last executing test programs: 8.247071724s ago: executing program 4 (id=1680): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000001040)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x39c, 0xffffffff, 0x0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x2d4, 0x2d4, 0x2d4, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xfc, 0x120, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'team0\x00', {0x6d, 0x6, 0x81, 0x9, 0x8, 0xf, 0x5, 0x20, 0x80}, {0x7}}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @REJECT={0x24}}, {{@uncond, 0x0, 0xc8, 0xec, 0x0, {}, [@common=@inet=@dscp={{0x24}, {0x4, 0x1}}]}, @REJECT={0x24, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x40c) socket$l2tp6(0xa, 0x2, 0x73) clock_adjtime(0x0, &(0x7f0000000100)={0x2, 0x6a, 0x5, 0x8000000000000001, 0x48c, 0x5, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x7, 0x2, 0x1000000081, 0x5, 0x0, 0x5, 0x0, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x0, 0x5, 0x7}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000240)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000004c0)="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", 0xa33}], 0x1, 0x0, 0x0, 0x24000010}], 0x1, 0x24008014) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES8], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000b00)={0x18, &(0x7f0000000280)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xd01c4813, &(0x7f00000000c0)={0x2, 0x100, 0x0, 0x2, 0xfffffffd, 0x2}) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000280)=@filter={'filter\x00', 0xe, 0x4, 0x38c, 0xffffffff, 0x268, 0x0, 0x268, 0xffffffff, 0xffffffff, 0x330, 0x330, 0x330, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @remote, [0xffffffff, 0xff, 0xff, 0xff], [0xff000000, 0xff000000, 0xff], 'netdevsim0\x00', 'pim6reg1\x00', {0xff}, {0xff}, 0x0, 0xd, 0x0, 0x2}, 0x0, 0xec, 0x110, 0x0, {}, [@common=@dst={{0x48}, {0x1, 0x1, 0x1, [0x6, 0x47de, 0x5, 0x3, 0x20, 0xe000, 0x0, 0x5400, 0x1222, 0x1, 0x7, 0x40, 0x8, 0x400, 0x3, 0x400], 0xb}}]}, @common=@unspec=@STANDARD={0x24, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0xa4, 0xec}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xf6fa, 'syz1\x00', {0xab7}}}}, {{@uncond, 0x0, 0xa4, 0xc8}, @common=@unspec=@CONNSECMARK={0x24, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x3e8) mlock(&(0x7f000070c000/0x4000)=nil, 0x4000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 4.913308207s ago: executing program 1 (id=1690): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) io_setup(0x7, &(0x7f0000004200)=0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x81, 0x0) io_getevents(r1, 0x3, 0x3, &(0x7f0000000000)=[{}, {}, {}], 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = eventfd(0x5) r5 = eventfd(0x3) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000280)={r5, 0x4, 0x2, r4}) io_submit(r1, 0x1, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x4, r0, 0x0, 0x0, 0x2, 0x0, 0x1, r5}]) 3.962359987s ago: executing program 2 (id=1697): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x69801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x2}}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendto$packet(r0, &(0x7f00000001c0)="11eb0300fc0baf745836da8886dd", 0xe, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r3, 0x1, 0x4, 0x6, @multicast}, 0x14) (fail_nth: 3) 3.898247027s ago: executing program 2 (id=1698): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001740)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292", 0xc) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 3.756035831s ago: executing program 2 (id=1700): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) gettid() r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)={0x2c, r3, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x2c}}, 0x18) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, 0x0, 0x40) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = openat$vcsu(0xffffff9c, &(0x7f00000000c0), 0x2002, 0x0) ioctl$KDGETLED(r5, 0x4b31, &(0x7f0000000100)) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) close_range(r2, r0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x1, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x4, 0x200000400000000, 0x4, 0x344}, 0x0, 0x0) 3.737035364s ago: executing program 1 (id=1701): socket$packet(0x11, 0x2, 0x300) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000280)={0x2000000, 0x2, 0xf, 0x0, 0x0, 0x1ff, 0xffffffff}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r2, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a8880008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010700000018000000006700000008003e01"], 0x1c}}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) 3.562117226s ago: executing program 4 (id=1703): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000440)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x24, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @loopback, @rand_addr=0x640100fe, {[@cipso={0x86, 0x76, 0xffffffffffffffff, [{0x0, 0xc, "0800b28c590300000052"}, {0x5, 0x9, "020007651442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x8, "e706d30bd224"}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x6, 0xa, "0000000000800000"}, {0x7, 0x12, "73bc23f9ffffffa30900a301c8460000"}, {0x0, 0x12, "c8f46976e79ea788f03d9d3205927e3d"}]}, @cipso={0x86, 0x6, 0x20}]}}, "00020080"}}}}}, 0x0) 3.419675825s ago: executing program 0 (id=1705): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b80)={0x11c, 0x0, 0x2, 0x301, 0x0, 0x0, {0x5, 0x0, 0x2}, [@CTA_EXPECT_MASTER={0x74, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf}}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_MASK={0x94, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 3.401863197s ago: executing program 4 (id=1706): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x4c, r1, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x1}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x7}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x7a9}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x104}, 0x20000050) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000540)={0x0, 0x1c, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4a}]}, &(0x7f0000000400)=0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000100)={r4, 0x8000, 0xffffffff, 0x80000001}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r6 = syz_open_dev$sg(&(0x7f0000000100), 0xf9ba, 0x28540) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f00000002c0)={0x0, 0x401, 0x25}) r7 = syz_io_uring_setup(0x9d2, &(0x7f00000000c0)={0x0, 0xd535, 0x800, 0x3, 0x400001}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r7, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) r11 = socket$tipc(0x1e, 0x7, 0x0) connect$tipc(r11, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10) sendmmsg$inet(r3, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000d40)="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", 0x1000}], 0x1}}], 0x1, 0x8840) getsockopt$TIPC_DEST_DROPPABLE(r11, 0x10f, 0x81, &(0x7f0000000cc0), &(0x7f0000000d00)=0x4) r12 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TCXONC(r12, 0x540a, 0x2) ioctl$TIOCSPTLCK(r12, 0x40045431, &(0x7f0000000000)) r13 = ioctl$TIOCGPTPEER(r12, 0x5441, 0xb3d) r14 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r14, 0x1, r13, &(0x7f0000000040)={0x1008}) ioctl$TCSETSW(r13, 0x5403, &(0x7f00000000c0)={0x3, 0x3, 0x0, 0x7, 0x16, "58f29d1e7e13d79aec449401f50c007aa466df"}) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) 3.121775238s ago: executing program 0 (id=1708): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0xe) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) 2.799718241s ago: executing program 0 (id=1709): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x3}}}]}, 0x3c}}, 0x0) 2.607881307s ago: executing program 0 (id=1711): setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0) write$vga_arbiter(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="6c05636b206d656d00"], 0x9) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) syz_emit_ethernet(0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000008602002d803a0010000020010000000000efffffff"], 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x4, 0x804, 0x101, 0xf, 0x120000, 0x5, 0xfffffffffffffffc, 0x8, 0x8000000000000001, 0x2, 0xfffffffffffffffe, 0x101, 0x3, 0x1], 0x8000000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r4, 0xae80, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000300)={0x18, 0x0, {0x15, @remote, 'gre0\x00'}}, 0x1e) socket$packet(0x11, 0x3, 0x300) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r6, 0x40047438, &(0x7f0000000040)=0x2) socket$netlink(0x10, 0x3, 0x5) ioctl$PPPIOCBRIDGECHAN(r6, 0x40047435, &(0x7f0000000200)=0x1) sendmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 2.430553507s ago: executing program 3 (id=1712): setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000300)={0x18, 0x0, {0x15, @remote, 'gre0\x00'}}, 0x1e) socket$packet(0x11, 0x3, 0x300) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r2, 0x40047435, &(0x7f0000000200)=0x1) sendmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 2.387615307s ago: executing program 1 (id=1713): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000001, 0x13, r2, 0x100000) (async) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000001, 0x13, r2, 0x100000) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r5 = accept4$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000300)=0x14, 0x800) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0x20, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x5}, {0x5}, {0x9, 0x10}}, [@TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_CHAIN={0x8, 0xb, 0x44a}, @TCA_CHAIN={0x8, 0xb, 0x1d85}, @TCA_CHAIN={0x8, 0xb, 0x32}, @TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_CHAIN={0x8, 0xb, 0x100}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008040}, 0x35385f4795d21118) (async) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0x20, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x5}, {0x5}, {0x9, 0x10}}, [@TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_CHAIN={0x8, 0xb, 0x44a}, @TCA_CHAIN={0x8, 0xb, 0x1d85}, @TCA_CHAIN={0x8, 0xb, 0x32}, @TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_CHAIN={0x8, 0xb, 0x100}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008040}, 0x35385f4795d21118) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x884) 2.278887378s ago: executing program 4 (id=1714): syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100004b41460860163209ea800102030109021e0001000000000904"], 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) r2 = socket(0x6, 0x3, 0x800000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x2, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xf, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000005c40)=@newtfilter={0x1d80, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r6, {0x3, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_flow={{0x9}, {0x1d50, 0x2, [@TCA_FLOW_XOR={0x8, 0x7, 0x3}, @TCA_FLOW_ACT={0x1d44, 0x9, 0x0, 0x1, [@m_police={0x18e0, 0x1, 0x0, 0x0, {{0xb}, {0x18a4, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x0, 0x9, 0xf, 0x8a6, {0xd8, 0x1, 0x2, 0x7fff, 0x13, 0x2}, {0x1, 0x0, 0x4, 0xa, 0xe, 0x8}, 0x90e, 0x7, 0x800}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}], [@TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x5, 0x5, 0xed, 0xc, 0xffffffff, 0x1, 0x4, 0x4, 0x10001, 0x10000, 0x81, 0x2, 0x564, 0x0, 0x80, 0x7, 0xfffffc31, 0x5, 0x1, 0x1, 0x101, 0x5, 0x2, 0x7, 0x2, 0xb, 0x7, 0x3, 0x10001, 0xfffffffa, 0x4, 0xfffffffa, 0x6, 0x7, 0x7fffffff, 0xe, 0xfd, 0x9, 0x3, 0x6, 0x5, 0x4, 0x10000, 0x8, 0x3, 0x8, 0x2, 0x3, 0x0, 0x9, 0x1, 0x94d8, 0x6, 0x31b0, 0x10000000, 0x7fffffff, 0x81, 0xfffffffd, 0x5, 0xfffffff7, 0xfffffb91, 0x3dc, 0xb, 0x10001, 0x101, 0x9e7, 0x3, 0x5534, 0x8, 0x1ff, 0x9, 0xa, 0x6, 0xc74f, 0x96000000, 0x2, 0x1, 0x0, 0xf, 0x7, 0x2, 0xff, 0x5, 0xda, 0x3, 0x7, 0x4, 0xee2, 0x1f41, 0x6, 0x4, 0x3ff, 0x7, 0x7, 0x6, 0x8, 0xffff, 0x6e50, 0xffffbbe8, 0x8f0, 0x7, 0x0, 0x0, 0xffffff4a, 0x7, 0x80000001, 0x3ff, 0xce45, 0x9, 0x7, 0x1, 0x1, 0x5, 0x9, 0x5, 0x6a, 0x1, 0x0, 0x0, 0x1, 0x7, 0xffffffff, 0x1, 0x3, 0x3, 0xeeaf, 0x4, 0x9, 0x44, 0x3, 0x0, 0x6, 0xc000000, 0x6, 0x258, 0xbb, 0x876, 0x2, 0x4a, 0x1, 0xffffffff, 0x7, 0x5, 0x1e0, 0xfffffff9, 0x9, 0x2, 0x79b, 0xffffffbe, 0xff, 0x4, 0xd6, 0x0, 0xa, 0x9, 0x3a0, 0x8001, 0x7fff, 0x7, 0x4, 0xfff, 0x100, 0x0, 0x2, 0x6, 0xa, 0xfffffff7, 0x6, 0xd2, 0x4, 0xd09, 0x0, 0xa9, 0x7, 0x5, 0xa, 0xe, 0xd58c, 0x25a8, 0x4, 0x2, 0x0, 0x3, 0x2, 0x10000, 0xd, 0x9, 0xa14, 0x4, 0x9, 0xffffbdc6, 0x7fffffff, 0x3, 0x3, 0x5, 0xfffffff9, 0x7, 0x1, 0x5, 0x3, 0x4, 0x2, 0x200, 0x9, 0x8, 0x0, 0xb5, 0x0, 0x7f, 0x5, 0x2, 0x9, 0x1, 0x5, 0x4050e551, 0x7, 0x7, 0x200, 0x84, 0x61, 0x3ff, 0x3, 0x6, 0xc22e, 0x401, 0x8, 0x9, 0x7, 0xc, 0x6, 0xd61, 0xfffffffd, 0x8, 0x55, 0xfffffffa, 0x5, 0x2436, 0x1, 0x7, 0xa0000000, 0x2, 0x9, 0x8, 0x6, 0x8000, 0x3, 0xec37, 0x7f, 0x5, 0xe, 0x0, 0x3, 0x4f, 0xec, 0x150b]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xafa7, 0xfffffff9, 0x2400, 0x8, 0x7fff, 0x8, 0x9c48, 0xe, 0x96, 0x8, 0xc, 0x9, 0x3731, 0xd, 0x100, 0xd, 0x1d57, 0xbef, 0x9, 0xfffffffe, 0x4, 0x6, 0x0, 0x3ff, 0x4a, 0xb24, 0x0, 0x19f7, 0x7, 0x8, 0xffff, 0x9, 0x7fffffff, 0x1, 0x80000000, 0x2, 0x0, 0x3, 0xd, 0x0, 0x0, 0xffff0001, 0x227, 0x9, 0xffffa45d, 0x7fffffff, 0x80000000, 0x9, 0x4, 0x7, 0x2, 0x3, 0x4, 0x0, 0x1, 0xff, 0x1, 0x200, 0x0, 0x9, 0xd, 0x10000, 0x0, 0x9, 0x8000, 0x9, 0x1c4b51a5, 0x81, 0x9, 0x1, 0x27e, 0x7, 0x20000, 0x7, 0x7fff, 0xfffffffa, 0x480, 0x80000001, 0x40, 0x55cbb9a0, 0xba34, 0x9, 0x1, 0x7, 0x3, 0x9, 0x3, 0x7, 0x2, 0x9, 0x3, 0xe479, 0xffffffff, 0x4, 0x0, 0x100, 0x4f41, 0xffffffff, 0x7ff, 0x0, 0x8, 0x0, 0x0, 0x4, 0x5, 0x0, 0xe, 0x5, 0x3, 0x9, 0xa6d, 0x0, 0xa, 0x4, 0x5, 0x3, 0x5, 0x599, 0x0, 0x0, 0x6, 0x6, 0x770, 0x88, 0x0, 0x0, 0x4, 0x4, 0x2, 0x3, 0x1, 0x1, 0x0, 0x3a, 0x0, 0x7, 0x94e, 0x100, 0xed2, 0x7, 0x4, 0x2, 0x2, 0x3, 0x8000, 0x2, 0x80000000, 0x5, 0x8, 0xc8ec, 0x6de0, 0x8, 0x400, 0x0, 0xf31, 0x4, 0x7, 0x3ff, 0x4, 0x8, 0x100, 0x1, 0x5, 0x9, 0x6, 0x6, 0x3, 0x4129, 0x3ff, 0x9, 0x7, 0x9, 0x8, 0x6, 0x76c, 0x8, 0x8, 0x800, 0x5, 0x9, 0x80000000, 0x8001, 0xffff, 0x101, 0x400, 0x7, 0x800, 0x6, 0x0, 0x7, 0x2, 0x457, 0x5, 0x3, 0x3, 0x1160a8c2, 0x800, 0x8, 0x7, 0x3, 0x8000, 0x1, 0x0, 0xfffffffe, 0x7ff, 0x0, 0x8, 0x0, 0xe, 0x1, 0xfda0, 0x1, 0xff, 0x6, 0x100, 0x5, 0x2, 0x4, 0x1, 0x8000, 0x4, 0x5, 0x3, 0x7, 0x2, 0x4, 0x1, 0x7, 0x6, 0xff, 0x7fffffff, 0x7fffffff, 0xe, 0x45, 0x6, 0x1, 0xf28, 0xf9b4, 0x6, 0x8, 0x100, 0x7, 0xfffeffff, 0x1, 0x0, 0x1, 0x40, 0x1, 0x0, 0x4, 0x1, 0x32df, 0x8, 0x4, 0x5, 0x8]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x7, 0xffff, 0x5, 0x2, 0x5, 0x9, 0x2, 0xaad0, 0x3, 0x3f, 0x80000001, 0x0, 0x6, 0x9, 0xfffffffe, 0x1, 0x7, 0x5, 0xd, 0x0, 0x10000, 0xd92, 0x7ff, 0x7, 0x80, 0xfffffffe, 0xc0000000, 0x2, 0x7fffffff, 0x3, 0x4, 0x5, 0x6, 0x5, 0x0, 0x1, 0x2, 0x6, 0x3, 0x8, 0x354e, 0x20, 0xea, 0x6, 0x9, 0xfffffff6, 0x6, 0x6a, 0xb233, 0x4, 0x67, 0xd, 0x86, 0x5dd95b2e, 0xd7, 0x8, 0x2, 0xfffffffe, 0x3, 0xf62, 0x8, 0x10, 0x9, 0x0, 0xff, 0xfffffeb3, 0xffffffff, 0x1, 0x4b000000, 0x5, 0x9, 0x9, 0x7, 0x101, 0x0, 0x9, 0x5, 0xe969, 0x250, 0xff, 0x7f, 0x720, 0x8, 0x0, 0x400, 0x9, 0xf, 0x73b8, 0x7, 0x0, 0x2, 0x40, 0x2, 0x6, 0x6, 0xffffff88, 0x3, 0x10, 0xdd2, 0x1, 0x9, 0x8, 0xfffffffd, 0x2, 0x9, 0x97c, 0x7, 0xffff, 0x5, 0xe, 0xc, 0x9, 0x9, 0x0, 0x4, 0xfffff801, 0x0, 0x8, 0x802, 0x17, 0x4, 0xc5, 0x0, 0x80, 0x1, 0x3ad, 0xc756, 0xc3af, 0x4, 0x2, 0x723, 0x25, 0x1, 0x5, 0x7c0, 0x7a, 0x0, 0xa, 0xb, 0x8e, 0x4, 0x9, 0x9, 0x8, 0x2, 0x9, 0x1000, 0x0, 0x7fffffff, 0xffffff2c, 0x8, 0x3, 0x4, 0x38000, 0x58e, 0x7, 0x0, 0x3, 0x2, 0x1000, 0x8d, 0x81, 0x101, 0x101, 0x6, 0xf4e, 0xfff, 0x0, 0x7, 