last executing test programs: 22m12.350718725s ago: executing program 3 (id=3532): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="340000000104050000000000000000000700000006000640000200000500010002"], 0x34}}, 0x2000004) 22m11.901128488s ago: executing program 3 (id=3534): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000029c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@empty, 0x0, 0x40, 0x0, 0x0, 0xa, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x2000000, 0x0, 0x0, 0x2dd}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, [@tmpl={0x84, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x37}, 0x4d3, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff}, {{@in6=@private1={0xfc, 0x1, '\x00', 0xfc}, 0x0, 0x32}, 0x2, @in6=@empty, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x3, 0x278b6a28}]}]}, 0x13c}}, 0x0) 22m11.754032332s ago: executing program 3 (id=3535): r0 = fanotify_init(0x200, 0x0) r1 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) r2 = dup(r1) fanotify_mark(r0, 0x1, 0x48000047, r2, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000240)=0x8) r5 = dup(r2) ioctl$sock_TIOCOUTQ(r3, 0x5411, &(0x7f0000000040)) write$binfmt_elf64(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c4606ff78a3ff0500000000000002003e00cd000000c9030000000000004000000000000000ea02000000000000030000000500380001000600b106090003000000080000000500000000000000f742ffffffffffffff0300000076a12d6105"], 0x78) execveat(r5, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 22m11.670170171s ago: executing program 3 (id=3536): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x26020480) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='.\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x40200000001, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r7, &(0x7f0000000600)={0x14, 0x88, 0xfa00, {r6, 0x30, 0x0, @ib={0x1b, 0x7801, 0x3, {"000000000000f000000000000800"}, 0x8000, 0xa, 0x4}}}, 0x90) 22m10.498997467s ago: executing program 3 (id=3541): r0 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r0, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000540)=ANY=[@ANYBLOB="0000000000400180c20000000800450000240000e0000011db4d90780a01010100000000000000000010907862040000d0c5adfe80d49a373454806662cac2678000"], 0x0) 22m9.851511672s ago: executing program 3 (id=3542): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000c40)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180c}}, 0x0, 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000100)={0x1, 0x6d, 0x2, &(0x7f0000000240)={0xa1, "1a9c66bf2f615e427b2644e953449f6c12f206b2855cd8c82b1b9951cf5a1dee93"}}) 22m9.100937949s ago: executing program 32 (id=3542): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000c40)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180c}}, 0x0, 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000100)={0x1, 0x6d, 0x2, &(0x7f0000000240)={0xa1, "1a9c66bf2f615e427b2644e953449f6c12f206b2855cd8c82b1b9951cf5a1dee93"}}) 6.690452592s ago: executing program 1 (id=10311): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="7800000002060108000000000000000000000000050005000a000000140007800800114000000000050015000c000000050001000700000005000400000000000900020073797a310000000011000300686173683a6e65"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 6.543215946s ago: executing program 1 (id=10312): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) fsetxattr$security_capability(r2, &(0x7f0000000480), &(0x7f0000000900)=@v1={0x1000000, [{0x5, 0x5}]}, 0xc, 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$sock_ifreq(r1, 0x8923, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_flags=0x400}) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_ASYNC_CANCEL={0xe, 0x42, 0x0, 0x0, 0x0, 0x23456}) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000300)=@IORING_OP_ASYNC_CANCEL={0xe, 0x42, 0x0, 0x0, 0x0, 0x23456}) openat$ptmx(0xffffffffffffff9c, 0x0, 0xa101, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000100)=ANY=[], 0x0) (async) syz_emit_ethernet(0x86, &(0x7f0000000100)=ANY=[], 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') (async) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') open_tree(r5, &(0x7f0000000640)='\x00', 0x89901) (async) r6 = open_tree(r5, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) move_mount(r6, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005bd30a20f0031d58a3200102030109021b0002000000000904250000ff0116000904", @ANYRES32], 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000340)={'syztnl0\x00', &(0x7f0000000280)={'ip_vti0\x00', 0x0, 0x80, 0x20, 0x51b, 0x7fff, {{0xd, 0x4, 0x0, 0x0, 0x34, 0x64, 0x0, 0x7, 0x2f, 0x0, @broadcast, @private=0xa010101, {[@timestamp_addr={0x44, 0x14, 0x40, 0x1, 0x6, [{@rand_addr=0x64010102, 0x1}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x200}]}, @timestamp={0x44, 0xc, 0xfb, 0x0, 0x9, [0x7f, 0x6c]}]}}}}}) r7 = socket(0x2, 0x3, 0xff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmmsg$inet(r7, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000080)="6c4d2e5ad106dc8cbc347c791641f1c0449a9ce05a2d9ce280fb87a22f71741adb84c454427495a421746dcc6fe8b9cd", 0x30}, {0x0}], 0x2, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @dev={0xac, 0x14, 0x14, 0x37}, @empty}}}], 0x20}}], 0x1, 0x4800) (async) sendmmsg$inet(r7, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000080)="6c4d2e5ad106dc8cbc347c791641f1c0449a9ce05a2d9ce280fb87a22f71741adb84c454427495a421746dcc6fe8b9cd", 0x30}, {0x0}], 0x2, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @dev={0xac, 0x14, 0x14, 0x37}, @empty}}}], 0x20}}], 0x1, 0x4800) sendmsg$ETHTOOL_MSG_PAUSE_GET(r6, 0x0, 0x840) (async) sendmsg$ETHTOOL_MSG_PAUSE_GET(r6, 0x0, 0x840) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101302, 0x0) (async) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x101302, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) cachestat(r9, &(0x7f00000001c0)={0xfffffffffffffffc, 0xfffffffffffffffd}, &(0x7f0000000200), 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000380)='maps\x00') pread64(r10, &(0x7f0000000600)=""/4075, 0xfeb, 0x12c) getsockopt$MRT(r10, 0x0, 0xce, &(0x7f0000000080), &(0x7f0000000140)=0x4) (async) getsockopt$MRT(r10, 0x0, 0xce, &(0x7f0000000080), &(0x7f0000000140)=0x4) 6.255476531s ago: executing program 2 (id=10313): socketpair(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b35, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000100)={0x0, 0x3}, &(0x7f0000000140)=0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000598000/0x1000)=nil, 0x0, 0x0, 0x0, 0xcbfb, 0x0, 0x60, 0x0, 0x58}) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000640)=ANY=[@ANYBLOB="20110406"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, 0x0) syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x0, 0x335}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x440a00, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0x0, 0x0, 0x0, 0x4}) 5.814005797s ago: executing program 0 (id=10315): socket$nl_generic(0x10, 0x3, 0x10) socket$igmp6(0xa, 0x3, 0x2) r0 = socket$key(0xf, 0x3, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x44}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000a80)={{0x5, 0x6, 0x3355, 0x2, '\x00', 0x81}, 0x1, [0x6, 0xfffffffffffffffa, 0x91, 0x907a, 0xffffffff, 0x60, 0x1, 0xf, 0x1, 0x8, 0xfffffffffffffffd, 0x63, 0xfff, 0x5, 0xffffffff, 0xc8, 0x51, 0xa5, 0x0, 0xb6, 0x8000000000000000, 0x7, 0x7, 0x4, 0x6, 0xff, 0x1, 0x4f51, 0x0, 0x37c7, 0xc, 0xbb33, 0x0, 0x63, 0x4, 0x4, 0x8, 0xffffffffffff7fff, 0x6, 0x8, 0x5, 0x0, 0x8, 0x401, 0x3, 0xc1bd, 0xffffffff, 0x8000000000000001, 0x3, 0x0, 0x8000000007, 0x72, 0x9, 0x2, 0x6a44d0ea, 0xffffffffffffffff, 0x9, 0x5f0, 0xfffffffffffff2e2, 0x17, 0x6, 0xfffffffffffffffa, 0x9, 0xf0, 0x26e69303, 0x6, 0x2, 0x5, 0x2, 0x1, 0x9, 0x7, 0xe0000000000000, 0xd, 0x81, 0x80000001, 0x7ff, 0x6, 0x6, 0x3ff, 0xffffffffffffcc1c, 0x10000, 0xfffffffffffffffb, 0x6, 0x100000001, 0x1, 0xd, 0x7dd, 0xfffffffffffff000, 0x8d6, 0x0, 0x5, 0x4, 0xafae, 0x1, 0x9, 0x1, 0xb, 0x1, 0x1, 0x1, 0x10000, 0x1ff, 0xc, 0x0, 0x7, 0x5, 0x0, 0x3, 0x7, 0xaad, 0x7, 0x4000000001, 0xc, 0xe2, 0x6, 0x6, 0xf, 0x7, 0x0, 0x9, 0x5, 0x40, 0x52a7, 0x83d0, 0xf0, 0x104000000, 0x140000000]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0xfff7fffe, 0xbde, 0xb, 0x10000}}) r3 = fsopen(&(0x7f0000000080)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000280)='auto_da_alloc', &(0x7f00000002c0)='0\x00', 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x900, 0x0) syz_emit_ethernet(0x7a, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2140, 0x0) sendmsg$key(r0, 0x0, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) r5 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000001c0)=0x2) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000010c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x310, 0x280, 0x268, 0x300, 0x280, 0x268, 0x390, 0x460, 0x460, 0x390, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0xf0, 0x130, 0x0, {0x9401}, [@common=@unspec=@limit={{0x48}, {0xfff, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x2}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x8, 0x21, "6bb6778f9bdec125b0fb4f26be757b1e6f2fb8e9079627dc6726c4bc85e9"}}}, {{@ipv6={@private2, @remote, [], [], 'ip6gretap0\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x370) ioctl$VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f0000000280)={0x6, @pix={0x4, 0x9, 0xa0363159, 0x5, 0x5, 0x9, 0x5, 0x7, 0x1, 0x8, 0x0, 0x7}}) setsockopt$MRT_DEL_VIF(r4, 0x0, 0xcb, &(0x7f0000000100)={0x1, 0x1, 0x9, 0x6, @vifc_lcl_addr=@empty, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="000000002000000000000000450000000000000000000000000000473de42ceb99b92243cf9a4bcf90b3c71e5ae5e87974b8b87cdcdfbc342eea7c321f3f"], 0x24, 0x0) 4.101270416s ago: executing program 2 (id=10318): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x5e, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd600000000028060100000000000000000000002c99000000fe8000000000000000000000000000aa04004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a8"], 0x0) 3.703454796s ago: executing program 4 (id=10319): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x780, 0x78, 0x1000, 0xfffffffd, 0x8, 0x0, {0x0, 0x9}, {0x350, 0x20002, 0xfffffffd}, {0xf4ef, 0x0, 0x1}, {0x4, 0x0, 0x7fe}, 0x1, 0x100, 0x0, 0xd614, 0x0, 0x0, 0x1, 0x0, 0x800000, 0x0, 0x8000, 0x10000, 0x4, 0x3f, 0x0, 0x4}) 3.619044258s ago: executing program 1 (id=10320): socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x3f, 0x0, 0x0) openat$sequencer2(0xffffff9c, &(0x7f0000000040), 0x400, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4400000010000108000000000000000000000900", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) 3.509620132s ago: executing program 5 (id=10321): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000013000500000000000000000007"], 0x34}, 0x1, 0x0, 0x100000000000000}, 0x0) 3.459654701s ago: executing program 4 (id=10322): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="7800000002060108000000000000000000000000050005000a000000140007800800114000000000050015000c000000050001000700000005000400000000000900020073797a310000000011000300686173683a6e65"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 3.35272571s ago: executing program 5 (id=10323): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r1, 0x83625fc5352ba305}, 0x14}}, 0x0) 3.194447711s ago: executing program 2 (id=10324): syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120009"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x1}], 0x1, 0x101) syz_io_uring_setup(0x7b52, &(0x7f0000000840)={0x0, 0x180a, 0x800, 0x1, 0x3c3}, 0x0, 0x0) syz_open_dev$I2C(0x0, 0x1, 0x402) 3.193075052s ago: executing program 5 (id=10325): r0 = openat$kvm(0x0, &(0x7f0000000240), 0x181002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0xeeef0000, 0x4000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000065b000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000040)={0xeeee0000, 0x9000}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1, 0x2}}, 0x8001, 0x8}, &(0x7f00000000c0)=0x90) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_emit_ethernet(0x86, &(0x7f00000010c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08004500007800000000030190780a01d18fac1414aa040090780100000047000000000000000011000000000000ac1e0001440c0001ac1414bb4e210000443c0001e0000001000000000000000000000000ac1414000000000000000000000000000000000000000000ffffffff00000000ac14140000000000"], 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\xfa\x8b\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x845n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\xfey\bJ\x86\x8d\xdf\x16\xbb3\x85\xf5\xe0zYe\xc2\n\x0f\x87\xc4\x8f\x8e\xec\xee\xcd\f\xe9\xc8\xbc\x97,\xb7!\xf2\x93\xd3\t\xd9=\x93\x1d\x945\x97\x1e\x9d\xa6\xe9\xa6\xf9p,\xf7v>\xcd\xd9\xc4\x1b\x9c(\xb8\x90\xdeg\xbf[n\x82\x96\xaev\xd4\xac \x14\xf0\x18@\xc3\xf1\xe2\x14\x1c\x0f\xa4-\xde\xae\xfa;\xaf\xae\x06\x9ag\x02\x98\xd0C2\xe7?\xfb\xb01\x9d\xf8\xd3Q\xb3\xb2\x18V\xe8\x8c\x87\xf4\t\x1c\x85\xa4\xc1\xb1\xf4k!G\xf5\xbb\xbbs&\xeac\xb3\xafW\x846\v\xb3\xca\xeb\xb7\x9e\x9e#]\x10lj\xaf\xaf\xd1\'{\x11\xaa,\x0f\xc5OY\"\x82\x84\xb6:J\x8c\xf37\x1d\xca\xf1\xef\x9f\xcf\a\xcf\xcb', 0x0) pipe2(&(0x7f0000000040), 0x880) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) pwritev(r6, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000380)='Q', 0x1}, {&(0x7f00000003c0)="77cccb0deedbb94f1afd3ccb469a6721cc637e9cbc7f0685c4ab02897a615638b1ba209474e485e5c676dab2f779fc45e14a15eb8cab8dce71eaea08ea87db5609774523b75431043e4a32f82c5b61bea2b9b0eff207d81c7b175cfcb3e448d7fcac8844402e9401582eeb4a08d247096e183b9b7de727a818150a153b9397c4cc61a6bd461f30fb84b679bca11d47c56904a9d359442a5c3693048b8aa179cf9385", 0xa2}, {0x0}, {&(0x7f0000000680)}], 0x5, 0xc, 0x5) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 3.180938331s ago: executing program 0 (id=10326): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000005000000000008001b000000000004001a80180002"], 0x44}}, 0x0) 3.149228267s ago: executing program 4 (id=10327): socket$nl_generic(0x11, 0x3, 0x10) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)) pipe(&(0x7f0000000440)) socket$inet(0x2, 0x1, 0x0) socket$xdp(0x2c, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0xa00, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x2, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x38, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a00010000"], 0x64}, 0x1, 0xfe0f000000000000}, 0x0) 2.883135591s ago: executing program 0 (id=10328): write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000000300)={0x18, 0xffffffffffffffda, 0x0, {0x100}}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r2, &(0x7f0000000140)="d4", 0x1, 0x20000800, &(0x7f0000000240)={0xa, 0x4a20, 0x7fffffff, @local, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0xfffffffd}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000200)={0x48}) openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x101800, 0x0) r4 = memfd_create(&(0x7f0000000840)='\x01\x00\x00\x00\x00\x00\x00\x00\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\x82\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xc0L\x1d\x98Zq\xce\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1j$S\xfc\xb1[N\x8d\xcfI\xc8\x91\x87\x1fuYG7}%)\xb9\x00\x00\x00\x00\x00\x00\x00\x80W\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]^\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1f2\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x9e\x035\x8a@\xd4\x1c\xe0\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\x00\x00\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d\xf5s\x03\x1a=\xcc\xd1\xa7\'\xa0\xaf\xf7\xec\xaf}\x0e\a\x00\x91U\xf9\x8e_f\x8e\x00\xc3r*\xc7\xaf\xe2\'\xe0f9\xde\n,\x8c8Y26\xa6u<\xca@H\xdc\xf1\xb0\xb8\x9f\xc2o\x0f\x02I\xb6\xc3xH\xc3\x88(\xb6\x97~\xea)\'\xa3:\x8d\xebc>z\xae*\xc2\x14\xe9\x89#\xe2)\x9a\xb0hR\xffa\xf8\xde\xf7q4\xcfV\xbb\xc3t\xfa\xa9\x05>\xaea\x12\xce\x1cY\a\xb16\xb9\x12v\x1dN\xe1,_3\xa9\xa36\xaa.Cj\xd4\ah\x92j\x86\xe1\x1f\xec1\xb9!lI\xc7\xbf\x85\xdd\x03\xbd\xeb\xec\xf9\xf3\xaf\xe02AzX\x9aO\x93y;\xa7,\xbb\x11\xe6\x8fn\xa0m\xf8\xcf\x92\x19\xba,\x0e\x04\xbe\xbb\xdd\x00\xb1\xb6Enr\x17\xa4\xc5)\xcc}*yN\xdc\xc3\xe0\xf2\x10\xe00x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0xffe}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x11, 0x13}}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) socket$nl_route(0x10, 0x3, 0x0) 2.873530072s ago: executing program 1 (id=10329): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x4}, 0x50) r1 = geteuid() quotactl_fd$Q_SETINFO(r0, 0xffffffff80000602, r1, &(0x7f0000000080)={0x7a2, 0x81, 0x1, 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@broadcast, @in=@multicast2, 0x4e20, 0x0, 0x4e22, 0xffff, 0x2, 0x60, 0x20, 0x32, 0x0, r1}, {0xc, 0x1, 0x6, 0x8, 0x8, 0x7, 0x8, 0xc}, {0x9, 0x2, 0x80, 0x4}, 0x7, 0x6e6bb1, 0x2, 0x0, 0x2}, {{@in=@multicast1, 0x4d6, 0x2b}, 0xa, @in6=@mcast2, 0x0, 0x1, 0x0, 0x6, 0xffffe32c, 0x3ff, 0xa80}}, 0xe8) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000200), 0x2) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r3, 0x50009417, &(0x7f0000000240)={{r4}, 0x0, 0x10, @unused=[0x2, 0x9, 0x0, 0x4], @name="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"}) r5 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000001240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_disconnect(r5) r6 = syz_open_dev$swradio(&(0x7f00000012c0), 0x1, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(r6, 0xc0905664, &(0x7f0000001300)={0x0, 0x0, '\x00', @bt={0x5a, 0x4, 0x5, 0x1, 0x6, 0xc02b, 0x14}}) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f00000013c0), 0x4) clock_gettime(0x0, &(0x7f0000001440)={0x0, 0x0}) utimes(&(0x7f0000001400)='./file0\x00', &(0x7f0000001480)={{}, {r7, r8/1000+60000}}) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000014c0), 0x400) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r9, 0xc0bc5351, &(0x7f0000001500)={0x9, 0x0, 'client0\x00', 0x0, "199b144a060429a6", "9d86eeb6107e4d42ed18896fbbd96880a28a920dc8c438992494ca5e5a1f91fb", 0x3, 0x5a61b59f}) socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r9, 0x408c5333, &(0x7f00000015c0)={0xfaed, 0x4, 0x0, 'queue1\x00', 0x2}) r10 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCSETS(r10, 0x5402, &(0x7f0000001680)={0x100, 0x7, 0x5, 0xfffff6ab, 0x13, "030d01b5ece72eedcc577fda1ae95d4cd8ce4f"}) syz_usb_control_io(r5, &(0x7f0000001800)={0x2c, &(0x7f00000016c0)={0x0, 0x23, 0x28, {0x28, 0x31, "5c06892ef9a9789d962947c990aaa6c038d6917595455652090d3566b08f99a4c84ceb30c6c0"}}, &(0x7f0000001700)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2801}}, &(0x7f0000001740)={0x0, 0xf, 0x13, {0x5, 0xf, 0x13, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0xa, 0x2, 0x400}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x3, 0x8, 0xc}]}}, &(0x7f0000001780)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x4, 0x1e, 0x7f, "9f51d8b9", "50e268a0"}}, &(0x7f00000017c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xb, 0x10, 0x5, 0x4, 0x3, 0x504, 0x3}}}, &(0x7f0000001c80)={0x84, &(0x7f0000001840)={0x0, 0x15, 0x68, "c173fbe9609d4da4053098a34887ae8c70142ee791513faf8ae7218d235b34586dd970a767ebebd2fec1cd98e5ad95964f7b2a80ea0224ac21f3863a4159c91427291c197ee99a0c55cd0b3e57182c2f71cf326824113e82a0d1b1c92c398c9d2948f8ca49b45e8a"}, &(0x7f00000018c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000001900)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000001940)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000001980)={0x20, 0x0, 0x8, {0x140, 0x4, [0xf110]}}, &(0x7f00000019c0)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000001a00)={0x40, 0x9, 0x1, 0x8f}, &(0x7f0000001a40)={0x40, 0xb, 0x2, "ecaf"}, &(0x7f0000001a80)={0x40, 0xf, 0x2, 0x7f}, &(0x7f0000001ac0)={0x40, 0x13, 0x6, @local}, &(0x7f0000001b00)={0x40, 0x17, 0x6, @remote}, &(0x7f0000001b40)={0x40, 0x19, 0x2, "af4f"}, &(0x7f0000001b80)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000001bc0)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000001c00)={0x40, 0x1e, 0x1, 0x77}, &(0x7f0000001c40)={0x40, 0x21, 0x1, 0x7}}) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x278, &(0x7f0000001d40)={[{0x4c, 0x4e00, "2169347bf43f3def113471404ef119becd70bff5d3efdaa15ddcb7060b9b0e8789cadf994b65523829e869195f14ae79771efc9bdc307324f0dd87bf48c24d380267c642882065dcbf0c081c"}, {0x16, 0x4e00, "e146ea4106e030bca9c621463cf666acba656d83a53d"}, {0x9b, 0x4e00, "9d9cc94a6c46da4ff3a3f7594f23a0374aaeb730e34b56d910a2255d785ff8a648041bfe37585103e356f7213b0cd0750dd1c025029317b961a642c54e2f3e8c9fc3a01f0d65037b9ac5340180eea72267708e404e178409ed651e6e7790321906715b879a2a47f014456cc925ea6722776fe9881c8f59f88804023e42ed26e02f01901fcf2e93c364b7d2cd5c49e073c7746604b9c27f1e213f51"}, {0x82, 0x4e00, "2a77e20eec6f2f9b679ed223faac1bbb9c130534870d0a682caaa815c3bf981be5741bd37af33595698545ebf0ef2ad4994ab9c388e1cd58c03a86e89cf86addd07cb1f892233814bb035ac9a836bd003245e7971d161c1c2c2f8abc7780f5e1c8542ba609646eea4227fe4f03ec1c0f15519c832fee09faf72dfbdd17ff2cb1bdfc"}, {0xde, 