0c471581793e750bd0be4c22a03d0a7b1712aa90483f6f3a7380ec48249a5f65e6401fcd8cfe49727b4c40cc82157145dfaaab8bdf1248630a672e32e28b266ae50758b1d72ea145dadbec1843f468f541812daff511748f918f460fe9d171d277532fa11a76b9ce4ae2fdf34f2b8e748d68f875a0d5bf06b8d641bf17f57"}}, &(0x7f0000000300)={0x0, 0x3, 0xc3, @string={0xc3, 0x3, "f58024ae42524ad3e58211e59be0e27bc78b39b6cffe13686a76fe0d3891874a7fc6d4f62f0ba7e0c8ec2931ced7274d431a9932eb9f0d4e8462a60987d495683d157db9591c6f2ed4e40a64ac9c78d3ecd1e33c15eb407b6e6ad32abbcad6c1dd2764978516919f685511833cbc25b510c5ff556cdf9909e36abfbf77fa47c5dcfbaa706ae6f63caa179462a83c10a06f868e45746983b1f17f91074dc33d0b61014e1c46ec79f9815e87dd910624527e1c4b16a8d86ab7d7d46d15a53966d1e7"}}}, &(0x7f0000000680)={0x34, &(0x7f0000000440)={0x40, 0x14, 0xd7, "d8f1404fc363e3661a5f530f43ae6a456fbed2c09aaf3759cce1ea203efccf82ce2bc500574b27799d8089637fa104e7750e139275fc410b9423df68055c45ee3e377b752ce611608629cb9fad6d7a319050c12bfb9f0d07a527b7c42d443aee6b1b8fa8079574a92f89ec4cea32bf515b436a582d3250aedf33537287ce8f980790eb30511f8969d5a866204a22de4c9817d4379c3477630e00cf3bc000da9e5abece0e3e52ef47759a664f31dcf9d00a9b5b5342b14dedb4048210f1d6d6f82d417f70228d3fe580b1ab57d5609fd76517d533909bf2"}, 0x0, &(0x7f0000000580)={0x0, 0x8, 0x1, 0xfe}, &(0x7f00000005c0)={0xc0, 0xa1, 0x4, 0x1}, &(0x7f0000000600)={0x40, 0xa0, 0x4, 0x7}, &(0x7f0000000640)={0xc0, 0xa2, 0x2f, "bd0f8801effd9f279179f9686369a28e407eae4b840124308f3dfcadef229736ad2765e03eea43eb37f772770e9016"}}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2c, r3, 0x1, 0x0, 0x0, {0x27}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x20000040) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000180)=ANY=[@ANYRESOCT=r2, @ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$can_bcm(0x1d, 0x2, 0x2) r6 = socket$inet6_udp(0xa, 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prlimit64(0x0, 0x7, 0x0, &(0x7f0000000140)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000700)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000800)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', r7, 0x29, 0x0, 0xb, 0x0, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10, 0x7, 0x9, 0xd}}) ioctl$XFS_IOC_START_COMMIT(r5, 0x80585882, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x20, 0x7, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x101}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r8, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r9, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f00000007c0)={0x28, 0x2, r9, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x9}) getsockopt$sock_buf(r4, 0x1, 0x3c, &(0x7f0000001440)=""/132, &(0x7f0000001500)=0x84) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.193482502s ago: executing program 3 (id=573): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$cec(&(0x7f0000000180), 0x0, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xf, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r5, r4}) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0) ioctl$SIOCGSTAMPNS(r6, 0x8907, &(0x7f0000000200)) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r2, r1}) close_range(r0, 0xffffffffffffffff, 0x0) 4.762012419s ago: executing program 4 (id=576): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x5) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r2, 0x28, 0xfffffffe, &(0x7f0000001680)=""/56, &(0x7f0000000280)=0x38) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r3, &(0x7f0000000580)=[{&(0x7f0000000640)=""/179, 0xb3}], 0x300, 0x1a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x42060680) r4 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x40500, 0x0) ioctl$PTP_EXTTS_REQUEST(r4, 0x40103d02, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x408c0}, 0x4000000) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0x4000000a00}) fsopen(0x0, 0x0) socket(0x11, 0x6, 0xc) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00'}) timer_settime(r7, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(0x0, 0x80, 0x2, 0x0, 0x0, 0xffffeffa) r9 = userfaultfd(0x801) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000000)) mmap(&(0x7f00007b4000/0x1000)=nil, 0x1000, 0x1000002, 0x10, 0xffffffffffffffff, 0x80000000) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) 4.208970318s ago: executing program 3 (id=577): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2c, r1, 0x301, 0x70bd29, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x2000000, 0x80}, 0x40006) 4.046471203s ago: executing program 2 (id=579): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aa", 0x21}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000007c0)=""/89, 0x59}], 0x1}, 0x0) 3.987222801s ago: executing program 3 (id=580): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aa", 0x21}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000007c0)=""/89, 0x59}], 0x1}, 0x0) (fail_nth: 2) 3.483936981s ago: executing program 4 (id=581): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba12", 0x11}], 0x1}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000007c0)=""/89, 0x59}], 0x1}, 0x0) 3.453967805s ago: executing program 3 (id=582): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f00000009c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000980)={&(0x7f0000000740)={0x210, 0x13, 0x1, 0x5, 0x70bd2c, 0x25dfdbff, {0xa, 0x0, 0x9}, [@generic="1e4843c3038b5f6aa2ff0ac81975861a9e463df8bc30975eefa565258af10814db29503b00eeaa4bcf1b126e0674a8daef531faa8a779a8949d2b03591607ba6580eca87eefef79e3bdad1a5084783f0c5c7f3ef9ea267a48374537b72fd86e8cf2983aa527c7ffda7894d69", @typed={0x8, 0x38, 0x0, 0x0, @ipv4=@empty}, @generic="abb8f5f5c052fcb7fb0b803b85a480c367dc98e3d055e82142e38ffc13304a824c24819ae6b79151a8a874e04dd4c2d7fea87fc5afa685a9e40e96e5e0f8c8ff5d838289583fa9e501f8b8ff9ac3cb3d5c8e7d111f3d3e96c77061fbf5674d0ca962930241c5b4747aaea23139df498dcde345643c22538bff6e038b90537e3e149109c2930e628f2118d223cf341ccaf1f78588aaa0c55398867e96e7217c524122704c5c7ac393875114fea6a9a9c580f6684ab1f8e8e2b1e5dddae49cefd4eda37cac2c86e2450810e01049f2dc1b0aecc5a64d502ab4af03a3b83e6eb32d10fc2e1cab57f1fbd63ac21ab9bf3bb05ba9c1fcb5ee3f54", @nested={0x20, 0xef, 0x0, 0x1, [@nested={0x4, 0x23}, @nested={0x4, 0x61}, @typed={0x14, 0x56, 0x0, 0x0, @ipv6=@mcast1}]}, @generic="a66657b8a847890f28bdc9028febb3dbfb2cdaef021ff0f153b51678e0aedf0be46b7890411ea629257aee35a1d73242c029b2937ac11d80a776f1dc217d962becce9b190cce5182af783fec6b2814a1c0d312c5ffb1e1421fd458c1f87c30f28514c7df7cae908bc51f143a0adc"]}, 0x210}, 0x1, 0x0, 0x0, 0x4004080}, 0x20000000) sched_setattr(0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8002) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)=ANY=[], 0xc8}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0xfffffffc, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r4, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @multicast2}}}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}}, 0x800) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f00000000c0)='./file2\x00', 0x8000, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'pim6reg1\x00', &(0x7f0000000540)=@ethtool_modinfo={0x42, 0x101, 0x9}}) r6 = socket$kcm(0x10, 0x2, 0x0) removexattr(&(0x7f0000000280)='./file2\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="74c3eaf56b8957fe42990945b79ab1108023af03ede4eed4b81e0166e43ea55e64053b6f035594d4c4e222238eea47a2f148ea975b92a14619ad6eb04b319bfab69ed6da1e423378be0f5d8601575bb8072aec5aba6156542f29"]) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x8008800) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000007, 0x12, r7, 0x5a83e000) 3.425643498s ago: executing program 2 (id=583): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000007c0)=""/89, 0x59}], 0x1}, 0x0) 3.247055628s ago: executing program 2 (id=584): openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0xffffffffffffff1d) syz_usb_connect$uac1(0x5, 0x8c, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)="1632800e13", 0x5}], 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) 3.211971457s ago: executing program 4 (id=585): ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0xa, 0x4000000000000ffc, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "6752370e00000000ffff00", [0x1f43b3c2, 0x9]}}) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa"], 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x10c000) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0x7) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x882) ioctl$EVIOCGMASK(r2, 0x80104592, 0x0) ioctl$PPPIOCGIDLE64(r0, 0x8010743f, &(0x7f0000000140)) ioctl$DRM_IOCTL_PANTHOR_TILER_HEAP_DESTROY(r1, 0xc008644c, &(0x7f0000000040)) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x4001, 0x3, 0x510, 0x1f0, 0x0, 0x148, 0x1f0, 0x148, 0x478, 0x240, 0x240, 0x478, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0xff000000, 'ip6tnl0\x00', 'wlan1\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0x190, 0x1f0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xffffff00, 0xffffff00, 0x0, 0xffffff00], 0x4e22, 0x4e22, 0x4e20, 0x4e23, 0x1d, 0x2, 0x5f4a, 0x100, 0x2}}}, {{@ip={@remote, @multicast1, 0xff000000, 0xffffff00, 'wlan0\x00', 'pimreg1\x00', {}, {0xff}, 0x84, 0x0, 0x60}, 0x0, 0x260, 0x288, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x9, 0x1, 0x1, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x8000000, 0x1, 0x1, 'syz1\x00', 0x5}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x2b, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x48, 0x3, 0x8000, 0x3, 0x1, 0x8, 0xfa11, 0xffffffff}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f00)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x44040}, 0x4040000) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b40)=ANY=[@ANYBLOB="f67c743fdd782e2402c9b73601cb8782484112af0012120cafec6c6c3b27484613e8f4b880cedf43c9ea9f53fd6055add0b01d61090bde0bc92f6c96d37e64c008790117c61bb04fd4bc201a303c03f21e9e7bcd8d8d043fca2a669ebc654d33ad3925409948cc4a8c56a374cb7434", @ANYRES8=r3, @ANYRES16, @ANYBLOB="78729bdb7698bf4a3479131fbfa71ed70bef14913532b39a8b49f080f78574f00528d496efe2fe37202db83091f5559fbc536d", @ANYRESHEX, @ANYRESOCT, @ANYRESOCT, @ANYRESDEC=r2, @ANYRES16=r3], 0x30}, 0x1, 0x0, 0x0, 0x20000011}, 0x4008000) pselect6(0x40, &(0x7f00000000c0)={0x8, 0x8ab5, 0x10001, 0x20000000, 0x100, 0x4, 0x63dd1ea1, 0x1}, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) shutdown(r4, 0x1) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, 0x0, 0x0, 0xa, 0x2, 0x0, 0x2}) 3.133301825s ago: executing program 1 (id=586): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000a00), 0x40, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xdfe5) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2c, r3, 0x301, 0x70bd29, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40006) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x73}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0xaf}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@rand_addr=0x64010101, 0x0, 0x32}, 0x0, @in=@private=0xa0100fe, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x1c) setsockopt$inet_mtu(r5, 0x0, 0xa, &(0x7f0000000140)=0x4, 0x4) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0xd4}}, 0x40880) 2.646275354s ago: executing program 4 (id=587): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b"], 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="62bbb3ee", @ANYRES16=r3, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa080006000e000000"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000700000024000180060005004e230000060001000200051b080003"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x220c) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x3) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x6) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r10, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r11, 0x7) r12 = socket(0xa, 0x1, 0x0) listen(r12, 0x7f) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r13, 0x0) r14 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r14, 0x0) 2.604989147s ago: executing program 1 (id=588): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x12) ioctl$UI_SET_SNDBIT(r7, 0x4004556a, 0x1) ioctl$UI_DEV_CREATE(r7, 0x5501) write$uinput_user_dev(r6, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x4, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0xfffffffe, 0x0, 0xa9ba, 0xc1f, 0x1, 0x101, 0x3, 0x6, 0xffff, 0x9, 0x2, 0x9, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0x4, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x0, 0xf, 0xa33, 0x5, 0x80, 0x401, 0x5, 0xa3a, 0xfffffffd, 0x7, 0xb, 0x3, 0xffff8001, 0x2, 0x4, 0x80000000, 0x1, 0xb, 0x7, 0x0, 0x5, 0xb6, 0x1, 0x7fe, 0x7fff, 0x2, 0x1000002, 0x8], [0x2, 0x1, 0x10000, 0x7, 0xb66, 0x2, 0x5, 0x80000001, 0x8000001, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x6, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x6, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x4, 0x1, 0x5, 0x5, 0xfffffb66, 0x80, 0x2, 0x81, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x6f, 0x80b, 0x3, 0x6, 0x525ba681, 0x4f71, 0x4, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x100008b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x7, 0x4, 0x3, 0x7a8, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x80000001, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0xfffffff7, 0x2, 0x3, 0x0, 0x0, 0x3, 0x4c, 0x3, 0x1, 0x2, 0x0, 0x9, 0x13, 0x1, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x7, 0x47, 0x7, 0x0, 0x11, 0x3, 0x1, 0x5, 0x7, 0x8000, 0xffc, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71c], [0x81, 0x10003, 0x10, 0x4e26, 0x6, 0x40, 0x7, 0x497, 0x4, 0x5, 0x0, 0x5, 0x56, 0xc28, 0x9, 0x10001, 0x0, 0x7, 0x79a, 0x40, 0x9, 0x6, 0xc421, 0x80000001, 0x6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x4, 0x3ff, 0x10, 0xd, 0x6, 0x8000, 0x4f, 0x78d, 0x6, 0x1, 0xffffb029, 0xfffffff8, 0x9, 0x7, 0x6, 0x101, 0x1, 0x7, 0x4, 0x0, 0x8000b, 0x400, 0x8, 0x0, 0x200008, 0x10001, 0x9a33247, 0x6, 0x0, 0x1, 0x8001, 0xfffffff7, 0x2000005]}, 0x45c) read$hiddev(r7, &(0x7f0000000040)=""/117, 0x75) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000009c0)={0x18, r4, 0x1, 0x0, 0x0, {0xa}, [@TIPC_NLA_LINK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4004}, 0x4000) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f0000000100), 0x8) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)={0x198, r8, 0x200, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0xef, 0x2a, [@channel_switch={0x25, 0x3, {0x1, 0x7, 0x7}}, @peer_mgmt={0x75, 0x16, {0x0, 0x3, @val=0x3, @void, @val="917153f583ecd04a1e66702a12702f71"}}, @peer_mgmt={0x75, 0x18, {0x1, 0x5, @val=0x8, @val=0x2c, @val="122970783f0aeec86a2b321229116009"}}, @random_vendor={0xdd, 0xb2, "539de4425263b98ab3bd435cb18189dd5a013f461f3157c1f063a28e5cb2fdbcc8900be7e54673d992bc6e1c040f6582946b070fd567665f0af4c90b17543abcac6f454e94986674f0c2f5d79e5be810b924e65b9975baf30473a02a2b44dd01afbe8ebb4b3b9090f47c3316d9d220972f1422a83c36327bf27230ebafbfa8ad18ac8f00e6f7528076b08c3a42fbd94ecaef2a5bd3cc1706a1a8bdc8d69bc5481987efb41df600605202529c1619c0f09bf9"}]}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8, 0xc9, @random=0x157c}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x10000000, {0x4, 0x3, 0xb2, 0x8}}}, @NL80211_ATTR_MAC_HINT={0xa, 0xc8, @from_mac=@broadcast}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xc8df}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x8}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x4}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0xfac0c}, @NL80211_ATTR_SAE_PASSWORD={0x3a, 0x115, "11dbe869fc041961063b5dbed019d11a4fd661b4bb2528ad87f62005ecc85636b94152ac4bfc3ea44166e0b9aebf8e3e34ddfa5d1cae"}]]}, 0x198}, 0x1, 0x0, 0x0, 0x40}, 0x4) syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r1) r9 = dup(r0) sendmsg$inet(r9, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0xffff, @local}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000000000)="a3d1", 0x2}], 0x1}, 0x4048014) syz_emit_ethernet(0x5e, &(0x7f0000000940)=ANY=[], 0x0) 2.29087362s ago: executing program 2 (id=589): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{0x0}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000007c0)=""/89, 0x59}], 0x1}, 0x0) 2.117113576s ago: executing program 0 (id=590): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f00000009c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000980)={&(0x7f0000000740)={0x210, 0x13, 0x1, 0x5, 0x70bd2c, 0x25dfdbff, {0xa, 0x0, 0x9}, [@generic="1e4843c3038b5f6aa2ff0ac81975861a9e463df8bc30975eefa565258af10814db29503b00eeaa4bcf1b126e0674a8daef531faa8a779a8949d2b03591607ba6580eca87eefef79e3bdad1a5084783f0c5c7f3ef9ea267a48374537b72fd86e8cf2983aa527c7ffda7894d69", @typed={0x8, 0x38, 0x0, 0x0, @ipv4=@empty}, @generic="abb8f5f5c052fcb7fb0b803b85a480c367dc98e3d055e82142e38ffc13304a824c24819ae6b79151a8a874e04dd4c2d7fea87fc5afa685a9e40e96e5e0f8c8ff5d838289583fa9e501f8b8ff9ac3cb3d5c8e7d111f3d3e96c77061fbf5674d0ca962930241c5b4747aaea23139df498dcde345643c22538bff6e038b90537e3e149109c2930e628f2118d223cf341ccaf1f78588aaa0c55398867e96e7217c524122704c5c7ac393875114fea6a9a9c580f6684ab1f8e8e2b1e5dddae49cefd4eda37cac2c86e2450810e01049f2dc1b0aecc5a64d502ab4af03a3b83e6eb32d10fc2e1cab57f1fbd63ac21ab9bf3bb05ba9c1fcb5ee3f54", @nested={0x20, 0xef, 0x0, 0x1, [@nested={0x4, 0x23}, @nested={0x4, 0x61}, @typed={0x14, 0x56, 0x0, 0x0, @ipv6=@mcast1}]}, @generic="a66657b8a847890f28bdc9028febb3dbfb2cdaef021ff0f153b51678e0aedf0be46b7890411ea629257aee35a1d73242c029b2937ac11d80a776f1dc217d962becce9b190cce5182af783fec6b2814a1c0d312c5ffb1e1421fd458c1f87c30f28514c7df7cae908bc51f143a0adc"]}, 0x210}, 0x1, 0x0, 0x0, 0x4004080}, 0x20000000) sched_setattr(0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8002) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)=ANY=[], 0xc8}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0xfffffffc, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r4, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @multicast2}}}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}}, 0x800) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffffff, &(0x7f00000000c0)='./file2\x00', 0x8000, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'pim6reg1\x00', &(0x7f0000000540)=@ethtool_modinfo={0x42, 0x101, 0x9}}) r6 = socket$kcm(0x10, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x8008800) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000007, 0x12, r7, 0x5a83e000) 1.938318167s ago: executing program 1 (id=591): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="ec000000210001000400000000000000fc020000000000000000000000000002fe80000000000000000000000000003a00000000000000020a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100fc0000000000000000000400000000017f000001000000000000000000000000fc020000000000000000000000000001000000000000000000"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.883188742s ago: executing program 2 (id=592): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x20, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="800100001000010000000000000000007f0000010000000000000000000000007f00000100000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e000000200000000000000000000000000001234320000007f0000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020002000000000000000000480002006469676573745f6e756c6c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000480002006369706865725f6e756c6c"], 0x180}}, 0x0) 1.701346574s ago: executing program 2 (id=593): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="15010000000000002400128009000100626f6e64000000001400028005000100060000000800090002000000"], 0x44}}, 0x4800) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0x30000, 0x8, 0xd, 0x3, 0xe4, 0x40, 0x6e, 0x0, 0x30, 0x19}, {0x1, 0x4000, 0xe, 0x0, 0x40, 0x5, 0x7d, 0x9, 0x58, 0x3, 0x4, 0x1}, {0x2000, 0xe000, 0xe, 0x5, 0x1, 0x7, 0xfe, 0x7, 0x1, 0xab, 0x5, 0x46}, {0x30000, 0x8000000, 0x3, 0x5d, 0x0, 0x43, 0x9, 0xfa, 0x80, 0x7, 0xd}, {0xa000, 0x9000, 0xc, 0x2, 0x3, 0x7, 0xab, 0x81, 0x0, 0xa3, 0xf7, 0x82}, {0xfec00000, 0xffffffff, 0xf, 0xa0, 0xb1, 0x8, 0x1, 0xd, 0x88, 0xfb, 0x1, 0xfd}, {0x54000, 0x2, 0x4, 0x5, 0x7, 0xff, 0x1, 0x0, 0x5, 0x81, 0xff, 0x70}, {0xffff1000, 0xb000, 0xe, 0x25, 0x4, 0x7, 0x1, 0x18, 0x5, 0x3, 0x7, 0x8}, {0xb000, 0x2d}, {0xf000, 0x7fff}, 0xc0040065, 0x0, 0x231d7000, 0x42024, 0xb, 0x1, 0x3000, [0x683ffffffffffffe, 0x3, 0x80000004, 0x40000000000ff]}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r5, 0xc0a85320, &(0x7f0000000340)={{0x80, 0x1}, 'port1\x00', 0x19f, 0x60004, 0xfffffffd, 0xffffffff, 0x6, 0x0, 0x0, 0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r5, 0xc0a85320, &(0x7f0000001e00)={{0x80, 0x80}, 'port0\x00', 0x8719470d9569919, 0x0, 0x7ffc, 0x1, 0x4, 0x1, 0x5, 0x0, 0x1, 0x9}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r6, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x4000) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) close(r4) eventfd(0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001b00)=[@textreal={0x8, 0x0}], 0x1, 0xa, 0x0, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) r8 = creat(&(0x7f0000000140)='./file0\x00', 0x4d) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r8, @ANYRES64=r7], 0x0) ioctl$FE_GET_PROPERTY(r8, 0x80106f53, &(0x7f0000000100)={0x24, &(0x7f0000000040)}) 1.615955105s ago: executing program 1 (id=594): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b021b00000000000109022400010000400009040000010300400009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0xc, {[@local=@item_4={0x3, 0x2, 0x8, "d7e71be1"}, @global=@item_012={0x1, 0x1, 0x1, "bc"}, @local=@item_4={0x3, 0x2, 0x0, "bd5dffff"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000c80)={0x2c, &(0x7f0000000a40)={0x0, 0x30, 0x5, "d6c151dd75"}, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x41, 0x5, 0x0, 0x4, 0x7, 0x2, 0x5, 0x1, 0x57, 0x8, 0xfffffffd, 0x2, 0x8, 0xff, 0x9a, 0x45, [0x3]}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000000)=0x2, 0x4) r3 = syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x1701) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f00000000c0)=@urb_type_control={0x2, {0x8, 0x1}, 0xb, 0xa0, &(0x7f0000000000)={0x1, 0x17, 0x7, 0xfff9, 0x3}, 0x8, 0xffffffff, 0x3, 0x0, 0x4, 0x10, 0x0}) r4 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000300)={0xf0f02b, 0x1}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000280)={@empty, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6, 0x0, 0x8, 0x0, 0x3, 0x4010200}) r6 = syz_open_dev$evdev(&(0x7f0000000080), 0xffe, 0xa0000) ioctl$EVIOCGABS20(r6, 0x80184560, &(0x7f0000000340)=""/4096) ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, @private0, @rand_addr=' \x01\x00', 0x6, 0x3, 0x7fff, 0x400, 0x5, 0x1000090}) 1.020781961s ago: executing program 4 (id=595): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89fa, &(0x7f0000000480)={'vcan0\x00', @multicast}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000080)=0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001300000008000300", @ANYRES32=r5, @ANYBLOB="06001200000000000600b50085010200040013000a00060008021100000000000c0043"], 0x48}, 0x1, 0x0, 0x0, 0x45}, 0x0) 426.814752ms ago: executing program 4 (id=596): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) lsm_get_self_attr(0x64, 0x0, 0x0, 0x0) r0 = syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newsa={0x14c, 0x10, 0x1, 0x0, 0x0, {{@in=@broadcast, @in6=@empty}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x100}, {}, 0x0, 0x0, 0xa, 0x1}, [@coaddr={0x14, 0xe, @in=@empty}, @algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x14c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$lan78xx(r0, &(0x7f0000000400)={0x14, &(0x7f0000000080)={0x20, 0x8, 0xc4, {0xc4, 0xf, "168133f9b99327e2ce7b99bb6facbdcb3c2f290634c40a0cadd67afa1369904c715705b8b92f9a16b94108b07da7288f435125917029a0c471581793e750bd0be4c22a03d0a7b1712aa90483f6f3a7380ec48249a5f65e6401fcd8cfe49727b4c40cc82157145dfaaab8bdf1248630a672e32e28b266ae50758b1d72ea145dadbec1843f468f541812daff511748f918f460fe9d171d277532fa11a76b9ce4ae2fdf34f2b8e748d68f875a0d5bf06b8d641bf17f57db8042d3160d68f04870656174"}}, &(0x7f0000000300)={0x0, 0x3, 0xc3, @string={0xc3, 0x3, "f58024ae42524ad3e58211e59be0e27bc78b39b6cffe13686a76fe0d3891874a7fc6d4f62f0ba7e0c8ec2931ced7274d431a9932eb9f0d4e8462a60987d495683d157db9591c6f2ed4e40a64ac9c78d3ecd1e33c15eb407b6e6ad32abbcad6c1dd2764978516919f685511833cbc25b510c5ff556cdf9909e36abfbf77fa47c5dcfbaa706ae6f63caa179462a83c10a06f868e45746983b1f17f91074dc33d0b61014e1c46ec79f9815e87dd910624527e1c4b16a8d86ab7d7d46d15a53966d1e7"}}}, &(0x7f0000000680)={0x34, &(0x7f0000000440)={0x40, 0x14, 0xd7, "d8f1404fc363e3661a5f530f43ae6a456fbed2c09aaf3759cce1ea203efccf82ce2bc500574b27799d8089637fa104e7750e139275fc410b9423df68055c45ee3e377b752ce611608629cb9fad6d7a319050c12bfb9f0d07a527b7c42d443aee6b1b8fa8079574a92f89ec4cea32bf515b436a582d3250aedf33537287ce8f980790eb30511f8969d5a866204a22de4c9817d4379c3477630e00cf3bc000da9e5abece0e3e52ef47759a664f31dcf9d00a9b5b5342b14dedb4048210f1d6d6f82d417f70228d3fe580b1ab57d5609fd76517d533909bf2"}, 0x0, &(0x7f0000000580)={0x0, 0x8, 0x1, 0xfe}, &(0x7f00000005c0)={0xc0, 0xa1, 0x4, 0x1}, &(0x7f0000000600)={0x40, 0xa0, 0x4, 0x7}, &(0x7f0000000640)={0xc0, 0xa2, 0x2f, "bd0f8801effd9f279179f9686369a28e407eae4b840124308f3dfcadef229736ad2765e03eea43eb37f772770e9016"}}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2c, r3, 0x1, 0x0, 0x0, {0x27}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x20000040) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000180)=ANY=[@ANYRESOCT=r2, @ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$can_bcm(0x1d, 0x2, 0x2) r6 = socket$inet6_udp(0xa, 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prlimit64(0x0, 0x7, 0x0, &(0x7f0000000140)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000700)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000800)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', r7, 0x29, 0x0, 0xb, 0x0, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10, 0x7, 0x9, 0xd}}) ioctl$XFS_IOC_START_COMMIT(r5, 0x80585882, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x20, 0x7, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x101}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r8, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r9, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f00000007c0)={0x28, 0x2, r9, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x9}) getsockopt$sock_buf(r4, 0x1, 0x3c, &(0x7f0000001440)=""/132, &(0x7f0000001500)=0x84) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 3 (id=597): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r1) kernel console output (not intermixed with test programs): ? __dev_queue_xmit+0x29b/0x3820 [ 151.962212][ T6647] ? __local_bh_enable_ip+0xd6/0x140 [ 151.962236][ T6647] ? __dev_queue_xmit+0x29b/0x3820 [ 151.962265][ T6647] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 151.962301][ T6647] ? __pfx_rtnl_newlink+0x10/0x10 [ 151.962333][ T6647] ? __pfx_rtnl_newlink+0x10/0x10 [ 151.962377][ T6647] rtnetlink_rcv_msg+0x802/0xc00 [ 151.962412][ T6647] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 151.962440][ T6647] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 151.962470][ T6647] ? ref_tracker_free+0x689/0x830 [ 151.962491][ T6647] ? __pfx_ref_tracker_free+0x10/0x10 [ 151.962528][ T6647] ? __asan_memcpy+0x40/0x70 [ 151.962556][ T6647] ? __skb_clone+0x5c/0x6c0 [ 151.962595][ T6647] netlink_rcv_skb+0x226/0x4a0 [ 151.962633][ T6647] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 151.962657][ T6647] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 151.962720][ T6647] ? netlink_deliver_tap+0x2e/0x1b0 [ 151.962740][ T6647] ? netlink_deliver_tap+0x2e/0x1b0 [ 151.962773][ T6647] netlink_unicast+0x7bd/0x940 [ 151.962807][ T6647] netlink_sendmsg+0x813/0xb40 [ 151.962847][ T6647] ? __pfx_netlink_sendmsg+0x10/0x10 [ 151.962875][ T6647] ? aa_sock_msg_perm+0xf6/0x1c0 [ 151.962908][ T6647] ? __pfx_netlink_sendmsg+0x10/0x10 [ 151.962934][ T6647] sock_sendmsg_nosec+0x13a/0x180 [ 151.962957][ T6647] ____sys_sendmsg+0x54e/0x850 [ 151.963002][ T6647] ? __pfx_____sys_sendmsg+0x10/0x10 [ 151.963048][ T6647] ? import_iovec+0x73/0xa0 [ 151.963079][ T6647] ___sys_sendmsg+0x2a5/0x360 [ 151.963112][ T6647] ? __lock_acquire+0x683/0x2cf0 [ 151.963137][ T6647] ? __pfx____sys_sendmsg+0x10/0x10 [ 151.963221][ T6647] ? __fget_files+0x2a/0x420 [ 151.963242][ T6647] ? __fget_files+0x3a2/0x420 [ 151.963270][ T6647] __x64_sys_sendmsg+0x1b1/0x290 [ 151.963319][ T6647] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 151.963377][ T6647] do_syscall_64+0x166/0x520 [ 151.963397][ T6647] ? trace_irq_disable+0x3b/0x140 [ 151.963426][ T6647] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.963443][ T6647] ? clear_bhb_loop+0x70/0xc0 [ 151.963478][ T6647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.963503][ T6647] RIP: 0033:0x7fd211f9e0d9 [ 151.963527][ T6647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.963544][ T6647] RSP: 002b:00007fd212dd9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 151.963573][ T6647] RAX: ffffffffffffffda RBX: 00007fd212225fa0 RCX: 00007fd211f9e0d9 [ 151.963585][ T6647] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 151.963595][ T6647] RBP: 00007fd212dd9090 R08: 0000000000000000 R09: 0000000000000000 [ 151.963605][ T6647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.963614][ T6647] R13: 00007fd212226038 R14: 00007fd212225fa0 R15: 00007fd21234fa48 [ 151.963664][ T6647] [ 152.095297][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 152.601410][ T5699] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 153.299175][ T6658] netlink: 32 bytes leftover after parsing attributes in process `syz.4.227'. [ 153.793373][ T5699] usb 2-1: USB disconnect, device number 14 [ 153.843841][ T6661] netlink: 136 bytes leftover after parsing attributes in process `syz.0.228'. [ 154.049237][ T5726] udevd[5726]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:10.8/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 157.734026][ T6704] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 157.741396][ T6704] IPv6: NLM_F_CREATE should be set when creating new route [ 157.768717][ T6707] netlink: 32 bytes leftover after parsing attributes in process `syz.0.240'. [ 157.786643][ T189] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 157.887694][ T5678] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 157.954890][ T189] usb 2-1: Using ep0 maxpacket: 16 [ 157.965762][ T189] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 157.987964][ T189] usb 2-1: config 4 has an invalid interface number: 9 but max is 0 [ 158.014910][ T5701] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 158.023690][ T189] usb 2-1: config 4 has no interface number 0 [ 158.030756][ T189] usb 2-1: config 4 interface 9 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 158.050705][ T189] usb 2-1: config 4 interface 9 altsetting 2 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 158.062230][ T5678] usb 5-1: Using ep0 maxpacket: 32 [ 158.092640][ T189] usb 2-1: config 4 interface 9 has no altsetting 0 [ 158.116444][ T189] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.129628][ T189] usb 2-1: Product: syz [ 158.155106][ T189] usb 2-1: Manufacturer: syz [ 158.159940][ T189] usb 2-1: SerialNumber: syz [ 158.190728][ T6697] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 158.198231][ T5701] usb 3-1: Using ep0 maxpacket: 16 [ 158.210496][ T5701] usb 3-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00 [ 158.234615][ T5678] usb 5-1: unable to get BOS descriptor or descriptor too short [ 158.254607][ T5701] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 126, using maximum allowed: 30 [ 158.269184][ T5678] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 158.313456][ T5701] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 126 [ 158.331512][ T189] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 158.344195][ T5678] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 158.345222][ T949] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 158.369434][ T5678] usb 5-1: can't read configurations, error -71 [ 158.389702][ T5701] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.439105][ T5701] usb 3-1: config 0 descriptor?? [ 158.497257][ T5829] usb 2-1: Failed to submit usb control message: -71 [ 158.497286][ T189] usb 2-1: USB disconnect, device number 15 [ 158.514931][ T5829] usb 2-1: unable to send the bmi data to the device: -71 [ 158.525099][ T949] usb 1-1: Using ep0 maxpacket: 32 [ 158.530582][ T5829] usb 2-1: unable to get target info from device [ 158.537960][ T949] usb 1-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 158.548867][ T5829] usb 2-1: could not get target info (-71) [ 158.558760][ T5829] usb 2-1: could not probe fw (-71) [ 158.566434][ T949] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 158.584923][ T949] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.597389][ T949] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 158.638839][ T949] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.691724][ T949] usb 1-1: config 0 descriptor?? [ 158.918467][ T5701] lenovo 0003:17EF:60B5.000F: ignoring exceeding usage max [ 158.961876][ T30] audit: type=1326 audit(1787227047.715:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6713 comm="syz.0.243" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd211f9e0d9 code=0x0 [ 159.004513][ T5701] lenovo 0003:17EF:60B5.000F: hidraw0: USB HID v0.01 Device [HID 17ef:60b5] on usb-dummy_hcd.2-1/input0 [ 159.059955][ T5677] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 159.095953][ T5677] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 159.130623][ T5677] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 159.150330][ T5677] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 159.182567][ T5677] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 159.218037][ T5677] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 159.269790][ T5677] hid-generic 0000:0000:0000.0010: hidraw1: HID v0.00 Device [] on [ 159.349691][ T5677] usb 3-1: USB disconnect, device number 16 [ 159.465229][ T5678] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 159.645639][ T5678] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 159.677068][ T5678] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 159.710298][ T5678] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 159.736546][ T5678] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 159.769392][ T5678] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 159.796381][ T5678] usb 5-1: config 1 has no interface number 1 [ 159.816487][ T5678] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 159.849778][ T5678] usb 5-1: config 1 interface 2 altsetting 1 has an endpoint descriptor with address 0x1E, changing to 0xE [ 159.883364][ T5678] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0xE has invalid maxpacket 16428, setting to 1024 [ 159.914054][ T5678] usb 5-1: config 1 interface 2 altsetting 1 bulk endpoint 0xE has invalid maxpacket 1024 [ 159.960188][ T5678] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.974989][ T5678] usb 5-1: Product: syz [ 159.987628][ T5678] usb 5-1: Manufacturer: syz [ 160.004202][ T5678] usb 5-1: SerialNumber: syz [ 160.132745][ T949] usbhid 1-1:0.0: can't add hid device: -71 [ 160.146543][ T949] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 160.187277][ T949] usb 1-1: USB disconnect, device number 9 [ 160.444925][ T5677] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 160.470984][ T6721] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 160.520911][ T5678] usb 5-1: No MIDI endpoints found [ 160.534962][ T5678] usb 5-1: Failed to parse MIDI 2.0 interface [ 160.550505][ T5678] usb 5-1: 0:2: cannot create sequencer device [ 160.576845][ T6736] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[5626] was attempted by "  @  ./binderfs/binder0 b ÿÿÿÿ  X mptcp_pm s/binder0  ‘ À   € @% $ X $ Q†  ‘ ÿÿÿÿ   sfb ,  (  \x07   ûÿÿÿ   \x07 À6 syz* [ 160.595890][ T5677] usb 2-1: Using ep0 maxpacket: 8 [ 160.780017][ T5677] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 160.811202][ T5677] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 160.827657][ T5677] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.837641][ T6721] netlink: 'syz.4.244': attribute type 11 has an invalid length. [ 160.851285][ T5677] usb 2-1: config 0 descriptor?? [ 160.896796][ T949] usb 5-1: USB disconnect, device number 13 [ 161.067731][ T5677] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 161.255044][ T5692] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 161.431896][ T5692] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 161.465811][ T5692] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.500325][ T5692] usb 3-1: config 0 descriptor?? [ 161.777567][ T6743] netlink: 32 bytes leftover after