0x4, 0x40, 0x7, 0x5, 0x6, 0x9, 0x9, 0x0, 0x18ff, 0x700000, 0x3, 0x6, 0x6, 0x5, 0x8, 0x6, 0x9, 0x401, 0x0, 0x7, 0x3, 0x0, 0x9, 0x9, 0xb, 0xb, 0x4, 0xf, 0x7, 0xffff, 0xfffff000, 0x401, 0x9, 0x9, 0x3, 0x6, 0xe9f2, 0x0, 0x81, 0x2, 0x8, 0x0, 0x0, 0x80000000, 0x7, 0x6, 0x4, 0x5, 0x4, 0x7ff, 0x7, 0x1, 0xf, 0x37, 0xfffffff5, 0x8, 0x6, 0x8, 0x3, 0x6, 0x401, 0x8, 0x7f, 0x8001, 0xfffffffc, 0x9, 0xc1, 0xfffffffd, 0x40a, 0x0, 0x6, 0x2b9, 0x9, 0x7, 0xe, 0xa0, 0x3, 0x101, 0x9, 0x1000, 0x4d5, 0x561, 0x7, 0x8001, 0x1, 0xffff0000]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x2, 0x7, 0x10001, 0x5, 0x2, 0xfeb8, 0x401, 0x2, 0xffff, 0x1, 0xffffff72, 0x7, 0x80000001, 0xfffffffb, 0xd21, 0x1, 0xb, 0x7, 0x9a, 0x7f, 0x1ff, 0xe, 0x7, 0x7, 0x3, 0x4, 0x0, 0x4aa, 0xc, 0x81, 0x5, 0x89ef, 0x101, 0x3, 0xf1ed, 0x8, 0x316d, 0xf90, 0xd, 0x7fff, 0xa, 0x3, 0x4, 0x1, 0x9, 0x3, 0x7fffffff, 0xf, 0xff, 0x800, 0x10, 0x3, 0xa, 0x6, 0xfffffffd, 0x4, 0x800, 0x3, 0x0, 0x4, 0x180000, 0x7, 0x3, 0x3, 0x1, 0x1, 0x3, 0xb5, 0x8, 0x67, 0x4, 0x4, 0xb, 0xff, 0x9, 0x5, 0x3, 0x10, 0xe, 0xcba8, 0xff, 0x4, 0x7, 0x100, 0x3, 0x9, 0x9, 0x0, 0xd6c4, 0x0, 0x9, 0x9, 0x965a, 0xfff, 0x7, 0x42, 0x7fff, 0xd, 0x9, 0x652, 0x7, 0x5, 0x2, 0x4b2, 0xdb2, 0x42a, 0x7ff, 0x8, 0x2f, 0x2, 0x1dc5, 0x9, 0x6, 0x5, 0x4aded91d, 0xffff6683, 0x3, 0xf, 0x25, 0x9, 0x0, 0x8, 0xffffffd2, 0x7, 0x13ad, 0xfffffffc, 0x0, 0x7, 0xffff, 0x0, 0xe, 0xaa, 0xffff2a6e, 0x10, 0x0, 0x1, 0x2, 0x7, 0x6eee1a8f, 0xfffffffd, 0x5, 0x0, 0x3, 0x51e, 0x8, 0x80000000, 0x10, 0x2, 0x6, 0x0, 0x4, 0x8, 0x4, 0x81, 0x3, 0x8, 0xffffb8e1, 0x4, 0x502, 0x1, 0x1, 0x3, 0x4, 0x3, 0x6, 0x101, 0x200, 0x9, 0x4, 0x7fffffff, 0x5, 0x0, 0x6, 0x2, 0x3, 0x9, 0x1, 0x4, 0x80000000, 0x5, 0xf, 0x10000, 0xdec, 0x1, 0xd, 0x0, 0x4, 0x400, 0x4c7f, 0x5, 0x7f, 0x0, 0xbba, 0x10, 0xf5, 0x7, 0x0, 0x8, 0x8, 0x8, 0x5, 0x9, 0x0, 0x7fffffff, 0x8, 0xa38, 0x9, 0x0, 0x4, 0x9, 0x80000000, 0x6, 0x10001, 0xfffffffe, 0x80000000, 0x9, 0x5, 0x7ff, 0x7, 0x3, 0x7f, 0x7, 0x56b, 0x6, 0x6, 0x7fffffff, 0x6, 0x0, 0xb7c, 0x4e6, 0x2, 0x3, 0x7, 0x9, 0x7, 0x4, 0x8, 0x4, 0x8, 0x441, 0x1ff, 0x5, 0x563, 0xf0a, 0x3, 0x5, 0x9, 0x4, 0x2, 0x6, 0x1ff, 0xaf6, 0x5, 0x5, 0x8]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x7, 0x4, 0x6, 0x8, 0x80, 0x80, 0x9, 0x8, 0x7, 0xa, 0x35efcdee, 0xfd, 0x7ff, 0xfffffffc, 0x4, 0x0, 0x7ff8, 0x5, 0x9, 0x1, 0x7, 0x8001, 0x4, 0x1, 0x3ff, 0x2, 0x90a, 0x3, 0xe6dd, 0xfff, 0x10000, 0x9, 0x7, 0x1, 0x200, 0x400, 0xfffff7cd, 0x77, 0x400, 0xe7c3, 0x1, 0x7, 0x8, 0x0, 0x6, 0x68, 0x9, 0x2, 0x6, 0x3, 0x0, 0x8, 0xc77e, 0xbc0, 0x22, 0x8, 0x3, 0x5, 0x5a, 0x6, 0x1, 0x3, 0x1, 0x2, 0x2, 0x7, 0x101, 0x7, 0x8, 0x8, 0xffffffff, 0x5, 0x8001, 0x5, 0x3, 0x7, 0x8, 0xfffffff9, 0x8a83, 0x4, 0x100, 0x3, 0x9, 0x1, 0x0, 0x9, 0x8, 0x0, 0x6, 0x9, 0x8, 0x8, 0xb046, 0x6, 0x6, 0x10001, 0xffff, 0x49e, 0x602611a2, 0x3, 0x4, 0x1, 0x4, 0x83, 0x2, 0x80, 0x0, 0x6, 0x6, 0x7, 0x3, 0x800, 0x0, 0x1, 0xff, 0x3, 0x9, 0x1e853257, 0x0, 0x4, 0x8, 0xf, 0x7a5f, 0x7fff, 0xffff, 0x9, 0x4, 0x80, 0x7, 0x1460, 0x0, 0xdec8, 0x4000000, 0xf0, 0x9, 0x5, 0x80, 0x3, 0x2, 0x2, 0x9, 0x0, 0xa, 0x7, 0x5, 0x2, 0x3bcb0f8c, 0x6, 0x3, 0x9, 0x0, 0x5, 0xfffffffc, 0x800, 0x1ff, 0x9, 0xfff, 0x1, 0x7, 0xae4, 0xff, 0x638, 0x2ef, 0x1, 0x0, 0x1, 0x9, 0x3, 0x4, 0xe2, 0x3, 0x3a000000, 0x9, 0xfffffff9, 0x9, 0xf1a, 0x7ff, 0x8, 0x6, 0x9, 0xde77, 0x2, 0x4, 0x4, 0x4, 0x5, 0x85, 0x81, 0x8, 0x2, 0x14000, 0x10, 0x0, 0xe3bb, 0x5, 0x3, 0x9, 0xa8, 0x9, 0x3, 0xfff, 0xfffffffc, 0x4, 0x0, 0x3, 0x9, 0x7fffffff, 0x5, 0x4, 0x2, 0x9, 0x5c8, 0x0, 0x1, 0x6, 0x6, 0x8, 0x1, 0x100, 0x9, 0x7, 0x7, 0xfffffff9, 0x100, 0xff, 0x9, 0xe52, 0x8, 0x9, 0x80000001, 0xddc6, 0x1, 0xa1d, 0x9, 0x5, 0x10000, 0xfffff635, 0xc13, 0x2, 0xfffffffa, 0x80, 0xfffffff7, 0x5, 0x0, 0x401, 0x4, 0x5, 0x0, 0x5, 0x5, 0x8000, 0xe, 0xa, 0x7, 0x9]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2f90}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xd1c}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x51, 0x9, 0x1, 0x4, 0x1, 0xa, 0x81, 0x2, 0x5ed, 0x3ff, 0x1, 0x6, 0x9, 0x7, 0xa, 0x1ff, 0x8, 0x0, 0xd, 0x6, 0x7ff, 0xa3cb, 0x2f32, 0xa0000000, 0x8000, 0x10001, 0x3ff, 0x1000, 0x4, 0x6, 0xa, 0x7f, 0x5, 0x7fff, 0xcb3c, 0x9, 0x7, 0x4, 0x7, 0xe7, 0x8, 0x80000001, 0xffffffff, 0x0, 0x40, 0x5, 0xe, 0x8000, 0x0, 0x2, 0x3, 0x3, 0x790e, 0x5, 0x9, 0x81, 0x80000001, 0x159, 0x9, 0x5, 0x49cd, 0x1535cc0a, 0x1, 0x80, 0xc000, 0x7, 0x8, 0xff, 0xdf, 0x1, 0x3ff, 0x0, 0x7, 0x6, 0x0, 0xffff, 0x80000000, 0x48, 0xfffffff9, 0x6, 0xffffffff, 0x6, 0x72, 0x5, 0x7f1, 0x40, 0x5, 0x4, 0xd, 0x8001, 0xb9a7, 0x1, 0x7, 0xca, 0x8, 0xffff0000, 0x80000000, 0x7, 0x1, 0x3, 0xdee, 0x5, 0x6, 0x9, 0x1, 0x7, 0xfffffff7, 0x80000000, 0x6, 0x10001, 0xd, 0x9, 0xfe89, 0xe00, 0x81, 0x3, 0x8, 0x0, 0x0, 0x12c, 0xaf41, 0x7, 0x7, 0x0, 0xffff, 0xff, 0x4, 0x7, 0x5, 0x0, 0x3, 0x4, 0xc, 0x6, 0x5, 0x8, 0x0, 0x501c, 0x1, 0x3, 0x6, 0xc4, 0x6, 0x5, 0x2, 0x3, 0x8000, 0xd1f, 0x683, 0x11, 0x7cec83f2, 0x6, 0x2, 0xff, 0x6, 0x0, 0x9, 0x1, 0x3ff, 0x80, 0x400, 0x10, 0x3, 0x180, 0x4, 0x80000001, 0x2, 0x2, 0x200, 0xe, 0x5, 0x4, 0x2, 0x7ff, 0x80, 0x10001, 0x0, 0x15, 0x0, 0xe, 0x39, 0xfffffffb, 0x9, 0xfa, 0x5, 0x4, 0x5000000, 0xcd, 0x7, 0x2, 0x3, 0x7, 0x8000, 0x6, 0x80000000, 0x3ff, 0x4, 0x6, 0xa4, 0xf4, 0x9, 0xb, 0xb, 0x3, 0xb9, 0x9, 0x3, 0x5, 0xa, 0x100, 0x8, 0x2a6f, 0xffff8000, 0x5, 0x5, 0x200, 0x8, 0x1fffc0, 0x7, 0x4, 0x8, 0x0, 0x4, 0xeaa1, 0x7fdf, 0x2, 0x6, 0x4, 0x7, 0x3, 0x7, 0x40, 0x8, 0x2, 0x0, 0x0, 0x7, 0x80, 0x7, 0x8, 0x4, 0xfff, 0x834, 0x1, 0xa30, 0x7a12127d, 0x690e, 0x80000001, 0xa, 0x2, 0x9, 0x0, 0x6a, 0x4, 0xe4]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7f}], []]}, {0x12, 0x6, "f2c3dc603708ee794ed8b2c76ecc"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_gact={0xc0, 0x0, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xb, 0x8, 0x10000000, 0x100, 0x738}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x25cf}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1f83, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1, 0x6, 0x5, 0x1, 0x8}}]}, {0x4c, 0x6, "600d278dbf3609ac2ac0a68367fc840f18d274b8695b49c5d09e279017319d4d7536aac77bc0d3935bcb3c6e4f6eb0e8244163d83b468426ff599abb77b34bcbd098180345b96e2b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x5}}}}, @m_csum={0xc0, 0x20, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x10000, 0x0, 0x1, 0x9}, 0x26}}]}, {0x77, 0x6, "8659aaaf5dbdd3fcf14025146d778eedd873856eeb6980cfe1cf7baa230bda0cd4133f3105ac555e0e4340282be8d00f111836120afdd953cf6801f65d782f60f9b5358981ad2aa00da213a4f3ad44666209f56925a590346b5128d9f11245c53e74d37e3df7786bc9203687349f346ec94ca3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ct={0x158, 0x15, 0x0, 0x0, {{0x7}, {0x78, 0x2, 0x0, 0x1, [@TCA_CT_MARK_MASK={0x8, 0x6, 0xfffffc00}, @TCA_CT_ACTION={0x6, 0x3, 0x2a}, @TCA_CT_LABELS={0x14, 0x7, "b9211709ce7ce063d5bc1006040a98ae"}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010102}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @remote}, @TCA_CT_ACTION={0x6, 0x3, 0x4}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @rand_addr=0x64010101}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @loopback}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @loopback}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e22}]}, {0xbb, 0x6, "d6e8658b7c215096962b59ff02c9fdfe6d984e86e20b43ab1060516c09fb33268762f87b7ac9b5199b947ca9c774b51c3355a817720919a83097a7e7ebb6660927e1d8872a155c82b1a34c0aa0d92e362a0c5c4f3ca4bd131bde47ac65cca6054b892396f3ca41f377ae62c3f624fd67e2fa825cde06b1815124667714645051ed0107e84c629e386e271396b11318fe4f13d45c590f92b0948fac43c0c3b8af9f12391853dd47ba35408b55020ad4450fd8105f9d1491"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ctinfo={0x78, 0x15, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x7}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8}]}, {0x3a, 0x6, "bd71a2678609379a142500afd61ae3d45edf5196f2975114a3715ec5d99a0c29ff62baba9904b39246e41b37d9242ec1efd6face062f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ife={0xc0, 0x15, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x2}]}, @TCA_IFE_SMAC={0xa, 0x4, @random="0d30127f3e2e"}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}]}, {0x74, 0x6, "f098f655a29fb63f3482558f29b58dfa0e834ababfbae07abdf027336a96740509f76e5032b1a6d38006a28ffc4e2532b935a059caa85c961dfd3f235f16c9a3fe7c2cb542aaa720178761a1a90e217ab50b240067712db33b458043a4196dd108ba9a67fba4c57a032640229a2f18d7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_simple={0x50, 0x20, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xfe, 0xfffffffa, 0x5, 0x4, 0x2}}]}, {0x9, 0x6, "51f345ffa3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x1d80}, 0x1, 0x0, 0x0, 0x84}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x6, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x2400}, 0xa5, 0x4, 0x10100000}}, @TCA_TBF_BURST={0x8, 0x6, 0x3ff}]}}]}, 0x60}}, 0x44080) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r10, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r10, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r10, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304}, "1f7ccf321caed171", "1cdfc1543aa2681d6b7415f858f08cc679dd2368c409ed0000c8b225d5393ea7", "fab4e8b5", "41aa6f7cc8603cb9"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r10, 0x11a, 0x1, &(0x7f0000000500)=@gcm_128={{0x304}, "e8ffff0700", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r12 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000008c0)=@newqdisc={0x70, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r11, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x0, 0x3ff, 0x6, 0x4, 0x5}, {0xff, 0x1, 0x401, 0xf64a, 0x1, 0x9}, 0xf97, 0x6, 0xb70}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x592f3ca27be3fa98}, @TCA_TBF_RATE64={0xc, 0x4, 0x2e27b565961173ac}]}}]}, 0x70}}, 0x800) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x4, 0x4) sendmmsg$inet6(r1, &(0x7f0000005c00)=[{{&(0x7f00000022c0)={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x6}, 0x1c, &(0x7f0000003a40)=[{&(0x7f00000037c0)="1049456d5c", 0x5}], 0x1}}], 0x1, 0x20000080) syz_io_uring_setup(0x111, &(0x7f00000000c0)={0x0, 0x24ad, 0x10000, 0x1, 0x1de}, &(0x7f00000029c0), &(0x7f0000000000)) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) 2.207078992s ago: executing program 3 (id=1715): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) close(0xffffffffffffffff) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xa, 0xfff3}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x4008000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.908094396s ago: executing program 1 (id=1716): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000440)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x24, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @loopback, @rand_addr=0x640100fe, {[@cipso={0x86, 0x76, 0xffffffffffffffff, [{0x0, 0xc, "0800b28c590300000052"}, {0x5, 0x9, "020007651442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x8, "e706d30bd224"}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x6, 0xa, "0000000000800000"}, {0x7, 0x12, "73bc23f9ffffffa30900a301c8460000"}, {0x0, 0x12, "c8f46976e79ea788f03d9d3205927e3d"}]}, @cipso={0x86, 0x6, 0x20}]}}, "00020080"}}}}}, 0x0) 1.86101312s ago: executing program 1 (id=1717): syz_usb_connect(0x2, 0x2d, &(0x7f0000000480)={{0x12, 0x1, 0xfdfb, 0x1e, 0xba, 0xd7, 0x8, 0xeb1a, 0x2801, 0x217a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x5, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xbb, 0x8, 0x1, 0x10, 0x3f, 0x8d, 0x4, [], [{{0x9, 0x5, 0x80, 0xc, 0x40, 0x7, 0x5, 0x1}}]}}]}}]}}, 0x0) 1.755798143s ago: executing program 3 (id=1718): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b80)={0x11c, 0x0, 0x2, 0x301, 0x0, 0x0, {0x5, 0x0, 0x2}, [@CTA_EXPECT_MASTER={0x74, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf}}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_MASK={0x94, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 1.698618094s ago: executing program 3 (id=1719): socket(0xa, 0x3, 0x3a) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat$sndtimer(0xffffff9c, &(0x7f0000000000), 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) socket(0x2c, 0x3, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$dmmidi(&(0x7f0000000400), 0x8, 0x400040) r3 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) write$binfmt_misc(r3, &(0x7f0000000080)="bfe6", 0x2) sendmmsg$unix(r2, &(0x7f0000000640)=[{{&(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000780)=[{&(0x7f0000000540)="4cb9e105441ef52c8534b417dd790aa0e92b8c7327c3da90270c3e2d15ce3a9a99b2825c962ec32ef8a8b6344d5d35670c2dc85d81dba7aafe9cdcfa700d5130d2949835fc3728eea344e13487bc3b8282dd9dff9d49f7994cbf98f7972f", 0x5e}, {&(0x7f00000005c0)="923a79d85ae5c56cf93e1170c9fe24de9f9f2d300b9a561311d5", 0x1a}, {&(0x7f00000006c0)="c77e4119d2bf26e758e7c98fcf8bd38abb98d677cc0500b60ed651af797ec6043b838c10b601b6ec4e375ba4bbbe350bfbbd79cd81af2677e59f5921be4dab320b06099b263d4c3f6e5040a74780af7c11fb5dce497d1dec810c21f3eea28e5135861845617611ec387de1469d03a40ab2b4e369e753de5ec944c24ddf1af460c350e45adb0732a12a619901db5d", 0x8e}], 0x3, 0x0, 0x0, 0x40}}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) syz_usb_connect(0x6, 0x3b, &(0x7f0000000100)=ANY=[], 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000001540), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r4, 0x80084121, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xa}}}, 0x24}}, 0x0) 1.62979145s ago: executing program 2 (id=1720): semctl$GETVAL(0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000000)=""/4096) r0 = semget$private(0x0, 0x1, 0x58) semctl$GETNCNT(r0, 0x1, 0xe, &(0x7f0000001000)=""/4096) semctl$SETVAL(r0, 0x2, 0x10, &(0x7f0000002000)=0x917) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000002040)=""/173) r1 = openat$audio1(0xffffff9c, &(0x7f0000002100), 0x800, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r1, 0x80044d14, &(0x7f0000002140)) semctl$SEM_STAT_ANY(r0, 0x2, 0x14, &(0x7f0000002180)=""/101) r2 = eventfd(0x2) unshare(0x100) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000002200)) quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000801, 0xee01, &(0x7f0000002240)={0x3, 0x4, 0x80000000, 0x5, 0xa0, 0xffffffffffffff43, 0x8, 0x1, 0xffffc25f}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000022c0)={{{@in6=@private1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in=@loopback}}, &(0x7f00000023c0)=0xe4) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002400)={{{@in6=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6}}, &(0x7f0000002500)=0xe4) statx(0xffffffffffffff9c, &(0x7f0000002540)='./file0\x00', 0x100, 0x40, &(0x7f0000002580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000002680)={{0x0, r3, 0xee01, r4, r5, 0x84, 0x8}, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2}) semctl$SEM_STAT(r0, 0x4, 0x12, &(0x7f00000026c0)=""/132) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000002780), &(0x7f00000027c0)='.