0x4e00, "b19aa203e20d2472f54fbaf3c8da232632063faa584cd73d24b0c1356235ec8f8bbb5a31586123f7b9bf6ff4c0ff70f4c3d4dea1ae36b445c7ffc19eaa379fecb125eccad1a94c136181318e4f8a0bfb7b2a9492a04231f3f845cf3778f60538b7d33139c081b4bb975860837a34e1234985c729a14fbb613cf0f7e4d40a90c8303108f37c59923382827ba50c974575489c6ab0cb971b3d5fe75c4f2da2521cb5e3609435818d1cd3820c69cb349a526091e2943cd114fe891545e367c3b600893e2dfa5b232472f4249cf36803b6a652ab25c67258f4a7ea126a38f571"}]}) r11 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001fc0), 0x100, 0x0) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x0, 0x0) ioctl$TIOCL_SETVESABLANK(r10, 0x541c, &(0x7f0000002000)) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f0000002040)={[0x2, 0x8, 0x8, 0x8, 0x8000000000000001, 0xfffffffffffffffb, 0x8, 0x1ff, 0x10000, 0x8, 0x80000000, 0x7, 0x77, 0x1, 0x5], 0x1, 0x10}) ioctl$SYNC_IOC_MERGE(r11, 0xc0303e03, &(0x7f0000002100)={"2b668df7f0797a4463c317a7c66b4a11a31681468c64447bee5405cd074bfaa5", r11, 0xffffffffffffffff}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000003, 0x8010, r12, 0x9b92a000) 2.829422852s ago: executing program 4 (id=10330): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e23}, 0xfffffffffffffe8a) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000040)=0x4) syz_open_dev$tty1(0xc, 0x4, 0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x38}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x460, 0x0, 0x240, 0xffffffff, 0x1a0, 0x0, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x16}, 0x0, 0x168, 0x1a0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x7, 0xc, 'kmp\x00', "4801d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x76, 0x2, {0x1}}}, @common=@unspec=@devgroup={{0x38}, {0x3, 0x0, 0x3, 0x3, 0x81}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0xae, {0xf, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_bridge\x00', {}, {}, 0x0, 0x0, 0x4e}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@rand_addr=0x64010102, @ipv4=@private=0xa010101, @icmp_id=0x68, @icmp_id=0x64}}}, {{@ip={@loopback, @remote, 0xff, 0x0, 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {0xff}, 0x6, 0x1, 0x5}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, '\\Q', 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @local, @dev={0xac, 0x14, 0x14, 0x2a}, @port=0x4e22, @gre_key=0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) setsockopt$sock_attach_bpf(r5, 0x1, 0x4c, &(0x7f0000000000), 0x4) openat$audio(0xffffffffffffff9c, &(0x7f0000000840), 0x1cd000, 0x0) sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x4000010}, 0x4000038) recvmsg$unix(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x1100}, 0x2062) r7 = fsmount(0xffffffffffffffff, 0x1, 0x70) ioctl$BTRFS_IOC_SCRUB(r7, 0xc400941b, &(0x7f0000000240)={0x0, 0x7, 0x2}) 2.677526635s ago: executing program 5 (id=10331): openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$vcsn(&(0x7f0000000100), 0x9, 0x90001) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x4e21, @multicast2}]}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000200)={r3, 0x72, "946aafeecd3f47dfa1cbaff76db1fe85efca176e8cb0ebed39c0f1d4cd9d6f00fc141a30a50a00efd6900dcf9790812446cfa422bcac6bd7efbb4c970be9b32d29b894e90f4f907fc313ffce7872c775b7a945ffd1224fc51047c19518b965d69f2f3a9494f74ad2181fb8ace80052d86017"}, &(0x7f0000000280)=0x7a) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000000)={0x8001, 0x5, 0xde, 0xffff}, 0x8) sendto$inet6(r4, &(0x7f0000000040)="ad", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0xbffd, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}, 0x405}, 0x1c) shutdown(r4, 0x1) 1.694612037s ago: executing program 4 (id=10332): r0 = syz_open_dev$sg(&(0x7f00000001c0), 0x0, 0x101a02) read(r0, 0x0, 0x0) bind$qrtr(0xffffffffffffffff, &(0x7f00000000c0)={0x2a, 0x1, 0x4100}, 0xc) r1 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000340)={r1, r1, r1}, &(0x7f0000000040)=""/94, 0x5e, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x180) dup(r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r4, 0x6, 0x1b, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@local, @random="4aa468739b85", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @local, @private=0xa010100, @random="57330377ba25", @dev={0xac, 0x14, 0x14, 0xff}}}}}, 0x0) getsockopt(r3, 0x1, 0x6, 0x0, &(0x7f0000000040)) 1.547304951s ago: executing program 4 (id=10333): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000004f80)=[{{&(0x7f0000000440)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000580)=[{&(0x7f00000004c0)="3804a1468f0479b551045eabca6ca54e8a85bed6d5230c957d1c540d484180469231cbaf08c18531ff8958d687ae539c570a264823d61546fe6c66155cad616d2eaf3b85a848c0c0e0f0bf95efb78467d54a680d22d3bde4fe17c3c9257f050518f8325434a1b8c9826e127ee87919316595f1a870202e548674417f5db2beccbcda7888832964d4618f76474ea0072a6c6a74da4d6422b61940ec8607d73c121a9b46", 0xa3}], 0x1, 0x0, 0x0, 0x400c0}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000005c0)="2b6b4c86eaba9872ab50a4c549e338f000c8b653c45eacca94242388d8f89bbe06d0cfec03995cdc17cc1f83a9413496a1ba1db624d500fbbb03f3cc716a9c0d4f7cd3f50ddae5f602a96b7e078b65781b4105baefdc896a4dae42e33b01fb1b7c869128a153c4f4441e4ccf96", 0x6d}, {&(0x7f0000000740)="05177a9aa241b4d83a54a9d9a8f8f56143246b1a472306f295df835aa41e39440b0939d459fee0c04cfffab2121e5bc8d9cc95663e015152fc9098d077078f1df9baf06d2b35eb5359a8fbf6bffbe970ed8daa98f61219e17f966adfc09d95e9cc559a6eb2621b681ae7113f3a7790c2f54ff3afb809b310b23e545dfc4b9faec8b78cd55f94bb31f8ff95", 0x8b}], 0x2, &(0x7f0000000e40)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x18, 0x1, 0x1, [r1, r0]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x24, 0x1, 0x1, [r0, r0, 0xffffffffffffffff, r1, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff, r0]}}, @rights={{0x1c, 0x1, 0x1, [r0, 0xffffffffffffffff, r0]}}], 0x108, 0x40}}, {{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000000f80)="ba61d74f4244d080ca2d48a9579fcb858f955ce493b17e06aa43902784f2d67b62dbc797bbe97bf06c6eaa1f881e4a9ce5b5e0214c4c7d2279e1d189263f19ee4d19ef3f2f5c2c962f1fea98fa1b9ce6168baa22c729658aabb2a825f7a3dbfb6276eb3baa2040efd9590ab0d713937b792dfba5386aecc55239aa7bd96338442e754929eb01229b5b340247d05b9c672b2b461c4ccaf7f21675160adc6ce245a2f7b78df314cd674d0d37b68e00aac6fd", 0xb1}, {&(0x7f0000001040)="380a889ca66b51d6c5cbaee775bc08b6665c3b2b6535efeffad3a53989971b52bc1ba8215aced854fb5611cc6549f052cf0c94e813fcfc8152ad9b83a3717f21775e7ebb84adf32efcc36d1893c56ccbf273bff7c7410a5239b7", 0x5a}, {&(0x7f00000010c0)="bcd980fa2a95ea4dc4ef91c0a61ca74b425879837e10ea4f9a407dd53e341604da727809a7fa0421d575a8936401cf3f23d8455763ed233b618b5fcb584d02e97e18b9254e3e6f9a7937c9489152d78ff9a983e81f7e74253a110a5624ddac56c6bffc400970a9e34a017a6ed0f52a81d002d2e0cd4a286dbc6ac13924b49ff1fe9809bcbac180c8773729", 0x8b}], 0x3, 0x0, 0x0, 0x81}}, {{&(0x7f00000011c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001500)=[{&(0x7f0000001240)="34d84e45aa7da012e9fd65a5654fbda4b66680e7dfbce9e5cd62724caa7b0e7f18d475e56725814a7793b7e38eef8c09c4c84d270d10e3de188217b5b6982f9cc0356538f151a8c13fc8caa2b5975df32d5dcb03d400436c6089d2fb5e46df83560e75c06301", 0x66}, {&(0x7f00000012c0)="324b3fae860c921cfa2757dd1b", 0xd}, {&(0x7f0000001300)="bc49294c36ddd91562a53465083de16b0c000000760d93c00b6525585149e215a58e7a98aa716f555a08f1c8c7e4431f090863c1ce5afef5ce089de3238e681417e16cebde3c35662528b8b56196fd2c9f40881e5e7be5bcfadd188d6a8a98b96cdbe062f14f1f5eefc30a3e469001531302b9e13dc865e951f19fb20f324416ad49798f13a21a07cc2f4decc33218c0b31210449c4e7fa623b1a84f5a55b3a5657693a00a8827917cb9ba925a954d1d1190e896d46710a1b32faae7aff6dde7dfbee329", 0xc4}, {&(0x7f0000001400)="00b7dec23e17ed4fc15e250e6c438b43692882726fa7e0a86b05c556420fd0677bca033754abc50f1b48fe8f0314ac3cbe8174abb053fb371d46bbe25a0042283a3e55f530321645fd9122921a9f05ea6efe75a131e6", 0x56}, {&(0x7f0000001480)="eec6fca4aded6c117b8f1318864d0d502d3854e6639ce42f4d214afb1b009bacb195c43d41c88594e01ccc8c74e33585bc6224c46562ba455174c2f93236d43243a41afa966722e0c01bb38e36fdee9a88acffb8a749b30c812b25969e12e94e55fc81d19a6216a359ec6ad77c58c396ed3d432213fbc1987cf1695ff7", 0x7d}], 0x5, &(0x7f0000001600)=ANY=[@ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="ff075105"], 0xa0, 0x8000}}, {{&(0x7f00000016c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001800)=[{&(0x7f0000001740)="c5fe0a9a18474df55f5c8e5749e678d067c6f0937ab1628894c98f5f81b1d89200f7182f47a379279e798c840699001e1e39c3d65d0aa7f4a72ead47466079decf24ac66f4e78aa774d6b0db5ae83ee1079c80bed99d53261f6411567a1891bc42a35d9e90792dc65357becb2ebd0b05be29a192c979ecb9e279b4f52c807f5b77256f025b6fb9cfd911240abc78", 0x8e}], 0x1, &(0x7f0000001880)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r1, r0]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r1, 0xffffffffffffffff]}}], 0x80}}, {{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000001900)="dd52d07a4537b5cd6f07f0ec217efec64a9cf813a8bae59705cc3068a85d0091bc0a5b5a92b137f2c8c24ce7b34fa6ccc825a0970acc587b4ec7603b6e0cb82d3ed167d1c842d2beb18705fbae71c20f39fa6375661ff676b1aee61946a2f21a708d038a551d3e8558365e19ac4f968945393a62b295eea9fbf5a0064a9355a751c0ab8f4774ce819d93a1932109ae1efe8c3dc2c2f210355ca3a797ad27775f24f09f5a7e65ac63f56cc21f4a3542eee74c4b601281003bc25409f505cc", 0xbe}, {&(0x7f00000019c0)="e815a988430b02176e2ee16fc968ad672679754611bc1bd8a9177c6f397be6766bfa4ffaa0142b692c2d39cf4ac786fd1827120a2e649a52a52ecd5723638d1a34da39e1263dfbdfeb0c7ab137e49a1b6caa1960bd071c93609a6b9d83079390d9fc79c5814ce68e1efc770c22859e", 0x6f}, {&(0x7f0000001a40)="61f392d0562c8c99aaf25a434dfb766ce6f784ab279ffa2e5523f9b32c04eeacc2b90723d95b3146de980298e2744a51de8df8dc38190e4d7692746845712e5831476122fcaff9c9289398087902f92e67e331f065ce6af7fc7503622fb976cb670843cd7576f2f911aeeb669b3a17430eefca6159c789f80fc139de94c2b377e637543d60010934de7fb1c4da62a9", 0x8f}, {&(0x7f0000001b00)="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", 0x1000}, {&(0x7f0000002b00)="47cf87adb6be684589e5a371900a061b315f1cf87142c0603c6b466b6d75fda469c76fcb341132440aa3144c63e11af3bd2ed7fca7efe3b43e0efb0df8a9e5", 0x3f}, {&(0x7f0000002b40)="5c77fe1eeb96ed00b90f868f93c48689e133bc1f87eb3986d90d0cf6fc5c09b1bc90f859a650dabcc64d26584471037f74e3d2adbc505005a3ef872690b10a5eec72b1a26896d52a587e249f03101704360eca05aaac10", 0x57}, {&(0x7f0000002bc0)="3bee39cd63", 0x5}, {&(0x7f0000002c00)="377460b738cdeac8d59e41f66ef5cf4fb94d9944dbac7fcda30832fc7a1a44a9100a1d40bb63b5dab7931fa7abeb4066dea8b4", 0x33}], 0x8, &(0x7f0000004cc0), 0x0, 0x80}}, {{0x0, 0x0, &(0x7f0000004dc0)=[{&(0x7f0000004d00)="b962a24690aedbcfa79fcef047873638b407fba67e4e5fe4a93ae9fd000d345b9cf336700ee5abe6ae5c1bea3389f93e3673b623a26fd4ba801abf260925ac4850ff38bbf20024ac0439a3708d7c2ab6c1cdb96eee3523daad4ac1cb980047751ae51ef331389e9bc9d656e70f9a8ba89fd05ef00acde75e2caeb979c57220a49dc8c165ce9f37890de7be2e9079c3611d987cc21558a6c9ace273a95d0f384d7ad884831a2f4f397bc87bb5f686ad0f132ca40154859501fb", 0xb9}], 0x1, &(0x7f0000004ec0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYBLOB="28000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYBLOB="28000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c02000000001a000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0xb8, 0x24000000}}], 0x7, 0x4028084) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000002cc0)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/212, 0xd4}, {&(0x7f0000005140)=""/4096, 0x1000}, {&(0x7f0000000300)=""/236, 0xec}, {&(0x7f0000000640)=""/246, 0xf6}, {&(0x7f0000000000)=""/37, 0x25}, {0x0}], 0x7) personality(0x0) sched_setattr(0x0, &(0x7f0000000840)={0x38, 0x5, 0x1000004c, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = creat(0x0, 0x122) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x3, 0x6, 0x100) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x7) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYRESHEX=r4, @ANYRESOCT=r6, @ANYRES64=r0, @ANYRESHEX=r0, @ANYRES8=r2, @ANYRES64=r3, @ANYRESHEX=r6, @ANYBLOB="25275c986c38dc0198cca972511b5b465a9613dfe31d2bd11e35ff20a2e65de86b28461115762f0262bc9e633d641f711bd53c849271cd94b4154935e8fcd7023b138227862fa6c84e3f623d9a17823b45f92407fb017533d1952520a81c4a3151c9056fbc7ca7c7889c9e8c06aad9d3dcc7645e0d8099844285140bbca7dc71fce5", @ANYRESDEC=r3], 0x3c}}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r9], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x803, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r13, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r14], 0x5c}}, 0x40) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r15, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r15, @ANYBLOB="ad18ca8409d2d00286dcf5bb7a6f8f96442fc722b12b0006cb732325b730a037adec2b82fa999a93019c94eaca4e94c69ef369e7eec866717708d4615e3aebebca4d10d1af4882b9b3a01aad098a7c039d3f03d3758ae40812da1c474c04081172339d8f532f9cf6fcd9678e038f66a44c577136565807398416fb1e7e05e03d952608f5e8196ed1e83caa157c4cc45f972ac63252e70b7e35a94bed"], 0x4c}}, 0x884) 1.538562037s ago: executing program 5 (id=10334): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') getdents64(r0, &(0x7f0000000100)=""/50, 0x32) r1 = syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x2, &(0x7f0000000240)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@allow_other}, {@blksize={'blksize', 0x3d, 0x1400}}, {@allow_other}], [{@obj_role={'obj_role', 0x3d, ')'}}, {@obj_type={'obj_type', 0x3d, '^.'}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/kvm\x00'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@measure}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@smackfshat}, {@smackfstransmute}, {@dont_hash}]}}, 0x0, 0x0, &(0x7f00000003c0)="84b3a9f7037c1272ed9e3b1c075b84143897b16896891969f75e2fccbc8ee98878b15c1d8fbb40ef208b36984786aff510ae49c40129d0d2261ff4afb7628a23a68fedb86c6e8739a794e57b8480415b72d06067a8ab457cb164ac6cdc78310e2d6c0072df168c92f58150") r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x7c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x38, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0xc00000000000}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa, 0x84}}}, 0xc4}, 0x1, 0x0, 0x300000000000000}, 0x20050800) renameat2(r0, 0x0, r1, &(0x7f0000000440)='./file0\x00', 0x5) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/fib_triestat\x00') r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22301, 0x0) socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000500)=@ethtool_rxfh={0x1, 0x0, 0x0, 0x6, 0x0, "00e3f7"}}) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000d5b6c108701801007fe60102030109022d00010000000009040000030a00000009058d0000000000000905f3ff000000000009050b"], 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000040)=""/46, 0x2e}], 0x1, 0x0, 0x4) 1.465745793s ago: executing program 2 (id=10335): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000300)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4004af61, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x80000007, 0x1}, 0x1c) r5 = syz_io_uring_setup(0x110, 0x0, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) bpf$PROG_LOAD(0x5, &(0x7f0000002680)={0x1d, 0x3, &(0x7f0000000a00)=ANY=[@ANYRES8=r4], 0x0, 0xfffffff5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, &(0x7f00000002c0), &(0x7f0000002600)=[{0x1, 0x7, 0x4, 0x7}], 0x10, 0x1c000000}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="050000007f00000003000000090000", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00), &(0x7f0000000880), 0x402, r8}, 0x38) sendmsg$NFNL_MSG_ACCT_DEL(r2, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc091}, 0x4040004) r9 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r9, &(0x7f00000000c0)={0x1d, r10}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@getchain={0x54, 0x66, 0x0, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0xfff2, 0x1}, {0xfff3, 0x4}, {0x4, 0xfff1}}, [{0x8, 0xb, 0x8}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0xc}, {0x8, 0xb, 0x51}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x40894) close(r7) io_uring_enter(r5, 0x1f85, 0x40110a, 0x4d, 0x0, 0xa6) recvmmsg$unix(r4, &(0x7f00000007c0), 0x0, 0x40000000, 0x0) sendmsg$tipc(r3, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, 0x0) 1.311623677s ago: executing program 0 (id=10336): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r1, 0x83625fc5352ba305}, 0x14}}, 0x0) 1.257269522s ago: executing program 0 (id=10337): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="7800000002060108000000000000000000000000050005000a000000140007800800114000000000050015000c000000050001000700000005000400000000000900020073797a310000000011000300686173683a6e65742c6e657400000000150003006861"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.137129839s ago: executing program 0 (id=10338): openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000380)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x20004000) 995.581571ms ago: executing program 1 (id=10339): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x4b0, 0xbbba, 0x2, 0x4b1e214daee7d038, 0x0, {}, {0x2, 0x2}, {0x0, 0x3, 0x20}, {0x5, 0x8}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x4000000, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, 0xb}) 673.093417ms ago: executing program 1 (id=10340): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0d00000000000000000087f2", @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xab, @loopback, 0x10001}, 0x1c) r1 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r2, 0x707, &(0x7f00000002c0)={&(0x7f00000001c0)=[{0x2, 0x8411, 0x22, &(0x7f00000006c0)="0203204bdcc36cda8907f47563863d1428f47b34551c000bce0f6bc6584f11a7489c"}, {0x7fff, 0x10, 0x0, 0x0}], 0x2}) syz_usb_control_io$uac1(r1, &(0x7f0000000180)={0x14, &(0x7f00000003c0)={0x40, 0x10, 0x73, {0x73, 0x2, "2bcff982b0586db06caeeddc90f6f4662e997cd7ed78d8b5337c95fb15c8c87eebc823cbf01f093b350ad8890f35165202709a2195b139ea5459b1c49595935037f10cd36d22de643d13b16e625f0ae3a1411e311bdd0cf4001c76eadadf23465659cf2fd7313f145993cff0512e9b10a3"}}, &(0x7f0000000080)={0x0, 0x3, 0xb, @string={0xb, 0x3, "44d3596b4914d7153b"}}}, &(0x7f0000000600)={0x44, &(0x7f0000000240)={0x20, 0x9, 0x45, "a269dd536dc656059958d8fd973590d22bed686ee4893cdabb1cd78407d0bc674461d09a9a47ed0fff0c8baf7ce29a5c260e1c336eaa40bf9f41d6ca7cc4c0356d79e5df82"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x31}, &(0x7f0000000480)={0x20, 0x81, 0x3, "b43cb6"}, &(0x7f00000004c0)={0x20, 0x82, 0x2, "fbe8"}, &(0x7f0000000540)={0x20, 0x83, 0x2, "125b"}, &(0x7f0000000580)={0x20, 0x84, 0x2, "03a4"}, &(0x7f00000005c0)={0x20, 0x85, 0x3, "81efbb"}}) syz_usb_control_io$uac1(r1, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @loopback, 0x23}, 0x1c) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) sendmmsg(r0, &(0x7f0000001e00)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000006c0)="87e8ae1a40dca7f0ff2478efce8e1c831a44e5b275dc913413ade883c7809f2e7d309efc", 0x24}], 0x1}}], 0x2, 0x0) r3 = dup(r0) r4 = socket(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0x4000002}, 0x1c) syz_emit_ethernet(0x6e, &(0x7f00000001c0)={@random="cfb14e407d33", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x38, 0x3a, 0x1, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x8001, {0x2, 0x6, "081331", 0x9, 0xff, 0x0, @loopback, @loopback, [@fragment={0x3b, 0x0, 0xe, 0x0, 0x0, 0x3, 0x65}]}}}}}}}, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f00000000c0)={0x7, 0xffffffffffffffa0, 0xfa00, {0xffffffffffffffff, 0x10c}}, 0xfffffd88) ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309) 339.670029ms ago: executing program 2 (id=10341): r0 = openat$kvm(0x0, &(0x7f0000000240), 0x181002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0xeeef0000, 0x4000}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000065b000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000040)={0xeeee0000, 0x9000}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1, 0x2}}, 0x8001, 0x8}, &(0x7f00000000c0)=0x90) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_emit_ethernet(0x86, &(0x7f00000010c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08004500007800000000030190780a01d18fac1414aa040090780100000047000000000000000011000000000000ac1e0001440c0001ac1414bb4e210000443c0001e0000001000000000000000000000000ac1414000000000000000000000000000000000000000000ffffffff00000000ac14140000000000"], 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\xfa\x8b\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x845n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\xfey\bJ\x86\x8d\xdf\x16\xbb3\x85\xf5\xe0zYe\xc2\n\x0f\x87\xc4\x8f\x8e\xec\xee\xcd\f\xe9\xc8\xbc\x97,\xb7!\xf2\x93\xd3\t\xd9=\x93\x1d\x945\x97\x1e\x9d\xa6\xe9\xa6\xf9p,\xf7v>\xcd\xd9\xc4\x1b\x9c(\xb8\x90\xdeg\xbf[n\x82\x96\xaev\xd4\xac \x14\xf0\x18@\xc3\xf1\xe2\x14\x1c\x0f\xa4-\xde\xae\xfa;\xaf\xae\x06\x9ag\x02\x98\xd0C2\xe7?