last executing test programs: 7.924424407s ago: executing program 4 (id=366): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044080}, 0x8000000) 7.882736143s ago: executing program 4 (id=367): add_key$user(&(0x7f0000000380), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = request_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='\xfep\xb1\xabK-\x03\x00\xe5\x81\xb8}\xe6^\xab:B3\x00\x00\x00\x1e\x9a&rs\xcf\xd9\xde(\xde\xde\xe3\xd5\"\xa2t/\xa2\xc5\xf9\xe5\x1cx\xdf\x00\x00\x00\x00\x00\x00\x00\x05\xa8\'\xff\x02l7-8Jn\x0e\x86:v\xccyK\xc18\xd7\xc9\xc3F\xef\xd5F\xd6~k:\xf8\xc6E$\x0f\xb3Q\rI\xeb(\r$\x1aP\xaf\xca\xdcx%j_\xe5\xa1\xb1\xf6Q\xb8\x88\x93c\a\\\xd3\x03\xfc\xba[b~f\xf3\x88', 0x0) request_key(&(0x7f0000000640)='user\x00', &(0x7f0000000680)={'syz', 0x0}, 0x0, r0) 7.784665122s ago: executing program 4 (id=368): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r0, 0xe503, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc000, 0x103) r1 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, 0x0) syz_ublk_add_dev(r1, r2, r3, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x1, 0x624, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x102}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c, 0x0, r1}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x4, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x5c, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x11, 0x0, @multicast1}}}}}}, 0x0) syz_usb_connect(0xf400, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000094037b40fd080200fdca010203010902120001000000000904"], 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x411, &(0x7f0000002100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) 7.008352322s ago: executing program 3 (id=371): r0 = syz_open_dev$video(&(0x7f0000000440), 0x9, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000480)={0xd, @win={{0x2, 0x2, 0x9, 0xfffffe05}, 0x6, 0x0, 0x0, 0x8, 0x0, 0x6}}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x27, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x6, "", [{{0x9, 0x4, 0x0, 0xfe, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0x6, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x8, 0xc1, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x88, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x76, 0x2, 0x1, 0xff, 0x60, 0x6, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "1fd66f62"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x7f, 0x7fff, 0xa79d}, {0x6, 0x24, 0x1a, 0x5, 0x64}, [@network_terminal={0x7, 0x24, 0xa, 0x9, 0x1, 0xf8}, @mbim_extended={0x8, 0x24, 0x1c, 0xfff0, 0x81, 0xd}, @dmm={0x7, 0x24, 0x14, 0x65a, 0x111}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0xd9, 0x72, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x6, 0x70, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x1, 0xf1, 0x7}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x201, 0x35, 0x0, 0x3, 0x40, 0xf7}, 0xf, &(0x7f00000001c0)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x18, 0x1, 0x8, 0xbf59}]}, 0x5, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x3409}}, {0x1b, &(0x7f0000000240)=@string={0x1b, 0x3, "1e83937e0a1f81765169d767829e7f54ef713041fdf70a9cb9"}}, {0x48, &(0x7f0000000280)=@string={0x48, 0x3, "16e558e55a246da92a079b93f3f79775086b4c251ba809ad120fd0c80e3824ae027d24322e34210b2f407cec22c383d98ac0eca5dbd5874f96b539eb0da7583e5433e26b4f6e"}}, {0x42, &(0x7f0000000300)=@string={0x42, 0x3, "0e5155b2e594d0e36c126990b6a502935f76c0d28f8f1cfd189d752832a87fd76ac2d807f3cb60bf8293f59ead483c3502e4b55ee8dd567b9c8ba549462fb4ca"}}, {0x37, &(0x7f0000000380)=@string={0x37, 0x3, "74fd572ce5c8d0faa4b4c6471be72511811ebbc7bf8b49af4ddcd060d1cb669c1f08f8a84817aa92dbe7d6cdec7813ee29f5c3df88"}}]}) syz_usb_control_io(r1, &(0x7f0000000000)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00$('], 0x0, 0x0, 0x0, 0x0}, 0x0) 5.00748808s ago: executing program 3 (id=382): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@FILEID_UDF_WITHOUT_PARENT={0xc, 0x51, {0x400, 0x0, 0x9, 0xc0e}}, &(0x7f0000002300), 0x600) (fail_nth: 3) 4.470403407s ago: executing program 3 (id=384): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x5, 0x81, 0x3, 0x6}, {0x4, 0x80, 0xc9, 0x5}, {0xfff4, 0x3, 0x8, 0x5}, {0xd, 0x4, 0xe4, 0x8}, {0x1, 0x0, 0x10, 0x80000001}, {0x2, 0x7, 0x5, 0x9}, {0xff, 0x7, 0x7f}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) sendto$inet(r1, 0x0, 0x0, 0x64040011, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000019480)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000019500)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) r3 = openat(0xffffffffffffff9c, &(0x7f0000019540)='./cgroup.net/devices.allow\x00', 0x41, 0x48) write$rfkill(r3, 0x0, 0x0) r4 = syz_ublk_setup_io_uring(0xd, &(0x7f0000019580)={0x0, 0x30b5, 0x0, 0x2, 0x377}, &(0x7f0000019600)=0x0, &(0x7f0000019640)=0x0, &(0x7f0000019680)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f00000196c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x6, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000019740)=@any_dev={0x4006, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000019780)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f00000197c0)={0x0, 0x20fb87, 0x1, 0xfffffffd, 0x32c}, &(0x7f0000000380)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffff, 0x200, 0x1006, 0x14a, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ac7, 0x8000, 0x10000000, 0x546, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xfffffffc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x10, 0x2, 0xbd}}], 0x1, &(0x7f0000019ac0)={0x2e, 0x54, 0x0, r10, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x3, 0x825, 0x0, 0x0}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_GET(r11, 0x0, 0x20000004) fsopen(0x0, 0x0) fchdir(0xffffffffffffffff) read$usbmon(r3, &(0x7f0000000140)=""/183, 0xb7) r12 = open(0x0, 0x1031c2, 0x0) ftruncate(r12, 0x2007ffb) open(&(0x7f0000000340)='.\x00', 0x0, 0x0) 4.336009097s ago: executing program 4 (id=385): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f00000003c0)=@phonet={0x23, 0x8, 0x10, 0x30}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000500)="000f00000880000010000000810097ff88fb", 0x12}], 0x1}, 0x4040000) 4.112263995s ago: executing program 4 (id=388): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000025c0), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x1acf, &(0x7f0000002600)={0x0, 0xfec0, 0x1000, 0x2, 0x234}, &(0x7f0000002680), &(0x7f00000026c0), &(0x7f0000002700)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0xe, &(0x7f0000002740)={0xffffffff, 0x0, 0x0, 0x0}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000002780)=ANY=[@ANYRES32=0x41424344], 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000027c0)={'ip_vti0\x00', 0x0}) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0x1) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000002840)={{0x100, 0xfffe, 0x0, 0xd}, 'syz1\x00', 0x2c}) ioctl$UI_DEV_CREATE(r3, 0x5501) r4 = syz_usb_connect(0x3, 0x3c, &(0x7f00000028c0)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000002900), 0x1, 0x402) r6 = socket(0x2, 0x805, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000002940)={0x0, @in={{0x2, 0x4e21, @private=0xa010100}}, 0x6, 0x7, 0x4, 0x1f4, 0x20, 0xfffffff9, 0x7}, 0x9c) read(r5, 0x0, 0x0) ioctl$UI_DEV_DESTROY(r3, 0x5502) fstat(0xffffffffffffffff, &(0x7f0000002a00)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x9, &(0x7f0000002a80)=""/42, &(0x7f0000002ac0)=0x2a) sendmsg$nl_generic(r2, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000002b40)={&(0x7f0000002b80)=ANY=[@ANYBLOB="140000002f00090027ad700000000000040000004d621a9d77f5a710608bd6c8ec6b89af0b193675a64dbdce01259d42da7240488a7d4f8c638e99dcc5ff7ad67ba252ebe5ac2fe575f1914a03c86f08d7b0cc83d279d543c3c2b7ce15d40842a0b043c60df0496676f69c9465249524eef066c443e733040013008000000000000072ab4930ac8ac2206867bc33bf6d6517db9539cb56534275c0ead35ab6ab100e3eb86f6956c31fabd985cbcd4d0debcd5845cbe56374f833739099ffbf540dc028a89c02df313a98a858b51adcbf1526eb527c3ad0d760a3956cb25196fee55d0dbe1a09bb0529ffd1c925b8e94457b4d940d3b5c1ad"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) write$UHID_CREATE2(r0, &(0x7f0000002c80)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/253], 0x119) 3.910776824s ago: executing program 1 (id=389): r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x802) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000200)={0x8000000, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffffe, 0xfffffffb], [0xffffffff, 0xffffffff, 0x3ff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffdf7, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xe8e1, 0xffffffff, 0xfdffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x81, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x3388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x3, 0x0, 0x0, 0x1}, {0x8, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r0, 0x40084149, &(0x7f0000000480)=0xfd8) ioctl$SNDRV_PCM_IOCTL_DRAIN(r0, 0x4144, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x20}}, 0x0) ioctl$SNDRV_PCM_IOCTL_RESET(r0, 0x4141, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0xc0884123, &(0x7f00000005c0)={0x0, "15971972094d8163d03fbad23379f541e763dbaabe2b2451fe3f48f079a16ae8a49366cbf30d6c1aae2ce9cc811fbc92c367998bd8b451766020fcf780eb7e28", {0x4, 0x6}}) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0) nanosleep(0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f0000000100)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) mknodat$null(0xffffffffffffff9c, 0x0, 0x200, 0x103) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1000000, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000000500)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r4 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000009c0), 0x4) sendmsg$key(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 3.75651924s ago: executing program 1 (id=390): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000440), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000480)={&(0x7f00000004c0)={0x1d, 0x0, 0x0, 0x4000}, 0x1, &(0x7f0000000500)={&(0x7f0000000540)={0x7, 0x7ab0715dca68fe47, 0x0, {0x0, 0xea60}, {}, {}, 0x4, @canfd={{}, 0x18, 0x0, 0x0, 0x0, "b8ee0816756b62187804752330b2b55830d7228ef1593c0639bd084bba0bfd8db72f70e5b2e7f90e11cbc6ec61a03fc316d5d47970907af5fc4a27f6cf718909"}}, 0x80}}, 0x4000) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r2, &(0x7f0000000000), 0x10) sendto$l2tp(r2, &(0x7f0000000040)="e5786a0d000000000000003b", 0xc, 0x8000, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setattr(0x0, &(0x7f00000005c0)={0x38, 0x0, 0x0, 0x1, 0x0, 0x40, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000600)={&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x1b7e, &(0x7f00000006c0)={0x0, 0x200c89f, 0xc000, 0x7, 0x20002f6}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000007c0)=0xf3b, 0x4) io_uring_enter(r3, 0xee7, 0x10e, 0x82, 0x0, 0xffffffffffffffdf) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000800)={0x1, &(0x7f0000000840)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) read$FUSE(0xffffffffffffffff, &(0x7f0000001a40)={0x2020}, 0x2020) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000000000800000400002e00000040", @ANYRES32=0x0, @ANYBLOB="00000000400000002400128009000100626f6e64000000001400028008000a000000000005001d"], 0x44}}, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000340)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000380)) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000400)="9e4f", 0x2}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000300)=0x9, 0x4) open_by_handle_at(r2, &(0x7f0000000380)=@fuse_with_parent={0x18, 0x82, {{0x0, 0x1c00, 0xd481}, {0x7, 0x1, 0x721e}}}, 0x80100) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='l\x00'], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) 3.652042841s ago: executing program 0 (id=391): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @local}, 0x10) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ptrace$ARCH_SHSTK_ENABLE(0x1e, 0x0, 0x0, 0x5001) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ptrace$ARCH_GET_CPUID(0x1e, 0x0, 0x0, 0x1011) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2, 0x11, 0xffffffffffffffff, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r3, 0x0, &(0x7f00000000c0)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="0040818293bb09641cc805d086fa0417dada7f19c35c2111ca986dd9dfb3125357a4789868336e092d5084bbb3b823c4d7103b217b782328b7b670a096cc12a7db3463295e96f02eab76d9f16c107ed1e8432f98ac133b34919821f07da0e8f73ed543a9fd76d1596502c07c3e05747ffc7ab07d82b01bf89aaa92eda50a4e6407b6b49bb766086caf97"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000300)=@req3={0x7813, 0x1000, 0x0, 0x7d, 0x200001ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r2, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000005c0)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f00000015c0)}}], 0x2, 0x40002180, 0x0) sendmmsg(r2, &(0x7f0000001600)=[{{0x0, 0xa9cc7003, &(0x7f0000001640)=[{&(0x7f0000001680)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000016c0)={0x1, &(0x7f0000001700)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x200000000000000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x2000000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001780)={&(0x7f00000017c0)=ANY=[@ANYBLOB="90000000000101060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c000280050001000600000006000200001500000600030004d20000080007000000012c0c00058008000100667470"], 0x90}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001900)=ANY=[@ANYBLOB="c8000000000201060000000000000000020000003400018014000180080001000102030408000200050607081c00028005000100060000000600020004d2000006000300001500003400028014000180080001000506070808000200010203041c00028005000100060000000600020000140000060003009c400000340003801400018008000100ffffffff08000200ffffffff1c00028005000100ff000000060002000000000006000300ffff000016000b006e61742d666f6c6c6f772d6d6173746572"], 0xc8}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_open_dev$sndpcmp(&(0x7f0000001a00), 0x1fffffffc000, 0x10d900) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r7, 0x80184153, &(0x7f0000001a40)={0x0, &(0x7f0000001a80)=[&(0x7f0000001b00)="399cb02d2e32017b227ff62acdc73ad2fedc2962448ee353552781ff27ec893a338863770f67bd4d4b1d9e65000c74", &(0x7f0000001b40)="7bf6c1a1621e64bbb75f36691977393994b0d540f155b6afb8104ada62bc932c4140836f1cd18cc0d8ffdab7dc957984b9017e47e5b1be3edaedbe0453f1745164607e40633db3ef58342fa8f27cc61d40e73e78adadbed0dcc6ec8ca69928d8be47740ffdb8cd49f16152f76443af0e", &(0x7f0000001bc0)="718ebc1ee4b995f2cbd15289c10ebbb1245eda65e31c5c", &(0x7f0000001c00), &(0x7f0000001c40)="23a770dec4b5367d1b346a5a88c97e4b3840430f48e70940b56b54310d56ae2c3685c8b93d5502d2fc848183389f83cb890a31c837acdc57afa3677699f44f99a0629638d96a9df25ffbdc995e01", &(0x7f0000001cc0)="f9587b90f03973eb2520c0dbc49ae523db7ad99838541f3e276b1ce50a8a51f11f5c8e6cd17edee04b1550fb10de6cef2a2eca4c37696cefc94e5fbfa0f1950b8b79adac66c864bc58390dfa9abd5d7350288336a468d6f361c2896e2e00379cc6239f7b587f3fc0e576eff7b6374f4ee6e1b2f86228a31bfd9d9bb40bacbb1842937cd848ba2861c54f2a2880497985ace9be21d2c39898022b0f5c2d5ba1f70e7af42917f1527d62", &(0x7f0000001d80)="aa1a0e4cad183649fa6db9cde8325f1805c044a67ecd8bb1aebd0719bbeca52bc9017a1f9a14275d81f2bd11ed2a0bdc34945309a79823fa6c163693a9dfb7a5cb5176271a8b6d3b7e38814faa9983878508f1d8981785ff1aa3b27ee18d4a531d", &(0x7f0000001e00), &(0x7f0000001e40)="213cdb38d814dad8f712193dd8adc702dc5b26a69293760e23ef98fd9edbfd35b7677e372f24882f28f60a7ada2961e24ac301fce1375fbcd9de1cbfe6b28a425899ccd7209ee9dbedce9fae28685709c0e92a11bbbce5c588f5131f8bd01eab9416a3b57685f023116f835debb1cc70165c7ee95980bf8303941a890e2ba9ab06db9cb5f219d59365a61abe33a5213b95f21ca40d0c5628f09850c0aca90ad3311463580b52862ecdf7476ae470c2e3bbb0e0be136636773e797c3ee10e1b74861550394e2860b8d28e664b38f26cb0f496b20b5fed8b1e138614575f1635c100bbd0afe40ab874be7c919892a2c33cf05d23e6efc6b1", &(0x7f0000001f40)="6bbb37901d4fa248a0a91acfaec6a9ddb3cff6dcdc539b88b3752d27ad7b3a8e4af3a775a027fdb9f485a73604fa60a28e841c6cc32a6589bd58b90618233c7cc836e93e5a8b87f4bc59777128992fc5043c7fc17625277c7446b1b9d63efb2cf60aca0e72e15bb20887"]}) sendmsg$nl_route(r6, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000002040)=@newlink={0x58, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11, 0x3f}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x3}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x42044801}, 0x40004) sendto$inet(r0, &(0x7f00000004c0), 0xffffffffffffff58, 0x20008005, &(0x7f0000000500)={0x2, 0x4e20}, 0x10) 3.646803501s ago: executing program 2 (id=392): capset(&(0x7f0000000380)={0x20071026}, &(0x7f0000000980)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f0000000880)="0bbb268dd6ffa80800000000000000010000210d0000aaa8fa017242ba9380d440fe0000000000002900000003000000", 0xfe60) 3.488962674s ago: executing program 2 (id=393): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="100029bd7000ffdbdf250e000000340041090800080006000000060002004e2000000800070008"], 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012"], 0x48}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x3c, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0xfffffffe, 0x4, 0x1c, 0x0, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x9, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xeb00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x2, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0x8, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0xbbd6, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0xab6b]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) ioctl$MEMREAD(0xffffffffffffffff, 0xc0404d1a, &(0x7f00000003c0)={0x4, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', {0x6, 0x8b, 0x4ba}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x64, 0x2, 0x6, 0xa03, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xd3}, @IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000408001d00ff03"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 3.320139981s ago: executing program 3 (id=394): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="3c1204"], 0x98) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00@'], 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e20, 0x44, @dev={0xfe, 0x80, '\x00', 0x42}, 0x5}]}, &(0x7f0000000140)=0x10) (fail_nth: 16) 3.174507592s ago: executing program 3 (id=395): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000440), 0x318, 0x0) recvmmsg(r0, &(0x7f0000000480), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000500)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x40084) sendmsg$NFT_BATCH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x4044840}, 0x8000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000900)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000940), 0xfffffd9d) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) madvise(&(0x7f00009c0000/0x1000)=nil, 0x1000, 0xc) r4 = fanotify_init(0x200, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000980)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(r4, 0x161, 0x8000000, r5, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000009c0)='.