\x00', 0x2, 0x1) fcntl$addseals(r2, 0x409, 0x9) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000002800), &(0x7f0000002840)=0xc) semctl$SEM_INFO(r0, 0x0, 0x13, &(0x7f0000002880)=""/117) r7 = openat$vimc0(0xffffff9c, &(0x7f0000002900), 0x2, 0x0) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f0000002940)=0xde3) semctl$IPC_INFO(r0, 0x0, 0x3, &(0x7f0000002980)=""/152) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_RX_RING(r8, 0x10e, 0x6, &(0x7f0000002a40)={0xcf, 0x200, 0x0, 0xffffffff}, 0x10) socket$netlink(0x10, 0x3, 0x15) semctl$SEM_STAT_ANY(r0, 0x0, 0x14, &(0x7f0000002a80)=""/26) 1.548038337s ago: executing program 0 (id=1721): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000000)={0x2}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) 1.52180665s ago: executing program 2 (id=1722): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001740)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 1.452141309s ago: executing program 0 (id=1723): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) pipe(0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0x13dc, 0x9, 0x8, 0x0, 0x400003}, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x401c, &(0x7f0000000240)='}\x00') r5 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x60) read$FUSE(0xffffffffffffffff, &(0x7f0000002980)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) inotify_add_watch(0xffffffffffffffff, 0x0, 0x0) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000000000)=0xffff0018) ioctl$SOUND_PCM_READ_CHANNELS(r7, 0x80045006, 0x0) syz_emit_ethernet(0x42, &(0x7f00000003c0)=ANY=[], 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0xffe, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffe97, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\x86\xd96\x18\xccG8\xc8\xdd\x15\xcc\xd2\xf1d'}, 0x30) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r8, &(0x7f0000000180)='syz1\x00', 0x1ff) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x7) sendmsg$key(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=ANY=[@ANYBLOB="42050006060000002dbd700004dbdf2504000300380000dc0f00000000000000f9ffffffffffffffff7f000000000000530707531c6937880a2088ba13f64c012f0f21fa74feddba70ad7331204fc959c4a0a86cc99c2e817ac3e3aa484ef8e5a8a375c947b53ea383140115bafd52ed0a416fea34cbcb7f1e08c4ec4fc951c0f99d8b0d1be0a04e59d1cdbd4ec51a82fe96b5395169c07b6055bb24d089d81c6978492b1c506a2cd75743ffbe4f37ba58b16361a997827c3f7c0074fd73abc1eb04689685eadb8da751e882f522244b9c646caf892cbc11d661d17e7ec4c83cb233e09f793103d68eea4080", @ANYRESHEX, @ANYRES64=r3, @ANYRES16=r6, @ANYRES8, @ANYRES16=r4, @ANYRES16=r3], 0x30}}, 0x4008810) r9 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r9, 0xc0445624, &(0x7f0000000340)={0x88000003, 0x0, "679c51ecbc83d0e22e845e3ede5adc714d88a57474315dc49c00", 0x1, 0x0, 0x0, 0x200, 0x6}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="640000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e64000000003400028008000300810000000800050000000000080004000000000008000f00ff01"], 0x64}}, 0x0) 1.320483889s ago: executing program 2 (id=1724): socket(0x1e, 0x4, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$igmp6(0xa, 0x3, 0x2) recvmmsg(r1, &(0x7f00000000c0), 0x0, 0x40002100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x8001, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xda) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000200)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x40400c5}, 0x4) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x40c}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @multicast1}, 0x1}}, 0x2e) syz_open_dev$sndmidi(0x0, 0x2, 0x141581) r4 = dup(0xffffffffffffffff) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c00000001900674c000000000000000000000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac000000000000000000000400000000000000000000000004000000000000000000220c001c00", @ANYRES32=0x0, @ANYBLOB="01000000"], 0xc0}}, 0xc0d0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x2de, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x0) ioctl$DRM_IOCTL_GET_MAP(r4, 0xc0286404, &(0x7f0000000140)={&(0x7f0000329000/0x4000)=nil}) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40000d4) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000000000007f000001000000000000000000000000ac1e000100000000000000000000000000000000000000000a003080"], 0xb8}}, 0x0) 1.0311381s ago: executing program 3 (id=1725): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) r3 = syz_io_uring_setup(0x1327, &(0x7f0000000300)={0x0, 0x7303, 0x10100, 0x0, 0x2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x2def, 0x4000, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000100)=0x40) r6 = dup(r1) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f0000000440)={0x80, 0x6, 0xf00, 0x1, 0x0, 0x5, 0x0}) r7 = syz_io_uring_setup(0x838, &(0x7f0000000240)={0x0, 0x1998, 0x500, 0x2000006, 0x3ce, 0x0, r6}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}}, 0x0) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x39a904175f124fbf}) io_uring_enter(r7, 0x3516, 0x0, 0x0, 0x0, 0x0) 851.660412ms ago: executing program 1 (id=1726): r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x20, r0, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x4}]}, 0x20}}, 0x4008080) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0), 0x8) unshare(0x6a040000) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r3 = socket(0x21, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8000, @multicast2}}, 0x24) sendmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x110, 0x1}], 0x10, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}}], 0xf000, 0x10002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x492140, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@sndrcv={0x2c, 0x84, 0x1, {0x0, 0x5, 0xc, 0x0, 0x8000}}, @dstaddrv6={0x1c, 0x84, 0x8, @private2}], 0x48}], 0x1, 0x0) io_setup(0x30, &(0x7f0000000600)=0x0) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000300)={0x32, 0x14, 0x0, 0x8, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @empty, @private1, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x33}, @mcast2, @empty]}, 0xa8) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) r6 = eventfd(0x4) io_submit(r4, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f00000000c0)="01", 0xfffffe77, 0x0, 0x0, 0x0, r6}]) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) 295.922813ms ago: executing program 4 (id=1727): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xb2, &(0x7f0000000440)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xa4, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x21, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @loopback, @rand_addr=0x640100fe, {[@cipso={0x86, 0x69, 0xffffffffffffffff, [{0x0, 0xc, "0800b28c590300000052"}, {0x5, 0x9, "020007651442eb"}, {0x0, 0x9, "e706d30bd224f8"}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x6, 0xa, "0000000000800000"}, {0x7, 0x12, "73bc23f9ffffffa30900a301c8460000"}, {0x0, 0x12, "c8f46976e79ea788f03d9d3205927e3d"}]}, @cipso={0x86, 0x6, 0x20}]}}, "00020080"}}}}}, 0x0) 92.549127ms ago: executing program 3 (id=1728): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) close(0xffffffffffffffff) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xa, 0xfff3}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x4008000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 0s ago: executing program 4 (id=1729): r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0x21005, 0x40) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x1, 0x0, 0x2, 0x4, 0x0, 0xfffffffc}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000580)={@in6={0xa, 0x4e23, 0x6f5d, @local, 0xb}, {&(0x7f00000004c0)=""/137, 0x89}, &(0x7f00000000c0), 0x4e}, 0xa0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, 0x0, 0xffe) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x20, 0x1e, 0x3c964e403b131b43}, 0x20}}, 0x0) recvmmsg(r6, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x20, 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(0xffffffffffffffff, 0x4004551e, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2710, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2f, 0xffffffd4, 0x0, 0x0, 0x20}}, &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c000000100009060300", @ANYBLOB="adffa888f00306001c"], 0x3c}}, 0x40050) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x0) kernel console output (not intermixed with test programs): __pfx____ratelimit+0x10/0x10 [ 237.796506][ T9253] ? __pfx_dump_stack_lvl+0x10/0x10 [ 237.796524][ T9253] ? __pfx__printk+0x10/0x10 [ 237.796543][ T9253] ? __might_fault+0xb0/0x130 [ 237.796572][ T9253] should_fail_ex+0x414/0x560 [ 237.796602][ T9253] _copy_from_user+0x2d/0xb0 [ 237.796624][ T9253] get_compat_msghdr+0xad/0x4a0 [ 237.796657][ T9253] ? __pfx_get_compat_msghdr+0x10/0x10 [ 237.796694][ T9253] ___sys_sendmsg+0x193/0x2a0 [ 237.796715][ T9253] ? __pfx____sys_sendmsg+0x10/0x10 [ 237.796767][ T9253] ? __fget_files+0x2a/0x420 [ 237.796787][ T9253] ? __fget_files+0x3a0/0x420 [ 237.796818][ T9253] __sys_sendmsg+0x164/0x220 [ 237.796837][ T9253] ? __pfx___sys_sendmsg+0x10/0x10 [ 237.796863][ T9253] ? __pfx_ksys_write+0x10/0x10 [ 237.796891][ T9253] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 237.796912][ T9253] ? lockdep_hardirqs_on+0x9c/0x150 [ 237.796937][ T9253] __do_fast_syscall_32+0xb6/0x2b0 [ 237.796964][ T9253] do_fast_syscall_32+0x34/0x80 [ 237.796983][ T9253] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 237.797004][ T9253] RIP: 0023:0xf702d539 [ 237.797020][ T9253] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 237.797034][ T9253] RSP: 002b:00000000f541d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 237.797053][ T9253] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0 [ 237.797065][ T9253] RDX: 0000000000000840 RSI: 0000000000000000 RDI: 0000000000000000 [ 237.797076][ T9253] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 237.797086][ T9253] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 237.797096][ T9253] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 237.797124][ T9253] [ 239.053712][ T9277] netlink: 'syz.4.1228': attribute type 3 has an invalid length. [ 239.076687][ T9277] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1228'. [ 240.272246][ T9294] FAULT_INJECTION: forcing a failure. [ 240.272246][ T9294] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 240.306303][ T9294] CPU: 0 UID: 0 PID: 9294 Comm: syz.3.1231 Not tainted syzkaller #0 PREEMPT(full) [ 240.306328][ T9294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 240.306368][ T9294] Call Trace: [ 240.306376][ T9294] [ 240.306384][ T9294] dump_stack_lvl+0x189/0x250 [ 240.306407][ T9294] ? __pfx____ratelimit+0x10/0x10 [ 240.306433][ T9294] ? __pfx_dump_stack_lvl+0x10/0x10 [ 240.306451][ T9294] ? __pfx__printk+0x10/0x10 [ 240.306481][ T9294] should_fail_ex+0x414/0x560 [ 240.306512][ T9294] _copy_to_user+0x31/0xb0 [ 240.306537][ T9294] simple_read_from_buffer+0xe1/0x170 [ 240.306562][ T9294] proc_fail_nth_read+0x1b3/0x220 [ 240.306589][ T9294] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 240.306734][ T9294] ? rw_verify_area+0x2a6/0x4d0 [ 240.306753][ T9294] ? __lock_acquire+0xab9/0xd20 [ 240.306772][ T9294] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 240.306799][ T9294] vfs_read+0x200/0xa30 [ 240.306814][ T9294] ? fdget_pos+0x247/0x320 [ 240.306836][ T9294] ? __pfx___mutex_lock+0x10/0x10 [ 240.306856][ T9294] ? __pfx_vfs_read+0x10/0x10 [ 240.306879][ T9294] ? __fget_files+0x2a/0x420 [ 240.306904][ T9294] ? __fget_files+0x3a0/0x420 [ 240.306924][ T9294] ? __fget_files+0x2a/0x420 [ 240.306952][ T9294] ksys_read+0x145/0x250 [ 240.306973][ T9294] ? __pfx_ksys_read+0x10/0x10 [ 240.306995][ T9294] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 240.307014][ T9294] ? lockdep_hardirqs_on+0x9c/0x150 [ 240.307036][ T9294] __do_fast_syscall_32+0xb6/0x2b0 [ 240.307057][ T9294] ? lockdep_hardirqs_on+0x9c/0x150 [ 240.307079][ T9294] do_fast_syscall_32+0x34/0x80 [ 240.307098][ T9294] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 240.307118][ T9294] RIP: 0023:0xf7fb2539 [ 240.307134][ T9294] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 240.307149][ T9294] RSP: 002b:00000000f5485590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 240.307168][ T9294] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f5485620 [ 240.307181][ T9294] RDX: 000000000000000f RSI: 00000000f7445ff4 RDI: 0000000000000000 [ 240.307192][ T9294] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 240.307201][ T9294] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 240.307212][ T9294] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 240.307241][ T9294] [ 241.175621][ T9310] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1237'. [ 241.186574][ T874] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 241.351565][ T874] usb 5-1: Using ep0 maxpacket: 16 [ 241.359639][ T874] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.373507][ T874] usb 5-1: config 0 interface 0 has no altsetting 0 [ 241.384820][ T874] usb 5-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 241.399988][ T874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.720590][ T874] usb 5-1: config 0 descriptor?? [ 241.942137][ T9319] : renamed from bond0 (while UP) [ 241.979187][ T874] logitech-djreceiver 0003:046D:C71B.0013: hidraw0: USB HID v0.05 Device [HID 046d:c71b] on usb-dummy_hcd.4-1/input0 [ 242.134119][ T874] usb 5-1: USB disconnect, device number 10 [ 242.330616][ T9323] fido_id[9323]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 243.234435][ T9349] netlink: 'syz.1.1250': attribute type 1 has an invalid length. [ 243.381321][ T9349] netlink: 'syz.1.1250': attribute type 6 has an invalid length. [ 243.401558][ T9349] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1250'. [ 243.503564][ T9356] macsec1: entered promiscuous mode [ 243.511396][ T9352] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1248'. [ 243.524428][ T9356] macsec1: entered allmulticast mode [ 243.533023][ T9352] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1248'. [ 243.977495][ T9363] FAULT_INJECTION: forcing a failure. [ 243.977495][ T9363] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.034192][ T9363] CPU: 1 UID: 0 PID: 9363 Comm: syz.2.1256 Not tainted syzkaller #0 PREEMPT(full) [ 244.034217][ T9363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 244.034234][ T9363] Call Trace: [ 244.034242][ T9363] [ 244.034250][ T9363] dump_stack_lvl+0x189/0x250 [ 244.034273][ T9363] ? __pfx____ratelimit+0x10/0x10 [ 244.034299][ T9363] ? __pfx_dump_stack_lvl+0x10/0x10 [ 244.034318][ T9363] ? __pfx__printk+0x10/0x10 [ 244.034336][ T9363] ? __might_fault+0xb0/0x130 [ 244.034366][ T9363] should_fail_ex+0x414/0x560 [ 244.034397][ T9363] _copy_from_user+0x2d/0xb0 [ 244.034421][ T9363] kstrtouint_from_user+0xc4/0x170 [ 244.034443][ T9363] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 244.034480][ T9363] proc_fail_nth_write+0x88/0x200 [ 244.034498][ T9363] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 244.034529][ T9363] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 244.034556][ T9363] vfs_write+0x27e/0xb30 [ 244.034584][ T9363] ? __pfx_vfs_write+0x10/0x10 [ 244.034604][ T9363] ? __fget_files+0x2a/0x420 [ 244.034630][ T9363] ? __fget_files+0x3a0/0x420 [ 244.034648][ T9363] ? __fget_files+0x2a/0x420 [ 244.034678][ T9363] ksys_write+0x145/0x250 [ 244.034695][ T9363] ? exc_page_fault+0x82/0x100 [ 244.034714][ T9363] ? __pfx_ksys_write+0x10/0x10 [ 244.034735][ T9363] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 244.034755][ T9363] ? lockdep_hardirqs_on+0x9c/0x150 [ 244.034777][ T9363] __do_fast_syscall_32+0xb6/0x2b0 [ 244.034796][ T9363] ? lockdep_hardirqs_on+0x9c/0x150 [ 244.034818][ T9363] do_fast_syscall_32+0x34/0x80 [ 244.034838][ T9363] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 244.034859][ T9363] RIP: 0023:0xf708d539 [ 244.034874][ T9363] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 244.034889][ T9363] RSP: 002b:00000000f547d590 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 244.034906][ T9363] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f547d620 [ 244.034919][ T9363] RDX: 0000000000000001 RSI: 00000000f7425ff4 RDI: 0000000000000000 [ 244.034930][ T9363] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 244.034940][ T9363] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 244.034950][ T9363] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 244.034978][ T9363] [ 244.296150][ T9367] netlink: 'syz.1.1257': attribute type 1 has an invalid length. [ 244.308774][ T9367] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 244.316397][ T9367] IPv6: NLM_F_CREATE should be set when creating new route [ 244.323668][ T9367] IPv6: NLM_F_CREATE should be set when creating new route [ 244.666177][ T9376] syzkaller0: tun_chr_ioctl cmd 1074025678 [ 244.693967][ T9376] syzkaller0: group set to 0 [ 245.393321][ T5925] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 245.748653][ T5925] usb 2-1: Using ep0 maxpacket: 16 [ 245.860452][ T5925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.964061][ T5925] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 246.030688][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.072901][ T5925] usb 2-1: config 0 descriptor?? [ 246.073552][ T9395] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1266'. [ 246.143608][ T9395] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1266'. [ 246.174264][ T9395] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 246.347853][ T5925] usbhid 2-1:0.0: can't add hid device: -71 [ 246.363240][ T5925] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 246.430532][ T5925] usb 2-1: USB disconnect, device number 18 [ 246.522984][ T9401] netlink: 'syz.3.1267': attribute type 1 has an invalid length. [ 246.569112][ T9402] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1268'. [ 246.586427][ T9401] netlink: 'syz.3.1267': attribute type 6 has an invalid length. [ 246.618957][ T9401] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1267'. [ 246.934866][ T9410] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 246.953468][ T1341] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.990034][ T1341] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.004388][ T1341] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.046094][ T1211] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 247.061434][ T1341] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.213637][ T1211] usb 5-1: config 0 has an invalid descriptor of length 89, skipping remainder of the config [ 247.246721][ T1211] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 247.269838][ T1211] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.299804][ T1211] usb 5-1: Product: syz [ 247.313001][ T1211] usb 5-1: Manufacturer: syz [ 247.328151][ T1211] usb 5-1: SerialNumber: syz [ 247.350715][ T1211] usb 5-1: config 0 descriptor?? [ 247.564849][ T1211] usb 5-1: bad CDC descriptors [ 247.602571][ T1211] usb 5-1: unsupported MDLM descriptors [ 247.686217][ T1211] usb 5-1: USB disconnect, device number 11 [ 248.041905][ T24] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 248.236001][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 248.259937][ T24] usb 4-1: config 150 has an invalid interface number: 101 but max is 1 [ 248.268825][ T24] usb 4-1: config 150 has an invalid interface number: 236 but max is 1 [ 248.288807][ T24] usb 4-1: config 150 has no interface number 0 [ 248.314891][ T24] usb 4-1: config 150 has no interface number 1 [ 248.331720][ T24] usb 4-1: config 150 interface 101 has no altsetting 0 [ 248.345148][ T24] usb 4-1: config 150 interface 236 has no altsetting 0 [ 249.114724][ T24] usb 4-1: New USB device found, idVendor=0421, idProduct=04c9, bcdDevice=3c.6d [ 249.166534][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.185184][ T24] usb 4-1: Product: syz [ 249.189919][ T24] usb 4-1: Manufacturer: syz [ 249.194546][ T24] usb 4-1: SerialNumber: syz [ 249.854922][ T9463] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 250.366115][ T5925] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 250.516170][ T5925] usb 2-1: Using ep0 maxpacket: 8 [ 250.532870][ T5925] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.555745][ T5925] usb 2-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6 [ 250.605712][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.640213][ T5925] usb 2-1: config 0 descriptor?? [ 250.865080][ T5925] usb 2-1: USB disconnect, device number 19 [ 250.888603][ T9481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1296'. [ 251.016129][ T24] usb 4-1: bad CDC descriptors [ 251.036321][ T24] usb 4-1: USB disconnect, device number 20 [ 251.600395][ T9503] FAULT_INJECTION: forcing a failure. [ 251.600395][ T9503] name failslab, interval 1, probability 0, space 0, times 0 [ 251.613341][ T9503] CPU: 0 UID: 0 PID: 9503 Comm: syz.4.1302 Not tainted syzkaller #0 PREEMPT(full) [ 251.613366][ T9503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 251.613375][ T9503] Call Trace: [ 251.613382][ T9503] [ 251.613389][ T9503] dump_stack_lvl+0x189/0x250 [ 251.613411][ T9503] ? __pfx____ratelimit+0x10/0x10 [ 251.613435][ T9503] ? __pfx_dump_stack_lvl+0x10/0x10 [ 251.613453][ T9503] ? __pfx__printk+0x10/0x10 [ 251.613484][ T9503] should_fail_ex+0x414/0x560 [ 251.613525][ T9503] should_failslab+0xa8/0x100 [ 251.613549][ T9503] __kmalloc_cache_noprof+0x6f/0x6f0 [ 251.613570][ T9503] ? nsim_fib_event_nb+0x187/0x1080 [ 251.613590][ T9503] ? __lock_acquire+0xab9/0xd20 [ 251.613614][ T9503] nsim_fib_event_nb+0x187/0x1080 [ 251.613635][ T9503] ? atomic_notifier_call_chain+0x26/0x180 [ 251.613664][ T9503] notifier_call_chain+0x1b6/0x3e0 [ 251.613688][ T9503] ? atomic_notifier_call_chain+0x26/0x180 [ 251.613712][ T9503] atomic_notifier_call_chain+0xda/0x180 [ 251.613739][ T9503] call_fib_notifiers+0x31/0x60 [ 251.613764][ T9503] fib6_del+0x104d/0x1550 [ 251.613785][ T9503] ? fib6_del+0x5e1/0x1550 [ 251.613817][ T9503] ? __pfx_fib6_del+0x10/0x10 [ 251.613834][ T9503] ? do_raw_spin_lock+0x121/0x290 [ 251.613849][ T9503] ? __ip6_del_rt+0x8c/0x180 [ 251.613877][ T9503] ? __ip6_del_rt+0x8c/0x180 [ 251.613898][ T9503] __ip6_del_rt+0x97/0x180 [ 251.613920][ T9503] ip6_del_rt+0xb3/0x100 [ 251.613943][ T9503] ? __pfx_ip6_del_rt+0x10/0x10 [ 251.613964][ T9503] ? addrconf_leave_solict+0x110/0x190 [ 251.613994][ T9503] ? do_raw_spin_unlock+0x122/0x240 [ 251.614017][ T9503] __ipv6_dev_ac_dec+0x5b3/0x690 [ 251.614037][ T9503] ? in6_dev_get+0x1a/0x290 [ 251.614066][ T9503] __ipv6_sock_ac_close+0x24e/0x430 [ 251.614089][ T9503] inet6_release+0x4f/0x70 [ 251.614112][ T9503] sock_close+0xc3/0x240 [ 251.614133][ T9503] ? __pfx_sock_close+0x10/0x10 [ 251.614152][ T9503] __fput+0x44c/0xa70 [ 251.614188][ T9503] fput_close_sync+0x119/0x200 [ 251.614221][ T9503] ? __pfx_fput_close_sync+0x10/0x10 [ 251.614257][ T9503] __ia32_sys_close+0x7f/0x110 [ 251.614283][ T9503] __do_fast_syscall_32+0xb6/0x2b0 [ 251.614303][ T9503] ? lockdep_hardirqs_on+0x9c/0x150 [ 251.614326][ T9503] do_fast_syscall_32+0x34/0x80 [ 251.614345][ T9503] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 251.614366][ T9503] RIP: 0023:0xf7ff3539 [ 251.614382][ T9503] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 251.614397][ T9503] RSP: 002b:00000000f54e655c EFLAGS: 00000206 ORIG_RAX: 0000000000000006 [ 251.614416][ T9503] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 251.614427][ T9503] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 251.614437][ T9503] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 251.614448][ T9503] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 251.614458][ T9503] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 251.614487][ T9503] [ 253.157066][ T9531] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1307'. [ 253.641445][ T30] audit: type=1326 audit(1760892496.037:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9528 comm="syz.1.1313" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 253.804777][ T30] audit: type=1326 audit(1760892496.057:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9528 comm="syz.1.1313" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 253.912410][ T30] audit: type=1326 audit(1760892496.057:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9528 comm="syz.1.1313" exe="/root/syz-executor" sig=0 arch=40000003 syscall=97 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 254.005415][ T9545] input: syz1 as /devices/virtual/input/input22 [ 254.015402][ T30] audit: type=1326 audit(1760892496.067:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9528 comm="syz.1.1313" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 254.126194][ T30] audit: type=1326 audit(1760892496.067:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9528 comm="syz.1.1313" exe="/root/syz-executor" sig=0 arch=40000003 syscall=228 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 254.169924][ T30] audit: type=1326 audit(1760892496.067:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9528 comm="syz.1.1313" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 254.260772][ T30] audit: type=1326 audit(1760892496.067:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9528 comm="syz.1.1313" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f81539 code=0x7ffc0000 [ 254.526063][ T9] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 254.686288][ T5925] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 254.749680][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 254.802138][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 255.346033][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 255.359351][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.370605][ T9] usb 3-1: config 0 descriptor?? [ 255.439458][ T9550] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 255.465531][ T5925] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 255.474500][ T5925] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 255.498690][ T9] hub 3-1:0.0: USB hub found [ 255.503616][ T5925] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 255.513180][ T5925] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 255.543262][ T5925] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 255.578769][ T5925] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 255.588265][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 255.604111][ T5925] usb 5-1: Product: syz [ 255.624392][ T5925] usb 5-1: Manufacturer: syz [ 255.652511][ T5925] cdc_wdm 5-1:1.0: skipping garbage [ 255.664970][ T5925] cdc_wdm 5-1:1.0: skipping garbage [ 255.680950][ T5925] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 255.697893][ T9] hub 3-1:0.0: 2 ports detected [ 255.710992][ T5925] cdc_wdm 5-1:1.0: Unknown control protocol [ 255.746177][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.753164][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.863133][ T9583] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1329'. [ 255.959312][ T9] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 255.965736][ T9] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 256.010071][ T5879] usb 5-1: USB disconnect, device number 12 [ 256.020941][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 256.039495][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 256.075292][ T30] audit: type=1326 audit(1760892498.467:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9590 comm="syz.2.1334" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 256.076071][ T5914] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 256.106335][ T9] usb 3-1: USB disconnect, device number 15 [ 256.140842][ T30] audit: type=1326 audit(1760892498.467:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9590 comm="syz.2.1334" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 256.183239][ T30] audit: type=1326 audit(1760892498.467:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9590 comm="syz.2.1334" exe="/root/syz-executor" sig=0 arch=40000003 syscall=174 compat=1 ip=0xf708d539 code=0x7ffc0000 [ 256.286024][ T5914] usb 2-1: Using ep0 maxpacket: 8 [ 256.297847][ T5914] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 256.315582][ T5914] usb 2-1: config 0 has no interface number 0 [ 256.329615][ T5914] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 256.376396][ T5914] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 256.404741][ T5914] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 256.427467][ T5914] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 256.447691][ T5914] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 256.458914][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.476040][ T24] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 256.490030][ T5914] usb 2-1: config 0 descriptor?? [ 256.508170][ T5914] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 256.642336][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.653570][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 256.823095][ T24] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 256.843210][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 256.858042][ T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0 [ 256.874107][ T24] usb 1-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 256.884074][ C1] ldusb 2-1:0.55: usb_submit_urb failed (-1) [ 256.891284][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.902418][ T9604] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1335'. [ 256.911874][ T24] usb 1-1: Product: syz [ 256.916279][ T24] usb 1-1: Manufacturer: syz [ 256.920874][ T24] usb 1-1: SerialNumber: syz [ 256.931484][ T9604] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1335'. [ 256.944874][ T24] usb 1-1: config 0 descriptor?? [ 256.948906][ T5879] usb 2-1: USB disconnect, device number 20 [ 256.976097][ T24] usb 1-1: ucan: probing device on interface #0 [ 256.985665][ T24] usb 1-1: ucan: invalid endpoint configuration [ 257.003590][ T24] usb 1-1: ucan: probe failed; try to update the device firmware [ 257.022076][ T5879] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 257.283494][ T9594] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1332'. [ 257.368365][ T9615] program syz.2.1343 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 257.449728][ T9618] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1345'. [ 257.646523][ T9624] Invalid logical block size (65533) [ 257.828402][ T9631] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1349'. [ 258.436294][ T9] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 258.811306][ T9] usb 4-1: config 0 has an invalid descriptor of length 89, skipping remainder of the config [ 258.842236][ T9] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 258.853326][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.882196][ T9] usb 4-1: Product: syz [ 258.894238][ T9] usb 4-1: Manufacturer: syz [ 258.910867][ T9] usb 4-1: SerialNumber: syz [ 258.931551][ T9] usb 4-1: config 0 descriptor?? [ 258.997263][ T24] IPVS: starting estimator thread 0... [ 259.016043][ T5879] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 259.086539][ T874] usb 1-1: USB disconnect, device number 20 [ 259.116228][ T9660] IPVS: using max 30 ests per chain, 72000 per kthread [ 259.160404][ T9] usb 4-1: bad CDC descriptors [ 259.166196][ T9] usb 4-1: unsupported MDLM descriptors [ 259.182521][ T9] usb 4-1: USB disconnect, device number 21 [ 259.188605][ T5879] usb 5-1: Using ep0 maxpacket: 8 [ 259.195465][ T5879] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 259.207627][ T5879] usb 5-1: config 0 has no interface number 0 [ 259.378101][ T9664] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 259.390883][ T5879] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 259.418328][ T9664] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1363'. [ 259.422063][ T5879] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 259.466010][ T5879] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 259.487160][ T5879] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 259.503135][ T5879] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 259.578811][ T5879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.605683][ T5879] usb 5-1: config 0 descriptor?? [ 259.636944][ T5879] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 259.867544][ T24] usb 5-1: USB disconnect, device number 13 [ 259.884981][ T24] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 