\xfb\xb01\x9d\xf8\xd3Q\xb3\xb2\x18V\xe8\x8c\x87\xf4\t\x1c\x85\xa4\xc1\xb1\xf4k!G\xf5\xbb\xbbs&\xeac\xb3\xafW\x846\v\xb3\xca\xeb\xb7\x9e\x9e#]\x10lj\xaf\xaf\xd1\'{\x11\xaa,\x0f\xc5OY\"\x82\x84\xb6:J\x8c\xf37\x1d\xca\xf1\xef\x9f\xcf\a\xcf\xcb', 0x0) pipe2(&(0x7f0000000040), 0x880) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) pwritev(r6, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000380)='Q', 0x1}, {&(0x7f00000003c0)="77cccb0deedbb94f1afd3ccb469a6721cc637e9cbc7f0685c4ab02897a615638b1ba209474e485e5c676dab2f779fc45e14a15eb8cab8dce71eaea08ea87db5609774523b75431043e4a32f82c5b61bea2b9b0eff207d81c7b175cfcb3e448d7fcac8844402e9401582eeb4a08d247096e183b9b7de727a818150a153b9397c4cc61a6bd461f30fb84b679bca11d47c56904a9d359442a5c3693048b8aa179cf9385", 0xa2}, {0x0}, {&(0x7f0000000680)}], 0x5, 0xc, 0x5) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x7, 0xdb, 0xd}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 43.923878ms ago: executing program 5 (id=10342): syz_usb_connect(0x5, 0x24, &(0x7f0000001280)={{0x12, 0x1, 0x300, 0x0, 0x1f, 0x66, 0x8, 0x58f, 0x6610, 0x4805, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x70, 0x81, [{{0x9, 0x4, 0x0, 0x81, 0x0, 0xff, 0xff, 0xff, 0x2}}]}}]}}, &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) unshare(0x40600) (async) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) unshare(0x0) (async) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f0000000380)=[{0x3, 0x6000, 0x1, &(0x7f00000003c0)='t'}], 0x1}) 0s ago: executing program 2 (id=10343): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r4, 0x400, 0x1) fremovexattr(r4, &(0x7f0000000040)=@known='system.posix_acl_default\x00') socket$inet_udp(0x2, 0x2, 0x0) ioctl$IOMMU_GET_HW_INFO(r4, 0x3b8a, &(0x7f0000000000)={0x28, 0x0, 0x0, 0x1000, &(0x7f0000001880)=""/4096}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8, 0x0, 0x9, 0x0, 0xfffdfe0000800001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="008000000000de92f7615169c317c3b9516abf4f", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000001240)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007baaf8ff00000000b5090800000000007baaf0ff00000000bf8700000000000007070000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004600000076000000bf98000000000000b5080000000000008500000007000000b700000000000000950000000000000006de8c2a8477b61175074ca82f418502ef3c45272c98317e57d919ac59e412da532da61c"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r7, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) openat$dma_heap(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c081, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0xfffffffc, 0xffffffff) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, 0x0, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000480)={0x4, {{0xa, 0x0, 0x31, @mcast1={0xff, 0x7}, 0x1}}, {{0xa, 0x0, 0x7, @initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, 0x9}}}, 0x108) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000002e00090027bd700000001000040000000c0018000bac0f000bac0f"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x0) kernel console output (not intermixed with test programs): [ 2161.335226][ T7221] [ 2161.335235][ T7221] dump_stack_lvl+0xe8/0x150 [ 2161.335290][ T7221] should_fail_ex+0x412/0x560 [ 2161.335326][ T7221] should_failslab+0xa8/0x100 [ 2161.335355][ T7221] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 2161.335387][ T7221] ? __alloc_skb+0x1d7/0x390 [ 2161.335423][ T7221] ? __local_bh_enable_ip+0xd0/0x130 [ 2161.335447][ T7221] ? __alloc_skb+0x193/0x390 [ 2161.335478][ T7221] __alloc_skb+0x1d7/0x390 [ 2161.335512][ T7221] rtmsg_ifinfo_build_skb+0x84/0x260 [ 2161.335548][ T7221] rtnetlink_event+0x1b7/0x270 [ 2161.335584][ T7221] notifier_call_chain+0x19d/0x3a0 [ 2161.335626][ T7221] call_netdevice_notifiers+0x90/0xd0 [ 2161.335656][ T7221] ? __pfx_call_netdevice_notifiers+0x10/0x10 [ 2161.335682][ T7221] ? nla_memcpy+0x5b/0xc0 [ 2161.335714][ T7221] do_setlink+0xe63/0x4590 [ 2161.335748][ T7221] ? __lock_acquire+0x6b5/0x2cf0 [ 2161.335782][ T7221] ? __pfx_do_setlink+0x10/0x10 [ 2161.335818][ T7221] ? do_raw_spin_lock+0x12b/0x2f0 [ 2161.335851][ T7221] ? do_raw_spin_lock+0x12b/0x2f0 [ 2161.335892][ T7221] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 2161.335919][ T7221] ? lockdep_hardirqs_on+0x7a/0x110 [ 2161.335950][ T7221] ? __mutex_lock+0xd09/0x1300 [ 2161.335984][ T7221] ? __mutex_lock+0x5ac/0x1300 [ 2161.336018][ T7221] ? rtnl_newlink+0x8a1/0x1be0 [ 2161.336052][ T7221] ? __pfx___mutex_lock+0x10/0x10 [ 2161.336093][ T7221] ? ns_capable+0x89/0xe0 [ 2161.336120][ T7221] rtnl_newlink+0x147a/0x1be0 [ 2161.336162][ T7221] ? __pfx_rtnl_newlink+0x10/0x10 [ 2161.336191][ T7221] ? do_syscall_64+0xe2/0xf80 [ 2161.336217][ T7221] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2161.336274][ T7221] ? kasan_quarantine_put+0xbb/0x1f0 [ 2161.336294][ T7221] ? lockdep_hardirqs_on+0x7a/0x110 [ 2161.336327][ T7221] ? kmem_cache_free+0x195/0x610 [ 2161.336347][ T7221] ? nlmon_xmit+0xb0/0x100 [ 2161.336382][ T7221] ? __lock_acquire+0x6b5/0x2cf0 [ 2161.336414][ T7221] ? __local_bh_enable_ip+0xd0/0x130 [ 2161.336436][ T7221] ? lockdep_hardirqs_on+0x7a/0x110 [ 2161.336464][ T7221] ? __dev_queue_xmit+0x2a7/0x32b0 [ 2161.336485][ T7221] ? __local_bh_enable_ip+0xd0/0x130 [ 2161.336506][ T7221] ? __dev_queue_xmit+0x2a7/0x32b0 [ 2161.336536][ T7221] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 2161.336581][ T7221] ? __pfx_rtnl_newlink+0x10/0x10 [ 2161.336611][ T7221] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 2161.336652][ T7221] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 2161.336682][ T7221] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2161.336710][ T7221] ? ref_tracker_free+0x693/0x840 [ 2161.336739][ T7221] ? __copy_skb_header+0xa3/0x4a0 [ 2161.336762][ T7221] ? __pfx_ref_tracker_free+0x10/0x10 [ 2161.336802][ T7221] netlink_rcv_skb+0x232/0x4b0 [ 2161.336826][ T7221] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2161.336859][ T7221] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2161.336892][ T7221] ? netlink_deliver_tap+0x2e/0x1b0 [ 2161.336922][ T7221] netlink_unicast+0x80f/0x9b0 [ 2161.336962][ T7221] ? __pfx_netlink_unicast+0x10/0x10 [ 2161.336992][ T7221] ? __alloc_skb+0x193/0x390 [ 2161.337021][ T7221] ? netlink_sendmsg+0x650/0xb40 [ 2161.337041][ T7221] ? skb_put+0x11b/0x210 [ 2161.337075][ T7221] netlink_sendmsg+0x813/0xb40 [ 2161.337107][ T7221] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2161.337132][ T7221] ? aa_file_perm+0x12d/0x1630 [ 2161.337161][ T7221] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2161.337190][ T7221] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2161.337210][ T7221] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2161.337233][ T7221] __sock_sendmsg+0x21c/0x270 [ 2161.337263][ T7221] ____sys_sendmsg+0x4d7/0x810 [ 2161.337284][ T7221] ? __might_fault+0xaf/0x130 [ 2161.337320][ T7221] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2161.337350][ T7221] ? import_iovec+0x73/0xa0 [ 2161.337376][ T7221] ___sys_sendmsg+0x2a5/0x360 [ 2161.337395][ T7221] ? __lock_acquire+0x6b5/0x2cf0 [ 2161.337420][ T7221] ? __pfx____sys_sendmsg+0x10/0x10 [ 2161.337477][ T7221] ? __fget_files+0x2a/0x420 [ 2161.337502][ T7221] ? __fget_files+0x3a0/0x420 [ 2161.337539][ T7221] __x64_sys_sendmsg+0x1bd/0x2a0 [ 2161.337562][ T7221] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2161.337593][ T7221] ? __pfx_ksys_write+0x10/0x10 [ 2161.337632][ T7221] do_syscall_64+0xe2/0xf80 [ 2161.337660][ T7221] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2161.337681][ T7221] ? trace_irq_disable+0x37/0x100 [ 2161.337708][ T7221] ? clear_bhb_loop+0x60/0xb0 [ 2161.337733][ T7221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2161.337754][ T7221] RIP: 0033:0x7f6ba2d9acb9 [ 2161.337772][ T7221] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2161.337790][ T7221] RSP: 002b:00007f6ba3c1b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2161.337813][ T7221] RAX: ffffffffffffffda RBX: 00007f6ba3015fa0 RCX: 00007f6ba2d9acb9 [ 2161.337829][ T7221] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000006 [ 2161.337842][ T7221] RBP: 00007f6ba3c1b090 R08: 0000000000000000 R09: 0000000000000000 [ 2161.337855][ T7221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2161.337868][ T7221] R13: 00007f6ba3016038 R14: 00007f6ba3015fa0 R15: 00007f6ba313fa48 [ 2161.337901][ T7221] [ 2161.877927][ T7221] tipc: Resetting bearer [ 2161.986223][ T7231] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 2162.075396][ T7232] bond4: (slave veth0_to_bond): Releasing active interface [ 2162.594691][ T7250] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9797'. [ 2162.981301][ T7257] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 2163.211433][ T7255] hub 9-0:1.0: USB hub found [ 2163.227627][ T7255] hub 9-0:1.0: 1 port detected [ 2163.319253][ T7262] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9801'. [ 2163.409431][ T182] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2163.439779][ T182] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2163.597715][ T7252] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 2163.619824][ T7252] batadv1: entered promiscuous mode [ 2163.638345][ T7252] team0: Port device batadv1 added [ 2163.668045][ T7263] vlan3: entered promiscuous mode [ 2164.121034][ T182] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2164.200048][ T182] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2164.668992][ T7291] xt_policy: output policy not valid in PREROUTING and INPUT [ 2164.806282][ T7298] syzkaller1: entered promiscuous mode [ 2164.819567][ T7298] syzkaller1: entered allmulticast mode [ 2165.184288][ T7305] Invalid logical block size (5) [ 2165.520801][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 2165.527389][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 2165.764379][ T5869] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 2165.861117][ T7323] netlink: 'syz.2.9821': attribute type 23 has an invalid length. [ 2165.935756][ T5869] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 2165.987324][ T5869] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 2166.020222][ T5869] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2166.048811][ T5869] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2166.086444][ T5869] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 2166.103591][ T5869] usb 6-1: Product: syz [ 2166.113544][ T5869] usb 6-1: Manufacturer: syz [ 2166.122596][ T5869] usb 6-1: SerialNumber: syz [ 2166.139787][ T5869] usb 6-1: config 0 descriptor?? [ 2166.171916][ T5869] usb 6-1: selecting invalid altsetting 0 [ 2166.270776][ T7328] vlan3: entered promiscuous mode [ 2166.284535][ T7330] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9824'. [ 2166.295012][ T7328] vlan3: entered allmulticast mode [ 2166.300168][ T7328] hsr_slave_1: entered allmulticast mode [ 2166.338154][ T7328] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9824'. [ 2166.524277][ T7337] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 2166.876829][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 2166.876849][ T30] audit: type=1326 audit(1769011505.389:3144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7347 comm="syz.0.9829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0f179acb9 code=0x7ffc0000 [ 2166.906930][ T7346] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9819'. [ 2166.987129][ T30] audit: type=1326 audit(1769011505.389:3145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7347 comm="syz.0.9829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0f179acb9 code=0x7ffc0000 [ 2167.100096][ T30] audit: type=1326 audit(1769011505.389:3146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7347 comm="syz.0.9829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7fa0f179acb9 code=0x7ffc0000 [ 2167.100133][ T7354] netlink: 'syz.4.9830': attribute type 1 has an invalid length. [ 2167.210496][ T30] audit: type=1326 audit(1769011505.389:3147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7347 comm="syz.0.9829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0f179acb9 code=0x7ffc0000 [ 2167.236215][ T30] audit: type=1326 audit(1769011505.389:3148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7347 comm="syz.0.9829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0f179acb9 code=0x7ffc0000 [ 2167.260885][ T30] audit: type=1326 audit(1769011505.449:3149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7347 comm="syz.0.9829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa0f179acb9 code=0x7ffc0000 [ 2167.284019][ T30] audit: type=1326 audit(1769011505.449:3150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7347 comm="syz.0.9829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0f179acb9 code=0x7ffc0000 [ 2167.307258][ T7354] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2167.317718][ T30] audit: type=1326 audit(1769011505.449:3151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7347 comm="syz.0.9829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0f179acb9 code=0x7ffc0000 [ 2167.413045][ T30] audit: type=1326 audit(1769011505.479:3152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7347 comm="syz.0.9829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7fa0f179acb9 code=0x7ffc0000 [ 2167.457785][ T30] audit: type=1326 audit(1769011505.669:3153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7347 comm="syz.0.9829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0f179acb9 code=0x7ffc0000 [ 2167.599504][ T7356] bond1: (slave veth0_to_bond): Releasing active interface [ 2167.689131][ T7356] bond4: (slave veth0_to_bond): making interface the new active one [ 2167.712679][ T7356] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 2167.815796][ T7364] gretap0: refused to change device tx_queue_len [ 2167.851788][ T7364] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2168.976374][ T7394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9838'. [ 2168.987296][ T7394] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9838'. [ 2169.118579][ T7394] vlan2: entered allmulticast mode [ 2169.127581][ T7394] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 2169.438513][ T7397] vlan2: entered promiscuous mode [ 2169.466974][ T7397] vlan2: entered allmulticast mode [ 2169.475352][ T7399] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9840'. [ 2169.492444][ T7397] hsr_slave_1: entered allmulticast mode [ 2169.506881][ T7397] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9840'. [ 2169.538292][ T7387] pim6reg: entered allmulticast mode [ 2169.565609][T26840] usb 6-1: USB disconnect, device number 25 [ 2170.344466][ T7410] fuse: Bad value for 'fd' [ 2170.791324][ T7418] xt_hashlimit: size too large, truncated to 1048576 [ 2171.133787][T26840] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 2171.277669][ T7431] syzkaller1: entered promiscuous mode [ 2171.285059][ T7431] syzkaller1: entered allmulticast mode [ 2171.317069][T26840] usb 2-1: config 0 has an invalid interface number: 11 but max is 0 [ 2171.327200][T26840] usb 2-1: config 0 has no interface number 0 [ 2171.343431][T26840] usb 2-1: config 0 interface 11 altsetting 253 bulk endpoint 0x7 has invalid maxpacket 1024 [ 2171.360800][T26840] usb 2-1: config 0 interface 11 has no altsetting 0 [ 2171.372212][T26840] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 2171.383792][T26840] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2171.409106][T26840] usb 2-1: config 0 descriptor?? [ 2171.422298][ T7420] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2171.451287][T26840] keyspan 2-1:0.11: Keyspan 2 port adapter converter detected [ 2171.479084][T26840] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 81 [ 2171.498646][T26840] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 82 [ 2171.519662][T26840] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 1 [ 2171.550077][T26840] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 2 [ 2171.564162][T26840] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 85 [ 2171.572226][T26840] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 5 [ 2171.596414][T26840] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 2171.644713][ T7420] sctp: [Deprecated]: syz.1.9847 (pid 7420) Use of int in max_burst socket option. [ 2171.644713][ T7420] Use struct sctp_assoc_value instead [ 2171.677831][T26840] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 83 [ 2171.717814][T26840] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 84 [ 2171.742064][T26840] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 3 [ 2171.767765][T26840] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 4 [ 2171.777921][ T7439] tipc: Resetting bearer [ 2171.786250][T26840] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 86 [ 2171.803819][T26840] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 6 [ 2171.841718][T26840] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 2171.899351][T26840] usb 2-1: USB disconnect, device number 24 [ 2171.921080][T26840] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 2171.945733][T26840] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 2171.981143][T26840] keyspan 2-1:0.11: device disconnected [ 2172.283660][ T5869] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 2172.777965][ T7471] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9864'. [ 2172.900148][ T7472] bridge0: port 1(bridge_slave_0) entered disabled state [ 2173.038200][ T7472] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2173.061011][ T7472] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2173.214492][ T7472] vlan2: left promiscuous mode [ 2173.233529][T26840] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 2173.253654][T15315] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2173.262925][T15315] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2173.289820][T15315] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2173.318506][T15315] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2173.455713][T26840] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2173.508759][T26840] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2173.526284][ T7484] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9868'. [ 2173.552203][T26840] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2173.591493][ T7484] vlan3: entered promiscuous mode [ 2173.597854][T26840] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2173.624876][T26840] usb 5-1: SerialNumber: syz [ 2174.148525][T26840] usb 5-1: 0:2 : does not exist [ 2174.230796][T26840] usb 5-1: USB disconnect, device number 116 [ 2174.322501][T29170] udevd[29170]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2174.616929][ T7491] IPVS: sh: FWM 3 0x00000003 - no destination available [ 2174.624737][T26840] IPVS: starting estimator thread 0... [ 2174.713669][ T7511] IPVS: using max 26 ests per chain, 62400 per kthread [ 2174.868610][ T7518] xt_cluster: node mask cannot exceed total number of nodes [ 2174.933964][T26840] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 2175.158259][T26840] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2175.183022][T26840] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2175.196595][T26840] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2175.209581][T26840] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2175.254886][T26840] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 2175.264385][T26840] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 2175.286693][T26840] usb 6-1: Manufacturer: syz [ 2175.305867][T26840] usb 6-1: config 0 descriptor?? [ 2175.363545][T17414] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 2175.523481][T17414] usb 5-1: Using ep0 maxpacket: 16 [ 2175.541865][T17414] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2175.560386][T17414] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2175.570848][T17414] usb 5-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 2175.581606][T17414] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2175.601850][T17414] usb 5-1: config 0 descriptor?? [ 2175.991309][ T7539] netlink: 'syz.2.9884': attribute type 1 has an invalid length. [ 2176.054221][T17414] mcp2200 0003:04D8:00DF.0044: unknown main item tag 0x0 [ 2176.099485][T17414] mcp2200 0003:04D8:00DF.0044: unknown main item tag 0x0 [ 2176.141602][T17414] mcp2200 0003:04D8:00DF.0044: unknown main item tag 0x0 [ 2176.190937][T17414] mcp2200 0003:04D8:00DF.0044: USB HID v0.05 Device [HID 04d8:00df] on usb-dummy_hcd.4-1/input0 [ 2176.335759][T17414] usb 5-1: USB disconnect, device number 117 [ 2177.177644][ T7546] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2177.222867][ T7546] netlink: 112 bytes leftover after parsing attributes in process `syz.4.9886'. [ 2177.252048][ T7546] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9886'. [ 2177.525241][ T5921] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 2177.663496][T19990] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 2177.683786][ T5921] usb 5-1: Using ep0 maxpacket: 32 [ 2177.696704][ T5921] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2177.719492][ T5921] usb 5-1: config 128 has an invalid interface number: 127 but max is 3 [ 2177.750849][ T5921] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 2177.774820][T26840] usbhid 6-1:0.0: can't add hid device: -71 [ 2177.790826][ T5921] usb 5-1: config 128 has 2 interfaces, different from the descriptor's value: 4 [ 