\x00', 0x511a01, 0x80) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000a00)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="2c00000070000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="140001800800010000000200050006"], 0x2c}}, 0x4084) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000b00)={'vxcan1\x00'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) 2.814053054s ago: executing program 2 (id=396): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x20141, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000000300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000002340)={0x50, 0x0, r3, {0x7, 0x1f, 0x100000, 0x5691409, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000004500)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r4 = syz_io_uring_setup(0x111, &(0x7f0000004540)={0x0, 0x39c4, 0x2, 0x4, 0xfffffffe}, &(0x7f00000045c0), &(0x7f0000004600), &(0x7f0000004640)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r4, 0x11, &(0x7f0000004680)='n', 0x1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r5 = socket(0x5, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000046c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000004700)={0x0, 0x0, &(0x7f0000004740)={&(0x7f0000004780)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xc, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x1}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x1}]}}]}, 0x48}}, 0x4002080) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000004800)={0xa, 0x0, 0x7, @mcast2, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, 0x0, 0x0) r8 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000004840)=@filter={'filter\x00', 0xe, 0x4, 0x438, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x368, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0x1a0, 0x1c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) socket$inet6(0xa, 0x80003, 0x6) syz_fuse_handle_req(r2, &(0x7f00000023c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000fdff00000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c7f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000043c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004480)={0x20, 0x0, 0x6, {0x0, 0x3022d6e144aa3ceb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f00000044c0)='./file0\x00', 0x80000, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000000)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000180)={0x0, 'pim6reg\x00', 0x3}, 0x18) 2.753081476s ago: executing program 1 (id=397): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000140)) userfaultfd(0x80001) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = io_uring_setup(0x516, &(0x7f0000000180)={0x0, 0x20008b3d, 0x2, 0x503fa, 0x8100014e}) r2 = fanotify_init(0x200, 0x0) read(r2, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000080)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r3, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/sync_on_suspend', 0x183281, 0x4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=ANY=[@ANYBLOB="400000006800010500000000000000000000000000000000080001000300000006000300010000000b00020001000000020000000c000c80"], 0x40}}, 0x0) 2.443686286s ago: executing program 0 (id=398): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000200)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000240)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000280)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) shutdown(r0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000079fded0bf83201a14f00000000000001000000240001800500020001000000060001000200000008000300ac1414aa0800060021000000d4cd2cbc1fab41f70543d06cf575b46c"], 0x38}}, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="3c1204"], 0x98) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00@'], 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000300)=[@in6={0xa, 0x4e20, 0x44, @dev={0xfe, 0x80, '\x00', 0x42}, 0x5}]}, &(0x7f0000000140)=0x10) 2.303840035s ago: executing program 1 (id=399): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x80) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x20000005) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfe000/0x400000)=nil) fsopen(&(0x7f0000000080)='qnx6\x00', 0x2000000) 2.127997883s ago: executing program 2 (id=400): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000200)={0x2, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x40000001, 0x0, 0x0, 0x31237648, 0x0, 0x9}]}) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r2, 0x4068aea3, &(0x7f0000000280)={0xa3, 0x0, 0x0}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000340)={0x1, 0x0, [{0x40000073, 0x0, 0x1001}]}) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000480)=@vmx={0x4, 0x0, 0x2080, {0x1000, 0xffffffffffffffff}}) ioctl$KVM_RUN(r2, 0xae80, 0x1000000) 1.979917194s ago: executing program 0 (id=401): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="100029bd7000ffdbdf250e000000340041090800080006000000060002004e2000000800070008"], 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012"], 0x48}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x3c, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0xfffffffe, 0x4, 0x1c, 0x0, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x9, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xeb00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x2, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0x8, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0xbbd6, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0xab6b]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) ioctl$MEMREAD(0xffffffffffffffff, 0xc0404d1a, &(0x7f00000003c0)={0x4, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', {0x6, 0x8b, 0x4ba}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x64, 0x2, 0x6, 0xa03, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xd3}, @IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000408001d00ff03"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 1.765999211s ago: executing program 2 (id=402): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000000)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000140)={0x2, 0x1111, @multicast1}, 0x10) clock_gettime(0x7, &(0x7f0000000280)) io_getevents(0x0, 0x2e5, 0x0, &(0x7f0000000480), &(0x7f0000000500)={0x0, 0x3938700}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000580)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000005c0)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000600), 0x80200, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000640)=""/139, &(0x7f0000000700)=0x8b) r2 = syz_open_dev$sndmidi(&(0x7f0000000740), 0x2, 0x141102) writev(r2, &(0x7f0000000780)=[{&(0x7f00000007c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000800)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000840)={0x0, 0x10, &(0x7f0000000880)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f00000008c0)=0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@ipv6_newrule={0x24, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7ffe}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048084}, 0x44050) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r6 = socket(0x10, 0x6, 0x9) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r6) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newtaction={0x4c, 0x76, 0x1, 0x70bd2d, 0x0, {}, [{0x38, 0x1, [@m_connmark={0x34, 0xd, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000c85}, 0x8080) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@ipv6_getanyicast={0x14, 0x3e, 0x200, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2404800c}, 0x4081) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000ffffffff00000000000000005c0000000000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) 1.679104734s ago: executing program 4 (id=403): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x30f4c2, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000400)={0x79}) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x800, 0x0) syz_usb_connect$uac3(0x0, 0x97, &(0x7f0000000480)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x644, 0x8047, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0x5, 0x20, 0xf, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x30, 0xc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x7, 0xa, 0x800}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x0, 0x7, 0x4, 0x3, 0x0, 0x6, 0x9, 0x9}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xd, 0x9, 0x0, {0xa, 0x25, 0x25, 0x2, 0x7f, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x4, 0x0, 0x8, {0xa, 0x25, 0x25, 0x2, 0x5, 0x56f}}}}}}}}]}}, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000540)='system.posix_acl_default\x00', 0x0, 0xfe44, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x6, &(0x7f00000005c0)={0x0, 0x14}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000640)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000006c0), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000700), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x8, 0x0, 0x0, 0x8, 0x3, 0x2, 0x6, 0x7}, 0x0) pipe2$watch_queue(0x0, 0x80) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000007c0)={0x3, &(0x7f0000000800)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0x98b3}, {0x6, 0x8, 0xfd, 0x7}]}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x40241, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000880)={0x0, &(0x7f00000008c0)}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000900)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000940)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000980)=ANY=[@ANYBLOB="034886dd0100000000001400000060000000001406"], 0xfdef) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x6044}, 0x24004050) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) socket$packet(0x11, 0x3, 0x300) 1.391748814s ago: executing program 0 (id=404): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x20141, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000000300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000002340)={0x50, 0x0, r3, {0x7, 0x1f, 0x100000, 0x5691409, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000004500)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r4 = syz_io_uring_setup(0x111, &(0x7f0000004540)={0x0, 0x39c4, 0x2, 0x4, 0xfffffffe}, &(0x7f00000045c0), &(0x7f0000004600), &(0x7f0000004640)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r4, 0x11, &(0x7f0000004680)='n', 0x1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r5 = socket(0x5, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000046c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000004700)={0x0, 0x0, &(0x7f0000004740)={&(0x7f0000004780)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xc, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x1}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x1}]}}]}, 0x48}}, 0x4002080) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000004800)={0xa, 0x0, 0x7, @mcast2, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, 0x0, 0x0) r8 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000004840)=@filter={'filter\x00', 0xe, 0x4, 0x438, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x368, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0x1a0, 0x1c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) r9 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r9, &(0x7f0000004d00)={0xa, 0x0, 0x0, @loopback}, 0x1c) openat(0xffffffffffffff9c, &(0x7f00000044c0)='./file0\x00', 0x80000, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000000)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000180)={0x0, 'pim6reg\x00', 0x3}, 0x18) 664.453606ms ago: executing program 0 (id=405): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000100)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x801, 0xf84, 0x3}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) (fail_nth: 7) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 605.594532ms ago: executing program 1 (id=406): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x4, &(0x7f0000000340)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4e}, [@ldst={0x7}]}, &(0x7f0000000380)='GPL\x00', 0x5, 0xfd90, &(0x7f00000003c0)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000480), 0x1f3, 0x10, &(0x7f00000004c0), 0xfffffffffffffc79}, 0x23) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x40000, 0x0) getdents(r1, &(0x7f0000000200)=""/115, 0x73) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00') getdents64(r2, &(0x7f0000000500)=""/4085, 0xff5) getdents(r2, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000002180)={'sit0\x00', &(0x7f0000002080)={'tunl0\x00', 0x0, 0x10, 0x1, 0x0, 0x8, {{0x2e, 0x4, 0x1, 0x8, 0xb8, 0x65, 0x0, 0x4, 0x29, 0x0, @multicast1, @remote, {[@generic={0x86, 0x2}, @end, @ssrr={0x89, 0x2b, 0xa1, [@remote, @dev={0xac, 0x14, 0x14, 0x1b}, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @multicast2, @multicast1, @multicast1, @rand_addr=0x64010100, @loopback]}, @timestamp_addr={0x44, 0xc, 0xb, 0x1, 0x4, [{@remote, 0x9}]}, @end, @timestamp_prespec={0x44, 0x1c, 0xe4, 0x3, 0x7, [{@rand_addr=0x64010100, 0xbac}, {@empty, 0x6}, {@multicast2, 0x4}]}, @timestamp_prespec={0x44, 0x4c, 0xb0, 0x3, 0x7, [{@broadcast}, {@empty, 0x9}, {@remote}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@multicast2}, {@broadcast, 0x6}, {@broadcast, 0x7}, {@broadcast, 0x2c5}, {@empty, 0x9}]}]}}}}}) sendmmsg$inet(r0, &(0x7f0000002280), 0x0, 0x24004c41) 523.783626ms ago: executing program 2 (id=407): r0 = socket$inet_smc(0x2b, 0x1, 0x0) syz_open_dev$loop(0x0, 0x6, 0x101002) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='file0\x00', 0x42, 0x1ff) write(r1, &(0x7f00000000c0)='/sys/kernel/config', 0x12) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='file0\x00', 0x0, 0x0) read(r2, &(0x7f0000000140), 0x12) symlink(&(0x7f0000000180), &(0x7f00000001c0)='my_configfs\x00') r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='my_configfs\x00', 0x8880, 0x4) lseek(r3, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) listen(r0, 0x5) syz_io_uring_setup(0xcf5, 0x0, 0x0, 0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, 0x0, r4, 0x0) lsm_list_modules(0x0, &(0x7f0000000340)=0x50, 0x0) ppoll(&(0x7f0000000280)=[{r0, 0xa362}], 0x1, 0x0, 0x0, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) 119.968084ms ago: executing program 1 (id=408): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="2400000004080300030000000002000001060002404a060000050003002f000000"], 0x24}, 0x1, 0x0, 0x0, 0x40008c4}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000440)) r2 = syz_open_dev$vim2m(&(0x7f00000007c0), 0x7773, 0x2) ioctl$vim2m_VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000800)=@multiplanar_fd={0x3, 0x2, 0x4, 0x8000, 0x800, {0x0, 0xea60}, {0x1, 0x0, 0x0, 0x2, 0x4, 0x8, "f5d1b96d"}, 0x2, 0x4, {0x0}, 0x9}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x1, 0xffff}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x9300}, @TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @dev={0xac, 0x14, 0x14, 0xc}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000008c0)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000900)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000940)={0x8, 0x0, &(0x7f0000000980)=[@increfs]}) r7 = dup3(r6, r5, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000009c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000a00)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000a40)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000080)={@ptr={0x70742a85, 0x0, &(0x7f0000000000)=[r2, r0], 0x8}, @ptr={0x70742a85, 0x0, &(0x7f0000000040)=[r0, r5, 0xffffffffffffffff], 0xc}, @fda={0x66646185, 0x4}}, &(0x7f0000000100)={0x0, 0x28, 0x50}}}]}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000ac0)={0x4c, 0x0, &(0x7f0000000b00)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000b80)={@flat=@handle={0x73682a85, 0x100a, 0x2, 0x2}, @flat=@weak_binder={0x77622a85, 0x1100, 0x2}}, &(0x7f0000000c00)={0x0, 0x18, 0x30}}}]}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r5, 0x10000000000) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000c80)}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000d80)={0x44, 0x0, &(0x7f0000000dc0)=[@transaction={0x40406300, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}]}) ioctl$BINDER_THREAD_EXIT(r8, 0x40046208, 0x0) ioctl$BINDER_THREAD_EXIT(r7, 0x40046208, 0x0) close_range(0xffffffffffffffff, r3, 0x2) r9 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r9) ptrace$setregset(0x4205, r9, 0x1, &(0x7f00000006c0)={&(0x7f0000000700)="330000000f0004000000000800fb282845ef73251e9335f65fabb32ef102efa0adc17b052a73b7ff0f00006b326c91f6b3b3433b39a682a570bf80300660b5e9d546b9f9d6f2dff58a31f90084243e407af026804aa92d85347d54511c7508164fed1cfadd0bf9583ca7697545117bf46f09005acd4f4b2976f798b2747c23309113680ec38e311133e2d8433b6e0e236ac01a95d1c0184ca45947d1ba37ae5c7b32dffc9846f4260000000000000000", 0xb0}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, 0x0) 119.549487ms ago: executing program 0 (id=409): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000140)) userfaultfd(0x80001) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = io_uring_setup(0x516, &(0x7f0000000180)={0x0, 0x20008b3d, 0x2, 0x503fa, 0x8100014e}) r2 = fanotify_init(0x200, 0x0) read(r2, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000080)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r3, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/sync_on_suspend', 0x183281, 0x4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=ANY=[@ANYBLOB="400000006800010500000000000000000000000000000000080001000300000006000300010000000b00020001000000020000000c000c80"], 0x40}}, 0x0) 0s ago: executing program 3 (id=410): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x20141, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000000300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000002340)={0x50, 0x0, r3, {0x7, 0x1f, 0x100000, 0x5691409, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000004500)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r4 = syz_io_uring_setup(0x111, &(0x7f0000004540)={0x0, 0x39c4, 0x2, 0x4, 0xfffffffe}, &(0x7f00000045c0), &(0x7f0000004600), &(0x7f0000004640)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r4, 0x11, &(0x7f0000004680)='n', 0x1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r5 = socket(0x5, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000046c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000004700)={0x0, 0x0, &(0x7f0000004740)={&(0x7f0000004780)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xc, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x1}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x1}]}}]}, 0x48}}, 0x4002080) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000004800)={0xa, 0x0, 0x7, @mcast2, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, 0x0, 0x0) r8 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000004840)=@filter={'filter\x00', 0xe, 0x4, 0x438, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x368, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0x1a0, 0x1c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) syz_fuse_handle_req(r2, &(0x7f00000023c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000fdff00000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c7f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000043c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004480)={0x20, 0x0, 0x6, {0x0, 0x3022d6e144aa3ceb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f00000044c0)='./file0\x00', 0x80000, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000000)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000180)={0x0, 'pim6reg\x00', 0x3}, 0x18) kernel console output (not intermixed with test programs): syz.3.32' uses 32-bit capabilities (legacy support in use) [ 96.799174][ T5820] program syz.3.32 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 96.860045][ T5843] IPVS: using max 48 ests per chain, 115200 per kthread [ 97.133969][ T190] usb 1-1: USB disconnect, device number 2 [ 97.771963][ T1570] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 97.900020][ T1570] usb 5-1: device descriptor read/64, error -71 [ 98.150543][ T1570] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 98.233776][ T5862] netlink: 36 bytes leftover after parsing attributes in process `syz.3.45'. [ 98.290207][ T1570] usb 5-1: device descriptor read/64, error -71 [ 98.361960][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 98.401220][ T1570] usb usb5-port1: attempt power cycle [ 98.512140][ T9] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 98.517605][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.546337][ T9] usb 3-1: config 0 descriptor?? [ 98.548163][ T9] cp210x 3-1:0.0: cp210x converter detected [ 98.740157][ T1570] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 98.760680][ T1570] usb 5-1: device descriptor read/8, error -71 [ 98.781113][ T5858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.43'. [ 98.784920][ T5858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.43'. [ 98.868956][ T9] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 98.868990][ T9] cp210x 3-1:0.0: querying part number failed [ 98.936412][ T9] usb 3-1: cp210x converter now attached to ttyUSB0 [ 98.961747][ T9] usb 3-1: USB disconnect, device number 3 [ 98.976916][ T5871] netlink: 112 bytes leftover after parsing attributes in process `syz.0.48'. [ 98.987156][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 98.995176][ T9] cp210x 3-1:0.0: device disconnected [ 99.004571][ T1570] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 99.040700][ T1570] usb 5-1: device descriptor read/8, error -71 [ 99.150644][ T1570] usb usb5-port1: unable to enumerate USB device [ 99.380690][ T5881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.52'. [ 99.460742][ T1570] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 99.610555][ T1570] usb 2-1: Using ep0 maxpacket: 16 [ 99.611099][ T1570] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 99.626684][ T1570] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.626717][ T1570] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 99.626733][ T1570] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 99.626745][ T1570] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 99.626757][ T1570] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 99.651170][ T1570] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 99.651192][ T1570] usb 2-1: Manufacturer: syz [ 99.706973][ T1570] usb 2-1: config 0 descriptor?? [ 100.046730][ T5896] syzkaller0: entered promiscuous mode [ 100.046748][ T5896] syzkaller0: entered allmulticast mode [ 100.080319][ T1570] rc_core: IR keymap rc-hauppauge not found [ 100.080341][ T1570] Registered IR keymap rc-empty [ 100.080903][ T1570] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 100.101003][ T1570] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 100.125379][ T1570] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 100.153024][ T1570] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input6 [ 100.177809][ T1570] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 100.200682][ T1570] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 100.220193][ T1570] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 100.240212][ T1570] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 100.260258][ T1570] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 100.280256][ T1570] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 100.300229][ T1570] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 100.320110][ T1570] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 100.340167][ T1570] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 100.366291][ T1570] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 100.401261][ T1570] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 100.401301][ T1570] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 101.025828][ T5906] FAULT_INJECTION: forcing a failure. [ 101.025828][ T5906] name failslab, interval 1, probability 0, space 0, times 0 [ 101.026597][ T5906] CPU: 0 UID: 0 PID: 5906 Comm: syz.4.59 Not tainted syzkaller #0 PREEMPT(full) [ 101.026621][ T5906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 101.026632][ T5906] Call Trace: [ 101.026639][ T5906] [ 101.026645][ T5906] dump_stack_lvl+0xe8/0x150 [ 101.026667][ T5906] should_fail_ex+0x410/0x560 [ 101.026700][ T5906] ? __alloc_skb+0x1db/0x7a0 [ 101.026724][ T5906] should_failslab+0xa8/0x100 [ 101.026751][ T5906] ? __alloc_skb+0x1db/0x7a0 [ 101.026771][ T5906] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 101.026789][ T5906] ? __alloc_skb+0x1db/0x7a0 [ 101.026806][ T5906] __alloc_skb+0x1db/0x7a0 [ 101.026823][ T5906] tipc_msg_reverse+0x244/0x970 [ 101.026864][ T5906] tipc_sk_respond+0xef/0x2f0 [ 101.026903][ T5906] ? __pfx_tipc_sk_respond+0x10/0x10 [ 101.026938][ T5906] __tipc_shutdown+0xa20/0x15a0 [ 101.026953][ T5906] ? look_up_lock_class+0x57/0x110 [ 101.026980][ T5906] ? __pfx___tipc_shutdown+0x10/0x10 [ 101.026997][ T5906] ? __pfx_woken_wake_function+0x10/0x10 [ 101.027023][ T5906] ? tipc_release+0xc4/0x24d0 [ 101.027048][ T5906] ? __local_bh_enable_ip+0xd6/0x140 [ 101.027076][ T5906] tipc_release+0x303/0x24d0 [ 101.027106][ T5906] ? __pfx_tipc_release+0x10/0x10 [ 101.027120][ T5906] ? down_write+0x166/0x200 [ 101.027131][ T5906] ? __pfx_down_write+0x10/0x10 [ 101.027159][ T5906] __sock_release+0xa0/0x1f0 [ 101.027178][ T5906] ? __pfx_sock_close+0x10/0x10 [ 101.027197][ T5906] sock_close+0x1c/0x30 [ 101.027215][ T5906] __fput+0x408/0xa40 [ 101.027250][ T5906] fput_close_sync+0x11f/0x240 [ 101.027268][ T5906] ? __pfx_fput_close_sync+0x10/0x10 [ 101.027284][ T5906] ? do_raw_spin_unlock+0xf5/0x200 [ 101.027304][ T5906] __se_sys_close+0xa2/0x160 [ 101.027329][ T5906] do_syscall_64+0x166/0x520 [ 101.027353][ T5906] ? trace_irq_disable+0x3b/0x140 [ 101.027373][ T5906] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.027392][ T5906] ? clear_bhb_loop+0x70/0xc0 [ 101.027414][ T5906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.027426][ T5906] RIP: 0033:0x7fd90bf9f559 [ 101.027439][ T5906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.027448][ T5906] RSP: 002b:00007fd90cebf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 101.027462][ T5906] RAX: ffffffffffffffda RBX: 00007fd90c226090 RCX: 00007fd90bf9f559 [ 101.027475][ T5906] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 101.027486][ T5906] RBP: 00007fd90cebf090 R08: 0000000000000000 R09: 0000000000000000 [ 101.027497][ T5906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 101.027508][ T5906] R13: 00007fd90c226128 R14: 00007fd90c226090 R15: 00007fd90c34fa48 [ 101.027542][ T5906] [ 101.920389][ T5914] bond1: entered allmulticast mode [ 101.920936][ T5914] 8021q: adding VLAN 0 to HW filter on device bond1 [ 102.140022][ T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 102.187926][ T5931] netlink: 36 bytes leftover after parsing attributes in process `syz.4.67'. [ 102.187954][ T5931] netlink: 16 bytes leftover after parsing attributes in process `syz.4.67'. [ 102.187972][ T5931] netlink: 36 bytes leftover after parsing attributes in process `syz.4.67'. [ 102.284035][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 102.302486][ T24] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 102.308670][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 102.334709][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.334738][ T24] usb 1-1: Product: syz [ 102.334752][ T24] usb 1-1: Manufacturer: syz [ 102.334766][ T24] usb 1-1: SerialNumber: syz [ 102.337444][ T5671] usb 2-1: USB disconnect, device number 2 [ 102.431110][ T9] usb 4-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 102.435103][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.435130][ T9] usb 4-1: Product: syz [ 102.435144][ T9] usb 4-1: Manufacturer: syz [ 102.435158][ T9] usb 4-1: SerialNumber: syz [ 102.475646][ T9] usb 4-1: config 0 descriptor?? [ 102.505472][ T5614] Bluetooth: hci5: urb ffff888036855200 submission failed (2) [ 102.577880][ T24] usb 1-1: Cannot retrieve CPort count: -71 [ 102.577936][ T24] usb 1-1: Cannot retrieve CPort count: -71 [ 102.577958][ T24] es2_ap_driver 1-1:1.0: probe with driver es2_ap_driver failed with error -71 [ 102.590104][ T24] usb 1-1: USB disconnect, device number 3 [ 102.717320][ T5935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.69'. [ 102.733200][ T5935] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 102.899406][ T5941] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 103.230531][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 103.309394][ T5953] input: syz0 as /devices/virtual/input/input7 [ 103.382422][ T9] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 103.382469][ T9] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 103.383813][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 103.383877][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 103.383901][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 103.386869][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 103.386920][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 103.386947][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 103.388094][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 103.388143][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 103.388168][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 103.391412][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 103.391456][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 103.391479][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 103.392616][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 103.392658][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 103.392680][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 103.398786][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 103.398843][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 103.398866][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 103.400135][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 103.400179][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 103.400200][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 103.401906][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 103.401952][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 103.401975][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 103.405371][ T9] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 103.405393][ T9] usb 5-1: Product: syz [ 103.405406][ T9] usb 5-1: Manufacturer: syz [ 103.405418][ T9] usb 5-1: SerialNumber: syz [ 103.439565][ T9] usb 5-1: config 0 descriptor?? [ 103.567493][ T9] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 103.700064][ T9] usb 5-1: USB disconnect, device number 7 [ 103.719181][ T9] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 104.170729][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 104.322948][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 104.324585][ T9] usb 5-1: config index 0 descriptor too short (expected 1572, got 36) [ 104.324613][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.333390][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.333417][ T9] usb 5-1: Product: syz [ 104.333430][ T9] usb 5-1: Manufacturer: syz [ 104.333442][ T9] usb 5-1: SerialNumber: syz [ 104.374192][ T9] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input8 [ 104.416303][ T5977] netlink: 20 bytes leftover after parsing attributes in process `syz.0.79'. [ 104.632342][ T4968] bcm5974 5-1:1.0: could not read from device [ 104.644829][ T4968] bcm5974 5-1:1.0: could not read from device [ 104.650482][ T9] bcm5974 5-1:1.0: could not read from device [ 104.680795][ T5671] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 104.705688][ T9] input: failed to attach handler mousedev to device input8, error: -5 [ 104.713327][ T4968] bcm5974 5-1:1.0: could not read from device [ 104.726785][ T4968] bcm5974 5-1:1.0: could not read from device [ 104.736201][ T9] usb 5-1: USB disconnect, device number 8 [ 104.842013][ T5671] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 104.843526][ T5671] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.843553][ T5671] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 104.845189][ T5671] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 104.845215][ T5671] usb 1-1: SerialNumber: syz [ 104.950647][ T9] usb 4-1: USB disconnect, device number 3 [ 105.073403][ T5671] usb 1-1: 0:2 : does not exist [ 105.073499][ T5671] usb 1-1: unit 5: unexpected type 0x0c [ 105.100746][ T5986] netlink: 92 bytes leftover after parsing attributes in process `syz.2.82'. [ 105.172352][ T5671] usb 1-1: USB disconnect, device number 4 [ 105.243428][ T5624] udevd[5624]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 105.479630][ T5993] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 105.664961][ T6004] ip_tables: iptables: counters copy to user failed while replacing table [ 105.920735][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 106.071077][ T9] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 106.072954][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.073009][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 106.077064][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.077092][ T9] usb 5-1: Product: syz [ 106.077106][ T9] usb 5-1: Manufacturer: syz [ 106.077120][ T9] usb 5-1: SerialNumber: syz [ 106.588901][ T1570] usb 5-1: USB disconnect, device number 9 [ 106.659338][ T6025] netlink: 4 bytes leftover after parsing attributes in process `syz.1.95'. [ 106.909360][ T6031] ip_tables: iptables: counters copy to user failed while replacing table [ 106.975313][ T6032] syz.0.96 uses obsolete (PF_INET,SOCK_PACKET) [ 107.724391][ T6046] fuse: Bad value for 'user_id' [ 107.724413][ T6046] fuse: Bad value for 'user_id' [ 107.742976][ T29] kauditd_printk_skb: 213 callbacks suppressed [ 107.742997][ T29] audit: type=1326 audit(1792669990.196:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6043 comm="syz.4.99" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd90bf9f559 code=0x7ffc0000 [ 107.744001][ T29] audit: type=1326 audit(1792669990.196:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6043 comm="syz.4.99" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7fd90bf9f559 code=0x7ffc0000 [ 107.746246][ T29] audit: type=1326 audit(1792669990.196:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6043 comm="syz.4.99" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd90bf9f559 code=0x7ffc0000 [ 107.746623][ T29] audit: type=1326 audit(1792669990.196:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6043 comm="syz.4.99" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd90bf9f559 code=0x7ffc0000 [ 107.747156][ T29] audit: type=1326 audit(1792669990.196:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6043 comm="syz.4.99" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd90bf9f559 code=0x7ffc0000 [ 107.892451][ T29] audit: type=1326 audit(1792669990.346:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6043 comm="syz.4.99" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd90bf9f559 code=0x7ffc0000 [ 107.892698][ T29] audit: type=1326 audit(1792669990.346:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6043 comm="syz.4.99" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd90bf9f559 code=0x7ffc0000 [ 107.896017][ T29] audit: type=1326 audit(1792669990.346:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6043 comm="syz.4.99" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd90bf9f559 code=0x7ffc0000 [ 108.087412][ T6051] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.506003][ T6059] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 108.776409][ T29] audit: type=1326 audit(1792669991.226:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6043 comm="syz.4.99" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd90bf9f559 code=0x7ffc0000 [ 108.818866][ T29] audit: type=1326 audit(1792669991.266:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6043 comm="syz.4.99" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd90bf9f559 code=0x7ffc0000 [ 108.925073][ T6069] netlink: 16 bytes leftover after parsing attributes in process `syz.2.106'. [ 109.185435][ T5694] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 109.331914][ T5694] usb 3-1: Using ep0 maxpacket: 32 [ 109.341265][ T5694] usb 3-1: unable to get BOS descriptor or descriptor too short [ 109.341315][ T5694] usb 3-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice= 0.40 [ 109.368519][ T5694] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.368547][ T5694] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 109.368607][ T5694] usb 3-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0x54, changing to 0x4 [ 109.391545][ T5694] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.391571][ T5694] usb 3-1: Product: syz [ 109.391585][ T5694] usb 3-1: Manufacturer: syz [ 109.391597][ T5694] usb 3-1: SerialNumber: syz [ 109.501766][ T6074] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 109.502071][ T6074] FAULT_INJECTION: forcing a failure. [ 109.502071][ T6074] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 109.502107][ T6074] CPU: 0 UID: 0 PID: 6074 Comm: syz.0.108 Tainted: G L syzkaller #0 PREEMPT(full) [ 109.502136][ T6074] Tainted: [L]=SOFTLOCKUP [ 109.502142][ T6074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 109.502154][ T6074] Call Trace: [ 109.502162][ T6074] [ 109.502171][ T6074] dump_stack_lvl+0xe8/0x150 [ 109.502208][ T6074] should_fail_ex+0x410/0x560 [ 109.502247][ T6074] _copy_to_user+0x31/0xb0 [ 109.502272][ T6074] simple_read_from_buffer+0xe1/0x170 [ 109.502309][ T6074] proc_fail_nth_read+0x1bb/0x230 [ 109.502337][ T6074] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 109.502365][ T6074] ? rw_verify_area+0x24a/0x4c0 [ 109.502387][ T6074] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 109.502410][ T6074] vfs_read+0x213/0xa80 [ 109.502437][ T6074] ? __pfx___mutex_lock+0x10/0x10 [ 109.502467][ T6074] ? __pfx_vfs_read+0x10/0x10 [ 109.502489][ T6074] ? __fget_files+0x2a/0x420 [ 109.502517][ T6074] ? __fget_files+0x3a2/0x420 [ 109.502544][ T6074] ? __fget_files+0x2a/0x420 [ 109.502577][ T6074] ? fdget+0x1ac/0x250 [ 109.502604][ T6074] ksys_read+0x150/0x270 [ 109.502627][ T6074] ? __pfx_ksys_read+0x10/0x10 [ 109.502669][ T6074] do_syscall_64+0x166/0x520 [ 109.502696][ T6074] ? trace_irq_disable+0x3b/0x140 [ 109.502716][ T6074] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.502737][ T6074] ? clear_bhb_loop+0x70/0xc0 [ 109.502762][ T6074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.502781][ T6074] RIP: 0033:0x7f2f72f5fd8e [ 109.502801][ T6074] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 109.502816][ T6074] RSP: 002b:00007f2f73e2efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 109.502838][ T6074] RAX: ffffffffffffffda RBX: 00007f2f73e2f6c0 RCX: 00007f2f72f5fd8e [ 109.502853][ T6074] RDX: 000000000000000f RSI: 00007f2f73e2f0a0 RDI: 0000000000000004 [ 109.502865][ T6074] RBP: 00007f2f73e2f090 R08: 0000000000000000 R09: 0000000000000000 [ 109.502878][ T6074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 109.502890][ T6074] R13: 00007f2f73226038 R14: 00007f2f73225fa0 R15: 00007f2f7334fa48 [ 109.502924][ T6074] [ 109.868907][ T6077] netlink: 16 bytes leftover after parsing attributes in process `syz.2.106'. [ 109.881932][ T6081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.885958][ T6081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.967715][ T6085] ip_tables: iptables: counters