last executing test programs: 10.879962358s ago: executing program 3 (id=4401): pselect6(0x40, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x400000000, 0x0, 0xa, 0x1000, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xc3ac, 0x2}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) 10.794443659s ago: executing program 3 (id=4402): unshare(0x0) r0 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_mtu(r0, 0x29, 0x1e, &(0x7f0000000040)=0x5, 0x4) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="31010000dccd5e08cb060700000800000001090224000100007e000904340102d469e7000905", @ANYRES32], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="14fa000000000000000043000000000000000000d922976bd4981aefad188833c111"], 0x14}}, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0x1}, 0x4) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000200)) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f00000002c0)=ANY=[], 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xe) ioctl$TCFLSH(r3, 0x540b, 0x1) r4 = syz_open_procfs(0x0, 0x0) getdents64(r4, &(0x7f0000002f40)=""/4090, 0xffa) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r8) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r11, {}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x4010804) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r12) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)) 10.208955407s ago: executing program 2 (id=4403): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000280), &(0x7f00000001c0)=0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf252100000008000300", @ANYRES32=r3, @ANYBLOB="08009e0021200000"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4814) 10.016446638s ago: executing program 2 (id=4404): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000140)="010000000980ffff", 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1, 0x1}, &(0x7f00000000c0)=0x8) syz_usb_connect(0x5, 0x46, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xe1, 0xdb, 0xdf, 0x10, 0x421, 0x2d9, 0x5c1b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34, 0x1, 0x3, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x90, 0x0, 0x0, 0x2, 0x2, 0xff, 0x0, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x1, 0x1, 0xb0}, {0x6, 0x24, 0x1a, 0x401}, [@mdlm_detail={0x5, 0x24, 0x13, 0x0, "e9"}]}]}}]}}]}}, 0x0) 9.061078513s ago: executing program 1 (id=4410): socket$kcm(0xf, 0x3, 0x2) syz_open_dev$radio(&(0x7f0000000040), 0x1, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_io_uring_setup(0x49b, &(0x7f00000000c0)={0x0, 0x4661, 0x400, 0x0, 0x123}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x40f6, 0x4f7c, 0x0, 0x0, 0x0) 8.355935196s ago: executing program 3 (id=4412): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001bc0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x6}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000040)="d600be76a8af4822826f8fcd43e2fc88afbc206d591f0dfc6ef0abcb9228447f7579acfdd13ae720fd29a8f0929ae89cd5b36e2a742bd2d21a3b64a03394ae4d2eae936230a288a878d2d2f8cf234dd1e8435042c257167a04087b75", 0x5c}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e23, 0x1, @local, 0x101}, 0x1c, &(0x7f0000001140)=[{&(0x7f0000000140)="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", 0x1000}], 0x1, &(0x7f0000001180)=[@dstopts_2292={{0x3c, 0x29, 0x4, {0x88, 0x4, '\x00', [@generic={0x2, 0x1c, "af91e63c97001c0aa0c43166dc3ab509d46d5c559a3fcb61539fa21f"}, @ra={0x5, 0x2, 0x7}]}}}, @hopopts_2292={{0x134, 0x29, 0x36, {0x73, 0x23, '\x00', [@generic={0x83, 0x2e, "c2f97b9a234c466aec41428640bc7a18b66dcd883ff26d80c8e2dd6ceaeae68f84ba0c76495ea974e905feba9e31"}, @enc_lim, @calipso={0x7, 0x50, {0x2, 0x12, 0x5f, 0xf94a, [0x3, 0x0, 0x2395b1c5, 0x461, 0xffffffffffff7b36, 0x101, 0x81, 0x224, 0x3]}}, @jumbo={0xc2, 0x4, 0xfffffec9}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @generic={0xc, 0x7b, "e62fd9c55989b1c462f74a5e4e93a7113f22bb0cd0f998c485effb6108ceeaf539aaa2d3c8d1a4de0f8fcb22ad6c36e1b10189d920bf9a419f8ef4f9405c2f5ba0e0bcc76391b332c68f99d88ce6e5f5b5a640a0321b6a628ae2d6af8be05a48081fb1604870e360f6363da9515ad150c58e8d57ed53aabd0a5f28"}, @enc_lim={0x4, 0x1, 0xb8}]}}}, @rthdr_2292={{0x64, 0x29, 0x39, {0x32, 0xa, 0x1, 0x7, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, @private2]}}}, @rthdr_2292={{0x64, 0x29, 0x39, {0x8, 0xa, 0x2, 0xfc, 0x0, [@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2]}}}, @rthdrdstopts={{0x3c, 0x29, 0x37, {0x6c, 0x4, '\x00', [@enc_lim, @jumbo={0xc2, 0x4, 0xc00}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x2}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}}}], 0x274}}, {{&(0x7f0000001400)={0xa, 0x4e23, 0x6, @local, 0x7}, 0x1c, &(0x7f0000001880)=[{&(0x7f0000001440)="f6d6bb69278d8ce1d3d7375ea2", 0xd}, {&(0x7f0000001480)="be7a12ea88999b9e957e315bd4755959373811a2f6d49d333e4dac0781b12fa788304008962c515c7a95c974e898f736d69e550a0e73babff900c07c6951fccc7a77f6de273a9b1750ef8cc051fa1cd0476759aae6698aa426154673e3ae287a1efd25c5cc7b3da47a9b6c84e7aff8edb4b63f595b1bce755f0f9a6ee594ffe843dc7b00fcf68dfd964c8979773e288b04d0309df5df76adb15907de9abae319e8f01d3695a0b43cb34d2bd6161b82f5a0cd56df9a43162f2db4c917981706d4ea6f61185cb615d857725d28438a639617c1c6ce61d647797a6e87c4ac3d1fc9258aa92b029fe8459317", 0xea}, {&(0x7f0000001580)="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", 0xfb}, {&(0x7f0000001680)="00653fe5536d436adc13b7124303e96587a383b0bd40ef38ca2281c8", 0x1c}, {&(0x7f00000016c0)="b4cc79799428aad7548f4c821ac51d31300d31fcba340768519b909b40622bc50256e089dac9986314fd8ae31effcb82c69d2897415857889c137eb158ba63ccd9879c5f8937df316281ee66e9df567b469eec8323fa6c1710", 0x59}, {&(0x7f0000001740)="9675f9573c9024c717683692ebe70867da4219f0bd8bf1e3e866b55c08511a7ab9aa05347e1dde07046b8df864055346367f31c0be4f9bf69269c0e741b517e4832a", 0x42}, {&(0x7f00000017c0)="db2ee6a157e1aa3d44f116edb049ff8466859dfcc2c2b6e2a2d819dd79e176f7eb23ebb7cee59fe52738e14536d4116addd32b23e8596502c63619b8ffaa53319af0367dfb742e25e98c402215ae41ccb6ba4959ce448a79ff7dc8f4c5912ebf7ca22578518a97cfd20e39b1f62c29704de3804e7e980cf0b046615a71377b5974989592d2f5cd36b371d814ba", 0x8d}], 0x7, &(0x7f00000018c0)}}, {{&(0x7f0000001900)={0xa, 0x4e24, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000001a80)=[{&(0x7f0000001940)="d0876ffab1b4365257151459e55b85aeb54212fd18fde5abe7727ed7d0307e0d38f807db14618f8bf80b8df9903ac0159f828f761dbf62", 0x37}, {&(0x7f0000001980)="91791ce45c41991e107a64e7593f0e5fc67a672ee14388d7e8978edab1e9aef75eaa0b982ffb995fe422a1d2de07eaf5e23066533f38a6632117c17da30c000889478216bb07bab8da5a28dc7f719fbe134578ba5b64a4c274144ce8414b321007adcc3486fc6cffafcd8ed2b6b1331673db25301841385e0ee9eb1be855387c0efd3895a2b246bc55d8dc56b4e3a3e5fd28f224699c8888fd3881624c7c6cafc024295a2d67668f39905aea7aff28d52d4fa8eeb2efee7954bf42be1fa2ceafb62b9b7ca123454ac0a9d1b262c4e4c017506774e9b7b164b01ad1054482d571da328a1669b6aa70771a656a98764727d5a99cd2875f9612", 0xf8}], 0x2, &(0x7f0000001ac0)=[@pktinfo={{0x20, 0x29, 0x32, {@remote}}}, @rthdr={{0x54, 0x29, 0x39, {0x5c, 0x8, 0x2, 0x4, 0x0, [@local, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, @private0]}}}, @dstopts_2292={{0x34, 0x29, 0x4, {0x0, 0x3, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x14}}, @jumbo={0xc2, 0x4, 0x5}, @pad1]}}}, @dontfrag={{0x10, 0x29, 0x3e, 0x9}}, @rthdrdstopts={{0x1c, 0x29, 0x37, {0x11, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0xdd5}]}}}, @rthdrdstopts={{0x1c, 0x29, 0x37, {0xcc7d9f0528f34f6e, 0x1, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}], 0xf0}}], 0x4, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) fremovexattr(r1, &(0x7f0000000000)=@known='user.incfs.id\x00') syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000004, 0x42032, 0xffffffffffffffff, 0x80000000) 7.806836582s ago: executing program 3 (id=4413): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000340)="31ad81df3fb2ddf597267390417d0a0be391dae8d945c26057d449295d390d081b", 0x33fe0}], 0x1}, 0x14) r5 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xff}, 0x7}, 0x1c) socket(0x2, 0x3, 0xff) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue0\x00', 0x200000}) 6.786440323s ago: executing program 2 (id=4415): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x92) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0x81, 0x9, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}}, 0x844) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@newtfilter={0x124, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {}, {0xfff1, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0xf0, 0x2, [@TCA_MATCHALL_ACT={0xec, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x6, 0x5, 0xea, 0x100004}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @remote}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbedit={0x94, 0x2, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0x8, 0x10000000, 0x7ff, 0xffffffff}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x83350}, @TCA_SKBEDIT_MARK={0x8}]}, {0x3f, 0x6, "04f1182a84f597cf3b9523440c209d73ff6282fffbe76149d4d47c7f085e00962e0197abc32c39d6c30a5d1b7be4d09795bce6d91a10a26c1a35fc"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r7 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r7, 0x5456, &(0x7f0000000880)={0xfffffffd, 0x1, 0x8, 0x8000, 0x10, "c588c203364d75c74c9b84836eae88a902fdf6"}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0xc0a85320, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000340)={0x5, 0x90, 0x1, 'queue0\x00', 0x3}) close(r6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x800000, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1800}, 0x48) ioctl$TIOCMGET(0xffffffffffffffff, 0x541e, &(0x7f0000000040)) 6.512700258s ago: executing program 4 (id=4416): symlinkat(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$kcm(0xa, 0x3, 0x3a) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x602942, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) (fail_nth: 4) 6.399185198s ago: executing program 3 (id=4417): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x11, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x4, 0x100}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f00000030c0)={0x765, {"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", 0x1000}}, 0x1006) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r4, 0x80dc5521, &(0x7f0000000880)=""/108) io_uring_enter(r1, 0x92, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000180)={0xc, &(0x7f0000000080)={0x40, 0x4, 0x9b, {0x9b, 0x11, "14233c1bbc2cb3a59fe4b4c3f944bbc68b7b713e4cc3d4465d002686a9fa305e1623b575bfb3cfc5c58a41bcb094b407a7aadbe5a1d98683e4243245090acde922ab357f8329bc3767b5ee5bea41fd7ac8a2c80297b8879b6b180fea95b980112925a5da4c9d4c129fb946f826ffa838017cf3a7d2b2ec325a9c1412a88fdff07206999e817b0a656bb81de54a499c63ca1a9a89c8af090bfd"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40e}}}, &(0x7f0000000400)={0x1c, &(0x7f00000001c0)={0x40, 0x30, 0x2a, "5258c84a80bdb675ede069daaeddda3eded605186955c21e9f233b6401caa70b0214c15e314e54e6989f"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x6}, 0x0, &(0x7f0000000380)={0x20, 0x1, 0x1, 0xa8}, &(0x7f00000003c0)={0x20, 0x0, 0x1, 0x9}}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$SNDCTL_SEQ_CTRLRATE(r6, 0xc0045103, &(0x7f0000000080)=0x6) sendmmsg(0xffffffffffffffff, &(0x7f0000001800)=[{{&(0x7f0000000180)=@qipcrtr={0x2a, 0xffffffff00000005, 0x7ffe}, 0x80, 0x0}}], 0x1, 0x4004025) syz_usb_control_io$uac1(r0, &(0x7f0000000580)={0xc, &(0x7f0000000440)={0x20, 0xd, 0x10, {0x10, 0x30, "b23a6719b3b95ff72557b99c25aa"}}, &(0x7f00000004c0)={0x0, 0x3, 0x7c, @string={0x7c, 0x3, "70ac30b12bd9a656785cd33db10af82d0be3fbfc3c8eaf7e89e356a6109d0dfa9c2024eb467a2915e07b1ce5c460d8c1ce4f00e9682eef8319f74b4e88a338bdd77760cdb17f656d9e6b2bfaa55d11eaeaea618c1e7e148c3c19de5833747380f9948a50bb50ef470d5f474b3581b67c7e3cfebe9ed0bb634de3"}}}, &(0x7f0000000840)={0x24, &(0x7f0000000600)={0x0, 0xf, 0x1b, "02d62b0a7bd4540855dedee631907c05e95a52db4d4aeeed3d4ce4"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0xf}, &(0x7f00000006c0)={0x20, 0x81, 0x2, "bfa2"}, &(0x7f0000000700)={0x20, 0x82, 0x1, "82"}, &(0x7f0000000740)={0x20, 0x83, 0x2, "11c3"}, &(0x7f0000000780)={0x20, 0x84, 0x2, "eb1f"}, 0x0}) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f0000000040), 0x10) sendmsg$can_bcm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x38}, 0x300}, 0x0) r8 = memfd_create(&(0x7f0000000940)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9b5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\\\xb0:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0f\x1e=\xd8\x82\xa4%\xabH\x8e\xe1\x89b\xbco\x92\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@T\xd8\xaf\x1e\xc5\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec\x91\xf5M*,\x17\x0f\x98@!\xced\a\x01\x99($3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1exQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\x05{\'\x8b\xdf\xa1.E\b1\xcb\xa2\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r6, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r6}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r7 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r9, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) sendmmsg(r9, &(0x7f0000007fc0), 0x800001d, 0x1c) setsockopt$inet_mreq(r8, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}}}, 0x24}}, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000080)="66b98703000066b85200000066ba000000000f300f01c8660f3880970080660f388278f066b9e40900000f32670f6ac5b8f1048ee8f30f08baf80c66b8c4acc38066efbafc0c66edb800008ee8", 0x4d}], 0x1, 0x61, &(0x7f00000001c0)=[@flags={0x3, 0x100000}], 0x1) 5.304454571s ago: executing program 4 (id=4422): socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000034c0)=[{{&(0x7f0000000000)=@ethernet={0x0, @local}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/162, 0xa2}], 0x1}, 0x5}, {{&(0x7f0000000300)=@ethernet, 0x80, &(0x7f0000000500)=[{&(0x7f0000000380)=""/163, 0xa3}, {&(0x7f0000000440)=""/121, 0x79}, {&(0x7f00000005c0)=""/4092, 0xffc}], 0x3, &(0x7f0000000540)=""/42, 0x2a}, 0xffffff74}, {{&(0x7f00000015c0)=@qipcrtr, 0x80, &(0x7f0000001c80)=[{&(0x7f0000001640)=""/212, 0xd4}, {&(0x7f0000001740)=""/57, 0x39}, {&(0x7f0000001780)=""/150, 0x96}, {&(0x7f0000001840)=""/238, 0xee}, {&(0x7f0000001940)=""/161, 0xa1}, {&(0x7f0000001a00)=""/75, 0x4b}, {&(0x7f0000001a80)=""/76, 0x4c}, {&(0x7f0000001b00)=""/75, 0x4b}, {&(0x7f0000001b80)=""/45, 0x2d}, {&(0x7f0000001bc0)=""/159, 0x9f}], 0xa, &(0x7f0000001d00)=""/190, 0xbe}, 0x6}, {{0x0, 0x0, &(0x7f0000002180)=[{&(0x7f0000001dc0)=""/1, 0x1}, {&(0x7f0000001e00)=""/64, 0x40}, {&(0x7f0000001e40)=""/109, 0x6d}, {&(0x7f0000001ec0)=""/59, 0x3b}, {&(0x7f0000001f00)=""/88, 0x58}, {&(0x7f0000001f80)=""/70, 0x46}, {&(0x7f0000002000)=""/126, 0x7e}, {&(0x7f0000002080)=""/247, 0xf7}], 0x8, &(0x7f00000021c0)=""/57, 0x39}, 0xfffffffd}, {{&(0x7f0000002200)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f00000022c0)=[{&(0x7f0000002280)=""/28, 0x1c}], 0x1, &(0x7f0000002300)=""/237, 0xed}, 0x5}, {{&(0x7f0000002400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000002480), 0x0, &(0x7f00000024c0)=""/4096, 0x1000}, 0x12}], 0x6, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x8501) pselect6(0x40, &(0x7f0000000080)={0x8, 0x0, 0x4, 0x0, 0x0, 0x2, 0x9, 0x10001}, 0x0, 0x0, 0x0, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100)='&', 0x1}], 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x4, 0x2) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc04c565d, &(0x7f0000000140)=@userptr={0x9, 0x2, 0x4, 0x20, 0x3, {0x0, 0xea60}, {0x1, 0x2, 0x3, 0x2e, 0x7, 0x4, "f9411003"}, 0x2, 0x2, {0x0}, 0xfffffff3}) sched_setattr(0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010800e4ffffffffff3f00000000", @ANYRES32=0x0, @ANYBLOB="312000000000000014002b8008000100", @ANYRES16=r4, @ANYBLOB="08d9be6e9e000000e5001b0000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20048855}, 0x0) syz_open_procfs(0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x4) connect$inet(r5, &(0x7f00000000c0)={0x2, 0xfffa, @empty}, 0x10) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) r6 = socket$inet6(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x28, 0x14, 0x509, 0x70bd2a, 0x25dfdbfd, {0x2, 0x8, 0x0, 0xff, r8}, [@IFA_LOCAL={0x8, 0x2, @private=0xa010100}, @IFA_FLAGS={0x8, 0x8, 0x330}]}, 0x28}, 0x1, 0x0, 0x0, 0x24048881}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) socket$l2tp(0x2, 0x2, 0x73) syz_open_dev$vim2m(&(0x7f0000000180), 0xe, 0x2) 4.573657744s ago: executing program 2 (id=4424): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x14) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$dlm_control(0xffffff9c, &(0x7f0000000000), 0x2001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x43}, 0x48) 4.451915916s ago: executing program 1 (id=4425): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000028c0)={'veth0_to_bridge\x00', &(0x7f00000000c0)=@ethtool_coalesce={0xe, 0x1, 0xfffffff9, 0x5, 0x4, 0x200, 0x9804, 0x9, 0x6, 0x9, 0x0, 0x0, 0x384f, 0x9847, 0x101, 0x0, 0x1000, 0x5, 0x356, 0x6, 0xf, 0x3, 0x101}}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12014000f273a440cd061501c3d90102030109021b0001000000000904000c019d0178000905", @ANYBLOB="872f", @ANYRESHEX], 0x0) syz_usb_connect(0x3, 0x34, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000b5e67420ac0592027388010203010902220001000000440904770001039a02000905000000000000000705e3"], 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x40, 0x1e5782) 4.36096046s ago: executing program 4 (id=4427): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000340)="31ad81df3fb2ddf597267390417d0a0be391dae8d945c26057d449295d390d081b", 0x33fe0}], 0x1}, 0x14) r5 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xff}, 0x7}, 0x1c) socket(0x2, 0x3, 0xff) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue0\x00', 0x200000}) 3.763569734s ago: executing program 0 (id=4428): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x0, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x23635de98487b93e) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f00000001c0)) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x14, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000040)=0xc) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000580)=0x10) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000300002e00000008000380", @ANYRES32=r6, @ANYBLOB="0a0034000202020202020000080026006c09"], 0x30}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0x1, 0x283}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r9 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r9, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @local}, 0x10) r10 = syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r11, r12, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x8}) io_uring_enter(r10, 0x207a98, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x48, 0x4007, @fd_index=0x3, 0x22, 0x0, 0x0, 0x6, 0x1}) 3.0606394s ago: executing program 2 (id=4429): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)={0x14, 0x17, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x8085}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x4001) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = syz_open_dev$media(&(0x7f00000001c0), 0x9, 0x402) ioctl$MEDIA_IOC_ENUM_ENTITIES(r7, 0xc1007c01, &(0x7f0000000600)) ioctl$sock_SIOCGIFINDEX(r6, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x9b52812a) r8 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r8, 0x641f) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.943952108s ago: executing program 4 (id=4430): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000980)={[0x1ffffffffd]}, 0x8, 0x0) syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3416, 0x13100, 0x2, 0x4, 0x0, r0}, &(0x7f0000000180)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x85, &(0x7f0000000540)={r4, 0x88, "0200000000000000703fcd09bdf0b493d4323725cdcff2eae49f89843a5318d5ba093aa761132b5e2e8c4eb4eb76aa3f3069d1d5a64a2c75a2d59986feff48dc51b23de50b4c052630642b3348c700b558041310b18d364b87808f6ec3b597fae6ac116b5b25b716a73e48c8c8f8ec21e15e7a5d6743243dfde88d2786c355a2c222145b4ddeb213"}, &(0x7f0000000500)=0x90) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet6(r5, &(0x7f0000000500)={&(0x7f0000000080)={0xa, 0x4e23, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000000c0)="06", 0x1}], 0x1}, 0x80001) r6 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet6(r5, &(0x7f0000000280)='1O', 0x2, 0x0, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40}, 0x1c) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000340)={r7, 0x3}, 0x8) r8 = add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r8, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000480)) add_key$user(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x0}, &(0x7f0000000d80)="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", 