2177.812028][T26840] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2177.839458][ T5841] Bluetooth: hci4: command 0x0406 tx timeout [ 2177.843476][ T5921] usb 5-1: config 128 has no interface number 0 [ 2177.853597][T19990] usb 2-1: Using ep0 maxpacket: 32 [ 2177.864223][T26840] usb 6-1: USB disconnect, device number 26 [ 2177.884922][T19990] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 41, changing to 9 [ 2177.900785][ T5921] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024 [ 2177.946895][T19990] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 1246, setting to 1024 [ 2177.961829][ T5921] usb 5-1: config 128 interface 127 has no altsetting 0 [ 2177.982496][ T5921] usb 5-1: config 128 interface 1 has no altsetting 0 [ 2178.000911][T19990] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 2178.038629][T19990] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 79, changing to 10 [ 2178.050563][ T5921] usb 5-1: language id specifier not provided by device, defaulting to English [ 2178.075618][ T5921] usb 5-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 2178.094798][T19990] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 34258, setting to 1024 [ 2178.107441][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2178.116037][ T5921] usb 5-1: Product: syz [ 2178.120668][ T5921] usb 5-1: Manufacturer: syz [ 2178.127407][ T5921] usb 5-1: SerialNumber: syz [ 2178.135985][T19990] usb 2-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 2178.148606][T19990] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2178.166177][ T7548] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 2178.175499][T19990] usb 2-1: Product: syz [ 2178.185643][T19990] usb 2-1: Manufacturer: syz [ 2178.190912][T19990] usb 2-1: SerialNumber: syz [ 2178.214102][T19990] usb 2-1: config 0 descriptor?? [ 2178.226588][ T7551] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 2178.238864][ T7551] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 2178.268465][T19990] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input182 [ 2178.446207][ C1] xpad 2-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 2178.486989][ C1] xpad 2-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 2178.532594][T17414] usb 2-1: USB disconnect, device number 25 [ 2178.532809][ C1] xpad 2-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 2178.547338][ T7559] xt_cluster: node mask cannot exceed total number of nodes [ 2178.604048][ T6102] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 2178.645025][ T5921] usb 5-1: USB disconnect, device number 118 [ 2178.685303][T29170] udevd[29170]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2178.727018][ T7561] netlink: 'syz.0.9893': attribute type 1 has an invalid length. [ 2178.753728][ T6102] usb 6-1: device descriptor read/64, error -71 [ 2178.766788][ T7561] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2178.785269][ T7561] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 2179.014983][ T6102] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 2179.173521][ T6102] usb 6-1: device descriptor read/64, error -71 [ 2179.294097][ T6102] usb usb6-port1: attempt power cycle [ 2179.643902][ T6102] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 2179.695290][ T6102] usb 6-1: device descriptor read/8, error -71 [ 2179.953579][ T6102] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 2179.984946][ T6102] usb 6-1: device descriptor read/8, error -71 [ 2179.998844][T17414] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 2180.125596][ T6102] usb usb6-port1: unable to enumerate USB device [ 2180.177838][T17414] usb 2-1: config 6 has an invalid interface number: 4 but max is 0 [ 2180.202982][T17414] usb 2-1: config 6 has no interface number 0 [ 2180.216210][T17414] usb 2-1: config 6 interface 4 has no altsetting 0 [ 2180.242383][T17414] usb 2-1: New USB device found, idVendor=16d8, idProduct=7003, bcdDevice=d0.3e [ 2180.267087][T17414] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2180.297284][T17414] usb 2-1: Product: syz [ 2180.316488][T17414] usb 2-1: Manufacturer: syz [ 2180.329573][T17414] usb 2-1: SerialNumber: syz [ 2180.342156][ T7596] netlink: zone id is out of range [ 2180.349125][ T7596] netlink: zone id is out of range [ 2180.357844][ T7596] netlink: zone id is out of range [ 2180.363120][ T7596] netlink: zone id is out of range [ 2180.368629][ T7596] netlink: zone id is out of range [ 2180.377228][ T7596] netlink: zone id is out of range [ 2180.389674][ T7596] netlink: zone id is out of range [ 2180.398058][ T7596] netlink: zone id is out of range [ 2180.406354][ T7596] netlink: zone id is out of range [ 2180.411713][ T7596] netlink: zone id is out of range [ 2180.432583][ T7597] netlink: 203340 bytes leftover after parsing attributes in process `syz.2.9901'. [ 2180.613774][T17414] usb 2-1: USB disconnect, device number 26 [ 2180.862850][ T7600] syzkaller1: entered allmulticast mode [ 2181.132709][ T7607] xt_cluster: node mask cannot exceed total number of nodes [ 2181.333748][ T6102] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 2181.360477][ T7614] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9908'. [ 2181.439217][ T7616] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 2181.493523][ T6102] usb 3-1: Using ep0 maxpacket: 32 [ 2181.510110][ T6102] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 2181.518842][ T6102] usb 3-1: config 0 has no interface number 0 [ 2181.531359][ T6102] usb 3-1: config 0 interface 196 has no altsetting 0 [ 2181.556259][ T6102] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 2181.566062][ T6102] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2181.590020][ T6102] usb 3-1: Product: syz [ 2181.597986][ T6102] usb 3-1: Manufacturer: syz [ 2181.602935][ T6102] usb 3-1: SerialNumber: syz [ 2181.622487][ T6102] usb 3-1: config 0 descriptor?? [ 2181.871860][ T6102] ipheth 3-1:0.196: Unable to find endpoints [ 2181.899475][ T6102] usb 3-1: USB disconnect, device number 118 [ 2182.013523][T17414] usb 5-1: new low-speed USB device number 119 using dummy_hcd [ 2182.154496][T17414] usb 5-1: device descriptor read/64, error -71 [ 2182.398314][T17414] usb 5-1: new low-speed USB device number 120 using dummy_hcd [ 2182.519670][ T7633] FAULT_INJECTION: forcing a failure. [ 2182.519670][ T7633] name failslab, interval 1, probability 0, space 0, times 0 [ 2182.533099][ T7633] CPU: 1 UID: 0 PID: 7633 Comm: syz.2.9916 Tainted: G L syzkaller #0 PREEMPT(full) [ 2182.533128][ T7633] Tainted: [L]=SOFTLOCKUP [ 2182.533136][ T7633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 2182.533147][ T7633] Call Trace: [ 2182.533156][ T7633] [ 2182.533164][ T7633] dump_stack_lvl+0xe8/0x150 [ 2182.533196][ T7633] should_fail_ex+0x412/0x560 [ 2182.533231][ T7633] should_failslab+0xa8/0x100 [ 2182.533258][ T7633] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 2182.533291][ T7633] ? __alloc_skb+0x1d7/0x390 [ 2182.533319][ T7633] ? __local_bh_enable_ip+0xd0/0x130 [ 2182.533346][ T7633] ? __alloc_skb+0x193/0x390 [ 2182.533376][ T7633] __alloc_skb+0x1d7/0x390 [ 2182.533404][ T7633] ? __neigh_notify+0x29/0x310 [ 2182.533435][ T7633] __neigh_notify+0x15c/0x310 [ 2182.533467][ T7633] neigh_cleanup_and_release+0xa0/0x270 [ 2182.533497][ T7633] neigh_changeaddr+0xde/0x130 [ 2182.533524][ T7633] ndisc_netdev_event+0x18f/0x4d0 [ 2182.533556][ T7633] notifier_call_chain+0x19d/0x3a0 [ 2182.533588][ T7633] call_netdevice_notifiers+0x90/0xd0 [ 2182.533615][ T7633] ? __pfx_call_netdevice_notifiers+0x10/0x10 [ 2182.533641][ T7633] ? nla_memcpy+0x5b/0xc0 [ 2182.533711][ T7633] do_setlink+0xe63/0x4590 [ 2182.533735][ T7633] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2182.533778][ T7633] ? __pfx_do_setlink+0x10/0x10 [ 2182.533802][ T7633] ? __pfx_stack_trace_save+0x10/0x10 [ 2182.533838][ T7633] ? unwind_next_frame+0xa5/0x23c0 [ 2182.533862][ T7633] ? lock_acquire+0xf1/0x330 [ 2182.533896][ T7633] ? __mutex_trylock_common+0x158/0x260 [ 2182.533925][ T7633] ? __pfx___mutex_trylock_common+0x10/0x10 [ 2182.533957][ T7633] ? rcu_is_watching+0x15/0xb0 [ 2182.533983][ T7633] ? trace_contention_end+0x39/0x100 [ 2182.534010][ T7633] ? __mutex_lock+0x319/0x1300 [ 2182.534039][ T7633] ? __pfx___nla_validate_parse+0x10/0x10 [ 2182.534069][ T7633] ? rtnl_newlink+0x8a1/0x1be0 [ 2182.534103][ T7633] ? __pfx___mutex_lock+0x10/0x10 [ 2182.534144][ T7633] ? ns_capable+0x89/0xe0 [ 2182.534173][ T7633] rtnl_newlink+0x147a/0x1be0 [ 2182.534216][ T7633] ? __pfx_rtnl_newlink+0x10/0x10 [ 2182.534243][ T7633] ? do_syscall_64+0xe2/0xf80 [ 2182.534270][ T7633] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2182.534329][ T7633] ? kasan_quarantine_put+0xbb/0x1f0 [ 2182.534349][ T7633] ? lockdep_hardirqs_on+0x7a/0x110 [ 2182.534382][ T7633] ? kmem_cache_free+0x195/0x610 [ 2182.534401][ T7633] ? nlmon_xmit+0xb0/0x100 [ 2182.534435][ T7633] ? __lock_acquire+0x6b5/0x2cf0 [ 2182.534467][ T7633] ? __local_bh_enable_ip+0xd0/0x130 [ 2182.534489][ T7633] ? lockdep_hardirqs_on+0x7a/0x110 [ 2182.534516][ T7633] ? __dev_queue_xmit+0x2a7/0x32b0 [ 2182.534538][ T7633] ? __local_bh_enable_ip+0xd0/0x130 [ 2182.534558][ T7633] ? __dev_queue_xmit+0x2a7/0x32b0 [ 2182.534588][ T7633] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 2182.534634][ T7633] ? __pfx_rtnl_newlink+0x10/0x10 [ 2182.534664][ T7633] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 2182.534723][ T7633] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 2182.534752][ T7633] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2182.534781][ T7633] ? ref_tracker_free+0x693/0x840 [ 2182.534811][ T7633] ? __copy_skb_header+0xa3/0x4a0 [ 2182.534835][ T7633] ? __pfx_ref_tracker_free+0x10/0x10 [ 2182.534889][ T7633] netlink_rcv_skb+0x232/0x4b0 [ 2182.534912][ T7633] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2182.534944][ T7633] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2182.534976][ T7633] ? netlink_deliver_tap+0x2e/0x1b0 [ 2182.535007][ T7633] netlink_unicast+0x80f/0x9b0 [ 2182.535046][ T7633] ? __pfx_netlink_unicast+0x10/0x10 [ 2182.535076][ T7633] ? __alloc_skb+0x193/0x390 [ 2182.535104][ T7633] ? netlink_sendmsg+0x650/0xb40 [ 2182.535124][ T7633] ? skb_put+0x11b/0x210 [ 2182.535158][ T7633] netlink_sendmsg+0x813/0xb40 [ 2182.535190][ T7633] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2182.535215][ T7633] ? aa_file_perm+0x12d/0x1630 [ 2182.535242][ T7633] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2182.535272][ T7633] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2182.535291][ T7633] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2182.535315][ T7633] __sock_sendmsg+0x21c/0x270 [ 2182.535342][ T7633] ____sys_sendmsg+0x4d7/0x810 [ 2182.535362][ T7633] ? __might_fault+0xaf/0x130 [ 2182.535399][ T7633] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2182.535429][ T7633] ? import_iovec+0x73/0xa0 [ 2182.535455][ T7633] ___sys_sendmsg+0x2a5/0x360 [ 2182.535474][ T7633] ? __lock_acquire+0x6b5/0x2cf0 [ 2182.535500][ T7633] ? __pfx____sys_sendmsg+0x10/0x10 [ 2182.535558][ T7633] ? __fget_files+0x2a/0x420 [ 2182.535583][ T7633] ? __fget_files+0x3a0/0x420 [ 2182.535620][ T7633] __x64_sys_sendmsg+0x1bd/0x2a0 [ 2182.535643][ T7633] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2182.535675][ T7633] ? __pfx_ksys_write+0x10/0x10 [ 2182.535715][ T7633] do_syscall_64+0xe2/0xf80 [ 2182.535742][ T7633] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2182.535762][ T7633] ? trace_irq_disable+0x37/0x100 [ 2182.535789][ T7633] ? clear_bhb_loop+0x60/0xb0 [ 2182.535814][ T7633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2182.535834][ T7633] RIP: 0033:0x7fb91eb9acb9 [ 2182.535871][ T7633] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2182.535889][ T7633] RSP: 002b:00007fb91fa5e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2182.535912][ T7633] RAX: ffffffffffffffda RBX: 00007fb91ee15fa0 RCX: 00007fb91eb9acb9 [ 2182.535927][ T7633] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000006 [ 2182.535947][ T7633] RBP: 00007fb91fa5e090 R08: 0000000000000000 R09: 0000000000000000 [ 2182.535973][ T7633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2182.535985][ T7633] R13: 00007fb91ee16038 R14: 00007fb91ee15fa0 R15: 00007fb91ef3fa48 [ 2182.536038][ T7633] [ 2183.088676][T17414] usb 5-1: device descriptor read/64, error -71 [ 2183.263114][T17414] usb usb5-port1: attempt power cycle [ 2183.608907][ T7642] netlink: 60 bytes leftover after parsing attributes in process `syz.5.9918'. [ 2183.623489][T17414] usb 5-1: new low-speed USB device number 121 using dummy_hcd [ 2183.631885][ T7642] unsupported nlmsg_type 40 [ 2183.643933][T17414] usb 5-1: device descriptor read/8, error -71 [ 2183.883566][T17414] usb 5-1: new low-speed USB device number 122 using dummy_hcd [ 2183.904740][T17414] usb 5-1: device descriptor read/8, error -71 [ 2184.013951][T17414] usb usb5-port1: unable to enumerate USB device [ 2184.085104][ T7646] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9919'. [ 2184.522816][ T7652] Invalid logical block size (5) [ 2185.001275][ T7666] netlink: 'syz.5.9928': attribute type 1 has an invalid length. [ 2185.042057][ T7666] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2185.072619][ T7666] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 2185.143751][T17414] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 2185.306587][T17414] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 2185.318957][T17414] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 2185.330537][T17414] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 2185.340807][T17414] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2185.371949][T17414] usb 5-1: config 0 descriptor?? [ 2185.519569][ T7678] syzkaller1: entered promiscuous mode [ 2185.525292][ T7678] syzkaller1: entered allmulticast mode [ 2185.593695][T17414] ath6kl: Failed to submit usb control message: -71 [ 2185.600370][T17414] ath6kl: unable to send the bmi data to the device: -71 [ 2185.650714][T17414] ath6kl: Unable to send get target info: -71 [ 2185.693932][T17414] ath6kl: Failed to init ath6kl core: -71 [ 2185.700940][T17414] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 2185.813874][T17414] usb 5-1: USB disconnect, device number 123 [ 2185.915539][ T7684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9933'. [ 2186.107213][ T7691] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2186.127470][ T7693] netlink: 'syz.0.9936': attribute type 10 has an invalid length. [ 2186.139123][ T7693] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9936'. [ 2186.148452][ T7693] dummy0: entered promiscuous mode [ 2186.165699][ T7693] bridge0: port 3(dummy0) entered blocking state [ 2186.172164][ T7693] bridge0: port 3(dummy0) entered disabled state [ 2186.181881][ T7693] dummy0: entered allmulticast mode [ 2186.250362][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 2186.250386][ T30] audit: type=1326 audit(1769011524.749:3155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7685 comm="syz.5.9934" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb99239acb9 code=0x0 [ 2186.327706][ T7697] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9937'. [ 2186.746258][ T7711] tipc: Resetting bearer [ 2186.827281][ T7713] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9943'. [ 2186.935860][ T7713] vlan3: entered promiscuous mode [ 2186.951225][ T7709] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9941'. [ 2187.533127][ T7726] xt_hashlimit: size too large, truncated to 1048576 [ 2187.554859][T17414] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 2187.727688][T17414] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2187.748492][T17414] usb 6-1: not running at top speed; connect to a high speed hub [ 2187.768420][T17414] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2187.792142][T17414] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2187.812198][T17414] usb 6-1: string descriptor 0 read error: -22 [ 2187.821145][T17414] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2187.831234][T17414] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2187.872465][T17414] usb 6-1: 0:2 : does not exist [ 2187.970799][ T7733] FAULT_INJECTION: forcing a failure. [ 2187.970799][ T7733] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2187.984553][ T7733] CPU: 0 UID: 0 PID: 7733 Comm: syz.2.9948 Tainted: G L syzkaller #0 PREEMPT(full) [ 2187.984591][ T7733] Tainted: [L]=SOFTLOCKUP [ 2187.984599][ T7733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 2187.984612][ T7733] Call Trace: [ 2187.984622][ T7733] [ 2187.984631][ T7733] dump_stack_lvl+0xe8/0x150 [ 2187.984663][ T7733] should_fail_ex+0x412/0x560 [ 2187.984698][ T7733] _copy_from_user+0x2d/0xb0 [ 2187.984723][ T7733] do_sock_getsockopt+0x165/0x3f0 [ 2187.984760][ T7733] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 2187.984794][ T7733] ? __fget_files+0x3a0/0x420 [ 2187.984820][ T7733] ? __fget_files+0x2a/0x420 [ 2187.984852][ T7733] __x64_sys_getsockopt+0x1a4/0x240 [ 2187.984895][ T7733] do_syscall_64+0xe2/0xf80 [ 2187.984925][ T7733] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2187.984946][ T7733] ? clear_bhb_loop+0x60/0xb0 [ 2187.984972][ T7733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2187.984992][ T7733] RIP: 0033:0x7fb91eb9acb9 [ 2187.985011][ T7733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2187.985029][ T7733] RSP: 002b:00007fb91fa5e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 2187.985052][ T7733] RAX: ffffffffffffffda RBX: 00007fb91ee15fa0 RCX: 00007fb91eb9acb9 [ 2187.985068][ T7733] RDX: 0000000000000009 RSI: 0000000000000001 RDI: 0000000000000003 [ 2187.985081][ T7733] RBP: 00007fb91fa5e090 R08: 0000200000000040 R09: 0000000000000000 [ 2187.985095][ T7733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2187.985107][ T7733] R13: 00007fb91ee16038 R14: 00007fb91ee15fa0 R15: 00007fb91ef3fa48 [ 2187.985140][ T7733] [ 2188.757206][T17414] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 2188.826402][T17414] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 2188.858403][T17414] usb 6-1: 5:0: failed to get current value for ch 1 (-22) [ 2188.903655][T17414] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 2188.925829][T17414] usb 6-1: USB disconnect, device number 31 [ 2188.973221][ T7751] syzkaller1: entered promiscuous mode [ 2188.986758][ T7751] syzkaller1: entered allmulticast mode [ 2189.418691][ T7767] FAULT_INJECTION: forcing a failure. [ 2189.418691][ T7767] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2189.433026][ T7767] CPU: 0 UID: 0 PID: 7767 Comm: syz.1.9960 Tainted: G L syzkaller #0 PREEMPT(full) [ 2189.433059][ T7767] Tainted: [L]=SOFTLOCKUP [ 2189.433068][ T7767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 2189.433082][ T7767] Call Trace: [ 2189.433091][ T7767] [ 2189.433101][ T7767] dump_stack_lvl+0xe8/0x150 [ 2189.433134][ T7767] should_fail_ex+0x412/0x560 [ 2189.433170][ T7767] _copy_from_user+0x2d/0xb0 [ 2189.433194][ T7767] sk_getsockopt+0x1c3/0x27d0 [ 2189.433233][ T7767] ? __pfx_sk_getsockopt+0x10/0x10 [ 2189.433279][ T7767] ? aa_sk_perm+0x15a/0x960 [ 2189.433311][ T7767] ? __might_fault+0xaf/0x130 [ 2189.433354][ T7767] ? __might_fault+0xaf/0x130 [ 2189.433405][ T7767] do_sock_getsockopt+0x223/0x3f0 [ 2189.433443][ T7767] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 2189.433475][ T7767] ? __fget_files+0x3a0/0x420 [ 2189.433500][ T7767] ? __fget_files+0x2a/0x420 [ 2189.433534][ T7767] __x64_sys_getsockopt+0x1a4/0x240 [ 2189.433576][ T7767] do_syscall_64+0xe2/0xf80 [ 2189.433606][ T7767] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2189.433627][ T7767] ? trace_irq_disable+0x37/0x100 [ 2189.433654][ T7767] ? clear_bhb_loop+0x60/0xb0 [ 2189.433687][ T7767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2189.433709][ T7767] RIP: 0033:0x7fdb80d9acb9 [ 2189.433728][ T7767] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2189.433746][ T7767] RSP: 002b:00007fdb81cad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 2189.433769][ T7767] RAX: ffffffffffffffda RBX: 00007fdb81015fa0 RCX: 00007fdb80d9acb9 [ 2189.433785][ T7767] RDX: 0000000000000009 RSI: 0000000000000001 RDI: 0000000000000003 [ 2189.433799][ T7767] RBP: 00007fdb81cad090 R08: 0000200000000040 R09: 0000000000000000 [ 2189.433814][ T7767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2189.433827][ T7767] R13: 00007fdb81016038 R14: 00007fdb81015fa0 R15: 00007fdb8113fa48 [ 2189.433860][ T7767] [ 2189.820327][ T7770] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9959'. [ 2189.976212][ T7772] netlink: 104 bytes leftover after parsing attributes in process `syz.1.9961'. [ 2190.851608][ T7792] fuse: Bad value for 'fd' [ 2190.940044][ T7788] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2190.991139][ T7788] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2191.187234][ T5869] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 2191.209345][ T7799] xt_cluster: node mask cannot exceed total number of nodes [ 2191.284096][ T7801] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9971'. [ 2191.443400][ T5869] usb 5-1: Using