parsing attributes in process `syz.4.252'. [ 161.847931][ T6740] syzkaller0: entered promiscuous mode [ 161.869431][ T6740] syzkaller0: entered allmulticast mode [ 162.066697][ T6751] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 162.103667][ T5701] usb 2-1: USB disconnect, device number 16 [ 162.246616][ T5692] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 162.268877][ T6755] netlink: 4 bytes leftover after parsing attributes in process `syz.3.254'. [ 162.282289][ T5692] [drm:udl_init] *ERROR* Selecting channel failed [ 162.315488][ T6755] netlink: 'syz.3.254': attribute type 10 has an invalid length. [ 162.335450][ T5692] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 1 [ 162.353431][ T5692] [drm] Initialized udl on minor 1 [ 162.378108][ T5692] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 162.394512][ T6755] bond0: (slave netdevsim1): Releasing backup interface [ 162.414531][ T189] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 162.433791][ T6758] netlink: 'syz.3.254': attribute type 10 has an invalid length. [ 162.445109][ T5692] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 162.452656][ T5699] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 162.484621][ T5699] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 162.499361][ T5692] usb 3-1: USB disconnect, device number 17 [ 162.526613][ T5699] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 162.553802][ T6755] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 162.610609][ T189] usb 5-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 162.633191][ T6755] team0: Port device netdevsim1 added [ 162.656218][ T189] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 162.680047][ T189] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 162.712341][ T6758] team0: Port device netdevsim1 removed [ 162.720436][ T189] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.751908][ T189] usb 5-1: config 0 descriptor?? [ 162.793096][ T6758] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 163.009203][ T6758] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 163.253201][ T189] hid-multitouch 0003:0457:07DA.0011: unknown main item tag 0x0 [ 163.301676][ T189] hid-multitouch 0003:0457:07DA.0011: unknown main item tag 0x0 [ 163.342074][ T189] hid-multitouch 0003:0457:07DA.0011: unknown main item tag 0x0 [ 163.390694][ T189] hid-multitouch 0003:0457:07DA.0011: unknown main item tag 0x0 [ 163.456212][ T189] hid-multitouch 0003:0457:07DA.0011: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.4-1/input0 [ 163.770643][ T6751] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 163.879381][ T6751] bond1 (unregistering): Released all slaves [ 164.052406][ T6778] process 'syz.1.264' launched '/dev/fd/10' with NULL argv: empty string added [ 164.144928][ T189] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 164.172439][ T5692] usb 5-1: USB disconnect, device number 14 [ 164.335722][ T189] usb 1-1: Using ep0 maxpacket: 32 [ 164.359470][ T189] usb 1-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 164.398699][ T189] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 164.428761][ T189] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.458875][ T189] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 164.498807][ T189] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.528335][ T189] usb 1-1: config 0 descriptor?? [ 164.762000][ T30] audit: type=1326 audit(1787227053.515:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6775 comm="syz.0.263" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd211f9e0d9 code=0x0 [ 164.882793][ T5701] hid_parser_main: 1 callbacks suppressed [ 164.882817][ T5701] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 164.934030][ T5701] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 164.965264][ T5692] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 164.968138][ T5701] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 165.005190][ T5701] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 165.024604][ T5701] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 165.054475][ T5701] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 165.077831][ T5701] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [] on [ 165.135297][ T949] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 165.163406][ T5692] usb 3-1: Using ep0 maxpacket: 16 [ 165.174459][ T5692] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 165.214363][ T5692] usb 3-1: no configurations [ 165.233194][ T5692] usb 3-1: can't read configurations, error -22 [ 165.338573][ T949] usb 4-1: Using ep0 maxpacket: 16 [ 165.352839][ T949] usb 4-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 165.362416][ T5677] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 165.376712][ T5692] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 165.392625][ T949] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.413319][ T949] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.434733][ T949] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.456406][ T949] usb 4-1: config 0 interface 0 has no altsetting 0 [ 165.471764][ T949] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.501319][ T949] usb 4-1: config 0 descriptor?? [ 165.536012][ T5677] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 165.564960][ T5692] usb 3-1: Using ep0 maxpacket: 16 [ 165.572567][ T5692] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 165.584121][ T5677] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.592488][ T5692] usb 3-1: no configurations [ 165.606019][ T5692] usb 3-1: can't read configurations, error -22 [ 165.622277][ T5677] usb 2-1: config 0 descriptor?? [ 165.634458][ T5692] usb usb3-port1: attempt power cycle [ 165.751229][ T6790] program syz.3.268 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 165.792878][ T189] usbhid 1-1:0.0: can't add hid device: -71 [ 165.811812][ T189] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 165.841347][ T189] usb 1-1: USB disconnect, device number 10 [ 165.920563][ T6794] syzkaller0: entered promiscuous mode [ 165.932611][ T6794] syzkaller0: entered allmulticast mode [ 165.980285][ T949] glorious 0003:258A:0033.0013: unknown main item tag 0x0 [ 166.004090][ T949] glorious 0003:258A:0033.0013: unknown main item tag 0x0 [ 166.012228][ T5692] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 166.033027][ T949] glorious 0003:258A:0033.0013: unknown main item tag 0x0 [ 166.050698][ T949] glorious 0003:258A:0033.0013: unknown main item tag 0x0 [ 166.061037][ T5692] usb 3-1: Using ep0 maxpacket: 16 [ 166.070297][ T5692] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 166.080137][ T5677] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 166.105105][ T5692] usb 3-1: no configurations [ 166.112076][ T5677] [drm:udl_init] *ERROR* Selecting channel failed [ 166.118659][ T949] glorious 0003:258A:0033.0013: hidraw0: USB HID v0.04 Device [Glorious Model D] on usb-dummy_hcd.3-1/input0 [ 166.136144][ T5692] usb 3-1: can't read configurations, error -22 [ 166.188460][ T949] usb 4-1: USB disconnect, device number 16 [ 166.200649][ T5677] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 1 [ 166.225578][ T5677] [drm] Initialized udl on minor 1 [ 166.265675][ T5677] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 166.295218][ T5692] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 166.306569][ T5677] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 166.315233][ T5699] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 166.343087][ T5699] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 166.354358][ T5692] usb 3-1: Using ep0 maxpacket: 16 [ 166.362938][ T5677] usb 2-1: USB disconnect, device number 17 [ 166.374993][ T5692] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 166.391543][ T5699] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 166.412644][ T5692] usb 3-1: no configurations [ 166.432649][ T5692] usb 3-1: can't read configurations, error -22 [ 166.462917][ T5692] usb usb3-port1: unable to enumerate USB device [ 166.474659][ T6802] fido_id[6802]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 167.094955][ T189] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 167.259356][ T189] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 167.296211][ T189] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 167.314876][ T189] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 167.341954][ T189] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 167.364173][ T189] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 167.385104][ T5677] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 167.400480][ T189] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.420703][ T189] usb 4-1: config 0 descriptor?? [ 167.577362][ T5677] usb 2-1: unable to get BOS descriptor or descriptor too short [ 167.595822][ T5677] usb 2-1: not running at top speed; connect to a high speed hub [ 167.620327][ T5677] usb 2-1: New USB device found, idVendor=4971, idProduct=8024, bcdDevice=7c.2d [ 167.651750][ T5677] usb 2-1: config 127 has an invalid interface number: 148 but max is 0 [ 167.680756][ T5677] usb 2-1: config 127 has no interface number 0 [ 167.699657][ T5677] usb 2-1: config 127 interface 148 has no altsetting 0 [ 167.734545][ T5677] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.757150][ T5677] usb 2-1: Product: syz [ 167.769127][ T5677] usb 2-1: Manufacturer: syz [ 167.783700][ T5677] usb 2-1: SerialNumber: syz [ 167.862207][ T6807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.880016][ T189] usbhid 4-1:0.0: can't add hid device: -32 [ 167.899122][ T189] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 167.974721][ T6807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.032771][ T5692] hid-generic 000A:FFFFFF1D:0002.0014: hidraw0: HID v0.04 Device [syz0] on syz1 [ 168.064545][ T189] usb 4-1: USB disconnect, device number 17 [ 168.122763][ T6831] fuse: Bad value for 'fd' [ 168.310748][ T6840] netlink: 60 bytes leftover after parsing attributes in process `syz.1.275'. [ 168.515085][ T5703] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 168.528524][ T5701] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 168.716593][ T5703] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 168.744246][ T5703] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.779112][ T5701] usb 3-1: not running at top speed; connect to a high speed hub [ 168.800466][ T5703] usb 1-1: config 0 descriptor?? [ 168.808153][ T5701] usb 3-1: New USB device found, idVendor=0bb4, idProduct=0a1b, bcdDevice=cb.45 [ 168.863347][ T5701] usb 3-1: config 9 has an invalid interface number: 230 but max is 0 [ 168.892523][ T5701] usb 3-1: config 9 has no interface number 0 [ 168.921892][ T5701] usb 3-1: config 9 interface 230 has no altsetting 0 [ 168.957755][ T5677] usb-storage 2-1:127.148: USB Mass Storage device detected [ 168.971144][ T5701] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.987790][ T5701] usb 3-1: Product: syz [ 168.995645][ T5701] usb 3-1: Manufacturer: syz [ 169.011711][ T5701] usb 3-1: SerialNumber: syz [ 169.031125][ T5677] usb-storage 2-1:127.148: Quirks match for vid 4971 pid 8024: 20000000 [ 169.163366][ T5677] usb 2-1: USB disconnect, device number 18 [ 169.321276][ T6838] syzkaller0: entered promiscuous mode [ 169.344850][ T6838] syzkaller0: entered allmulticast mode [ 169.565920][ T5699] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 169.575682][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 169.739136][ T5703] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 169.747674][ T5699] usb 5-1: Using ep0 maxpacket: 32 [ 169.762454][ T5699] usb 5-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 169.787109][ T5699] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 169.800388][ T5703] [drm:udl_init] *ERROR* Selecting channel failed [ 169.818444][ T5699] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.841044][ T5699] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 169.879963][ T5699] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.927776][ T5699] usb 5-1: config 0 descriptor?? [ 169.961095][ T5703] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 1 [ 169.987811][ T5703] [drm] Initialized udl on minor 1 [ 170.016224][ T5703] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 170.045930][ T5703] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 170.072669][ T5703] usb 1-1: USB disconnect, device number 11 [ 170.084083][ T189] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 170.158555][ T30] audit: type=1326 audit(1787227058.915:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6852 comm="syz.4.286" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa91479e0d9 code=0x0 [ 170.261047][ T189] hid_parser_main: 143 callbacks suppressed [ 170.261069][ T189] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 170.303454][ T189] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 170.335345][ T189] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 170.364279][ T189] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 170.394609][ T189] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 170.410768][ T189] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 170.444648][ T189] hid-generic 0000:0000:0000.0015: hidraw1: HID v0.00 Device [] on [ 170.547091][ T6863] FAULT_INJECTION: forcing a failure. [ 170.547091][ T6863] name failslab, interval 1, probability 0, space 0, times 0 [ 170.592683][ T6863] CPU: 0 UID: 0 PID: 6863 Comm: syz.0.290 Not tainted syzkaller #0 PREEMPT(full) [ 170.592718][ T6863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 170.592732][ T6863] Call Trace: [ 170.592741][ T6863] [ 170.592750][ T6863] dump_stack_lvl+0xe8/0x150 [ 170.592788][ T6863] should_fail_ex+0x410/0x560 [ 170.592817][ T6863] should_failslab+0xa8/0x100 [ 170.592840][ T6863] kmem_cache_alloc_node_noprof+0xb3/0x620 [ 170.592870][ T6863] ? local_lock_release+0x9c/0x160 [ 170.592903][ T6863] ? __alloc_skb+0x1db/0x7a0 [ 170.592930][ T6863] ? __alloc_skb+0x1db/0x7a0 [ 170.592965][ T6863] __alloc_skb+0x1db/0x7a0 [ 170.592999][ T6863] netlink_ack+0x136/0xb30 [ 170.593031][ T6863] ? __pfx_genl_rcv_msg+0x10/0x10 [ 170.593064][ T6863] ? __pfx_ref_tracker_free+0x10/0x10 [ 170.593088][ T6863] ? __asan_memcpy+0x40/0x70 [ 170.593124][ T6863] netlink_rcv_skb+0x2a4/0x4a0 [ 170.593160][ T6863] ? __pfx_genl_rcv_msg+0x10/0x10 [ 170.593188][ T6863] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 170.593247][ T6863] ? down_read+0x2be/0x330 [ 170.593275][ T6863] genl_rcv+0x28/0x40 [ 170.593301][ T6863] netlink_unicast+0x7bd/0x940 [ 170.593343][ T6863] netlink_sendmsg+0x813/0xb40 [ 170.593376][ T6863] ? __pfx_netlink_sendmsg+0x10/0x10 [ 170.593402][ T6863] ? aa_sock_msg_perm+0xf6/0x1c0 [ 170.593434][ T6863] ? __pfx_netlink_sendmsg+0x10/0x10 [ 170.593455][ T6863] sock_sendmsg_nosec+0x13a/0x180 [ 170.593485][ T6863] ____sys_sendmsg+0x54e/0x850 [ 170.593526][ T6863] ? __pfx_____sys_sendmsg+0x10/0x10 [ 170.593570][ T6863] ? import_iovec+0x73/0xa0 [ 170.593600][ T6863] ___sys_sendmsg+0x2a5/0x360 [ 170.593634][ T6863] ? __lock_acquire+0x683/0x2cf0 [ 170.593670][ T6863] ? __pfx____sys_sendmsg+0x10/0x10 [ 170.593741][ T6863] ? __fget_files+0x2a/0x420 [ 170.593763][ T6863] ? __fget_files+0x3a2/0x420 [ 170.593795][ T6863] __x64_sys_sendmsg+0x1b1/0x290 [ 170.593834][ T6863] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 170.593892][ T6863] do_syscall_64+0x166/0x520 [ 170.593913][ T6863] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.593936][ T6863] ? clear_bhb_loop+0x70/0xc0 [ 170.593963][ T6863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.593986][ T6863] RIP: 0033:0x7fd211f9e0d9 [ 170.594007][ T6863] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.594026][ T6863] RSP: 002b:00007fd212dd9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 170.594049][ T6863] RAX: ffffffffffffffda RBX: 00007fd212225fa0 RCX: 00007fd211f9e0d9 [ 170.594066][ T6863] RDX: 0000000000000000 RSI: 0000200000001540 RDI: 0000000000000003 [ 170.594080][ T6863] RBP: 00007fd212dd9090 R08: 0000000000000000 R09: 0000000000000000 [ 170.594095][ T6863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.594107][ T6863] R13: 00007fd212226038 R14: 00007fd212225fa0 R15: 00007fd21234fa48 [ 170.594140][ T6863] [ 171.230208][ T5701] usb 3-1: USB disconnect, device number 22 [ 171.295555][ T6869] netlink: 'syz.0.292': attribute type 3 has an invalid length. [ 171.326780][ T6869] netlink: 666 bytes leftover after parsing attributes in process `syz.0.292'. [ 171.371984][ T5699] usbhid 5-1:0.0: can't add hid device: -71 [ 171.385081][ T5699] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 171.397268][ T6864] fido_id[6864]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 171.399493][ T6873] binder: 6871:6873 ioctl 4018620d 0 returned -22 [ 171.427454][ T5699] usb 5-1: USB disconnect, device number 15 [ 171.445037][ T6870] netlink: 20 bytes leftover after parsing attributes in process `syz.3.291'. [ 171.479431][ T6870] netlink: 20 bytes leftover after parsing attributes in process `syz.3.291'. [ 171.492152][ T6873] binder: 6871:6873 ioctl 8018456f 0 returned -22 [ 171.520024][ T6873] binder: 6871:6873 ioctl c0306201 2000000001c0 returned -22 [ 171.734892][ T949] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 171.896048][ T949] usb 4-1: Using ep0 maxpacket: 32 [ 171.905914][ T949] usb 4-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 171.920659][ T949] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 186, changing to 7 [ 171.961580][ T949] usb 4-1: string descriptor 0 read error: -22 [ 171.975322][ T949] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.064963][ T189] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 172.224914][ T189] usb 3-1: Using ep0 maxpacket: 32 [ 172.243171][ T189] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 172.256083][ T5677] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 172.265894][ T189] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.291383][ T189] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.301875][ T5701] hid-generic 000A:FFFFFF1D:0002.0016: unknown main item tag 0x0 [ 172.317537][ T5701] hid-generic 000A:FFFFFF1D:0002.0016: unknown main item tag 0x0 [ 172.327867][ T189] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.344967][ T5701] hid-generic 000A:FFFFFF1D:0002.0016: unknown main item tag 0x0 [ 172.357016][ T189] usb 3-1: config 0 descriptor?? [ 172.374435][ T5701] hid-generic 000A:FFFFFF1D:0002.0016: unknown main item tag 0x0 [ 172.394275][ T189] hub 3-1:0.0: USB hub found [ 172.410049][ T5701] hid-generic 000A:FFFFFF1D:0002.0016: hidraw0: HID v0.04 Device [syz0] on syz1 [ 172.438871][ T5677] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 172.482804][ T5677] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.497360][ T949] usb 4-1: USB disconnect, device number 18 [ 172.536027][ T5677] usb 1-1: config 0 descriptor?? [ 172.598521][ T189] hub 3-1:0.0: 1 port detected [ 172.795450][ T5701] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 172.930525][ T6898] bridge0: port 1(batadv1) entered blocking state [ 172.937249][ T6898] bridge0: port 1(batadv1) entered forwarding state [ 172.984739][ T5701] usb 2-1: not running at top speed; connect to a high speed hub [ 172.994210][ T6898] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 173.002105][ T5701] usb 2-1: New USB device found, idVendor=0bb4, idProduct=0a1b, bcdDevice=cb.45 [ 173.026795][ T5701] usb 2-1: config 9 has an invalid interface number: 230 but max is 0 [ 173.039206][ T5701] usb 2-1: config 9 has no interface number 0 [ 173.049181][ T5701] usb 2-1: config 9 interface 230 has no altsetting 0 [ 173.061542][ T5701] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.093732][ T5701] usb 2-1: Product: syz [ 173.098360][ T5701] usb 2-1: Manufacturer: syz [ 173.107849][ T5701] usb 2-1: SerialNumber: syz [ 173.160917][ T6889] syzkaller0: entered promiscuous mode [ 173.167219][ T6889] syzkaller0: entered allmulticast mode [ 173.195161][ T5678] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 173.281194][ T6910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.309907][ T6910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.336245][ T6910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.361874][ T6910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.400627][ T5678] usb 5-1: unable to get BOS descriptor or descriptor too short [ 173.410226][ T5678] usb 5-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 173.435359][ T5678] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 173.456449][ T5678] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 173.477834][ T5678] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 173.497195][ T5678] usb 5-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 173.523181][ T5678] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.540595][ T5678] usb 5-1: Product: syz [ 173.546494][ T5678] usb 5-1: Manufacturer: syz [ 173.553524][ T5678] usb 5-1: SerialNumber: syz [ 174.166331][ T5704] hub 3-1:0.0: hub_ext_port_status failed (err = -32) [ 174.906459][ T189] usb 3-1: USB disconnect, device number 23 [ 175.104323][ T5678] usb 5-1: USB disconnect, device number 16 [ 175.553206][ T5701] usb 2-1: USB disconnect, device number 19 [ 176.103692][ T6944] netlink: 32 bytes leftover after parsing attributes in process `syz.2.311'. [ 177.085974][ T30] audit: type=1326 audit(1787227065.845:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6952 comm="syz.3.314" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f313e79e0d9 code=0x0 [ 177.130856][ T6953] nvme nvme0: rdma connection establishment failed (-104) [ 177.199055][ T5701] hid_parser_main: 104 callbacks suppressed [ 177.199079][ T5701] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 177.235131][ T5701] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 177.256802][ T5701] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 177.278667][ T5701] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 177.288129][ T5701] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 177.318107][ T5701] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 177.354318][ T5701] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [] on [ 177.845916][ T5677] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 177.881433][ T5677] [drm:udl_init] *ERROR* Selecting channel failed [ 177.941941][ T5677] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 1 [ 177.965026][ T5677] [drm] Initialized udl on minor 1 [ 177.971520][ T5677] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 178.026764][ T5677] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 178.071054][ T24] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 178.095236][ T24] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 178.376639][ T5678] usb 1-1: USB disconnect, device number 12 [ 178.466680][ T30] audit: type=1326 audit(1787227067.225:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6958 comm="syz.1.315" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308b19e0d9 code=0x7ffc0000 [ 178.565710][ T30] audit: type=1326 audit(1787227067.225:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6958 comm="syz.1.315" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308b19e0d9 code=0x7ffc0000 [ 178.620244][ T30] audit: type=1326 audit(1787227067.245:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6958 comm="syz.1.315" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f308b19e0d9 code=0x7ffc0000 [ 178.728545][ T30] audit: type=1326 audit(1787227067.245:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6958 comm="syz.1.315" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308b19e0d9 code=0x7ffc0000 [ 178.796409][ T5677] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 178.807909][ T30] audit: type=1326 audit(1787227067.245:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6958 comm="syz.1.315" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f308b19e0d9 code=0x7ffc0000 [ 178.866958][ T30] audit: type=1326 audit(1787227067.245:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6958 comm="syz.1.315" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f308b15e90e code=0x7ffc0000 [ 178.898046][ T30] audit: type=1326 audit(1787227067.245:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6958 comm="syz.1.315" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f308b19dd6b code=0x7ffc0000 [ 178.930424][ T30] audit: type=1326 audit(1787227067.245:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6958 comm="syz.1.315" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f308b19dd6b code=0x7ffc0000 [ 179.007803][ T5677] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 179.017353][ T30] audit: type=1326 audit(1787227067.275:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6958 comm="syz.1.315" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f308b19dd6b code=0x7ffc0000 [ 179.042183][ T5677] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.042216][ T5677] usb 2-1: Product: syz [ 179.042233][ T5677] usb 2-1: Manufacturer: syz [ 179.042249][ T5677] usb 2-1: SerialNumber: syz [ 179.142902][ T5678] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 179.219000][ T6971] loop9: detected capacity change from 0 to 7 [ 179.236534][ T6971] Dev loop9: unable to read RDB block 7 [ 179.242314][ T6971] loop9: AHDI p1 p2 p3 [ 179.247199][ T6971] loop9: partition table partially beyond EOD, truncated [ 179.263235][ T6971] loop9: p1 start 1920169572 is beyond EOD, truncated [ 179.281482][ T6971] loop9: p2 start 1851744889 is beyond EOD, truncated [ 179.320842][ T5678] usb 5-1: Using ep0 maxpacket: 32 [ 179.327312][ T5678] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 179.343082][ T5678] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.356755][ T5678] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.383199][ T5678] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.444344][ T5678] usb 5-1: config 0 descriptor?? [ 179.465544][ T5678] hub 5-1:0.0: USB hub found [ 179.552993][ T6976] input: syz0 as /devices/virtual/input/input9 [ 179.661378][ T5678] hub 5-1:0.0: 1 port detected [ 179.913388][ T5701] hid-generic 000A:FFFFFF1D:0002.0018: unknown main item tag 0x0 [ 179.923460][ T5701] hid-generic 000A:FFFFFF1D:0002.0018: unknown main item tag 0x0 [ 179.932888][ T5701] hid-generic 000A:FFFFFF1D:0002.0018: unknown main item tag 0x0 [ 179.941364][ T5701] hid-generic 000A:FFFFFF1D:0002.0018: unknown main item tag 0x0 [ 179.967806][ T5701] hid-generic 000A:FFFFFF1D:0002.0018: hidraw0: HID v0.04 Device [syz0] on syz1 [ 180.140143][ T6985] vlan0: left promiscuous mode [ 180.330983][ T6992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.346801][ T949] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 180.360548][ T6992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.384195][ T6992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.413682][ T6992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.511178][ T949] usb 1-1: not running at top speed; connect to a high speed hub [ 180.527683][ T5704] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 180.543405][ T949] usb 1-1: New USB device found, idVendor=0bb4, idProduct=0a1b, bcdDevice=cb.45 [ 180.597530][ T949] usb 1-1: config 9 has an invalid interface number: 230 but max is 0 [ 180.642948][ T949] usb 1-1: config 9 has no interface number 0 [ 180.665572][ T949] usb 1-1: config 9 interface 230 has no altsetting 0 [ 180.711763][ T949] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.731494][ T5704] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 180.738037][ T949] usb 1-1: Product: syz [ 180.760137][ T949] usb 1-1: Manufacturer: syz [ 180.768400][ T5704] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.800379][ T949] usb 1-1: SerialNumber: syz [ 180.838880][ T5704] usb 4-1: config 0 descriptor?? [ 181.139822][ T5677] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 181.192567][ T5677] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 181.210434][ T5678] hub 5-1:0.0: hub_ext_port_status failed (err = -32) [ 181.263721][ T5677] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 181.309442][ T5677] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 181.344754][ T6991] syzkaller0: entered promiscuous mode [ 181.369836][ T7009] netlink: 'syz.2.330': attribute type 3 has an invalid length. [ 181.379949][ T6991] syzkaller0: entered allmulticast mode [ 181.426742][ T5677] usb 2-1: USB disconnect, device number 20 [ 181.795889][ T5704] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 181.836626][ T5704] [drm:udl_init] *ERROR* Selecting channel failed [ 181.933869][ T5704] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1 [ 181.980168][ T5704] [drm] Initialized udl on minor 1 [ 182.013960][ T5704] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 182.044122][ T5704] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 182.053243][ T189] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 182.075193][ T5677] usb 5-1: USB disconnect, device number 17 [ 182.086241][ T189] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 182.096818][ T5704] usb 4-1: USB disconnect, device number 19 [ 182.129417][ T189] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 182.548994][ T5677] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 182.725757][ T5677] usb 5-1: Using ep0 maxpacket: 8 [ 182.744624][ T5677] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0069, bcdDevice=6e.55 [ 182.766701][ T5677] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.785859][ T5677] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 182.807941][ T5677] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.826452][ T5677] usb 5-1: Product: syz [ 182.834939][ T5677] usb 5-1: Manufacturer: syz [ 182.846835][ T5677] usb 5-1: SerialNumber: syz [ 182.918480][ T949] usb 1-1: USB disconnect, device number 13 [ 182.925682][ T5677] usb 5-1: config 0 descriptor?? [ 182.943314][ T7039] netlink: 16 bytes leftover after parsing attributes in process `syz.2.339'. [ 183.170486][ T5704] usb 5-1: USB disconnect, device number 18 [ 183.229922][ T7046] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 183.325006][ T5677] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 183.415484][ T7049] input: syz0 as /devices/virtual/input/input10 [ 183.485663][ T5677] usb 3-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 183.514224][ T5677] usb 3-1: config 0 interface 0 has no altsetting 0 [ 183.524570][ T7052] IPv6: Can't replace route, no match found [ 183.527204][ T5677] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.549601][ T5677] usb 3-1: config 0 descriptor?? [ 183.618510][ T7052] input: syz1 as /devices/virtual/input/input11 [ 183.973004][ T7057] netlink: 132 bytes leftover after parsing attributes in process `syz.4.345'. [ 184.125526][ T24] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 184.328311][ T24] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 184.372354][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.400831][ T24] usb 2-1: config 0 descriptor?? [ 184.470668][ T7074] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 184.505962][ T7073] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 184.589745][ T5677] usb 3-1: string descriptor 0 read error: -71 [ 184.632265][ T5677] pwc: Philips SPC 900NC USB webcam detected. [ 184.671535][ T5677] pwc: Failed to set LED on/off time (-71) [ 184.691510][ T5677] pwc: send_video_command error -71 [ 184.714910][ T5677] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 184.753684][ T5677] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 184.786396][ T7060] syzkaller0: entered promiscuous mode [ 184.801995][ T5677] usb 3-1: USB disconnect, device number 24 [ 184.821244][ T7060] syzkaller0: entered allmulticast mode [ 185.040837][ T24] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 185.065268][ T24] [drm:udl_init] *ERROR* Selecting channel failed [ 185.107335][ T24] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 1 [ 185.134566][ T24] [drm] Initialized udl on minor 1 [ 185.161816][ T24] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 185.212889][ T24] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 185.220341][ T5677] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 185.292024][ T5677] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 185.313595][ T24] usb 2-1: USB disconnect, device number 21 [ 185.339956][ T5677] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 185.597659][ T7090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.352'. [ 185.760023][ T7090] netlink: 'syz.0.352': attribute type 10 has an invalid length. [ 185.822257][ T7092] netlink: 'syz.0.352': attribute type 10 has an invalid length. [ 185.913207][ T7090] bond0: (slave netdevsim1): Releasing backup interface [ 186.019352][ T7090] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 186.049978][ T7090] team0: Port device netdevsim1 added [ 186.129065][ T7092] team0: Port device netdevsim1 removed [ 186.154683][ T7092] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 186.402155][ T7092] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 186.703154][ T5704] hid_parser_main: 104 callbacks suppressed [ 186.704001][ T5704] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 186.850061][ T5704] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz1] on syz0 [ 188.079861][ T7115] x_tables: unsorted entry at hook 2 [ 188.137564][ T24] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 188.318803][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 188.332809][ T24] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 188.349209][ T24] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 188.359676][ T24] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 188.369155][ T949] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 188.381942][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 188.392494][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 188.415402][ T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 188.443729][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 188.467419][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.483076][ T24] usb 4-1: config 0 descriptor?? [ 188.540304][ T949] usb 2-1: unable to get BOS descriptor or descriptor too short [ 188.559508][ T949] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 188.617865][ T949] usb 2-1: too many configurations: 11, using maximum allowed: 8 [ 188.652676][ T949] usb 2-1: config index 0 descriptor too short (expected 8713, got 110) [ 188.666479][ T5704] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 188.690701][ T949] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 188.728494][ T24] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 20 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 188.741174][ T949] usb 2-1: can't read configurations, error -22 [ 188.814589][ T24] usb 4-1: USB disconnect, device number 20 [ 188.835150][ T5704] usb 1-1: Using ep0 maxpacket: 8 [ 188.856065][ T5704] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 188.877825][ T24] usblp0: removed [ 188.890200][ T949] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 188.901850][ T5704] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 188.923930][ T5704] usb 1-1: config 0 has no interface number 0 [ 188.941050][ T7123] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 188.959552][ T5704] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 188.990151][ T5704] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 189.016821][ T5704] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 189.040917][ T5704] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 189.084969][ T5704] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.097449][ T949] usb 2-1: unable to get BOS descriptor or descriptor too short [ 189.114687][ T5704] usb 1-1: config 0 descriptor?? [ 189.120544][ T949] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 189.140907][ T949] usb 2-1: too many configurations: 11, using maximum allowed: 8 [ 189.156730][ T949] usb 2-1: config index 0 descriptor too short (expected 8713, got 110) [ 189.163688][ T5704] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 189.180815][ T949] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 189.193720][ T949] usb 2-1: can't read configurations, error -22 [ 189.207668][ T949] usb usb2-port1: attempt power cycle [ 189.265322][ T24] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 189.447322][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 189.472907][ T24] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 189.504069][ T24] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 189.531181][ T24] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 189.550464][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 189.561042][ T949] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 