259.987996][ T9678] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1362'. [ 260.009488][ T9678] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1362'. [ 260.356084][ T9687] usb usb8: usbfs: process 9687 (syz.1.1367) did not claim interface 0 before use [ 260.954224][ T9700] netlink: 'syz.4.1372': attribute type 1 has an invalid length. [ 260.962457][ T9700] netlink: 'syz.4.1372': attribute type 6 has an invalid length. [ 260.971394][ T9700] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1372'. [ 261.464533][ T9707] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1374'. [ 261.478748][ T9707] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1374'. [ 262.529313][ T9716] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1375'. [ 262.942162][ T9722] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 262.950884][ T9722] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1380'. [ 263.356765][ T9727] tipc: Started in network mode [ 263.396121][ T9727] tipc: Node identity f263f75d18e5, cluster identity 4711 [ 263.450291][ T9727] tipc: Enabled bearer , priority 0 [ 263.517154][ T9729] syzkaller0: entered promiscuous mode [ 263.545163][ T9729] syzkaller0: entered allmulticast mode [ 263.624240][ T9727] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 263.664190][ T9737] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1385'. [ 263.690245][ T9729] tipc: Resetting bearer [ 263.768333][ T9726] tipc: Resetting bearer [ 263.810156][ T9743] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1388'. [ 263.866790][ T9726] tipc: Disabling bearer [ 264.995285][ T9774] __nla_validate_parse: 3 callbacks suppressed [ 264.995304][ T9774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1396'. [ 265.172214][ T9778] netlink: 'syz.4.1397': attribute type 1 has an invalid length. [ 265.208904][ T9780] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1398'. [ 265.226094][ T9778] netlink: 'syz.4.1397': attribute type 6 has an invalid length. [ 265.256194][ T9778] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1397'. [ 265.696145][ T9788] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1399'. [ 267.128470][ T9817] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1403'. [ 267.145426][ T9817] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1403'. [ 267.506069][ T5879] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 267.557966][ T9819] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1406'. [ 267.667427][ T9819] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1406'. [ 267.906244][ T5879] usb 1-1: config 0 has an invalid descriptor of length 89, skipping remainder of the config [ 267.929307][ T5879] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 267.942541][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.950836][ T5879] usb 1-1: Product: syz [ 267.955098][ T5879] usb 1-1: Manufacturer: syz [ 268.062587][ T5879] usb 1-1: SerialNumber: syz [ 268.090261][ T5879] usb 1-1: config 0 descriptor?? [ 268.331482][ T5879] usb 1-1: bad CDC descriptors [ 268.340180][ T5879] usb 1-1: unsupported MDLM descriptors [ 268.371949][ T5879] usb 1-1: USB disconnect, device number 21 [ 268.700352][ T9830] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1412'. [ 268.768218][ T9834] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1413'. [ 269.036391][ T5915] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 269.221634][ T9851] 8021q: adding VLAN 0 to HW filter on device bond1 [ 269.228974][ T5915] usb 3-1: Using ep0 maxpacket: 8 [ 269.229980][ T9851] bond1: entered promiscuous mode [ 269.241570][ T9851] team0: Port device bond1 added [ 269.261732][ T5915] usb 3-1: unable to get BOS descriptor or descriptor too short [ 269.281933][ T5915] usb 3-1: config 4 interface 0 has no altsetting 0 [ 269.303494][ T5915] usb 3-1: string descriptor 0 read error: -22 [ 269.312647][ T5915] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 269.336568][ T5915] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 269.392394][ T5915] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 269.484648][ T5915] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 269.510879][ T5915] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 269.519059][ T5915] usb 3-1: media controller created [ 269.625592][ T5915] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 269.685800][ T5915] zl10353_read_register: readreg error (reg=127, ret==0) [ 269.828484][ T5915] usb 3-1: USB disconnect, device number 16 [ 270.159423][ T9872] __nla_validate_parse: 3 callbacks suppressed [ 270.159464][ T9872] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1423'. [ 270.180411][ T9872] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1423'. [ 270.956046][ T874] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 270.987855][ T9889] dvmrp1: tun_chr_ioctl cmd 1074025673 [ 271.114236][ T874] usb 4-1: config 0 has an invalid descriptor of length 89, skipping remainder of the config [ 271.157896][ T874] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 271.176907][ T874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.195784][ T874] usb 4-1: Product: syz [ 271.200390][ T874] usb 4-1: Manufacturer: syz [ 271.205007][ T874] usb 4-1: SerialNumber: syz [ 271.222935][ T874] usb 4-1: config 0 descriptor?? [ 271.451840][ T874] usb 4-1: bad CDC descriptors [ 271.468185][ T874] usb 4-1: unsupported MDLM descriptors [ 271.501144][ T874] usb 4-1: USB disconnect, device number 22 [ 271.992046][ C1] vxcan1: j1939_tp_rxtimer: 0xffff8880419d2c00: rx timeout, send abort [ 272.002316][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880419d2c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 272.342490][ T9913] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1440'. [ 272.506039][ T5915] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 272.719292][ T5915] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 272.728104][ T5915] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 272.750773][ T5915] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 272.770228][ T5915] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 272.810722][ T5915] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 272.854663][ T5915] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 272.879668][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 272.899756][ T5915] usb 2-1: Product: syz [ 272.920030][ T5915] usb 2-1: Manufacturer: syz [ 272.946080][ T5915] cdc_wdm 2-1:1.0: skipping garbage [ 273.007454][ T5915] cdc_wdm 2-1:1.0: skipping garbage [ 273.075109][ T9924] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1442'. [ 273.164199][ T9926] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1443'. [ 273.224849][ T9926] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1443'. [ 273.507870][ T5915] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 273.515845][ T5915] cdc_wdm 2-1:1.0: Unknown control protocol [ 273.532556][ T5915] usb 2-1: USB disconnect, device number 21 [ 273.697518][ T9930] random: crng reseeded on system resumption [ 274.090677][ T9942] FAULT_INJECTION: forcing a failure. [ 274.090677][ T9942] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 274.128381][ T9942] CPU: 1 UID: 0 PID: 9942 Comm: syz.2.1448 Not tainted syzkaller #0 PREEMPT(full) [ 274.128407][ T9942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 274.128418][ T9942] Call Trace: [ 274.128426][ T9942] [ 274.128434][ T9942] dump_stack_lvl+0x189/0x250 [ 274.128459][ T9942] ? __pfx____ratelimit+0x10/0x10 [ 274.128485][ T9942] ? __pfx_dump_stack_lvl+0x10/0x10 [ 274.128503][ T9942] ? __pfx__printk+0x10/0x10 [ 274.128522][ T9942] ? __might_fault+0xb0/0x130 [ 274.128551][ T9942] should_fail_ex+0x414/0x560 [ 274.128582][ T9942] _copy_from_user+0x2d/0xb0 [ 274.128605][ T9942] get_compat_msghdr+0xad/0x4a0 [ 274.128637][ T9942] ? __pfx_get_compat_msghdr+0x10/0x10 [ 274.128673][ T9942] ___sys_sendmsg+0x193/0x2a0 [ 274.128694][ T9942] ? __pfx____sys_sendmsg+0x10/0x10 [ 274.128745][ T9942] ? __fget_files+0x2a/0x420 [ 274.128764][ T9942] ? __fget_files+0x3a0/0x420 [ 274.128792][ T9942] __sys_sendmsg+0x164/0x220 [ 274.128810][ T9942] ? __pfx___sys_sendmsg+0x10/0x10 [ 274.128836][ T9942] ? __pfx_ksys_write+0x10/0x10 [ 274.128858][ T9942] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 274.128878][ T9942] ? lockdep_hardirqs_on+0x9c/0x150 [ 274.128899][ T9942] __do_fast_syscall_32+0xb6/0x2b0 [ 274.128918][ T9942] ? lockdep_hardirqs_on+0x9c/0x150 [ 274.128940][ T9942] do_fast_syscall_32+0x34/0x80 [ 274.128959][ T9942] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 274.128979][ T9942] RIP: 0023:0xf708d539 [ 274.128994][ T9942] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 274.129008][ T9942] RSP: 002b:00000000f547d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 274.129028][ T9942] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000500 [ 274.129039][ T9942] RDX: 0000000004000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 274.129050][ T9942] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 274.129061][ T9942] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 274.129071][ T9942] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 274.129103][ T9942] [ 274.801614][ T9968] ip6t_REJECT: ECHOREPLY is not supported [ 274.931802][ T9970] FAULT_INJECTION: forcing a failure. [ 274.931802][ T9970] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 275.089922][ T9970] CPU: 1 UID: 0 PID: 9970 Comm: syz.4.1459 Not tainted syzkaller #0 PREEMPT(full) [ 275.090004][ T9970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 275.090015][ T9970] Call Trace: [ 275.090022][ T9970] [ 275.090030][ T9970] dump_stack_lvl+0x189/0x250 [ 275.090054][ T9970] ? __pfx____ratelimit+0x10/0x10 [ 275.090080][ T9970] ? __pfx_dump_stack_lvl+0x10/0x10 [ 275.090098][ T9970] ? __pfx__printk+0x10/0x10 [ 275.090116][ T9970] ? __might_fault+0xb0/0x130 [ 275.090145][ T9970] should_fail_ex+0x414/0x560 [ 275.090176][ T9970] _copy_from_user+0x2d/0xb0 [ 275.090199][ T9970] __ia32_compat_sys_socketcall+0x14f/0x9c0 [ 275.090219][ T9970] ? __fget_files+0x3a0/0x420 [ 275.090243][ T9970] ? __pfx___ia32_compat_sys_socketcall+0x10/0x10 [ 275.090262][ T9970] ? fput+0xa0/0xd0 [ 275.090285][ T9970] ? ksys_write+0x22a/0x250 [ 275.090305][ T9970] ? __pfx_ksys_write+0x10/0x10 [ 275.090327][ T9970] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 275.090347][ T9970] ? lockdep_hardirqs_on+0x9c/0x150 [ 275.090368][ T9970] __do_fast_syscall_32+0xb6/0x2b0 [ 275.090388][ T9970] ? lockdep_hardirqs_on+0x9c/0x150 [ 275.090408][ T9970] do_fast_syscall_32+0x34/0x80 [ 275.090427][ T9970] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 275.090447][ T9970] RIP: 0023:0xf7ff3539 [ 275.090463][ T9970] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 275.090478][ T9970] RSP: 002b:00000000f54e5430 EFLAGS: 00000206 ORIG_RAX: 0000000000000066 [ 275.090498][ T9970] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000f54e5444 [ 275.090510][ T9970] RDX: 0000000000000000 RSI: 00000000f54e5560 RDI: 00000000f7485ff4 [ 275.090521][ T9970] RBP: 00000000f54e5560 R08: 0000000000000000 R09: 0000000000000000 [ 275.090531][ T9970] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 275.090542][ T9970] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 275.090569][ T9970] [ 275.293676][ T874] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 276.093257][ T874] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 276.248334][ T874] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 276.267994][ T874] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 276.279327][ T874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.360987][ T874] usb 4-1: config 0 descriptor?? [ 276.367096][ T9976] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 276.421649][ T874] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 276.749952][ T1341] af_packet: tpacket_rcv: packet too big, clamped from 48 to 4294967272. macoff=96 [ 277.087302][ T9998] FAULT_INJECTION: forcing a failure. [ 277.087302][ T9998] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 277.103745][ T9998] CPU: 1 UID: 0 PID: 9998 Comm: syz.4.1467 Not tainted syzkaller #0 PREEMPT(full) [ 277.103772][ T9998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 277.103783][ T9998] Call Trace: [ 277.103790][ T9998] [ 277.103797][ T9998] dump_stack_lvl+0x189/0x250 [ 277.103814][ T9998] ? __pfx____ratelimit+0x10/0x10 [ 277.103829][ T9998] ? __pfx_dump_stack_lvl+0x10/0x10 [ 277.103839][ T9998] ? __pfx__printk+0x10/0x10 [ 277.103849][ T9998] ? __might_fault+0xb0/0x130 [ 277.103866][ T9998] should_fail_ex+0x414/0x560 [ 277.103883][ T9998] _copy_from_user+0x2d/0xb0 [ 277.103898][ T9998] ucma_write+0x158/0x2e0 [ 277.103912][ T9998] ? __pfx_ucma_write+0x10/0x10 [ 277.103922][ T9998] ? security_file_permission+0x75/0x290 [ 277.103937][ T9998] ? rw_verify_area+0x255/0x4d0 [ 277.103949][ T9998] vfs_writev+0x4b6/0x960 [ 277.103966][ T9998] ? __pfx_ucma_write+0x10/0x10 [ 277.103978][ T9998] ? __pfx_vfs_writev+0x10/0x10 [ 277.103997][ T9998] ? __fget_files+0x2a/0x420 [ 277.104011][ T9998] ? __fget_files+0x3a0/0x420 [ 277.104021][ T9998] ? __fget_files+0x2a/0x420 [ 277.104036][ T9998] do_writev+0x14d/0x2d0 [ 277.104050][ T9998] ? __pfx_do_writev+0x10/0x10 [ 277.104063][ T9998] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 277.104075][ T9998] ? lockdep_hardirqs_on+0x9c/0x150 [ 277.104086][ T9998] __do_fast_syscall_32+0xb6/0x2b0 [ 277.104097][ T9998] ? lockdep_hardirqs_on+0x9c/0x150 [ 277.104108][ T9998] do_fast_syscall_32+0x34/0x80 [ 277.104119][ T9998] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 277.104131][ T9998] RIP: 0023:0xf7ff3539 [ 277.104140][ T9998] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 277.104148][ T9998] RSP: 002b:00000000f54e655c EFLAGS: 00000206 ORIG_RAX: 0000000000000092 [ 277.104159][ T9998] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 277.104166][ T9998] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 277.104172][ T9998] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 277.104177][ T9998] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 277.104183][ T9998] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 277.104197][ T9998] [ 277.707931][T10005] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 277.880858][ T874] usb 4-1: USB disconnect, device number 23 [ 278.934038][T10036] FAULT_INJECTION: forcing a failure. [ 278.934038][T10036] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 278.950630][ T874] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 278.976303][T10036] CPU: 0 UID: 0 PID: 10036 Comm: syz.3.1481 Not tainted syzkaller #0 PREEMPT(full) [ 278.976327][T10036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 278.976339][T10036] Call Trace: [ 278.976343][T10036] [ 278.976348][T10036] dump_stack_lvl+0x189/0x250 [ 278.976364][T10036] ? __pfx____ratelimit+0x10/0x10 [ 278.976381][T10036] ? __pfx_dump_stack_lvl+0x10/0x10 [ 278.976392][T10036] ? __pfx__printk+0x10/0x10 [ 278.976408][T10036] should_fail_ex+0x414/0x560 [ 278.976426][T10036] _copy_to_user+0x31/0xb0 [ 278.976441][T10036] simple_read_from_buffer+0xe1/0x170 [ 278.976456][T10036] proc_fail_nth_read+0x1b3/0x220 [ 278.976472][T10036] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 278.976487][T10036] ? rw_verify_area+0x2a6/0x4d0 [ 278.976497][T10036] ? __lock_acquire+0xab9/0xd20 [ 278.976508][T10036] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 278.976523][T10036] vfs_read+0x200/0xa30 [ 278.976532][T10036] ? fdget_pos+0x247/0x320 [ 278.976553][T10036] ? __pfx___mutex_lock+0x10/0x10 [ 278.976564][T10036] ? __pfx_vfs_read+0x10/0x10 [ 278.976575][T10036] ? __fget_files+0x2a/0x420 [ 278.976588][T10036] ? __fget_files+0x3a0/0x420 [ 278.976599][T10036] ? __fget_files+0x2a/0x420 [ 278.976614][T10036] ksys_read+0x145/0x250 [ 278.976626][T10036] ? __pfx_ksys_read+0x10/0x10 [ 278.976637][T10036] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 278.976649][T10036] ? lockdep_hardirqs_on+0x9c/0x150 [ 278.976660][T10036] __do_fast_syscall_32+0xb6/0x2b0 [ 278.976671][T10036] ? lockdep_hardirqs_on+0x9c/0x150 [ 278.976683][T10036] do_fast_syscall_32+0x34/0x80 [ 278.976694][T10036] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 278.976706][T10036] RIP: 0023:0xf7fb2539 [ 278.976716][T10036] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 278.976724][T10036] RSP: 002b:00000000f54a6590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 278.976735][T10036] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000f54a6620 [ 278.976742][T10036] RDX: 000000000000000f RSI: 00000000f7445ff4 RDI: 0000000000000000 [ 278.976748][T10036] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 278.976753][T10036] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 278.976759][T10036] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 278.976774][T10036] [ 279.532882][ T874] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 279.542850][ T874] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 279.554930][ T874] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 279.626643][T10042] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1478'. [ 279.668262][ T874] usb 2-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 279.698579][ T874] usb 2-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 279.944330][ T874] usb 2-1: Manufacturer: syz [ 279.951039][ T5879] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 279.996832][ T874] usb 2-1: config 0 descriptor?? [ 280.043190][ T874] smsusb:smsusb_probe: board id=9, interface number 0 [ 280.058758][ T874] smsusb:smsusb_probe: Device initialized with return code -19 [ 280.137524][ T5879] usb 4-1: New USB device found, idVendor=0545, idProduct=800d, bcdDevice= 3.0a [ 280.161903][ T5879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.217302][ T5879] usb 4-1: config 0 descriptor?? [ 280.261816][ T5879] gspca_main: xirlink-cit-2.14.0 probing 0545:800d [ 280.321920][ T5879] input: xirlink-cit as /devices/platform/dummy_hcd.3/usb4/4-1/input/input23 [ 280.426760][ T5914] usb 4-1: USB disconnect, device number 24 [ 280.514122][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 280.522864][ T30] audit: type=1804 audit(1760892522.907:85): pid=10053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1485" name="file0" dev="ramfs" ino=27475 res=1 errno=0 [ 280.555461][T10055] FAULT_INJECTION: forcing a failure. [ 280.555461][T10055] name failslab, interval 1, probability 0, space 0, times 0 [ 280.576160][T10055] CPU: 0 UID: 0 PID: 10055 Comm: syz.4.1487 Not tainted syzkaller #0 PREEMPT(full) [ 280.576176][T10055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 280.576182][T10055] Call Trace: [ 280.576187][T10055] [ 280.576192][T10055] dump_stack_lvl+0x189/0x250 [ 280.576207][T10055] ? __pfx____ratelimit+0x10/0x10 [ 280.576222][T10055] ? __pfx_dump_stack_lvl+0x10/0x10 [ 280.576232][T10055] ? __pfx__printk+0x10/0x10 [ 280.576245][T10055] ? __pfx___might_resched+0x10/0x10 [ 280.576262][T10055] should_fail_ex+0x414/0x560 [ 280.576279][T10055] should_failslab+0xa8/0x100 [ 280.576294][T10055] __kmalloc_noprof+0xcb/0x7f0 [ 280.576304][T10055] ? kfree+0x4d/0x6d0 [ 280.576311][T10055] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 280.576327][T10055] tomoyo_realpath_from_path+0xe3/0x5d0 [ 280.576339][T10055] ? tomoyo_domain+0xd9/0x130 [ 280.576353][T10055] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 280.576367][T10055] tomoyo_path_number_perm+0x1e8/0x5a0 [ 280.576382][T10055] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 280.576411][T10055] ? __lock_acquire+0xab9/0xd20 [ 280.576434][T10055] ? __fget_files+0x2a/0x420 [ 280.576449][T10055] ? __fget_files+0x3a0/0x420 [ 280.576459][T10055] ? __fget_files+0x2a/0x420 [ 280.576472][T10055] security_file_ioctl_compat+0xcb/0x2d0 [ 280.576488][T10055] __ia32_compat_sys_ioctl+0x128/0x840 [ 280.576500][T10055] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 280.576510][T10055] ? __fget_files+0x3a0/0x420 [ 280.576524][T10055] ? fput+0xa0/0xd0 [ 280.576538][T10055] ? ksys_write+0x22a/0x250 [ 280.576547][T10055] ? exc_page_fault+0x82/0x100 [ 280.576557][T10055] ? __pfx_ksys_write+0x10/0x10 [ 280.576569][T10055] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 280.576580][T10055] ? lockdep_hardirqs_on+0x9c/0x150 [ 280.576591][T10055] __do_fast_syscall_32+0xb6/0x2b0 [ 280.576602][T10055] ? lockdep_hardirqs_on+0x9c/0x150 [ 280.576614][T10055] do_fast_syscall_32+0x34/0x80 [ 280.576624][T10055] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 280.576637][T10055] RIP: 0023:0xf7ff3539 [ 280.576648][T10055] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 280.576661][T10055] RSP: 002b:00000000f54e655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 280.576673][T10055] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000000ae80 [ 280.576680][T10055] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 280.576686][T10055] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 280.576691][T10055] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 280.576697][T10055] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 280.576712][T10055] [ 280.576716][T10055] ERROR: Out of memory at tomoyo_realpath_from_path. [ 281.200081][T10070] trusted_key: encrypted_key: insufficient parameters specified [ 281.518150][ T5914] usb 2-1: USB disconnect, device number 22 [ 281.571113][T10077] netlink: 'syz.0.1495': attribute type 1 has an invalid length. [ 281.643755][T10077] netlink: 'syz.0.1495': attribute type 6 has an invalid length. [ 281.662137][T10077] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1495'. [ 281.708900][T10082] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1496'. [ 282.699747][T10098] FAULT_INJECTION: forcing a failure. [ 282.699747][T10098] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 282.724231][T10098] CPU: 0 UID: 0 PID: 10098 Comm: syz.2.1503 Not tainted syzkaller #0 PREEMPT(full) [ 282.724255][T10098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 282.724266][T10098] Call Trace: [ 282.724273][T10098] [ 282.724281][T10098] dump_stack_lvl+0x189/0x250 [ 282.724304][T10098] ? __pfx____ratelimit+0x10/0x10 [ 282.724330][T10098] ? __pfx_dump_stack_lvl+0x10/0x10 [ 282.724348][T10098] ? __pfx__printk+0x10/0x10 [ 282.724366][T10098] ? __might_fault+0xb0/0x130 [ 282.724396][T10098] should_fail_ex+0x414/0x560 [ 282.724426][T10098] _copy_from_user+0x2d/0xb0 [ 282.724449][T10098] __ia32_sys_epoll_ctl+0x120/0x1a0 [ 282.724471][T10098] ? exc_page_fault+0x82/0x100 [ 282.724489][T10098] ? __pfx___ia32_sys_epoll_ctl+0x10/0x10 [ 282.724514][T10098] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 282.724535][T10098] ? lockdep_hardirqs_on+0x9c/0x150 [ 282.724556][T10098] __do_fast_syscall_32+0xb6/0x2b0 [ 282.724576][T10098] ? lockdep_hardirqs_on+0x9c/0x150 [ 282.724604][T10098] do_fast_syscall_32+0x34/0x80 [ 282.724623][T10098] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 282.724644][T10098] RIP: 0023:0xf708d539 [ 282.724659][T10098] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 282.724674][T10098] RSP: 002b:00000000f545c55c EFLAGS: 00000206 ORIG_RAX: 00000000000000ff [ 282.724693][T10098] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000001 [ 282.724705][T10098] RDX: 0000000000000004 RSI: 00000000800003c0 RDI: 0000000000000000 [ 282.724716][T10098] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 282.724726][T10098] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 282.724737][T10098] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 282.724764][T10098] [ 282.933130][T10100] tipc: Started in network mode [ 282.938240][T10100] tipc: Node identity ba8bf368ed29, cluster identity 4711 [ 282.945530][T10100] tipc: Enabled bearer , priority 0 [ 282.955090][T10100] syzkaller0: entered promiscuous mode [ 282.961377][T10100] syzkaller0: entered allmulticast mode [ 282.972362][T10100] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 283.018713][T10100] tipc: Resetting bearer [ 283.029861][T10099] tipc: Resetting bearer [ 283.045816][T10099] tipc: Disabling bearer [ 283.056890][T10102] tipc: Enabled bearer , priority 0 [ 283.088458][T10102] syzkaller0: entered promiscuous mode [ 283.094006][T10102] syzkaller0: entered allmulticast mode [ 283.153224][T10102] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 283.189869][T10102] tipc: Resetting bearer [ 283.203488][T10101] tipc: Resetting bearer [ 283.242155][T10101] tipc: Disabling bearer [ 283.341382][T10112] FAULT_INJECTION: forcing a failure. [ 283.341382][T10112] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 283.364956][T10108] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 283.370252][T10112] CPU: 1 UID: 0 PID: 10112 Comm: syz.1.1509 Not tainted syzkaller #0 PREEMPT(full) [ 283.370278][T10112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 283.370288][T10112] Call Trace: [ 283.370295][T10112] [ 283.370303][T10112] dump_stack_lvl+0x189/0x250 [ 283.370327][T10112] ? __pfx____ratelimit+0x10/0x10 [ 283.370353][T10112] ? __pfx_dump_stack_lvl+0x10/0x10 [ 283.370377][T10112] ? __pfx__printk+0x10/0x10 [ 283.370395][T10112] ? __might_fault+0xb0/0x130 [ 283.370424][T10112] should_fail_ex+0x414/0x560 [ 283.370455][T10112] _copy_from_user+0x2d/0xb0 [ 283.370478][T10112] get_compat_msghdr+0xad/0x4a0 [ 283.370509][T10112] ? __pfx_get_compat_msghdr+0x10/0x10 [ 283.370546][T10112] ___sys_sendmsg+0x193/0x2a0 [ 283.370566][T10112] ? __pfx____sys_sendmsg+0x10/0x10 [ 283.370583][T10112] ? __lock_acquire+0xab9/0xd20 [ 283.370634][T10112] ? __fget_files+0x2a/0x420 [ 283.370654][T10112] ? __fget_files+0x3a0/0x420 [ 283.370682][T10112] __sys_sendmmsg+0x28e/0x430 [ 283.370705][T10112] ? __pfx___sys_sendmmsg+0x10/0x10 [ 283.370719][T10112] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 283.370762][T10112] ? ksys_write+0x22a/0x250 [ 283.370778][T10112] ? exc_page_fault+0x82/0x100 [ 283.370798][T10112] ? __pfx_ksys_write+0x10/0x10 [ 283.370823][T10112] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 283.370850][T10112] __do_fast_syscall_32+0xb6/0x2b0 [ 283.370870][T10112] ? lockdep_hardirqs_on+0x9c/0x150 [ 283.370890][T10112] do_fast_syscall_32+0x34/0x80 [ 283.370909][T10112] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 283.370929][T10112] RIP: 0023:0xf7f81539 [ 283.370945][T10112] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 283.370959][T10112] RSP: 002b:00000000f545555c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 283.370978][T10112] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 283.370990][T10112] RDX: 000000000000009f RSI: 0000000000000000 RDI: 0000000000000000 [ 283.371001][T10112] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 283.371010][T10112] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 283.371021][T10112] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 283.371047][T10112] [ 283.567983][T10116] netlink: 'syz.4.1511': attribute type 1 has an invalid length. [ 283.622905][T10116] netlink: 'syz.4.1511': attribute type 6 has an invalid length. [ 283.626637][T10111] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.631010][T10116] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1511'. [ 283.638111][T10111] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.691984][T10111] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1509'. [ 284.441045][T10134] dummy0: entered promiscuous mode [ 284.449095][T10134] dummy0: entered allmulticast mode [ 284.505447][ T5914] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 284.578583][T10141] FAULT_INJECTION: forcing a failure. [ 284.578583][T10141] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 284.686207][ T5914] usb 2-1: config 0 has an invalid descriptor of length 89, skipping remainder of the config [ 284.697197][T10141] CPU: 0 UID: 0 PID: 10141 Comm: syz.3.1521 Not tainted syzkaller #0 PREEMPT(full) [ 284.697221][T10141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 284.697231][T10141] Call Trace: [ 284.697238][T10141] [ 284.697245][T10141] dump_stack_lvl+0x189/0x250 [ 284.697268][T10141] ? __pfx____ratelimit+0x10/0x10 [ 284.697294][T10141] ? __pfx_dump_stack_lvl+0x10/0x10 [ 284.697310][T10141] ? __pfx__printk+0x10/0x10 [ 284.697337][T10141] should_fail_ex+0x414/0x560 [ 284.697364][T10141] _copy_to_user+0x31/0xb0 [ 284.697387][T10141] simple_read_from_buffer+0xe1/0x170 [ 284.697413][T10141] proc_fail_nth_read+0x1b3/0x220 [ 284.697443][T10141] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 284.697472][T10141] ? rw_verify_area+0x2a6/0x4d0 [ 284.697489][T10141] ? __lock_acquire+0xab9/0xd20 [ 284.697509][T10141] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 284.697535][T10141] vfs_read+0x200/0xa30 [ 284.697553][T10141] ? fdget_pos+0x247/0x320 [ 284.697576][T10141] ? __pfx___mutex_lock+0x10/0x10 [ 284.697596][T10141] ? __pfx_vfs_read+0x10/0x10 [ 284.697615][T10141] ? __fget_files+0x2a/0x420 [ 284.697640][T10141] ? __fget_files+0x3a0/0x420 [ 284.697659][T10141] ? __fget_files+0x2a/0x420 [ 284.697689][T10141] ksys_read+0x145/0x250 [ 284.697710][T10141] ? __pfx_ksys_read+0x10/0x10 [ 284.697732][T10141] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 284.697753][T10141] ? lockdep_hardirqs_on+0x9c/0x150 [ 284.697774][T10141] __do_fast_syscall_32+0xb6/0x2b0 [ 284.697795][T10141] ? lockdep_hardirqs_on+0x9c/0x150 [ 284.697817][T10141] do_fast_syscall_32+0x34/0x80 [ 284.697836][T10141] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 284.697857][T10141] RIP: 0023:0xf7fb2539 [ 284.697873][T10141] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 284.697888][T10141] RSP: 002b:00000000f54a6590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 284.697907][T10141] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f54a6620 [ 284.697919][T10141] RDX: 000000000000000f RSI: 00000000f7445ff4 RDI: 0000000000000000 [ 284.697929][T10141] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 284.697938][T10141] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 284.697948][T10141] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 284.697975][T10141] [ 285.155300][ T5914] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 285.191863][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.216004][ T5914] usb 2-1: Product: syz [ 285.276261][ T5914] usb 2-1: Manufacturer: syz [ 285.280919][ T5914] usb 2-1: SerialNumber: syz [ 285.301566][ T5914] usb 2-1: config 0 descriptor?? [ 285.429932][T10150] veth0_vlan: left promiscuous mode [ 285.440741][T10150] veth0_vlan: entered promiscuous mode [ 285.929999][ T5914] usb 2-1: bad CDC descriptors [ 286.024839][ T5914] usb 2-1: unsupported MDLM descriptors [ 286.076213][ T5914] usb 2-1: USB disconnect, device number 23 [ 286.478355][T10160] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1524'. [ 286.492975][T10161] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1524'. [ 286.714792][T10166] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1526'. [ 286.782434][T10149] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1523'. [ 287.037876][T10175] netlink: 'syz.2.1529': attribute type 1 has an invalid length. [ 287.045873][T10175] netlink: 'syz.2.1529': attribute type 6 has an invalid length. [ 287.105603][T10175] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1529'. [ 287.379471][T10187] tipc: Enabled bearer , priority 0 [ 287.392103][T10187] syzkaller0: entered promiscuous mode [ 287.397943][ T5914] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 287.407950][T10187] syzkaller0: entered allmulticast mode [ 287.428724][T10187] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 287.460080][T10187] tipc: Resetting bearer [ 