ep0 maxpacket: 8 [ 2191.456541][ T5869] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 2191.523440][ T5869] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2191.563803][ T5869] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2191.596019][ T5869] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 2191.636602][ T5869] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 2191.671050][ T7808] FAULT_INJECTION: forcing a failure. [ 2191.671050][ T7808] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2191.679646][ T5869] usb 5-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=e6.7f [ 2191.717672][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2191.723947][ T7808] CPU: 0 UID: 0 PID: 7808 Comm: syz.5.9973 Tainted: G L syzkaller #0 PREEMPT(full) [ 2191.724031][ T7808] Tainted: [L]=SOFTLOCKUP [ 2191.724059][ T7808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 2191.724092][ T7808] Call Trace: [ 2191.724113][ T7808] [ 2191.724145][ T7808] dump_stack_lvl+0xe8/0x150 [ 2191.724235][ T7808] should_fail_ex+0x412/0x560 [ 2191.724320][ T7808] _copy_to_user+0x31/0xb0 [ 2191.724385][ T7808] sk_getsockopt+0x1bee/0x27d0 [ 2191.724480][ T7808] ? __pfx_sk_getsockopt+0x10/0x10 [ 2191.724601][ T7808] ? aa_sk_perm+0x15a/0x960 [ 2191.724676][ T7808] ? __might_fault+0xaf/0x130 [ 2191.724774][ T7808] ? __might_fault+0xaf/0x130 [ 2191.724950][ T7808] do_sock_getsockopt+0x223/0x3f0 [ 2191.725045][ T7808] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 2191.725139][ T7808] ? __fget_files+0x3a0/0x420 [ 2191.725208][ T7808] ? __fget_files+0x2a/0x420 [ 2191.725293][ T7808] __x64_sys_getsockopt+0x1a4/0x240 [ 2191.725397][ T7808] do_syscall_64+0xe2/0xf80 [ 2191.725478][ T7808] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2191.725530][ T7808] ? trace_irq_disable+0x37/0x100 [ 2191.725596][ T7808] ? clear_bhb_loop+0x60/0xb0 [ 2191.725673][ T7808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2191.725693][ T7808] RIP: 0033:0x7fb99239acb9 [ 2191.725712][ T7808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2191.725731][ T7808] RSP: 002b:00007fb993253028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 2191.725752][ T7808] RAX: ffffffffffffffda RBX: 00007fb992615fa0 RCX: 00007fb99239acb9 [ 2191.725767][ T7808] RDX: 0000000000000009 RSI: 0000000000000001 RDI: 0000000000000003 [ 2191.725778][ T7808] RBP: 00007fb993253090 R08: 0000200000000040 R09: 0000000000000000 [ 2191.725791][ T7808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2191.725803][ T7808] R13: 00007fb992616038 R14: 00007fb992615fa0 R15: 00007fb99273fa48 [ 2191.725835][ T7808] [ 2192.183763][ T5869] usb 5-1: Product: syz [ 2192.195012][ T5869] usb 5-1: Manufacturer: syz [ 2192.199667][ T5869] usb 5-1: SerialNumber: syz [ 2192.247249][ T5869] usb 5-1: config 0 descriptor?? [ 2192.308589][ T5869] usbtouchscreen 5-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 2192.540240][T17414] usb 5-1: USB disconnect, device number 124 [ 2192.651015][ T7823] sctp: [Deprecated]: syz.1.9978 (pid 7823) Use of int in max_burst socket option. [ 2192.651015][ T7823] Use struct sctp_assoc_value instead [ 2192.774074][ T5869] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 2192.914238][ T5869] usb 6-1: device descriptor read/64, error -71 [ 2193.165778][ T5869] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 2193.200854][ T5841] Bluetooth: hci5: command 0x0406 tx timeout [ 2193.373709][ T5869] usb 6-1: device descriptor read/64, error -71 [ 2193.419305][T26840] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 2193.520497][ T5869] usb usb6-port1: attempt power cycle [ 2193.603591][T19990] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 2193.617458][T26840] usb 3-1: config 0 has an invalid interface number: 33 but max is 0 [ 2193.640679][T26840] usb 3-1: config 0 has no interface number 0 [ 2193.653841][T26840] usb 3-1: New USB device found, idVendor=24cf, idProduct=59e4, bcdDevice= 9.43 [ 2193.686016][T26840] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2193.715785][T26840] usb 3-1: config 0 descriptor?? [ 2193.747320][T26840] usb-storage 3-1:0.33: USB Mass Storage device detected [ 2193.804996][T19990] usb 5-1: Using ep0 maxpacket: 16 [ 2193.824138][T19990] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2193.880445][T19990] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2193.891257][ T5869] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 2193.921710][T19990] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 2193.941412][ T5869] usb 6-1: device descriptor read/8, error -71 [ 2193.947798][T19990] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2193.981420][ T7824] syz.1.9978 (7824): drop_caches: 2 [ 2193.998112][T19990] usb 5-1: config 0 descriptor?? [ 2194.213551][ T5869] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 2194.264625][ T5869] usb 6-1: device descriptor read/8, error -71 [ 2194.288319][ T7838] vlan3: entered promiscuous mode [ 2194.403784][ T5869] usb usb6-port1: unable to enumerate USB device [ 2194.662432][ T7833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2194.683003][ T7833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2194.728270][T19990] usbhid 5-1:0.0: can't add hid device: -71 [ 2194.748721][T19990] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2194.802818][ T7845] xt_hashlimit: size too large, truncated to 1048576 [ 2194.819622][T19990] usb 5-1: USB disconnect, device number 125 [ 2194.842512][ T7847] FAULT_INJECTION: forcing a failure. [ 2194.842512][ T7847] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2194.898052][ T7847] CPU: 0 UID: 0 PID: 7847 Comm: syz.1.9985 Tainted: G L syzkaller #0 PREEMPT(full) [ 2194.898086][ T7847] Tainted: [L]=SOFTLOCKUP [ 2194.898095][ T7847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 2194.898107][ T7847] Call Trace: [ 2194.898117][ T7847] [ 2194.898126][ T7847] dump_stack_lvl+0xe8/0x150 [ 2194.898158][ T7847] should_fail_ex+0x412/0x560 [ 2194.898194][ T7847] _copy_to_user+0x31/0xb0 [ 2194.898221][ T7847] sk_getsockopt+0x1c98/0x27d0 [ 2194.898259][ T7847] ? __pfx_sk_getsockopt+0x10/0x10 [ 2194.898303][ T7847] ? aa_sk_perm+0x15a/0x960 [ 2194.898334][ T7847] ? __might_fault+0xaf/0x130 [ 2194.898366][ T7847] ? __might_fault+0xaf/0x130 [ 2194.898416][ T7847] do_sock_getsockopt+0x223/0x3f0 [ 2194.898454][ T7847] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 2194.898488][ T7847] ? __fget_files+0x3a0/0x420 [ 2194.898513][ T7847] ? __fget_files+0x2a/0x420 [ 2194.898549][ T7847] __x64_sys_getsockopt+0x1a4/0x240 [ 2194.898591][ T7847] do_syscall_64+0xe2/0xf80 [ 2194.898621][ T7847] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2194.898643][ T7847] ? clear_bhb_loop+0x60/0xb0 [ 2194.898668][ T7847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2194.898689][ T7847] RIP: 0033:0x7fdb80d9acb9 [ 2194.898708][ T7847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2194.898726][ T7847] RSP: 002b:00007fdb81cad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 2194.898749][ T7847] RAX: ffffffffffffffda RBX: 00007fdb81015fa0 RCX: 00007fdb80d9acb9 [ 2194.898764][ T7847] RDX: 0000000000000009 RSI: 0000000000000001 RDI: 0000000000000003 [ 2194.898776][ T7847] RBP: 00007fdb81cad090 R08: 0000200000000040 R09: 0000000000000000 [ 2194.898789][ T7847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2194.898801][ T7847] R13: 00007fdb81016038 R14: 00007fdb81015fa0 R15: 00007fdb8113fa48 [ 2194.898833][ T7847] [ 2195.651177][ T7857] Invalid logical block size (5) [ 2195.662739][ T7858] syzkaller1: entered promiscuous mode [ 2196.081265][ T7867] bridge0: port 2(bridge_slave_1) entered disabled state [ 2196.088864][ T7867] bridge0: port 1(bridge_slave_0) entered disabled state [ 2196.160824][ T7867] tipc: Resetting bearer [ 2196.170327][ T7867] tipc: Resetting bearer [ 2196.265792][ T7875] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2196.390094][ T7867] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2196.426524][ T7867] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2196.705757][ T7867] vlan2: left allmulticast mode [ 2196.717261][ T7867] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 2196.793876][ T7867] bridge1: left allmulticast mode [ 2196.832620][ T7867] syzkaller1: left promiscuous mode [ 2196.843482][ T7867] syzkaller1: left allmulticast mode [ 2196.867864][T15922] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2196.901178][T15922] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2196.944248][T15922] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2196.975950][T15922] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2197.014542][ T5869] usb 3-1: USB disconnect, device number 119 [ 2197.168921][ T7879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2197.199064][ T7879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2197.447506][ T7888] FAULT_INJECTION: forcing a failure. [ 2197.447506][ T7888] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2197.463557][ T5869] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 2197.493550][ T7888] CPU: 0 UID: 0 PID: 7888 Comm: syz.1.9999 Tainted: G L syzkaller #0 PREEMPT(full) [ 2197.493583][ T7888] Tainted: [L]=SOFTLOCKUP [ 2197.493591][ T7888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 2197.493604][ T7888] Call Trace: [ 2197.493613][ T7888] [ 2197.493622][ T7888] dump_stack_lvl+0xe8/0x150 [ 2197.493653][ T7888] should_fail_ex+0x412/0x560 [ 2197.493687][ T7888] _copy_to_user+0x31/0xb0 [ 2197.493712][ T7888] simple_read_from_buffer+0xe1/0x170 [ 2197.493742][ T7888] proc_fail_nth_read+0x1bb/0x230 [ 2197.493768][ T7888] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2197.493794][ T7888] ? rw_verify_area+0x2a6/0x4d0 [ 2197.493837][ T7888] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2197.493877][ T7888] vfs_read+0x20c/0xa70 [ 2197.493896][ T7888] ? fdget_pos+0x246/0x320 [ 2197.493918][ T7888] ? __pfx___mutex_lock+0x10/0x10 [ 2197.493941][ T7888] ? __pfx_vfs_read+0x10/0x10 [ 2197.493956][ T7888] ? __fget_files+0x2a/0x420 [ 2197.493989][ T7888] ? __fget_files+0x3a0/0x420 [ 2197.494006][ T7888] ? __fget_files+0x2a/0x420 [ 2197.494029][ T7888] ksys_read+0x150/0x270 [ 2197.494044][ T7888] ? __pfx_ksys_read+0x10/0x10 [ 2197.494056][ T7888] ? fput+0xa0/0xd0 [ 2197.494081][ T7888] do_syscall_64+0xe2/0xf80 [ 2197.494101][ T7888] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2197.494114][ T7888] ? trace_irq_disable+0x37/0x100 [ 2197.494133][ T7888] ? clear_bhb_loop+0x60/0xb0 [ 2197.494150][ T7888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2197.494164][ T7888] RIP: 0033:0x7fdb80d5b58e [ 2197.494178][ T7888] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2197.494190][ T7888] RSP: 002b:00007fdb81cacfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2197.494206][ T7888] RAX: ffffffffffffffda RBX: 00007fdb81cad6c0 RCX: 00007fdb80d5b58e [ 2197.494217][ T7888] RDX: 000000000000000f RSI: 00007fdb81cad0a0 RDI: 0000000000000004 [ 2197.494226][ T7888] RBP: 00007fdb81cad090 R08: 0000000000000000 R09: 0000000000000000 [ 2197.494234][ T7888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2197.494243][ T7888] R13: 00007fdb81016038 R14: 00007fdb81015fa0 R15: 00007fdb8113fa48 [ 2197.494265][ T7888] [ 2198.043569][ T5869] usb 3-1: Using ep0 maxpacket: 8 [ 2198.103796][ T5869] usb 3-1: config 8 has an invalid interface number: 18 but max is 0 [ 2198.115991][ T5869] usb 3-1: config 8 has no interface number 0 [ 2198.155050][ T5869] usb 3-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=38.83 [ 2198.164316][ T5869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2198.198120][ T5869] usb 3-1: Product: syz [ 2198.236911][ T5869] usb 3-1: Manufacturer: syz [ 2198.241665][ T5869] usb 3-1: SerialNumber: syz [ 2198.276949][ T5869] kobil_sct 3-1:8.18: required endpoints missing [ 2198.382026][ T7893] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10000'. [ 2198.478068][T26840] usb 3-1: USB disconnect, device number 120 [ 2198.508634][ T7894] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10000'. [ 2198.793879][ T7902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10003'. [ 2198.980607][ T7904] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10004'. [ 2199.175143][ T7908] netlink: 'syz.5.10006': attribute type 10 has an invalid length. [ 2200.053419][T27998] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 2200.100152][ T7932] netlink: 212048 bytes leftover after parsing attributes in process `syz.1.10011'. [ 2200.164072][ T30] audit: type=1800 audit(1769011538.679:3156): pid=7931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.10011" name="file0" dev="fuse" ino=2 res=0 errno=0 [ 2200.225241][ T7934] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 3, id = 0 [ 2200.256741][T27998] usb 5-1: config 0 has an invalid descriptor of length 226, skipping remainder of the config [ 2200.296333][T27998] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2200.344905][T27998] usb 5-1: New USB device found, idVendor=025f, idProduct=0000, bcdDevice= 0.00 [ 2200.403737][T27998] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2200.447821][T27998] usb 5-1: config 0 descriptor?? [ 2200.683530][T27998] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 2200.843581][T27998] usb 2-1: Using ep0 maxpacket: 8 [ 2200.851618][T27998] usb 2-1: too many configurations: 249, using maximum allowed: 8 [ 2200.903247][ T7939] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10013'. [ 2200.941429][T27998] usb 2-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=b3.ff [ 2200.972525][ T7939] vlan2: entered promiscuous mode [ 2200.988218][T27998] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=2 [ 2201.003413][ T7939] team0: entered promiscuous mode [ 2201.019341][ T7939] team_slave_0: entered promiscuous mode [ 2201.034072][ T7939] team_slave_1: entered promiscuous mode [ 2201.043595][T27998] usb 2-1: Product: syz [ 2201.058893][ T7939] batadv1: entered promiscuous mode [ 2201.109709][T27998] usb 2-1: Manufacturer: syz [ 2201.131595][T27998] usb 2-1: SerialNumber: syz [ 2201.178813][T27998] usb 2-1: config 0 descriptor?? [ 2201.505445][ T7943] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 2201.653773][T27998] mdc800 2-1:0.0: probe fails -> wrong Number of Configuration [ 2201.674959][ T7946] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10016'. [ 2201.751924][ T7950] netlink: 'syz.5.10017': attribute type 4 has an invalid length. [ 2201.789636][ T7950] loop8: detected capacity change from 0 to 8 [ 2201.812530][T29170] loop8: [CUMANA/ADFS] p1 [ADFS] p1 [ 2201.830083][T29170] loop8: partition table partially beyond EOD, truncated [ 2201.837976][ T7947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2201.861428][ T7947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2201.869957][T29170] loop8: p1 size 3004527350 extends beyond EOD, truncated [ 2201.921324][ T7950] loop8: [CUMANA/ADFS] p1 [ADFS] p1 [ 2201.943489][ T7950] loop8: partition table partially beyond EOD, truncated [ 2201.965444][ T7950] loop8: p1 size 3004527350 extends beyond EOD, truncated [ 2201.989235][ T7957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10018'. [ 2202.005783][ T7957] netlink: 48 bytes leftover after parsing attributes in process `syz.2.10018'. [ 2202.113205][T27998] usb 5-1: USB disconnect, device number 126 [ 2202.525341][ T7966] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10021'. [ 2202.629307][ T7971] syzkaller1: entered allmulticast mode [ 2203.070261][ T30] audit: type=1326 audit(1769011541.579:3157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7974 comm="syz.5.10023" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb99239acb9 code=0x0 [ 2203.173740][ T7979] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2203.562873][ T5869] usb 2-1: USB disconnect, device number 27 [ 2203.645032][ T30] audit: type=1326 audit(1769011542.149:3158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7989 comm="syz.2.10026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb91eb9acb9 code=0x7ffc0000 [ 2203.704459][ T30] audit: type=1326 audit(1769011542.189:3159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7989 comm="syz.2.10026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb91eb9acb9 code=0x7ffc0000 [ 2203.778347][ T30] audit: type=1326 audit(1769011542.189:3160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7989 comm="syz.2.10026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb91eb9acb9 code=0x7ffc0000 [ 2203.825253][ T30] audit: type=1326 audit(1769011542.199:3161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7989 comm="syz.2.10026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb91eb9acb9 code=0x7ffc0000 [ 2203.880231][ T30] audit: type=1326 audit(1769011542.199:3162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7989 comm="syz.2.10026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fb91eb9acb9 code=0x7ffc0000 [ 2203.944922][ T30] audit: type=1326 audit(1769011542.199:3163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7989 comm="syz.2.10026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb91eb9acb9 code=0x7ffc0000 [ 2204.003550][T27998] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 2204.012968][ T30] audit: type=1326 audit(1769011542.199:3164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7989 comm="syz.2.10026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb91eb9acb9 code=0x7ffc0000 [ 2204.071915][ T30] audit: type=1326 audit(1769011542.199:3165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7989 comm="syz.2.10026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fb91eb9acb9 code=0x7ffc0000 [ 2204.325388][ T7995] __nla_validate_parse: 8 callbacks suppressed [ 2204.325422][ T7995] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10028'. [ 2204.388641][ T7995] vlan3: entered promiscuous mode [ 2204.683482][T27998] usb 3-1: Using ep0 maxpacket: 32 [ 2204.906766][ T8008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10030'. [ 2204.932314][ T8008] netlink: 48 bytes leftover after parsing attributes in process `syz.1.10030'. [ 2205.183423][T26840] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 2205.207353][ T8012] netlink: 'syz.5.10032': attribute type 1 has an invalid length. [ 2205.321101][ T8012] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2205.347931][ T8014] bond1: (slave veth0_to_bond): Releasing active interface [ 2205.363473][T26840] usb 5-1: Using ep0 maxpacket: 16 [ 2205.372324][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 2205.372338][ T30] audit: type=1326 audit(1769011543.879:3196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7989 comm="syz.2.10026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb91eb9a94b code=0x7ffc0000 [ 2205.445941][ T8014] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 2205.465669][T26840] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2205.496075][T26840] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 2205.526125][ T30] audit: type=1326 audit(1769011543.919:3197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7989 comm="syz.2.10026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb91eb9a94b code=0x7ffc0000 [ 2205.563077][T26840] usb 5-1: config 1 has no interface number 1 [ 2205.582950][T27998] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2205.593296][T26840] usb 5-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 2205.613916][T27998] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2205.650506][T26840] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 2205.667602][T27998] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 2205.697271][T27998] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2205.713415][ T30] audit: type=1326 audit(1769011543.929:3198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7989 comm="syz.2.10026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb91eb9a94b code=0x7ffc0000 [ 2205.761970][T26840] usb 5-1: config 1 interface 2 has no altsetting 0 [ 2205.772928][T27998] usb 3-1: config 0 descriptor?? [ 2205.808143][T26840] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2205.913895][T26840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2205.945195][ T30] audit: type=1326 audit(1769011544.039:3199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7989 comm="syz.2.10026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb91eb9a94b code=0x7ffc0000 [ 2205.975094][T26840] usb 5-1: Product: syz [ 2205.979301][T26840] usb 5-1: Manufacturer: syz [ 2205.984122][T26840] usb 5-1: SerialNumber: syz [ 2205.998710][ T8019] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2206.091589][ T30] audit: type=1326 audit(1769011544.059:3200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7989 comm="syz.2.10026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb91eb9a94b code=0x7ffc0000 [ 2206.227131][ T30] audit: type=1326 audit(1769011544.069:3201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7989 comm="syz.2.10026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb91eb9a94b code=0x7ffc0000 [ 2206.340390][ T8009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2206.408727][ T30] audit: type=1326 audit(1769011544.079:3202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7989 comm="syz.2.10026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb91eb9a94b code=0x7ffc0000 [ 2206.501784][ T30] audit: type=1326 audit(1769011544.309:3203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7989 comm="syz.2.10026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb91eb9a94b code=0x7ffc0000 [ 2206.602303][ T30] audit: type=1326 audit(1769011544.319:3204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7989 comm="syz.2.10026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb91eb9a94b code=0x7ffc0000 [ 2206.655805][ T8009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2206.692804][T27998] usbhid 3-1:0.0: can't add hid device: -32 [ 2206.711089][ T30] audit: type=1326 audit(1769011544.329:3205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7989 comm="syz.2.10026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb91eb9a94b code=0x7ffc0000 [ 2206.743768][T27998] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 2206.772630][T26840] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 2206.829719][T26840] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 2206.850523][T26840] usb 5-1: selecting invalid altsetting 0 [ 2206.882622][T26840] usb 5-1: selecting invalid altsetting 0 [ 2206.943669][T27998] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 2206.954126][T26840] usb 5-1: USB disconnect, device number 127 [ 2207.027652][T17654] udevd[17654]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2207.093951][T27998] usb 2-1: Using ep0 maxpacket: 32 [ 2207.135667][T27998] usb 2-1: no configurations [ 2207.140951][T27998] usb 2-1: can't read configurations, error -22 [ 2207.283537][T27998] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 2207.473793][T27998] usb 2-1: Using ep0 maxpacket: 32 [ 2207.480285][T27998] usb 2-1: no configurations [ 2207.486347][T27998] usb 2-1: can't read configurations, error -22 [ 2207.494183][T27998] usb usb2-port1: attempt power cycle [ 2207.625262][ T8030] netdevsim netdevsim5: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 2207.648832][ T8030] bridge_slave_0: left allmulticast mode [ 2207.655084][ T8030] bridge_slave_0: left promiscuous mode [ 2207.661207][ T8030] bridge0: port 1(bridge_slave_0) entered disabled state [ 2207.680770][ T8030] bridge_slave_1: left allmulticast mode [ 2207.688862][ T8030] bridge_slave_1: left promiscuous mode [ 2207.697538][ T8030] bridge0: port 2(bridge_slave_1) entered disabled state [ 2207.709279][ T8032] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10036'. [ 2207.732112][ T8032] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10036'. [ 2207.758194][ T8030] bond2: (slave veth0_to_bond): Releasing active interface [ 2207.800005][ T8030] bond0: (slave bond_slave_0): Releasing backup interface [ 2207.816546][ T8030] bond_slave_0: left promiscuous mode [ 2207.833572][T27998] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 2207.841633][ T8030] bond0: (slave bond_slave_1): Releasing backup interface [ 2207.859243][ T8030] bond_slave_1: left promiscuous mode [ 2207.867533][ T8030] team_slave_0: left promiscuous mode [ 2207.875525][T27998] usb 2-1: Using ep0 maxpacket: 32 [ 2207.887911][ T8030] team0: Port device team_slave_0 removed [ 2207.891078][T27998] usb 2-1: no configurations [ 2207.899858][ T8030] team_slave_1: left promiscuous mode [ 2207.908474][ T8030] team0: Port device team_slave_1 removed [ 2207.936424][ T8030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2207.936520][T27998] usb 2-1: can't read configurations, error -22 [ 2207.951567][ T8030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2207.990434][ T8030] net_ratelimit: 495 callbacks suppressed [ 2207.990477][ T8030] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2208.104362][T27998] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 2208.134365][T27998] usb 2-1: Using ep0 maxpacket: 32 [ 2208.142385][T27998] usb 2-1: no configurations [ 2208.155650][T27998] usb 2-1: can't read configurations, error -22 [ 2208.183733][T27998] usb usb2-port1: unable to enumerate USB device [ 2209.161883][ T5869] usb 3-1: USB disconnect, device number 121 [ 2209.306944][ T8047] Invalid logical block size (5) [ 2209.405044][ T8049] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10042'. [ 2209.421779][ T8049] vlan3: entered promiscuous mode [ 2209.828277][ T8063] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 2210.276932][ T8069] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10047'. [ 2210.533631][ T8073] xt_policy: output policy not valid in PREROUTING and INPUT [ 2211.453547][ T8087] vlan3: entered promiscuous mode [ 2211.593966][ T8095] syzkaller1: entered promiscuous mode [ 2211.636818][ T8095] syzkaller1: entered allmulticast mode [ 2211.936690][ T8106] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2212.423494][T27998] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 2212.587007][T27998] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2212.613319][T27998] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 2212.625547][ T8120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10062'. [ 2212.644861][T27998] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2212.652997][ T8120] netlink: 48 bytes leftover after parsing attributes in process `syz.1.10062'. [ 2212.674545][T27998] aiptek 3-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 2212.874126][T26840] usb 3-1: USB disconnect, device number 122 [ 2212.963487][ T5869] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 2213.134408][ T5869] usb 5-1: Using ep0 maxpacket: 8 [ 2213.142721][ T5869] usb 5-1: too many configurations: 249, using maximum allowed: 8 [ 2213.187338][ T5869] usb 5-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=b3.ff [ 2213.214777][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=2 [ 2213.233739][ T5869] usb 5-1: Product: syz [ 2213.243794][ T5869] usb 5-1: Manufacturer: syz [ 2213.254371][ T5869] usb 5-1: SerialNumber: syz [ 2213.272294][ T5869] usb 5-1: config 0 descriptor?? [ 2213.689628][ T5869] mdc800 5-1:0.0: probe fails -> wrong Number of Configuration [ 2213.808269][ T8142] FAULT_INJECTION: forcing a failure. [ 2213.808269][ T8142] name failslab, interval 1, probability 0, space 0, times 0 [ 2213.841816][ T8142] CPU: 1 UID: 0 PID: 8142 Comm: syz.5.10073 Tainted: G L syzkaller #0 PREEMPT(full) [ 2213.841852][ T8142] Tainted: [L]=SOFTLOCKUP [ 2213.841858][ T8142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 2213.841868][ T8142] Call Trace: [ 2213.841874][ T8142] [ 2213.841881][ T8142] dump_stack_lvl+0xe8/0x150 [ 2213.841905][ T8142] should_fail_ex+0x412/0x560 [ 2213.841931][ T8142] should_failslab+0xa8/0x100 [ 2213.841950][ T8142] __kmalloc_noprof+0xde/0x7e0 [ 2213.841963][ T8142] ? kfree+0x4d/0x650 [ 2213.841981][ T8142] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 2213.842007][ T8142] tomoyo_realpath_from_path+0xe3/0x5d0 [ 2213.842028][ T8142] ? tomoyo_domain+0xd7/0x130 [ 2213.842053][ T8142] ? tomoyo_path_number_perm+0x219/0x630 [ 2213.842070][ T8142] tomoyo_path_number_perm+0x246/0x630 [ 2213.842091][ T8142] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2213.842108][ T8142] ? __lock_acquire+0x6b5/0x2cf0 [ 2213.842133][ T8142] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 2213.842190][ T8142] ? __fget_files+0x2a/0x420 [ 2213.842210][ T8142] ? __fget_files+0x2a/0x420 [ 2213.842228][ T8142] ? __fget_files+0x3a0/0x420 [ 2213.842246][ T8142] ? __fget_files+0x2a/0x420 [ 2213.842267][ T8142] security_file_ioctl+0xc3/0x2a0 [ 2213.842286][ T8142] __se_sys_ioctl+0x47/0x170 [ 2213.842311][ T8142] do_syscall_64+0xe2/0xf80 [ 2213.842340][ T8142] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2213.842355][ T8142] ? trace_irq_disable+0x37/0x100 [ 2213.842375][ T8142] ? clear_bhb_loop+0x60/0xb0 [ 2213.842393][ T8142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2213.842407][ T8142] RIP: 0033:0x7fb99239acb9 [ 2213.842421][ T8142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2213.842434][ T8142] RSP: 002b:00007fb993253028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2213.842450][ T8142] RAX: ffffffffffffffda RBX: 00007fb992615fa0 RCX: 00007fb99239acb9 [ 2213.842461][ T8142] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 2213.842470][ T8142] RBP: 00007fb993253090 R08: 0000000000000000 R09: 0000000000000000 [ 2213.842480][ T8142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2213.842489][ T8142] R13: 00007fb992616038 R14: 00007fb992615fa0 R15: 00007fb99273fa48 [ 2213.842512][ T8142] [ 2213.842519][ T8142] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2214.075234][ T8139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2214.090448][T27998] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 2214.105258][ T8139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2214.221737][ T8148] syzkaller1: entered promiscuous mode [ 2214.243425][ T8148] syzkaller1: entered allmulticast mode [ 2214.260005][T27998] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 2214.277232][T27998] usb 3-1: config 1 has an invalid descriptor of length 248, skipping remainder of the config [ 2214.298380][T27998] usb 3-1: config 1 interface 0 altsetting 181 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2214.332672][T27998] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2214.348733][T27998] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2214.359709][T27998] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2214.368166][T27998] usb 3-1: Product: ˝憒㑆ఠ㷆乖䢋듖略鲈䘈苬㿓鈓ꊐݜㄿ↦裌莡ꉳ咆纥㉸從ழ讧걿⨔亓뉭얄슀葋䤝빗馿㞘톷注栴享◗◧報ꓨ莏藷⢞덥ﯕ좢떸枱嘯떦摵﹧겥鈐ᜇ䤬漳 [ 2214.390430][T27998] usb 3-1: SerialNumber: syz [ 2214.492292][ T8152] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2214.600579][ T8156] FAULT_INJECTION: forcing a failure. [ 2214.600579][ T8156] name failslab, interval 1, probability 0, space 0, times 0 [ 2214.616008][T27998] cdc_ether 3-1:1.0: skipping garbage [ 2214.639545][T27998] cdc_ether 3-1:1.0: skipping garbage [ 2214.648456][ T8156] CPU: 1 UID: 0 PID: 8156 Comm: syz.1.10077 Tainted: G L syzkaller #0 PREEMPT(full) [ 2214.648492][ T8156] Tainted: [L]=SOFTLOCKUP [ 2214.648500][ T8156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 2214.648512][ T8156] Call Trace: [ 2214.648540][ T8156] [ 2214.648549][ T8156] dump_stack_lvl+0xe8/0x150 [ 2214.648581][ T8156] should_fail_ex+0x412/0x560 [ 2214.648617][ T8156] should_failslab+0xa8/0x100 [ 2214.648646][ T8156] __kmalloc_cache_noprof+0x83/0x6e0 [ 2214.648669][ T8156] ? ip_set_pernet+0x23/0x240 [ 2214.648710][ T8156] ? ip_set_pernet+0x23/0x240 [ 2214.648737][ T8156] ? ip_set_create+0x391/0x1a40 [ 2214.648759][ T8156] ip_set_create+0x391/0x1a40 [ 2214.648783][ T8156] ? rcu_is_watching+0x15/0xb0 [ 2214.648818][ T8156] ? __pfx_ip_set_create+0x10/0x10 [ 2214.648871][ T8156] nfnetlink_rcv_msg+0xc00/0x12c0 [ 2214.648904][ T8156] ? nfnetlink_rcv_msg+0x229/0x12c0 [ 2214.648972][ T8156] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 2214.649031][ T8156] ? __lock_acquire+0x6b5/0x2cf0 [ 2214.649075][ T8156] netlink_rcv_skb+0x232/0x4b0 [ 2214.649097][ T8156] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 2214.649131][ T8156] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2214.649164][ T8156] ? bpf_lsm_capable+0x9/0x20 [ 2214.649188][ T8156] ? security_capable+0x7e/0x2c0 [ 2214.649227][ T8156] nfnetlink_rcv+0x2c0/0x27b0 [ 2214.649261][ T8156] ? is_bpf_text_address+0x292/0x2b0 [ 2214.649307][ T8156] ? kernel_text_address+0xa5/0xe0 [ 2214.649341][ T8156] ? __kernel_text_address+0xd/0x30 [ 2214.649370][ T8156] ? unwind_get_return_address+0x4d/0x90 [ 2214.649397][ T8156] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2214.649429][ T8156] ? arch_stack_walk+0xfb/0x150 [ 2214.649463][ T8156] ? __lock_acquire+0x6b5/0x2cf0 [ 2214.649489][ T8156] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 2214.649522][ T8156] ? stack_depot_save_flags+0x33/0x810 [ 2214.649555][ T8156] ? __lock_acquire+0x6b5/0x2cf0 [ 2214.649585][ T8156] ? __lock_acquire+0x6b5/0x2cf0 [ 2214.649617][ T8156] ? __netlink_lookup+0xc6/0x8b0 [ 2214.649653][ T8156] ? netlink_deliver_tap+0x2e/0x1b0 [ 2214.649676][ T8156] ? netlink_deliver_tap+0x2e/0x1b0 [ 2214.649705][ T8156] ? netlink_deliver_tap+0x2e/0x1b0 [ 2214.649735][ T8156] netlink_unicast+0x80f/0x9b0 [ 2214.649776][ T8156] ? __pfx_netlink_unicast+0x10/0x10 [ 2214.649805][ T8156] ? __alloc_skb+0x193/0x390 [ 2214.649836][ T8156] ? netlink_sendmsg+0x650/0xb40 [ 2214.649857][ T8156] ? skb_put+0x11b/0x210 [ 2214.649891][ T8156] netlink_sendmsg+0x813/0xb40 [ 2214.649923][ T8156] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2214.649949][ T8156] ? aa_file_perm+0x12d/0x1630 [ 2214.649977][ T8156] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2214.650007][ T8156] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2214.650027][ T8156] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2214.650051][ T8156] __sock_sendmsg+0x21c/0x270 [ 2214.650080][ T8156] ____sys_sendmsg+0x4d7/0x810 [ 2214.650100][ T8156] ? __might_fault+0xaf/0x130 [ 2214.650136][ T8156] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2214.650165][ T8156] ? import_iovec+0x73/0xa0 [ 2214.650190][ T8156] ___sys_sendmsg+0x2a5/0x360 [ 2214.650211][ T8156] ? __lock_acquire+0x6b5/0x2cf0 [ 2214.650237][ T8156] ? __pfx____sys_sendmsg+0x10/0x10 [ 2214.650303][ T8156] ? __fget_files+0x2a/0x420 [ 2214.650331][ T8156] ? __fget_files+0x3a0/0x420 [ 2214.650367][ T8156] __x64_sys_sendmsg+0x1bd/0x2a0 [ 2214.650392][ T8156] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2214.650432][ T8156] ? __pfx_ksys_write+0x10/0x10 [ 2214.650464][ T8156] do_syscall_64+0xe2/0xf80 [ 2214.650492][ T8156] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2214.650512][ T8156] ? trace_irq_disable+0x37/0x100 [ 2214.650539][ T8156] ? clear_bhb_loop+0x60/0xb0 [ 2214.650565][ T8156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2214.650585][ T8156] RIP: 0033:0x7fdb80d9acb9 [ 2214.650602][ T8156] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2214.650619][ T8156] RSP: 002b:00007fdb81cad028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2214.650638][ T8156] RAX: ffffffffffffffda RBX: 00007fdb81015fa0 RCX: 00007fdb80d9acb9 [ 2214.650653][ T8156] RDX: 0000000020004000 RSI: 0000200000000040 RDI: 0000000000000003 [ 2214.650666][ T8156] RBP: 00007fdb81cad090 R08: 0000000000000000 R09: 0000000000000000 [ 2214.650679][ T8156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2214.650691][ T8156] R13: 00007fdb81016038 R14: 00007fdb81015fa0 R15: 00007fdb8113fa48 [ 2214.650722][ T8156] [ 2214.651828][T27998] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 2215.143526][T27998] usb 3-1: USB disconnect, device number 123 [ 2215.456194][ T8166] vlan3: entered promiscuous mode [ 2215.569905][ T8168] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 2215.735085][ T5869] usb 5-1: USB disconnect, device number 2 [ 2215.923651][T27998] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 2216.062113][ T8188] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2216.086243][ T8186] FAULT_INJECTION: forcing a failure. [ 2216.086243][ T8186] name failslab, interval 1, probability 0, space 0, times 0 [ 2216.100488][ T8186] CPU: 1 UID: 0 PID: 8186 Comm: syz.1.10092 Tainted: G L syzkaller #0 PREEMPT(full) [ 2216.100518][ T8186] Tainted: [L]=SOFTLOCKUP [ 2216.100525][ T8186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 2216.100537][ T8186] Call Trace: [ 2216.100546][ T8186] [ 2216.100555][ T8186] dump_stack_lvl+0xe8/0x150 [ 2216.100588][ T8186] should_fail_ex+0x412/0x560 [ 2216.100622][ T8186] should_failslab+0xa8/0x100 [ 2216.100649][ T8186] __kmalloc_noprof+0xde/0x7e0 [ 2216.100670][ T8186] ? tomoyo_encode+0x28b/0x550 [ 2216.100704][ T8186] tomoyo_encode+0x28b/0x550 [ 2216.100738][ T8186] tomoyo_realpath_from_path+0x58d/0x5d0 [ 2216.100769][ T8186] ? tomoyo_domain+0xd7/0x130 [ 2216.100803][ T8186] ? tomoyo_path_number_perm+0x219/0x630 [ 2216.100828][ T8186] tomoyo_path_number_perm+0x246/0x630 [ 2216.100855][ T8186] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2216.100877][ T8186] ? __lock_acquire+0x6b5/0x2cf0 [ 2216.100919][ T8186] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 2216.100973][ T8186] ? __fget_files+0x2a/0x420 [ 2216.100996][ T8186] ? __fget_files+0x2a/0x420 [ 2216.101015][ T8186] ? __fget_files+0x3a0/0x420 [ 2216.101035][ T8186] ? __fget_files+0x2a/0x420 [ 2216.101061][ T8186] security_file_ioctl+0xc3/0x2a0 [ 2216.101081][ T8186] __se_sys_ioctl+0x47/0x170 [ 2216.101110][ T8186] do_syscall_64+0xe2/0xf80 [ 2216.101135][ T8186] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2216.101151][ T8186] ? trace_irq_disable+0x37/0x100 [ 2216.101173][ T8186] ? clear_bhb_loop+0x60/0xb0 [ 2216.101196][ T8186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2216.101214][ T8186] RIP: 0033:0x7fdb80d9acb9 [ 2216.101232][ T8186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2216.101249][ T8186] RSP: 002b:00007fdb81cad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2216.101271][ T8186] RAX: ffffffffffffffda RBX: 00007fdb81015fa0 RCX: 00007fdb80d9acb9 [ 2216.101286][ T8186] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 2216.101299][ T8186] RBP: 00007fdb81cad090 R08: 0000000000000000 R09: 0000000000000000 [ 2216.101312][ T8186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2216.101341][ T8186] R13: 00007fdb81016038 R14: 00007fdb81015fa0 R15: 00007fdb8113fa48 [ 2216.101375][ T8186] [ 2216.101398][ T8186] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2216.124046][T27998] usb 3-1: Using ep0 maxpacket: 16 [ 2216.350617][T27998] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 2216.360913][T27998] usb 3-1: config 1 has no interface number 0 [ 2216.367481][T27998] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 2216.462704][T27998] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 2216.503950][T27998] usb 3-1: config 1 interface 105 has no altsetting 0 [ 2216.528208][T27998] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 2216.563668][T27998] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2216.609994][T27998] usb 3-1: Product: syz [ 2216.633626][T27998] usb 3-1: Manufacturer: syz [ 2216.664853][T27998] usb 3-1: SerialNumber: syz [ 2216.675334][ T8203] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10098'. [ 2216.696178][ T8174] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2216.709363][ T8174] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2216.839277][ T8200] netlink: 'syz.4.10095': attribute type 4 has an invalid length. [ 2216.923438][ T5869] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 2217.093582][ T5869] usb 6-1: Using ep0 maxpacket: 8 [ 2217.100446][ T5869] usb 6-1: too many configurations: 249, using maximum allowed: 8 [ 2217.150264][ T8174] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2217.166928][ T8174] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2217.178218][ T5869] usb 6-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=b3.ff [ 2217.205583][ T5869] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=2 [ 2217.222752][ T5869] usb 6-1: Product: syz [ 2217.231785][ T5869] usb 6-1: Manufacturer: syz [ 2217.246737][ T5869] usb 6-1: SerialNumber: syz [ 2217.267110][ T5869] usb 6-1: config 0 descriptor?? [ 2217.358220][ T8222] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2217.458659][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 2217.458675][ T30] audit: type=1326 audit(1769011555.969:3230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8219 comm="syz.1.10105" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdb80d9acb9 code=0x0 [ 2217.607953][ T5869] mdc800 6-1:0.0: probe fails -> wrong Number of Configuration [ 2217.649627][T27998] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 2217.808795][ T8225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2217.823074][ T8225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2217.872467][T27998] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 2217.909648][T27998] aqc111 3-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 34:7c:ea:65:83:67 [ 2217.952291][T27998] usb 3-1: USB disconnect, device number 124 [ 2217.981247][T27998] aqc111 3-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 2218.327981][T27998] aqc111 3-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 2218.339257][T27998] aqc111 3-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 2218.361545][T27998] aqc111 3-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 2218.549739][ T8234] vlan3: entered promiscuous mode [ 2218.864420][ T8242] tipc: Resetting bearer [ 2219.330903][ T8264] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 2219.506694][ T8266] gretap0: entered promiscuous mode [ 2219.549443][ T8266] gretap0: left promiscuous mode [ 2219.686516][T27998] usb 6-1: USB disconnect, device number 36 [ 2221.133506][ T8293] netlink: 388 bytes leftover after parsing attributes in process `syz.5.10118'. [ 2221.326241][ T8289] bond3: option ad_user_port_key: invalid value (65161) [ 2221.406819][ T8289] bond3: option