copy to user failed while replacing table [ 110.352559][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 110.437427][ T5694] usb 3-1: USB disconnect, device number 4 [ 110.504008][ T9] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 110.505370][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.505432][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 110.508137][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.508160][ T9] usb 1-1: Product: syz [ 110.508174][ T9] usb 1-1: Manufacturer: syz [ 110.508214][ T9] usb 1-1: SerialNumber: syz [ 110.598203][ T5624] udevd[5624]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 111.027618][ T5694] usb 1-1: USB disconnect, device number 5 [ 111.395608][ T6111] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 111.470419][ T1570] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 111.550243][ T190] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 111.632654][ T1570] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 111.635735][ T1570] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.635752][ T1570] usb 2-1: Product: syz [ 111.635768][ T1570] usb 2-1: Manufacturer: syz [ 111.635776][ T1570] usb 2-1: SerialNumber: syz [ 111.701660][ T190] usb 5-1: Using ep0 maxpacket: 32 [ 111.704889][ T190] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 111.725145][ T190] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 111.725176][ T190] usb 5-1: config 0 has no interface number 0 [ 111.725239][ T190] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 111.744892][ T190] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.744922][ T190] usb 5-1: Product: syz [ 111.744935][ T190] usb 5-1: Manufacturer: syz [ 111.744949][ T190] usb 5-1: SerialNumber: syz [ 111.785072][ T190] usb 5-1: config 0 descriptor?? [ 111.798235][ T6109] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 111.922801][ T6116] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.923498][ T6116] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.012596][ T6109] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 112.107804][ T6116] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.129825][ T6116] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.253911][ T5695] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 112.313029][ T6124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.121'. [ 112.320736][ T24] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 112.399787][ T6117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.402071][ T5695] usb 3-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 112.406405][ T5695] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 112.406430][ T5695] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 112.411237][ T5695] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.411286][ T5695] usb 3-1: Product: syz [ 112.411299][ T5695] usb 3-1: Manufacturer: syz [ 112.411311][ T5695] usb 3-1: SerialNumber: syz [ 112.452528][ T6117] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.461891][ T6117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.484065][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 112.485343][ T24] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 112.494528][ T24] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 112.494554][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.494570][ T24] usb 1-1: config 0 has no interface number 0 [ 112.494607][ T24] usb 1-1: config 0 interface 34 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 112.505686][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.505714][ T24] usb 1-1: Product: syz [ 112.505768][ T24] usb 1-1: Manufacturer: syz [ 112.505782][ T24] usb 1-1: SerialNumber: syz [ 112.524176][ T24] usb 1-1: config 0 descriptor?? [ 112.535553][ T6117] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.535689][ T6117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.546516][ T24] asix 1-1:0.34: probe with driver asix failed with error -22 [ 112.547598][ T6117] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.547713][ T6117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.577046][ T6117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.584534][ T6117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.636677][ T6117] veth1_vlan: left promiscuous mode [ 112.638162][ T6117] veth0_vlan: left promiscuous mode [ 112.650701][ T5695] usblp 3-1:1.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 112.652071][ T6117] veth0_vlan: entered promiscuous mode [ 112.675155][ T6117] veth1_vlan: entered promiscuous mode [ 112.692984][ T6117] veth1_macvtap: left promiscuous mode [ 112.694589][ T6117] veth0_macvtap: left promiscuous mode [ 112.697189][ T6117] veth0_macvtap: entered promiscuous mode [ 112.722058][ T6117] veth1_macvtap: entered promiscuous mode [ 112.742379][ T6117] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 112.743791][ T6117] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 112.745172][ T6117] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 112.746494][ T6117] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 112.762620][ T1570] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 112.762679][ T1570] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 112.764016][ T1570] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 112.779472][ T1570] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 112.800724][ T1570] usb 2-1: USB disconnect, device number 3 [ 112.829722][ T6117] 8021q: adding VLAN 0 to HW filter on device bond1 [ 112.971951][ T5710] usb 3-1: USB disconnect, device number 5 [ 113.001106][ T5710] usblp0: removed [ 114.413677][ T6156] ip_tables: iptables: counters copy to user failed while replacing table [ 114.650028][ T1570] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 114.814318][ T1570] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 114.816889][ T1570] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.816943][ T1570] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 114.842389][ T1570] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.842416][ T1570] usb 4-1: Product: syz [ 114.842429][ T1570] usb 4-1: Manufacturer: syz [ 114.842442][ T1570] usb 4-1: SerialNumber: syz [ 114.889205][ T6161] netlink: 'syz.1.131': attribute type 4 has an invalid length. [ 115.140022][ T1570] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 115.160746][ T190] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 115.160768][ T190] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 115.160929][ T190] asix 5-1:0.188: probe with driver asix failed with error -71 [ 115.190447][ T190] usb 5-1: USB disconnect, device number 10 [ 115.290945][ T1570] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 115.292136][ T1570] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.292168][ T1570] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.292237][ T1570] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.294973][ T1570] usb 2-1: config 0 descriptor?? [ 115.324872][ T24] usb 4-1: USB disconnect, device number 4 [ 115.452280][ T190] usb 1-1: USB disconnect, device number 6 [ 115.939696][ T1570] usbhid 2-1:0.0: can't add hid device: -71 [ 115.939841][ T1570] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 115.949994][ T1570] usb 2-1: USB disconnect, device number 4 [ 115.971523][ T6183] fuse: Bad value for 'fd' [ 116.748586][ T6198] tipc: Started in network mode [ 116.748638][ T6198] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 116.748870][ T6198] tipc: Enabled bearer , priority 0 [ 116.749752][ T6196] tipc: Cannot configure node identity twice [ 116.841917][ T5710] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 116.993649][ T5710] usb 5-1: Using ep0 maxpacket: 32 [ 116.995890][ T5710] usb 5-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 117.013023][ T5710] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 117.013080][ T5710] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 117.013115][ T5710] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 117.016563][ T5710] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.016593][ T5710] usb 5-1: Product: syz [ 117.016608][ T5710] usb 5-1: Manufacturer: syz [ 117.016622][ T5710] usb 5-1: SerialNumber: syz [ 117.054304][ T5710] usb 5-1: config 0 descriptor?? [ 117.277279][ T5694] usb 5-1: USB disconnect, device number 11 [ 117.525146][ T6231] program syz.1.144 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.861456][ T5694] tipc: Node number set to 43690 [ 118.101237][ T44] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 118.278483][ T44] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 118.284265][ T44] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.284316][ T44] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 118.290457][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.290483][ T44] usb 2-1: Product: syz [ 118.290496][ T44] usb 2-1: Manufacturer: syz [ 118.290508][ T44] usb 2-1: SerialNumber: syz [ 118.823816][ T5694] usb 2-1: USB disconnect, device number 5 [ 119.017508][ T6266] FAULT_INJECTION: forcing a failure. [ 119.017508][ T6266] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.017534][ T6266] CPU: 0 UID: 0 PID: 6266 Comm: syz.3.151 Tainted: G L syzkaller #0 PREEMPT(full) [ 119.017551][ T6266] Tainted: [L]=SOFTLOCKUP [ 119.017558][ T6266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 119.017567][ T6266] Call Trace: [ 119.017572][ T6266] [ 119.017577][ T6266] dump_stack_lvl+0xe8/0x150 [ 119.017604][ T6266] should_fail_ex+0x410/0x560 [ 119.017626][ T6266] _copy_from_iter+0x1d3/0x1660 [ 119.017647][ T6266] ? _copy_from_iter+0x21b/0x1660 [ 119.017664][ T6266] ? __pfx__copy_from_iter+0x10/0x10 [ 119.017684][ T6266] ? __pfx__copy_from_iter+0x10/0x10 [ 119.017704][ T6266] copy_page_from_iter+0x219/0x2d0 [ 119.017724][ T6266] skb_copy_datagram_from_iter+0x2f4/0x720 [ 119.017748][ T6266] tun_get_user+0x14fd/0x4450 [ 119.017769][ T6266] ? aa_file_perm+0x18b/0x15f0 [ 119.017784][ T6266] ? aa_file_perm+0x4ed/0x15f0 [ 119.017796][ T6266] ? __pfx_tun_get_user+0x10/0x10 [ 119.017809][ T6266] ? __lock_acquire+0x747/0x2de0 [ 119.017828][ T6266] ? kstrtoull+0x137/0x1d0 [ 119.017846][ T6266] ? ref_tracker_alloc+0x341/0x4b0 [ 119.017859][ T6266] ? lock_acquire+0x115/0x350 [ 119.017876][ T6266] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 119.017890][ T6266] ? lock_acquire+0x115/0x350 [ 119.017906][ T6266] ? tun_get+0x1c/0x2f0 [ 119.017921][ T6266] ? tun_get+0x1c/0x2f0 [ 119.017933][ T6266] ? tun_get+0x1c/0x2f0 [ 119.017947][ T6266] tun_chr_write_iter+0x113/0x200 [ 119.017960][ T6266] vfs_write+0x612/0xba0 [ 119.017977][ T6266] ? __pfx_vfs_write+0x10/0x10 [ 119.017990][ T6266] ? __fget_files+0x3a2/0x420 [ 119.018006][ T6266] ? __fget_files+0x2a/0x420 [ 119.018025][ T6266] ? fdget+0x1ac/0x250 [ 119.018039][ T6266] ksys_write+0x150/0x270 [ 119.018052][ T6266] ? __pfx_ksys_write+0x10/0x10 [ 119.018077][ T6266] do_syscall_64+0x166/0x520 [ 119.018093][ T6266] ? trace_irq_disable+0x3b/0x140 [ 119.018105][ T6266] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.018117][ T6266] ? clear_bhb_loop+0x70/0xc0 [ 119.018131][ T6266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.018142][ T6266] RIP: 0033:0x7f22c995fd8e [ 119.018155][ T6266] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 119.018164][ T6266] RSP: 002b:00007f22ca88efb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 119.018178][ T6266] RAX: ffffffffffffffda RBX: 00007f22ca88f6c0 RCX: 00007f22c995fd8e [ 119.018187][ T6266] RDX: 000000000000fef3 RSI: 0000200000000200 RDI: 00000000000000c8 [ 119.018195][ T6266] RBP: 00007f22ca88f090 R08: 0000000000000000 R09: 0000000000000000 [ 119.018202][ T6266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 119.018209][ T6266] R13: 00007f22c9c26038 R14: 00007f22c9c25fa0 R15: 00007f22c9d4fa48 [ 119.018226][ T6266] [ 119.279188][ T1570] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 119.436374][ T1570] usb 5-1: unable to get BOS descriptor or descriptor too short [ 119.437167][ T1570] usb 5-1: not running at top speed; connect to a high speed hub [ 119.437200][ T1570] usb 5-1: New USB device found, idVendor=05e3, idProduct=0502, bcdDevice=32.00 [ 119.438404][ T1570] usb 5-1: config 9 has an invalid interface number: 70 but max is 0 [ 119.438429][ T1570] usb 5-1: config 9 has no interface number 0 [ 119.438458][ T1570] usb 5-1: config 9 interface 70 has no altsetting 0 [ 119.456581][ T1570] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.456608][ T1570] usb 5-1: Product: syz [ 119.456621][ T1570] usb 5-1: Manufacturer: syz [ 119.456634][ T1570] usb 5-1: SerialNumber: syz [ 119.727830][ T6267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.735055][ T6267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.892035][ T6289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.910869][ T6289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.974363][ T1570] gl620a 5-1:9.70: probe with driver gl620a failed with error -22 [ 120.053346][ T1570] usb 5-1: USB disconnect, device number 12 [ 120.145791][ T6296] FAULT_INJECTION: forcing a failure. [ 120.145791][ T6296] name failslab, interval 1, probability 0, space 0, times 0 [ 120.145831][ T6296] CPU: 0 UID: 0 PID: 6296 Comm: syz.3.156 Tainted: G L syzkaller #0 PREEMPT(full) [ 120.145858][ T6296] Tainted: [L]=SOFTLOCKUP [ 120.145866][ T6296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 120.145877][ T6296] Call Trace: [ 120.145886][ T6296] [ 120.145894][ T6296] dump_stack_lvl+0xe8/0x150 [ 120.145930][ T6296] should_fail_ex+0x410/0x560 [ 120.145967][ T6296] should_failslab+0xa8/0x100 [ 120.146006][ T6296] __kmalloc_cache_noprof+0x9e/0x600 [ 120.146027][ T6296] ? __netlink_dump_start+0xf4/0x7b0 [ 120.146057][ T6296] ? __inet_diag_dump_start+0x90/0xbb0 [ 120.146078][ T6296] ? __inet_diag_dump_start+0x90/0xbb0 [ 120.146108][ T6296] __inet_diag_dump_start+0x90/0xbb0 [ 120.146131][ T6296] ? netlink_lookup+0x30/0x200 [ 120.146159][ T6296] ? netlink_lookup+0x30/0x200 [ 120.146194][ T6296] __netlink_dump_start+0x442/0x7b0 [ 120.146231][ T6296] inet_diag_handler_cmd+0x1df/0x2c0 [ 120.146253][ T6296] ? lock_acquire+0x115/0x350 [ 120.146289][ T6296] ? __pfx_inet_diag_handler_cmd+0x10/0x10 [ 120.146310][ T6296] ? __pfx_inet_diag_dump_start+0x10/0x10 [ 120.146330][ T6296] ? __pfx_inet_diag_dump+0x10/0x10 [ 120.146350][ T6296] ? __pfx_inet_diag_dump_done+0x10/0x10 [ 120.146375][ T6296] ? sock_diag_lock_handler+0x19/0x290 [ 120.146400][ T6296] ? sock_diag_lock_handler+0x19/0x290 [ 120.146429][ T6296] sock_diag_rcv_msg+0x4b0/0x5f0 [ 120.146459][ T6296] netlink_rcv_skb+0x226/0x4a0 [ 120.146491][ T6296] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 120.146516][ T6296] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 120.146561][ T6296] ? netlink_deliver_tap+0x2e/0x1b0 [ 120.146590][ T6296] ? netlink_deliver_tap+0x2e/0x1b0 [ 120.146627][ T6296] netlink_unicast+0x8ef/0xa80 [ 120.146674][ T6296] netlink_sendmsg+0x7f0/0xb20 [ 120.146702][ T6296] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.146726][ T6296] ? aa_sock_msg_perm+0x144/0x210 [ 120.146752][ T6296] ? apparmor_socket_sendmsg+0x98/0x360 [ 120.146782][ T6296] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.146801][ T6296] sock_sendmsg_nosec+0x13a/0x180 [ 120.146826][ T6296] sock_write_iter+0x2de/0x3e0 [ 120.146858][ T6296] ? __pfx_sock_write_iter+0x10/0x10 [ 120.146910][ T6296] do_iter_readv_writev+0x612/0x8c0 [ 120.146936][ T6296] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 120.146963][ T6296] ? bpf_lsm_file_permission+0x9/0x20 [ 120.146991][ T6296] ? security_file_permission+0x75/0x260 [ 120.147030][ T6296] ? rw_verify_area+0x203/0x4c0 [ 120.147055][ T6296] vfs_writev+0x343/0x990 [ 120.147092][ T6296] ? __pfx_vfs_writev+0x10/0x10 [ 120.147135][ T6296] ? __fget_files+0x2a/0x420 [ 120.147164][ T6296] ? __fget_files+0x3a2/0x420 [ 120.147201][ T6296] ? fdget+0x1ac/0x250 [ 120.147228][ T6296] do_writev+0x154/0x2e0 [ 120.147257][ T6296] ? __pfx_do_writev+0x10/0x10 [ 120.147294][ T6296] do_syscall_64+0x166/0x520 [ 120.147320][ T6296] ? trace_irq_disable+0x3b/0x140 [ 120.147339][ T6296] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.147359][ T6296] ? clear_bhb_loop+0x70/0xc0 [ 120.147383][ T6296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.147403][ T6296] RIP: 0033:0x7f22c999f559 [ 120.147424][ T6296] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.147440][ T6296] RSP: 002b:00007f22ca88f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 120.147463][ T6296] RAX: ffffffffffffffda RBX: 00007f22c9c25fa0 RCX: 00007f22c999f559 [ 120.147478][ T6296] RDX: 0000000000000001 RSI: 0000200000000380 RDI: 0000000000000009 [ 120.147491][ T6296] RBP: 00007f22ca88f090 R08: 0000000000000000 R09: 0000000000000000 [ 120.147503][ T6296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.147514][ T6296] R13: 00007f22c9c26038 R14: 00007f22c9c25fa0 R15: 00007f22c9d4fa48 [ 120.147548][ T6296] [ 120.189043][ T5695] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 120.356136][ T5695] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=77.f4 [ 120.379014][ T5695] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 120.379045][ T5695] usb 3-1: config 0 has no interface number 0 [ 120.423043][ T5695] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.423072][ T5695] usb 3-1: Product: syz [ 120.423085][ T5695] usb 3-1: Manufacturer: syz [ 120.423096][ T5695] usb 3-1: SerialNumber: syz [ 120.568156][ T5695] usb 3-1: config 0 descriptor?? [ 120.627939][ T6284] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 120.791718][ T5694] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 120.942514][ T5694] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 120.956051][ T5694] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.956078][ T5694] usb 4-1: Product: syz [ 120.956091][ T5694] usb 4-1: Manufacturer: syz [ 120.956103][ T5694] usb 4-1: SerialNumber: syz [ 121.023778][ T5695] asix 3-1:0.251: probe with driver asix failed with error -71 [ 121.057912][ T5695] usb 3-1: USB disconnect, device number 6 [ 121.421667][ T5694] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 121.421739][ T5694] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 121.999312][ T5694] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 121.999367][ T5694] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 122.002711][ T5694] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 122.056014][ T6340] netlink: 468 bytes leftover after parsing attributes in process `syz.4.166'. [ 122.070313][ T5694] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 122.277957][ T6347] netlink: 256 bytes leftover after parsing attributes in process `syz.2.167'. [ 122.277997][ T6347] netlink: 256 bytes leftover after parsing attributes in process `syz.2.167'. [ 122.370339][ T190] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 122.523132][ T190] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 122.524436][ T190] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.524487][ T190] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 122.593380][ T190] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.593409][ T190] usb 2-1: Product: syz [ 122.593424][ T190] usb 2-1: Manufacturer: syz [ 122.593438][ T190] usb 2-1: SerialNumber: syz [ 123.065220][ T36] IPVS: starting estimator thread 0... [ 123.068246][ T6322] program syz.0.163 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 123.121667][ T44] usb 2-1: USB disconnect, device number 6 [ 123.153027][ T6367] IPVS: using max 26 ests per chain, 62400 per kthread [ 123.305986][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 