0x1000, r8) sendmmsg$inet_sctp(r0, &(0x7f0000000c40)=[{&(0x7f0000000000)=@in={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="c086c2cf6aaac3e1fb7f1b1d03664a0ce838bd8473c2dc4b333ad22d50b365c32cb3db99296ccdc6ab043003f03488a98d69ad69ecd61d256063714f3d1bee17522036068de49829e485288094ba32142fcfdbdc92380d502ab8c6df062dc9b304540b09470ab4fbc85256abe13c5b0024a357f393a0dbd265f2bde291b7e880fa6c8b0302f028a9d28b127d4b28177dee6beb8e70e228e62228f29749634ae887495395416e24e596a68ce775200d9d8f03624822", 0xb5}], 0x1, &(0x7f0000000140)=[@dstaddrv6={0x1c, 0x84, 0x8, @remote}], 0x1c, 0x4000000}, {&(0x7f0000000180)=@in6={0xa, 0x4e20, 0x2, @private2, 0x8}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000001c0)="83b02b4066631f767129e328a3fad85ff23c4a0c9acd0fcccbe56806482fdaaef1661b85a1a4020afa42e57acd63b10b180d4ced9299e22c60c006469cee3f389f40fb1bd70889f7949ee7e201efb38f21a84702072401884f99d8f9791ffdac4adbbbfa61406deeeaf40e2fc100e34290442cdec8410c323b8ee561c5784fd8109c40bd6137a7d1717ef545fdbeb021ae6e9e30dd5fb987e1d5e73aec99d788045761703c0be178f02f0afc34e1222e40ae3fb9e7cdf30bda709fd149df0a938b39751c28a551", 0xc7}, {&(0x7f00000002c0)="42939e1269009ee2c042a3fdf83e6cabd1827ad70b25ca65b1b32ca87d1f8438849e9c2b94cb2bb8905c809ef8eca460a7e7a9bbda640a410df783b552ddccde378f6c128941aad9a8452e", 0x4b}, {&(0x7f0000000340)="dbf587a307a6d1b40923da598486f8a076b723552df714c998328df40a7ed97084007a386f3de244940c572f4576b49ed9355163a2e31473644a24b8c9b48b3b0c58d03f0cb4d67dda5679cbe4664ea1efda33d4eaa4045488650e6f51bd5ff95d07a9cfb684cf4eec5326285de45e1099859ace9983fcc29bece773f83365f885d74121f9d858da8d7c34", 0x8b}, {&(0x7f0000000400)="62a9bb6a7f74a49a03c45e217c", 0xd}, {&(0x7f0000000840)="5a1e94de475c1c6be73012d9d8243f104d87c50c85cea025bc9ccc998a9fd4ef85585380fe46e7aa1bb10a52de8895faa8d07ac7acf525d2cb9fc6a63716a5ea8b0ed66db97f0b282e96bc546163e8921c4415bcdd965394494b4632272f20754c9b4017c7bfd8c0a7cbb0cebf3febbb8589ace89317a76aeff4f1f4b90c36d1c72924378487c093f03428e9ecadd0f17c3e2c7ae10b8eb0c1422641bfaa7323e9b5930b727abe3fbfaded0484a884bb7200aa97238f8a8a", 0xb8}], 0x5, &(0x7f0000000540)=[@authinfo={0x10, 0x84, 0x6, {0x2}}], 0x10, 0x20000000}, {&(0x7f0000000580)=@in={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000780)=[{&(0x7f00000005c0)="eab01454c8593b428177326790e75b3940b8c23f10bfd0a0cb36bcd8bb9b039608bf7c822bf9966cba4211ac687982d47e3b6e3696b2439463f894a1474d9f1a1bde02409c4512a30e085c00ad77f43fb7a0654c428915ab6d4b46effdcc380c57ebd77cc0f7d648c6fb0498cbca1fa883bbe84e828ab06202988ffc5acff72716732287627b3de16aed602d566f44fb0e4931dc9df6b4b58d27765d28d584bc4f50d571", 0xa4}, {&(0x7f0000000680)="82ab66d242c146ae7010633ce4faf1357e6b0defb28fb959a2a7e53b6d54ad22714c6c1c100a583272680f4fba2fcba167921cdec41a9d4c807241f5118abae3bc37f1cefc425471ccd4b927307506f2eb93891a0b991dec947ee89a9094a9d1abae0e74188eeb284998f52eedc44d59b57bf1b415ab24f3b368862f77dee9f422036d19d14b20e6274fd17307bd385266acc6f7e82a42d0fc9f63a2bcd8868c77684d9d98f6cfb2ae8a6d9b6239f94cbc72c48c2c4f9acb1a671584c45cdb0eaf7906ce42b299b820804f1e3c7545ce176abfd45c72584654f2b8c94af83df42fd6a63292c0b8", 0xe7}], 0x2, 0x0, 0x0, 0x40}, {&(0x7f00000007c0)=@in={0x2, 0x1d, @rand_addr=0x64010100}, 0x10, &(0x7f0000000900)=[{&(0x7f0000000800)="5bc9ef84e5c99310eef4cb998cf9a65ee4bf75b8e17390dfba52566090b94dcfc67c2b1adbf057954ba7c7ad94d551a16bfe45877ffee5b1280f60d074af92b7", 0x40}, {&(0x7f0000000840)}, {&(0x7f0000000d00)="0fb276c7f222300bc074acb922ef85033c5098fcb1746f307d3af409ff8a12a5276e1dc37a8556a2932b4da1926ff7b7f95a38552e84f7cdd865a647201e9fb2f327331d7b639179de756ec4686faf70b16cba9e042128d3dae5ab4bb1e46733103756d5d760de6ef46c12c163bc743cce33a52c1d14abd30cd2295594", 0x7d}], 0x3, &(0x7f0000001d80)=ANY=[@ANYBLOB="100000008400000006000000018000001c000000840000000800000000000000000000000000000000000000100000008400000007000000ac1414aa1c0000008400000002000000f9d204000700000002000000", @ANYRES32=r4, @ANYBLOB="1000000084000000060000000900000019f22bb5c7ed815c00e2b62c95613aa958af67d1b42d0f8bb220330bb79a5bad21d994c82cade1ae9925cf6917ee7712dd7d674193a969e44fef73201b371ba6aa71dd35dd9116d720974f7873b2a54adbe67719cb830909d53bbaef38b3114dbe8e0f00000000000000c87ecc7c28ca68c8f6dd3a5c0208000000e0dd853b2067341cca87696e738620e5c5d169e13fe028c78d986d31f669ceb1123e2974d0ba6fdfb6114795a694070279bbb560ba3ef90140492f112b8ae93cc79730c76a76682c3b4489e705e95a6336507c44bdf2143af6dbaafe50c87ae7f70662015874fac7801a3f"], 0x68, 0x20004000}, {&(0x7f00000009c0)=@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000000a00)="8ed097ff7116dddac061fc7c067a9185496d0f4d55e996f46e39dd199422b326b89da46ca3f892930dac489034ebd1b58dde09e657de13363fc17874b395c15c7d82fc5175c184d5ea86c36822795e4173e02919dfecffeaadd74ce37b4843f6", 0x60}, {&(0x7f0000000a80)="9b52f99a28469d8d7a7a27b1ae7006e1ed6b2691d7effb72f8977582416d5b77f45ecbe6628d1997917eec29d61761a8c51eb237df43a49d63839c3fae6d4f21f9181b86fc2ccb424cd8aa4615e2", 0x4e}], 0x2, &(0x7f0000000b40)=[@authinfo={0x10, 0x84, 0x6, {0xe}}, @sndinfo={0x1c, 0x84, 0x2, {0x7, 0x800b, 0x5, 0xffffffff, r7}}, @prinfo={0x14, 0x84, 0x5, {0x0, 0x1}}, @authinfo={0x10, 0x84, 0x6, {0x3}}, @sndrcv={0x2c, 0x84, 0x1, {0x3, 0x9, 0x0, 0xffffffff, 0x8, 0x81, 0x10001, 0x4}}, @dstaddrv4={0x10, 0x84, 0x7, @loopback}, @dstaddrv6={0x1c, 0x84, 0x8, @dev={0xfe, 0x80, '\x00', 0x34}}, @prinfo={0x14, 0x84, 0x5, {0x20, 0x80000000}}, @dstaddrv4={0x10, 0x84, 0x7, @loopback}, @prinfo={0x14, 0x84, 0x5, {0x20, 0xd}}], 0xe0, 0x4}], 0x5, 0x4000) 2.111122314s ago: executing program 0 (id=4431): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001180)=ANY=[@ANYBLOB="500000001e0001002abd7000fedbdf25ff010000000000000000000000000001000004d402002b00fc010000000000000000004000000000030000fffa35000010000a"], 0x50}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000140), 0x4) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) openat$cgroup_ro(r2, &(0x7f0000000040)='memory.current\x00', 0x0, 0x0) 1.920556639s ago: executing program 0 (id=4432): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x1ac, 0x65, 0x4, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xf}}, [@TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_bpf={{0x8}, {0x158, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x140, 0x1, [@m_simple={0xe8, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0xb9, 0x6, "9787c29d6ac649e7ec160dfef7c4cea330102e688fe12213d2bfb320865cee27f05adfbc7dae04880a34e7bf775010128401ec5a80f551da79136f2a4ff74f3588c03c976e1c54366c6747dbbdd2e1e0d6da659b84a2ea14191b4223d2b6eeb465498ad518ee2114b5e4ab0d52289fe809788321e04d9b1d9f82a03fbb49229585f49ce943954da5ad28e25a9ba91b24d4c96612e2188dd3fa1dea6994033514d8f93add809a6ee955d65ac8c2ae97714a5c600000"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mpls={0x54, 0x13, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x400, 0x33c9, 0x3, 0x6, 0x5}, 0x3}}, @TCA_MPLS_TC={0x5, 0x6, 0x4}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_RATE={0x6, 0x5, {0x7f, 0x7}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_RATE={0x6, 0x5, {0x2, 0x8a}}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.849026134s ago: executing program 0 (id=4433): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}}}, 0x24}}, 0x0) 1.790345198s ago: executing program 1 (id=4434): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x92) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0x81, 0x9, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}}, 0x844) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@newtfilter={0x124, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {}, {0xfff1, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0xf0, 0x2, [@TCA_MATCHALL_ACT={0xec, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x6, 0x5, 0xea, 0x100004}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @remote}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbedit={0x94, 0x2, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0x8, 0x10000000, 0x7ff, 0xffffffff}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x83350}, @TCA_SKBEDIT_MARK={0x8}]}, {0x3f, 0x6, "04f1182a84f597cf3b9523440c209d73ff6282fffbe76149d4d47c7f085e00962e0197abc32c39d6c30a5d1b7be4d09795bce6d91a10a26c1a35fc"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r7 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r7, 0x5456, &(0x7f0000000880)={0xfffffffd, 0x1, 0x8, 0x8000, 0x10, "c588c203364d75c74c9b84836eae88a902fdf6"}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0xc0a85320, 0x0) close(r6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x800000, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1800}, 0x48) ioctl$TIOCMGET(0xffffffffffffffff, 0x541e, &(0x7f0000000040)) 1.789979311s ago: executing program 4 (id=4435): syz_usb_connect(0x3, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000db1689380e2b62ee2a4e361149ecae20402000d92ca901020301090212b23db4a84768254f1eba0df0a6b5fe5ec096efdb7080cd318b1f95f4566fee2529010ebb6256bcde3beb3c2945aace2b4b2189e5896d8be84753b5f33ccf355676a6880bb4a17911cd8276e0899edd7561f49b5b2e32806a3934e65664ea32b6218d473c5ad6e150fb04e6c43671ca7038afb8159cf329ca6327423cdcb8fb852e"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f0000000800)=[{0x5, 0x800, 0x0, 0x0}, {0x8, 0xc001, 0x0, 0x0}], 0x2}) r1 = openat$full(0xffffff9c, &(0x7f0000000140), 0x101b40, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000380)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000200)={r3}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)={0x0}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xa, "0062ba7d82000000160000000000f738096304"}) r6 = syz_open_pts(r5, 0x900) ioctl$TCSETAF(r6, 0x5433, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000200)={r4}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, &(0x7f0000000500)={r3, r4, 0x6, 0xfffffffffffffffa, 0x4}) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000400)={0x13, 0x10, 0xfa00, {&(0x7f0000000180), r2, 0x2}}, 0x18) r7 = io_uring_setup(0xe2e, &(0x7f0000000900)={0x0, 0x4651, 0x400, 0x21}) close_range(r7, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2498, &(0x7f0000000080)={0x0, 0x2c95, 0x80, 0x2, 0x10, 0x0, r7}, &(0x7f0000000000), &(0x7f0000000100)) 1.631072861s ago: executing program 0 (id=4436): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001bc0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x6}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000040)="d600be76a8af4822826f8fcd43e2fc88afbc206d591f0dfc6ef0abcb9228447f7579acfdd13ae720fd29a8f0929ae89cd5b36e2a742bd2d21a3b64a03394ae4d2eae936230a288a878d2d2f8cf234dd1e8435042c257167a04087b75", 0x5c}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e23, 0x1, @local, 0x101}, 0x1c, &(0x7f0000001140)=[{&(0x7f0000000140)="61efad4b0cb2c87310ab07b54112ab8679c75d7907ec7273a62611b2a30121a1b100b36f3be03f55bafcfc6107c060f14dc1e888ca8166cc896d7bdbf00710e69ac09267dd0c99ad708e98c4c9474384f8a35042f68aa00a87ca87acc65cc6e33e3b40e11d060e65234544287d60508616aabb39b0adf9c5091dbba91b520520c2e212b73319af344cfd969700812cca1bc6bbb370c83bffb3a80b7eff0362c5eb100027f0aaf1c6c189940dae233441937999fbf9db172efa51a212ac2e02090a604889b30f0fce0227a8e20ed31f6931e58d08859bf4b7ebc140b3d64a561cf9a25360b83e4d48d6960c072ea2b6a733df84dcb24c23006ac3e52428c032d4f34b314a013b0dd6926574a7475da2cccaf936cd54c9ab07567fd8e7f3268f0b38c427d0820a15dadc4184fed0867001e38d6520e40704b3a137eaaa28acbfb3add321c54beed5f8775f446d9aa77da248851c5fdf53542188da239e1e3330a05ca725ad5cbf6504fa72d13b242b8eb0e60f06fe8b8bda37040a1163b7c09d6f1052beaf7d30a19682b142a9ab2dbe5a871830709e475681fb83c086e5161f0dd4a543b2a376eaf79f9d5756c9d6fce183c44b4cc05033001baed09988cfa2fee90ecfda7d53bc2bf77e6c65f0e801dfde9a6185e98f32f295c3ba5c5c01f8c7641462c92f46f7cbb8aa38e8631e6dd88c88709642b5c7fc04f60365263c9f2498deaa1705f6cc997a17c0b75e10e12ffd9b3cc4e4e9d8e28a018fe9d21a30bc082e9969620217dab6e9e2088a7bce07dd0bbcf6f3cfdcfd1e2d834655e70075095f02bf25df3193a73cfc784d3eabb8c4261ea785cb036552286e05f87d4cdf92f5d02812a7c665cc908f65b1c9b9a968ba202c9acf330c2b0c24753c46cd40b1997e42decbe19433006c182417b1ea30f9da8831e3fc2b04fe8c32b0bb13591b1a800e7d38f5c710944889cd299b18b125e8393d448172c226491db38fb93b1cc3a56953ceb5574660d74efad856b8a9a44780887719c548b22788b7f609c3c2f052959e98c47ff02b5abbdd89cc138d20c8d3916b45ab73c32937ebc6e459e98caf6040347b88869903b2895b7e329e32d9a4f31c25c6ea1c296ce5611aeb904525efd3f4b8da0a33e39ebcf18362a296371f0456ba039cf69db853e098c7aa306c74354118b2942a34b2e90b8f33548e3cb40c49df9c568d6125397f129f03f6701fe392a296cac6cfb6639a4a16d8c8c324f2beaf1ce4a478828b41d5f26d8f8aa237afaa104daf0bf5fcac47b1cd16b96249e37e82cb1dab94c5e3cb5fbd52bf267606db748b496b27da2e5e5cde377a5f61d1597ea1333267bcfdcaf7bfd7d345f8a3497ce494616e4942409f4a23c131f52d06ba6157c38e0f9747670b6754c5b02a0d9b778b5bd3b6765090dcf261f1dcf51ac002b0b140d1fd97a1b9d0d36b497c62e448ca1af20de8a7671d35d970b17335973657338c822b5967416e0d57f7af481c4557821a55e640f885f2cb0e7f06e74d9dc48f409fb5b9e877055f6665fc2272add4de00d7c1b924501bc7ae29fc3d1da898905bef88302812ffa541abd8e259b31644bf351aaf103a3fba5509bb752c975ab0a1d0935752457232252709986506c7ad02fe5a48b2fe2a867e7213adc83dd1f660ddfd215110cfd5df427b7626bfc896f8d2719b9086dcf944f1796c2e9cfa4f63a4260ef051af5f8d072836260e3098e43076a632b2e0046d142caf7588090a9db41682f139c965a0fcd6c139bacd70e8a6c1817860e6ef85a8ac56129a04be0c8ec9d06caa5d00de29d2bd2a544b3a7f696d1548c7a20910b0caef250b92e8cd82c723c42ac39f2c3f66ca7bf70da62d64d8e4030b89ee95ce117490cf6ddf3a115eaa02e9d8876aa74485d779f87f6cca6cc846083fd8f1d1aba79536d70ccac6bb1aa3b1007c08e3a585c4b6ac4a1ab76dbbcf5aeca3985dd09ecd76dd83292050053f56602f8d4ac2967f5f7bf86c9353f5f9e87c91377be20c355ba47f01e29722f3e36a9ebcbf8ac642f37284df6c6d3176df4c83e1282117ccb320edcf77e5109f86f7fcdcd6930f36f46bb0b2feee3de7b914d4524bb6451bcb86b32426066914c23c823b1dbe3cfc2593ff064afbc75007f22cae837b598d57666236cb72203fca200c658b8421e15c052b983aec26aea325bd62b083505e5d87b2f77c3465d5209ae702b4f947d4b96d00310fc3676ee7ecf4945a45202cd3bb9cb5c5ac40f06a5f4e9ec0dcadeb1c2b4095b161ef86f54bc96460c10488882b395169610d8217dcab216d348fef6050ca1ab36e2238d88b702d7c183dbb1bea39cc4611d5fc3d68449b47a5ede324f9f8d91061488b32216faf9431103443efbc98224c3b6cff48e2f6339e54ba093aa457c29bbb730eab19c8b9fda86fda84ce73689d954375858e2eb90b7bcbe3f7e023e927f54bdf404c06974bc0a791a50d814556418259eb39fb5ce41b4be27888b17f6fb8683e49bbf44fcb8679cd1bf4dc036c4cd81fddd26e2afaa11955ed5e35a76602a61bc464fedff7b2bddcab68cfbf49dd775e03b2c58ae7a95e8ff66ce36e236717b52407fb2e636ecfddc30bb44792b5a0384c8df16a1b7fdbfa43a342764625a1d659e5f64b16ef47efda37ce5f81cd9ae4f629f2361deb59d3c2aaa3be7faad52421ed5bec5c599b81481e4de1d6324dfb77b8b093479334c9c1189da52a14e0852bfe13acbc36bc5003330937bb643263ba8c17f31908892cc35b8604ea9344acd739b4a2da338b9215056b13dc3e6d738ab3fc6e3ec15e1b259e85e1236cf030181eebff57d8f2a966210173ef674bab0ece97c82ecb20238912a1d43b5029feea22b5de691977ef627a6b48a1629cd2dd057b7f150d7aec51fb614934e22c25a3befb9041c6543942bcd61ab706889d18a13b92ee2ea7298c5d67befc30968b3255fd7bcf0374e5421b92e9d8382954385f24ba6b609363dcca55b00fe2bd9365fb116dc4a9d6425c7a6eb49686f0c1e3bf707b6cf84b4c1b7272bb853071bfa158d975877c49e086ba27d72355ca6f0b23a1543330120881792e104844193af00c12f5b47367f06576dd4ae51a7e40d3c9bef059a852e89199e46b2742597d2c1eedd8f7a190b56614c5e8126caa2157f8a7e832ca94db5c30b8da361417f9e4b72f14abf9dc4954f2e496b620a95874b46691ed3bfdeba23f3262bc7b996d1bbd62c8d8620f0fdf2134ed10a84f72e1e15553322323b194ba3c0604147147eca6be782785e8febac563fedf7857b1b3d278070c0da94c1a65a6fd0f03e5c8ea1e39875296bf4c370da3bdff7f8981c52eb1e2971ae5ed6df49a01a24077730f2cafef41e52eaf57b9cec1fde7029a66d3250b0eddfec3a09121d5b63da2b425e19e682e2ad4f6b5eb32bc99fc8e747166e2c11ee60b404d6a284a3e3a0bee76075205c3030ed61336c1c0c5e97d66c8e1762e74906dab93a7ec247086f0d826ca14d4dfa0982d2060f86539c1264fa71f550ac45075535f09d34592e791cb0eb3e50342cd4bdcfaa9118e0c84108fb1944b76a8e0c29e61f2970eaa97a5d456876023c8a98c011fab77edc7efdf53f932b07bd1628ed26b66251f80555426ab95833087beb639b600cd19457288fbfbe815fc3a86a10d9c3fa6876bcfa870d09fd1d0e0ffb6106e1bd995645baef39781e6675273b9495ed8e2de0d297d74a47b0c1afb0e0a4867d83c3c643f1355798aacc5fdbbd180abb80202a4290da558616467d26317417f77acd9db3fdaba5561738d97d55461541ca92fec2f88c0ca6fe2b1c493cb4d5bdf530083688f434e9bc2bd655766eba069e7d0a3827de262d94e3bd84ad2ca25025c83aa6047d497964681cc2becb4a0921b7e96aa81c8a78194dc860e31fb0d86e0f79b5c569deeaf08193454d6cd5628ba5ad326bf009bc48a00ea0fd027143f3d7d2928d8799e1577bacb1b921d9a03179e30206c0b72e70ba81d6117f5e7314f388c2b76ac1f527db5fa1c9912696eda042e5d6b6db32afdc0f616d0f6ff81d65ca715281c243631bf0bddeb5850a07e9510fec8c9b1f949bfc96182996a92c6f3865d9b5e55facf3f3e1fbf9e03a4df4150d587fffb3803d34ae5b98b450eb7e17bfcdbc078d06871747cb031a72675bbdcc108c4d88ee8c62356228b6ff7d9a8ae76b14eee7c517accaa813942f5e1f640fadb9e70fd8a03a39307bda46e2be4b8a51de3b687e45d19d70e735c47d813c04c146db536ff74aca121a19fd24eb47b241ff22e8a42b3c2924e7f6536d11f32a64bcda541b4cb1c432be90417e97f44508d87e212f2ff9058ba64cf0163ad041a00fe44b3e9575a6448b27d926950605670132bc7f1d0f992b577feba77e11f1df6845f0456bf8346f894bc7bfde7883eec1c01ffa1a5a1b9b531e8979080f34dea7fa48559f96898de0a04c78e4584ef52c2fb62741a215834ee0090b14749db8347f4d92a57fdf558769fd1bd25b3d9d182e711353d5aebf356cbec9623b1236cab5f4aa148702b8c1e4d81bbda178bb59f46bef63b39dd9f806452d5e7d22bea55c9fb974d88d6f3e9127f314535534f55291cc387be7413b276a771cf0dc54b76451aeeb6c130188eeb0820b4529b076acf29c3964a000276be48013be403e5ea62113b06478ddfa95eb9375587c1ea996867ff1a23822ecb52ebe78d02c132ef60314dca496322e0672b850e0e4cee98948a34b6824718e8459911fffbe11f1895c0a378de2b8ec3fddfb1123e75bae434671d8b1459144fbc76d5d00d473f87e08c008bb572e1c9702615b9a9cbc788941b3f2515fbb5780d1b66be66f1fbc4a9060b927c394d1b204fc83d72bf87a299728f25739708c2e479d5eb821e4685ace5d22b542ae1f3d7a1493e38d94091e19109ac255c83ddbfcc16ccd9df5567988f7ebf9dbc770a132b455c446d8a404f993ad66c4875f68df2c0821abc534b8d2cf00d6d780059c12e89eccbe885c347ad8c63327162c0b461c4fd755b60dff9b7efe7ed6c8c726d98f1b0b19552d466b38b08b1c8c6229f40af784f635f5a97f26aa2ad2a3fd23a7dcf9f331fa5e877448f66a258d77f27403f465b22b9a3ce94ffe058a4e9b7bb934e8c241bd44ea2d773650a2daaf4f9cffee4b989436026e93339ce3f421866a6f61a219bce2199d38b91e370d7b0cbd4d419d4aaca0b3b7d739a8a5dad330b776cc715d705278b9bd6042532b04bd69730e75b6844e7a7f031126c6c2bc43de1605e2a6e3b48844d8a73e4095cca8a68223d8b2358e5173b8a7244046688a44e129bbc2ba151c90daaa018d2ab779ac5728f38c8b57e197af037cbc5be15c74a17745beb3e3b5dc26a4af860cfcb4557513a103894e50ee8f5fd8ebf90b0416f3bdb892bfaa69eeff329c58dedf0c4437fc3dc9beb1ccffe0114dfa4b1d9a1d085e5cb9fb888765a7a2816c1ddb679ab4ddd657e95ea0365fb5097bae6c28748f491e1628d88cd922a49e15a1aa700bccf328f0905375fdedebbf3ead609ae312486a5a422abc7250357bcfc0b95044e33f9db538a2f53e79ed5f405503edc50e3e265c2425e967034f5e2a246f2cd1c7767a934ef9ae72f14b530b3f5ae2a88aa6e5d164d794fc47b466b80bbe73b12b26ea669f61cd484d93fe5c6d3cdf09f21cb0953abec005760a06dfa7d74a30b0d798db8ef4b58d4a027d965eecbc66203e54ebf6a4ff0a8a064ced387a38e9d369993a270eb202feebe75da53a66d8e968a1451ca", 0x1000}], 0x1, &(0x7f0000001180)=[@dstopts_2292={{0x3c, 0x29, 0x4, {0x88, 0x4, '\x00', [@generic={0x2, 0x1c, "af91e63c97001c0aa0c43166dc3ab509d46d5c559a3fcb61539fa21f"}, @ra={0x5, 0x2, 0x7}]}}}, @hopopts_2292={{0x134, 0x29, 0x36, {0x73, 0x23, '\x00', [@generic={0x83, 0x2e, "c2f97b9a234c466aec41428640bc7a18b66dcd883ff26d80c8e2dd6ceaeae68f84ba0c76495ea974e905feba9e31"}, @enc_lim, @calipso={0x7, 0x50, {0x2, 0x12, 0x5f, 0xf94a, [0x3, 0x0, 0x2395b1c5, 0x461, 0xffffffffffff7b36, 0x101, 0x81, 0x224, 0x3]}}, @jumbo={0xc2, 0x4, 0xfffffec9}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @generic={0xc, 0x7b, "e62fd9c55989b1c462f74a5e4e93a7113f22bb0cd0f998c485effb6108ceeaf539aaa2d3c8d1a4de0f8fcb22ad6c36e1b10189d920bf9a419f8ef4f9405c2f5ba0e0bcc76391b332c68f99d88ce6e5f5b5a640a0321b6a628ae2d6af8be05a48081fb1604870e360f6363da9515ad150c58e8d57ed53aabd0a5f28"}, @enc_lim={0x4, 0x1, 0xb8}]}}}, @rthdr_2292={{0x64, 0x29, 0x39, {0x32, 0xa, 0x1, 0x7, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, @private2]}}}, @rthdr_2292={{0x64, 0x29, 0x39, {0x8, 0xa, 0x2, 0xfc, 0x0, [@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2]}}}, @rthdrdstopts={{0x3c, 0x29, 0x37, {0x6c, 0x4, '\x00', [@enc_lim, @jumbo={0xc2, 0x4, 0xc00}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x2}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}}}], 0x274}}, {{&(0x7f0000001400)={0xa, 0x4e23, 0x6, @local, 0x7}, 0x1c, &(0x7f0000001880)=[{&(0x7f0000001440)="f6d6bb69278d8ce1d3d7375ea2", 0xd}, {&(0x7f0000001480)="be7a12ea88999b9e957e315bd4755959373811a2f6d49d333e4dac0781b12fa788304008962c515c7a95c974e898f736d69e550a0e73babff900c07c6951fccc7a77f6de273a9b1750ef8cc051fa1cd0476759aae6698aa426154673e3ae287a1efd25c5cc7b3da47a9b6c84e7aff8edb4b63f595b1bce755f0f9a6ee594ffe843dc7b00fcf68dfd964c8979773e288b04d0309df5df76adb15907de9abae319e8f01d3695a0b43cb34d2bd6161b82f5a0cd56df9a43162f2db4c917981706d4ea6f61185cb615d857725d28438a639617c1c6ce61d647797a6e87c4ac3d1fc9258aa92b029fe8459317", 0xea}, {&(0x7f0000001580)="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", 