ad_user_port_key: allowed values 0 - 1023 [ 2221.556002][ T8289] bond3 (unregistering): Released all slaves [ 2221.857832][ T8303] syzkaller1: entered allmulticast mode [ 2222.157153][ T8309] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2222.215801][ T30] audit: type=1326 audit(1769011560.719:3231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8306 comm="syz.4.10120" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6ba2d9acb9 code=0x0 [ 2222.286778][ T8311] fuse: Bad value for 'fd' [ 2222.573435][ T5869] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 2222.733646][ T5869] usb 3-1: Using ep0 maxpacket: 8 [ 2222.746466][ T5869] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 2222.771245][ T5869] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2222.806752][ T5869] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2222.841606][ T5869] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 2222.907485][ T5869] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 2222.946164][ T5869] usb 3-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=e6.7f [ 2222.956717][ T5869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2222.968484][ T5869] usb 3-1: Product: syz [ 2222.972784][ T5869] usb 3-1: Manufacturer: syz [ 2222.998031][ T5869] usb 3-1: SerialNumber: syz [ 2223.105515][ T8325] FAULT_INJECTION: forcing a failure. [ 2223.105515][ T8325] name failslab, interval 1, probability 0, space 0, times 0 [ 2223.122610][ T5869] usb 3-1: config 0 descriptor?? [ 2223.148253][ T8325] CPU: 0 UID: 0 PID: 8325 Comm: syz.0.10126 Tainted: G L syzkaller #0 PREEMPT(full) [ 2223.148286][ T8325] Tainted: [L]=SOFTLOCKUP [ 2223.148293][ T8325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 2223.148306][ T8325] Call Trace: [ 2223.148314][ T8325] [ 2223.148324][ T8325] dump_stack_lvl+0xe8/0x150 [ 2223.148356][ T8325] should_fail_ex+0x412/0x560 [ 2223.148390][ T8325] should_failslab+0xa8/0x100 [ 2223.148418][ T8325] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 2223.148453][ T8325] ? dup_task_struct+0x57/0x9a0 [ 2223.148484][ T8325] dup_task_struct+0x57/0x9a0 [ 2223.148509][ T8325] ? _raw_spin_unlock_irq+0x23/0x50 [ 2223.148540][ T8325] copy_process+0x508/0x3980 [ 2223.148597][ T8325] ? __pfx_copy_process+0x10/0x10 [ 2223.148630][ T8325] ? mutex_init_lockep+0xf9/0x130 [ 2223.148659][ T8325] vhost_task_create+0x1f9/0x380 [ 2223.148687][ T8325] ? arch_stack_walk+0xfb/0x150 [ 2223.148712][ T8325] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 2223.148739][ T8325] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 2223.148770][ T8325] ? __pfx_vhost_task_create+0x10/0x10 [ 2223.148808][ T8325] ? __pfx_vhost_task_fn+0x10/0x10 [ 2223.148842][ T8325] ? __lock_acquire+0x6b5/0x2cf0 [ 2223.148869][ T8325] ? kasan_save_track+0x4f/0x80 [ 2223.148889][ T8325] ? kasan_save_track+0x3e/0x80 [ 2223.148908][ T8325] ? kasan_save_free_info+0x46/0x50 [ 2223.148941][ T8325] kvm_mmu_post_init_vm+0x14c/0x300 [ 2223.148977][ T8325] kvm_arch_vcpu_ioctl_run+0x108/0x1dc0 [ 2223.149013][ T8325] ? register_lock_class+0x31/0x2e0 [ 2223.149035][ T8325] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 2223.149059][ T8325] ? __lock_acquire+0x6b5/0x2cf0 [ 2223.149084][ T8325] ? __mutex_lock+0x319/0x1300 [ 2223.149122][ T8325] ? kasan_quarantine_put+0xbb/0x1f0 [ 2223.149156][ T8325] ? do_raw_write_lock+0x11d/0x260 [ 2223.149204][ T8325] kvm_vcpu_ioctl+0xa62/0xfd0 [ 2223.149239][ T8325] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 2223.149267][ T8325] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 2223.149320][ T8325] ? __fget_files+0x2a/0x420 [ 2223.149350][ T8325] ? __fget_files+0x2a/0x420 [ 2223.149375][ T8325] ? __fget_files+0x3a0/0x420 [ 2223.149399][ T8325] ? __fget_files+0x2a/0x420 [ 2223.149429][ T8325] ? bpf_lsm_file_ioctl+0x9/0x20 [ 2223.149452][ T8325] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 2223.149482][ T8325] __se_sys_ioctl+0xfc/0x170 [ 2223.149517][ T8325] do_syscall_64+0xe2/0xf80 [ 2223.149546][ T8325] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2223.149567][ T8325] ? trace_irq_disable+0x37/0x100 [ 2223.149608][ T8325] ? clear_bhb_loop+0x60/0xb0 [ 2223.149634][ T8325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2223.149655][ T8325] RIP: 0033:0x7fa0f179acb9 [ 2223.149674][ T8325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2223.149693][ T8325] RSP: 002b:00007fa0f258a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2223.149716][ T8325] RAX: ffffffffffffffda RBX: 00007fa0f1a15fa0 RCX: 00007fa0f179acb9 [ 2223.149732][ T8325] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 2223.149745][ T8325] RBP: 00007fa0f258a090 R08: 0000000000000000 R09: 0000000000000000 [ 2223.149758][ T8325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2223.149771][ T8325] R13: 00007fa0f1a16038 R14: 00007fa0f1a15fa0 R15: 00007fa0f1b3fa48 [ 2223.149805][ T8325] [ 2223.177101][ T5869] usbtouchscreen 3-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 2223.525451][ T5869] usb 3-1: USB disconnect, device number 125 [ 2223.872922][ T8340] netlink: 172 bytes leftover after parsing attributes in process `syz.5.10132'. [ 2224.004231][ T8345] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 2224.038524][ T8347] netlink: 'syz.5.10135': attribute type 1 has an invalid length. [ 2224.038558][ T8348] xt_hashlimit: size too large, truncated to 1048576 [ 2224.120395][ T8347] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2224.139623][ T8350] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 2224.170924][ T8354] gretap0: entered promiscuous mode [ 2224.179214][ T8354] gretap0: left promiscuous mode [ 2224.703211][ T30] audit: type=1326 audit(1769011563.209:3232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8360 comm="syz.4.10140" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6ba2d9acb9 code=0x0 [ 2224.743362][ T8368] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2225.453277][ T8389] netlink: 'syz.1.10147': attribute type 5 has an invalid length. [ 2225.482499][ T8389] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10147'. [ 2226.968655][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 2226.975103][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 2227.052574][ T8420] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10152'. [ 2227.123247][ T8420] netlink: 48 bytes leftover after parsing attributes in process `syz.4.10152'. [ 2227.996670][ T8431] Invalid logical block size (5) [ 2228.505587][ T8445] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2228.514668][ T8441] vlan3: entered promiscuous mode [ 2228.520984][ T8441] vlan3: entered allmulticast mode [ 2228.582600][ T8444] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10161'. [ 2228.656294][ T30] audit: type=1326 audit(1769011567.169:3233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8438 comm="syz.5.10160" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb99239acb9 code=0x0 [ 2229.441356][ T8462] FAULT_INJECTION: forcing a failure. [ 2229.441356][ T8462] name failslab, interval 1, probability 0, space 0, times 0 [ 2229.500672][ T8462] CPU: 1 UID: 0 PID: 8462 Comm: syz.0.10168 Tainted: G L syzkaller #0 PREEMPT(full) [ 2229.500707][ T8462] Tainted: [L]=SOFTLOCKUP [ 2229.500716][ T8462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 2229.500729][ T8462] Call Trace: [ 2229.500738][ T8462] [ 2229.500748][ T8462] dump_stack_lvl+0xe8/0x150 [ 2229.500780][ T8462] should_fail_ex+0x412/0x560 [ 2229.500824][ T8462] should_failslab+0xa8/0x100 [ 2229.500853][ T8462] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 2229.500886][ T8462] ? __alloc_skb+0x193/0x390 [ 2229.500916][ T8462] ? __alloc_skb+0x1d7/0x390 [ 2229.500944][ T8462] ? __local_bh_enable_ip+0xd0/0x130 [ 2229.500968][ T8462] ? __alloc_skb+0x193/0x390 [ 2229.500998][ T8462] __alloc_skb+0x1d7/0x390 [ 2229.501033][ T8462] netlink_sendmsg+0x5d4/0xb40 [ 2229.501067][ T8462] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2229.501094][ T8462] ? aa_file_perm+0x12d/0x1630 [ 2229.501123][ T8462] ? aa_sock_msg_perm+0xf1/0x1b0 [ 2229.501153][ T8462] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2229.501173][ T8462] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2229.501198][ T8462] __sock_sendmsg+0x21c/0x270 [ 2229.501227][ T8462] ____sys_sendmsg+0x4d7/0x810 [ 2229.501248][ T8462] ? __might_fault+0xaf/0x130 [ 2229.501286][ T8462] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2229.501316][ T8462] ? import_iovec+0x73/0xa0 [ 2229.501343][ T8462] ___sys_sendmsg+0x2a5/0x360 [ 2229.501362][ T8462] ? __lock_acquire+0x6b5/0x2cf0 [ 2229.501389][ T8462] ? __pfx____sys_sendmsg+0x10/0x10 [ 2229.501446][ T8462] ? __fget_files+0x2a/0x420 [ 2229.501471][ T8462] ? __fget_files+0x3a0/0x420 [ 2229.501508][ T8462] __x64_sys_sendmsg+0x1bd/0x2a0 [ 2229.501532][ T8462] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2229.501563][ T8462] ? __pfx_ksys_write+0x10/0x10 [ 2229.501595][ T8462] do_syscall_64+0xe2/0xf80 [ 2229.501626][ T8462] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2229.501646][ T8462] ? trace_irq_disable+0x37/0x100 [ 2229.501674][ T8462] ? clear_bhb_loop+0x60/0xb0 [ 2229.501705][ T8462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2229.501727][ T8462] RIP: 0033:0x7fa0f179acb9 [ 2229.501746][ T8462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2229.501764][ T8462] RSP: 002b:00007fa0f258a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2229.501801][ T8462] RAX: ffffffffffffffda RBX: 00007fa0f1a15fa0 RCX: 00007fa0f179acb9 [ 2229.501824][ T8462] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 2229.501837][ T8462] RBP: 00007fa0f258a090 R08: 0000000000000000 R09: 0000000000000000 [ 2229.501851][ T8462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2229.501864][ T8462] R13: 00007fa0f1a16038 R14: 00007fa0f1a15fa0 R15: 00007fa0f1b3fa48 [ 2229.501897][ T8462] [ 2229.869451][ T8467] netlink: 'syz.4.10169': attribute type 1 has an invalid length. [ 2229.940832][ T8467] 8021q: adding VLAN 0 to HW filter on device bond5 [ 2230.012453][ T8470] bond4: (slave veth0_to_bond): Releasing active interface [ 2230.120566][ T8470] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 2230.444702][ T8484] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10176'. [ 2230.993761][ T5952] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 2231.136548][ T8493] kvm: pic: non byte write [ 2231.166035][ T5952] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 2231.197289][ T5952] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 2231.244402][ T5952] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 2231.297640][ T5952] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 2231.332560][ T5952] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0017, bcdDevice=2f.a3 [ 2231.372126][ T5952] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2231.402642][ T5952] usb 5-1: Product: syz [ 2231.415841][ T5952] usb 5-1: Manufacturer: syz [ 2231.436582][ T5952] usb 5-1: SerialNumber: syz [ 2231.468165][ T5952] usb 5-1: config 0 descriptor?? [ 2231.483399][ T8494] netlink: 180 bytes leftover after parsing attributes in process `syz.1.10172'. [ 2231.512318][ T8494] netlink: 203340 bytes leftover after parsing attributes in process `syz.1.10172'. [ 2231.535407][ T5952] kvaser_usb 5-1:0.0: error -EMSGSIZE: Cannot get software info [ 2231.552881][ T5952] kvaser_usb 5-1:0.0: probe with driver kvaser_usb failed with error -90 [ 2231.729796][ T8508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2231.749761][ T8508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2231.799149][ T5869] usb 5-1: USB disconnect, device number 3 [ 2232.136189][ T8515] syzkaller1: entered allmulticast mode [ 2232.536485][ T8532] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2232.582769][ T8535] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10192'. [ 2232.606411][ T30] audit: type=1326 audit(1769011571.119:3234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8523 comm="syz.4.10190" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6ba2d9acb9 code=0x0 [ 2233.077305][ T8539] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10193'. [ 2233.267865][ T8541] xt_hashlimit: size too large, truncated to 1048576 [ 2233.904325][ T8560] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10199'. [ 2233.932842][ T8558] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10200'. [ 2234.633623][ T5952] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 2234.773508][ T5952] usb 3-1: device descriptor read/64, error -71 [ 2235.013532][ T5952] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 2235.155273][ T5952] usb 3-1: device descriptor read/64, error -71 [ 2235.264152][ T5952] usb usb3-port1: attempt power cycle [ 2235.301022][ T8579] syzkaller1: entered promiscuous mode [ 2235.309155][ T8579] syzkaller1: entered allmulticast mode [ 2235.519362][ T8583] vlan3: entered promiscuous mode [ 2235.613616][ T5952] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 2235.664303][ T5952] usb 3-1: device descriptor read/8, error -71 [ 2235.740924][ T8585] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2235.916528][ T5952] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 2235.955143][ T5952] usb 3-1: device descriptor read/8, error -71 [ 2235.986813][ T8591] syzkaller1: entered allmulticast mode [ 2236.086433][ T5952] usb usb3-port1: unable to enumerate USB device [ 2237.537279][ T8616] trusted_key: encrypted_key: insufficient parameters specified [ 2237.853817][T26840] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 2238.025493][T26840] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 2238.033857][T26840] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2238.048311][T26840] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2238.061204][T26840] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2238.078897][T26840] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2238.092131][T26840] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 2238.101981][T26840] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2238.116186][T26840] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2238.129420][T26840] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2238.141347][T26840] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2238.168745][T26840] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 2238.185145][T26840] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 2238.196432][T26840] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2238.208590][T26840] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 2238.220806][T26840] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 2238.238158][T26840] usb 3-1: string descriptor 0 read error: -22 [ 2238.247962][T26840] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2238.260016][T26840] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2238.282497][T26840] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 2238.482674][ T8630] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10221'. [ 2238.497647][ T8629] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 2238.524002][ T8629] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 2238.548581][T26840] usb 3-1: USB disconnect, device number 4 [ 2238.875071][ T8643] netlink: 172 bytes leftover after parsing attributes in process `syz.0.10226'. [ 2239.053478][T27998] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 2239.182892][ T8646] kvm: pic: non byte write [ 2239.217650][T27998] usb 2-1: Using ep0 maxpacket: 32 [ 2239.224838][T27998] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2239.234674][T27998] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 2239.251735][T27998] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2239.260286][T27998] usb 2-1: Product: syz [ 2239.265026][T27998] usb 2-1: Manufacturer: syz [ 2239.271025][T27998] usb 2-1: SerialNumber: syz [ 2239.279766][T27998] usb 2-1: config 0 descriptor?? [ 2239.694395][T27998] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 2239.800386][ T8669] vlan3: entered promiscuous mode [ 2239.805985][ T8669] vlan3: entered allmulticast mode [ 2239.811192][ T8669] hsr_slave_1: entered allmulticast mode [ 2239.918347][ T8673] fuse: Bad value for 'fd' [ 2240.023805][ T5869] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 2240.108517][T27998] gs_usb 2-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 2240.117496][T27998] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -22 [ 2240.198715][ T5869] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2240.209896][ T5869] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 2240.217727][ T5869] usb 6-1: can't read configurations, error -71 [ 2240.225546][T17414] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 2240.393598][T17414] usb 3-1: Using ep0 maxpacket: 8 [ 2240.401101][T17414] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 2240.411329][T17414] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2240.424789][T17414] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2240.436528][T17414] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 2240.446711][T17414] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 2240.459076][T17414] usb 3-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=e6.7f [ 2240.468855][T17414] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2240.477047][T17414] usb 3-1: Product: syz [ 2240.481395][T17414] usb 3-1: Manufacturer: syz [ 2240.487772][T17414] usb 3-1: SerialNumber: syz [ 2240.497355][T17414] usb 3-1: config 0 descriptor?? [ 2240.508828][T17414] usbtouchscreen 3-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 2240.716943][T26840] usb 3-1: USB disconnect, device number 5 [ 2241.783633][ T5869] usb 2-1: USB disconnect, device number 32 [ 2241.956544][ T8705] FAULT_INJECTION: forcing a failure. [ 2241.956544][ T8705] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2242.006787][ T8705] CPU: 1 UID: 0 PID: 8705 Comm: syz.1.10248 Tainted: G L syzkaller #0 PREEMPT(full) [ 2242.006823][ T8705] Tainted: [L]=SOFTLOCKUP [ 2242.006832][ T8705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 2242.006845][ T8705] Call Trace: [ 2242.006854][ T8705] [ 2242.006864][ T8705] dump_stack_lvl+0xe8/0x150 [ 2242.006896][ T8705] should_fail_ex+0x412/0x560 [ 2242.006933][ T8705] _copy_from_user+0x2d/0xb0 [ 2242.006957][ T8705] proc_setintf+0x94/0x2e0 [ 2242.006990][ T8705] ? __pfx_proc_setintf+0x10/0x10 [ 2242.007031][ T8705] usbdev_ioctl+0x99a/0x2120 [ 2242.007080][ T8705] ? __pfx_usbdev_ioctl+0x10/0x10 [ 2242.007114][ T8705] ? __fget_files+0x2a/0x420 [ 2242.007139][ T8705] ? __fget_files+0x3a0/0x420 [ 2242.007165][ T8705] ? __fget_files+0x2a/0x420 [ 2242.007195][ T8705] ? bpf_lsm_file_ioctl+0x9/0x20 [ 2242.007219][ T8705] ? __pfx_usbdev_ioctl+0x10/0x10 [ 2242.007249][ T8705] __se_sys_ioctl+0xfc/0x170 [ 2242.007283][ T8705] do_syscall_64+0xe2/0xf80 [ 2242.007314][ T8705] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2242.007334][ T8705] ? trace_irq_disable+0x37/0x100 [ 2242.007362][ T8705] ? clear_bhb_loop+0x60/0xb0 [ 2242.007388][ T8705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2242.007410][ T8705] RIP: 0033:0x7fdb80d9acb9 [ 2242.007429][ T8705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2242.007446][ T8705] RSP: 002b:00007fdb81cad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2242.007468][ T8705] RAX: ffffffffffffffda RBX: 00007fdb81015fa0 RCX: 00007fdb80d9acb9 [ 2242.007530][ T8705] RDX: 0000200000000180 RSI: 0000000080085504 RDI: 0000000000000003 [ 2242.007545][ T8705] RBP: 00007fdb81cad090 R08: 0000000000000000 R09: 0000000000000000 [ 2242.007555][ T8705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2242.007565][ T8705] R13: 00007fdb81016038 R14: 00007fdb81015fa0 R15: 00007fdb8113fa48 [ 2242.007590][ T8705] [ 2242.725265][ T8726] random: crng reseeded on system resumption [ 2243.947411][ T30] audit: type=1326 audit(1769011582.459:3235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8744 comm="syz.5.10259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb99239acb9 code=0x7ffc0000 [ 2244.059221][ T30] audit: type=1326 audit(1769011582.459:3236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8744 comm="syz.5.10259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb99235b58e code=0x7ffc0000 [ 2244.137006][ T30] audit: type=1326 audit(1769011582.459:3237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8744 comm="syz.5.10259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb99239acb9 code=0x7ffc0000 [ 2244.173685][ T30] audit: type=1326 audit(1769011582.459:3238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8744 comm="syz.5.10259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb99239acb9 code=0x7ffc0000 [ 2244.198879][ T30] audit: type=1326 audit(1769011582.459:3239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8744 comm="syz.5.10259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb99239acb9 code=0x7ffc0000 [ 2244.222313][ T30] audit: type=1326 audit(1769011582.459:3240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8744 comm="syz.5.10259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb99239acb9 