287.556072][ T5914] usb 4-1: Using ep0 maxpacket: 32 [ 287.557601][ T5914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.557620][ T5914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.557642][ T5914] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 287.557654][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.596874][ T5914] usb 4-1: config 0 descriptor?? [ 287.598830][ T5914] hub 4-1:0.0: USB hub found [ 287.799640][ T5914] hub 4-1:0.0: 1 port detected [ 287.807243][T10186] tipc: Resetting bearer [ 287.858211][T10186] tipc: Disabling bearer [ 287.978839][T10198] fuse: Bad value for 'user_id' [ 287.983800][T10198] fuse: Bad value for 'user_id' [ 288.047720][T10199] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1538'. [ 288.137175][ T874] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 288.186092][ T24] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 288.298691][ T874] usb 1-1: config 0 has an invalid descriptor of length 89, skipping remainder of the config [ 288.311570][ T874] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 288.320781][ T874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.328873][ T874] usb 1-1: Product: syz [ 288.333078][ T874] usb 1-1: Manufacturer: syz [ 288.337905][ T874] usb 1-1: SerialNumber: syz [ 288.345017][ T874] usb 1-1: config 0 descriptor?? [ 288.348314][ T24] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 288.363556][ T24] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 288.375133][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 288.384491][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 288.397685][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 288.408989][ T5914] hub 4-1:0.0: activate --> -90 [ 288.417467][ T24] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 288.426598][ T24] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 288.434603][ T24] usb 2-1: Product: syz [ 288.438844][ T24] usb 2-1: Manufacturer: syz [ 288.453035][ T24] cdc_wdm 2-1:1.0: skipping garbage [ 288.458369][ T24] cdc_wdm 2-1:1.0: skipping garbage [ 288.465358][ T24] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 288.471384][ T24] cdc_wdm 2-1:1.0: Unknown control protocol [ 288.569672][ T874] usb 1-1: bad CDC descriptors [ 288.575897][ T874] usb 1-1: unsupported MDLM descriptors [ 288.590937][ T874] usb 1-1: USB disconnect, device number 22 [ 288.638739][T10203] FAULT_INJECTION: forcing a failure. [ 288.638739][T10203] name failslab, interval 1, probability 0, space 0, times 0 [ 288.651848][T10203] CPU: 0 UID: 0 PID: 10203 Comm: syz.2.1540 Not tainted syzkaller #0 PREEMPT(full) [ 288.651872][T10203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 288.651882][T10203] Call Trace: [ 288.651889][T10203] [ 288.651897][T10203] dump_stack_lvl+0x189/0x250 [ 288.651920][T10203] ? __pfx____ratelimit+0x10/0x10 [ 288.651947][T10203] ? __pfx_dump_stack_lvl+0x10/0x10 [ 288.651965][T10203] ? __pfx__printk+0x10/0x10 [ 288.651982][T10203] ? __pfx___might_resched+0x10/0x10 [ 288.651998][T10203] should_fail_ex+0x414/0x560 [ 288.652016][T10203] should_failslab+0xa8/0x100 [ 288.652033][T10203] __kmalloc_noprof+0xcb/0x7f0 [ 288.652050][T10203] ? kfree+0x4d/0x6d0 [ 288.652064][T10203] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 288.652092][T10203] tomoyo_realpath_from_path+0xe3/0x5d0 [ 288.652114][T10203] ? tomoyo_domain+0xd9/0x130 [ 288.652133][T10203] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 288.652148][T10203] tomoyo_path_number_perm+0x1e8/0x5a0 [ 288.652163][T10203] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 288.652195][T10203] ? __lock_acquire+0xab9/0xd20 [ 288.652238][T10203] ? __fget_files+0x2a/0x420 [ 288.652264][T10203] ? __fget_files+0x3a0/0x420 [ 288.652278][T10203] ? __fget_files+0x2a/0x420 [ 288.652291][T10203] security_file_ioctl_compat+0xcb/0x2d0 [ 288.652306][T10203] __ia32_compat_sys_ioctl+0x128/0x840 [ 288.652318][T10203] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 288.652328][T10203] ? __fget_files+0x3a0/0x420 [ 288.652353][T10203] ? fput+0xa0/0xd0 [ 288.652377][T10203] ? ksys_write+0x22a/0x250 [ 288.652393][T10203] ? exc_page_fault+0x82/0x100 [ 288.652412][T10203] ? __pfx_ksys_write+0x10/0x10 [ 288.652427][T10203] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 288.652438][T10203] ? lockdep_hardirqs_on+0x9c/0x150 [ 288.652449][T10203] __do_fast_syscall_32+0xb6/0x2b0 [ 288.652461][T10203] ? lockdep_hardirqs_on+0x9c/0x150 [ 288.652472][T10203] do_fast_syscall_32+0x34/0x80 [ 288.652487][T10203] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 288.652507][T10203] RIP: 0023:0xf708d539 [ 288.652524][T10203] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 288.652538][T10203] RSP: 002b:00000000f547d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 288.652557][T10203] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0845657 [ 288.652568][T10203] RDX: 0000000080000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 288.652574][T10203] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 288.652579][T10203] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 288.652585][T10203] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 288.652600][T10203] [ 288.652628][T10203] ERROR: Out of memory at tomoyo_realpath_from_path. [ 289.051908][ T24] usb 2-1: USB disconnect, device number 24 [ 289.519384][T10221] usb usb8: usbfs: process 10221 (syz.4.1543) did not claim interface 0 before use [ 289.610563][T10223] FAULT_INJECTION: forcing a failure. [ 289.610563][T10223] name failslab, interval 1, probability 0, space 0, times 0 [ 289.626059][T10223] CPU: 0 UID: 0 PID: 10223 Comm: syz.0.1546 Not tainted syzkaller #0 PREEMPT(full) [ 289.626084][T10223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 289.626095][T10223] Call Trace: [ 289.626102][T10223] [ 289.626110][T10223] dump_stack_lvl+0x189/0x250 [ 289.626133][T10223] ? __pfx____ratelimit+0x10/0x10 [ 289.626161][T10223] ? __pfx_dump_stack_lvl+0x10/0x10 [ 289.626186][T10223] ? __pfx__printk+0x10/0x10 [ 289.626208][T10223] ? __pfx___might_resched+0x10/0x10 [ 289.626231][T10223] ? fs_reclaim_acquire+0x7d/0x100 [ 289.626254][T10223] should_fail_ex+0x414/0x560 [ 289.626282][T10223] should_failslab+0xa8/0x100 [ 289.626304][T10223] kmem_cache_alloc_noprof+0x74/0x6e0 [ 289.626322][T10223] ? getname_flags+0xb8/0x540 [ 289.626348][T10223] getname_flags+0xb8/0x540 [ 289.626372][T10223] do_sys_openat2+0xbc/0x1c0 [ 289.626399][T10223] ? __pfx_do_sys_openat2+0x10/0x10 [ 289.626424][T10223] ? ksys_write+0x22a/0x250 [ 289.626446][T10223] ? __pfx_ksys_write+0x10/0x10 [ 289.626476][T10223] __ia32_sys_creat+0x8f/0xc0 [ 289.626503][T10223] __do_fast_syscall_32+0xb6/0x2b0 [ 289.626522][T10223] ? lockdep_hardirqs_on+0x9c/0x150 [ 289.626542][T10223] do_fast_syscall_32+0x34/0x80 [ 289.626559][T10223] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 289.626580][T10223] RIP: 0023:0xf702d539 [ 289.626595][T10223] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 289.626615][T10223] RSP: 002b:00000000f541d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000008 [ 289.626633][T10223] RAX: ffffffffffffffda RBX: 00000000800024c0 RCX: 00000000000001bd [ 289.626645][T10223] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 289.626655][T10223] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 289.626664][T10223] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 289.626673][T10223] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 289.626700][T10223] [ 289.835020][ C0] vkms_vblank_simulate: vblank timer overrun [ 289.847502][ T5914] usb 4-1-port1: cannot disable (err = -32) [ 289.856127][ T5914] hub 4-1:0.0: hub_ext_port_status failed (err = -32) [ 289.863067][ T5914] usb 4-1-port1: connect-debounce failed [ 289.869338][ T5914] usb 4-1-port1: cannot disable (err = -32) [ 289.984580][T10230] tipc: Started in network mode [ 289.998545][T10230] tipc: Node identity 6641c2e98f76, cluster identity 4711 [ 290.007900][T10230] tipc: Enabled bearer , priority 0 [ 290.017829][T10228] tipc: Enabled bearer , priority 0 [ 290.106317][T10230] syzkaller0: entered promiscuous mode [ 290.140264][T10230] syzkaller0: entered allmulticast mode [ 290.162039][T10228] syzkaller0: entered promiscuous mode [ 290.169113][T10228] syzkaller0: entered allmulticast mode [ 290.183108][T10230] tipc: Resetting bearer [ 290.191452][T10228] tipc: Resetting bearer [ 290.200751][T10227] tipc: Resetting bearer [ 290.244557][T10227] tipc: Disabling bearer [ 290.287214][T10226] tipc: Resetting bearer [ 290.313115][T10226] tipc: Disabling bearer [ 290.382293][ T5914] usb 4-1: USB disconnect, device number 25 [ 290.708231][ T5914] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 290.753038][T10245] FAULT_INJECTION: forcing a failure. [ 290.753038][T10245] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 290.768639][T10245] CPU: 1 UID: 0 PID: 10245 Comm: syz.1.1554 Not tainted syzkaller #0 PREEMPT(full) [ 290.768664][T10245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 290.768675][T10245] Call Trace: [ 290.768682][T10245] [ 290.768690][T10245] dump_stack_lvl+0x189/0x250 [ 290.768712][T10245] ? __pfx____ratelimit+0x10/0x10 [ 290.768739][T10245] ? __pfx_dump_stack_lvl+0x10/0x10 [ 290.768758][T10245] ? __pfx__printk+0x10/0x10 [ 290.768776][T10245] ? __might_fault+0xb0/0x130 [ 290.768809][T10245] should_fail_ex+0x414/0x560 [ 290.768839][T10245] _copy_from_user+0x2d/0xb0 [ 290.768863][T10245] get_compat_msghdr+0xad/0x4a0 [ 290.768894][T10245] ? __pfx_get_compat_msghdr+0x10/0x10 [ 290.768932][T10245] ___sys_sendmsg+0x193/0x2a0 [ 290.768950][T10245] ? __pfx____sys_sendmsg+0x10/0x10 [ 290.769002][T10245] ? __fget_files+0x2a/0x420 [ 290.769021][T10245] ? __fget_files+0x3a0/0x420 [ 290.769052][T10245] __sys_sendmsg+0x164/0x220 [ 290.769071][T10245] ? __pfx___sys_sendmsg+0x10/0x10 [ 290.769097][T10245] ? __pfx_ksys_write+0x10/0x10 [ 290.769119][T10245] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 290.769140][T10245] ? lockdep_hardirqs_on+0x9c/0x150 [ 290.769160][T10245] __do_fast_syscall_32+0xb6/0x2b0 [ 290.769178][T10245] ? lockdep_hardirqs_on+0x9c/0x150 [ 290.769200][T10245] do_fast_syscall_32+0x34/0x80 [ 290.769219][T10245] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 290.769239][T10245] RIP: 0023:0xf7f81539 [ 290.769254][T10245] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 290.769269][T10245] RSP: 002b:00000000f547655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 290.769287][T10245] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000140 [ 290.769299][T10245] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 290.769310][T10245] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 290.769320][T10245] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 290.769330][T10245] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 290.769382][T10245] [ 290.786009][ T5879] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 290.998697][ T5914] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 291.026102][ T5914] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 291.054574][ T5914] usb 4-1: config 0 interface 0 has no altsetting 0 [ 291.083269][ T5914] usb 4-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 291.125105][T10252] tty tty20: ldisc open failed (-12), clearing slot 19 [ 291.162450][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.227900][ T5914] usb 4-1: config 0 descriptor?? [ 291.246572][T10233] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 291.459111][ T5879] usb 3-1: device descriptor read/64, error -71 [ 291.726411][ T5879] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 291.858547][ T5914] microsoft 0003:045E:00F9.0014: unknown main item tag 0x0 [ 291.868391][ T5914] microsoft 0003:045E:00F9.0014: unknown main item tag 0x0 [ 291.869073][ T5879] usb 3-1: device descriptor read/64, error -71 [ 291.893464][ T5914] microsoft 0003:045E:00F9.0014: unknown main item tag 0x0 [ 291.916021][ T5914] microsoft 0003:045E:00F9.0014: unknown main item tag 0x0 [ 291.947010][T10266] usb usb8: usbfs: process 10266 (syz.0.1560) did not claim interface 0 before use [ 292.016730][ T5879] usb usb3-port1: attempt power cycle [ 292.028334][ T5914] microsoft 0003:045E:00F9.0014: unknown main item tag 0x0 [ 292.040727][ T5914] microsoft 0003:045E:00F9.0014: hidraw0: USB HID v0.05 Device [HID 045e:00f9] on usb-dummy_hcd.3-1/input0 [ 292.072390][ T5914] microsoft 0003:045E:00F9.0014: no inputs found [ 292.083915][ T5914] microsoft 0003:045E:00F9.0014: could not initialize ff, continuing anyway [ 292.107506][T10258] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 292.416060][ T5879] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 292.479530][ T5879] usb 3-1: device descriptor read/8, error -71 [ 292.786017][ T5879] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 292.807077][ T5879] usb 3-1: device descriptor read/8, error -71 [ 292.922041][ T5879] usb usb3-port1: unable to enumerate USB device [ 293.092441][T10275] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1563'. [ 293.328380][ T5914] usb 4-1: USB disconnect, device number 26 [ 293.478232][T10285] FAULT_INJECTION: forcing a failure. [ 293.478232][T10285] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 293.516503][T10285] CPU: 1 UID: 0 PID: 10285 Comm: syz.3.1565 Not tainted syzkaller #0 PREEMPT(full) [ 293.516529][T10285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 293.516540][T10285] Call Trace: [ 293.516547][T10285] [ 293.516555][T10285] dump_stack_lvl+0x189/0x250 [ 293.516578][T10285] ? __pfx____ratelimit+0x10/0x10 [ 293.516605][T10285] ? __pfx_dump_stack_lvl+0x10/0x10 [ 293.516623][T10285] ? __pfx__printk+0x10/0x10 [ 293.516654][T10285] should_fail_ex+0x414/0x560 [ 293.516685][T10285] _copy_to_user+0x31/0xb0 [ 293.516710][T10285] simple_read_from_buffer+0xe1/0x170 [ 293.516737][T10285] proc_fail_nth_read+0x1b3/0x220 [ 293.516766][T10285] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 293.516794][T10285] ? rw_verify_area+0x2a6/0x4d0 [ 293.516812][T10285] ? __lock_acquire+0xab9/0xd20 [ 293.516831][T10285] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 293.516858][T10285] vfs_read+0x200/0xa30 [ 293.516875][T10285] ? fdget_pos+0x247/0x320 [ 293.516900][T10285] ? __pfx___mutex_lock+0x10/0x10 [ 293.516920][T10285] ? __pfx_vfs_read+0x10/0x10 [ 293.516940][T10285] ? __fget_files+0x2a/0x420 [ 293.516964][T10285] ? __fget_files+0x3a0/0x420 [ 293.516984][T10285] ? __fget_files+0x2a/0x420 [ 293.517013][T10285] ksys_read+0x145/0x250 [ 293.517030][T10285] ? exc_page_fault+0x82/0x100 [ 293.517049][T10285] ? __pfx_ksys_read+0x10/0x10 [ 293.517070][T10285] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 293.517104][T10285] ? lockdep_hardirqs_on+0x9c/0x150 [ 293.517126][T10285] __do_fast_syscall_32+0xb6/0x2b0 [ 293.517146][T10285] ? lockdep_hardirqs_on+0x9c/0x150 [ 293.517168][T10285] do_fast_syscall_32+0x34/0x80 [ 293.517187][T10285] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 293.517208][T10285] RIP: 0023:0xf7fb2539 [ 293.517224][T10285] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 293.517238][T10285] RSP: 002b:00000000f54a6590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 293.517258][T10285] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54a6620 [ 293.517270][T10285] RDX: 000000000000000f RSI: 00000000f7445ff4 RDI: 0000000000000000 [ 293.517281][T10285] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 293.517291][T10285] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 293.517302][T10285] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 293.517330][T10285] [ 293.519988][T10287] FAULT_INJECTION: forcing a failure. [ 293.519988][T10287] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 293.798572][T10287] CPU: 1 UID: 0 PID: 10287 Comm: syz.4.1567 Not tainted syzkaller #0 PREEMPT(full) [ 