0xfb}, {&(0x7f0000001680)="00653fe5536d436adc13b7124303e96587a383b0bd40ef38ca2281c8", 0x1c}, {&(0x7f00000016c0)="b4cc79799428aad7548f4c821ac51d31300d31fcba340768519b909b40622bc50256e089dac9986314fd8ae31effcb82c69d2897415857889c137eb158ba63ccd9879c5f8937df316281ee66e9df567b469eec8323fa6c1710", 0x59}, {&(0x7f0000001740)="9675f9573c9024c717683692ebe70867da4219f0bd8bf1e3e866b55c08511a7ab9aa05347e1dde07046b8df864055346367f31c0be4f9bf69269c0e741b517e4832a", 0x42}, {&(0x7f00000017c0)="db2ee6a157e1aa3d44f116edb049ff8466859dfcc2c2b6e2a2d819dd79e176f7eb23ebb7cee59fe52738e14536d4116addd32b23e8596502c63619b8ffaa53319af0367dfb742e25e98c402215ae41ccb6ba4959ce448a79ff7dc8f4c5912ebf7ca22578518a97cfd20e39b1f62c29704de3804e7e980cf0b046615a71377b5974989592d2f5cd36b371d814ba", 0x8d}], 0x7, &(0x7f00000018c0)}}, {{&(0x7f0000001900)={0xa, 0x4e24, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000001a80)=[{&(0x7f0000001940)="d0876ffab1b4365257151459e55b85aeb54212fd18fde5abe7727ed7d0307e0d38f807db14618f8bf80b8df9903ac0159f828f761dbf62", 0x37}, {&(0x7f0000001980)="91791ce45c41991e107a64e7593f0e5fc67a672ee14388d7e8978edab1e9aef75eaa0b982ffb995fe422a1d2de07eaf5e23066533f38a6632117c17da30c000889478216bb07bab8da5a28dc7f719fbe134578ba5b64a4c274144ce8414b321007adcc3486fc6cffafcd8ed2b6b1331673db25301841385e0ee9eb1be855387c0efd3895a2b246bc55d8dc56b4e3a3e5fd28f224699c8888fd3881624c7c6cafc024295a2d67668f39905aea7aff28d52d4fa8eeb2efee7954bf42be1fa2ceafb62b9b7ca123454ac0a9d1b262c4e4c017506774e9b7b164b01ad1054482d571da328a1669b6aa70771a656a98764727d5a99cd2875f9612", 0xf8}], 0x2, &(0x7f0000001ac0)=[@pktinfo={{0x20, 0x29, 0x32, {@remote}}}, @rthdr={{0x54, 0x29, 0x39, {0x5c, 0x8, 0x2, 0x4, 0x0, [@local, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, @private0]}}}, @dstopts_2292={{0x34, 0x29, 0x4, {0x0, 0x3, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x14}}, @jumbo={0xc2, 0x4, 0x5}, @pad1]}}}, @dontfrag={{0x10, 0x29, 0x3e, 0x9}}, @rthdrdstopts={{0x1c, 0x29, 0x37, {0x11, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0xdd5}]}}}, @rthdrdstopts={{0x1c, 0x29, 0x37, {0xcc7d9f0528f34f6e, 0x1, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}], 0xf0}}], 0x4, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000004, 0x42032, 0xffffffffffffffff, 0x80000000) 1.356311178s ago: executing program 2 (id=4437): syz_usb_connect(0x3, 0x24, &(0x7f0000000dc0)={{0x12, 0x1, 0x0, 0xdb, 0x16, 0x89, 0x20, 0x2040, 0xd900, 0xa92c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x4c, 0x0, 0x0, 0xb2, 0x50, 0xcf}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f0000000800)=[{0x1900, 0x800, 0x0, 0x0}, {0x8, 0xc001, 0x0, 0x0}], 0x2}) 1.275885673s ago: executing program 0 (id=4438): syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000029"], 0x18}}], 0x1, 0x44080) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000140)=' ', 0x2e) r1 = openat$vcs(0xffffff9c, &(0x7f0000000000), 0x50200, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000380)={0x5c, 0x2, 0x6, 0x5, 0x7, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x84}, 0x8404) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r6, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r6}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r7 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r9, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) sendmmsg(r9, &(0x7f0000007fc0), 0x800001d, 0x1c) setsockopt$inet_mreq(r8, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}}}, 0x24}}, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000080)="66b98703000066b85200000066ba000000000f300f01c8660f3880970080660f388278f066b9e40900000f32670f6ac5b8f1048ee8f30f08baf80c66b8c4acc38066efbafc0c66edb800008ee8", 0x4d}], 0x1, 0x61, &(0x7f00000001c0)=[@flags={0x3, 0x100000}], 0x1) 21.737616ms ago: executing program 3 (id=4439): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x92) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0x81, 0x9, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}}, 0x844) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@newtfilter={0x124, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {}, {0xfff1, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0xf0, 0x2, [@TCA_MATCHALL_ACT={0xec, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x6, 0x5, 0xea, 0x100004}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @remote}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbedit={0x94, 0x2, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0x8, 0x10000000, 0x7ff, 0xffffffff}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x83350}, @TCA_SKBEDIT_MARK={0x8}]}, {0x3f, 0x6, "04f1182a84f597cf3b9523440c209d73ff6282fffbe76149d4d47c7f085e00962e0197abc32c39d6c30a5d1b7be4d09795bce6d91a10a26c1a35fc"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x124}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGLCKTRMIOS(r6, 0x5456, &(0x7f0000000880)={0xfffffffd, 0x1, 0x8, 0x8000, 0x10, "c588c203364d75c74c9b84836eae88a902fdf6"}) 0s ago: executing program 1 (id=4440): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, 0x0, 0x14) r6 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xff}, 0x7}, 0x1c) socket(0x2, 0x3, 0xff) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue0\x00', 0x200000}) kernel console output (not intermixed with test programs): oogle 10/25/2025 [ 711.363196][T17552] Call Trace: [ 711.363204][T17552] [ 711.363212][T17552] dump_stack_lvl+0xe8/0x150 [ 711.363243][T17552] should_fail_ex+0x414/0x560 [ 711.363277][T17552] _copy_from_iter+0x1cd/0x1630 [ 711.363311][T17552] ? __pfx__copy_from_iter+0x10/0x10 [ 711.363333][T17552] ? __build_skb_around+0x22d/0x3c0 [ 711.363358][T17552] ? __alloc_skb+0x198/0x3a0 [ 711.363379][T17552] ? netlink_sendmsg+0x642/0xb30 [ 711.363402][T17552] ? skb_put+0x11b/0x210 [ 711.363426][T17552] netlink_sendmsg+0x6b2/0xb30 [ 711.363462][T17552] ? __pfx_netlink_sendmsg+0x10/0x10 [ 711.363489][T17552] ? __import_iovec+0x5d4/0x7f0 [ 711.363508][T17552] ? aa_sock_msg_perm+0xf1/0x1b0 [ 711.363534][T17552] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 711.363552][T17552] ? __pfx_netlink_sendmsg+0x10/0x10 [ 711.363578][T17552] __sock_sendmsg+0x21c/0x270 [ 711.363608][T17552] ____sys_sendmsg+0x505/0x820 [ 711.363638][T17552] ? __pfx_____sys_sendmsg+0x10/0x10 [ 711.363668][T17552] ? kstrtouint+0x6e/0xe0 [ 711.363705][T17552] ___sys_sendmsg+0x21f/0x2a0 [ 711.363732][T17552] ? __pfx____sys_sendmsg+0x10/0x10 [ 711.363753][T17552] ? get_pid_task+0x20/0x1f0 [ 711.363777][T17552] ? get_pid_task+0x20/0x1f0 [ 711.363798][T17552] ? get_pid_task+0x20/0x1f0 [ 711.363845][T17552] ? __fget_files+0x2a/0x420 [ 711.363867][T17552] ? __fget_files+0x3a0/0x420 [ 711.363896][T17552] __sys_sendmsg+0x164/0x220 [ 711.363918][T17552] ? __pfx___sys_sendmsg+0x10/0x10 [ 711.363948][T17552] ? __pfx_ksys_write+0x10/0x10 [ 711.363980][T17552] __do_fast_syscall_32+0x1dc/0x570 [ 711.363997][ T5927] usb 2-1: config 0 has an invalid interface number: 9 but max is 0 [ 711.364003][T17552] ? lockdep_hardirqs_on+0x7b/0x110 [ 711.364023][T17552] ? do_fast_syscall_32+0x34/0x80 [ 711.364106][T17552] ? irqentry_exit+0x10f/0x670 [ 711.364129][T17552] do_fast_syscall_32+0x34/0x80 [ 711.364149][T17552] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 711.364172][T17552] RIP: 0023:0xf705d539 [ 711.364189][T17552] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 711.364205][T17552] RSP: 002b:00000000f544d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 711.364226][T17552] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800002c0 [ 711.364239][T17552] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 711.364250][T17552] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 711.364261][T17552] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 711.364272][T17552] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 711.364299][T17552] [ 711.686012][ T5927] usb 2-1: config 0 has no interface number 0 [ 711.704299][ T5927] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 711.721263][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 711.730822][ T5927] usb 2-1: Product: syz [ 711.737630][T16821] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 711.747798][T16821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.758282][ T5927] usb 2-1: Manufacturer: syz [ 711.767215][ T5927] usb 2-1: SerialNumber: syz [ 711.775759][T16821] usb 3-1: Product: syz [ 711.794243][ T5927] usb 2-1: config 0 descriptor?? [ 711.811763][T16821] usb 3-1: Manufacturer: syz [ 711.823687][T16821] usb 3-1: SerialNumber: syz [ 711.854172][T16821] usb 3-1: config 0 descriptor?? [ 711.883397][T16821] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 711.928217][T16821] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 711.954068][T16821] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 711.969145][T16821] usb 3-1: media controller created [ 712.030541][T16821] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 712.051062][ T5899] usb 4-1: new full-speed USB device number 76 using dummy_hcd [ 712.081701][T17548] FAULT_INJECTION: forcing a failure. [ 712.081701][T17548] name failslab, interval 1, probability 0, space 0, times 0 [ 712.095487][T17548] CPU: 1 UID: 0 PID: 17548 Comm: syz.2.4052 Tainted: G L syzkaller #0 PREEMPT(full) [ 712.095520][T17548] Tainted: [L]=SOFTLOCKUP [ 712.095528][T17548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 712.095541][T17548] Call Trace: [ 712.095550][T17548] [ 712.095559][T17548] dump_stack_lvl+0xe8/0x150 [ 712.095592][T17548] should_fail_ex+0x414/0x560 [ 712.095628][T17548] should_failslab+0xa8/0x100 [ 712.095655][T17548] __kmalloc_noprof+0xdf/0x800 [ 712.095681][T17548] ? compat_i2cdev_ioctl+0x317/0x5c0 [ 712.095711][T17548] compat_i2cdev_ioctl+0x317/0x5c0 [ 712.095739][T17548] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 712.095765][T17548] ? __fget_files+0x3a0/0x420 [ 712.095788][T17548] ? __fget_files+0x2a/0x420 [ 712.095869][T17548] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 712.095894][T17548] __ia32_compat_sys_ioctl+0x543/0x840 [ 712.095918][T17548] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 712.095940][T17548] ? __fget_files+0x3a0/0x420 [ 712.095970][T17548] ? fput+0xa0/0xd0 [ 712.095995][T17548] ? ksys_write+0x22a/0x250 [ 712.096015][T17548] ? __pfx_ksys_write+0x10/0x10 [ 712.096045][T17548] __do_fast_syscall_32+0x1dc/0x570 [ 712.096066][T17548] ? lockdep_hardirqs_on+0x7b/0x110 [ 712.096083][T17548] ? do_fast_syscall_32+0x34/0x80 [ 712.096104][T17548] ? irqentry_exit+0x10f/0x670 [ 712.096126][T17548] do_fast_syscall_32+0x34/0x80 [ 712.096148][T17548] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 712.096171][T17548] RIP: 0023:0xf7f22539 [ 712.096189][T17548] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 712.096208][T17548] RSP: 002b:00000000f541655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 712.096229][T17548] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000707 [ 712.096244][T17548] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 712.096257][T17548] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 712.096269][T17548] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 712.096281][T17548] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 712.096312][T17548] [ 712.385500][T16821] DVB: Unable to find symbol mt352_attach() [ 712.427168][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 712.434647][T16821] DVB: Unable to find symbol nxt6000_attach() [ 712.438662][ T5899] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 712.460201][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.466803][T16821] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 712.488887][ T5899] usb 4-1: config 0 descriptor?? [ 712.496674][T16821] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input63 [ 712.519167][T16821] dvb-usb: schedule remote query interval to 1000 msecs. [ 712.528933][T16821] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 712.543121][T16821] dvb-usb: bulk message failed: -22 (7/0) [ 712.550475][T16821] dvb-usb: bulk message failed: -22 (7/0) [ 712.569723][T16821] usb 3-1: USB disconnect, device number 67 [ 712.704707][T17556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 712.714228][T17556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 712.726233][ T5899] ath6kl: Failed to submit usb control message: -71 [ 712.736368][ T5899] ath6kl: unable to send the bmi data to the device: -71 [ 712.744400][ T5899] ath6kl: Unable to send get target info: -71 [ 712.761042][ T5899] ath6kl: Failed to init ath6kl core: -71 [ 712.779582][ T5899] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 712.799147][ T5899] usb 4-1: USB disconnect, device number 76 [ 713.576862][ T5927] usb 2-1: USB disconnect, device number 86 [ 713.711822][T17586] FAULT_INJECTION: forcing a failure. [ 713.711822][T17586] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 713.725939][T17586] CPU: 0 UID: 0 PID: 17586 Comm: syz.1.4067 Tainted: G L syzkaller #0 PREEMPT(full) [ 713.725974][T17586] Tainted: [L]=SOFTLOCKUP [ 713.725981][T17586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 713.725994][T17586] Call Trace: [ 713.726002][T17586] [ 713.726010][T17586] dump_stack_lvl+0xe8/0x150 [ 713.726040][T17586] should_fail_ex+0x414/0x560 [ 713.726076][T17586] _copy_to_user+0x31/0xb0 [ 713.726102][T17586] put_cmsg_compat+0x4ef/0x650 [ 713.726138][T17586] ? __pfx_put_cmsg_compat+0x10/0x10 [ 713.726171][T17586] ? put_cmsg+0xeb/0x5f0 [ 713.726202][T17586] ? __pfx___schedule+0x10/0x10 [ 713.726237][T17586] ip6_datagram_recv_specific_ctl+0x39b/0x1540 [ 713.726267][T17586] ? __might_fault+0xb0/0x130 [ 713.726306][T17586] ? __pfx_ip6_datagram_recv_specific_ctl+0x10/0x10 [ 713.726333][T17586] ? irqentry_exit+0x5e8/0x670 [ 713.726350][T17586] ? rcu_is_watching+0x15/0xb0 [ 713.726382][T17586] ? ip6_datagram_recv_common_ctl+0x156/0x3c0 [ 713.726412][T17586] ? __pfx_ip6_datagram_recv_common_ctl+0x10/0x10 [ 713.726444][T17586] ? __sanitizer_cov_trace_switch+0x7/0x130 [ 713.726478][T17586] udpv6_recvmsg+0x10a7/0x1590 [ 713.726521][T17586] ? __pfx_udpv6_recvmsg+0x10/0x10 [ 713.726550][T17586] ? aa_sk_perm+0x7ee/0x920 [ 713.726575][T17586] ? __pfx_udpv6_recvmsg+0x10/0x10 [ 713.726594][T17586] inet6_recvmsg+0x1ee/0x6b0 [ 713.726624][T17586] ? __pfx_aa_sk_perm+0x10/0x10 [ 713.726652][T17586] ? __pfx_inet6_recvmsg+0x10/0x10 [ 713.726684][T17586] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 713.726703][T17586] ? security_socket_recvmsg+0x7e/0x2e0 [ 713.726734][T17586] sock_recvmsg+0x105/0x270 [ 713.726776][T17586] ____sys_recvmsg+0x1c9/0x460 [ 713.726811][T17586] ? __pfx_____sys_recvmsg+0x10/0x10 [ 713.726831][T17586] ? get_compat_msghdr+0x37e/0x4a0 [ 713.726866][T17586] ? __lock_acquire+0x6b6/0x2cf0 [ 713.726895][T17586] ___sys_recvmsg+0x1b5/0x510 [ 713.726916][T17586] ? _parse_integer_limit+0x1ae/0x1f0 [ 713.726948][T17586] ? __pfx____sys_recvmsg+0x10/0x10 [ 713.726976][T17586] ? kstrtoull+0x12f/0x1d0 [ 713.727007][T17586] ? __fget_files+0x2a/0x420 [ 713.727050][T17586] ? __fget_files+0x3a0/0x420 [ 713.727086][T17586] do_recvmmsg+0x36a/0x770 [ 713.727120][T17586] ? __pfx_do_recvmmsg+0x10/0x10 [ 713.727144][T17586] ? ksys_write+0x1cb/0x250 [ 713.727180][T17586] ? __fget_files+0x3a0/0x420 [ 713.727213][T17586] __sys_recvmmsg+0x19d/0x280 [ 713.727242][T17586] ? __pfx___sys_recvmmsg+0x10/0x10 [ 713.727268][T17586] ? __pfx_ksys_write+0x10/0x10 [ 713.727295][T17586] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 713.727327][T17586] __do_fast_syscall_32+0x1dc/0x570 [ 713.727349][T17586] ? lockdep_hardirqs_on+0x7b/0x110 [ 713.727367][T17586] ? do_fast_syscall_32+0x34/0x80 [ 713.727389][T17586] ? irqentry_exit+0x10f/0x670 [ 713.727414][T17586] do_fast_syscall_32+0x34/0x80 [ 713.727476][T17586] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 713.727501][T17586] RIP: 0023:0xf7f84539 [ 713.727521][T17586] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 713.727540][T17586] RSP: 002b:00000000f547655c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 713.727564][T17586] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080004d80 [ 713.727578][T17586] RDX: 0000000000000001 RSI: 0000000000000002 RDI: 0000000000000000 [ 713.727590][T17586] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 713.727601][T17586] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 713.727613][T17586] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 713.727656][T17586] [ 714.207667][T17593] netlink: 'syz.2.4069': attribute type 1 has an invalid length. [ 714.279465][T17593] 8021q: adding VLAN 0 to HW filter on device bond3 [ 714.363544][T17593] bond3: (slave gretap1): making interface the new active one [ 714.373973][T17593] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 714.557441][ T30] audit: type=1804 audit(1767623480.704:354): pid=17605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.4072" name="/newroot/249/file1" dev="fuse" ino=1 res=1 errno=0 [ 714.816842][T17623] netlink: 160 bytes leftover after parsing attributes in process `syz.1.4080'. [ 714.826182][T17623] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4080'. [ 714.835558][T17623] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4080'. [ 715.042217][T16821] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 715.371402][T16821] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 715.571323][T16821] usb 3-1: Using ep0 maxpacket: 16 [ 715.640351][T16821] usb 3-1: config 0 has an invalid interface number: 9 but max is 0 [ 715.648925][T16821] usb 3-1: config 0 has no interface number 0 [ 715.671890][T16821] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 715.739318][T17654] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4088'. [ 715.751143][T17654] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4088'. [ 715.849974][T16821] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 715.901193][T16821] usb 3-1: Product: syz [ 715.905537][T16821] usb 3-1: Manufacturer: syz [ 715.911587][T16821] usb 3-1: SerialNumber: syz [ 715.923459][T16821] usb 3-1: config 0 descriptor?? [ 716.851735][T17663] FAULT_INJECTION: forcing a failure. [ 716.851735][T17663] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 717.119300][T17663] CPU: 1 UID: 0 PID: 17663 Comm: syz.0.4092 Tainted: G L syzkaller #0 PREEMPT(full) [ 717.119337][T17663] Tainted: [L]=SOFTLOCKUP [ 717.119345][T17663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 717.119358][T17663] Call Trace: [ 717.119367][T17663] [ 717.119376][T17663] dump_stack_lvl+0xe8/0x150 [ 717.119408][T17663] should_fail_ex+0x414/0x560 [ 717.119443][T17663] _copy_from_iter+0x1cd/0x1630 [ 717.119480][T17663] ? __pfx__copy_from_iter+0x10/0x10 [ 717.119502][T17663] ? __build_skb_around+0x22d/0x3c0 [ 717.119527][T17663] ? __alloc_skb+0x198/0x3a0 [ 717.119547][T17663] ? netlink_sendmsg+0x642/0xb30 [ 717.119569][T17663] ? skb_put+0x11b/0x210 [ 717.119593][T17663] netlink_sendmsg+0x6b2/0xb30 [ 717.119627][T17663] ? __pfx_netlink_sendmsg+0x10/0x10 [ 717.119655][T17663] ? __import_iovec+0x5d4/0x7f0 [ 717.119676][T17663] ? aa_sock_msg_perm+0xf1/0x1b0 [ 717.119702][T17663] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 717.119722][T17663] ? __pfx_netlink_sendmsg+0x10/0x10 [ 717.119747][T17663] __sock_sendmsg+0x21c/0x270 [ 717.119778][T17663] ____sys_sendmsg+0x505/0x820 [ 717.119807][T17663] ? __pfx_____sys_sendmsg+0x10/0x10 [ 717.119835][T17663] ? kstrtouint+0x6e/0xe0 [ 717.119871][T17663] ___sys_sendmsg+0x21f/0x2a0 [ 717.119898][T17663] ? __pfx____sys_sendmsg+0x10/0x10 [ 717.119919][T17663] ? get_pid_task+0x20/0x1f0 [ 717.119952][T17663] ? get_pid_task+0x20/0x1f0 [ 717.119973][T17663] ? get_pid_task+0x20/0x1f0 [ 717.120028][T17663] ? __fget_files+0x2a/0x420 [ 717.120052][T17663] ? __fget_files+0x3a0/0x420 [ 717.120086][T17663] __sys_sendmsg+0x164/0x220 [ 717.120111][T17663] ? __pfx___sys_sendmsg+0x10/0x10 [ 717.120144][T17663] ? __pfx_ksys_write+0x10/0x10 [ 717.120176][T17663] __do_fast_syscall_32+0x1dc/0x570 [ 717.120199][T17663] ? lockdep_hardirqs_on+0x7b/0x110 [ 717.120217][T17663] ? do_fast_syscall_32+0x34/0x80 [ 717.120237][T17663] ? irqentry_exit+0x10f/0x670 [ 717.120261][T17663] do_fast_syscall_32+0x34/0x80 [ 717.120289][T17663] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 717.120314][T17663] RIP: 0023:0xf705d539 [ 717.120332][T17663] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 717.120349][T17663] RSP: 002b:00000000f544d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 717.120372][T17663] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800018c0 [ 717.120386][T17663] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 717.120399][T17663] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 717.120411][T17663] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 717.120424][T17663] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 717.120454][T17663] [ 717.766289][T17672] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 