189.569366][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 189.581356][ T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 189.594316][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 189.616369][ T949] usb 2-1: unable to get BOS descriptor or descriptor too short [ 189.624501][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.645072][ T949] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 189.664981][ T24] usb 4-1: config 0 descriptor?? [ 189.671244][ T949] usb 2-1: too many configurations: 11, using maximum allowed: 8 [ 189.694252][ T949] usb 2-1: config index 0 descriptor too short (expected 8713, got 110) [ 189.727425][ T949] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 189.762948][ T949] usb 2-1: can't read configurations, error -22 [ 189.907142][ T949] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 189.918059][ T24] usblp 4-1:0.0: usblp1: USB Bidirectional printer dev 21 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 189.958627][ T949] usb 2-1: unable to get BOS descriptor or descriptor too short [ 189.990312][ T949] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 190.018067][ T949] usb 2-1: too many configurations: 11, using maximum allowed: 8 [ 190.039518][ T949] usb 2-1: config index 0 descriptor too short (expected 8713, got 110) [ 190.048095][ T5677] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 190.068897][ T949] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 0 [ 190.104914][ T949] usb 2-1: can't read configurations, error -22 [ 190.113832][ T949] usb usb2-port1: unable to enumerate USB device [ 190.246553][ T7139] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 190.265858][ T5677] usb 3-1: unable to get BOS descriptor or descriptor too short [ 190.307158][ T5677] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 190.342133][ T5677] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 190.358864][ T5677] usb 3-1: can't read configurations, error -71 [ 191.021999][ T7147] FAULT_INJECTION: forcing a failure. [ 191.021999][ T7147] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.036391][ T7147] CPU: 1 UID: 0 PID: 7147 Comm: syz.4.370 Not tainted syzkaller #0 PREEMPT(full) [ 191.036430][ T7147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 191.036445][ T7147] Call Trace: [ 191.036454][ T7147] [ 191.036462][ T7147] dump_stack_lvl+0xe8/0x150 [ 191.036499][ T7147] should_fail_ex+0x410/0x560 [ 191.036529][ T7147] _copy_from_user+0x2d/0xb0 [ 191.036558][ T7147] ___sys_sendmsg+0x1c6/0x360 [ 191.036593][ T7147] ? __lock_acquire+0x683/0x2cf0 [ 191.036628][ T7147] ? __pfx____sys_sendmsg+0x10/0x10 [ 191.036701][ T7147] ? __fget_files+0x2a/0x420 [ 191.036721][ T7147] ? __fget_files+0x3a2/0x420 [ 191.036752][ T7147] __x64_sys_sendmsg+0x1b1/0x290 [ 191.036789][ T7147] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 191.036843][ T7147] do_syscall_64+0x166/0x520 [ 191.036863][ T7147] ? trace_irq_disable+0x3b/0x140 [ 191.036891][ T7147] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.036913][ T7147] ? clear_bhb_loop+0x70/0xc0 [ 191.036940][ T7147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.036962][ T7147] RIP: 0033:0x7fa91479e0d9 [ 191.036982][ T7147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.037001][ T7147] RSP: 002b:00007fa915726028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 191.037023][ T7147] RAX: ffffffffffffffda RBX: 00007fa914a25fa0 RCX: 00007fa91479e0d9 [ 191.037039][ T7147] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 191.037059][ T7147] RBP: 00007fa915726090 R08: 0000000000000000 R09: 0000000000000000 [ 191.037072][ T7147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.037085][ T7147] R13: 00007fa914a26038 R14: 00007fa914a25fa0 R15: 00007fa914b4fa48 [ 191.037124][ T7147] [ 191.042559][ T7146] netlink: 16 bytes leftover after parsing attributes in process `syz.2.369'. [ 191.236661][ T7149] netlink: 'syz.2.369': attribute type 10 has an invalid length. [ 191.424654][ T5677] usb 1-1: USB disconnect, device number 14 [ 191.484349][ T5677] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 191.685501][ T5699] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 191.865699][ T5699] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 191.884300][ T189] usb 4-1: USB disconnect, device number 21 [ 191.903213][ T5699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.915672][ T5699] usb 2-1: Product: syz [ 191.926976][ T189] usblp1: removed [ 191.932023][ T5699] usb 2-1: Manufacturer: syz [ 191.965074][ T5704] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 191.968177][ T5699] usb 2-1: SerialNumber: syz [ 192.004127][ T5699] usb 2-1: config 0 descriptor?? [ 192.040317][ T7169] netlink: 4 bytes leftover after parsing attributes in process `syz.4.375'. [ 192.094290][ T7169] netlink: 'syz.4.375': attribute type 10 has an invalid length. [ 192.114919][ T5704] usb 1-1: device descriptor read/64, error -71 [ 192.133866][ T7169] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 192.180168][ T7174] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 192.187873][ T7175] netlink: 'syz.4.375': attribute type 10 has an invalid length. [ 192.196299][ T7169] team0: Port device netdevsim1 added [ 192.237943][ T7175] team0: Port device netdevsim1 removed [ 192.270640][ T7175] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 192.298353][ T7175] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 192.322015][ T7153] netlink: 44 bytes leftover after parsing attributes in process `syz.1.372'. [ 192.364885][ T5704] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 192.504985][ T5704] usb 1-1: device descriptor read/64, error -71 [ 192.581397][ T7177] program syz.1.372 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 192.641065][ T5704] usb usb1-port1: attempt power cycle [ 192.662799][ T5699] cx82310_eth 2-1:0.0: probe with driver cx82310_eth failed with error -22 [ 192.703243][ T5699] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 192.741021][ T5699] usb 2-1: USB disconnect, device number 26 [ 193.015052][ T5704] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 193.066786][ T5704] usb 1-1: device descriptor read/8, error -71 [ 193.129315][ T7185] bridge_slave_0: left allmulticast mode [ 193.149533][ T7185] bridge_slave_0: left promiscuous mode [ 193.178383][ T7185] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.214426][ T7185] bridge_slave_1: left allmulticast mode [ 193.221847][ T7185] bridge_slave_1: left promiscuous mode [ 193.230263][ T7185] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.262930][ T7185] bond0: (slave bond_slave_0): Releasing backup interface [ 193.290847][ T7185] bond0: (slave bond_slave_1): Releasing backup interface [ 193.325208][ T5704] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 193.333835][ T7185] team0: Port device team_slave_0 removed [ 193.355772][ T5704] usb 1-1: device descriptor read/8, error -71 [ 193.391013][ T7185] team0: Port device team_slave_1 removed [ 193.441173][ T7185] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.453494][ T7185] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.467276][ T7185] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.475338][ T5704] usb usb1-port1: unable to enumerate USB device [ 193.540762][ T7185] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.591718][ T7185] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 193.783832][ T7191] netlink: 4 bytes leftover after parsing attributes in process `syz.1.381'. [ 193.851297][ T7191] netlink: 'syz.1.381': attribute type 10 has an invalid length. [ 193.926201][ T7191] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 193.984391][ T7191] team0: Port device netdevsim1 added [ 194.344972][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.351394][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.551277][ T7201] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.966677][ T7201] loop8: detected capacity change from 0 to 7 [ 195.236640][ T7201] Dev loop8: unable to read RDB block 7 [ 195.336369][ T7201] loop8: unable to read partition table [ 195.386644][ T7201] loop8: partition table beyond EOD, truncated [ 195.393083][ T7201] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 196.013366][ T7215] netlink: 24 bytes leftover after parsing attributes in process `syz.0.389'. [ 196.858686][ T7220] binder: 7219:7220 ioctl c0306201 200000000080 returned -14 [ 196.874274][ T7226] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 196.903920][ T7220] binder: 7219:7220 ioctl c0306201 2000000003c0 returned -14 [ 196.921763][ T7226] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 196.929899][ T7223] netlink: 20 bytes leftover after parsing attributes in process `syz.0.391'. [ 197.194897][ T24] usb 2-1: new low-speed USB device number 27 using dummy_hcd [ 197.215673][ T7238] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 197.337381][ T7243] mmap: syz.3.398 (7243): VmData 37384192 exceed data ulimit 9. Update limits or use boot option ignore_rlimit_data. [ 197.375259][ T24] usb 2-1: Invalid ep0 maxpacket: 64 [ 197.418920][ T7243] kvm: requested 73752 ns i8254 timer period limited to 200000 ns [ 197.431227][ T7247] netlink: 16 bytes leftover after parsing attributes in process `syz.0.399'. [ 197.654875][ T24] usb 2-1: new low-speed USB device number 28 using dummy_hcd [ 197.671037][ T7248] syzkaller1: entered promiscuous mode [ 197.684849][ T7248] syzkaller1: entered allmulticast mode [ 197.815042][ T24] usb 2-1: Invalid ep0 maxpacket: 64 [ 197.825191][ T24] usb usb2-port1: attempt power cycle [ 198.074933][ T5701] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 198.197242][ T24] usb 2-1: new low-speed USB device number 29 using dummy_hcd [ 198.248090][ T24] usb 2-1: Invalid ep0 maxpacket: 64 [ 198.256880][ T5701] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 198.309790][ T5701] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 198.345372][ T5701] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 198.386985][ T5701] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.392860][ T24] usb 2-1: new low-speed USB device number 30 using dummy_hcd [ 198.411352][ T5701] usb 4-1: Product: syz [ 198.426029][ T5701] usb 4-1: Manufacturer: syz [ 198.441187][ T5701] usb 4-1: SerialNumber: syz [ 198.456036][ T24] usb 2-1: Invalid ep0 maxpacket: 64 [ 198.461817][ T24] usb usb2-port1: unable to enumerate USB device [ 198.746164][ T5701] usb 4-1: USB disconnect, device number 22 [ 198.979483][ T30] kauditd_printk_skb: 101 callbacks suppressed [ 198.979523][ T30] audit: type=1326 audit(1787227087.735:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7273 comm="syz.0.410" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd211f9e0d9 code=0x0 [ 199.056682][ T30] audit: type=1800 audit(1787227087.805:531): pid=7275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.410" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 199.132206][ T7278] FAULT_INJECTION: forcing a failure. [ 199.132206][ T7278] name failslab, interval 1, probability 0, space 0, times 0 [ 199.151314][ T7275] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 199.164749][ T7278] CPU: 1 UID: 0 PID: 7278 Comm: syz.4.411 Not tainted syzkaller #0 PREEMPT(full) [ 199.164782][ T7278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 199.164795][ T7278] Call Trace: [ 199.164805][ T7278] [ 199.164813][ T7278] dump_stack_lvl+0xe8/0x150 [ 199.164851][ T7278] should_fail_ex+0x410/0x560 [ 199.164881][ T7278] should_failslab+0xa8/0x100 [ 199.164906][ T7278] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 199.164937][ T7278] ? xfrm_state_alloc+0x24/0x2f0 [ 199.164965][ T7278] ? xfrm_state_alloc+0x24/0x2f0 [ 199.165002][ T7278] xfrm_state_alloc+0x24/0x2f0 [ 199.165033][ T7278] xfrm_add_sa+0x15a9/0x40d0 [ 199.165067][ T7278] ? __pfx_xfrm_add_sa+0x10/0x10 [ 199.165088][ T7278] ? apparmor_capable+0x126/0x170 [ 199.165126][ T7278] ? __nla_parse+0x40/0x60 [ 199.165165][ T7278] xfrm_user_rcv_msg+0x7a8/0xf30 [ 199.165195][ T7278] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 199.165251][ T7278] ? __mutex_trylock_common+0x15f/0x270 [ 199.165279][ T7278] ? __pfx___mutex_trylock_common+0x10/0x10 [ 199.165307][ T7278] ? rcu_is_watching+0x16/0xb0 [ 199.165329][ T7278] ? trace_contention_end+0x3d/0x140 [ 199.165362][ T7278] netlink_rcv_skb+0x226/0x4a0 [ 199.165399][ T7278] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 199.165425][ T7278] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 199.165477][ T7278] ? netlink_deliver_tap+0x2e/0x1b0 [ 199.165498][ T7278] ? netlink_deliver_tap+0x2e/0x1b0 [ 199.165522][ T7278] xfrm_netlink_rcv+0x79/0x90 [ 199.165547][ T7278] netlink_unicast+0x7bd/0x940 [ 199.165590][ T7278] netlink_sendmsg+0x813/0xb40 [ 199.165622][ T7278] ? __pfx_netlink_sendmsg+0x10/0x10 [ 199.165656][ T7278] ? aa_sock_msg_perm+0xf6/0x1c0 [ 199.165689][ T7278] ? __pfx_netlink_sendmsg+0x10/0x10 [ 199.165710][ T7278] sock_sendmsg_nosec+0x13a/0x180 [ 199.165740][ T7278] ____sys_sendmsg+0x54e/0x850 [ 199.165781][ T7278] ? __pfx_____sys_sendmsg+0x10/0x10 [ 199.165825][ T7278] ? import_iovec+0x73/0xa0 [ 199.165856][ T7278] ___sys_sendmsg+0x2a5/0x360 [ 199.165889][ T7278] ? __lock_acquire+0x683/0x2cf0 [ 199.165925][ T7278] ? __pfx____sys_sendmsg+0x10/0x10 [ 199.165997][ T7278] ? __fget_files+0x2a/0x420 [ 199.166018][ T7278] ? __fget_files+0x3a2/0x420 [ 199.166049][ T7278] __x64_sys_sendmsg+0x1b1/0x290 [ 199.166088][ T7278] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 199.166145][ T7278] do_syscall_64+0x166/0x520 [ 199.166166][ T7278] ? trace_irq_disable+0x3b/0x140 [ 199.166194][ T7278] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.166218][ T7278] ? clear_bhb_loop+0x70/0xc0 [ 199.166245][ T7278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.166268][ T7278] RIP: 0033:0x7fa91479e0d9 [ 199.166289][ T7278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 199.166309][ T7278] RSP: 002b:00007fa915726028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 199.166332][ T7278] RAX: ffffffffffffffda RBX: 00007fa914a25fa0 RCX: 00007fa91479e0d9 [ 199.166348][ T7278] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 199.166361][ T7278] RBP: 00007fa915726090 R08: 0000000000000000 R09: 0000000000000000 [ 199.166375][ T7278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.166388][ T7278] R13: 00007fa914a26038 R14: 00007fa914a25fa0 R15: 00007fa914b4fa48 [ 199.166423][ T7278] [ 199.621525][ T7280] IPv6: Can't replace route, no match found [ 199.657910][ T7275] xt_NFQUEUE: number of total queues is 0 [ 199.680093][ T7280] input: syz1 as /devices/virtual/input/input12 [ 199.777512][ T7283] netlink: 8 bytes leftover after parsing attributes in process `syz.3.413'. [ 199.809575][ T7283] netlink: 4 bytes leftover after parsing attributes in process `syz.3.413'. [ 199.869440][ T7283] netlink: 8 bytes leftover after parsing attributes in process `syz.3.413'. [ 199.878412][ T7283] netlink: 4 bytes leftover after parsing attributes in process `syz.3.413'. [ 200.334904][ T5699] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 200.349456][ T5678] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 200.375025][ T7303] input: syz0 as /devices/virtual/input/input13 [ 200.504979][ T5678] usb 3-1: Using ep0 maxpacket: 16 [ 200.511197][ T5678] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 200.525375][ T5678] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.534110][ T5678] usb 3-1: Product: syz [ 200.534113][ T5699] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 200.551810][ T5699] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.564378][ T5678] usb 3-1: Manufacturer: syz [ 200.573300][ T5699] usb 4-1: config 0 descriptor?? [ 200.585799][ T5678] usb 3-1: SerialNumber: syz [ 200.616394][ T5678] r8152-cfgselector 3-1: Unknown version 0x0000 [ 200.624019][ T5678] r8152-cfgselector 3-1: config 0 descriptor?? [ 200.787763][ T7312] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 201.207567][ T7316] syzkaller0: entered promiscuous mode [ 201.247045][ T7316] syzkaller0: entered allmulticast mode [ 201.262014][ T5678] r8152-cfgselector 3-1: USB disconnect, device number 27 [ 201.394329][ T5701] IPVS: starting estimator thread 0... [ 201.429737][ T7314] netlink: 'syz.1.425': attribute type 2 has an invalid length. [ 201.443293][ T5699] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 201.474196][ T5699] [drm:udl_init] *ERROR* Selecting channel failed [ 201.515445][ T7324] IPVS: using max 38 ests per chain, 91200 per kthread [ 201.546328][ T5699] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1 [ 201.574907][ T5699] [drm] Initialized udl on minor 1 [ 201.599270][ T5699] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 201.636204][ T5699] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 201.668464][ T5699] usb 4-1: USB disconnect, device number 23 [ 201.689386][ T949] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 201.710479][ T949] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 202.309281][ T7354] input: syz0 as /devices/virtual/input/input14 [ 202.337030][ T7343] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 202.559619][ T7362] netlink: 4 bytes leftover after parsing attributes in process `syz.3.434'. [ 202.607050][ T7362] netlink: 'syz.3.434': attribute type 10 has an invalid length. [ 202.684575][ T5613] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 202.834969][ T5699] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 203.055470][ T5699] usb 5-1: Using ep0 maxpacket: 32 [ 203.069952][ T5699] usb 5-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 203.096834][ T5699] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 203.120124][ T5699] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.149751][ T5699] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 203.176743][ T5699] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.197852][ T5699] usb 5-1: config 0 descriptor?? [ 203.264954][ T5678] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 203.435115][ T5678] usb 2-1: Using ep0 maxpacket: 32 [ 203.450527][ T5678] usb 2-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 203.478412][ T5678] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 203.497644][ T30] audit: type=1326 audit(1787227092.255:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7363 comm="syz.4.437" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa91479e0d9 code=0x0 [ 203.499928][ T5678] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.594152][ T5678] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 203.629474][ T5677] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 203.656343][ T5677] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 203.691225][ T5677] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 203.711681][ T5678] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.711685][ T5677] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 203.736869][ T7364] nvme nvme0: rdma connection establishment failed (-104) [ 203.756118][ T5677] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 203.766607][ T5677] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 203.819157][ T5678] usb 2-1: config 0 descriptor?? [ 203.849924][ T5677] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [] on [ 204.090897][ T30] audit: type=1326 audit(1787227092.845:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7375 comm="syz.1.441" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f308b19e0d9 code=0x0 [ 204.304613][ T5704] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 204.344100][ T5704] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 204.383035][ T5704] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 204.422239][ T5704] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 204.479901][ T5704] hid-generic 0000:0000:0000.001B: hidraw1: HID v0.00 Device [] on [ 204.574092][ T5678] usbhid 2-1:0.0: can't add hid device: -71 [ 204.602045][ T7392] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 204.630716][ T5678] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 204.688877][ T5678] usb 2-1: USB disconnect, device number 31 [ 204.872796][ T7396] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 204.897790][ T7393] fido_id[7393]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 205.143537][ T5699] usbhid 5-1:0.0: can't add hid device: -71 [ 205.161859][ T5699] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 205.199203][ T5699] usb 5-1: USB disconnect, device number 19 [ 205.293333][ T7401] syzkaller0: entered promiscuous mode [ 205.307233][ T7401] syzkaller0: entered allmulticast mode [ 205.336781][ T7401] tipc: Started in network mode [ 205.343926][ T7401] tipc: Node identity a28c1b3bc0dd, cluster identity 4711 [ 205.361063][ T7401] tipc: Enabled bearer , priority 0 [ 205.420103][ T7401] tipc: Resetting bearer [ 205.460405][ T7405] input: syz0 as /devices/virtual/input/input15 [ 205.487956][ T7400] tipc: Resetting bearer [ 205.587556][ T7400] tipc: Disabling bearer [ 205.614715][ T5704] hid-generic 000A:FFFFFF1D:0002.001C: hidraw0: HID v0.04 Device [syz0] on syz1 [ 206.014123][ T7411] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 206.165561][ T5701] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 206.367135][ T5701] usb 3-1: not running at top speed; connect to a high speed hub [ 206.404461][ T5701] usb 3-1: New USB device found, idVendor=0bb4, idProduct=0a1b, bcdDevice=cb.45 [ 206.462780][ T5701] usb 3-1: config 9 has an invalid interface number: 230 but max is 0 [ 206.488006][ T5701] usb 3-1: config 9 has no interface number 0 [ 206.509569][ T5701] usb 3-1: config 9 interface 230 has no altsetting 0 [ 206.550362][ T5701] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.570908][ T5701] usb 3-1: Product: syz [ 206.580869][ T5701] usb 3-1: Manufacturer: syz [ 206.591025][ T5701] usb 3-1: SerialNumber: syz [ 206.596098][ T5699] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 206.656979][ T5677] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 206.744946][ T5699] usb 1-1: device descriptor read/64, error -71 [ 206.765101][ T5678] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 206.846529][ T5677] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 206.862275][ T5677] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 206.878646][ T5677] usb 2-1: config 0 has no interface number 0 [ 206.896758][ T5677] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.909801][ T5677] usb 2-1: Product: syz [ 206.920946][ T5677] usb 2-1: Manufacturer: syz [ 206.936123][ T5678] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 206.937446][ T5677] usb 2-1: SerialNumber: syz [ 206.957741][ T5678] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.975669][ T5677] usb 2-1: config 0 descriptor?? [ 206.991388][ T5678] usb 4-1: config 0 descriptor?? [ 207.006464][ T5699] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 207.155723][ T5699] usb 1-1: device descriptor read/64, error -71 [ 207.223862][ T7427] syzkaller0: entered promiscuous mode [ 207.231100][ T7427] syzkaller0: entered allmulticast mode [ 207.245225][ T24] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 207.285187][ T5699] usb usb1-port1: attempt power cycle [ 207.340194][ T5678] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 207.350438][ T5678] [drm:udl_init] *ERROR* Selecting channel failed [ 207.383303][ T5678] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1 [ 207.392496][ T5678] [drm] Initialized udl on minor 1 [ 207.404463][ T5678] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 207.407497][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 207.418909][ T5678] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 207.429682][ T5704] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 207.440464][ T24] usb 5-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 207.449915][ T5704] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 207.461328][ T5678] usb 4-1: USB disconnect, device number 24 [ 207.473686][ T24] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 207.486687][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.498978][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 207.515157][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.536732][ T24] usb 5-1: config 0 descriptor?? [ 207.644898][ T5699] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 207.665922][ T5699] usb 1-1: device descriptor read/8, error -71 [ 207.768074][ T30] audit: type=1326 audit(1787227096.525:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7430 comm="syz.4.456" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa91479e0d9 code=0x0 [ 207.890030][ T5704] hid-generic 0000:0000:0000.001D: hidraw1: HID v0.00 Device [] on [ 207.926684][ T5699] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 207.988706][ T5699] usb 1-1: device descriptor read/8, error -71 [ 208.017398][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 208.036392][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 208.058441][ T24] usb 5-1: USB disconnect, device number 20 [ 208.124083][ T7433] fido_id[7433]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 208.147551][ T5699] usb usb1-port1: unable to enumerate USB device [ 208.182751][ T7435] SET target dimension over the limit! [ 208.204242][ T7436] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 208.501419][ T7442] netlink: 16 bytes leftover after parsing attributes in process `syz.3.459'. [ 208.613571][ T5701] usb 3-1: USB disconnect, device number 28 [ 208.967311][ T7447] input: syz0 as /devices/virtual/input/input16 [ 209.165834][ T24] usb 2-1: USB disconnect, device number 32 [ 209.592729][ T7453] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 209.653147][ T7457] fuse: Bad value for 'fd' [ 209.884931][ T24] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 210.054940][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 210.069788][ T24] usb 2-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 210.099190][ T24] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 210.138614][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.173904][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 210.214239][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.250679][ T24] usb 2-1: config 0 descriptor?? [ 210.612190][ T30] audit: type=1326 audit(1787227099.365:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7458 comm="syz.1.465" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f308b19e0d9 code=0x0 [ 210.725836][ T7459] nvme nvme0: rdma connection establishment failed (-104) [ 210.742940][ T7478] batadv_slave_1: entered allmulticast mode [ 210.760351][ T7478] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 210.819227][ T189] hid_parser_main: 116 callbacks suppressed [ 210.819256][ T189] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 210.879395][ T189] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 210.915997][ T189] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 210.955079][ T189] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 211.050710][ T189] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 211.101706][ T189] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 211.149746][ T189] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [] on [ 211.204098][ T7484] input: syz0 as /devices/virtual/input/input17 [ 211.270889][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 211.271276][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 211.381541][ T24] usb 2-1: USB disconnect, device number 33 [ 211.500340][ T7489] fido_id[7489]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 211.597961][ T5692] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 211.768801][ T7496] syzkaller0: entered promiscuous mode [ 211.779245][ T7496] syzkaller0: entered allmulticast mode [ 211.804893][ T5692] usb 1-1: Using ep0 maxpacket: 16 [ 211.903718][ T5692] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 211.960454][ T5692] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.976058][ T5692] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 211.987862][ T5692] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 212.015305][ T5692] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.024538][ T5692] usb 1-1: Product: syz [ 212.033130][ T5692] usb 1-1: Manufacturer: syz [ 212.039072][ T5692] usb 1-1: SerialNumber: syz [ 212.062199][ T5692] usb 1-1: config 0 descriptor?? [ 212.088156][ T5692] mcba_usb 1-1:0.0: Can't find endpoints [ 212.329107][ T7482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.375439][ T7482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.406927][ T5692] usb 1-1: USB disconnect, device number 23 [ 212.895335][ T24] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 213.054870][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 213.071246][ T24] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 213.093518][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.111747][ T7525] FAULT_INJECTION: forcing a failure. [ 213.111747][ T7525] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.114701][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 213.153286][ T7525] CPU: 0 UID: 0 PID: 7525 Comm: syz.3.485 Not tainted syzkaller #0 PREEMPT(full) [ 213.153320][ T7525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 213.153334][ T7525] Call Trace: [ 213.153343][ T7525] [ 213.153352][ T7525] dump_stack_lvl+0xe8/0x150 [ 213.153392][ T7525] should_fail_ex+0x410/0x560 [ 213.153423][ T7525] _copy_from_user+0x2d/0xb0 [ 213.153453][ T7525] ___sys_recvmsg+0x173/0x5a0 [ 213.153483][ T7525] ? __pfx____sys_recvmsg+0x10/0x10 [ 213.153510][ T7525] ? __fget_files+0x2a/0x420 [ 213.153550][ T7525] ? __fget_files+0x3a2/0x420 [ 213.153593][ T7525] __x64_sys_recvmsg+0x1ae/0x290 [ 213.153619][ T7525] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 213.153662][ T7525] do_syscall_64+0x166/0x520 [ 213.153684][ T7525] ? trace_irq_disable+0x3b/0x140 [ 213.153714][ T7525] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.153738][ T7525] ? clear_bhb_loop+0x70/0xc0 [ 213.153766][ T7525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.153790][ T7525] RIP: 0033:0x7f313e79e0d9 [ 213.153812][ T7525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.153832][ T7525] RSP: 002b:00007f313f70f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 213.153856][ T7525] RAX: ffffffffffffffda RBX: 00007f313ea25fa0 RCX: 00007f313e79e0d9 [ 213.153873][ T7525] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 213.153887][ T7525] RBP: 00007f313f70f090 R08: 0000000000000000 R09: 0000000000000000 [ 213.153902][ T7525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.153916][ T7525] R13: 00007f313ea26038 R14: 00007f313ea25fa0 R15: 00007f313eb4fa48 [ 213.153951][ T7525] [ 213.155398][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 213.230578][ T5704] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 213.513494][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.548340][ T24] usb 3-1: Product: syz [ 213.556304][ T24] usb 3-1: Manufacturer: syz [ 213.565508][ T5704] usb 2-1: Using ep0 maxpacket: 32 [ 213.571425][ T24] usb 3-1: SerialNumber: syz [ 213.583523][ T5704] usb 2-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 213.587474][ T24] usb 3-1: config 0 descriptor?? [ 213.629461][ T5704] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 213.636045][ T24] mcba_usb 3-1:0.0: Can't find endpoints [ 213.667694][ T5704] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.721769][ T5704] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 213.767576][ T5704] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.796787][ T5704] usb 2-1: config 0 descriptor?? [ 214.015417][ T30] audit: type=1326 audit(1787227102.775:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7511 comm="syz.1.481" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f308b19e0d9 code=0x0 [ 214.083261][ T7504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.097313][ T7504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.113016][ T7533] xt_HMARK: spi-set and port-set can't be combined [ 214.136951][ T5701] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 214.153943][ T5701] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 214.177182][ T5678] usb 3-1: USB disconnect, device number 29 [ 214.186815][ T5701] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 214.194942][ T5701] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 214.235238][ T5701] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [] on [ 214.316501][ T5704] usbhid 2-1:0.0: can't add hid device: -71 [ 214.327197][ T5704] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 214.462471][ T5704] usb 2-1: USB disconnect, device number 34 [ 214.476031][ T7536] fido_id[7536]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 215.177461][ T7556] FAULT_INJECTION: forcing a failure. [ 215.177461][ T7556] name failslab, interval 1, probability 0, space 0, times 0 [ 215.200509][ T7556] CPU: 1 UID: 0 PID: 7556 Comm: syz.3.496 Not tainted syzkaller #0 PREEMPT(full) [ 215.200539][ T7556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 215.200553][ T7556] Call Trace: [ 215.200562][ T7556] [ 215.200570][ T7556] dump_stack_lvl+0xe8/0x150 [ 215.200620][ T7556] should_fail_ex+0x410/0x560 [ 215.200650][ T7556] should_failslab+0xa8/0x100 [ 215.200675][ T7556] __kmalloc_noprof+0xfe/0x720 [ 215.200704][ T7556] ? lock_sock_nested+0x6a/0x100 [ 215.200732][ T7556] ? sock_kmalloc+0xd6/0x160 [ 215.200750][ T7556] ? sock_kmalloc+0xd6/0x160 [ 215.200776][ T7556] sock_kmalloc+0xd6/0x160 [ 215.200801][ T7556] af_alg_alloc_areq+0x8c/0x200 [ 215.200837][ T7556] skcipher_recvmsg+0x31e/0xe10 [ 215.200887][ T7556] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 215.200908][ T7556] ? __lock_acquire+0x683/0x2cf0 [ 215.200944][ T7556] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 215.200968][ T7556] ? security_socket_recvmsg+0x7e/0x2c0 [ 215.201000][ T7556] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 215.201024][ T7556] sock_recvmsg+0x196/0x1e0 [ 215.201054][ T7556] ____sys_recvmsg+0x1e6/0x4a0 [ 215.201085][ T7556] ? __pfx_____sys_recvmsg+0x10/0x10 [ 215.201123][ T7556] ? import_iovec+0x73/0xa0 [ 215.201153][ T7556] ___sys_recvmsg+0x213/0x5a0 [ 215.201185][ T7556] ? __pfx____sys_recvmsg+0x10/0x10 [ 215.201212][ T7556] ? __fget_files+0x2a/0x420 [ 215.201251][ T7556] ? __fget_files+0x3a2/0x420 [ 215.201283][ T7556] __x64_sys_recvmsg+0x1ae/0x290 [ 215.201308][ T7556] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 215.201353][ T7556] do_syscall_64+0x166/0x520 [ 215.201374][ T7556] ? trace_irq_disable+0x3b/0x140 [ 215.201401][ T7556] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.201438][ T7556] ? clear_bhb_loop+0x70/0xc0 [ 215.201466][ T7556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.201489][ T7556] RIP: 0033:0x7f313e79e0d9 [ 215.201510][ T7556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.201530][ T7556] RSP: 002b:00007f313f70f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 215.201555][ T7556] RAX: ffffffffffffffda RBX: 00007f313ea25fa0 RCX: 00007f313e79e0d9 [ 215.201570][ T7556] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 215.201584][ T7556] RBP: 00007f313f70f090 R08: 0000000000000000 R09: 0000000000000000 [ 215.201598][ T7556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.201611][ T7556] R13: 00007f313ea26038 R14: 00007f313ea25fa0 R15: 00007f313eb4fa48 [ 215.201646][ T7556] [ 215.475819][ T5704] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 215.656014][ T5704] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 215.670595][ T5704] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 215.688051][ T5704] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 215.715160][ T5704] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 215.723373][ T24] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 215.749926][ T5704] usb 3-1: SerialNumber: syz [ 215.884371][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 215.903743][ T24] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 215.929486][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.952966][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 215.990641][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 216.045376][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.058186][ T24] usb 1-1: Product: syz [ 216.075434][ T24] usb 1-1: Manufacturer: syz [ 216.096421][ T24] usb 1-1: SerialNumber: syz [ 216.117821][ T24] usb 1-1: config 0 descriptor?? [ 216.154564][ T24] mcba_usb 1-1:0.0: Can't find endpoints [ 216.190053][ T7570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.231024][ T7570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.341268][ T7550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.360836][ T7550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.380865][ T24] usb 1-1: USB disconnect, device number 24 [ 