code=0x7ffc0000 [ 2244.258138][ T30] audit: type=1326 audit(1769011582.459:3241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8744 comm="syz.5.10259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fb99239acb9 code=0x7ffc0000 [ 2244.307468][ T30] audit: type=1326 audit(1769011582.459:3242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8744 comm="syz.5.10259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb99239acb9 code=0x7ffc0000 [ 2244.358052][ T30] audit: type=1326 audit(1769011582.459:3243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8744 comm="syz.5.10259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fb99239acb9 code=0x7ffc0000 [ 2244.388286][ T30] audit: type=1326 audit(1769011582.459:3244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8744 comm="syz.5.10259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb99239acb9 code=0x7ffc0000 [ 2245.139560][ T8760] netlink: 'syz.1.10262': attribute type 2 has an invalid length. [ 2245.553488][ T5921] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 2245.703949][ T5921] usb 5-1: device descriptor read/64, error -71 [ 2245.922467][ T8775] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10268'. [ 2245.951556][ T8776] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10267'. [ 2245.993518][ T5921] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 2246.133468][ T5921] usb 5-1: device descriptor read/64, error -71 [ 2246.214217][T26840] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 2246.254523][ T5921] usb usb5-port1: attempt power cycle [ 2246.276773][ T8780] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10270'. [ 2246.332332][ T8785] netlink: 'syz.1.10271': attribute type 10 has an invalid length. [ 2246.341639][ T8785] netlink: 'syz.1.10271': attribute type 10 has an invalid length. [ 2246.351186][ T8785] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10271'. [ 2246.375740][T26840] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 2246.393464][T26840] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2246.420138][T26840] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2246.448606][T26840] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2246.466078][T26840] usb 3-1: SerialNumber: syz [ 2246.623480][ T5921] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 2246.669553][ T5921] usb 5-1: device descriptor read/8, error -71 [ 2246.748936][ T8775] veth5: entered promiscuous mode [ 2246.791656][ T8800] vlan2: entered promiscuous mode [ 2246.845673][T26840] usb 3-1: 0:2 : does not exist [ 2246.856878][T26840] usb 3-1: unit 255 not found! [ 2246.900904][T26840] usb 3-1: USB disconnect, device number 6 [ 2246.934452][ T5921] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 2246.975260][ T5921] usb 5-1: device descriptor read/8, error -71 [ 2247.019879][T29170] udevd[29170]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2247.027584][ T8807] vlan2: entered promiscuous mode [ 2247.105963][ T5921] usb usb5-port1: unable to enumerate USB device [ 2247.582311][ T8823] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 2247.980671][ T8831] syzkaller1: entered allmulticast mode [ 2248.034004][T26840] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 2248.200684][ T8839] kvm: pic: non byte write [ 2248.249681][T26840] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2248.296315][T26840] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2248.315034][T26840] usb 3-1: Product: syz [ 2248.319269][T26840] usb 3-1: Manufacturer: syz [ 2248.333411][T26840] usb 3-1: SerialNumber: syz [ 2248.349861][T26840] usb 3-1: config 0 descriptor?? [ 2248.411044][ T8844] fuse: Bad value for 'fd' [ 2248.600474][T26840] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2248.705057][T28000] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 2248.873804][T28000] usb 5-1: Using ep0 maxpacket: 8 [ 2248.877953][T28000] usb 5-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76 [ 2248.878004][T28000] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2248.878020][T28000] usb 5-1: Product: syz [ 2248.878032][T28000] usb 5-1: Manufacturer: syz [ 2248.878044][T28000] usb 5-1: SerialNumber: syz [ 2248.881294][T28000] usb 5-1: config 0 descriptor?? [ 2248.886853][T28000] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 2249.033710][ T8851] syzkaller1: entered allmulticast mode [ 2249.505780][T28000] gspca_m5602: Failed to find a sensor [ 2249.514181][T28000] ALi m5602 5-1:0.0: ALi m5602 webcam failed [ 2249.546456][T28000] usb 5-1: USB disconnect, device number 8 [ 2250.295343][ T8828] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10285'. [ 2250.352412][ T8828] netlink: 'syz.2.10285': attribute type 5 has an invalid length. [ 2250.401559][ T8828] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10285'. [ 2250.514825][ T8828] geneve4: entered promiscuous mode [ 2250.544718][ T8828] geneve4: entered allmulticast mode [ 2250.583940][ T6069] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 256 - 0 [ 2250.625888][ T6069] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 256 - 0 [ 2250.688321][ T6069] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 256 - 0 [ 2250.732533][ T6069] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 256 - 0 [ 2251.045712][T26840] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 2251.246739][ T5952] usb 3-1: USB disconnect, device number 7 [ 2251.418958][T27998] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 2251.595719][T27998] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2251.615824][T27998] usb 6-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 2251.633517][T27998] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2251.672788][T27998] usb 6-1: config 0 descriptor?? [ 2251.753760][ T8889] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 2252.039283][ T8898] netlink: 'syz.4.10302': attribute type 1 has an invalid length. [ 2252.229265][T27998] usbhid 6-1:0.0: can't add hid device: -71 [ 2252.254284][T27998] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2252.337059][T27998] usb 6-1: USB disconnect, device number 39 [ 2252.366621][ T8901] bond5: (slave veth0_to_bond): Releasing active interface [ 2252.568386][ T8898] 8021q: adding VLAN 0 to HW filter on device bond6 [ 2252.577468][ T8906] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10305'. [ 2252.851543][ T8920] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 2252.863484][T27998] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 2253.045671][T27998] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2253.099070][T27998] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2253.146794][T27998] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2253.226305][T27998] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2253.263395][T27998] usb 6-1: SerialNumber: syz [ 2253.541619][T27998] usb 6-1: 0:2 : does not exist [ 2253.678787][T27998] usb 6-1: unit 5: unexpected type 0x09 [ 2253.781655][ T8934] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10311'. [ 2254.041427][T27998] usb 6-1: USB disconnect, device number 40 [ 2254.479099][ T8946] vlan2: entered promiscuous mode [ 2254.653662][T28000] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 2254.896436][ T8950] fuse: Bad value for 'fd' [ 2254.924744][T28000] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2254.956936][T28000] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2254.995993][T28000] usb 3-1: config 0 descriptor?? [ 2255.047562][T28000] cp210x 3-1:0.0: cp210x converter detected [ 2255.233456][T26840] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 2255.404280][T26840] usb 6-1: Using ep0 maxpacket: 8 [ 2255.461136][T28000] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 2255.481705][T26840] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 2255.518257][T28000] cp210x 3-1:0.0: GPIO initialisation failed: -524 [ 2255.543143][T26840] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2255.577165][T28000] usb 3-1: cp210x converter now attached to ttyUSB0 [ 2255.620039][T26840] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2255.703110][T26840] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 2255.746832][T28000] usb 3-1: USB disconnect, device number 8 [ 2255.773625][T26840] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 2255.793621][T28000] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2255.818416][T28000] cp210x 3-1:0.0: device disconnected [ 2255.861885][T26840] usb 6-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=e6.7f [ 2255.910215][T26840] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2255.943651][T26840] usb 6-1: Product: syz [ 2255.953735][T26840] usb 6-1: Manufacturer: syz [ 2255.996831][T26840] usb 6-1: SerialNumber: syz [ 2256.046108][T26840] usb 6-1: config 0 descriptor?? [ 2256.086629][T26840] usbtouchscreen 6-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 2256.267427][T27998] usb 6-1: USB disconnect, device number 41 [ 2256.641585][ T8964] xt_hashlimit: size too large, truncated to 1048576 [ 2257.085035][ T8975] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10322'. [ 2257.437957][ T8983] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 2257.484990][ T8986] vlan3: entered promiscuous mode [ 2257.603428][T17414] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 2257.763441][T17414] usb 3-1: Using ep0 maxpacket: 32 [ 2257.793871][T17414] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2257.820568][T17414] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 2257.832501][T17414] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 2257.857884][T17414] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2257.887527][T17414] usb 3-1: config 0 descriptor?? [ 2257.922999][T28000] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 2258.051784][ T8997] vlan2: entered promiscuous mode [ 2258.059782][ T8997] bridge0: entered promiscuous mode [ 2258.180771][T28000] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2258.226475][T28000] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2258.259091][T28000] usb 2-1: Product: syz [ 2258.277222][T28000] usb 2-1: Manufacturer: syz [ 2258.298847][T28000] usb 2-1: SerialNumber: syz [ 2258.345878][T28000] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2258.381388][T17414] usb 3-1: USB disconnect, device number 9 [ 2258.415819][ T5921] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2258.631371][T17414] usb 2-1: USB disconnect, device number 33 [ 2259.010754][ T9013] fuse: Bad value for 'fd' [ 2259.304400][T27998] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 2259.513385][T27998] usb 6-1: Using ep0 maxpacket: 8 [ 2259.516675][T27998] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 2259.516708][T27998] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2259.516784][T27998] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2259.516814][T27998] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 2259.516839][T27998] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 2259.519446][T27998] usb 6-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=e6.7f [ 2259.519478][T27998] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2259.519502][T27998] usb 6-1: Product: syz [ 2259.519519][T27998] usb 6-1: Manufacturer: syz [ 2259.519536][T27998] usb 6-1: SerialNumber: syz [ 2259.521483][ T5921] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 2259.521695][ T5921] ath9k_htc: Failed to initialize the device [ 2259.530675][T17414] usb 2-1: ath9k_htc: USB layer deinitialized [ 2259.538293][T27998] usb 6-1: config 0 descriptor?? [ 2259.546207][T27998] usbtouchscreen 6-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 2259.752522][T17414] usb 6-1: USB disconnect, device number 42 [ 2260.093478][ T5921] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 2260.263503][ T5921] usb 2-1: Using ep0 maxpacket: 16 [ 2260.276633][ T5921] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 2260.286117][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2260.295474][ T5921] usb 2-1: Product: syz [ 2260.299707][ T5921] usb 2-1: Manufacturer: syz [ 2260.304834][ T5921] usb 2-1: SerialNumber: syz [ 2260.314126][ T5921] usb 2-1: config 0 descriptor?? [ 2260.664340][T28000] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 2260.738436][ T5921] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 2260.769243][ T5921] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2260.792225][ T5921] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 2260.810606][ T5921] usb 2-1: media controller created [ 2260.823414][T28000] usb 6-1: Using ep0 maxpacket: 8 [ 2260.834693][T28000] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2260.859192][ T5921] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2260.878907][T28000] usb 6-1: config 4 interface 0 has no altsetting 0 [ 2260.898500][T28000] usb 6-1: string descriptor 0 read error: -22 [ 2260.920190][T28000] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 2260.941047][T28000] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2260.981996][T28000] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 2260.991794][ T5921] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 2261.015964][ T5921] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 2261.039089][T28000] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2261.094801][T28000] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 2261.127612][T28000] usb 6-1: media controller created [ 2261.179675][T28000] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2261.209541][ T9033] dtv5100: wlen = 0, aborting. [ 2261.234064][ T9038] ------------[ cut here ]------------ [ 2261.239564][ T9038] usb 2-1: BOGUS control dir, pipe 80002280 doesn't match bRequestType c0 [ 2261.248180][ T9038] WARNING: drivers/usb/core/urb.c:414 at usb_submit_urb+0x1052/0x18b0, CPU#1: syz.5.10342/9038 [ 2261.259734][ T9038] Modules linked in: [ 2261.264539][ T9038] CPU: 1 UID: 0 PID: 9038 Comm: syz.5.10342 Tainted: G L syzkaller #0 PREEMPT(full) [ 2261.275585][ T9038] Tainted: [L]=SOFTLOCKUP [ 2261.279919][ T9038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 2261.290015][ T9038] RIP: 0010:usb_submit_urb+0x1114/0x18b0 [ 2261.295721][ T9038] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c2 f2 ff ff 89 e9 [ 2261.315859][ T9038] RSP: 0018:ffffc90005087928 EFLAGS: 00010246 [ 2261.321944][ T9038] RAX: 0000000000000000 RBX: ffff888144ba1f00 RCX: 0000000080002280 [ 2261.330009][ T9038] RDX: ffff8880a8f21520 RSI: ffffffff8c3dcc00 RDI: ffffffff8fdb95a0 [ 2261.338034][ T9038] RBP: 1ffff1100a6bc37c R08: 00000000000000c0 R09: 0000000000000000 [ 2261.346067][ T9038] R10: ffffc90005087a20 R11: fffff52000a10f50 R12: ffff88807ef46100 [ 2261.354476][ T9038] R13: ffff8880535e1be0 R14: 0000000080002280 R15: ffff8880a8f21520 [ 2261.362466][ T9038] FS: 00007fb9932536c0(0000) GS:ffff888125a29000(0000) knlGS:0000000000000000 [ 2261.371706][ T9038] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2261.378431][ T9038] CR2: 00002000001c1030 CR3: 000000006e57e000 CR4: 00000000003526f0 [ 2261.386461][ T9038] Call Trace: [ 2261.389745][ T9038] [ 2261.392685][ T9038] ? __init_swait_queue_head+0xa9/0x150 [ 2261.398315][ T9038] usb_start_wait_urb+0x12b/0x510 [ 2261.403420][ T9038] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 2261.409001][ T9038] usb_control_msg+0x232/0x3e0 [ 2261.413815][ T9038] dtv5100_i2c_msg+0x231/0x2f0 [ 2261.418594][ T9038] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 2261.423534][ T9038] __i2c_transfer+0x79a/0x1ee0 [ 2261.428319][ T9038] ? i2c_transfer+0xc8/0x2d0 [ 2261.432920][ T9038] i2c_transfer+0x1cc/0x2d0 [ 2261.437624][ T9038] i2cdev_ioctl_rdwr+0x460/0x740 [ 2261.442605][ T9038] i2cdev_ioctl+0x6a5/0x880 [ 2261.447160][ T9038] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 2261.452303][ T9038] ? bpf_lsm_file_ioctl+0x9/0x20 [ 2261.457630][ T9038] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 2261.462669][ T9038] __se_sys_ioctl+0xfc/0x170 [ 2261.467608][ T9038] do_syscall_64+0xe2/0xf80 [ 2261.472139][ T9038] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2261.478271][ T9038] ? trace_irq_disable+0x37/0x100 [ 2261.483445][ T9038] ? clear_bhb_loop+0x60/0xb0 [ 2261.488243][ T9038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2261.494219][ T9038] RIP: 0033:0x7fb99239acb9 [ 2261.498659][ T9038] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2261.518330][ T9038] RSP: 002b:00007fb993253028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2261.526841][ T9038] RAX: ffffffffffffffda RBX: 00007fb992615fa0 RCX: 00007fb99239acb9 [ 2261.534964][ T9038] RDX: 0000200000000a40 RSI: 0000000000000707 RDI: 0000000000000004 [ 2261.542949][ T9038] RBP: 00007fb992408bf7 R08: 0000000000000000 R09: 0000000000000000 [ 2261.551023][ T9038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2261.559608][ T9038] R13: 00007fb992616038 R14: 00007fb992615fa0 R15: 00007fb99273fa48 [ 2261.568107][ T9038] [ 2261.571172][ T9038] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2261.578491][ T9038] CPU: 1 UID: 0 PID: 9038 Comm: syz.5.10342 Tainted: G L syzkaller #0 PREEMPT(full) [ 2261.589436][ T9038] Tainted: [L]=SOFTLOCKUP [ 2261.593789][ T9038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 2261.603848][ T9038] Call Trace: [ 2261.607135][ T9038] [ 2261.610268][ T9038] vpanic+0x1e0/0x670 [ 2261.614274][ T9038] panic+0xc5/0xd0 [ 2261.618010][ T9038] ? __pfx_panic+0x10/0x10 [ 2261.622621][ T9038] __warn+0x315/0x4a0 [ 2261.626713][ T9038] ? usb_submit_urb+0x1052/0x18b0 [ 2261.631783][ T9038] ? usb_submit_urb+0x1052/0x18b0 [ 2261.636847][ T9038] __report_bug+0x29a/0x540 [ 2261.641379][ T9038] ? unwind_get_return_address+0x4d/0x90 [ 2261.647047][ T9038] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2261.653236][ T9038] ? usb_submit_urb+0x1052/0x18b0 [ 2261.658290][ T9038] ? __pfx___report_bug+0x10/0x10 [ 2261.663349][ T9038] ? __pfx_stack_trace_save+0x10/0x10 [ 2261.668749][ T9038] ? stack_depot_save_flags+0x33/0x810 [ 2261.674235][ T9038] report_bug_entry+0x19a/0x290 [ 2261.679115][ T9038] ? usb_submit_urb+0x1114/0x18b0 [ 2261.684172][ T9038] ? usb_submit_urb+0x1119/0x18b0 [ 2261.689225][ T9038] handle_bug+0xca/0x200 [ 2261.693486][ T9038] exc_invalid_op+0x1a/0x50 [ 2261.698002][ T9038] asm_exc_invalid_op+0x1a/0x20 [ 2261.702871][ T9038] RIP: 0010:usb_submit_urb+0x1114/0x18b0 [ 2261.708526][ T9038] Code: 00 00 00 00 00 fc ff df 0f b6 44 05 00 84 c0 0f 85 91 05 00 00 45 0f b6 45 00 48 8b 7c 24 18 48 8b 74 24 10 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 49 bf 00 00 00 00 00 fc ff df e9 c2 f2 ff ff 89 e9 [ 2261.728258][ T9038] RSP: 0018:ffffc90005087928 EFLAGS: 00010246 [ 2261.734466][ T9038] RAX: 0000000000000000 RBX: ffff888144ba1f00 RCX: 0000000080002280 [ 2261.742662][ T9038] RDX: ffff8880a8f21520 RSI: ffffffff8c3dcc00 RDI: ffffffff8fdb95a0 [ 2261.750739][ T9038] RBP: 1ffff1100a6bc37c R08: 00000000000000c0 R09: 0000000000000000 [ 2261.758730][ T9038] R10: ffffc90005087a20 R11: fffff52000a10f50 R12: ffff88807ef46100 [ 2261.767181][ T9038] R13: ffff8880535e1be0 R14: 0000000080002280 R15: ffff8880a8f21520 [ 2261.775739][ T9038] ? usb_submit_urb+0x10a3/0x18b0 [ 2261.780914][ T9038] ? __init_swait_queue_head+0xa9/0x150 [ 2261.786671][ T9038] usb_start_wait_urb+0x12b/0x510 [ 2261.791745][ T9038] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 2261.797416][ T9038] usb_control_msg+0x232/0x3e0 [ 2261.802472][ T9038] dtv5100_i2c_msg+0x231/0x2f0 [ 2261.807438][ T9038] dtv5100_i2c_xfer+0x1a4/0x3c0 [ 2261.812408][ T9038] __i2c_transfer+0x79a/0x1ee0 [ 2261.817207][ T9038] ? i2c_transfer+0xc8/0x2d0 [ 2261.821819][ T9038] i2c_transfer+0x1cc/0x2d0 [ 2261.826440][ T9038] i2cdev_ioctl_rdwr+0x460/0x740 [ 2261.831412][ T9038] i2cdev_ioctl+0x6a5/0x880 [ 2261.835941][ T9038] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 2261.841000][ T9038] ? bpf_lsm_file_ioctl+0x9/0x20 [ 2261.846101][ T9038] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 2261.851301][ T9038] __se_sys_ioctl+0xfc/0x170 [ 2261.855950][ T9038] do_syscall_64+0xe2/0xf80 [ 2261.860580][ T9038] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2261.866933][ T9038] ? trace_irq_disable+0x37/0x100 [ 2261.871987][ T9038] ? clear_bhb_loop+0x60/0xb0 [ 2261.876690][ T9038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2261.882612][ T9038] RIP: 0033:0x7fb99239acb9 [ 2261.887059][ T9038] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2261.906683][ T9038] RSP: 002b:00007fb993253028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2261.915118][ T9038] RAX: ffffffffffffffda RBX: 00007fb992615fa0 RCX: 00007fb99239acb9 [ 2261.923212][ T9038] RDX: 0000200000000a40 RSI: 0000000000000707 RDI: 0000000000000004 [ 2261.931210][ T9038] RBP: 00007fb992408bf7 R08: 0000000000000000 R09: 0000000000000000 [ 2261.939203][ T9038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2261.947296][ T9038] R13: 00007fb992616038 R14: 00007fb992615fa0 R15: 00007fb99273fa48 [ 2261.955314][ T9038] [ 2261.958963][ T9038] Kernel Offset: disabled [ 2261.963514][ T9038] Rebooting in 86400 seconds..