717.782599][T17672] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 718.067541][T17681] FAULT_INJECTION: forcing a failure. [ 718.067541][T17681] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 718.098072][T17681] CPU: 0 UID: 0 PID: 17681 Comm: syz.0.4099 Tainted: G L syzkaller #0 PREEMPT(full) [ 718.098109][T17681] Tainted: [L]=SOFTLOCKUP [ 718.098118][T17681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 718.098131][T17681] Call Trace: [ 718.098140][T17681] [ 718.098150][T17681] dump_stack_lvl+0xe8/0x150 [ 718.098185][T17681] should_fail_ex+0x414/0x560 [ 718.098222][T17681] _copy_from_iter+0x1cd/0x1630 [ 718.098258][T17681] ? __pfx__copy_from_iter+0x10/0x10 [ 718.098282][T17681] ? __build_skb_around+0x22d/0x3c0 [ 718.098306][T17681] ? __alloc_skb+0x198/0x3a0 [ 718.098328][T17681] ? netlink_sendmsg+0x642/0xb30 [ 718.098353][T17681] ? skb_put+0x11b/0x210 [ 718.098379][T17681] netlink_sendmsg+0x6b2/0xb30 [ 718.098415][T17681] ? __pfx_netlink_sendmsg+0x10/0x10 [ 718.098445][T17681] ? __import_iovec+0x5d4/0x7f0 [ 718.098467][T17681] ? aa_sock_msg_perm+0xf1/0x1b0 [ 718.098497][T17681] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 718.098517][T17681] ? __pfx_netlink_sendmsg+0x10/0x10 [ 718.098544][T17681] __sock_sendmsg+0x21c/0x270 [ 718.098579][T17681] ____sys_sendmsg+0x505/0x820 [ 718.098609][T17681] ? __pfx_____sys_sendmsg+0x10/0x10 [ 718.098640][T17681] ? kstrtouint+0x6e/0xe0 [ 718.098678][T17681] ___sys_sendmsg+0x21f/0x2a0 [ 718.098706][T17681] ? __pfx____sys_sendmsg+0x10/0x10 [ 718.098738][T17681] ? get_pid_task+0x20/0x1f0 [ 718.098765][T17681] ? get_pid_task+0x20/0x1f0 [ 718.098788][T17681] ? get_pid_task+0x20/0x1f0 [ 718.098845][T17681] ? __fget_files+0x2a/0x420 [ 718.098871][T17681] ? __fget_files+0x3a0/0x420 [ 718.098907][T17681] __sys_sendmsg+0x164/0x220 [ 718.098935][T17681] ? __pfx___sys_sendmsg+0x10/0x10 [ 718.098969][T17681] ? __pfx_ksys_write+0x10/0x10 [ 718.099009][T17681] __do_fast_syscall_32+0x1dc/0x570 [ 718.099033][T17681] ? lockdep_hardirqs_on+0x7b/0x110 [ 718.099059][T17681] ? do_fast_syscall_32+0x34/0x80 [ 718.099080][T17681] ? irqentry_exit+0x10f/0x670 [ 718.099105][T17681] do_fast_syscall_32+0x34/0x80 [ 718.099128][T17681] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 718.099154][T17681] RIP: 0023:0xf705d539 [ 718.099174][T17681] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 718.099193][T17681] RSP: 002b:00000000f544d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 718.099217][T17681] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280 [ 718.099232][T17681] RDX: 0000000000004000 RSI: 0000000000000000 RDI: 0000000000000000 [ 718.099245][T17681] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 718.099258][T17681] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 718.099271][T17681] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 718.099303][T17681] [ 718.763851][ T5926] usb 3-1: USB disconnect, device number 68 [ 719.144801][T17701] FAULT_INJECTION: forcing a failure. [ 719.144801][T17701] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 719.158956][T17701] CPU: 1 UID: 0 PID: 17701 Comm: syz.3.4106 Tainted: G L syzkaller #0 PREEMPT(full) [ 719.159000][T17701] Tainted: [L]=SOFTLOCKUP [ 719.159009][T17701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 719.159022][T17701] Call Trace: [ 719.159031][T17701] [ 719.159042][T17701] dump_stack_lvl+0xe8/0x150 [ 719.159074][T17701] should_fail_ex+0x414/0x560 [ 719.159111][T17701] _copy_from_iter+0x1cd/0x1630 [ 719.159146][T17701] ? __pfx__copy_from_iter+0x10/0x10 [ 719.159170][T17701] ? __build_skb_around+0x22d/0x3c0 [ 719.159195][T17701] ? __alloc_skb+0x198/0x3a0 [ 719.159216][T17701] ? netlink_sendmsg+0x642/0xb30 [ 719.159240][T17701] ? skb_put+0x11b/0x210 [ 719.159265][T17701] netlink_sendmsg+0x6b2/0xb30 [ 719.159301][T17701] ? __pfx_netlink_sendmsg+0x10/0x10 [ 719.159329][T17701] ? __import_iovec+0x5d4/0x7f0 [ 719.159351][T17701] ? aa_sock_msg_perm+0xf1/0x1b0 [ 719.159379][T17701] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 719.159398][T17701] ? __pfx_netlink_sendmsg+0x10/0x10 [ 719.159424][T17701] __sock_sendmsg+0x21c/0x270 [ 719.159455][T17701] ____sys_sendmsg+0x505/0x820 [ 719.159486][T17701] ? __pfx_____sys_sendmsg+0x10/0x10 [ 719.159515][T17701] ? kstrtouint+0x6e/0xe0 [ 719.159552][T17701] ___sys_sendmsg+0x21f/0x2a0 [ 719.159577][T17701] ? __pfx____sys_sendmsg+0x10/0x10 [ 719.159599][T17701] ? get_pid_task+0x20/0x1f0 [ 719.159623][T17701] ? get_pid_task+0x20/0x1f0 [ 719.159646][T17701] ? get_pid_task+0x20/0x1f0 [ 719.159708][T17701] ? __fget_files+0x2a/0x420 [ 719.159734][T17701] ? __fget_files+0x3a0/0x420 [ 719.159766][T17701] __sys_sendmsg+0x164/0x220 [ 719.159794][T17701] ? __pfx___sys_sendmsg+0x10/0x10 [ 719.159827][T17701] ? __pfx_ksys_write+0x10/0x10 [ 719.159866][T17701] __do_fast_syscall_32+0x1dc/0x570 [ 719.159889][T17701] ? lockdep_hardirqs_on+0x7b/0x110 [ 719.159907][T17701] ? do_fast_syscall_32+0x34/0x80 [ 719.159928][T17701] ? irqentry_exit+0x10f/0x670 [ 719.159953][T17701] do_fast_syscall_32+0x34/0x80 [ 719.159976][T17701] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 719.160000][T17701] RIP: 0023:0xf701d539 [ 719.160018][T17701] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 719.160035][T17701] RSP: 002b:00000000f540d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 719.160058][T17701] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000780 [ 719.160074][T17701] RDX: 0000000000004880 RSI: 0000000000000000 RDI: 0000000000000000 [ 719.160088][T17701] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 719.160100][T17701] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 719.160112][T17701] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 719.160143][T17701] [ 719.516482][T17704] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4105'. [ 719.600958][ T5926] usb 3-1: new full-speed USB device number 69 using dummy_hcd [ 719.753974][ T5926] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 719.765925][ T5926] usb 3-1: config 0 has no interface number 0 [ 719.813415][ T5926] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 719.836290][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.859216][ T5926] usb 3-1: Product: syz [ 719.870948][ T5926] usb 3-1: Manufacturer: syz [ 719.875818][ T5926] usb 3-1: SerialNumber: syz [ 719.915141][ T5926] usb 3-1: config 0 descriptor?? [ 720.383776][ T5926] usb 3-1: Firmware: major: 0, minor: 107, hardware type: RZUSB (3) [ 720.421473][ T5948] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 720.590956][ T5948] usb 4-1: Using ep0 maxpacket: 16 [ 720.601828][ T5926] usb 3-1: Firmware: build h\r%Û [ 720.608964][ T5948] usb 4-1: config 0 has an invalid interface number: 9 but max is 0 [ 720.628366][ T5948] usb 4-1: config 0 has no interface number 0 [ 720.648770][ T5948] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 720.669093][ T5948] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 720.688294][ T5948] usb 4-1: Product: syz [ 720.693424][ T5948] usb 4-1: Manufacturer: syz [ 720.708801][ T5948] usb 4-1: SerialNumber: syz [ 720.735543][ T5948] usb 4-1: config 0 descriptor?? [ 720.802670][ T5926] usb 3-1: failed to fetch extended address, random address set [ 720.959283][ T5926] usb 3-1: USB disconnect, device number 69 [ 723.057926][T17765] FAULT_INJECTION: forcing a failure. [ 723.057926][T17765] name failslab, interval 1, probability 0, space 0, times 0 [ 723.104811][T16821] usb 4-1: USB disconnect, device number 77 [ 723.116957][T17767] FAULT_INJECTION: forcing a failure. [ 723.116957][T17767] name failslab, interval 1, probability 0, space 0, times 0 [ 723.136698][T17765] CPU: 0 UID: 0 PID: 17765 Comm: syz.4.4125 Tainted: G L syzkaller #0 PREEMPT(full) [ 723.136732][T17765] Tainted: [L]=SOFTLOCKUP [ 723.136740][T17765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 723.136751][T17765] Call Trace: [ 723.136759][T17765] [ 723.136767][T17765] dump_stack_lvl+0xe8/0x150 [ 723.136812][T17765] should_fail_ex+0x414/0x560 [ 723.136848][T17765] should_failslab+0xa8/0x100 [ 723.136875][T17765] kmem_cache_alloc_noprof+0x88/0x710 [ 723.136906][T17765] ? ep_ptable_queue_proc+0x5c/0x200 [ 723.136933][T17765] ? __memcg_slab_post_alloc_hook+0x512/0x730 [ 723.136969][T17765] ep_ptable_queue_proc+0x5c/0x200 [ 723.136996][T17765] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 723.137036][T17765] unix_poll+0x88/0x3f0 [ 723.137070][T17765] sock_poll+0x325/0x3e0 [ 723.137101][T17765] ? __pfx_sock_poll+0x10/0x10 [ 723.137124][T17765] ep_insert+0x1161/0x19e0 [ 723.137163][T17765] ? __pfx_ep_insert+0x10/0x10 [ 723.137188][T17765] ? __pfx___mutex_lock+0x10/0x10 [ 723.137212][T17765] ? __fget_files+0x2a/0x420 [ 723.137237][T17765] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 723.137265][T17765] ? __fget_files+0x3a0/0x420 [ 723.137289][T17765] ? __fget_files+0x2a/0x420 [ 723.137322][T17765] do_epoll_ctl+0x7f4/0xe80 [ 723.137355][T17765] __ia32_sys_epoll_ctl+0x15d/0x1a0 [ 723.137386][T17765] ? __pfx___ia32_sys_epoll_ctl+0x10/0x10 [ 723.137427][T17765] __do_fast_syscall_32+0x1dc/0x570 [ 723.137448][T17765] ? lockdep_hardirqs_on+0x7b/0x110 [ 723.137466][T17765] ? do_fast_syscall_32+0x34/0x80 [ 723.137485][T17765] ? irqentry_exit+0x10f/0x670 [ 723.137506][T17765] do_fast_syscall_32+0x34/0x80 [ 723.137528][T17765] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 723.137552][T17765] RIP: 0023:0xf70fd539 [ 723.137570][T17765] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 723.137587][T17765] RSP: 002b:00000000f54cc55c EFLAGS: 00000206 ORIG_RAX: 00000000000000ff [ 723.137610][T17765] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000001 [ 723.137624][T17765] RDX: 0000000000000005 RSI: 0000000080000200 RDI: 0000000000000000 [ 723.137637][T17765] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 723.137649][T17765] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 723.137660][T17765] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 723.137691][T17765] [ 723.151600][T17767] CPU: 1 UID: 0 PID: 17767 Comm: syz.0.4126 Tainted: G L syzkaller #0 PREEMPT(full) [ 723.151633][T17767] Tainted: [L]=SOFTLOCKUP [ 723.151641][T17767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 723.151652][T17767] Call Trace: [ 723.151660][T17767] [ 723.151668][T17767] dump_stack_lvl+0xe8/0x150 [ 723.151699][T17767] should_fail_ex+0x414/0x560 [ 723.151733][T17767] should_failslab+0xa8/0x100 [ 723.151759][T17767] kmem_cache_alloc_noprof+0x88/0x710 [ 723.151788][T17767] ? security_file_alloc+0x34/0x330 [ 723.151813][T17767] security_file_alloc+0x34/0x330 [ 723.151833][T17767] init_file+0x93/0x2f0 [ 723.151861][T17767] alloc_empty_file+0x6e/0x1d0 [ 723.151886][T17767] path_openat+0x108/0x3dd0 [ 723.151904][T17767] ? is_bpf_text_address+0x26/0x2b0 [ 723.151948][T17767] ? is_bpf_text_address+0x292/0x2b0 [ 723.151974][T17767] ? is_bpf_text_address+0x26/0x2b0 [ 723.152004][T17767] ? kernel_text_address+0xa5/0xe0 [ 723.152033][T17767] ? __kernel_text_address+0xd/0x40 [ 723.152059][T17767] ? __pfx_path_openat+0x10/0x10 [ 723.152076][T17767] ? arch_stack_walk+0xfc/0x150 [ 723.152114][T17767] do_filp_open+0x1fa/0x410 [ 723.152135][T17767] ? __pfx_do_filp_open+0x10/0x10 [ 723.152180][T17767] ? do_open_execat+0x93/0x560 [ 723.152210][T17767] do_open_execat+0x135/0x560 [ 723.152237][T17767] ? __pfx_do_open_execat+0x10/0x10 [ 723.152276][T17767] alloc_bprm+0x28/0x5c0 [ 723.152314][T17767] do_execveat_common+0x1b3/0x6a0 [ 723.152343][T17767] __ia32_compat_sys_execve+0x99/0xb0 [ 723.152365][T17767] __do_fast_syscall_32+0x1dc/0x570 [ 723.152385][T17767] ? lockdep_hardirqs_on+0x7b/0x110 [ 723.152403][T17767] ? do_fast_syscall_32+0x34/0x80 [ 723.152423][T17767] ? irqentry_exit+0x10f/0x670 [ 723.152445][T17767] do_fast_syscall_32+0x34/0x80 [ 723.152466][T17767] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 723.152489][T17767] RIP: 0023:0xf705d539 [ 723.152506][T17767] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 723.152523][T17767] RSP: 002b:00000000f544d55c EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 723.152544][T17767] RAX: ffffffffffffffda RBX: 0000000080000180 RCX: 0000000000000000 [ 723.152570][T17767] RDX: 0000000080000800 RSI: 0000000000000000 RDI: 0000000000000000 [ 723.152583][T17767] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 723.152594][T17767] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 723.152606][T17767] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 723.152634][T17767] [ 724.009969][T17776] FAULT_INJECTION: forcing a failure. [ 724.009969][T17776] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 724.024141][T17776] CPU: 0 UID: 0 PID: 17776 Comm: syz.4.4131 Tainted: G L syzkaller #0 PREEMPT(full) [ 724.024176][T17776] Tainted: [L]=SOFTLOCKUP [ 724.024184][T17776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 724.024196][T17776] Call Trace: [ 724.024205][T17776] [ 724.024215][T17776] dump_stack_lvl+0xe8/0x150 [ 724.024248][T17776] should_fail_ex+0x414/0x560 [ 724.024285][T17776] _copy_to_user+0x31/0xb0 [ 724.024313][T17776] simple_read_from_buffer+0xe1/0x170 [ 724.024344][T17776] proc_fail_nth_read+0x1b3/0x220 [ 724.024371][T17776] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 724.024398][T17776] ? rw_verify_area+0x2a6/0x4d0 [ 724.024430][T17776] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 724.024453][T17776] vfs_read+0x200/0xa30 [ 724.024472][T17776] ? fdget_pos+0x247/0x320 [ 724.024502][T17776] ? __pfx___mutex_lock+0x10/0x10 [ 724.024525][T17776] ? __pfx_vfs_read+0x10/0x10 [ 724.024544][T17776] ? __fget_files+0x2a/0x420 [ 724.024571][T17776] ? __fget_files+0x3a0/0x420 [ 724.024591][T17776] ? __fget_files+0x2a/0x420 [ 724.024622][T17776] ksys_read+0x145/0x250 [ 724.024642][T17776] ? __pfx_ksys_read+0x10/0x10 [ 724.024656][T17776] ? fput+0xa0/0xd0 [ 724.024691][T17776] __do_fast_syscall_32+0x1dc/0x570 [ 724.024712][T17776] ? lockdep_hardirqs_on+0x7b/0x110 [ 724.024731][T17776] ? do_fast_syscall_32+0x34/0x80 [ 724.024753][T17776] ? irqentry_exit+0x10f/0x670 [ 724.024778][T17776] do_fast_syscall_32+0x34/0x80 [ 724.024802][T17776] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 724.024826][T17776] RIP: 0023:0xf70fd539 [ 724.024844][T17776] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 724.024861][T17776] RSP: 002b:00000000f54ed590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 724.024893][T17776] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54ed620 [ 724.024907][T17776] RDX: 000000000000000f RSI: 00000000f7496ff4 RDI: 0000000000000000 [ 724.024920][T17776] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 724.024931][T17776] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 724.024943][T17776] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 724.024972][T17776] [ 724.396792][T17787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4133'. [ 724.811155][T17793] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4134'. [ 724.840948][T17793] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4134'. [ 726.442956][T17807] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4138'. [ 726.585418][T17811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4142'. [ 726.632277][T17816] FAULT_INJECTION: forcing a failure. [ 726.632277][T17816] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 726.651915][T17811] 8021q: adding VLAN 0 to HW filter on device bond2 [ 726.662962][T17816] CPU: 0 UID: 0 PID: 17816 Comm: syz.4.4143 Tainted: G L syzkaller #0 PREEMPT(full) [ 726.662991][T17816] Tainted: [L]=SOFTLOCKUP [ 726.662999][T17816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 726.663010][T17816] Call Trace: [ 726.663019][T17816] [ 726.663027][T17816] dump_stack_lvl+0xe8/0x150 [ 726.663059][T17816] should_fail_ex+0x414/0x560 [ 726.663083][T17816] _copy_from_iter+0x1cd/0x1630 [ 726.663103][T17816] ? __pfx__copy_from_iter+0x10/0x10 [ 726.663116][T17816] ? __build_skb_around+0x22d/0x3c0 [ 726.663131][T17816] ? __alloc_skb+0x198/0x3a0 [ 726.663143][T17816] ? netlink_sendmsg+0x642/0xb30 [ 726.663157][T17816] ? skb_put+0x11b/0x210 [ 726.663172][T17816] netlink_sendmsg+0x6b2/0xb30 [ 726.663192][T17816] ? __pfx_netlink_sendmsg+0x10/0x10 [ 726.663209][T17816] ? __import_iovec+0x5d4/0x7f0 [ 726.663221][T17816] ? aa_sock_msg_perm+0xf1/0x1b0 [ 726.663238][T17816] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 726.663250][T17816] ? __pfx_netlink_sendmsg+0x10/0x10 [ 726.663266][T17816] __sock_sendmsg+0x21c/0x270 [ 726.663284][T17816] ____sys_sendmsg+0x505/0x820 [ 726.663301][T17816] ? __pfx_____sys_sendmsg+0x10/0x10 [ 726.663318][T17816] ? kstrtouint+0x6e/0xe0 [ 726.663339][T17816] ___sys_sendmsg+0x21f/0x2a0 [ 726.663355][T17816] ? __pfx____sys_sendmsg+0x10/0x10 [ 726.663368][T17816] ? get_pid_task+0x20/0x1f0 [ 726.663383][T17816] ? get_pid_task+0x20/0x1f0 [ 726.663396][T17816] ? get_pid_task+0x20/0x1f0 [ 726.663426][T17816] ? __fget_files+0x2a/0x420 [ 726.663441][T17816] ? __fget_files+0x3a0/0x420 [ 726.663460][T17816] __sys_sendmsg+0x164/0x220 [ 726.663476][T17816] ? __pfx___sys_sendmsg+0x10/0x10 [ 726.663494][T17816] ? __pfx_ksys_write+0x10/0x10 [ 726.663513][T17816] __do_fast_syscall_32+0x1dc/0x570 [ 726.663526][T17816] ? lockdep_hardirqs_on+0x7b/0x110 [ 726.663537][T17816] ? do_fast_syscall_32+0x34/0x80 [ 726.663550][T17816] ? irqentry_exit+0x10f/0x670 [ 726.663566][T17816] do_fast_syscall_32+0x34/0x80 [ 726.663588][T17816] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 726.663604][T17816] RIP: 0023:0xf70fd539 [ 726.663616][T17816] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 726.663627][T17816] RSP: 002b:00000000f54ed55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 726.663642][T17816] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080004340 [ 726.663651][T17816] RDX: 0000000004000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 726.663659][T17816] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 726.663666][T17816] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 726.663674][T17816] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 726.663691][T17816] [ 726.989332][T17811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4142'. [ 727.003352][T17811] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4142'. [ 727.035858][T17811] bond2: (slave wlan0): Enslaving as an active interface with a down link [ 727.177641][T17822] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4141'. [ 727.232088][T17822] random: crng reseeded on system resumption [ 727.243634][T17817] bond2: (slave ip6erspan1): making interface the new active one [ 727.279090][T17817] bond2: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 727.338252][T17817] ip6erspan1: entered promiscuous mode [ 727.345045][T17817] bond2: (slave ip6erspan1): Enslaving as an active interface with an up link [ 727.595146][T17832] netlink: 'syz.4.4148': attribute type 8 has an invalid length. [ 727.630970][ T981] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 727.772290][T17832] netlink: 7 bytes leftover after parsing attributes in process `syz.4.4148'. [ 727.790293][T17832] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4148'. [ 727.853396][T17836] nvme_fabrics: missing parameter 'transport=%s' [ 727.921189][ T981] usb 3-1: Using ep0 maxpacket: 8 [ 727.957796][T17836] nvme_fabrics: missing parameter 'nqn=%s' [ 727.991629][ T981] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 728.000518][ T981] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 728.035971][ T981] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 728.073745][ T981] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 728.102485][ T981] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 728.193769][ T981] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 728.211997][ T981] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.038048][T17851] bond3: option lacp_rate: invalid value (253) [ 729.056552][T17851] bond3 (unregistering): Released all slaves [ 729.458140][T17857] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4155'. [ 730.684450][ T981] usb 3-1: usb_control_msg returned -71 [ 730.701334][ T981] usbtmc 3-1:16.0: can't read capabilities [ 730.721840][ T981] usb 3-1: USB disconnect, device number 70 [ 730.850626][T17873] FAULT_INJECTION: forcing a failure. [ 730.850626][T17873] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 730.869940][T17873] CPU: 1 UID: 0 PID: 17873 Comm: syz.2.4162 Tainted: G L syzkaller #0 PREEMPT(full) [ 730.869976][T17873] Tainted: [L]=SOFTLOCKUP [ 730.869984][T17873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 730.869997][T17873] Call Trace: [ 730.870006][T17873] [ 730.870015][T17873] dump_stack_lvl+0xe8/0x150 [ 730.870047][T17873] should_fail_ex+0x414/0x560 [ 730.870084][T17873] _copy_from_user+0x2d/0xb0 [ 730.870106][T17873] ip_tunnel_parm_from_user+0xa2/0x380 [ 730.870136][T17873] ? __pfx_ip_tunnel_parm_from_user+0x10/0x10 [ 730.870167][T17873] ? rcu_is_watching+0x15/0xb0 [ 730.870193][T17873] ? trace_contention_end+0x39/0x100 [ 730.870227][T17873] ip_tunnel_siocdevprivate+0x99/0x180 [ 730.870258][T17873] ? __pfx_ip_tunnel_siocdevprivate+0x10/0x10 [ 730.870295][T17873] ? netdev_name_node_lookup+0xdf/0x120 [ 730.870328][T17873] dev_ifsioc+0xb57/0xf00 [ 730.870362][T17873] dev_ioctl+0x84c/0x1150 [ 730.870389][T17873] sock_ioctl+0x719/0x790 [ 730.870419][T17873] ? __pfx_sock_ioctl+0x10/0x10 [ 730.870447][T17873] ? get_pid_task+0x20/0x1f0 [ 730.870486][T17873] compat_sock_ioctl+0x285/0xc80 [ 730.870520][T17873] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 730.870561][T17873] ? __fget_files+0x3a0/0x420 [ 730.870586][T17873] ? __fget_files+0x2a/0x420 [ 730.870615][T17873] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 730.870642][T17873] __ia32_compat_sys_ioctl+0x543/0x840 [ 730.870667][T17873] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 730.870688][T17873] ? __fget_files+0x3a0/0x420 [ 730.870720][T17873] ? fput+0xa0/0xd0 [ 730.870747][T17873] ? ksys_write+0x22a/0x250 [ 730.870769][T17873] ? __pfx_ksys_write+0x10/0x10 [ 730.870800][T17873] __do_fast_syscall_32+0x1dc/0x570 [ 730.870824][T17873] ? lockdep_hardirqs_on+0x7b/0x110 [ 730.870848][T17873] ? do_fast_syscall_32+0x34/0x80 [ 730.870869][T17873] ? irqentry_exit+0x10f/0x670 [ 730.870893][T17873] do_fast_syscall_32+0x34/0x80 [ 730.870915][T17873] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 730.870939][T17873] RIP: 0023:0xf7f22539 [ 730.870956][T17873] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 730.870974][T17873] RSP: 002b:00000000f541655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 730.870997][T17873] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000089f1 [ 730.871011][T17873] RDX: 0000000080002180 RSI: 0000000000000000 RDI: 0000000000000000 [ 730.871023][T17873] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 730.871036][T17873] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 730.871047][T17873] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 730.871078][T17873] [ 731.222122][T17877] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4163'. [ 731.266186][T17875] netlink: 'syz.4.4161': attribute type 8 has an invalid length. [ 731.296810][T17875] netlink: 7 bytes leftover after parsing attributes in process `syz.4.4161'. [ 731.340625][T17875] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4161'. [ 731.630994][ T890] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 731.760635][T17897] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4169'. [ 731.802468][ T890] usb 3-1: Using ep0 maxpacket: 16 [ 731.815127][ T890] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 731.830455][ T890] usb 3-1: config 0 interface 0 has no altsetting 0 [ 731.838198][ T890] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 731.847824][ T890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.859584][ T890] usb 3-1: config 0 descriptor?? [ 732.308726][ T890] nzxt-smart2 0003:1E71:2009.0018: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 732.691115][T17900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 732.701433][T17900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 734.241207][ T981] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 734.686879][ T981] usb 2-1: config 160 has an invalid interface number: 200 but max is 0 [ 734.705665][ T981] usb 2-1: config 160 has no interface number 0 [ 734.738405][ T981] usb 2-1: config 160 interface 200 has no altsetting 0 [ 734.790455][ T981] usb 2-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 734.805543][ T981] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.846616][ T981] usb 2-1: Product: syz [ 734.863206][T11328] usb 3-1: USB disconnect, device number 71 [ 734.878793][ T981] usb 2-1: Manufacturer: syz [ 734.903104][ T981] usb 2-1: SerialNumber: syz [ 735.315955][T17930] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4180'. [ 735.355866][T17927] netlink: 'syz.0.4178': attribute type 8 has an invalid length. [ 735.364746][T17927] netlink: 7 bytes leftover after parsing attributes in process `syz.0.4178'. [ 735.375989][T17927] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4178'. [ 735.391393][ T890] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 735.516637][T17933] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4180'. [ 735.580927][ T890] usb 4-1: Using ep0 maxpacket: 32 [ 735.613192][ T890] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 735.637656][ T890] usb 4-1: config 0 has no interface number 0 [ 735.666396][ T890] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 735.686883][ T890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.720740][ T890] usb 4-1: Product: syz [ 735.733532][ T890] usb 4-1: Manufacturer: syz [ 735.744458][ T890] usb 4-1: SerialNumber: syz [ 735.764459][ T890] usb 4-1: config 0 descriptor?? [ 735.786590][ T890] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 735.996604][T17939] FAULT_INJECTION: forcing a failure. [ 735.996604][T17939] name failslab, interval 1, probability 0, space 0, times 0 [ 736.010397][ T890] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 736.032160][T17939] CPU: 1 UID: 0 PID: 17939 Comm: syz.4.4183 Tainted: G L syzkaller #0 PREEMPT(full) [ 736.032195][T17939] Tainted: [L]=SOFTLOCKUP [ 736.032203][T17939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 736.032215][T17939] Call Trace: [ 736.032224][T17939] [ 736.032233][T17939] dump_stack_lvl+0xe8/0x150 [ 736.032271][T17939] should_fail_ex+0x414/0x560 [ 736.032307][T17939] should_failslab+0xa8/0x100 [ 736.032332][T17939] __kmalloc_noprof+0xdf/0x800 [ 736.032352][T17939] ? tomoyo_encode+0x28b/0x550 [ 736.032382][T17939] tomoyo_encode+0x28b/0x550 [ 736.032414][T17939] tomoyo_realpath_from_path+0x58d/0x5d0 [ 736.032461][T17939] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 736.032482][T17939] tomoyo_path_number_perm+0x1e8/0x5a0 [ 736.032508][T17939] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 736.032528][T17939] ? __lock_acquire+0x6b6/0x2cf0 [ 736.032553][T17939] ? get_pid_task+0x20/0x1f0 [ 736.032591][T17939] ? get_pid_task+0x20/0x1f0 [ 736.032644][T17939] ? __fget_files+0x2a/0x420 [ 736.032673][T17939] ? __fget_files+0x3a0/0x420 [ 736.032697][T17939] ? __fget_files+0x2a/0x420 [ 736.032726][T17939] security_file_ioctl_compat+0xcb/0x2d0 [ 736.032759][T17939] __ia32_compat_sys_ioctl+0x128/0x840 [ 736.032781][T17939] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 736.032801][T17939] ? __fget_files+0x3a0/0x420 [ 736.032831][T17939] ? fput+0xa0/0xd0 [ 736.032858][T17939] ? ksys_write+0x22a/0x250 [ 736.032880][T17939] ? __pfx_ksys_write+0x10/0x10 [ 736.032912][T17939] __do_fast_syscall_32+0x1dc/0x570 [ 736.032935][T17939] ? lockdep_hardirqs_on+0x7b/0x110 [ 736.032953][T17939] ? do_fast_syscall_32+0x34/0x80 [ 736.032973][T17939] ? irqentry_exit+0x10f/0x670 [ 736.032997][T17939] do_fast_syscall_32+0x34/0x80 [ 736.033021][T17939] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 736.033046][T17939] RIP: 0023:0xf70fd539 [ 736.033065][T17939] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 736.033083][T17939] RSP: 002b:00000000f54ed55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 736.033105][T17939] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 000000004008af00 [ 736.033120][T17939] RDX: 0000000080000400 RSI: 0000000000000000 RDI: 0000000000000000 [ 736.033133][T17939] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 736.033145][T17939] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 736.033157][T17939] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 736.033197][T17939] [ 736.045500][ T890] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 736.105504][T17939] ERROR: Out of memory at tomoyo_realpath_from_path. [ 736.324877][T17925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 736.343649][T17925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 736.778060][T17944] loop6: detected capacity change from 0 to 524288000 [ 736.828459][ T981] usb 2-1: USB disconnect, device number 87 [ 736.878105][T17945] netlink: 'syz.4.4184': attribute type 41 has an invalid length. [ 736.882365][T17944] support for the xor transformation has been removed. [ 736.891142][T17945] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4184'. [ 736.932337][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 736.932944][ T5914] usb 4-1: USB disconnect, device number 78 [ 737.049480][ T5914] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 737.136298][ T5914] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 737.384733][ T5914] quatech2 4-1:0.51: device disconnected [ 737.394221][T17952] nvme_fabrics: missing parameter 'transport=%s' [ 737.402194][T17952] nvme_fabrics: missing parameter 'nqn=%s' [ 737.641504][T11328] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 737.759701][T17966] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4189'. [ 737.811253][T11328] usb 3-1: Using ep0 maxpacket: 16 [ 737.818207][T11328] usb 3-1: config 0 has an invalid interface number: 9 but max is 0 [ 737.827350][T11328] usb 3-1: config 0 has no interface number 0 [ 738.030983][ T9] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 738.061155][ T5899] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 738.077186][T11328] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 738.087666][T11328] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 738.097859][T11328] usb 3-1: Product: syz [ 738.105899][T11328] usb 3-1: Manufacturer: syz [ 738.110550][T11328] usb 3-1: SerialNumber: syz [ 738.126774][T11328] usb 3-1: config 0 descriptor?? [ 738.220973][ T5899] usb 5-1: Using ep0 maxpacket: 16 [ 738.228954][ T5899] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 738.238879][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 738.251050][ T5899] usb 5-1: config 0 interface 0 has no altsetting 0 [ 738.265197][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 738.266216][ T5899] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 738.287774][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.288226][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 738.306910][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 738.317636][ T9] usb 2-1: Product: syz [ 738.323054][ T9] usb 2-1: Manufacturer: syz [ 738.329425][ T5899] usb 5-1: config 0 descriptor?? [ 738.343044][T17972] netlink: 'syz.0.4193': attribute type 8 has an invalid length. [ 738.359113][T17972] netlink: 7 bytes leftover after parsing attributes in process `syz.0.4193'. [ 738.370082][T17972] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4193'. [ 738.372507][ T9] usb 2-1: SerialNumber: syz [ 738.385460][ T9] usb 2-1: config 0 descriptor?? [ 738.400768][ T9] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 738.411160][T11328] usb 4-1: new full-speed USB device number 79 using dummy_hcd [ 738.420595][ T9] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 738.578005][T11328] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 738.588447][T11328] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 738.607868][T11328] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 738.625266][T11328] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.766348][ T5899] nzxt-smart2 0003:1E71:2009.0019: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 738.849468][T17978] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4194'. [ 738.872318][T17978] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4194'. [ 739.022093][ T9] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 739.055343][T11328] usb 4-1: usb_control_msg returned -32 [ 739.055402][T11328] usbtmc 4-1:16.0: can't read capabilities [ 739.195273][T17980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 739.195694][T17980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 739.472776][ T9] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 739.483868][ T9] em28xx 2-1:0.0: board has no eeprom [ 739.561107][ T9] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 739.581916][ T9] em28xx 2-1:0.0: dvb set to bulk mode. [ 739.588829][T11328] em28xx 2-1:0.0: Binding DVB extension [ 739.906751][ T5927] usb 3-1: USB disconnect, device number 72 [ 739.923726][T11328] em28xx 2-1:0.0: Registering input extension [ 739.955916][ T9] usb 2-1: USB disconnect, device number 88 [ 739.998387][ T9] em28xx 2-1:0.0: Disconnecting em28xx [ 740.041894][ T9] em28xx 2-1:0.0: Closing input extension [ 740.100142][ T9] em28xx 2-1:0.0: Freeing device [ 740.883565][T18001] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4199'. [ 740.893113][T14548] ip6erspan1: left promiscuous mode [ 740.925101][ T5927] usb 5-1: USB disconnect, device number 79 [ 740.978664][T18001] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4199'. [ 742.162664][ T24] usb 4-1: USB disconnect, device number 79 [ 742.745482][T18018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4203'. [ 742.767252][T18018] : entered promiscuous mode [ 742.961028][ T9] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 743.086343][T18028] FAULT_INJECTION: forcing a failure. [ 743.086343][T18028] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 743.101565][T18028] CPU: 1 UID: 0 PID: 18028 Comm: syz.0.4207 Tainted: G L syzkaller #0 PREEMPT(full) [ 743.101603][T18028] Tainted: [L]=SOFTLOCKUP [ 743.101609][T18028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 743.101617][T18028] Call Trace: [ 743.101623][T18028] [ 743.101629][T18028] dump_stack_lvl+0xe8/0x150 [ 743.101650][T18028] should_fail_ex+0x414/0x560 [ 743.101671][T18028] _copy_from_iter+0x1cd/0x1630 [ 743.101687][T18028] ? sock_alloc_send_pskb+0x86b/0x980 [ 743.101706][T18028] ? __pfx__copy_from_iter+0x10/0x10 [ 743.101723][T18028] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 743.101741][T18028] skb_copy_datagram_from_iter+0xf5/0x720 [ 743.101764][T18028] ? dev_get_by_index+0x22/0x2e0 [ 743.101790][T18028] ? skb_put+0x11b/0x210 [ 743.101814][T18028] packet_sendmsg+0x3797/0x5080 [ 743.101850][T18028] ? aa_label_snxprint+0x710/0xa70 [ 743.101889][T18028] ? aa_sk_perm+0x15f/0x920 [ 743.101903][T18028] ? __pfx_packet_sendmsg+0x10/0x10 [ 743.101918][T18028] ? aa_sk_perm+0x7ee/0x920 [ 743.101935][T18028] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 743.101954][T18028] ? aa_sock_msg_perm+0xf1/0x1b0 [ 743.101970][T18028] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 743.101982][T18028] ? __pfx_packet_sendmsg+0x10/0x10 [ 743.101999][T18028] __sock_sendmsg+0x21c/0x270 [ 743.102018][T18028] __sys_sendto+0x3bd/0x520 [ 743.102032][T18028] ? __pfx___sys_sendto+0x10/0x10 [ 743.102044][T18028] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 743.102064][T18028] ? __fget_files+0x3a0/0x420 [ 743.102085][T18028] ? ksys_write+0x22a/0x250 [ 743.102098][T18028] ? __pfx_ksys_write+0x10/0x10 [ 743.102112][T18028] __ia32_sys_sendto+0xdd/0x100 [ 743.102127][T18028] __do_fast_syscall_32+0x1dc/0x570 [ 743.102142][T18028] ? lockdep_hardirqs_on+0x7b/0x110 [ 743.102154][T18028] ? do_fast_syscall_32+0x34/0x80 [ 743.102166][T18028] ? irqentry_exit+0x10f/0x670 [ 743.102180][T18028] do_fast_syscall_32+0x34/0x80 [ 743.102194][T18028] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 743.102209][T18028] RIP: 0023:0xf705d539 [ 743.102221][T18028] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 743.102232][T18028] RSP: 002b:00000000f544d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 743.102246][T18028] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000300 [ 743.102256][T18028] RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000080000180 [ 743.102264][T18028] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000000 [ 743.102271][T18028] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 743.102279][T18028] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 743.102296][T18028] [ 743.172098][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 743.397611][T11328] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 743.560092][ T9] usb 5-1: config 0 has an invalid interface number: 9 but max is 0 [ 743.696314][ T9] usb 5-1: config 0 has no interface number 0 [ 743.721197][T11328] usb 2-1: Using ep0 maxpacket: 16 [ 743.787415][T11328] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 743.850994][ T9] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 743.869309][ T9] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 743.878657][T11328] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 743.898605][ T9] usb 5-1: Product: syz [ 743.903177][T11328] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.921362][ T9] usb 5-1: Manufacturer: syz [ 743.926316][T11328] usb 2-1: Product: syz [ 743.930693][T11328] usb 2-1: Manufacturer: syz [ 743.935916][ T9] usb 5-1: SerialNumber: syz [ 743.949667][ T9] usb 5-1: config 0 descriptor?? [ 743.980962][T11328] usb 2-1: SerialNumber: syz [ 744.006735][T11328] usb 2-1: config 0 descriptor?? [ 744.032513][T11328] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 744.088450][T11328] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 744.261818][T18031] FAULT_INJECTION: forcing a failure. [ 744.261818][T18031] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 744.308175][T18031] CPU: 1 UID: 0 PID: 18031 Comm: syz.0.4218 Tainted: G L syzkaller #0 PREEMPT(full) [ 744.308211][T18031] Tainted: [L]=SOFTLOCKUP [ 744.308219][T18031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 744.308232][T18031] Call Trace: [ 744.308242][T18031] [ 744.308252][T18031] dump_stack_lvl+0xe8/0x150 [ 744.308286][T18031] should_fail_ex+0x414/0x560 [ 744.308324][T18031] _copy_to_user+0x31/0xb0 [ 744.308359][T18031] simple_read_from_buffer+0xe1/0x170 [ 744.308392][T18031] proc_fail_nth_read+0x1b3/0x220 [ 744.308418][T18031] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 744.308444][T18031] ? rw_verify_area+0x2a6/0x4d0 [ 744.308474][T18031] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 744.308497][T18031] vfs_read+0x200/0xa30 [ 744.308516][T18031] ? fdget_pos+0x247/0x320 [ 744.308546][T18031] ? __pfx___mutex_lock+0x10/0x10 [ 744.308570][T18031] ? __pfx_vfs_read+0x10/0x10 [ 744.308591][T18031] ? __fget_files+0x2a/0x420 [ 744.308619][T18031] ? __fget_files+0x3a0/0x420 [ 744.308641][T18031] ? __fget_files+0x2a/0x420 [ 744.308677][T18031] ksys_read+0x145/0x250 [ 744.308700][T18031] ? __pfx_ksys_read+0x10/0x10 [ 744.308733][T18031] __do_fast_syscall_32+0x1dc/0x570 [ 744.308756][T18031] ? lockdep_hardirqs_on+0x7b/0x110 [ 744.308774][T18031] ? do_fast_syscall_32+0x34/0x80 [ 744.308797][T18031] ? irqentry_exit+0x10f/0x670 [ 744.308822][T18031] do_fast_syscall_32+0x34/0x80 [ 744.308846][T18031] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 744.308872][T18031] RIP: 0023:0xf705d539 [ 744.308891][T18031] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 744.308908][T18031] RSP: 002b:00000000f544d590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 744.308931][T18031] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000f544d620 [ 744.308946][T18031] RDX: 000000000000000f RSI: 00000000f73f6ff4 RDI: 0000000000000000 [ 744.308959][T18031] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 744.308969][T18031] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 744.308981][T18031] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 744.309015][T18031] [ 744.740743][T11328] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 744.760294][T18038] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4208'. [ 744.780144][T18038] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4208'. [ 745.229224][T11328] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 745.238154][T11328] em28xx 2-1:0.0: board has no eeprom [ 745.310923][T11328] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 745.319438][T11328] em28xx 2-1:0.0: dvb set to bulk mode. [ 745.327634][ T5927] em28xx 2-1:0.0: Binding DVB extension [ 745.483960][ T5927] em28xx 2-1:0.0: Registering input extension [ 745.513411][T11328] usb 2-1: USB disconnect, device number 89 [ 745.553139][ T981] usb 5-1: USB disconnect, device number 80 [ 745.557884][T11328] em28xx 2-1:0.0: Disconnecting em28xx [ 745.587986][T11328] em28xx 2-1:0.0: Closing input extension [ 745.953956][T11328] em28xx 2-1:0.0: Freeing device [ 746.135393][T18053] fuse: Bad value for 'user_id' [ 746.140507][T18053] fuse: Bad value for 'user_id' [ 747.472721][T18058] netlink: 'syz.4.4213': attribute type 8 has an invalid length. [ 747.483889][T18058] netlink: 7 bytes leftover after parsing attributes in process `syz.4.4213'. [ 747.506749][T18058] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4213'. [ 749.080947][ T5927] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 749.240963][ T890] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 749.248924][ T5927] usb 5-1: Using ep0 maxpacket: 8 [ 749.259784][ T5927] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 749.275760][ T5927] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 2 [ 749.287437][ T5927] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 749.320531][ T5927] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 749.331473][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.340810][ T5927] usb 5-1: Product: syz [ 749.452760][ T5927] usb 5-1: Manufacturer: syz [ 749.457534][ T5927] usb 5-1: SerialNumber: syz [ 749.462416][ T890] usb 3-1: Using ep0 maxpacket: 16 [ 749.472220][T18075] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 749.480968][ T890] usb 3-1: config 0 has an invalid interface number: 9 but max is 0 [ 749.493277][ T5927] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 749.506444][ T890] usb 3-1: config 0 has no interface number 0 [ 749.515714][ T5927] usbtest 5-1:1.0: Linux user mode ISO test driver [ 749.524707][ T5927] usbtest 5-1:1.0: high-speed {control bulk-out iso-in} tests (+alt) [ 749.541833][ T890] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 749.565636][ T890] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 749.591214][ T890] usb 3-1: Product: syz [ 749.599609][ T890] usb 3-1: Manufacturer: syz [ 749.608597][ T890] usb 3-1: SerialNumber: syz [ 749.677111][ T890] usb 3-1: config 0 descriptor?? [ 749.771053][T11343] usb 5-1: USB disconnect, device number 81 [ 750.695472][T18102] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4228'. [ 750.814988][T18099] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4228'. [ 751.285091][T18106] netlink: 'syz.1.4231': attribute type 8 has an invalid length. [ 751.293517][T18106] netlink: 7 bytes leftover after parsing attributes in process `syz.1.4231'. [ 751.307490][T18106] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4231'. [ 751.391076][ T5907] usb 5-1: new full-speed USB device number 82 using dummy_hcd [ 751.552863][ T5907] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 751.565448][ T5907] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 751.597244][ T5907] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 751.631673][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.864241][ T5907] usb 5-1: usb_control_msg returned -32 [ 751.906030][ T5907] usbtmc 5-1:16.0: can't read capabilities [ 751.950245][ T890] usb 3-1: USB disconnect, device number 73 [ 752.320282][T18121] FAULT_INJECTION: forcing a failure. [ 752.320282][T18121] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 752.377115][T18121] CPU: 0 UID: 0 PID: 18121 Comm: syz.2.4235 Tainted: G L syzkaller #0 PREEMPT(full) [ 752.377152][T18121] Tainted: [L]=SOFTLOCKUP [ 752.377160][T18121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 752.377173][T18121] Call Trace: [ 752.377182][T18121] [ 752.377192][T18121] dump_stack_lvl+0xe8/0x150 [ 752.377225][T18121] should_fail_ex+0x414/0x560 [ 752.377261][T18121] _copy_from_user+0x2d/0xb0 [ 752.377288][T18121] video_usercopy+0x349/0x13f0 [ 752.377318][T18121] ? __pfx___video_do_ioctl+0x10/0x10 [ 752.377339][T18121] ? __pfx_video_usercopy+0x10/0x10 [ 752.377377][T18121] ? __fget_files+0x2a/0x420 [ 752.377406][T18121] v4l2_ioctl+0x18d/0x1e0 [ 752.377458][T18121] v4l2_compat_ioctl32+0x1d7/0x290 [ 752.377496][T18121] __ia32_compat_sys_ioctl+0x543/0x840 [ 752.377520][T18121] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 752.377542][T18121] ? __fget_files+0x3a0/0x420 [ 752.377573][T18121] ? fput+0xa0/0xd0 [ 752.377600][T18121] ? ksys_write+0x22a/0x250 [ 752.377622][T18121] ? __pfx_ksys_write+0x10/0x10 [ 752.377653][T18121] __do_fast_syscall_32+0x1dc/0x570 [ 752.377677][T18121] ? lockdep_hardirqs_on+0x7b/0x110 [ 752.377696][T18121] ? do_fast_syscall_32+0x34/0x80 [ 752.377717][T18121] ? irqentry_exit+0x10f/0x670 [ 752.377741][T18121] do_fast_syscall_32+0x34/0x80 [ 752.377764][T18121] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 752.377789][T18121] RIP: 0023:0xf7f22539 [ 752.377808][T18121] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 752.377826][T18121] RSP: 002b:00000000f541655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 752.377849][T18121] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0845657 [ 752.377864][T18121] RDX: 0000000080000380 RSI: 0000000000000000 RDI: 0000000000000000 [ 752.377877][T18121] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 752.377889][T18121] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 752.377902][T18121] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 752.377933][T18121] [ 752.861244][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.871403][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 754.434942][T18144] netlink: 'syz.3.4242': attribute type 8 has an invalid length. [ 754.463226][T18144] netlink: 7 bytes leftover after parsing attributes in process `syz.3.4242'. [ 754.512513][T18144] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4242'. [ 755.004404][T18147] netlink: set zone limit has 4 unknown bytes [ 755.108599][ T5914] usb 5-1: USB disconnect, device number 82 [ 755.250008][T18161] netlink: 100 bytes leftover after parsing attributes in process `syz.4.4248'. [ 755.541207][ T890] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 755.680966][ T5914] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 755.782809][ T890] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 755.791755][ T890] usb 4-1: config 1 has an invalid descriptor of length 54, skipping remainder of the config [ 755.803216][ T890] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 755.861648][ T5914] usb 5-1: device descriptor read/64, error -71 [ 755.890170][ T890] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 755.930889][ T890] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 755.946253][ T890] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 755.960595][ T890] usb 4-1: Product: syz [ 755.967300][ T890] usb 4-1: Manufacturer: syz [ 755.986548][ T890] cdc_wdm 4-1:1.0: skipping garbage [ 755.993129][ T890] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 756.130964][ T5914] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 756.347214][ T5914] usb 5-1: device descriptor read/64, error -71 [ 756.461683][ T5914] usb usb5-port1: attempt power cycle [ 756.841040][ T890] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 756.937966][ T5914] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 756.981705][ T5914] usb 5-1: device descriptor read/8, error -71 [ 756.988817][T18174] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 756.995902][T18174] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 757.004427][T18174] vhci_hcd vhci_hcd.0: Device attached [ 757.021054][T18177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4250'. [ 757.136927][T18177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4250'. [ 757.170908][ T890] usb 2-1: Using ep0 maxpacket: 16 [ 757.179541][ T890] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 757.189133][ T890] usb 2-1: config 0 has no interface number 0 [ 757.218831][ T5899] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 757.234089][ T890] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 757.246782][ T890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.257349][ T890] usb 2-1: Product: syz [ 757.264299][ T890] usb 2-1: Manufacturer: syz [ 757.269958][ T890] usb 2-1: SerialNumber: syz [ 757.307511][ T5899] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 757.335089][ T5914] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 757.372532][ T5914] usb 5-1: device descriptor read/8, error -71 [ 757.496577][ T5914] usb usb5-port1: unable to enumerate USB device [ 757.513399][ T890] usb 2-1: config 0 descriptor?? [ 757.579447][ T890] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 758.495318][ T890] gspca_spca1528: reg_w err -110 [ 758.520978][ T890] spca1528 2-1:0.1: probe with driver spca1528 failed with error -110 [ 758.690072][ T890] usb 2-1: USB disconnect, device number 90 [ 759.092413][T18178] vhci_hcd: connection reset by peer [ 759.099518][T14177] vhci_hcd vhci_hcd.3: stop threads [ 759.108968][T14177] vhci_hcd vhci_hcd.3: release socket [ 759.115678][T14177] vhci_hcd vhci_hcd.3: disconnect device [ 759.274743][ T890] usb 4-1: USB disconnect, device number 80 [ 759.474587][T18201] FAULT_INJECTION: forcing a failure. [ 759.474587][T18201] name failslab, interval 1, probability 0, space 0, times 0 [ 759.491120][T18201] CPU: 1 UID: 0 PID: 18201 Comm: syz.1.4256 Tainted: G L syzkaller #0 PREEMPT(full) [ 759.491156][T18201] Tainted: [L]=SOFTLOCKUP [ 759.491164][T18201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 759.491177][T18201] Call Trace: [ 759.491186][T18201] [ 759.491195][T18201] dump_stack_lvl+0xe8/0x150 [ 759.491227][T18201] should_fail_ex+0x414/0x560 [ 759.491265][T18201] should_failslab+0xa8/0x100 [ 759.491326][T18201] kmem_cache_alloc_noprof+0x88/0x710 [ 759.491354][T18201] ? __netlink_lookup+0xbd/0x8a0 [ 759.491379][T18201] ? skb_clone+0x212/0x3a0 [ 759.491411][T18201] skb_clone+0x212/0x3a0 [ 759.491440][T18201] __netlink_deliver_tap+0x404/0x850 [ 759.491480][T18201] ? netlink_deliver_tap+0x2e/0x1b0 [ 759.491503][T18201] netlink_deliver_tap+0x19c/0x1b0 [ 759.491527][T18201] netlink_unicast+0x7fa/0x9e0 [ 759.491559][T18201] ? __pfx_netlink_unicast+0x10/0x10 [ 759.491579][T18201] ? __alloc_skb+0x198/0x3a0 [ 759.491601][T18201] ? netlink_sendmsg+0x642/0xb30 [ 759.491624][T18201] ? skb_put+0x11b/0x210 [ 759.491647][T18201] netlink_sendmsg+0x805/0xb30 [ 759.491682][T18201] ? __pfx_netlink_sendmsg+0x10/0x10 [ 759.491709][T18201] ? __import_iovec+0x5d4/0x7f0 [ 759.491731][T18201] ? aa_sock_msg_perm+0xf1/0x1b0 [ 759.491757][T18201] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 759.491776][T18201] ? __pfx_netlink_sendmsg+0x10/0x10 [ 759.491806][T18201] __sock_sendmsg+0x21c/0x270 [ 759.491838][T18201] ____sys_sendmsg+0x505/0x820 [ 759.491868][T18201] ? __pfx_____sys_sendmsg+0x10/0x10 [ 759.491897][T18201] ? kstrtouint+0x6e/0xe0 [ 759.491934][T18201] ___sys_sendmsg+0x21f/0x2a0 [ 759.491960][T18201] ? __pfx____sys_sendmsg+0x10/0x10 [ 759.491982][T18201] ? get_pid_task+0x20/0x1f0 [ 759.492008][T18201] ? get_pid_task+0x20/0x1f0 [ 759.492029][T18201] ? get_pid_task+0x20/0x1f0 [ 759.492077][T18201] ? __fget_files+0x2a/0x420 [ 759.492096][T18201] ? __fget_files+0x3a0/0x420 [ 759.492128][T18201] __sys_sendmsg+0x164/0x220 [ 759.492155][T18201] ? __pfx___sys_sendmsg+0x10/0x10 [ 759.492189][T18201] ? __pfx_ksys_write+0x10/0x10 [ 759.492221][T18201] __do_fast_syscall_32+0x1dc/0x570 [ 759.492245][T18201] ? lockdep_hardirqs_on+0x7b/0x110 [ 759.492264][T18201] ? do_fast_syscall_32+0x34/0x80 [ 759.492284][T18201] ? irqentry_exit+0x10f/0x670 [ 759.492378][T18201] do_fast_syscall_32+0x34/0x80 [ 759.492401][T18201] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 759.492426][T18201] RIP: 0023:0xf7f84539 [ 759.492445][T18201] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 759.492463][T18201] RSP: 002b:00000000f547655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 759.492486][T18201] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 759.492501][T18201] RDX: 0000000004000800 RSI: 0000000000000000 RDI: 0000000000000000 [ 759.492515][T18201] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 759.492527][T18201] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 759.492539][T18201] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 759.492570][T18201] [ 759.853262][T18199] netlink: 'syz.3.4257': attribute type 8 has an invalid length. [ 759.881852][T18199] netlink: 7 bytes leftover after parsing attributes in process `syz.3.4257'. [ 759.902601][T18199] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4257'. [ 760.294225][T18216] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4259'. [ 760.313337][T18216] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4259'. [ 760.413946][ T890] usb 3-1: new full-speed USB device number 74 using dummy_hcd [ 760.901974][ T890] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 761.020970][ T890] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 761.060991][ T890] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 761.090977][ T890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.350158][ T890] usb 3-1: usb_control_msg returned -32 [ 761.350219][ T890] usbtmc 3-1:16.0: can't read capabilities [ 761.825494][T18228] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4265'. [ 761.925435][T18225] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4265'. [ 762.461663][ T5899] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 762.672332][T18248] netlink: 'syz.1.4272': attribute type 8 has an invalid length. [ 762.688887][T18248] netlink: 7 bytes leftover after parsing attributes in process `syz.1.4272'. [ 762.698418][T18248] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4272'. [ 762.890990][ T5914] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 763.040982][ T5914] usb 5-1: device descriptor read/64, error -71 [ 763.282971][ T5914] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 763.421308][ T5914] usb 5-1: device descriptor read/64, error -71 [ 763.541723][ T5914] usb usb5-port1: attempt power cycle [ 763.746215][ T9] usb 3-1: USB disconnect, device number 74 [ 763.880939][ T5914] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 763.901665][ T5914] usb 5-1: device descriptor read/8, error -71 [ 763.988580][T18270] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4279'. [ 764.058825][T18272] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 764.090370][T18273] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4279'. [ 764.140991][ T5914] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 764.183342][ T5914] usb 5-1: device descriptor read/8, error -71 [ 764.325320][ T5914] usb usb5-port1: unable to enumerate USB device [ 765.070311][T18283] rtc_cmos 00:00: Alarms can be up to one day in the future [ 765.423420][T18290] tipc: Invalid UDP bearer configuration [ 765.423460][T18290] tipc: Enabling of bearer rejected, failed to enable media [ 766.010669][T18304] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4288'. [ 766.236688][T18309] FAULT_INJECTION: forcing a failure. [ 766.236688][T18309] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 766.264227][T18309] CPU: 1 UID: 0 PID: 18309 Comm: syz.4.4291 Tainted: G L syzkaller #0 PREEMPT(full) [ 766.264262][T18309] Tainted: [L]=SOFTLOCKUP [ 766.264269][T18309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 766.264290][T18309] Call Trace: [ 766.264307][T18309] [ 766.264317][T18309] dump_stack_lvl+0xe8/0x150 [ 766.264347][T18309] should_fail_ex+0x414/0x560 [ 766.264387][T18309] _copy_from_iter+0x1cd/0x1630 [ 766.264430][T18309] ? __pfx__copy_from_iter+0x10/0x10 [ 766.264459][T18309] ? __build_skb_around+0x22d/0x3c0 [ 766.264483][T18309] ? __alloc_skb+0x198/0x3a0 [ 766.264504][T18309] ? netlink_sendmsg+0x642/0xb30 [ 766.264529][T18309] ? skb_put+0x11b/0x210 [ 766.264554][T18309] netlink_sendmsg+0x6b2/0xb30 [ 766.264589][T18309] ? __pfx_netlink_sendmsg+0x10/0x10 [ 766.264619][T18309] ? __import_iovec+0x5d4/0x7f0 [ 766.264645][T18309] ? aa_sock_msg_perm+0xf1/0x1b0 [ 766.264672][T18309] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 766.264692][T18309] ? __pfx_netlink_sendmsg+0x10/0x10 [ 766.264719][T18309] __sock_sendmsg+0x21c/0x270 [ 766.264747][T18309] ____sys_sendmsg+0x505/0x820 [ 766.264775][T18309] ? __pfx_____sys_sendmsg+0x10/0x10 [ 766.264812][T18309] ? kstrtouint+0x6e/0xe0 [ 766.264851][T18309] ___sys_sendmsg+0x21f/0x2a0 [ 766.264875][T18309] ? __pfx____sys_sendmsg+0x10/0x10 [ 766.264899][T18309] ? get_pid_task+0x20/0x1f0 [ 766.264925][T18309] ? get_pid_task+0x20/0x1f0 [ 766.264947][T18309] ? get_pid_task+0x20/0x1f0 [ 766.265005][T18309] ? __fget_files+0x2a/0x420 [ 766.265029][T18309] ? __fget_files+0x3a0/0x420 [ 766.265062][T18309] __sys_sendmsg+0x164/0x220 [ 766.265090][T18309] ? __pfx___sys_sendmsg+0x10/0x10 [ 766.265123][T18309] ? __pfx_ksys_write+0x10/0x10 [ 766.265144][T18309] ? rcu_is_watching+0x15/0xb0 [ 766.265179][T18309] __do_fast_syscall_32+0x1dc/0x570 [ 766.265203][T18309] ? lockdep_hardirqs_on+0x7b/0x110 [ 766.265220][T18309] ? do_fast_syscall_32+0x34/0x80 [ 766.265239][T18309] ? irqentry_exit+0x10f/0x670 [ 766.265263][T18309] do_fast_syscall_32+0x34/0x80 [ 766.265285][T18309] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 766.265316][T18309] RIP: 0023:0xf70fd539 [ 766.265335][T18309] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 766.265353][T18309] RSP: 002b:00000000f54ed55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 766.265376][T18309] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 766.265391][T18309] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 766.265404][T18309] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 766.265416][T18309] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 766.265429][T18309] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 766.265456][T18309] [ 766.851014][ T5926] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 767.093563][ T5926] usb 2-1: Using ep0 maxpacket: 8 [ 767.128826][ T5926] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 767.140585][ T5926] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 767.154977][ T5926] usb 2-1: config 0 has no interface number 0 [ 767.168733][ T5926] usb 2-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 767.185660][ T5926] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 767.202365][ T5926] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 767.220508][ T5926] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 767.361737][ T5926] usb 2-1: config 0 interface 52 has no altsetting 0 [ 767.370121][ T5926] usb 2-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 767.382559][ T5926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.717504][ T5926] usb 2-1: config 0 descriptor?? [ 768.022879][ T5926] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.52/input/input66 [ 768.245903][T18311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 768.489995][T18311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 768.523530][T18311] tipc: Started in network mode [ 768.528636][T18311] tipc: Node identity 46e3c593026e, cluster identity 4711 [ 768.560068][T18311] tipc: Enabled bearer , priority 0 [ 768.876652][T18310] tipc: Disabling bearer [ 768.955235][T18189] usb 2-1: USB disconnect, device number 91 [ 770.322659][T18357] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4304'. [ 770.921207][ T890] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 770.968880][T18365] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 771.284394][ T890] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 771.293734][ T890] usb 3-1: config 1 has an invalid descriptor of length 54, skipping remainder of the config [ 771.320545][ T890] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 771.340443][ T890] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 771.382119][ T890] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 771.394707][ T890] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 771.409497][ T890] usb 3-1: Product: syz [ 771.430668][ T890] usb 3-1: Manufacturer: syz [ 771.449519][ T890] cdc_wdm 3-1:1.0: skipping garbage [ 771.462344][ T890] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 771.661369][ T890] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 771.782048][T18373] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4310'. [ 771.840487][ T890] usb 4-1: Using ep0 maxpacket: 8 [ 771.847637][T18375] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4310'. [ 771.851002][ T5928] usb 2-1: new full-speed USB device number 92 using dummy_hcd [ 771.883665][ T890] usb 4-1: unable to get BOS descriptor or descriptor too short [ 771.923825][ T890] usb 4-1: config 5 has an invalid interface number: 107 but max is 0 [ 771.952948][ T890] usb 4-1: config 5 has no interface number 0 [ 771.968582][ T890] usb 4-1: config 5 interface 107 has no altsetting 0 [ 772.052267][ T890] usb 4-1: New USB device found, idVendor=17a1, idProduct=0128, bcdDevice=dc.ca [ 772.062491][ T890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.062686][ T5928] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 772.215381][ T890] usb 4-1: Product: syz [ 772.219633][ T890] usb 4-1: Manufacturer: syz [ 772.224906][ T890] usb 4-1: SerialNumber: syz [ 772.230643][ T5928] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 772.244224][T18378] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 772.250957][T18378] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 772.261748][ T5928] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 772.273729][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.282114][T18378] vhci_hcd vhci_hcd.0: Device attached [ 772.319654][T18384] FAULT_INJECTION: forcing a failure. [ 772.319654][T18384] name failslab, interval 1, probability 0, space 0, times 0 [ 772.342307][T18384] CPU: 1 UID: 0 PID: 18384 