123.306036][ T29] audit: type=1326 audit(1792670005.756:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6370 comm="syz.2.171" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d7f99f559 code=0x7ffc0000 [ 123.306086][ T29] audit: type=1326 audit(1792670005.756:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6370 comm="syz.2.171" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d7f99f559 code=0x7ffc0000 [ 123.315510][ T29] audit: type=1326 audit(1792670005.766:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6370 comm="syz.2.171" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f8d7f99f559 code=0x7ffc0000 [ 123.315557][ T29] audit: type=1326 audit(1792670005.766:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6370 comm="syz.2.171" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d7f99f559 code=0x7ffc0000 [ 123.315594][ T29] audit: type=1326 audit(1792670005.766:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6370 comm="syz.2.171" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d7f99f559 code=0x7ffc0000 [ 123.318404][ T29] audit: type=1326 audit(1792670005.766:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6370 comm="syz.2.171" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f8d7f99f559 code=0x7ffc0000 [ 123.318448][ T29] audit: type=1326 audit(1792670005.766:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6370 comm="syz.2.171" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d7f99f559 code=0x7ffc0000 [ 123.318485][ T29] audit: type=1326 audit(1792670005.766:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6370 comm="syz.2.171" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d7f99f559 code=0x7ffc0000 [ 123.318766][ T29] audit: type=1326 audit(1792670005.766:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6370 comm="syz.2.171" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8d7f99f559 code=0x7ffc0000 [ 123.319175][ T29] audit: type=1326 audit(1792670005.766:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6370 comm="syz.2.171" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d7f99f559 code=0x7ffc0000 [ 124.010010][ T5710] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 124.160710][ T5710] usb 3-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 124.166703][ T5710] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.166732][ T5710] usb 3-1: Product: syz [ 124.166746][ T5710] usb 3-1: Manufacturer: syz [ 124.166760][ T5710] usb 3-1: SerialNumber: syz [ 124.204524][ T5710] usb 3-1: config 0 descriptor?? [ 124.230766][ T5614] Bluetooth: hci5: urb ffff88802cb73300 submission failed (2) [ 124.471712][ T5710] usb 4-1: USB disconnect, device number 5 [ 124.890008][ T5710] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 124.921916][ T6412] FAULT_INJECTION: forcing a failure. [ 124.921916][ T6412] name failslab, interval 1, probability 0, space 0, times 0 [ 124.921945][ T6412] CPU: 1 UID: 0 PID: 6412 Comm: syz.4.182 Tainted: G L syzkaller #0 PREEMPT(full) [ 124.921982][ T6412] Tainted: [L]=SOFTLOCKUP [ 124.921989][ T6412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 124.922001][ T6412] Call Trace: [ 124.922009][ T6412] [ 124.922017][ T6412] dump_stack_lvl+0xe8/0x150 [ 124.922051][ T6412] should_fail_ex+0x410/0x560 [ 124.922087][ T6412] should_failslab+0xa8/0x100 [ 124.922111][ T6412] ? alloc_empty_file+0x5b/0x1d0 [ 124.922127][ T6412] kmem_cache_alloc_noprof+0x9c/0x600 [ 124.922141][ T6412] ? alloc_empty_file+0x5b/0x1d0 [ 124.922159][ T6412] alloc_empty_file+0x5b/0x1d0 [ 124.922175][ T6412] alloc_file_pseudo+0x110/0x1e0 [ 124.922192][ T6412] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 124.922214][ T6412] anon_inode_getfd+0xca/0x1f0 [ 124.922232][ T6412] __se_sys_fsopen+0x2bd/0x370 [ 124.922249][ T6412] do_syscall_64+0x166/0x520 [ 124.922264][ T6412] ? trace_irq_disable+0x3b/0x140 [ 124.922276][ T6412] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.922288][ T6412] ? clear_bhb_loop+0x70/0xc0 [ 124.922303][ T6412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.922314][ T6412] RIP: 0033:0x7fd90bf9f559 [ 124.922326][ T6412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.922336][ T6412] RSP: 002b:00007fd90cee0028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 124.922350][ T6412] RAX: ffffffffffffffda RBX: 00007fd90c225fa0 RCX: 00007fd90bf9f559 [ 124.922359][ T6412] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 124.922366][ T6412] RBP: 00007fd90cee0090 R08: 0000000000000000 R09: 0000000000000000 [ 124.922373][ T6412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.922380][ T6412] R13: 00007fd90c226038 R14: 00007fd90c225fa0 R15: 00007fd90c34fa48 [ 124.922398][ T6412] [ 124.926072][ T6412] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 125.020049][ T1570] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 125.138745][ T5710] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 125.164508][ T5710] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.169741][ T5710] usb 4-1: config 0 descriptor?? [ 125.191380][ T1570] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 1.00 [ 125.193820][ T1570] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.193876][ T1570] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 8 [ 125.193910][ T1570] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.315513][ T1570] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 125.459901][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 125.605138][ T6421] batman_adv: batadv0: Adding interface: macvtap1 [ 125.605155][ T6421] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 125.605171][ T6421] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 125.658593][ T5710] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 125.659542][ T5710] [drm:udl_init] *ERROR* Selecting channel failed [ 125.720369][ T5710] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1 [ 125.720398][ T5710] [drm] Initialized udl on minor 1 [ 125.750511][ T5710] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 125.758843][ T5710] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 125.786855][ T5710] usb 4-1: USB disconnect, device number 6 [ 126.085697][ T6426] netlink: 'syz.4.184': attribute type 29 has an invalid length. [ 126.177266][ T36] usb 2-1: Failed to submit usb control message: -71 [ 126.177311][ T36] usb 2-1: unable to send the bmi data to the device: -71 [ 126.177330][ T36] usb 2-1: unable to get target info from device [ 126.177345][ T36] usb 2-1: could not get target info (-71) [ 126.177544][ T36] usb 2-1: could not probe fw (-71) [ 126.184286][ T5671] usb 2-1: USB disconnect, device number 7 [ 126.278883][ T6430] FAULT_INJECTION: forcing a failure. [ 126.278883][ T6430] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 126.278919][ T6430] CPU: 1 UID: 0 PID: 6430 Comm: syz.4.186 Tainted: G L syzkaller #0 PREEMPT(full) [ 126.278945][ T6430] Tainted: [L]=SOFTLOCKUP [ 126.278953][ T6430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 126.278964][ T6430] Call Trace: [ 126.278972][ T6430] [ 126.278981][ T6430] dump_stack_lvl+0xe8/0x150 [ 126.279017][ T6430] should_fail_ex+0x410/0x560 [ 126.279052][ T6430] _copy_from_user+0x2d/0xb0 [ 126.279075][ T6430] kstrtouint_from_user+0xd6/0x180 [ 126.279106][ T6430] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 126.279144][ T6430] ? lock_acquire+0x115/0x350 [ 126.279180][ T6430] proc_fail_nth_write+0x8e/0x210 [ 126.279205][ T6430] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 126.279238][ T6430] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 126.279260][ T6430] vfs_write+0x296/0xba0 [ 126.279293][ T6430] ? __pfx_vfs_write+0x10/0x10 [ 126.279313][ T6430] ? __fget_files+0x2a/0x420 [ 126.279339][ T6430] ? __fget_files+0x3a2/0x420 [ 126.279367][ T6430] ? __fget_files+0x2a/0x420 [ 126.279400][ T6430] ? fdget+0x1ac/0x250 [ 126.279425][ T6430] ksys_write+0x150/0x270 [ 126.279448][ T6430] ? __pfx_ksys_write+0x10/0x10 [ 126.279480][ T6430] do_syscall_64+0x166/0x520 [ 126.279506][ T6430] ? trace_irq_disable+0x3b/0x140 [ 126.279526][ T6430] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.279556][ T6430] ? clear_bhb_loop+0x70/0xc0 [ 126.279582][ T6430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.279600][ T6430] RIP: 0033:0x7fd90bf5fd8e [ 126.279623][ T6430] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 126.279637][ T6430] RSP: 002b:00007fd90cedffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 126.279658][ T6430] RAX: ffffffffffffffda RBX: 00007fd90cee06c0 RCX: 00007fd90bf5fd8e [ 126.279691][ T6430] RDX: 0000000000000001 RSI: 00007fd90cee00a0 RDI: 0000000000000005 [ 126.279703][ T6430] RBP: 00007fd90cee0090 R08: 0000000000000000 R09: 0000000000000000 [ 126.279715][ T6430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.279726][ T6430] R13: 00007fd90c226038 R14: 00007fd90c225fa0 R15: 00007fd90c34fa48 [ 126.279759][ T6430] [ 126.659412][ T6453] netlink: 4 bytes leftover after parsing attributes in process `syz.0.192'. [ 126.662505][ T6452] netlink: 12 bytes leftover after parsing attributes in process `syz.0.192'. [ 126.757723][ T5710] usb 3-1: USB disconnect, device number 7 [ 126.796777][ T5671] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 126.961443][ T5671] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 126.963023][ T5671] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 126.963075][ T5671] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 126.966130][ T5671] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.966154][ T5671] usb 2-1: Product: syz [ 126.966168][ T5671] usb 2-1: Manufacturer: syz [ 126.966182][ T5671] usb 2-1: SerialNumber: syz [ 126.970022][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 127.139970][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 127.140754][ T9] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 127.141876][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.144771][ T9] usb 1-1: config 0 descriptor?? [ 127.347475][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 127.371532][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 127.373844][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 127.373905][ T9] usb 1-1: media controller created [ 127.419752][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 127.444095][ T5671] usb 2-1: USB disconnect, device number 8 [ 127.769032][ T6472] FAULT_INJECTION: forcing a failure. [ 127.769032][ T6472] name failslab, interval 1, probability 0, space 0, times 0 [ 127.769060][ T6472] CPU: 1 UID: 0 PID: 6472 Comm: syz.3.198 Tainted: G L syzkaller #0 PREEMPT(full) [ 127.769077][ T6472] Tainted: [L]=SOFTLOCKUP [ 127.769081][ T6472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 127.769090][ T6472] Call Trace: [ 127.769098][ T6472] [ 127.769107][ T6472] dump_stack_lvl+0xe8/0x150 [ 127.769142][ T6472] should_fail_ex+0x410/0x560 [ 127.769178][ T6472] should_failslab+0xa8/0x100 [ 127.769205][ T6472] __kmalloc_noprof+0xf9/0x710 [ 127.769224][ T6472] ? sk_prot_alloc+0x57/0x210 [ 127.769249][ T6472] ? security_sk_alloc+0x52/0x360 [ 127.769270][ T6472] ? security_sk_alloc+0x52/0x360 [ 127.769293][ T6472] ? kmem_cache_alloc_noprof+0x151/0x600 [ 127.769320][ T6472] security_sk_alloc+0x52/0x360 [ 127.769343][ T6472] sk_prot_alloc+0x101/0x210 [ 127.769360][ T6472] sk_alloc+0x3a/0x390 [ 127.769377][ T6472] inet6_create+0x81a/0x1270 [ 127.769392][ T6472] ? inet6_create+0x80/0x1270 [ 127.769417][ T6472] __sock_create+0x4b5/0xac0 [ 127.769448][ T6472] udp_sock_create6+0xd2/0x650 [ 127.769476][ T6472] ? __pfx_udp_sock_create6+0x10/0x10 [ 127.769504][ T6472] ? rxrpc_lookup_local+0xc84/0x15d0 [ 127.769524][ T6472] rxrpc_lookup_local+0xcfa/0x15d0 [ 127.769544][ T6472] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 127.769579][ T6472] ? rxrpc_sendmsg+0x11e/0x6b0 [ 127.769604][ T6472] ? __local_bh_enable_ip+0xd6/0x140 [ 127.769633][ T6472] rxrpc_sendmsg+0x34b/0x6b0 [ 127.769658][ T6472] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 127.769670][ T6472] sock_sendmsg_nosec+0x13a/0x180 [ 127.769684][ T6472] ____sys_sendmsg+0x54e/0x850 [ 127.769703][ T6472] ? __pfx_____sys_sendmsg+0x10/0x10 [ 127.769735][ T6472] ? import_iovec+0x73/0xa0 [ 127.769760][ T6472] ___sys_sendmsg+0x2a5/0x360 [ 127.769783][ T6472] ? __lock_acquire+0x747/0x2de0 [ 127.769813][ T6472] ? __pfx____sys_sendmsg+0x10/0x10 [ 127.769852][ T6472] ? __fget_files+0x3a2/0x420 [ 127.769878][ T6472] ? __fget_files+0x2a/0x420 [ 127.769914][ T6472] __x64_sys_sendmsg+0x1b1/0x290 [ 127.769953][ T6472] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 127.770003][ T6472] do_syscall_64+0x166/0x520 [ 127.770034][ T6472] ? trace_irq_disable+0x3b/0x140 [ 127.770054][ T6472] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.770075][ T6472] ? clear_bhb_loop+0x70/0xc0 [ 127.770099][ T6472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.770118][ T6472] RIP: 0033:0x7f22c999f559 [ 127.770138][ T6472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.770153][ T6472] RSP: 002b:00007f22ca88f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 127.770174][ T6472] RAX: ffffffffffffffda RBX: 00007f22c9c25fa0 RCX: 00007f22c999f559 [ 127.770188][ T6472] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 127.770201][ T6472] RBP: 00007f22ca88f090 R08: 0000000000000000 R09: 0000000000000000 [ 127.770212][ T6472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.770224][ T6472] R13: 00007f22c9c26038 R14: 00007f22c9c25fa0 R15: 00007f22c9d4fa48 [ 127.770254][ T6472] [ 128.244440][ T6477] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 129.090063][ T190] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 129.252771][ T190] usb 2-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 129.274732][ T190] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.274763][ T190] usb 2-1: Product: syz [ 129.274778][ T190] usb 2-1: Manufacturer: syz [ 129.274822][ T190] usb 2-1: SerialNumber: syz [ 129.306256][ T190] usb 2-1: config 0 descriptor?? [ 129.341241][ T5614] Bluetooth: hci5: urb ffff888077d20c00 submission failed (2) [ 129.563077][ T9] az6027: usb out operation failed. (-110) [ 129.563527][ T9] az6027: usb out operation failed. (-32) [ 129.563542][ T9] stb0899_attach: Driver disabled by Kconfig [ 129.563552][ T9] az6027: no front-end attached [ 129.563552][ T9] [ 129.564183][ T9] az6027: usb out operation failed. (-32) [ 129.564197][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 129.613089][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input10 [ 129.642662][ T9] dvb-usb: schedule remote query interval to 400 msecs. [ 129.642681][ T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 129.841258][ T190] usb 2-1: USB disconnect, device number 9 [ 129.912121][ T5695] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 130.014022][ T44] usb 1-1: USB disconnect, device number 7 [ 130.060433][ T5695] usb 5-1: Using ep0 maxpacket: 32 [ 130.069749][ T5695] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 130.084735][ T5695] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 130.084765][ T5695] usb 5-1: config 0 has no interface number 0 [ 130.084795][ T5695] usb 5-1: config 0 interface 184 has no altsetting 0 [ 130.111106][ T5695] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.111147][ T5695] usb 5-1: Product: syz [ 130.111161][ T5695] usb 5-1: Manufacturer: syz [ 130.111175][ T5695] usb 5-1: SerialNumber: syz [ 130.122666][ T5695] usb 5-1: config 0 descriptor?? [ 130.250490][ T44] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 130.476580][ T6506] netlink: 236 bytes leftover after parsing attributes in process `syz.0.209'. [ 130.476608][ T6506] netlink: 236 bytes leftover after parsing attributes in process `syz.0.209'. [ 130.700267][ T6514] netlink: 192 bytes leftover after parsing attributes in process `syz.2.213'. [ 130.860006][ T1570] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 130.887653][ T6525] FAULT_INJECTION: forcing a failure. [ 130.887653][ T6525] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.887692][ T6525] CPU: 1 UID: 0 PID: 6525 Comm: syz.2.217 Tainted: G L syzkaller #0 PREEMPT(full) [ 130.887719][ T6525] Tainted: [L]=SOFTLOCKUP [ 130.887727][ T6525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 130.887737][ T6525] Call Trace: [ 130.887745][ T6525] [ 130.887754][ T6525] dump_stack_lvl+0xe8/0x150 [ 130.887793][ T6525] should_fail_ex+0x410/0x560 [ 130.887832][ T6525] _copy_from_user+0x2d/0xb0 [ 130.887855][ T6525] tcp_repair_options_est+0x102/0x410 [ 130.887893][ T6525] ? __pfx_tcp_repair_options_est+0x10/0x10 [ 130.887921][ T6525] ? do_tcp_setsockopt+0x8f1/0x1f80 [ 130.887954][ T6525] ? __local_bh_enable_ip+0xd6/0x140 [ 130.887984][ T6525] do_tcp_setsockopt+0x195a/0x1f80 [ 130.888021][ T6525] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 130.888062][ T6525] ? aa_sock_opt_perm+0xe8/0x1e0 [ 130.888085][ T6525] ? sock_common_setsockopt+0x36/0xc0 [ 130.888103][ T6525] ? tcp_setsockopt+0x3d/0xe0 [ 130.888127][ T6525] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 130.888152][ T6525] do_sock_setsockopt+0x17c/0x1b0 [ 130.888184][ T6525] __x64_sys_setsockopt+0x13d/0x1b0 [ 130.888218][ T6525] do_syscall_64+0x166/0x520 [ 130.888245][ T6525] ? trace_irq_disable+0x3b/0x140 [ 130.888265][ T6525] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.888286][ T6525] ? clear_bhb_loop+0x70/0xc0 [ 130.888311][ T6525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.888331][ T6525] RIP: 0033:0x7f8d7f99f559 [ 130.888351][ T6525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.888367][ T6525] RSP: 002b:00007f8d8081a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 130.888390][ T6525] RAX: ffffffffffffffda RBX: 00007f8d7fc25fa0 RCX: 00007f8d7f99f559 [ 130.888405][ T6525] RDX: 0000000000000016 RSI: 0000000000000006 RDI: 0000000000000003 [ 130.888417][ T6525] RBP: 00007f8d8081a090 R08: 200000000000028c R09: 0000000000000000 [ 130.888430][ T6525] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 130.888443][ T6525] R13: 00007f8d7fc26038 R14: 00007f8d7fc25fa0 R15: 00007f8d7fd4fa48 [ 130.888477][ T6525] [ 130.988438][ T5695] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 130.988467][ T5695] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 131.012622][ T1570] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 131.013908][ T1570] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.013957][ T1570] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 131.016945][ T1570] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.016966][ T1570] usb 2-1: Product: syz [ 131.016979][ T1570] usb 2-1: Manufacturer: syz [ 131.016991][ T1570] usb 2-1: SerialNumber: syz [ 131.080026][ T5671] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 131.208906][ T5695] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 131.208951][ T5695] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 131.208971][ T5695] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 131.208988][ T5695] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 131.210400][ T5695] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 131.220637][ T5695] usb 5-1: USB disconnect, device number 13 [ 131.237257][ T5671] usb 4-1: New USB device found, idVendor=1235, idProduct=8211, bcdDevice= 0.40 [ 131.244804][ T5671] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1023, setting to 0 [ 131.244846][ T5671] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 0 [ 131.282101][ T5671] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.282127][ T5671] usb 4-1: Manufacturer: ㋷㍑넕㣏缷븿圖શ飇雮雼뵘堮霬ᝄဗ [ 131.539066][ T5695] usb 2-1: USB disconnect, device number 10 [ 131.836542][ T6529] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 132.203260][ T44] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 132.338415][ T6543] netlink: 12 bytes leftover after parsing attributes in process `syz.1.221'. [ 132.362245][ T44] usb 3-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 132.368908][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.368938][ T44] usb 3-1: Product: syz [ 132.368952][ T44] usb 3-1: Manufacturer: syz [ 132.368967][ T44] usb 3-1: SerialNumber: syz [ 132.391718][ T44] usb 3-1: config 0 descriptor?? [ 132.469081][ T5614] Bluetooth: hci5: urb ffff888036e57c00 submission failed (2) [ 132.884157][ T6529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.894730][ T6529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.994682][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.994747][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.050265][ T44] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 133.200951][ T44] usb 2-1: Using ep0 maxpacket: 16 [ 133.201990][ T44] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 133.204285][ T44] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.204316][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 133.204331][ T44] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 133.204351][ T44] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 133.204364][ T44] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 133.206982][ T44] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 133.206998][ T44] usb 2-1: Manufacturer: syz [ 133.226689][ T44] usb 2-1: config 0 descriptor?? [ 133.562486][ T44] rc_core: IR keymap rc-hauppauge not found [ 133.562504][ T44] Registered IR keymap rc-empty [ 133.562619][ T44] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 133.580148][ T44] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 133.608668][ T44] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 133.616254][ T44] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input11 [ 133.642328][ T44] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 133.662130][ T44] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 133.680537][ T44] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 133.700581][ T44] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 133.720123][ T44] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 133.740080][ T44] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 133.761402][ T44] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 133.781020][ T44] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 133.800535][ T44] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 133.820196][ T44] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 133.845052][ T44] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 133.845069][ T44] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 133.996386][ T6551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.010239][ T6551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.070069][ T44] usb 2-1: USB disconnect, device number 11 [ 134.121233][ T9] usb 3-1: USB disconnect, device number 8 [ 134.248943][ T5671] usb 4-1: low speed audio streaming not supported [ 134.248979][ T5671] usb 4-1: low speed audio streaming not supported [ 134.383200][ T6569] netlink: 'syz.0.230': attribute type 1 has an invalid length. [ 134.404356][ T5671] usb 4-1: USB disconnect, device number 7 [ 134.445216][ T5624] udevd[5624]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 134.477546][ T6569] bond2: entered promiscuous mode [ 134.478144][ T6569] 8021q: adding VLAN 0 to HW filter on device bond2 [ 134.525285][ T6569] bond2: (slave bridge2): making interface the new active one [ 134.525311][ T6569] bridge2: entered promiscuous mode [ 134.526578][ T6569] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 134.535462][ T6573] netlink: 'syz.0.230': attribute type 1 has an invalid length. [ 134.584921][ T6572] bond2: (slave bridge3): Enslaving as a backup interface with an up link [ 134.585123][ T6577] ip_tables: iptables: counters copy to user failed while replacing table [ 134.630163][ T190] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 134.781712][ T190] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 134.785597][ T190] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 134.785649][ T190] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 134.799265][ T190] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.799292][ T190] usb 5-1: Product: syz [ 134.799306][ T190] usb 5-1: Manufacturer: syz [ 134.799319][ T190] usb 5-1: SerialNumber: syz [ 134.892439][ T5671] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 134.941830][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 134.941851][ T29] audit: type=1326 audit(1792670017.396:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6582 comm="syz.0.234" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f72f9f559 code=0x7fc00000 [ 134.941901][ T29] audit: type=1326 audit(1792670017.396:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6582 comm="syz.0.234" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2f72f9f559 code=0x7fc00000 [ 135.041736][ T5671] usb 4-1: Using ep0 maxpacket: 8 [ 135.042480][ T5671] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 135.045237][ T5671] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 135.045291][ T5671] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 135.045317][ T5671] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 135.045340][ T5671] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 135.045364][ T5671] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 135.045386][ T5671] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 135.045427][ T5671] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.282125][ T5671] usb 4-1: GET_CAPABILITIES returned 0 [ 135.282264][ T5671] usbtmc 4-1:16.0: can't read capabilities [ 135.337314][ T5671] usb 5-1: USB disconnect, device number 14 [ 135.584502][ T29] audit: type=1326 audit(1792670018.036:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6582 comm="syz.0.234" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f72f9f559 code=0x7fc00000 [ 135.700227][ T5671] usb 4-1: USB disconnect, device number 8 [ 135.938499][ T6614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.248'. [ 136.022180][ T44] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 136.182456][ T44] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 1.00 [ 136.184137][ T44] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.184192][ T44] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 8 [ 136.184236][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.250036][ T44] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 136.409318][ T6630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.409763][ T6630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.640325][ T190] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 136.650354][ T9] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 136.719498][ T6640] usb usb7: usbfs: process 6640 (syz.2.256) did not claim interface 0 before use [ 136.811346][ T190] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 136.813648][ T190] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 136.813678][ T190] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 136.813730][ T190] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 136.813754][ T190] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 136.813795][ T190] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.817126][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 136.818735][ T9] usb 5-1: not running at top speed; connect to a high speed hub [ 136.818768][ T9] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 136.838251][ T190] usb 4-1: config 0 descriptor?? [ 136.843560][ T9] usb 5-1: config 0 has an invalid interface number: 88 but max is 0 [ 136.843587][ T9] usb 5-1: config 0 has no interface number 0 [ 136.843656][ T9] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 46935, setting to 64 [ 136.843680][ T9] usb 5-1: config 0 interface 88 has no altsetting 0 [ 136.860196][ T9] usb 5-1: language id specifier not provided by device, defaulting to English [ 136.877998][ T9] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 136.878026][ T9] usb 5-1: Product: syz [ 136.878038][ T9] usb 5-1: SerialNumber: syz [ 136.900246][ T6631] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 136.904437][ T9] usb 5-1: config 0 descriptor?? [ 136.905230][ T6618] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 136.962041][ T10] usb 1-1: USB disconnect, device number 8 [ 136.972826][ T12] usb 1-1: Failed to submit usb control message: -71 [ 136.972865][ T12] usb 1-1: unable to send the bmi data to the device: -71 [ 136.972882][ T12] usb 1-1: unable to get target info from device [ 136.972896][ T12] usb 1-1: could not get target info (-71) [ 136.972921][ T12] usb 1-1: could not probe fw (-71) [ 137.164070][ T6618] vlan2: entered promiscuous mode [ 137.164119][ T6618] hsr0: entered promiscuous mode [ 137.165278][ T6618] vlan2: entered allmulticast mode [ 137.165297][ T6618] hsr0: entered allmulticast mode [ 137.165309][ T6618] hsr_slave_0: entered allmulticast mode [ 137.165323][ T6618] hsr_slave_1: entered allmulticast mode [ 137.277640][ T9] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.88/input/input12 [ 137.318805][ T9] usb 5-1: USB disconnect, device number 15 [ 137.390507][ T6648] netlink: 76 bytes leftover after parsing attributes in process `syz.0.259'. [ 138.206910][ T190] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 138.206957][ T190] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 138.206984][ T190] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 138.207009][ T190] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 138.207101][ T190] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 138.207127][ T190] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 138.207152][ T190] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 138.207177][ T190] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 138.207202][ T190] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 138.207225][ T190] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 138.306404][ T190] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 138.363356][ T6631] could not allocate digest TFM handle poly1305-neon [ 138.408250][ T190] usb 4-1: USB disconnect, device number 9 [ 138.588521][ T6666] fido_id[6666]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 138.846011][ T6670] team0: entered allmulticast mode [ 138.846036][ T6670] team_slave_0: entered allmulticast mode [ 138.846053][ T6670] team_slave_1: entered allmulticast mode [ 138.847190][ T6670] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 139.990179][ T5671] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 140.018777][ T6690] netlink: 4 bytes leftover after parsing attributes in process `syz.4.273'. [ 140.032788][ T6690] hsr_slave_0: left promiscuous mode [ 140.048374][ T6690] hsr_slave_1: left promiscuous mode [ 140.080661][ T6710] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 140.140656][ T5671] usb 2-1: device descriptor read/64, error -71 [ 140.390083][ T5671] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 140.520301][ T5671] usb 2-1: device descriptor read/64, error -71 [ 140.630440][ T5671] usb usb2-port1: attempt power cycle [ 140.980860][ T5671] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 141.006016][ T5671] usb 2-1: device descriptor read/8, error -71 [ 141.190078][ T1570] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 141.240100][ T5671] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 141.261322][ T5671] usb 2-1: device descriptor read/8, error -71 [ 141.350545][ T1570] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 141.355952][ T1570] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.355972][ T1570] usb 3-1: Product: syz [ 141.355980][ T1570] usb 3-1: Manufacturer: syz [ 141.355989][ T1570] usb 3-1: SerialNumber: syz [ 141.392794][ T5671] usb usb2-port1: unable to enumerate USB device [ 141.393993][ T1570] usb 3-1: config 0 descriptor?? [ 141.397861][ T1570] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 141.397923][ T1570] dvb-usb: bulk message failed: -22 (4/0) [ 141.397932][ T1570] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 141.398012][ T1570] dvb-usb: bulk message failed: -22 (5/0) [ 141.398020][ T1570] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 141.453683][ T44] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 141.468931][ T1570] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 141.486764][ T1570] dvb-usb: Pinnacle 450e DVB-S USB2.0 error while loading driver (-19) [ 141.601676][ T44] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 1.00 [ 141.604498][ T44] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.604538][ T44] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 8 [ 141.604566][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.705778][ T44] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 141.900531][ T44] usb 3-1: USB disconnect, device number 9 [ 142.539757][ T12] usb 5-1: Failed to submit usb control message: -71 [ 142.539784][ T12] usb 5-1: unable to send the bmi data to the device: -71 [ 142.539795][ T12] usb 5-1: unable to get target info from device [ 142.539804][ T12] usb 5-1: could not get target info (-71) [ 142.539821][ T12] usb 5-1: could not probe fw (-71) [ 142.576461][ T9] usb 5-1: USB disconnect, device number 16 [ 142.841762][ T6739] xt_cgroup: no path or classid specified [ 142.843725][ T6740] xt_cgroup: no path or classid specified [ 142.883074][ T6746] netlink: 13 bytes leftover after parsing attributes in process `syz.0.287'. [ 143.621224][ T6745] vlan2: entered promiscuous mode [ 143.621241][ T6745] hsr0: entered promiscuous mode [ 143.621404][ T6745] vlan2: entered allmulticast mode [ 143.621414][ T6745] hsr0: entered allmulticast mode [ 143.621421][ T6745] hsr_slave_0: entered allmulticast mode [ 143.621429][ T6745] hsr_slave_1: entered allmulticast mode [ 143.729988][ T44] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 143.737761][ T6755] netlink: 4 bytes leftover after parsing attributes in process `syz.2.290'. [ 143.794967][ T6755] hsr_slave_0: left promiscuous mode [ 143.809973][ T6755] hsr_slave_1: left promiscuous mode [ 143.881832][ T44] usb 5-1: Using ep0 maxpacket: 16 [ 143.882665][ T44] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 143.906104][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.906134][ T44] usb 5-1: Product: syz [ 143.906148][ T44] usb 5-1: Manufacturer: syz [ 143.906163][ T44] usb 5-1: SerialNumber: syz [ 143.960076][ T44] r8152-cfgselector 5-1: Unknown version 0x0000 [ 143.960096][ T44] r8152-cfgselector 5-1: config 0 descriptor?? [ 144.193434][ T6761] FAULT_INJECTION: forcing a failure. [ 144.193434][ T6761] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.193472][ T6761] CPU: 0 UID: 0 PID: 6761 Comm: syz.1.294 Tainted: G L syzkaller #0 PREEMPT(full) [ 144.193495][ T6761] Tainted: [L]=SOFTLOCKUP [ 144.193500][ T6761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 144.193507][ T6761] Call Trace: [ 144.193512][ T6761] [ 144.193518][ T6761] dump_stack_lvl+0xe8/0x150 [ 144.193541][ T6761] should_fail_ex+0x410/0x560 [ 144.193577][ T6761] _copy_to_user+0x31/0xb0 [ 144.193601][ T6761] simple_read_from_buffer+0xe1/0x170 [ 144.193635][ T6761] proc_fail_nth_read+0x1bb/0x230 [ 144.193661][ T6761] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 144.193680][ T6761] ? rw_verify_area+0x24a/0x4c0 [ 144.193692][ T6761] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 144.193706][ T6761] vfs_read+0x213/0xa80 [ 144.193730][ T6761] ? __pfx___mutex_lock+0x10/0x10 [ 144.193759][ T6761] ? __pfx_vfs_read+0x10/0x10 [ 144.193789][ T6761] ? __fget_files+0x2a/0x420 [ 144.193814][ T6761] ? __fget_files+0x3a2/0x420 [ 144.193830][ T6761] ? __fget_files+0x2a/0x420 [ 144.193849][ T6761] ? fdget+0x1ac/0x250 [ 144.193863][ T6761] ksys_read+0x150/0x270 [ 144.193885][ T6761] ? __pfx_ksys_read+0x10/0x10 [ 144.193917][ T6761] do_syscall_64+0x166/0x520 [ 144.193942][ T6761] ? trace_irq_disable+0x3b/0x140 [ 144.193961][ T6761] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.193977][ T6761] ? clear_bhb_loop+0x70/0xc0 [ 144.193991][ T6761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.194003][ T6761] RIP: 0033:0x7f8811d5fd8e [ 144.194015][ T6761] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 144.194027][ T6761] RSP: 002b:00007f8812bf9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 144.194048][ T6761] RAX: ffffffffffffffda RBX: 00007f8812bfa6c0 RCX: 00007f8811d5fd8e [ 144.194062][ T6761] RDX: 000000000000000f RSI: 00007f8812bfa0a0 RDI: 0000000000000005 [ 144.194075][ T6761] RBP: 00007f8812bfa090 R08: 0000000000000000 R09: 0000000000000000 [ 144.194087][ T6761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.194098][ T6761] R13: 00007f8812026038 R14: 00007f8812025fa0 R15: 00007f881214fa48 [ 144.194128][ T6761] [ 145.346472][ T6780] FAULT_INJECTION: forcing a failure. [ 145.346472][ T6780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.346503][ T6780] CPU: 0 UID: 0 PID: 6780 Comm: syz.1.300 Tainted: G L syzkaller #0 PREEMPT(full) [ 145.346529][ T6780] Tainted: [L]=SOFTLOCKUP [ 145.346536][ T6780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 145.346547][ T6780] Call Trace: [ 145.346553][ T6780] [ 145.346558][ T6780] dump_stack_lvl+0xe8/0x150 [ 145.346581][ T6780] should_fail_ex+0x410/0x560 [ 145.346602][ T6780] _copy_from_user+0x2d/0xb0 [ 145.346615][ T6780] ___sys_sendmsg+0x1c6/0x360 [ 145.346631][ T6780] ? __lock_acquire+0x747/0x2de0 [ 145.346651][ T6780] ? __pfx____sys_sendmsg+0x10/0x10 [ 145.346690][ T6780] ? __fget_files+0x3a2/0x420 [ 145.346707][ T6780] ? __fget_files+0x2a/0x420 [ 145.346729][ T6780] __x64_sys_sendmsg+0x1b1/0x290 [ 145.346747][ T6780] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 145.346775][ T6780] do_syscall_64+0x166/0x520 [ 145.346790][ T6780] ? trace_irq_disable+0x3b/0x140 [ 145.346802][ T6780] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.346814][ T6780] ? clear_bhb_loop+0x70/0xc0 [ 145.346829][ T6780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.346840][ T6780] RIP: 0033:0x7f8811d9f559 [ 145.346853][ T6780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.346862][ T6780] RSP: 002b:00007f8812bfa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 145.346877][ T6780] RAX: ffffffffffffffda RBX: 00007f8812025fa0 RCX: 00007f8811d9f559 [ 145.346886][ T6780] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 145.346894][ T6780] RBP: 00007f8812bfa090 R08: 0000000000000000 R09: 0000000000000000 [ 145.346901][ T6780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.346908][ T6780] R13: 00007f8812026038 R14: 00007f8812025fa0 R15: 00007f881214fa48 [ 145.346930][ T6780] [ 145.392809][ T6779] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 145.562908][ T190] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 145.730012][ T190] usb 4-1: Using ep0 maxpacket: 16 [ 145.731428][ T190] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 145.734954][ T190] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.734987][ T190] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.735025][ T190] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 145.735069][ T190] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.803109][ T190] usb 4-1: config 0 descriptor?? [ 146.352325][ T190] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0002/input/input13 [ 146.506360][ T190] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 146.664114][ T5671] r8152-cfgselector 