216.454855][ T5701] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 216.454859][ T5692] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 216.473223][ T5704] usb 3-1: 0:2 : does not exist [ 216.485631][ T5704] usb 3-1: unit 1 not found! [ 216.558033][ T5704] usb 3-1: USB disconnect, device number 30 [ 216.615735][ T5692] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 216.624376][ T5663] udevd[5663]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 216.659955][ T5701] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 216.679720][ T5701] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.680223][ T5692] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.738954][ T5701] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.798286][ T5692] usb 2-1: Product: syz [ 216.800670][ T5701] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 216.866506][ T5701] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.884243][ T5692] usb 2-1: Manufacturer: syz [ 216.898216][ T5701] usb 5-1: config 0 descriptor?? [ 216.900235][ T5692] usb 2-1: SerialNumber: syz [ 216.949933][ T5692] usb 2-1: config 0 descriptor?? [ 217.248591][ T5692] usb 2-1: USB disconnect, device number 35 [ 217.268533][ T7574] binder: 7573:7574 ioctl c0306201 200000000080 returned -14 [ 217.301141][ T7574] binder: 7573:7574 ioctl c0306201 2000000003c0 returned -14 [ 217.483225][ T5701] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 217.785555][ T5748] udevd[5748]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 218.333950][ T7594] veth1_to_bridge: entered allmulticast mode [ 218.387286][ T7594] veth1_to_bridge: left allmulticast mode [ 218.509428][ T7590] netlink: 7 bytes leftover after parsing attributes in process `syz.3.509'. [ 218.824985][ T5701] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 218.865718][ T5678] usb 5-1: reset high-speed USB device number 21 using dummy_hcd [ 218.935140][ T189] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 218.985025][ T5701] usb 2-1: Using ep0 maxpacket: 32 [ 219.078383][ T5678] usb 5-1: device descriptor read/64, error -32 [ 219.099801][ T7601] netlink: 16 bytes leftover after parsing attributes in process `syz.1.512'. [ 219.115073][ T189] usb 1-1: Using ep0 maxpacket: 16 [ 219.136472][ T189] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 219.172102][ T189] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.205060][ T189] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 219.258838][ T5701] usb 2-1: unable to get BOS descriptor or descriptor too short [ 219.282872][ T189] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 219.340907][ T5701] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 219.395776][ T5678] usb 5-1: reset high-speed USB device number 21 using dummy_hcd [ 219.418586][ T5701] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 219.438610][ T189] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.478719][ T5701] usb 2-1: can't read configurations, error -71 [ 219.488857][ T189] usb 1-1: Product: syz [ 219.514875][ T189] usb 1-1: Manufacturer: syz [ 219.535324][ T189] usb 1-1: SerialNumber: syz [ 219.586114][ T189] usb 1-1: config 0 descriptor?? [ 219.605952][ T5678] usb 5-1: device descriptor read/64, error -32 [ 219.624124][ T189] mcba_usb 1-1:0.0: Can't find endpoints [ 219.877143][ T7597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.007758][ T7597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.074918][ T189] usb 1-1: USB disconnect, device number 25 [ 220.182078][ T7620] usb usb7: usbfs: interface 0 claimed by hub while 'syz.1.517' resets device [ 220.617532][ T5678] usb 5-1: reset high-speed USB device number 21 using dummy_hcd [ 220.692518][ T5678] usb 5-1: device firmware changed [ 220.753372][ T5704] usb 5-1: USB disconnect, device number 21 [ 221.035207][ T5704] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 221.212257][ T5704] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 221.252176][ T5704] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.308677][ T5704] usb 5-1: config 0 descriptor?? [ 221.535707][ T949] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 221.598362][ T7636] loop6: detected capacity change from 0 to 2640 [ 221.666992][ T7621] syzkaller0: entered promiscuous mode [ 221.679471][ T7621] syzkaller0: entered allmulticast mode [ 221.724983][ T949] usb 2-1: Using ep0 maxpacket: 32 [ 221.768369][ T7633] loop6: detected capacity change from 2640 to 524288000 [ 221.783166][ T949] usb 2-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 221.804911][ T949] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 221.826945][ T7636] Buffer I/O error on dev loop6, logical block 0, async page read [ 221.873791][ T7636] Buffer I/O error on dev loop6, logical block 0, async page read [ 221.879504][ T949] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.886935][ T7636] Buffer I/O error on dev loop6, logical block 0, async page read [ 221.913030][ T7647] FAULT_INJECTION: forcing a failure. [ 221.913030][ T7647] name failslab, interval 1, probability 0, space 0, times 0 [ 221.927706][ T7636] Buffer I/O error on dev loop6, logical block 0, async page read [ 221.937359][ T7647] CPU: 0 UID: 0 PID: 7647 Comm: syz.2.527 Not tainted syzkaller #0 PREEMPT(full) [ 221.937386][ T7647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 221.937401][ T7647] Call Trace: [ 221.937409][ T7647] [ 221.937418][ T7647] dump_stack_lvl+0xe8/0x150 [ 221.937454][ T7647] should_fail_ex+0x410/0x560 [ 221.937487][ T7647] should_failslab+0xa8/0x100 [ 221.937511][ T7647] kmem_cache_alloc_lru_noprof+0xa7/0x5f0 [ 221.937544][ T7647] ? __d_alloc+0x37/0x6f0 [ 221.937566][ T7647] ? __d_alloc+0x37/0x6f0 [ 221.937594][ T7647] __d_alloc+0x37/0x6f0 [ 221.937639][ T7647] d_alloc_pseudo+0x21/0xc0 [ 221.937664][ T7647] alloc_path_pseudo+0x107/0x220 [ 221.937700][ T7647] ? __pfx_alloc_path_pseudo+0x10/0x10 [ 221.937737][ T7647] ? trace_kmem_cache_alloc+0x29/0xe0 [ 221.937775][ T7647] alloc_file_pseudo+0xa8/0x1e0 [ 221.937809][ T7647] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 221.937840][ T7647] ? security_inode_alloc+0xd5/0x310 [ 221.937870][ T7647] ? inode_init_always_gfp+0x994/0xd30 [ 221.937907][ T7647] sock_alloc_file+0xb8/0x2e0 [ 221.937937][ T7647] do_accept+0x3a0/0x750 [ 221.937972][ T7647] ? __pfx_do_accept+0x10/0x10 [ 221.938022][ T7647] __sys_accept4+0x139/0x230 [ 221.938054][ T7647] ? __pfx___sys_accept4+0x10/0x10 [ 221.938085][ T7647] ? __pfx_ksys_write+0x10/0x10 [ 221.938115][ T7647] __x64_sys_accept4+0x9a/0xb0 [ 221.938146][ T7647] do_syscall_64+0x166/0x520 [ 221.938167][ T7647] ? trace_irq_disable+0x3b/0x140 [ 221.938195][ T7647] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.938217][ T7647] ? clear_bhb_loop+0x70/0xc0 [ 221.938243][ T7647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.938264][ T7647] RIP: 0033:0x7f211a79e0d9 [ 221.938285][ T7647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.938303][ T7647] RSP: 002b:00007f211b68c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 221.938326][ T7647] RAX: ffffffffffffffda RBX: 00007f211aa25fa0 RCX: 00007f211a79e0d9 [ 221.938342][ T7647] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 221.938355][ T7647] RBP: 00007f211b68c090 R08: 0000000000000000 R09: 0000000000000000 [ 221.938369][ T7647] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 221.938382][ T7647] R13: 00007f211aa26038 R14: 00007f211aa25fa0 R15: 00007f211ab4fa48 [ 221.938416][ T7647] [ 221.942021][ T7636] Buffer I/O error on dev loop6, logical block 0, async page read [ 221.942203][ T949] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 222.064099][ T7636] Buffer I/O error on dev loop6, logical block 0, async page read [ 222.253803][ T949] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.266478][ T7636] Buffer I/O error on dev loop6, logical block 0, async page read [ 222.274729][ T7636] Buffer I/O error on dev loop6, logical block 0, async page read [ 222.286831][ T7636] ldm_validate_partition_table(): Disk read failed. [ 222.293676][ T7636] Buffer I/O error on dev loop6, logical block 0, async page read [ 222.302309][ T7636] Buffer I/O error on dev loop6, logical block 0, async page read [ 222.312837][ T7636] Dev loop6: unable to read RDB block 0 [ 222.319436][ T7636] loop6: unable to read partition table [ 222.327717][ T7636] loop_reread_partitions: partition scan of loop6 (ir¡c‡’ úÒVUŸX¯ÃG¨½›˜ñZtM<IÆ i8NL í á·ùWû@©àQ6ÒÝ%ž…û¥¡Úè) failed (rc=-5) [ 222.361601][ T949] usb 2-1: config 0 descriptor?? [ 222.362204][ T5704] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 222.411519][ T5704] [drm:udl_init] *ERROR* Selecting channel failed [ 222.498325][ T5704] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 1 [ 222.529849][ T5704] [drm] Initialized udl on minor 1 [ 222.541795][ T7650] netlink: 132 bytes leftover after parsing attributes in process `syz.2.529'. [ 222.559941][ T5704] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 222.586950][ T5704] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 222.597602][ T189] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 222.607442][ T189] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 222.630390][ T5704] usb 5-1: USB disconnect, device number 22 [ 222.690556][ T30] audit: type=1326 audit(1787227111.445:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7630 comm="syz.1.523" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f308b19e0d9 code=0x0 [ 222.715012][ T24] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 222.779731][ T7631] nvme nvme0: rdma connection establishment failed (-104) [ 222.819905][ T5678] hid_parser_main: 2 callbacks suppressed [ 222.819938][ T5678] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 222.842628][ T5678] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 222.862124][ T5678] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 222.875105][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 222.888260][ T24] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 222.888770][ T5678] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 222.923128][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.936997][ T5678] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 222.954266][ T5678] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 222.977074][ T24] usb 4-1: config 0 descriptor?? [ 222.983505][ T5678] hid-generic 0000:0000:0000.0021: hidraw0: HID v0.00 Device [] on [ 223.026155][ T949] usbhid 2-1:0.0: can't add hid device: -71 [ 223.039808][ T949] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 223.098896][ T24] as10x_usb: device has been detected [ 223.110083][ T949] usb 2-1: USB disconnect, device number 38 [ 223.117950][ T24] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 223.270901][ T24] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 223.407789][ T7668] fido_id[7668]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 223.718591][ T24] as10x_usb: error during firmware upload part1 [ 223.735868][ T24] Registered device nBox DVB-T Dongle [ 223.842141][ T7680] netlink: 36 bytes leftover after parsing attributes in process `syz.0.537'. [ 223.939051][ T7680] netlink: 20 bytes leftover after parsing attributes in process `syz.0.537'. [ 223.979186][ T7682] xt_HMARK: spi-set and port-set can't be combined [ 224.099943][ T24] usb 4-1: USB disconnect, device number 25 [ 224.285402][ T7690] netlink: 16 bytes leftover after parsing attributes in process `syz.1.540'. [ 224.408078][ T24] Unregistered device nBox DVB-T Dongle [ 224.437608][ T24] as10x_usb: device has been disconnected [ 224.635539][ T7698] binder: 7697:7698 unknown command 0 [ 224.641252][ T7698] binder: 7697:7698 ioctl c0306201 2000000001c0 returned -22 [ 225.023397][ T7706] netlink: 132 bytes leftover after parsing attributes in process `syz.1.546'. [ 225.294930][ T5677] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 225.445011][ T5677] usb 3-1: device descriptor read/64, error -71 [ 225.486838][ T7727] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 225.705016][ T5677] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 225.761199][ T7740] netlink: 4 bytes leftover after parsing attributes in process `syz.4.555'. [ 225.781721][ T7740] netlink: 'syz.4.555': attribute type 10 has an invalid length. [ 225.855941][ T5677] usb 3-1: device descriptor read/64, error -71 [ 225.975971][ T5677] usb usb3-port1: attempt power cycle [ 226.325196][ T5677] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 226.393671][ T5677] usb 3-1: device descriptor read/8, error -71 [ 226.641671][ T7747] netlink: 132 bytes leftover after parsing attributes in process `syz.0.559'. [ 226.661392][ T5677] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 226.728153][ T5677] usb 3-1: device descriptor read/8, error -71 [ 226.855646][ T5677] usb usb3-port1: unable to enumerate USB device [ 226.978027][ T7751] batadv_slave_1: entered allmulticast mode [ 227.022238][ T7751] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 227.395719][ T7756] netlink: 12 bytes leftover after parsing attributes in process `syz.3.563'. [ 227.489839][ T30] audit: type=1326 audit(1787227116.245:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7757 comm="syz.0.564" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd211f9e0d9 code=0x0 [ 227.529826][ T7756] bridge0: port 3(batadv1) entered blocking state [ 227.562921][ T7756] bridge0: port 3(batadv1) entered disabled state [ 227.619468][ T7756] batadv1: entered allmulticast mode [ 227.709878][ T5678] hid-generic 000A:FFFFFF1D:0002.0022: unknown main item tag 0x0 [ 227.740794][ T5678] hid-generic 000A:FFFFFF1D:0002.0022: unknown main item tag 0x0 [ 227.749135][ T7756] batadv1: entered promiscuous mode [ 227.765767][ T5678] hid-generic 000A:FFFFFF1D:0002.0022: unknown main item tag 0x0 [ 227.794956][ T5678] hid-generic 000A:FFFFFF1D:0002.0022: unknown main item tag 0x0 [ 227.825456][ T5678] hid-generic 000A:FFFFFF1D:0002.0022: unknown main item tag 0x0 [ 227.866833][ T5678] hid-generic 000A:FFFFFF1D:0002.0022: unknown main item tag 0x0 [ 227.901829][ T5678] hid-generic 000A:FFFFFF1D:0002.0022: unknown main item tag 0x0 [ 227.948849][ T5678] hid-generic 000A:FFFFFF1D:0002.0022: unknown main item tag 0x0 [ 227.985281][ T5829] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 227.995090][ T5829] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 228.028943][ T5678] hid-generic 000A:FFFFFF1D:0002.0022: unknown main item tag 0x0 [ 228.100876][ T5678] hid-generic 000A:FFFFFF1D:0002.0022: unknown main item tag 0x0 [ 228.143578][ T5678] hid-generic 000A:FFFFFF1D:0002.0022: unknown main item tag 0x0 [ 228.189488][ T5678] hid-generic 000A:FFFFFF1D:0002.0022: unknown main item tag 0x0 [ 228.239069][ T5678] hid-generic 000A:FFFFFF1D:0002.0022: unknown main item tag 0x0 [ 228.285557][ T5677] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 228.301508][ T5678] hid-generic 000A:FFFFFF1D:0002.0022: unknown main item tag 0x0 [ 228.373732][ T5678] hid-generic 000A:FFFFFF1D:0002.0022: hidraw0: HID v0.04 Device [syz0] on syz1 [ 228.492977][ T5677] usb 2-1: not running at top speed; connect to a high speed hub [ 228.527854][ T5677] usb 2-1: New USB device found, idVendor=0bb4, idProduct=0a1b, bcdDevice=cb.45 [ 228.554392][ T30] audit: type=1326 audit(1787227117.305:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7773 comm="syz.0.570" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd211f9e0d9 code=0x7ffc0000 [ 228.567562][ T5677] usb 2-1: config 9 has an invalid interface number: 230 but max is 0 [ 228.619740][ T30] audit: type=1326 audit(1787227117.305:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7773 comm="syz.0.570" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd211f9e0d9 code=0x7ffc0000 [ 228.661829][ T5677] usb 2-1: config 9 has no interface number 0 [ 228.683702][ T30] audit: type=1326 audit(1787227117.365:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7773 comm="syz.0.570" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7fd211f9e0d9 code=0x7ffc0000 [ 228.697460][ T5677] usb 2-1: config 9 interface 230 has no altsetting 0 [ 228.750074][ T30] audit: type=1326 audit(1787227117.365:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7773 comm="syz.0.570" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd211f9e0d9 code=0x7ffc0000 [ 228.779547][ T7780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.789341][ T5677] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.817390][ T30] audit: type=1326 audit(1787227117.365:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7773 comm="syz.0.570" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd211f9e0d9 code=0x7ffc0000 [ 228.820866][ T5677] usb 2-1: Product: syz [ 228.848756][ T7780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.868766][ T949] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 228.890886][ T30] audit: type=1326 audit(1787227117.365:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7773 comm="syz.0.570" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd211f5e90e code=0x7ffc0000 [ 228.936013][ T5677] usb 2-1: Manufacturer: syz [ 228.949758][ T30] audit: type=1326 audit(1787227117.365:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7773 comm="syz.0.570" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd211f9dd6b code=0x7ffc0000 [ 228.949821][ T5677] usb 2-1: SerialNumber: syz [ 228.975373][ T5678] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 228.991733][ T30] audit: type=1326 audit(1787227117.365:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7773 comm="syz.0.570" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd211f9dd6b code=0x7ffc0000 [ 229.017833][ T30] audit: type=1326 audit(1787227117.405:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7773 comm="syz.0.570" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd211f9dd6b code=0x7ffc0000 [ 229.063224][ T30] audit: type=1326 audit(1787227117.405:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7773 comm="syz.0.570" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd211f9dd6b code=0x7ffc0000 [ 229.092903][ T949] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 229.110409][ T949] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.120505][ T949] usb 1-1: Product: syz [ 229.131337][ T949] usb 1-1: Manufacturer: syz [ 229.136336][ T949] usb 1-1: SerialNumber: syz [ 229.809065][ T7798] netlink: 12 bytes leftover after parsing attributes in process `syz.4.576'. [ 230.469393][ T7806] FAULT_INJECTION: forcing a failure. [ 230.469393][ T7806] name failslab, interval 1, probability 0, space 0, times 0 [ 230.488888][ T7806] CPU: 1 UID: 0 PID: 7806 Comm: syz.3.580 Not tainted syzkaller #0 PREEMPT(full) [ 230.488924][ T7806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 230.488938][ T7806] Call Trace: [ 230.488948][ T7806] [ 230.488957][ T7806] dump_stack_lvl+0xe8/0x150 [ 230.488998][ T7806] should_fail_ex+0x410/0x560 [ 230.489030][ T7806] should_failslab+0xa8/0x100 [ 230.489074][ T7806] __kmalloc_noprof+0xfe/0x720 [ 230.489105][ T7806] ? lock_sock_nested+0x6a/0x100 [ 230.489133][ T7806] ? sock_kmalloc+0xd6/0x160 [ 230.489154][ T7806] ? sock_kmalloc+0xd6/0x160 [ 230.489182][ T7806] sock_kmalloc+0xd6/0x160 [ 230.489208][ T7806] af_alg_alloc_areq+0x8c/0x200 [ 230.489248][ T7806] skcipher_recvmsg+0x31e/0xe10 [ 230.489292][ T7806] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 230.489316][ T7806] ? __lock_acquire+0x683/0x2cf0 [ 230.489350][ T7806] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 230.489374][ T7806] ? security_socket_recvmsg+0x7e/0x2c0 [ 230.489405][ T7806] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 230.489429][ T7806] sock_recvmsg+0x196/0x1e0 [ 230.489469][ T7806] ____sys_recvmsg+0x1e6/0x4a0 [ 230.489501][ T7806] ? __pfx_____sys_recvmsg+0x10/0x10 [ 230.489539][ T7806] ? import_iovec+0x73/0xa0 [ 230.489570][ T7806] ___sys_recvmsg+0x213/0x5a0 [ 230.489597][ T7806] ? __pfx____sys_recvmsg+0x10/0x10 [ 230.489623][ T7806] ? __fget_files+0x2a/0x420 [ 230.489660][ T7806] ? __fget_files+0x3a2/0x420 [ 230.489691][ T7806] __x64_sys_recvmsg+0x1ae/0x290 [ 230.489718][ T7806] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 230.489763][ T7806] do_syscall_64+0x166/0x520 [ 230.489785][ T7806] ? trace_irq_disable+0x3b/0x140 [ 230.489815][ T7806] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.489839][ T7806] ? clear_bhb_loop+0x70/0xc0 [ 230.489866][ T7806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.489890][ T7806] RIP: 0033:0x7f313e79e0d9 [ 230.489912][ T7806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.489932][ T7806] RSP: 002b:00007f313f70f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 230.489957][ T7806] RAX: ffffffffffffffda RBX: 00007f313ea25fa0 RCX: 00007f313e79e0d9 [ 230.489974][ T7806] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 230.489988][ T7806] RBP: 00007f313f70f090 R08: 0000000000000000 R09: 0000000000000000 [ 230.490002][ T7806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.490016][ T7806] R13: 00007f313ea26038 R14: 00007f313ea25fa0 R15: 00007f313eb4fa48 [ 230.490051][ T7806] [ 231.040215][ T5677] usb 2-1: USB disconnect, device number 39 [ 231.347382][ T7817] xt_HMARK: spi-set and port-set can't be combined [ 231.361793][ T949] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 231.408652][ T949] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 231.500286][ T949] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 231.533197][ T949] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 231.548045][ T7824] netlink: 4 bytes leftover after parsing attributes in process `syz.3.582'. [ 231.569417][ T949] usb 1-1: USB disconnect, device number 26 [ 231.647102][ T7824] netlink: 'syz.3.582': attribute type 10 has an invalid length. [ 231.722083][ T7824] bond0: (slave netdevsim1): Releasing backup interface [ 231.754620][ T7827] netlink: 'syz.3.582': attribute type 10 has an invalid length. [ 231.781927][ T7824] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 231.802688][ T7824] team0: Port device netdevsim1 added [ 231.857757][ T7827] team0: Port device netdevsim1 removed [ 231.889881][ T7827] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 231.915649][ T7827] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 231.934117][ T7832] input: syz0 as /devices/virtual/input/input18 [ 232.067494][ T7835] netlink: 8 bytes leftover after parsing attributes in process `syz.4.587'. [ 232.190079][ T7835] netlink: 8 bytes leftover after parsing attributes in process `syz.4.587'. [ 233.183206][ T7864] netlink: 4 bytes leftover after parsing attributes in process `syz.0.590'. [ 233.227602][ T5348] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 233.241021][ T1012] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.258804][ T7864] netlink: 'syz.0.590': attribute type 10 has an invalid length. [ 233.314872][ T7856] netlink: 'syz.0.590': attribute type 10 has an invalid length. [ 233.364620][ T7864] bond0: (slave netdevsim1): Releasing backup interface [ 233.436267][ T5348] usb 2-1: Using ep0 maxpacket: 16 [ 233.454447][ T5348] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 233.499797][ T5348] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.515888][ T7864] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 233.540661][ T5348] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.556253][ T7864] team0: Port device netdevsim1 added [ 233.571701][ T5348] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.581871][ T59] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.646273][ T5348] usb 2-1: config 0 descriptor?? [ 233.660307][ T7856] team0: Port device netdevsim1 removed [ 233.735318][ T7856] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 233.784926][ T7842] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 233.806148][ T7856] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 233.865145][ T59] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.898503][ T59] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.985686][ T7842] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 234.028012][ T7842] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 234.056816][ T7842] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 234.083970][ T7842] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 234.092790][ T30] kauditd_printk_skb: 121 callbacks suppressed [ 234.092805][ T30] audit: type=1326 audit(1787227122.845:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.4.596" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91479e0d9 code=0x7ffc0000 [ 234.125736][ T7842] usb 3-1: SerialNumber: syz [ 234.181775][ T30] audit: type=1326 audit(1787227122.875:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.4.596" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91479e0d9 code=0x7ffc0000 [ 234.211766][ T5348] corsair 0003:1B1C:1B02.0023: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.1-1/input0 [ 234.268894][ T30] audit: type=1326 audit(1787227122.905:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.4.596" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7fa91479e0d9 code=0x7ffc0000 [ 234.314520][ T30] audit: type=1326 audit(1787227122.905:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.4.596" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91479e0d9 code=0x7ffc0000 [ 234.362813][ T5348] corsair 0003:1B1C:1B02.0023: Read invalid backlight brightness: 75. [ 234.400258][ T30] audit: type=1326 audit(1787227122.905:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.4.596" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91479e0d9 code=0x7ffc0000 [ 234.425850][ T7846] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 234.444352][ T7842] usb 3-1: 0:2 : does not exist [ 234.468671][ T30] audit: type=1326 audit(1787227122.905:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.4.596" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa91475e90e code=0x7ffc0000 [ 234.498084][ T30] audit: type=1326 audit(1787227122.905:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.4.596" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa91479dd6b code=0x7ffc0000 [ 234.571554][ T30] audit: type=1326 audit(1787227122.905:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.4.596" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa91479dd6b code=0x7ffc0000 [ 234.620217][ T7860] IPv6: A: Disabled Multicast RS [ 234.626834][ T7842] usb 3-1: USB disconnect, device number 36 [ 234.633480][ T7846] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 234.663561][ T7846] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.673029][ T7846] usb 5-1: Product: syz [ 234.679197][ T7846] usb 5-1: Manufacturer: syz [ 234.690254][ T30] audit: type=1326 audit(1787227122.915:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.4.596" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa91479dd6b code=0x7ffc0000 [ 234.716141][ T7846] usb 5-1: SerialNumber: syz [ 234.775577][ T30] audit: type=1326 audit(1787227122.915:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.4.596" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa91479dd6b code=0x7ffc0000 [ 234.815072][ T7865] usb 2-1: USB disconnect, device number 40 [ 234.863071][ T5748] udevd[5748]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 234.892788][ T7865] ------------[ cut here ]------------ [ 234.899035][ T7865] ODEBUG: free active (active state 0) object: ffff8880692cf2c8 object type: work_struct hint: k90_record_led_work+0x0/0x1e0 [ 234.912746][ T7865] WARNING: lib/debugobjects.c:632 at debug_print_object+0xec/0x230, CPU#1: kworker/1:16/7865 [ 234.923517][ T7865] Modules linked in: [ 234.928330][ T7865] CPU: 1 UID: 0 PID: 7865 Comm: kworker/1:16 Not tainted syzkaller #0 PREEMPT(full) [ 234.938143][ T7865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 234.948658][ T7865] Workqueue: usb_hub_wq hub_event [ 234.954037][ T7865] RIP: 0010:debug_print_object+0x18a/0x230 [ 234.960309][ T7865] Code: f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 9d b6 54 fd 4d 8b 0f 4c 89 ef 48 8b 74 24 08 48 89 ea 44 89 e1 4d 89 f0 ff 34 24 <67> 48 0f b9 3a 48 83 c4 08 ff 05 f3 4a 78 0b 48 83 c4 10 5b 41 5c [ 234.981163][ T7865] RSP: 0018:ffffc90004cbeff0 EFLAGS: 00010246 [ 234.989065][ T7865] RAX: 1ffffffff17d6d10 RBX: dffffc0000000000 RCX: 0000000000000000 [ 234.997619][ T7865] RDX: ffffffff8c4c0340 RSI: ffffffff8c4bfdc0 RDI: ffffffff90639f00 [ 235.006013][ T7865] RBP: ffffffff8c4c0340 R08: ffff8880692cf2c8 R09: ffffffff8beb7a40 [ 235.014277][ T7865] R10: dffffc0000000000 R11: ffffffff818ee690 R12: 0000000000000000 [ 235.022495][ T7865] R13: ffffffff90639f00 R14: ffff8880692cf2c8 R15: ffffffff8beb6880 [ 235.030648][ T7865] FS: 0000000000000000(0000) GS:ffff888125031000(0000) knlGS:0000000000000000 [ 235.039969][ T7865] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 235.047542][ T7865] CR2: 000055557fb1b9f8 CR3: 000000007b03c000 CR4: 00000000003526f0 [ 235.055755][ T7865] Call Trace: [ 235.059200][ T7865] [ 235.062323][ T7865] ? __pfx_k90_record_led_work+0x10/0x10 [ 235.068401][ T7865] ? __pfx_k90_record_led_work+0x10/0x10 [ 235.074356][ T7865] debug_check_no_obj_freed+0x2e3/0x450 [ 235.080382][ T7865] kfree+0x13e/0x640 [ 235.084374][ T7865] ? corsair_remove+0xfd/0x260 [ 235.089337][ T7865] corsair_remove+0xfd/0x260 [ 235.094179][ T7865] ? __pfx_corsair_remove+0x10/0x10 [ 235.099614][ T7865] hid_device_remove+0xc5/0x1c0 [ 235.104628][ T7865] ? __pfx_hid_device_remove+0x10/0x10 [ 235.110296][ T7865] device_release_driver_internal+0x48b/0x880 [ 235.116566][ T7865] bus_remove_device+0x444/0x560 [ 235.121806][ T7865] ? __pfx_bus_remove_device+0x10/0x10 [ 235.127690][ T7865] ? kernfs_remove_by_name_ns+0x101/0x140 [ 235.133496][ T7865] device_del+0x524/0x8f0 [ 235.137912][ T7865] ? __pfx_device_del+0x10/0x10 [ 235.142844][ T7865] hid_destroy_device+0x6b/0x1b0 [ 235.148048][ T7865] usbhid_disconnect+0x9f/0xc0 [ 235.152956][ T7865] usb_unbind_interface+0x295/0x9f0 [ 235.159407][ T7865] ? kernfs_remove_by_name_ns+0x101/0x140 [ 235.167587][ T7865] ? kernfs_remove_by_name_ns+0x101/0x140 [ 235.173711][ T7865] ? __pfx_usb_unbind_interface+0x10/0x10 [ 235.179804][ T7865] device_release_driver_internal+0x4f5/0x880 [ 235.186244][ T7865] bus_remove_device+0x444/0x560 [ 235.191334][ T7865] ? __pfx_bus_remove_device+0x10/0x10 [ 235.197797][ T7865] ? kernfs_remove_by_name_ns+0x101/0x140 [ 235.203642][ T7865] device_del+0x524/0x8f0 [ 235.208462][ T7865] ? __pfx_device_del+0x10/0x10 [ 235.213618][ T7865] ? kobject_put+0x516/0x550 [ 235.218497][ T7865] usb_disable_device+0x3d4/0x8d0 [ 235.223764][ T7865] usb_disconnect+0x346/0x9a0 [ 235.228655][ T7865] hub_event+0x1bbb/0x4d30 [ 235.233354][ T7865] ? lock_acquire+0x106/0x350 [ 235.239470][ T7865] ? register_lock_class+0x31/0x2e0 [ 235.245151][ T7865] ? exc_int3+0x26/0x3c0 [ 235.249539][ T7865] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 235.255238][ T7865] ? __pfx_hub_event+0x10/0x10 [ 235.260186][ T7865] ? process_scheduled_works+0xa1a/0x14c0 [ 235.266101][ T7865] ? rcu_is_watching+0x16/0xb0 [ 235.271534][ T7865] ? process_scheduled_works+0xa1a/0x14c0 [ 235.278103][ T7865] process_scheduled_works+0xa88/0x14c0 [ 235.283838][ T7865] ? __pfx_process_scheduled_works+0x10/0x10 [ 235.293916][ T7865] ? assign_work+0x3cf/0x5d0 [ 235.299251][ T7865] worker_thread+0xa47/0xfb0 [ 235.304188][ T7865] kthread+0x38b/0x480 [ 235.308422][ T7865] ? __pfx_worker_thread+0x10/0x10 [ 235.313633][ T7865] ? __pfx_kthread+0x10/0x10 [ 235.318384][ T7865] ret_from_fork+0x514/0xb70 [ 235.323094][ T7865] ? __pfx_ret_from_fork+0x10/0x10 [ 235.328370][ T7865] ? __switch_to+0xc89/0x1420 [ 235.333151][ T7865] ? __pfx_kthread+0x10/0x10 [ 235.338005][ T7865] ret_from_fork_asm+0x1a/0x30 [ 235.342904][ T7865] [ 235.346091][ T7865] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 235.353614][ T7865] CPU: 1 UID: 0 PID: 7865 Comm: kworker/1:16 Not tainted syzkaller #0 PREEMPT(full) [ 235.363160][ T7865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 235.374082][ T7865] Workqueue: usb_hub_wq hub_event [ 235.379188][ T7865] Call Trace: [ 235.382819][ T7865] [ 235.385828][ T7865] vpanic+0x56d/0xa60 [ 235.390282][ T7865] ? __pfx__printk+0x10/0x10 [ 235.395163][ T7865] ? __pfx_vpanic+0x10/0x10 [ 235.400528][ T7865] ? is_bpf_text_address+0x292/0x2b0 [ 235.406232][ T7865] ? is_bpf_text_address+0x26/0x2b0 [ 235.411513][ T7865] panic+0xc5/0xd0 [ 235.415633][ T7865] ? __pfx_panic+0x10/0x10 [ 235.420108][ T7865] ? ret_from_fork_asm+0x1a/0x30 [ 235.425401][ T7865] __warn+0x315/0x4c0 [ 235.430131][ T7865] ? debug_print_object+0xec/0x230 [ 235.436362][ T7865] ? debug_print_object+0xec/0x230 [ 235.441730][ T7865] __report_bug+0x276/0x570 [ 235.446275][ T7865] ? debug_print_object+0xec/0x230 [ 235.452313][ T7865] ? __pfx___report_bug+0x10/0x10 [ 235.457433][ T7865] ? kasan_save_track+0x4f/0x80 [ 235.462413][ T7865] ? kasan_save_free_info+0x40/0x50 [ 235.467747][ T7865] ? __kasan_slab_free+0x5c/0x80 [ 235.472863][ T7865] ? kfree+0x1c5/0x640 [ 235.477028][ T7865] report_bug_entry+0x19b/0x290 [ 235.482424][ T7865] ? debug_print_object+0x18a/0x230 [ 235.488399][ T7865] ? debug_print_object+0x18f/0x230 [ 235.493681][ T7865] handle_bug+0xce/0x200 [ 235.497977][ T7865] exc_invalid_op+0x1a/0x50 [ 235.502556][ T7865] asm_exc_invalid_op+0x1a/0x20 [ 235.507702][ T7865] RIP: 0010:debug_print_object+0x18a/0x230 [ 235.514624][ T7865] Code: f8 48 c1 e8 03 80 3c 18 00 74 08 4c 89 ff e8 9d b6 54 fd 4d 8b 0f 4c 89 ef 48 8b 74 24 08 48 89 ea 44 89 e1 4d 89 f0 ff 34 24 <67> 48 0f b9 3a 48 83 c4 08 ff 05 f3 4a 78 0b 48 83 c4 10 5b 41 5c [ 235.535408][ T7865] RSP: 0018:ffffc90004cbeff0 EFLAGS: 00010246 [ 235.541513][ T7865] RAX: 1ffffffff17d6d10 RBX: dffffc0000000000 RCX: 0000000000000000 [ 235.549716][ T7865] RDX: ffffffff8c4c0340 RSI: ffffffff8c4bfdc0 RDI: ffffffff90639f00 [ 235.557707][ T7865] RBP: ffffffff8c4c0340 R08: ffff8880692cf2c8 R09: ffffffff8beb7a40 [ 235.565699][ T7865] R10: dffffc0000000000 R11: ffffffff818ee690 R12: 0000000000000000 [ 235.573789][ T7865] R13: ffffffff90639f00 R14: ffff8880692cf2c8 R15: ffffffff8beb6880 [ 235.581809][ T7865] ? __pfx_work_debug_hint+0x10/0x10 [ 235.587132][ T7865] ? __pfx_k90_record_led_work+0x10/0x10 [ 235.592834][ T7865] ? __pfx_k90_record_led_work+0x10/0x10 [ 235.598534][ T7865] debug_check_no_obj_freed+0x2e3/0x450 [ 235.604141][ T7865] kfree+0x13e/0x640 [ 235.608104][ T7865] ? corsair_remove+0xfd/0x260 [ 235.612935][ T7865] corsair_remove+0xfd/0x260 [ 235.617777][ T7865] ? __pfx_corsair_remove+0x10/0x10 [ 235.623064][ T7865] hid_device_remove+0xc5/0x1c0 [ 235.628378][ T7865] ? __pfx_hid_device_remove+0x10/0x10 [ 235.633884][ T7865] device_release_driver_internal+0x48b/0x880 [ 235.640104][ T7865] bus_remove_device+0x444/0x560 [ 235.645099][ T7865] ? __pfx_bus_remove_device+0x10/0x10 [ 235.650626][ T7865] ? kernfs_remove_by_name_ns+0x101/0x140 [ 235.656597][ T7865] device_del+0x524/0x8f0 [ 235.661458][ T7865] ? __pfx_device_del+0x10/0x10 [ 235.666640][ T7865] hid_destroy_device+0x6b/0x1b0 [ 235.671995][ T7865] usbhid_disconnect+0x9f/0xc0 [ 235.676794][ T7865] usb_unbind_interface+0x295/0x9f0 [ 235.682046][ T7865] ? kernfs_remove_by_name_ns+0x101/0x140 [ 235.687952][ T7865] ? kernfs_remove_by_name_ns+0x101/0x140 [ 235.693713][ T7865] ? __pfx_usb_unbind_interface+0x10/0x10 [ 235.699571][ T7865] device_release_driver_internal+0x4f5/0x880 [ 235.705794][ T7865] bus_remove_device+0x444/0x560 [ 235.710820][ T7865] ? __pfx_bus_remove_device+0x10/0x10 [ 235.716418][ T7865] ? kernfs_remove_by_name_ns+0x101/0x140 [ 235.722389][ T7865] device_del+0x524/0x8f0 [ 235.726754][ T7865] ? __pfx_device_del+0x10/0x10 [ 235.731658][ T7865] ? kobject_put+0x516/0x550 [ 235.736433][ T7865] usb_disable_device+0x3d4/0x8d0 [ 235.741786][ T7865] usb_disconnect+0x346/0x9a0 [ 235.746570][ T7865] hub_event+0x1bbb/0x4d30 [ 235.751028][ T7865] ? lock_acquire+0x106/0x350 [ 235.755798][ T7865] ? register_lock_class+0x31/0x2e0 [ 235.761132][ T7865] ? exc_int3+0x26/0x3c0 [ 235.765762][ T7865] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 235.771168][ T7865] ? __pfx_hub_event+0x10/0x10 [ 235.776074][ T7865] ? process_scheduled_works+0xa1a/0x14c0 [ 235.781877][ T7865] ? rcu_is_watching+0x16/0xb0 [ 235.786728][ T7865] ? process_scheduled_works+0xa1a/0x14c0 [ 235.792557][ T7865] process_scheduled_works+0xa88/0x14c0 [ 235.798231][ T7865] ? __pfx_process_scheduled_works+0x10/0x10 [ 235.804571][ T7865] ? assign_work+0x3cf/0x5d0 [ 235.809260][ T7865] worker_thread+0xa47/0xfb0 [ 235.813983][ T7865] kthread+0x38b/0x480 [ 235.818099][ T7865] ? __pfx_worker_thread+0x10/0x10 [ 235.823247][ T7865] ? __pfx_kthread+0x10/0x10 [ 235.827890][ T7865] ret_from_fork+0x514/0xb70 [ 235.832526][ T7865] ? __pfx_ret_from_fork+0x10/0x10 [ 235.837682][ T7865] ? __switch_to+0xc89/0x1420 [ 235.842434][ T7865] ? __pfx_kthread+0x10/0x10 [ 235.847196][ T7865] ret_from_fork_asm+0x1a/0x30 [ 235.852051][ T7865] [ 235.855904][ T7865] Kernel Offset: disabled [ 235.860527][ T7865] Rebooting in 86400 seconds..