Comm: syz.4.4312 Tainted: G L syzkaller #0 PREEMPT(full) [ 772.342340][T18384] Tainted: [L]=SOFTLOCKUP [ 772.342348][T18384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 772.342361][T18384] Call Trace: [ 772.342370][T18384] [ 772.342380][T18384] dump_stack_lvl+0xe8/0x150 [ 772.342410][T18384] should_fail_ex+0x414/0x560 [ 772.342447][T18384] should_failslab+0xa8/0x100 [ 772.342474][T18384] __kmalloc_noprof+0xdf/0x800 [ 772.342495][T18384] ? sock_kmalloc+0xd6/0x160 [ 772.342526][T18384] sock_kmalloc+0xd6/0x160 [ 772.342552][T18384] skcipher_recvmsg+0x571/0x11d0 [ 772.342598][T18384] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 772.342626][T18384] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 772.342645][T18384] ? security_socket_recvmsg+0x7e/0x2e0 [ 772.342673][T18384] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 772.342696][T18384] sock_recvmsg+0x22c/0x270 [ 772.342730][T18384] ____sys_recvmsg+0x1c9/0x460 [ 772.342766][T18384] ? __pfx_____sys_recvmsg+0x10/0x10 [ 772.342787][T18384] ? get_compat_msghdr+0x37e/0x4a0 [ 772.342825][T18384] ? __lock_acquire+0x6b6/0x2cf0 [ 772.342854][T18384] ___sys_recvmsg+0x1b5/0x510 [ 772.342877][T18384] ? get_pid_task+0x20/0x1f0 [ 772.342900][T18384] ? get_pid_task+0x20/0x1f0 [ 772.342939][T18384] ? __pfx____sys_recvmsg+0x10/0x10 [ 772.342969][T18384] ? __fget_files+0x2a/0x420 [ 772.343012][T18384] ? __fget_files+0x3a0/0x420 [ 772.343048][T18384] __sys_recvmsg+0x161/0x220 [ 772.343074][T18384] ? __pfx___sys_recvmsg+0x10/0x10 [ 772.343108][T18384] ? __pfx_ksys_write+0x10/0x10 [ 772.343139][T18384] __do_fast_syscall_32+0x1dc/0x570 [ 772.343162][T18384] ? lockdep_hardirqs_on+0x7b/0x110 [ 772.343180][T18384] ? do_fast_syscall_32+0x34/0x80 [ 772.343201][T18384] ? irqentry_exit+0x10f/0x670 [ 772.343225][T18384] do_fast_syscall_32+0x34/0x80 [ 772.343248][T18384] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 772.343271][T18384] RIP: 0023:0xf70fd539 [ 772.343290][T18384] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 772.343307][T18384] RSP: 002b:00000000f54ed55c EFLAGS: 00000206 ORIG_RAX: 0000000000000174 [ 772.343330][T18384] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800005c0 [ 772.343345][T18384] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 772.343357][T18384] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 772.343369][T18384] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 772.343381][T18384] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 772.343411][T18384] [ 772.716282][T18387] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4311'. [ 772.764394][T18387] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4311'. [ 773.012426][T18189] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 773.045731][ T890] gspca_main: t613-2.14.0 probing 17a1:0128 [ 773.073864][ T890] gspca_t613: unknown sensor 0000 [ 773.079817][ T890] t613 4-1:5.107: probe with driver t613 failed with error -22 [ 773.090636][ T890] usb 4-1: USB disconnect, device number 81 [ 773.096664][T18189] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 773.234903][ T5928] usb 2-1: usb_control_msg returned -32 [ 773.240699][ T5928] usbtmc 2-1:16.0: can't read capabilities [ 773.909832][T18379] vhci_hcd: connection reset by peer [ 773.916145][T13542] vhci_hcd vhci_hcd.2: stop threads [ 773.923369][T13542] vhci_hcd vhci_hcd.2: release socket [ 773.929247][T13542] vhci_hcd vhci_hcd.2: disconnect device [ 774.013019][ T890] usb 3-1: USB disconnect, device number 75 [ 774.299188][T18404] vlan0: entered promiscuous mode [ 774.304490][T18404] bridge0: entered promiscuous mode [ 774.309859][T18404] vlan0: entered allmulticast mode [ 774.315239][T18404] bridge0: entered allmulticast mode [ 774.353987][T18405] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4317'. [ 774.458668][T18407] FAULT_INJECTION: forcing a failure. [ 774.458668][T18407] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 774.472598][T18407] CPU: 1 UID: 0 PID: 18407 Comm: syz.0.4319 Tainted: G L syzkaller #0 PREEMPT(full) [ 774.472622][T18407] Tainted: [L]=SOFTLOCKUP [ 774.472627][T18407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 774.472635][T18407] Call Trace: [ 774.472641][T18407] [ 774.472646][T18407] dump_stack_lvl+0xe8/0x150 [ 774.472667][T18407] should_fail_ex+0x414/0x560 [ 774.472689][T18407] _copy_from_iter+0x1cd/0x1630 [ 774.472708][T18407] ? __pfx__copy_from_iter+0x10/0x10 [ 774.472721][T18407] ? __build_skb_around+0x22d/0x3c0 [ 774.472736][T18407] ? __alloc_skb+0x198/0x3a0 [ 774.472748][T18407] ? netlink_sendmsg+0x642/0xb30 [ 774.472766][T18407] ? skb_put+0x11b/0x210 [ 774.472790][T18407] netlink_sendmsg+0x6b2/0xb30 [ 774.472823][T18407] ? __pfx_netlink_sendmsg+0x10/0x10 [ 774.472851][T18407] ? __import_iovec+0x5d4/0x7f0 [ 774.472872][T18407] ? aa_sock_msg_perm+0xf1/0x1b0 [ 774.472900][T18407] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 774.472914][T18407] ? __pfx_netlink_sendmsg+0x10/0x10 [ 774.472930][T18407] __sock_sendmsg+0x21c/0x270 [ 774.472949][T18407] ____sys_sendmsg+0x505/0x820 [ 774.472966][T18407] ? __pfx_____sys_sendmsg+0x10/0x10 [ 774.472984][T18407] ? kstrtouint+0x6e/0xe0 [ 774.473005][T18407] ___sys_sendmsg+0x21f/0x2a0 [ 774.473020][T18407] ? __pfx____sys_sendmsg+0x10/0x10 [ 774.473034][T18407] ? get_pid_task+0x20/0x1f0 [ 774.473050][T18407] ? get_pid_task+0x20/0x1f0 [ 774.473063][T18407] ? get_pid_task+0x20/0x1f0 [ 774.473093][T18407] ? __fget_files+0x2a/0x420 [ 774.473108][T18407] ? __fget_files+0x3a0/0x420 [ 774.473129][T18407] __sys_sendmsg+0x164/0x220 [ 774.473144][T18407] ? __pfx___sys_sendmsg+0x10/0x10 [ 774.473171][T18407] ? __pfx_ksys_write+0x10/0x10 [ 774.473189][T18407] __do_fast_syscall_32+0x1dc/0x570 [ 774.473204][T18407] ? lockdep_hardirqs_on+0x7b/0x110 [ 774.473216][T18407] ? do_fast_syscall_32+0x34/0x80 [ 774.473228][T18407] ? irqentry_exit+0x10f/0x670 [ 774.473242][T18407] do_fast_syscall_32+0x34/0x80 [ 774.473255][T18407] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 774.473270][T18407] RIP: 0023:0xf705d539 [ 774.473282][T18407] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 774.473296][T18407] RSP: 002b:00000000f544d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 774.473311][T18407] RAX: ffffffffffffffda RBX: 000000000000000f RCX: 00000000800000c0 [ 774.473320][T18407] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 774.473328][T18407] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 774.473335][T18407] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 774.473343][T18407] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 774.473360][T18407] [ 775.132082][T18419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4322'. [ 775.201821][T18421] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4322'. [ 775.307980][T18423] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4323'. [ 775.323770][T18423] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4323'. [ 776.618226][ T5907] usb 2-1: USB disconnect, device number 92 [ 776.680400][T18434] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4326'. [ 776.969481][T18443] __nla_validate_parse: 1 callbacks suppressed [ 776.969653][T18443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4328'. [ 777.005409][T18443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4328'. [ 778.233175][T18458] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4332'. [ 778.318958][T18189] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 779.013599][T18474] netlink: 7 bytes leftover after parsing attributes in process `syz.1.4339'. [ 779.023559][T18474] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4339'. [ 779.040937][ T5926] usb 4-1: new full-speed USB device number 82 using dummy_hcd [ 779.253312][ T5926] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 779.281471][ T5926] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 779.295670][ T5926] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 779.314538][ T5926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.438624][T18478] FAULT_INJECTION: forcing a failure. [ 779.438624][T18478] name failslab, interval 1, probability 0, space 0, times 0 [ 779.461272][T18478] CPU: 0 UID: 0 PID: 18478 Comm: syz.1.4341 Tainted: G L syzkaller #0 PREEMPT(full) [ 779.461319][T18478] Tainted: [L]=SOFTLOCKUP [ 779.461328][T18478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 779.461340][T18478] Call Trace: [ 779.461349][T18478] [ 779.461359][T18478] dump_stack_lvl+0xe8/0x150 [ 779.461393][T18478] should_fail_ex+0x414/0x560 [ 779.461431][T18478] should_failslab+0xa8/0x100 [ 779.461458][T18478] kmem_cache_alloc_noprof+0x88/0x710 [ 779.461489][T18478] ? dst_alloc+0x105/0x170 [ 779.461514][T18478] ? fib_lookup+0x76/0x440 [ 779.461539][T18478] dst_alloc+0x105/0x170 [ 779.461572][T18478] ip_route_output_key_hash_rcu+0x1560/0x23e0 [ 779.461606][T18478] ? ip_route_output_key_hash+0xc1/0x280 [ 779.461629][T18478] ip_route_output_key_hash+0x174/0x280 [ 779.461692][T18478] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 779.461711][T18478] ? stack_trace_save+0x9c/0xe0 [ 779.461745][T18478] ? stack_depot_save_flags+0x33/0x810 [ 779.461781][T18478] tcp_v4_connect+0x710/0x1a90 [ 779.461806][T18478] ? __kmalloc_cache_noprof+0x3e2/0x700 [ 779.461828][T18478] ? tcp_set_state+0x280/0x670 [ 779.461868][T18478] ? __pfx_tcp_v4_connect+0x10/0x10 [ 779.461905][T18478] __inet_stream_connect+0x2ae/0xe70 [ 779.461944][T18478] ? __pfx___inet_stream_connect+0x10/0x10 [ 779.461972][T18478] ? __kasan_kmalloc+0x93/0xb0 [ 779.462007][T18478] ? __kmalloc_cache_noprof+0x3e2/0x700 [ 779.462025][T18478] ? tcp_sendmsg_fastopen+0x1de/0x5e0 [ 779.462054][T18478] tcp_sendmsg_fastopen+0x3a7/0x5e0 [ 779.462085][T18478] tcp_sendmsg_locked+0x4c9d/0x5520 [ 779.462132][T18478] ? __lock_acquire+0x6b6/0x2cf0 [ 779.462159][T18478] ? __lock_acquire+0x6b6/0x2cf0 [ 779.462204][T18478] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 779.462242][T18478] ? __local_bh_enable_ip+0xd0/0x130 [ 779.462270][T18478] tcp_sendmsg+0x2f/0x50 [ 779.462296][T18478] __sock_sendmsg+0x19c/0x270 [ 779.462329][T18478] __sys_sendto+0x3bd/0x520 [ 779.462354][T18478] ? __pfx___sys_sendto+0x10/0x10 [ 779.462372][T18478] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 779.462410][T18478] ? __fget_files+0x3a0/0x420 [ 779.462448][T18478] ? ksys_write+0x22a/0x250 [ 779.462471][T18478] ? __pfx_ksys_write+0x10/0x10 [ 779.462495][T18478] __ia32_sys_sendto+0xdd/0x100 [ 779.462521][T18478] __do_fast_syscall_32+0x1dc/0x570 [ 779.462544][T18478] ? lockdep_hardirqs_on+0x7b/0x110 [ 779.462562][T18478] ? do_fast_syscall_32+0x34/0x80 [ 779.462582][T18478] ? irqentry_exit+0x10f/0x670 [ 779.462604][T18478] do_fast_syscall_32+0x34/0x80 [ 779.462626][T18478] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 779.462649][T18478] RIP: 0023:0xf7f84539 [ 779.462667][T18478] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 779.462684][T18478] RSP: 002b:00000000f547655c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 779.462708][T18478] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 779.462722][T18478] RDX: 0000000000000000 RSI: 00000000200007fd RDI: 0000000080e68000 [ 779.462736][T18478] RBP: 0000000000000010 R08: 0000000000000000 R09: 0000000000000000 [ 779.462747][T18478] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 779.462759][T18478] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 779.462790][T18478] [ 779.876976][ T5926] usb 4-1: usb_control_msg returned -32 [ 779.884003][ T5926] usbtmc 4-1:16.0: can't read capabilities [ 780.056644][T18486] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20001 [ 780.201131][ T5926] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 780.414116][ T5926] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 780.431940][ T5926] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 780.452440][ T5926] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 780.462419][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 780.474287][ T5926] usb 3-1: SerialNumber: syz [ 780.670640][T18501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4348'. [ 780.699545][ T5926] usb 3-1: 0:2 : does not exist [ 780.711022][ T5926] usb 3-1: unit 255 not found! [ 780.725107][ T5926] usb 3-1: 5:0: cannot get min/max values for control 15 (id 5) [ 780.765297][ T5926] usb 3-1: 5:0: cannot get min/max values for control 16 (id 5) [ 780.797330][ T5926] usb 3-1: USB disconnect, device number 76 [ 780.836433][T13290] udevd[13290]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 780.873354][T18189] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 781.031730][T18189] usb 5-1: Using ep0 maxpacket: 16 [ 781.053413][T18189] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 781.079803][T18189] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.104738][T18189] usb 5-1: Product: syz [ 781.113513][T18189] usb 5-1: Manufacturer: syz [ 781.121156][T18189] usb 5-1: SerialNumber: syz [ 781.143166][T18515] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4350'. [ 781.678545][T18189] r8152-cfgselector 5-1: Unknown version 0x0000 [ 781.685185][T18189] r8152-cfgselector 5-1: config 0 descriptor?? [ 782.003629][T18524] netlink: 7 bytes leftover after parsing attributes in process `syz.2.4352'. [ 782.012941][T18524] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4352'. [ 782.390108][T11343] usb 4-1: USB disconnect, device number 82 [ 783.217908][T18542] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4354'. [ 784.017154][T11343] r8152-cfgselector 5-1: USB disconnect, device number 91 [ 784.453250][T18561] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4359'. [ 784.839044][T18575] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4363'. [ 784.981015][T11343] usb 2-1: new full-speed USB device number 93 using dummy_hcd [ 785.142849][T11343] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 785.164903][T11343] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 785.190970][T18577] netlink: 7 bytes leftover after parsing attributes in process `syz.0.4365'. [ 785.200506][T18577] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4365'. [ 785.744511][T11343] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 785.771383][T11343] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.021696][T11343] usb 2-1: usb_control_msg returned -32 [ 786.064948][T11343] usbtmc 2-1:16.0: can't read capabilities [ 786.457580][T18587] FAULT_INJECTION: forcing a failure. [ 786.457580][T18587] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 786.482371][T18587] CPU: 0 UID: 0 PID: 18587 Comm: syz.0.4368 Tainted: G L syzkaller #0 PREEMPT(full) [ 786.482405][T18587] Tainted: [L]=SOFTLOCKUP [ 786.482413][T18587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 786.482425][T18587] Call Trace: [ 786.482434][T18587] [ 786.482442][T18587] dump_stack_lvl+0xe8/0x150 [ 786.482473][T18587] should_fail_ex+0x414/0x560 [ 786.482508][T18587] _copy_from_user+0x2d/0xb0 [ 786.482532][T18587] dev_ethtool+0xd0/0x19c0 [ 786.482563][T18587] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 786.482579][T18587] ? do_vfs_ioctl+0xbe8/0x1430 [ 786.482593][T18587] ? __pfx_dev_ethtool+0x10/0x10 [ 786.482609][T18587] ? dev_load+0x21/0x1f0 [ 786.482626][T18587] ? dev_load+0x21/0x1f0 [ 786.482639][T18587] ? dev_load+0x21/0x1f0 [ 786.482652][T18587] dev_ioctl+0x392/0x1150 [ 786.482667][T18587] compat_sock_ioctl+0xc3b/0xc80 [ 786.482696][T18587] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 786.482714][T18587] ? __fget_files+0x3a0/0x420 [ 786.482728][T18587] ? __fget_files+0x2a/0x420 [ 786.482745][T18587] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 786.482761][T18587] __ia32_compat_sys_ioctl+0x543/0x840 [ 786.482775][T18587] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 786.482787][T18587] ? __fget_files+0x3a0/0x420 [ 786.482805][T18587] ? fput+0xa0/0xd0 [ 786.482821][T18587] ? ksys_write+0x22a/0x250 [ 786.482834][T18587] ? __pfx_ksys_write+0x10/0x10 [ 786.482851][T18587] __do_fast_syscall_32+0x1dc/0x570 [ 786.482865][T18587] ? lockdep_hardirqs_on+0x7b/0x110 [ 786.482876][T18587] ? do_fast_syscall_32+0x34/0x80 [ 786.482889][T18587] ? irqentry_exit+0x10f/0x670 [ 786.482903][T18587] do_fast_syscall_32+0x34/0x80 [ 786.482916][T18587] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 786.482932][T18587] RIP: 0023:0xf705d539 [ 786.482944][T18587] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 786.482955][T18587] RSP: 002b:00000000f544d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 786.482970][T18587] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008946 [ 786.482979][T18587] RDX: 0000000080000140 RSI: 0000000000000000 RDI: 0000000000000000 [ 786.482987][T18587] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 786.482994][T18587] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 786.483002][T18587] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 786.483019][T18587] [ 787.205958][T18614] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4377'. [ 787.331747][T18619] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4378'. [ 788.142985][T18636] binder: 18633:18636 ioctl 40046210 0 returned -14 [ 788.820799][T18645] syz_tun: entered allmulticast mode [ 788.832307][T18645] FAULT_INJECTION: forcing a failure. [ 788.832307][T18645] name failslab, interval 1, probability 0, space 0, times 0 [ 788.845093][T18645] CPU: 0 UID: 0 PID: 18645 Comm: syz.0.4385 Tainted: G L syzkaller #0 PREEMPT(full) [ 788.845126][T18645] Tainted: [L]=SOFTLOCKUP [ 788.845133][T18645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 788.845144][T18645] Call Trace: [ 788.845153][T18645] [ 788.845162][T18645] dump_stack_lvl+0xe8/0x150 [ 788.845194][T18645] should_fail_ex+0x414/0x560 [ 788.845228][T18645] should_failslab+0xa8/0x100 [ 788.845254][T18645] kmem_cache_alloc_noprof+0x88/0x710 [ 788.845282][T18645] ? unwind_next_frame+0xa5/0x23d0 [ 788.845306][T18645] ? skb_clone+0x212/0x3a0 [ 788.845334][T18645] skb_clone+0x212/0x3a0 [ 788.845355][T18645] ? ip_rcv_core+0x126/0xd00 [ 788.845382][T18645] ip_rcv_core+0x148/0xd00 [ 788.845422][T18645] ip_rcv+0x4d/0x90 [ 788.845449][T18645] __netif_receive_skb_core+0x2760/0x2f90 [ 788.845483][T18645] ? __pfx___skb_flow_dissect+0x10/0x10 [ 788.845509][T18645] ? kernel_text_address+0xa5/0xe0 [ 788.845539][T18645] ? __kernel_text_address+0xd/0x40 [ 788.845564][T18645] ? unwind_get_return_address+0x4d/0x90 [ 788.845585][T18645] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 788.845614][T18645] ? arch_stack_walk+0xfc/0x150 [ 788.845644][T18645] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 788.845673][T18645] ? stack_trace_save+0x9c/0xe0 [ 788.845700][T18645] ? __pfx_stack_trace_save+0x10/0x10 [ 788.845744][T18645] ? netif_receive_skb+0x105/0x750 [ 788.845771][T18645] ? lock_acquire+0x107/0x340 [ 788.845791][T18645] ? netif_receive_skb+0x105/0x750 [ 788.845824][T18645] __netif_receive_skb+0x72/0x380 [ 788.845860][T18645] ? netif_receive_skb+0x105/0x750 [ 788.845887][T18645] netif_receive_skb+0x1bb/0x750 [ 788.845916][T18645] ? __lock_acquire+0x6b6/0x2cf0 [ 788.845945][T18645] ? __pfx_netif_receive_skb+0x10/0x10 [ 788.845980][T18645] ? tun_rx_batched+0x160/0x730 [ 788.846007][T18645] tun_rx_batched+0x1b9/0x730 [ 788.846039][T18645] ? __pfx_tun_rx_batched+0x10/0x10 [ 788.846062][T18645] ? tun_get_user+0x266d/0x3dc0 [ 788.846088][T18645] ? tun_get_user+0x266d/0x3dc0 [ 788.846114][T18645] ? tun_get_user+0x2331/0x3dc0 [ 788.846137][T18645] ? __local_bh_enable_ip+0xd0/0x130 [ 788.846160][T18645] ? tun_get_user+0x266d/0x3dc0 [ 788.846183][T18645] tun_get_user+0x2aa3/0x3dc0 [ 788.846211][T18645] ? tun_get_user+0x6fc/0x3dc0 [ 788.846247][T18645] ? aa_file_perm+0x44c/0x1530 [ 788.846276][T18645] ? __pfx_tun_get_user+0x10/0x10 [ 788.846302][T18645] ? __lock_acquire+0x6b6/0x2cf0 [ 788.846325][T18645] ? kstrtoull+0x12f/0x1d0 [ 788.846364][T18645] ? ref_tracker_alloc+0x318/0x460 [ 788.846381][T18645] ? get_pid_task+0x20/0x1f0 [ 788.846408][T18645] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 788.846431][T18645] ? tun_get+0x1c/0x2f0 [ 788.846455][T18645] ? tun_get+0x1c/0x2f0 [ 788.846486][T18645] ? tun_get+0x1c/0x2f0 [ 788.846509][T18645] ? tun_get+0x1c/0x2f0 [ 788.846537][T18645] tun_chr_write_iter+0x113/0x200 [ 788.846566][T18645] vfs_write+0x5c9/0xb30 [ 788.846593][T18645] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 788.846618][T18645] ? __pfx_vfs_write+0x10/0x10 [ 788.846650][T18645] ? __fget_files+0x2a/0x420 [ 788.846683][T18645] ksys_write+0x145/0x250 [ 788.846706][T18645] ? __pfx_ksys_write+0x10/0x10 [ 788.846739][T18645] __do_fast_syscall_32+0x1dc/0x570 [ 788.846761][T18645] ? lockdep_hardirqs_on+0x7b/0x110 [ 788.846780][T18645] ? do_fast_syscall_32+0x34/0x80 [ 788.846802][T18645] ? irqentry_exit+0x10f/0x670 [ 788.846827][T18645] do_fast_syscall_32+0x34/0x80 [ 788.846849][T18645] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 788.846873][T18645] RIP: 0023:0xf705d539 [ 