5-1: USB disconnect, device number 17 [ 147.069800][ T6794] block device autoloading is deprecated and will be removed. [ 147.680059][ T190] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 147.714962][ T9] usb 4-1: reset high-speed USB device number 10 using dummy_hcd [ 147.830906][ T190] usb 5-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=32.4c [ 147.832342][ T190] usb 5-1: config 34 has an invalid interface number: 116 but max is 0 [ 147.832366][ T190] usb 5-1: config 34 has no interface number 0 [ 147.832384][ T190] usb 5-1: config 34 interface 116 has no altsetting 0 [ 147.835924][ T190] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.835948][ T190] usb 5-1: Product: syz [ 147.835957][ T190] usb 5-1: Manufacturer: syz [ 147.835965][ T190] usb 5-1: SerialNumber: syz [ 147.892400][ T9] usb 4-1: device descriptor read/64, error -32 [ 148.126598][ T6785] netlink: 236 bytes leftover after parsing attributes in process `syz.1.301'. [ 148.150145][ T9] usb 4-1: reset high-speed USB device number 10 using dummy_hcd [ 148.306874][ T6815] FAULT_INJECTION: forcing a failure. [ 148.306874][ T6815] name failslab, interval 1, probability 0, space 0, times 0 [ 148.306913][ T6815] CPU: 1 UID: 0 PID: 6815 Comm: syz.0.306 Tainted: G L syzkaller #0 PREEMPT(full) [ 148.306940][ T6815] Tainted: [L]=SOFTLOCKUP [ 148.306948][ T6815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 148.306958][ T6815] Call Trace: [ 148.306966][ T6815] [ 148.306975][ T6815] dump_stack_lvl+0xe8/0x150 [ 148.307009][ T6815] should_fail_ex+0x410/0x560 [ 148.307043][ T6815] ? dup_task_struct+0x52/0xa00 [ 148.307066][ T6815] should_failslab+0xa8/0x100 [ 148.307093][ T6815] ? dup_task_struct+0x52/0xa00 [ 148.307112][ T6815] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 148.307136][ T6815] ? dup_task_struct+0x52/0xa00 [ 148.307166][ T6815] dup_task_struct+0x52/0xa00 [ 148.307195][ T6815] ? _raw_spin_unlock_irq+0x23/0x50 [ 148.307224][ T6815] copy_process+0x7ea/0x44b0 [ 148.307279][ T6815] ? rcu_is_watching+0x16/0xb0 [ 148.307305][ T6815] ? __pfx_copy_process+0x10/0x10 [ 148.307336][ T6815] ? mutex_init_lockdep+0xdf/0x110 [ 148.307362][ T6815] vhost_task_create+0x1f9/0x380 [ 148.307402][ T6815] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 148.307426][ T6815] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 148.307451][ T6815] ? __pfx_vhost_task_create+0x10/0x10 [ 148.307477][ T6815] ? register_lock_class+0x31/0x2e0 [ 148.307515][ T6815] ? __pfx_vhost_task_fn+0x10/0x10 [ 148.307553][ T6815] ? kasan_quarantine_put+0xbb/0x1f0 [ 148.307584][ T6815] kvm_mmu_post_init_vm+0x147/0x2b0 [ 148.307613][ T6815] kvm_arch_vcpu_ioctl_run+0x7c/0x19c0 [ 148.307645][ T6815] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 148.307674][ T6815] kvm_vcpu_ioctl+0xa61/0xfd0 [ 148.307704][ T6815] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 148.307748][ T6815] ? __fget_files+0x2a/0x420 [ 148.307779][ T6815] ? __fget_files+0x2a/0x420 [ 148.307807][ T6815] ? __fget_files+0x2a/0x420 [ 148.307838][ T6815] ? bpf_lsm_file_ioctl+0x9/0x20 [ 148.307867][ T6815] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 148.307888][ T6815] __se_sys_ioctl+0xfc/0x170 [ 148.307915][ T6815] do_syscall_64+0x166/0x520 [ 148.307940][ T6815] ? trace_irq_disable+0x3b/0x140 [ 148.307960][ T6815] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.307980][ T6815] ? clear_bhb_loop+0x70/0xc0 [ 148.308006][ T6815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.308025][ T6815] RIP: 0033:0x7f2f72f9f559 [ 148.308046][ T6815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.308063][ T6815] RSP: 002b:00007f2f73e2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 148.308086][ T6815] RAX: ffffffffffffffda RBX: 00007f2f73225fa0 RCX: 00007f2f72f9f559 [ 148.308101][ T6815] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 148.308115][ T6815] RBP: 00007f2f73e2f090 R08: 0000000000000000 R09: 0000000000000000 [ 148.308127][ T6815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.308139][ T6815] R13: 00007f2f73226038 R14: 00007f2f73225fa0 R15: 00007f2f7334fa48 [ 148.308174][ T6815] [ 148.363514][ T9] usb 4-1: device descriptor read/64, error -32 [ 148.690005][ T9] usb 4-1: reset high-speed USB device number 10 using dummy_hcd [ 148.713573][ T9] usb 4-1: device descriptor read/8, error -32 [ 148.982957][ T9] usb 4-1: reset high-speed USB device number 10 using dummy_hcd [ 149.023647][ T9] usb 4-1: device descriptor read/8, error -32 [ 149.129525][ T6797] raw-gadget.1 gadget.3: failed to queue suspend event [ 149.138683][ T6797] raw-gadget.1 gadget.3: failed to queue disconnect event [ 149.168086][ T5710] usb 4-1: USB disconnect, device number 10 [ 150.369757][ T190] comedi comedi5: could not set alternate setting 3 in high speed [ 150.369776][ T190] usbdux 5-1:34.116: driver 'usbdux' failed to auto-configure device. [ 150.417235][ T190] usbdux 5-1:34.116: probe with driver usbdux failed with error -71 [ 150.439026][ T190] usb 5-1: USB disconnect, device number 18 [ 150.610172][ T5710] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 150.780295][ T5710] usb 3-1: Using ep0 maxpacket: 8 [ 150.788809][ T5710] usb 3-1: New USB device found, idVendor=0497, idProduct=c001, bcdDevice=6c.24 [ 150.805368][ T5710] usb 3-1: config 0 has an invalid interface number: 125 but max is 0 [ 150.805400][ T5710] usb 3-1: config 0 has no interface number 0 [ 150.805448][ T5710] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.845003][ T5710] usb 3-1: config 0 descriptor?? [ 150.871763][ T5710] gspca_main: spca501-2.14.0 probing 0497:c001 [ 150.879585][ T12] IPVS: starting estimator thread 0... [ 150.947812][ T6844] macvlan0: entered promiscuous mode [ 150.976175][ T6851] IPVS: using max 35 ests per chain, 84000 per kthread [ 151.617029][ T5710] gspca_spca501: reg write: error -110 [ 151.617045][ T5710] spca501 3-1:0.125: Reg write failed for 0x02,0xa048,0x00 [ 151.617099][ T5710] spca501 3-1:0.125: probe with driver spca501 failed with error -22 [ 152.333068][ T6865] kvm [6864]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc1) = 0xfffffc00 [ 152.333149][ T6865] kvm [6864]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc2) = 0xfffffc00 [ 152.398983][ T6865] kvm [6864]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0xfffffc00 [ 152.464603][ T6865] kvm [6864]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x186) = 0xfffffc00 [ 152.464680][ T6865] kvm [6864]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x187) = 0xfffffc00 [ 152.660255][ T6876] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 153.031608][ T13] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 153.033790][ T6879] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 154.931948][ T6924] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 155.050411][ T6927] ip6gretap0: entered promiscuous mode [ 155.545091][ T6941] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 155.612099][ T12] IPVS: starting estimator thread 0... [ 155.619069][ T6910] program syz.4.331 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 155.670016][ T190] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 155.700736][ T6947] IPVS: using max 48 ests per chain, 115200 per kthread [ 155.830098][ T190] usb 1-1: unable to get BOS descriptor or descriptor too short [ 155.830157][ T190] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 155.831563][ T190] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 155.838343][ T190] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.838372][ T190] usb 1-1: Product: syz [ 155.838387][ T190] usb 1-1: Manufacturer: syz [ 155.838400][ T190] usb 1-1: SerialNumber: syz [ 156.123296][ T190] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 156.360035][ T10] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 156.515053][ T10] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 156.528156][ T6965] syzkaller0: entered promiscuous mode [ 156.528180][ T6965] syzkaller0: entered allmulticast mode [ 156.546236][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.566006][ T10] usb 2-1: config 0 descriptor?? [ 156.567214][ T6965] tipc: Started in network mode [ 156.567244][ T6965] tipc: Node identity f2087174891, cluster identity 4711 [ 156.567586][ T6965] tipc: Enabled bearer , priority 0 [ 156.642834][ T6965] tipc: Resetting bearer [ 156.769292][ T10] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 156.910895][ T5710] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 157.022005][ T10] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 1 [ 157.022025][ T10] [drm] Initialized udl on minor 1 [ 157.040627][ T1219] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 157.064821][ T5710] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 157.068687][ T5710] usb 4-1: config 239 has an invalid interface number: 83 but max is 0 [ 157.068708][ T5710] usb 4-1: config 239 has no interface number 0 [ 157.108568][ T5710] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.108589][ T5710] usb 4-1: Product: syz [ 157.108598][ T5710] usb 4-1: Manufacturer: syz [ 157.108606][ T5710] usb 4-1: SerialNumber: syz [ 157.211612][ T1219] usb 5-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 157.215078][ T1219] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.215097][ T1219] usb 5-1: Product: syz [ 157.215106][ T1219] usb 5-1: Manufacturer: syz [ 157.215114][ T1219] usb 5-1: SerialNumber: syz [ 157.263261][ T1219] usb 5-1: config 0 descriptor?? [ 157.300289][ T5614] Bluetooth: hci5: urb ffff8880338c5a00 submission failed (2) [ 157.352008][ T5710] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 157.368026][ T6964] tipc: Resetting bearer [ 157.375827][ T5710] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 157.429693][ T5710] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-19) [ 157.455436][ T5710] usb 4-1: USB disconnect, device number 11 [ 157.479115][ T6964] tipc: Disabling bearer [ 157.592296][ T190] usb 1-1: failed to enable PITCH for EP 0x82 [ 157.608067][ T190] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 157.608087][ T190] usb 1-1: clock source 0 is not valid, cannot use [ 157.628377][ T190] usb 1-1: 2:1: cannot get freq (v2/v3): err -71 [ 157.629236][ T190] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 158.021036][ T190] usb 1-1: USB disconnect, device number 9 [ 158.406973][ T5620] udevd[5620]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 158.574525][ T6983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.575133][ T6983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.644179][ T6986] x_tables: duplicate underflow at hook 3 [ 158.845840][ T6989] netlink: 76 bytes leftover after parsing attributes in process `syz.3.354'. [ 158.977763][ T190] usb 3-1: USB disconnect, device number 10 [ 159.099963][ T5671] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 159.185247][ T1570] usb 5-1: USB disconnect, device number 19 [ 159.230762][ T5671] usb 4-1: device descriptor read/64, error -71 [ 159.480100][ T5671] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 159.610051][ T5671] usb 4-1: device descriptor read/64, error -71 [ 159.720718][ T5671] usb usb4-port1: attempt power cycle [ 160.060167][ T5671] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 160.080994][ T5671] usb 4-1: device descriptor read/8, error -71 [ 160.090488][ T190] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 160.244137][ T190] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 1.00 [ 160.245853][ T190] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 160.245886][ T190] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 8 [ 160.245911][ T190] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.317544][ T7003] fuse: Bad value for 'user_id' [ 160.317577][ T7003] fuse: Bad value for 'user_id' [ 160.345514][ T190] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 160.358662][ T5671] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 160.372601][ T5671] usb 4-1: device descriptor read/8, error -71 [ 160.373679][ T7003] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.480331][ T5671] usb usb4-port1: unable to enumerate USB device [ 161.007721][ T7018] FAULT_INJECTION: forcing a failure. [ 161.007721][ T7018] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.007747][ T7018] CPU: 0 UID: 0 PID: 7018 Comm: syz.0.362 Tainted: G L syzkaller #0 PREEMPT(full) [ 161.007765][ T7018] Tainted: [L]=SOFTLOCKUP [ 161.007769][ T7018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 161.007776][ T7018] Call Trace: [ 161.007782][ T7018] [ 161.007787][ T7018] dump_stack_lvl+0xe8/0x150 [ 161.007813][ T7018] should_fail_ex+0x410/0x560 [ 161.007839][ T7018] strncpy_from_user+0x36/0x2c0 [ 161.007859][ T7018] do_getname+0x77/0x250 [ 161.007877][ T7018] do_sys_openat2+0xce/0x200 [ 161.007894][ T7018] ? __pfx_do_sys_openat2+0x10/0x10 [ 161.007913][ T7018] ? __fget_files+0x2a/0x420 [ 161.007949][ T7018] __x64_sys_openat+0x138/0x170 [ 161.007979][ T7018] do_syscall_64+0x166/0x520 [ 161.008004][ T7018] ? trace_irq_disable+0x3b/0x140 [ 161.008025][ T7018] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.008043][ T7018] ? clear_bhb_loop+0x70/0xc0 [ 161.008082][ T7018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.008097][ T7018] RIP: 0033:0x7f2f72f5fd8e [ 161.008110][ T7018] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 161.008120][ T7018] RSP: 002b:00007f2f73e2d3f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 161.008134][ T7018] RAX: ffffffffffffffda RBX: 00007f2f73e2f6c0 RCX: 00007f2f72f5fd8e [ 161.008144][ T7018] RDX: 0000000000000002 RSI: 00007f2f73035ece RDI: ffffffffffffff9c [ 161.008152][ T7018] RBP: 0000200000001000 R08: 0000000000000000 R09: 0000000000000000 [ 161.008159][ T7018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000001800 [ 161.008167][ T7018] R13: 00007f2f73e2dbd0 R14: 000000000000006b R15: 00000000000000c0 [ 161.008185][ T7018] [ 161.016595][ T36] usb 3-1: Failed to submit usb control message: -71 [ 161.016664][ T36] usb 3-1: unable to send the bmi data to the device: -71 [ 161.016706][ T36] usb 3-1: unable to get target info from device [ 161.016720][ T36] usb 3-1: could not get target info (-71) [ 161.016746][ T36] usb 3-1: could not probe fw (-71) [ 161.017751][ T190] usb 3-1: USB disconnect, device number 11 [ 161.332341][ T29] audit: type=1326 audit(1792670043.786:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7021 comm="syz.2.364" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8d7f99f559 code=0x0 [ 161.860085][ T1219] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 161.969073][ T7037] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 162.015908][ T1219] usb 5-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 162.019266][ T1219] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.019285][ T1219] usb 5-1: Product: syz [ 162.019294][ T1219] usb 5-1: Manufacturer: syz [ 162.019302][ T1219] usb 5-1: SerialNumber: syz [ 162.048052][ T1219] usb 5-1: config 0 descriptor?? [ 162.087716][ T5614] Bluetooth: hci5: urb ffff88802cfe2b00 submission failed (2) [ 162.114594][ T10] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 162.114889][ T10] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 162.166807][ T10] usb 2-1: USB disconnect, device number 16 [ 162.201868][ T1219] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 162.282335][ T1219] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 162.578328][ T7053] fuse: Bad value for 'user_id' [ 162.578352][ T7053] fuse: Bad value for 'user_id' [ 162.597237][ T7053] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 162.750656][ T5671] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 162.760595][ T7058] netlink: 'syz.0.375': attribute type 10 has an invalid length. [ 162.760632][ T7058] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 162.899955][ T5671] usb 4-1: Using ep0 maxpacket: 16 [ 162.900712][ T5671] usb 4-1: New USB device found, idVendor=056a, idProduct=0027, bcdDevice= 0.00 [ 162.902051][ T5671] usb 4-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 162.902083][ T5671] usb 4-1: config 0 interface 0 has no altsetting 0 [ 162.902116][ T5671] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.905739][ T5671] usb 4-1: config 0 descriptor?? [ 162.980681][ T10] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 163.129998][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 163.132375][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 163.133447][ T10] usb 2-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 32 [ 163.133474][ T10] usb 2-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 163.133493][ T10] usb 2-1: config 1 interface 0 has no altsetting 0 [ 163.138063][ T10] usb 2-1: string descriptor 0 read error: -22 [ 163.138211][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.191484][ T7060] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 163.315478][ T7050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.317071][ T7050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.360349][ T5671] hid_parser_main: 5 callbacks suppressed [ 163.360379][ T5671] wacom 0003:056A:0027.0003: unknown main item tag 0x0 [ 163.360409][ T5671] wacom 0003:056A:0027.0003: unknown main item tag 0x0 [ 163.360433][ T5671] wacom 0003:056A:0027.0003: unknown main item tag 0x0 [ 163.360457][ T5671] wacom 0003:056A:0027.0003: unknown main item tag 0x0 [ 163.360482][ T5671] wacom 0003:056A:0027.0003: unknown main item tag 0x0 [ 163.360506][ T5671] wacom 0003:056A:0027.0003: unknown main item tag 0x0 [ 163.360529][ T5671] wacom 0003:056A:0027.0003: unknown main item tag 0x0 [ 163.360552][ T5671] wacom 0003:056A:0027.0003: unknown main item tag 0x0 [ 163.360577][ T5671] wacom 0003:056A:0027.0003: unknown main item tag 0x0 [ 163.360602][ T5671] wacom 0003:056A:0027.0003: unknown main item tag 0x0 [ 163.539550][ T7060] netlink: 408 bytes leftover after parsing attributes in process `syz.1.376'. [ 163.544829][ T5710] usb 4-1: USB disconnect, device number 16 [ 163.798278][ T7068] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 163.930502][ T1219] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 163.975227][ T29] audit: type=1326 audit(1792670046.426:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7079 comm="syz.0.380" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f72f9f559 code=0x7ffc0000 [ 163.975472][ T29] audit: type=1326 audit(1792670046.426:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7079 comm="syz.0.380" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f72f9f559 code=0x7ffc0000 [ 163.975667][ T29] audit: type=1326 audit(1792670046.426:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7079 comm="syz.0.380" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f72f9f559 code=0x7ffc0000 [ 163.975844][ T29] audit: type=1326 audit(1792670046.426:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7079 comm="syz.0.380" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f2f72f9f559 code=0x7ffc0000 [ 163.975889][ T29] audit: type=1326 audit(1792670046.426:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7079 comm="syz.0.380" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f72f9f559 code=0x7ffc0000 [ 163.976602][ T29] audit: type=1326 audit(1792670046.426:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7079 comm="syz.0.380" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f72f9f559 code=0x7ffc0000 [ 163.976738][ T29] audit: type=1326 audit(1792670046.426:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7079 comm="syz.0.380" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f72f9f559 code=0x7ffc0000 [ 163.977064][ T29] audit: type=1326 