788.846893][T18645] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 788.846911][T18645] RSP: 002b:00000000f544d520 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 788.846941][T18645] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000240 [ 788.846956][T18645] RDX: 000000000000002a RSI: 00000000f73f6ff4 RDI: 0000000000000000 [ 788.846970][T18645] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 788.846982][T18645] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 788.846994][T18645] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 788.847026][T18645] [ 789.421619][T18643] syz_tun: left allmulticast mode [ 789.498610][ T5899] usb 2-1: USB disconnect, device number 93 [ 790.045435][ T5899] usb 2-1: new full-speed USB device number 94 using dummy_hcd [ 790.064584][T18669] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4388'. [ 790.085625][T18669] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4388'. [ 790.146548][T18671] syz_tun: entered allmulticast mode [ 790.265732][ T5899] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 790.295342][ T5899] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 790.325506][T18670] syz_tun: left allmulticast mode [ 790.339481][ T5899] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 790.401993][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.657488][ T5899] usb 2-1: usb_control_msg returned -32 [ 790.694932][ T5899] usbtmc 2-1:16.0: can't read capabilities [ 791.033814][T18683] netlink: 7 bytes leftover after parsing attributes in process `syz.2.4395'. [ 791.043761][T18683] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4395'. [ 792.140969][ T5899] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 792.291108][ T5899] usb 4-1: Using ep0 maxpacket: 8 [ 792.299352][ T5899] usb 4-1: config 0 has an invalid interface number: 52 but max is 0 [ 792.308212][ T5899] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 792.319215][ T5899] usb 4-1: config 0 has no interface number 0 [ 792.330039][ T5899] usb 4-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 792.352646][ T5899] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 792.364885][ T5899] usb 4-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 792.379119][ T5899] usb 4-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 792.394345][ T5899] usb 4-1: config 0 interface 52 has no altsetting 0 [ 792.404379][ T5899] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 792.413932][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.435256][ T5899] usb 4-1: config 0 descriptor?? [ 792.653134][ T5899] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.52/input/input67 [ 792.942654][T18701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 792.963283][T18701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 792.981531][T18189] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 792.994424][T18701] tipc: Started in network mode [ 792.999670][T18701] tipc: Node identity 821ca5f623cc, cluster identity 4711 [ 793.017065][T18701] tipc: Enabled bearer , priority 0 [ 793.074612][ T5907] usb 2-1: USB disconnect, device number 94 [ 793.112599][ T5899] usb 4-1: USB disconnect, device number 83 [ 793.139017][T18713] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4406'. [ 793.148203][T18189] usb 3-1: Using ep0 maxpacket: 16 [ 793.160399][T18189] usb 3-1: config 3 has an invalid interface number: 144 but max is 0 [ 793.188095][T18189] usb 3-1: config 3 has no interface number 0 [ 793.205340][T18189] usb 3-1: New USB device found, idVendor=0421, idProduct=02d9, bcdDevice=5c.1b [ 793.227661][T18189] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.237777][T18189] usb 3-1: Product: syz [ 793.242716][T18189] usb 3-1: Manufacturer: syz [ 793.247480][T18189] usb 3-1: SerialNumber: syz [ 793.265218][T18189] usb 3-1: bad CDC descriptors [ 793.335303][T18717] netlink: 7 bytes leftover after parsing attributes in process `syz.1.4408'. [ 793.345894][T18717] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4408'. [ 793.453985][T18720] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4409'. [ 793.979823][T18729] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4411'. [ 794.481443][T18729] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4411'. [ 794.574296][ T5914] tipc: Node number set to 2714805750 [ 795.776814][T11343] usb 3-1: USB disconnect, device number 77 [ 796.233615][T18750] FAULT_INJECTION: forcing a failure. [ 796.233615][T18750] name failslab, interval 1, probability 0, space 0, times 0 [ 796.246328][T18750] CPU: 0 UID: 0 PID: 18750 Comm: syz.4.4416 Tainted: G L syzkaller #0 PREEMPT(full) [ 796.246350][T18750] Tainted: [L]=SOFTLOCKUP [ 796.246355][T18750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 796.246363][T18750] Call Trace: [ 796.246369][T18750] [ 796.246374][T18750] dump_stack_lvl+0xe8/0x150 [ 796.246395][T18750] should_fail_ex+0x414/0x560 [ 796.246417][T18750] should_failslab+0xa8/0x100 [ 796.246433][T18750] ? __pfx_ip6_dst_gc+0x10/0x10 [ 796.246451][T18750] kmem_cache_alloc_noprof+0x88/0x710 [ 796.246469][T18750] ? ip6_pol_route+0x161/0x11a0 [ 796.246481][T18750] ? dst_alloc+0x105/0x170 [ 796.246498][T18750] ? __pfx_ip6_dst_gc+0x10/0x10 [ 796.246517][T18750] dst_alloc+0x105/0x170 [ 796.246535][T18750] ip6_pol_route+0xa28/0x11a0 [ 796.246548][T18750] ? ip6_pol_route+0x161/0x11a0 [ 796.246571][T18750] ? __pfx_ip6_pol_route+0x10/0x10 [ 796.246584][T18750] ? __lock_acquire+0x6b6/0x2cf0 [ 796.246601][T18750] ? __lock_acquire+0x6b6/0x2cf0 [ 796.246614][T18750] fib6_rule_lookup+0x1fc/0x6f0 [ 796.246630][T18750] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 796.246643][T18750] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 796.246658][T18750] ? ip6_route_output_flags+0x2e/0x5d0 [ 796.246671][T18750] ? ip6_route_output_flags+0x2e/0x5d0 [ 796.246691][T18750] ip6_route_output_flags+0x364/0x5d0 [ 796.246704][T18750] ? ip6_route_output_flags+0x2e/0x5d0 [ 796.246718][T18750] ip6_dst_lookup_tail+0x1ae/0x1510 [ 796.246741][T18750] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 796.246757][T18750] ? txopt_get+0x7a/0x3f0 [ 796.246772][T18750] ? txopt_get+0x7a/0x3f0 [ 796.246788][T18750] ? __pfx__copy_from_iter+0x10/0x10 [ 796.246800][T18750] ? txopt_get+0x335/0x3f0 [ 796.246816][T18750] ? aa_label_sk_perm+0x4c4/0x610 [ 796.246836][T18750] ? __pfx_txopt_get+0x10/0x10 [ 796.246855][T18750] ip6_dst_lookup_flow+0x47/0xe0 [ 796.246872][T18750] rawv6_sendmsg+0xdbf/0x1830 [ 796.246889][T18750] ? tomoyo_check_inet_address+0x275/0x8c0 [ 796.246913][T18750] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 796.246943][T18750] ? __pfx_aa_sk_perm+0x10/0x10 [ 796.246959][T18750] ? sock_rps_record_flow+0x19/0x410 [ 796.246977][T18750] ? inet_sendmsg+0x2f4/0x370 [ 796.246991][T18750] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 796.247005][T18750] __sock_sendmsg+0x19c/0x270 [ 796.247025][T18750] ____sys_sendmsg+0x505/0x820 [ 796.247042][T18750] ? __pfx_____sys_sendmsg+0x10/0x10 [ 796.247060][T18750] ? kstrtouint+0x6e/0xe0 [ 796.247081][T18750] ___sys_sendmsg+0x21f/0x2a0 [ 796.247097][T18750] ? __pfx____sys_sendmsg+0x10/0x10 [ 796.247111][T18750] ? get_pid_task+0x20/0x1f0 [ 796.247126][T18750] ? get_pid_task+0x20/0x1f0 [ 796.247139][T18750] ? get_pid_task+0x20/0x1f0 [ 796.247169][T18750] ? __fget_files+0x2a/0x420 [ 796.247183][T18750] ? __fget_files+0x3a0/0x420 [ 796.247203][T18750] __sys_sendmsg+0x164/0x220 [ 796.247219][T18750] ? __pfx___sys_sendmsg+0x10/0x10 [ 796.247237][T18750] ? rcu_is_watching+0x15/0xb0 [ 796.247259][T18750] __do_fast_syscall_32+0x1dc/0x570 [ 796.247273][T18750] ? lockdep_hardirqs_on+0x7b/0x110 [ 796.247284][T18750] ? do_fast_syscall_32+0x34/0x80 [ 796.247297][T18750] ? irqentry_exit+0x10f/0x670 [ 796.247311][T18750] do_fast_syscall_32+0x34/0x80 [ 796.247324][T18750] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 796.247338][T18750] RIP: 0023:0xf70fd539 [ 796.247350][T18750] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 796.247361][T18750] RSP: 002b:00000000f54ed55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 796.247376][T18750] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000080 [ 796.247385][T18750] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000000 [ 796.247396][T18750] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 796.247404][T18750] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 796.247411][T18750] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 796.247429][T18750] [ 796.791158][T18753] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4415'. [ 796.865065][T18753] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4415'. [ 796.906161][T18757] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4419'. [ 796.930957][T11343] usb 4-1: new full-speed USB device number 84 using dummy_hcd [ 797.150876][T18757] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4419'. [ 797.353412][T11343] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 797.415610][T11343] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 797.916888][T11343] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 797.958312][T11343] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.278831][T11343] usb 4-1: usb_control_msg returned -32 [ 798.291045][T11343] usbtmc 4-1:16.0: can't read capabilities [ 798.348188][T18777] FAULT_INJECTION: forcing a failure. [ 798.348188][T18777] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 798.348268][T18777] CPU: 0 UID: 0 PID: 18777 Comm: syz.0.4426 Tainted: G L syzkaller #0 PREEMPT(full) [ 798.348297][T18777] Tainted: [L]=SOFTLOCKUP [ 798.348304][T18777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 798.348316][T18777] Call Trace: [ 798.348324][T18777] [ 798.348332][T18777] dump_stack_lvl+0xe8/0x150 [ 798.348363][T18777] should_fail_ex+0x414/0x560 [ 798.348399][T18777] _copy_from_user+0x2d/0xb0 [ 798.348424][T18777] snd_seq_oss_ioctl+0x43d/0x1090 [ 798.348456][T18777] ? __pfx_snd_seq_oss_ioctl+0x10/0x10 [ 798.348490][T18777] ? rcu_is_watching+0x15/0xb0 [ 798.348515][T18777] ? trace_contention_end+0x39/0x100 [ 798.348541][T18777] ? __mutex_lock+0x335/0x1350 [ 798.348566][T18777] ? get_pid_task+0x20/0x1f0 [ 798.348600][T18777] ? odev_ioctl_compat+0x84/0xf0 [ 798.348629][T18777] ? __pfx___mutex_lock+0x10/0x10 [ 798.348659][T18777] ? __fget_files+0x3a0/0x420 [ 798.348690][T18777] odev_ioctl_compat+0xb3/0xf0 [ 798.348715][T18777] __ia32_compat_sys_ioctl+0x543/0x840 [ 798.348739][T18777] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 798.348758][T18777] ? __fget_files+0x3a0/0x420 [ 798.348798][T18777] ? fput+0xa0/0xd0 [ 798.348823][T18777] ? ksys_write+0x22a/0x250 [ 798.348846][T18777] ? __pfx_ksys_write+0x10/0x10 [ 798.348875][T18777] __do_fast_syscall_32+0x1dc/0x570 [ 798.348895][T18777] ? lockdep_hardirqs_on+0x7b/0x110 [ 798.348911][T18777] ? do_fast_syscall_32+0x34/0x80 [ 798.348931][T18777] ? irqentry_exit+0x10f/0x670 [ 798.348955][T18777] do_fast_syscall_32+0x34/0x80 [ 798.348976][T18777] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 798.348998][T18777] RIP: 0023:0xf705d539 [ 798.349016][T18777] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 798.349031][T18777] RSP: 002b:00000000f544d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 798.349053][T18777] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040085112 [ 798.349068][T18777] RDX: 00000000800004c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 798.349079][T18777] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 798.349090][T18777] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 798.349102][T18777] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 798.349131][T18777] [ 799.160954][T18189] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 799.546863][T18189] usb 2-1: config 0 interface 0 altsetting 12 endpoint 0x87 has an invalid bInterval 102, changing to 10 [ 799.546904][T18189] usb 2-1: config 0 interface 0 altsetting 12 endpoint 0x87 has invalid maxpacket 24624, setting to 1024 [ 799.546934][T18189] usb 2-1: config 0 interface 0 has no altsetting 0 [ 799.604092][T18189] usb 2-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 799.827135][T18189] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.827167][T18189] usb 2-1: Product: syz [ 799.827184][T18189] usb 2-1: Manufacturer: syz [ 799.827200][T18189] usb 2-1: SerialNumber: syz [ 799.843163][T18189] usb 2-1: config 0 descriptor?? [ 799.860561][T18189] keyspan 2-1:0.0: Keyspan 2 port adapter converter detected [ 799.900780][T18189] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 7 [ 799.909681][T18189] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 799.909823][T18189] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 799.909944][T18189] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 799.912624][T18189] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 85 [ 799.912815][T18189] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 5 [ 799.930179][T18189] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 799.950467][T18189] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 83 [ 799.950709][T18189] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 3 [ 799.950895][T18189] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 4 [ 799.951593][T18189] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 86 [ 800.046819][T18189] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 6 [ 800.057909][T18778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 800.058240][T18778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 800.064363][T18189] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 800.083172][T18189] usb 2-1: USB disconnect, device number 95 [ 800.108602][T18189] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 800.110638][T18189] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 800.111367][T18189] keyspan 2-1:0.0: device disconnected [ 800.884710][T18808] __nla_validate_parse: 3 callbacks suppressed [ 800.884725][T18808] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4433'. [ 801.181065][T18189] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 801.273002][T18815] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4434'. [ 801.344931][T18189] usb 5-1: device descriptor read/64, error -71 [ 801.942972][T18189] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 802.422246][T18820] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4438'. [ 802.471182][ T890] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 802.481610][T18189] usb 5-1: device descriptor read/64, error -71 [ 802.506462][T18821] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4438'. [ 802.531276][ T5928] usb 4-1: USB disconnect, device number 84 [ 802.601574][T18189] usb usb5-port1: attempt power cycle [ 802.621475][ T890] usb 3-1: Using ep0 maxpacket: 32 [ 802.629190][ T890] usb 3-1: config 0 has an invalid interface number: 76 but max is 0 [ 802.638183][ T890] usb 3-1: config 0 has no interface number 0 [ 802.663244][ T890] usb 3-1: New USB device found, idVendor=2040, idProduct=d900, bcdDevice=a9.2c [ 802.689278][ T890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.697848][ T890] usb 3-1: Product: syz [ 802.704371][ T890] usb 3-1: Manufacturer: syz [ 802.709063][ T890] usb 3-1: SerialNumber: syz [ 802.720060][ T890] usb 3-1: config 0 descriptor?? [ 802.730153][ T890] dvb-usb: found a 'Hauppauge MAX S2 or WinTV NOVA HD USB2.0' in warm state. [ 803.036752][ T890] dw2102: su3000_power_ctrl: 1, initialized 0 [ 803.043154][ T890] dvb-usb: bulk message failed: -22 (2/0) [ 803.054967][T18818] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] SMP KASAN PTI [ 803.055156][ T890] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 803.067089][T18818] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 803.067121][T18818] CPU: 1 UID: 0 PID: 18818 Comm: syz.2.4437 Tainted: G L syzkaller #0 PREEMPT(full) [ 803.067150][T18818] Tainted: [L]=SOFTLOCKUP [ 803.067159][T18818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 803.067171][T18818] RIP: 0010:su3000_i2c_transfer+0x1ad/0xfd0 [ 803.077200][ T890] dvbdev: DVB: registering new adapter (Hauppauge MAX S2 or WinTV NOVA HD USB2.0) [ 803.084984][T18818] Code: 4c 89 f8 48 c1 e8 03 49 bc 00 00 00 00 00 fc ff df 42 80 3c 20 00 74 08 4c 89 ff e8 5d 1c 6c fa 49 8b 1f 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 f3 08 00 00 0f b6 1b 48 8b 44 24 38 42 [ 803.085010][T18818] RSP: 0018:ffffc90004dff9d0 EFLAGS: 00010202 [ 803.085030][T18818] RAX: 0000000000000002 RBX: 0000000000000010 RCX: 0000000000000003 [ 803.085044][T18818] RDX: ffffffff87bafb55 RSI: ffffffff8eec1950 RDI: 0000000000001900 [ 803.096324][ T890] usb 3-1: media controller created [ 803.100926][T18818] RBP: 0000000000000000 R08: ffff88802d3d9e80 R09: 0000000000000002 [ 803.100948][T18818] R10: 0000000000001a00 R11: 0000000000000002 R12: dffffc0000000000 [ 803.100961][T18818] R13: 1ffff11003d6f450 R14: 0000000000000002 R15: ffff88801eb7a288 [ 803.100978][T18818] FS: 0000000000000000(0000) GS:ffff888125f1f000(0063) knlGS:00000000f5416b40 [ 803.206926][T18818] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 803.213609][T18818] CR2: 0000000080113018 CR3: 000000006b664000 CR4: 00000000003526f0 [ 803.221675][T18818] Call Trace: [ 803.224964][T18818] [ 803.227901][T18818] __i2c_transfer+0x79a/0x1f00 [ 803.232682][T18818] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 803.238503][T18818] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 803.244346][T18818] ? i2c_transfer+0xc8/0x2d0 [ 803.248939][T18818] i2c_transfer+0x1cc/0x2d0 [ 803.253443][T18818] i2cdev_ioctl_rdwr+0x460/0x740 [ 803.258387][T18818] compat_i2cdev_ioctl+0x5a8/0x5c0 [ 803.263514][T18818] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 803.269374][T18818] ? __fget_files+0x3a0/0x420 [ 803.274166][T18818] ? __fget_files+0x2a/0x420 [ 803.278850][T18818] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 803.284402][T18818] __ia32_compat_sys_ioctl+0x543/0x840 [ 803.289865][T18818] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 803.295856][T18818] ? __se_sys_futex_time32+0x360/0x3e0 [ 803.301325][T18818] ? __pfx_do_sys_openat2+0x10/0x10 [ 803.306530][T18818] ? rcu_is_watching+0x15/0xb0 [ 803.311441][T18818] __do_fast_syscall_32+0x1dc/0x570 [ 803.316823][T18818] ? lockdep_hardirqs_on+0x7b/0x110 [ 803.322024][T18818] ? do_fast_syscall_32+0x34/0x80 [ 803.327053][T18818] ? irqentry_exit+0x10f/0x670 [ 803.331830][T18818] do_fast_syscall_32+0x34/0x80 [ 803.336755][T18818] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 803.343266][T18818] RIP: 0023:0xf7f22539 [ 803.347486][T18818] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 803.367619][T18818] RSP: 002b:00000000f541655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 803.376043][T18818] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000707 [ 803.384138][T18818] RDX: 0000000080000a40 RSI: 0000000000000000 RDI: 0000000000000000 [ 803.392375][T18818] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 803.400433][T18818] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 803.408435][T18818] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 803.416422][T18818] [ 803.419439][T18818] Modules linked in: [ 803.423912][T18818] ---[ end trace 0000000000000000 ]--- [ 803.424560][T18189] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 803.451673][T18189] usb 5-1: device descriptor read/8, error -71 [ 803.529227][T18818] RIP: 0010:su3000_i2c_transfer+0x1ad/0xfd0 [ 803.536508][T18832] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4439'. [ 803.556907][T18832] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4439'. [ 803.606290][T18818] Code: 4c 89 f8 48 c1 e8 03 49 bc 00 00 00 00 00 fc ff df 42 80 3c 20 00 74 08 4c 89 ff e8 5d 1c 6c fa 49 8b 1f 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 f3 08 00 00 0f b6 1b 48 8b 44 24 38 42 [ 803.679031][T18818] RSP: 0018:ffffc90004dff9d0 EFLAGS: 00010202 [ 803.696840][T18818] RAX: 0000000000000002 RBX: 0000000000000010 RCX: 0000000000000003 [ 803.710907][T18818] RDX: ffffffff87bafb55 RSI: ffffffff8eec1950 RDI: 0000000000001900 [ 803.720470][T18818] RBP: 0000000000000000 R08: ffff88802d3d9e80 R09: 0000000000000002 [ 803.732536][T18189] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 803.743992][T18818] R10: 0000000000001a00 R11: 0000000000000002 R12: dffffc0000000000 [ 803.761598][T18189] usb 5-1: device descriptor read/8, error -71 [ 803.763447][T18818] R13: 1ffff11003d6f450 R14: 0000000000000002 R15: ffff88801eb7a288 [ 803.780726][T18818] FS: 0000000000000000(0000) GS:ffff888125f1f000(0063) knlGS:00000000f5416b40 [ 803.797612][T18818] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 803.809835][T18818] CR2: 000000008009c018 CR3: 000000006b664000 CR4: 00000000003526f0 [ 803.840177][T18818] Kernel panic - not syncing: Fatal exception [ 803.846727][T18818] Kernel Offset: disabled [ 803.851177][T18818] Rebooting in 86400 seconds..