audit(1792670046.426:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7079 comm="syz.0.380" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f72f9f559 code=0x7ffc0000 [ 163.977248][ T29] audit: type=1326 audit(1792670046.426:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7079 comm="syz.0.380" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f72f9f559 code=0x7ffc0000 [ 163.978024][ T7080] FAULT_INJECTION: forcing a failure. [ 163.978024][ T7080] name failslab, interval 1, probability 0, space 0, times 0 [ 163.978054][ T7080] CPU: 0 UID: 0 PID: 7080 Comm: syz.0.380 Tainted: G L syzkaller #0 PREEMPT(full) [ 163.978082][ T7080] Tainted: [L]=SOFTLOCKUP [ 163.978088][ T7080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 163.978101][ T7080] Call Trace: [ 163.978109][ T7080] [ 163.978117][ T7080] dump_stack_lvl+0xe8/0x150 [ 163.978151][ T7080] should_fail_ex+0x410/0x560 [ 163.978186][ T7080] should_failslab+0xa8/0x100 [ 163.978213][ T7080] ? fcntl_setlk+0xa9/0x1060 [ 163.978237][ T7080] kmem_cache_alloc_noprof+0x9c/0x600 [ 163.978259][ T7080] ? fcntl_setlk+0xa9/0x1060 [ 163.978287][ T7080] fcntl_setlk+0xa9/0x1060 [ 163.978303][ T7080] ? kasan_quarantine_put+0xbb/0x1f0 [ 163.978317][ T7080] ? lock_acquire+0x115/0x350 [ 163.978338][ T7080] ? __pfx_fcntl_setlk+0x10/0x10 [ 163.978360][ T7080] do_fcntl+0x988/0x1a80 [ 163.978376][ T7080] ? lock_acquire+0x115/0x350 [ 163.978392][ T7080] ? __pfx_do_fcntl+0x10/0x10 [ 163.978408][ T7080] ? __fget_files+0x2a/0x420 [ 163.978426][ T7080] ? __fget_files+0x2a/0x420 [ 163.978446][ T7080] ? bpf_lsm_file_fcntl+0x9/0x20 [ 163.978466][ T7080] __se_sys_fcntl+0xc8/0x150 [ 163.978480][ T7080] do_syscall_64+0x166/0x520 [ 163.978496][ T7080] ? trace_irq_disable+0x3b/0x140 [ 163.978508][ T7080] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.978520][ T7080] ? clear_bhb_loop+0x70/0xc0 [ 163.978534][ T7080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.978546][ T7080] RIP: 0033:0x7f2f72f9f559 [ 163.978558][ T7080] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.978568][ T7080] RSP: 002b:00007f2f73e2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 163.978583][ T7080] RAX: ffffffffffffffda RBX: 00007f2f73225fa0 RCX: 00007f2f72f9f559 [ 163.978595][ T7080] RDX: 0000200000000140 RSI: 0000000000000007 RDI: 0000000000000000 [ 163.978608][ T7080] RBP: 00007f2f73e2f090 R08: 0000000000000000 R09: 0000000000000000 [ 163.978620][ T7080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.978632][ T7080] R13: 00007f2f73226038 R14: 00007f2f73225fa0 R15: 00007f2f7334fa48 [ 163.978661][ T7080] [ 164.080750][ T1219] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 164.084625][ T1219] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.102635][ T1219] usb 3-1: config 0 descriptor?? [ 164.122037][ T1219] cp210x 3-1:0.0: cp210x converter detected [ 164.414718][ T5710] usb 2-1: USB disconnect, device number 17 [ 164.494383][ T7082] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 164.557250][ T7087] FAULT_INJECTION: forcing a failure. [ 164.557250][ T7087] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 164.557289][ T7087] CPU: 1 UID: 0 PID: 7087 Comm: syz.3.382 Tainted: G L syzkaller #0 PREEMPT(full) [ 164.557316][ T7087] Tainted: [L]=SOFTLOCKUP [ 164.557324][ T7087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 164.557336][ T7087] Call Trace: [ 164.557345][ T7087] [ 164.557354][ T7087] dump_stack_lvl+0xe8/0x150 [ 164.557390][ T7087] should_fail_ex+0x410/0x560 [ 164.557426][ T7087] _copy_from_user+0x2d/0xb0 [ 164.557450][ T7087] __se_sys_name_to_handle_at+0x337/0x9e0 [ 164.557485][ T7087] ? fput+0xa0/0xd0 [ 164.557511][ T7087] ? __pfx___se_sys_name_to_handle_at+0x10/0x10 [ 164.557553][ T7087] ? __seccomp_permit_syscall+0xe7/0x2b0 [ 164.557577][ T7087] ? __x64_sys_name_to_handle_at+0x20/0xc0 [ 164.557610][ T7087] do_syscall_64+0x166/0x520 [ 164.557637][ T7087] ? trace_irq_disable+0x3b/0x140 [ 164.557658][ T7087] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.557679][ T7087] ? clear_bhb_loop+0x70/0xc0 [ 164.557708][ T7087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.557728][ T7087] RIP: 0033:0x7f22c999f559 [ 164.557747][ T7087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.557764][ T7087] RSP: 002b:00007f22ca88f028 EFLAGS: 00000246 ORIG_RAX: 000000000000012f [ 164.557788][ T7087] RAX: ffffffffffffffda RBX: 00007f22c9c25fa0 RCX: 00007f22c999f559 [ 164.557812][ T7087] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 164.557827][ T7087] RBP: 00007f22ca88f090 R08: 0000000000000600 R09: 0000000000000000 [ 164.557840][ T7087] R10: 0000200000002300 R11: 0000000000000246 R12: 0000000000000001 [ 164.557853][ T7087] R13: 00007f22c9c26038 R14: 00007f22c9c25fa0 R15: 00007f22c9d4fa48 [ 164.557887][ T7087] [ 164.778978][ T1219] usb 3-1: cp210x converter now attached to ttyUSB0 [ 164.901643][ T1219] usb 5-1: USB disconnect, device number 20 [ 164.915818][ T5710] usb 3-1: USB disconnect, device number 12 [ 164.973922][ T5710] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 164.995653][ T5710] cp210x 3-1:0.0: device disconnected [ 165.316804][ T7109] input: syz1 as /devices/virtual/input/input14 [ 165.580237][ T1219] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 165.731847][ T1219] usb 5-1: Using ep0 maxpacket: 16 [ 165.734099][ T1219] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 165.743837][ T1219] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.743863][ T1219] usb 5-1: Product: syz [ 165.743875][ T1219] usb 5-1: Manufacturer: syz [ 165.743888][ T1219] usb 5-1: SerialNumber: syz [ 165.760919][ T1219] usb 5-1: config 0 descriptor?? [ 166.052705][ T7130] FAULT_INJECTION: forcing a failure. [ 166.052705][ T7130] name failslab, interval 1, probability 0, space 0, times 0 [ 166.052764][ T7130] CPU: 0 UID: 0 PID: 7130 Comm: syz.3.394 Tainted: G L syzkaller #0 PREEMPT(full) [ 166.052789][ T7130] Tainted: [L]=SOFTLOCKUP [ 166.052795][ T7130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 166.052805][ T7130] Call Trace: [ 166.052812][ T7130] [ 166.052820][ T7130] dump_stack_lvl+0xe8/0x150 [ 166.052849][ T7130] should_fail_ex+0x410/0x560 [ 166.052886][ T7130] should_failslab+0xa8/0x100 [ 166.052919][ T7130] __kmalloc_cache_noprof+0x9e/0x600 [ 166.052937][ T7130] ? __kmalloc_cache_noprof+0x148/0x600 [ 166.052954][ T7130] ? sctp_add_bind_addr+0x8c/0x370 [ 166.052972][ T7130] ? sctp_add_bind_addr+0x8c/0x370 [ 166.052997][ T7130] sctp_add_bind_addr+0x8c/0x370 [ 166.053019][ T7130] sctp_copy_local_addr_list+0x31a/0x4e0 [ 166.053041][ T7130] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 166.053061][ T7130] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 166.053083][ T7130] ? sctp_v6_is_any+0x64/0x80 [ 166.053107][ T7130] ? sctp_copy_one_addr+0x93/0x360 [ 166.053132][ T7130] sctp_bind_addr_copy+0xb3/0x3c0 [ 166.053154][ T7130] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 166.053187][ T7130] sctp_connect_new_asoc+0x2ff/0x6b0 [ 166.053217][ T7130] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 166.053251][ T7130] ? sctp_inet6_send_verify+0x23a/0x300 [ 166.053272][ T7130] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 166.053301][ T7130] __sctp_connect+0x5cb/0xdc0 [ 166.053340][ T7130] ? __pfx___sctp_connect+0x10/0x10 [ 166.053365][ T7130] ? security_sctp_bind_connect+0x7e/0x2c0 [ 166.053395][ T7130] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 166.053419][ T7130] sctp_getsockopt_connectx3+0x227/0x360 [ 166.053445][ T7130] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 166.053473][ T7130] ? sctp_getsockopt+0x12f/0xb90 [ 166.053501][ T7130] ? __local_bh_enable_ip+0xd6/0x140 [ 166.053530][ T7130] sctp_getsockopt+0x984/0xb90 [ 166.053555][ T7130] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 166.053579][ T7130] do_sock_getsockopt+0x51d/0x7e0 [ 166.053612][ T7130] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 166.053657][ T7130] ? __fget_files+0x2a/0x420 [ 166.053713][ T7130] __x64_sys_getsockopt+0x1a4/0x240 [ 166.053750][ T7130] do_syscall_64+0x166/0x520 [ 166.053777][ T7130] ? trace_irq_disable+0x3b/0x140 [ 166.053796][ T7130] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.053816][ T7130] ? clear_bhb_loop+0x70/0xc0 [ 166.053840][ T7130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.053857][ T7130] RIP: 0033:0x7f22c999f559 [ 166.053875][ T7130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.053890][ T7130] RSP: 002b:00007f22ca88f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 166.053913][ T7130] RAX: ffffffffffffffda RBX: 00007f22c9c25fa0 RCX: 00007f22c999f559 [ 166.053928][ T7130] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 166.053940][ T7130] RBP: 00007f22ca88f090 R08: 0000200000000140 R09: 0000000000000000 [ 166.053953][ T7130] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 166.053966][ T7130] R13: 00007f22c9c26038 R14: 00007f22c9c25fa0 R15: 00007f22c9d4fa48 [ 166.053993][ T7130] [ 166.150355][ T5710] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 166.207590][ T1219] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 166.232853][ T1219] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 166.237403][ T1219] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 166.237612][ T1219] usb 5-1: media controller created [ 166.264383][ T1219] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 166.812002][ T7145] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 166.857096][ T1219] zl10353_read_register: readreg error (reg=127, ret==0) [ 166.859553][ T1219] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 166.859574][ T1219] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 166.936734][ T7109] dtv5100: wlen = 0, aborting. [ 167.042993][ T10] usb 5-1: USB disconnect, device number 21 [ 167.153442][ T7148] netlink: 36 bytes leftover after parsing attributes in process `syz.0.398'. [ 167.221409][ T10] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 168.039954][ T44] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 168.250023][ T44] usb 5-1: Using ep0 maxpacket: 8 [ 168.408367][ T7167] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 168.875485][ T7174] FAULT_INJECTION: forcing a failure. [ 168.875485][ T7174] name failslab, interval 1, probability 0, space 0, times 0 [ 168.875532][ T7174] CPU: 1 UID: 0 PID: 7174 Comm: syz.0.405 Tainted: G L syzkaller #0 PREEMPT(full) [ 168.875549][ T7174] Tainted: [L]=SOFTLOCKUP [ 168.875553][ T7174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 168.875561][ T7174] Call Trace: [ 168.875566][ T7174] [ 168.875571][ T7174] dump_stack_lvl+0xe8/0x150 [ 168.875600][ T7174] should_fail_ex+0x410/0x560 [ 168.875627][ T7174] should_failslab+0xa8/0x100 [ 168.875657][ T7174] ? alloc_empty_file+0x5b/0x1d0 [ 168.875684][ T7174] kmem_cache_alloc_noprof+0x9c/0x600 [ 168.875708][ T7174] ? alloc_empty_file+0x5b/0x1d0 [ 168.875740][ T7174] alloc_empty_file+0x5b/0x1d0 [ 168.875767][ T7174] alloc_file_pseudo+0x110/0x1e0 [ 168.875791][ T7174] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 168.875807][ T7174] ? _raw_spin_unlock+0x28/0x50 [ 168.875826][ T7174] sock_alloc_file+0xb8/0x2e0 [ 168.875837][ T7174] ? __sys_socket+0x12b/0x1b0 [ 168.875851][ T7174] __sys_socket+0x13f/0x1b0 [ 168.875866][ T7174] __x64_sys_socket+0x7a/0x90 [ 168.875879][ T7174] do_syscall_64+0x166/0x520 [ 168.875894][ T7174] ? trace_irq_disable+0x3b/0x140 [ 168.875907][ T7174] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.875919][ T7174] ? clear_bhb_loop+0x70/0xc0 [ 168.875933][ T7174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.875945][ T7174] RIP: 0033:0x7f2f72fa0dc7 [ 168.875958][ T7174] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.875968][ T7174] RSP: 002b:00007f2f73e2df98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 168.875982][ T7174] RAX: ffffffffffffffda RBX: 00007f2f73225fa0 RCX: 00007f2f72fa0dc7 [ 168.875991][ T7174] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 168.875999][ T7174] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 168.876006][ T7174] R10: 0000200000000500 R11: 0000000000000286 R12: 0000000000000001 [ 168.876013][ T7174] R13: 00007f2f73226038 R14: 00007f2f73225fa0 R15: 00007f2f7334fa48 [ 168.876032][ T7174] [ 169.339710][ T7185] netlink: 16 bytes leftover after parsing attributes in process `syz.1.408'. [ 169.454250][ T7179] [ 169.456673][ T7179] ====================================================== [ 169.463708][ T7179] WARNING: possible circular locking dependency detected [ 169.470728][ T7179] syzkaller #0 Tainted: G L [ 169.476725][ T7179] ------------------------------------------------------ [ 169.483775][ T7179] syz.2.407/7179 is trying to acquire lock: [ 169.489759][ T7179] ffff888029e78a70 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0x101/0xca0 [ 169.501611][ T7179] [ 169.501611][ T7179] but task is already holding lock: [ 169.509059][ T7179] ffff888029e79b60 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x24d/0x550 [ 169.518037][ T7179] [ 169.518037][ T7179] which lock already depends on the new lock. [ 169.518037][ T7179] [ 169.528522][ T7179] [ 169.528522][ T7179] the existing dependency chain (in reverse order) is: [ 169.537530][ T7179] [ 169.537530][ T7179] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 169.545260][ T7179] lock_sock_nested+0x41/0x100 [ 169.550542][ T7179] smc_listen_out+0xd4/0x3d0 [ 169.555653][ T7179] smc_listen_work+0x81d/0x1410 [ 169.561018][ T7179] process_scheduled_works+0xc3d/0x1630 [ 169.567087][ T7179] worker_thread+0xa47/0xfb0 [ 169.572231][ T7179] kthread+0x38b/0x480 [ 169.576893][ T7179] ret_from_fork+0x514/0xb70 [ 169.582046][ T7179] ret_from_fork_asm+0x1a/0x30 [ 169.587355][ T7179] [ 169.587355][ T7179] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 169.597538][ T7179] __lock_acquire+0x164c/0x2de0 [ 169.602939][ T7179] lock_acquire+0x115/0x350 [ 169.607961][ T7179] __flush_work+0x74c/0xca0 [ 169.613003][ T7179] cancel_work_sync+0xb8/0xf0 [ 169.618196][ T7179] smc_clcsock_release+0x60/0xf0 [ 169.623653][ T7179] __smc_release+0x64e/0x7c0 [ 169.628936][ T7179] smc_close_non_accepted+0xd5/0x1f0 [ 169.634738][ T7179] smc_close_active+0xb30/0xf20 [ 169.640141][ T7179] __smc_release+0x9c/0x7c0 [ 169.645158][ T7179] smc_release+0x2c5/0x550 [ 169.650091][ T7179] __sock_release+0xa0/0x1f0 [ 169.655191][ T7179] sock_close+0x1c/0x30 [ 169.659861][ T7179] __fput+0x408/0xa40 [ 169.664372][ T7179] fput_close_sync+0x11f/0x240 [ 169.669652][ T7179] filp_close_sync+0x6e/0xa0 [ 169.674852][ T7179] put_files_struct+0x230/0x3c0 [ 169.680655][ T7179] do_exit+0x6f0/0x2360 [ 169.685505][ T7179] do_group_exit+0x22d/0x2f0 [ 169.690646][ T7179] get_signal+0x1216/0x12c0 [ 169.695666][ T7179] arch_do_signal_or_restart+0xbb/0x860 [ 169.701727][ T7179] exit_to_user_mode_loop+0x10e/0x770 [ 169.707711][ T7179] do_syscall_64+0x328/0x520 [ 169.712839][ T7179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.719429][ T7179] [ 169.719429][ T7179] other info that might help us debug this: [ 169.719429][ T7179] [ 169.729656][ T7179] Possible unsafe locking scenario: [ 169.729656][ T7179] [ 169.737287][ T7179] CPU0 CPU1 [ 169.742656][ T7179] ---- ---- [ 169.748013][ T7179] lock(sk_lock-AF_SMC/1); [ 169.752539][ T7179] lock((work_completion)(&new_smc->smc_listen_work)); [ 169.761990][ T7179] lock(sk_lock-AF_SMC/1); [ 169.769097][ T7179] lock((work_completion)(&new_smc->smc_listen_work)); [ 169.776022][ T7179] [ 169.776022][ T7179] *** DEADLOCK *** [ 169.776022][ T7179] [ 169.784251][ T7179] locks held by syz.2.407/7179: 3, last CPU#1: [ 169.790399][ T7179] #0: ffff888077324180 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 169.801124][ T7179] #1: ffff888029e79b60 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x24d/0x550 [ 169.810620][ T7179] #2: ffffffff8fd589a0 (rcu_read_lock){....}-{1:3}, at: __flush_work+0x101/0xca0 [ 169.819852][ T7179] [ 169.819852][ T7179] stack backtrace: [ 169.825748][ T7179] CPU: 1 UID: 0 PID: 7179 Comm: syz.2.407 Tainted: G L syzkaller #0 PREEMPT(full) [ 169.836499][ T7179] Tainted: [L]=SOFTLOCKUP [ 169.840815][ T7179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 169.850954][ T7179] Call Trace: [ 169.854415][ T7179] [ 169.857345][ T7179] dump_stack_lvl+0xe8/0x150 [ 169.862038][ T7179] print_circular_bug+0x2e2/0x300 [ 169.867164][ T7179] check_noncircular+0x12f/0x150 [ 169.872096][ T7179] __lock_acquire+0x164c/0x2de0 [ 169.876945][ T7179] ? irqentry_exit+0x2a0/0x9b0 [ 169.881723][ T7179] ? lockdep_hardirqs_on+0x7b/0x110 [ 169.887088][ T7179] ? irqentry_exit+0x2a0/0x9b0 [ 169.891844][ T7179] ? trace_irq_disable+0x3b/0x140 [ 169.896972][ T7179] lock_acquire+0x115/0x350 [ 169.901471][ T7179] ? __flush_work+0x101/0xca0 [ 169.906150][ T7179] ? __flush_work+0x101/0xca0 [ 169.910817][ T7179] __flush_work+0x74c/0xca0 [ 169.915314][ T7179] ? __flush_work+0x101/0xca0 [ 169.919980][ T7179] ? __flush_work+0x101/0xca0 [ 169.924647][ T7179] ? __pfx___flush_work+0x10/0x10 [ 169.929662][ T7179] ? __pfx_wq_barrier_func+0x10/0x10 [ 169.934949][ T7179] ? cancel_work_sync+0x5a/0xf0 [ 169.939797][ T7179] cancel_work_sync+0xb8/0xf0 [ 169.944471][ T7179] smc_clcsock_release+0x60/0xf0 [ 169.949408][ T7179] __smc_release+0x64e/0x7c0 [ 169.954091][ T7179] smc_close_non_accepted+0xd5/0x1f0 [ 169.959369][ T7179] smc_close_active+0xb30/0xf20 [ 169.964234][ T7179] ? __pfx_sock_def_readable+0x10/0x10 [ 169.969784][ T7179] __smc_release+0x9c/0x7c0 [ 169.974319][ T7179] ? __local_bh_enable_ip+0xd6/0x140 [ 169.979673][ T7179] smc_release+0x2c5/0x550 [ 169.984107][ T7179] __sock_release+0xa0/0x1f0 [ 169.988863][ T7179] ? __pfx_sock_close+0x10/0x10 [ 169.993801][ T7179] sock_close+0x1c/0x30 [ 169.997949][ T7179] __fput+0x408/0xa40 [ 170.001946][ T7179] fput_close_sync+0x11f/0x240 [ 170.006734][ T7179] ? __pfx_fput_close_sync+0x10/0x10 [ 170.012016][ T7179] filp_close_sync+0x6e/0xa0 [ 170.016617][ T7179] put_files_struct+0x230/0x3c0 [ 170.021552][ T7179] do_exit+0x6f0/0x2360 [ 170.025721][ T7179] ? __pfx_do_exit+0x10/0x10 [ 170.030306][ T7179] ? do_raw_spin_lock+0x12b/0x2f0 [ 170.035359][ T7179] do_group_exit+0x22d/0x2f0 [ 170.040047][ T7179] ? _raw_spin_unlock_irq+0x23/0x50 [ 170.045240][ T7179] get_signal+0x1216/0x12c0 [ 170.049740][ T7179] arch_do_signal_or_restart+0xbb/0x860 [ 170.055289][ T7179] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 170.061444][ T7179] exit_to_user_mode_loop+0x10e/0x770 [ 170.066806][ T7179] ? rcu_is_watching+0x16/0xb0 [ 170.071562][ T7179] do_syscall_64+0x328/0x520 [ 170.076168][ T7179] ? trace_irq_disable+0x3b/0x140 [ 170.081297][ T7179] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.087477][ T7179] ? clear_bhb_loop+0x70/0xc0 [ 170.092166][ T7179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.098069][ T7179] RIP: 0033:0x7f8d7f99f559 [ 170.102998][ T7179] Code: Unable to access opcode bytes at 0x7f8d7f99f52f. [ 170.110011][ T7179] RSP: 002b:00007f8d8081a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 170.118439][ T7179] RAX: fffffffffffffe00 RBX: 00007f8d7fc25fa8 RCX: 00007f8d7f99f559 [ 170.126422][ T7179] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8d7fc25fa8 [ 170.134402][ T7179] RBP: 00007f8d7fc25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 170.142399][ T7179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.150383][ T7179] R13: 00007f8d7fc26038 R14: 00007f8d7fd4f960 R15: 00007f8d7fd4fa48 [ 170.158369][ T7179] [ 170.215937][ T7193] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 170.821490][ T44] usb 5-1: unable to get BOS descriptor or descriptor too short [ 170.821531][ T44] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 0.40 [ 170.822362][ T44] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 170.822392][ T44] usb 5-1: can't read configurations, error -71