293.798600][T10287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 293.798610][T10287] Call Trace: [ 293.798618][T10287] [ 293.798626][T10287] dump_stack_lvl+0x189/0x250 [ 293.798649][T10287] ? __pfx____ratelimit+0x10/0x10 [ 293.798675][T10287] ? __pfx_dump_stack_lvl+0x10/0x10 [ 293.798693][T10287] ? __pfx__printk+0x10/0x10 [ 293.798712][T10287] ? __might_fault+0xb0/0x130 [ 293.798741][T10287] should_fail_ex+0x414/0x560 [ 293.798772][T10287] _copy_from_user+0x2d/0xb0 [ 293.798795][T10287] get_compat_msghdr+0xad/0x4a0 [ 293.798827][T10287] ? __pfx_get_compat_msghdr+0x10/0x10 [ 293.798864][T10287] ___sys_sendmsg+0x193/0x2a0 [ 293.798886][T10287] ? __pfx____sys_sendmsg+0x10/0x10 [ 293.798939][T10287] ? __fget_files+0x2a/0x420 [ 293.798959][T10287] ? __fget_files+0x3a0/0x420 [ 293.798990][T10287] __sys_sendmsg+0x164/0x220 [ 293.799009][T10287] ? __pfx___sys_sendmsg+0x10/0x10 [ 293.799035][T10287] ? __pfx_ksys_write+0x10/0x10 [ 293.799064][T10287] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 293.799085][T10287] ? lockdep_hardirqs_on+0x9c/0x150 [ 293.799106][T10287] __do_fast_syscall_32+0xb6/0x2b0 [ 293.799126][T10287] ? lockdep_hardirqs_on+0x9c/0x150 [ 293.799148][T10287] do_fast_syscall_32+0x34/0x80 [ 293.799167][T10287] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 293.799188][T10287] RIP: 0023:0xf7ff3539 [ 293.799203][T10287] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 293.799219][T10287] RSP: 002b:00000000f54e655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 293.799237][T10287] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000280 [ 293.799249][T10287] RDX: 0000000004000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 293.799260][T10287] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 293.799271][T10287] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 293.799281][T10287] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 293.799309][T10287] [ 294.316659][T10298] FAULT_INJECTION: forcing a failure. [ 294.316659][T10298] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 294.336371][T10298] CPU: 1 UID: 0 PID: 10298 Comm: syz.1.1571 Not tainted syzkaller #0 PREEMPT(full) [ 294.336397][T10298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 294.336407][T10298] Call Trace: [ 294.336414][T10298] [ 294.336422][T10298] dump_stack_lvl+0x189/0x250 [ 294.336446][T10298] ? __pfx____ratelimit+0x10/0x10 [ 294.336472][T10298] ? __pfx_dump_stack_lvl+0x10/0x10 [ 294.336490][T10298] ? __pfx__printk+0x10/0x10 [ 294.336509][T10298] ? __might_fault+0xb0/0x130 [ 294.336542][T10298] should_fail_ex+0x414/0x560 [ 294.336573][T10298] _copy_from_user+0x2d/0xb0 [ 294.336597][T10298] get_compat_msghdr+0xad/0x4a0 [ 294.336627][T10298] ? __pfx_get_compat_msghdr+0x10/0x10 [ 294.336665][T10298] ___sys_sendmsg+0x193/0x2a0 [ 294.336686][T10298] ? __pfx____sys_sendmsg+0x10/0x10 [ 294.336738][T10298] ? __fget_files+0x2a/0x420 [ 294.336758][T10298] ? __fget_files+0x3a0/0x420 [ 294.336789][T10298] __sys_sendmsg+0x164/0x220 [ 294.336808][T10298] ? __pfx___sys_sendmsg+0x10/0x10 [ 294.336834][T10298] ? __pfx_ksys_write+0x10/0x10 [ 294.336856][T10298] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 294.336877][T10298] ? lockdep_hardirqs_on+0x9c/0x150 [ 294.336897][T10298] __do_fast_syscall_32+0xb6/0x2b0 [ 294.336917][T10298] ? lockdep_hardirqs_on+0x9c/0x150 [ 294.336939][T10298] do_fast_syscall_32+0x34/0x80 [ 294.336958][T10298] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 294.336978][T10298] RIP: 0023:0xf7f81539 [ 294.336994][T10298] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 294.337009][T10298] RSP: 002b:00000000f547655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 294.337028][T10298] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 294.337040][T10298] RDX: 00000000000c0090 RSI: 0000000000000000 RDI: 0000000000000000 [ 294.337050][T10298] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 294.337060][T10298] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 294.337071][T10298] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 294.337098][T10298] [ 294.565607][ T5925] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 294.736028][ T5925] usb 4-1: Using ep0 maxpacket: 32 [ 294.743314][ T5925] usb 4-1: config 0 has an invalid interface number: 64 but max is 1 [ 294.785489][ T5925] usb 4-1: config 0 has no interface number 1 [ 294.826492][ T5925] usb 4-1: New USB device found, idVendor=1630, idProduct=0042, bcdDevice=1c.a5 [ 294.838986][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.871018][T10300] fuse: Bad value for 'fd' [ 294.875501][ T5925] usb 4-1: Product: syz [ 294.884266][ T5925] usb 4-1: Manufacturer: syz [ 294.898023][ T5925] usb 4-1: SerialNumber: syz [ 294.912016][ T5925] usb 4-1: config 0 descriptor?? [ 294.929950][ T5925] usb 4-1: bad CDC descriptors [ 294.969315][T10311] FAULT_INJECTION: forcing a failure. [ 294.969315][T10311] name failslab, interval 1, probability 0, space 0, times 0 [ 294.992798][T10311] CPU: 1 UID: 0 PID: 10311 Comm: syz.2.1575 Not tainted syzkaller #0 PREEMPT(full) [ 294.992823][T10311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 294.992832][T10311] Call Trace: [ 294.992839][T10311] [ 294.992846][T10311] dump_stack_lvl+0x189/0x250 [ 294.992869][T10311] ? __pfx____ratelimit+0x10/0x10 [ 294.992894][T10311] ? __pfx_dump_stack_lvl+0x10/0x10 [ 294.992910][T10311] ? __pfx__printk+0x10/0x10 [ 294.992933][T10311] ? __pfx___might_resched+0x10/0x10 [ 294.992965][T10311] should_fail_ex+0x414/0x560 [ 294.992995][T10311] should_failslab+0xa8/0x100 [ 294.993019][T10311] __kmalloc_noprof+0xcb/0x7f0 [ 294.993035][T10311] ? kfree+0x4d/0x6d0 [ 294.993047][T10311] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 294.993071][T10311] tomoyo_realpath_from_path+0xe3/0x5d0 [ 294.993092][T10311] ? tomoyo_domain+0xd9/0x130 [ 294.993117][T10311] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 294.993143][T10311] tomoyo_path_number_perm+0x1e8/0x5a0 [ 294.993167][T10311] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 294.993205][T10311] ? __lock_acquire+0xab9/0xd20 [ 294.993243][T10311] ? __fget_files+0x2a/0x420 [ 294.993269][T10311] ? __fget_files+0x3a0/0x420 [ 294.993287][T10311] ? __fget_files+0x2a/0x420 [ 294.993309][T10311] security_file_ioctl_compat+0xcb/0x2d0 [ 294.993336][T10311] __ia32_compat_sys_ioctl+0x128/0x840 [ 294.993356][T10311] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 294.993374][T10311] ? __fget_files+0x3a0/0x420 [ 294.993400][T10311] ? fput+0xa0/0xd0 [ 294.993423][T10311] ? ksys_write+0x22a/0x250 [ 294.993440][T10311] ? exc_page_fault+0x82/0x100 [ 294.993458][T10311] ? __pfx_ksys_write+0x10/0x10 [ 294.993480][T10311] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 294.993501][T10311] ? lockdep_hardirqs_on+0x9c/0x150 [ 294.993522][T10311] __do_fast_syscall_32+0xb6/0x2b0 [ 294.993542][T10311] ? lockdep_hardirqs_on+0x9c/0x150 [ 294.993564][T10311] do_fast_syscall_32+0x34/0x80 [ 294.993584][T10311] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 294.993605][T10311] RIP: 0023:0xf708d539 [ 294.993620][T10311] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 294.993634][T10311] RSP: 002b:00000000f547d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 294.993654][T10311] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 000000004048aecb [ 294.993666][T10311] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 294.993676][T10311] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 294.993686][T10311] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 294.993694][T10311] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 294.993720][T10311] [ 294.993728][T10311] ERROR: Out of memory at tomoyo_realpath_from_path. [ 295.699205][ T5879] usb 4-1: USB disconnect, device number 27 [ 295.707326][T10327] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1581'. [ 296.887372][T10344] FAULT_INJECTION: forcing a failure. [ 296.887372][T10344] name failslab, interval 1, probability 0, space 0, times 0 [ 296.907756][T10344] CPU: 1 UID: 0 PID: 10344 Comm: syz.4.1585 Not tainted syzkaller #0 PREEMPT(full) [ 296.907781][T10344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 296.907790][T10344] Call Trace: [ 296.907798][T10344] [ 296.907806][T10344] dump_stack_lvl+0x189/0x250 [ 296.907829][T10344] ? __pfx____ratelimit+0x10/0x10 [ 296.907854][T10344] ? __pfx_dump_stack_lvl+0x10/0x10 [ 296.907871][T10344] ? __pfx__printk+0x10/0x10 [ 296.907893][T10344] ? __pfx___might_resched+0x10/0x10 [ 296.907919][T10344] should_fail_ex+0x414/0x560 [ 296.907948][T10344] should_failslab+0xa8/0x100 [ 296.907970][T10344] __kmalloc_noprof+0xcb/0x7f0 [ 296.907987][T10344] ? kfree+0x4d/0x6d0 [ 296.907999][T10344] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 296.908024][T10344] tomoyo_realpath_from_path+0xe3/0x5d0 [ 296.908052][T10344] ? tomoyo_domain+0xd9/0x130 [ 296.908093][T10344] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 296.908117][T10344] tomoyo_path_number_perm+0x1e8/0x5a0 [ 296.908143][T10344] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 296.908183][T10344] ? __lock_acquire+0xab9/0xd20 [ 296.908221][T10344] ? __fget_files+0x2a/0x420 [ 296.908245][T10344] ? __fget_files+0x3a0/0x420 [ 296.908263][T10344] ? __fget_files+0x2a/0x420 [ 296.908285][T10344] security_file_ioctl_compat+0xcb/0x2d0 [ 296.908311][T10344] __ia32_compat_sys_ioctl+0x128/0x840 [ 296.908331][T10344] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 296.908348][T10344] ? __fget_files+0x3a0/0x420 [ 296.908372][T10344] ? fput+0xa0/0xd0 [ 296.908394][T10344] ? ksys_write+0x22a/0x250 [ 296.908409][T10344] ? exc_page_fault+0x82/0x100 [ 296.908427][T10344] ? __pfx_ksys_write+0x10/0x10 [ 296.908447][T10344] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 296.908466][T10344] ? lockdep_hardirqs_on+0x9c/0x150 [ 296.908485][T10344] __do_fast_syscall_32+0xb6/0x2b0 [ 296.908503][T10344] ? lockdep_hardirqs_on+0x9c/0x150 [ 296.908523][T10344] do_fast_syscall_32+0x34/0x80 [ 296.908541][T10344] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 296.908560][T10344] RIP: 0023:0xf7ff3539 [ 296.908575][T10344] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 296.908589][T10344] RSP: 002b:00000000f54a455c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 296.908607][T10344] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 0000000000008922 [ 296.908618][T10344] RDX: 0000000080002280 RSI: 0000000000000000 RDI: 0000000000000000 [ 296.908628][T10344] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 296.908638][T10344] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 296.908648][T10344] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 296.908674][T10344] [ 296.908682][T10344] ERROR: Out of memory at tomoyo_realpath_from_path. [ 297.599405][ T5879] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 297.632646][ T5879] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 297.706000][ T5925] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 297.876542][T10364] FAULT_INJECTION: forcing a failure. [ 297.876542][T10364] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 297.923282][T10364] CPU: 1 UID: 0 PID: 10364 Comm: syz.3.1592 Not tainted syzkaller #0 PREEMPT(full) [ 297.923309][T10364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 297.923319][T10364] Call Trace: [ 297.923327][T10364] [ 297.923335][T10364] dump_stack_lvl+0x189/0x250 [ 297.923359][T10364] ? __pfx____ratelimit+0x10/0x10 [ 297.923386][T10364] ? __pfx_dump_stack_lvl+0x10/0x10 [ 297.923405][T10364] ? __pfx__printk+0x10/0x10 [ 297.923436][T10364] should_fail_ex+0x414/0x560 [ 297.923469][T10364] _copy_to_user+0x31/0xb0 [ 297.923495][T10364] simple_read_from_buffer+0xe1/0x170 [ 297.923522][T10364] proc_fail_nth_read+0x1b3/0x220 [ 297.923551][T10364] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 297.923580][T10364] ? rw_verify_area+0x2a6/0x4d0 [ 297.923597][T10364] ? __lock_acquire+0xab9/0xd20 [ 297.923617][T10364] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 297.923645][T10364] vfs_read+0x200/0xa30 [ 297.923663][T10364] ? fdget_pos+0x247/0x320 [ 297.923687][T10364] ? __pfx___mutex_lock+0x10/0x10 [ 297.923708][T10364] ? __pfx_vfs_read+0x10/0x10 [ 297.923728][T10364] ? __fget_files+0x2a/0x420 [ 297.923752][T10364] ? __fget_files+0x3a0/0x420 [ 297.923772][T10364] ? __fget_files+0x2a/0x420 [ 297.923801][T10364] ksys_read+0x145/0x250 [ 297.923819][T10364] ? exc_page_fault+0x82/0x100 [ 297.923838][T10364] ? __pfx_ksys_read+0x10/0x10 [ 297.923859][T10364] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 297.923880][T10364] ? lockdep_hardirqs_on+0x9c/0x150 [ 297.923902][T10364] __do_fast_syscall_32+0xb6/0x2b0 [ 297.923957][T10364] ? lockdep_hardirqs_on+0x9c/0x150 [ 297.923979][T10364] do_fast_syscall_32+0x34/0x80 [ 297.923999][T10364] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 297.924020][T10364] RIP: 0023:0xf7fb2539 [ 297.924036][T10364] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 297.924050][T10364] RSP: 002b:00000000f54a6590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 297.924068][T10364] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54a6620 [ 297.924081][T10364] RDX: 000000000000000f RSI: 00000000f7445ff4 RDI: 0000000000000000 [ 297.924093][T10364] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 297.924103][T10364] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 297.924114][T10364] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 297.924143][T10364] [ 298.272695][ T5925] usb 3-1: config 0 has an invalid descriptor of length 92, skipping remainder of the config [ 298.381595][T10368] bond0: option ad_select: unable to set because the bond device is up [ 298.447511][ T5925] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 298.471480][ T5925] usb 3-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 298.509642][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.647835][ T5925] usb 3-1: config 0 descriptor?? [ 298.738751][T10378] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1595'. [ 298.824417][ T5914] usb 3-1: USB disconnect, device number 21 [ 299.789372][T10403] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1604'. [ 299.840035][T10406] netlink: 'syz.3.1605': attribute type 1 has an invalid length. [ 299.859846][T10406] netlink: 'syz.3.1605': attribute type 6 has an invalid length. [ 299.884975][T10406] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1605'. [ 300.607903][T10413] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1606'. [ 301.058903][T10420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1609'. [ 301.107769][T10423] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1609'. [ 301.173764][ T30] audit: type=1326 audit(1760892543.497:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10419 comm="syz.3.1609" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2539 code=0x7ffc0000 [ 301.247427][T10426] FAULT_INJECTION: forcing a failure. [ 301.247427][T10426] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 301.276017][ T30] audit: type=1326 audit(1760892543.497:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10419 comm="syz.3.1609" exe="/root/syz-executor" sig=0 arch=40000003 syscall=435 compat=1 ip=0xf7fb2539 code=0x7ffc0000 [ 301.305811][T10426] CPU: 1 UID: 0 PID: 10426 Comm: syz.3.1610 Not tainted syzkaller #0 PREEMPT(full) [ 301.305836][T10426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 301.305846][T10426] Call Trace: [ 301.305854][T10426] [ 301.305861][T10426] dump_stack_lvl+0x189/0x250 [ 301.305885][T10426] ? __pfx____ratelimit+0x10/0x10 [ 301.305915][T10426] ? __pfx_dump_stack_lvl+0x10/0x10 [ 301.305930][T10426] ? __pfx__printk+0x10/0x10 [ 301.305946][T10426] ? __might_fault+0xb0/0x130 [ 301.305972][T10426] should_fail_ex+0x414/0x560 [ 301.306000][T10426] _copy_from_user+0x2d/0xb0 [ 301.306024][T10426] get_compat_msghdr+0xad/0x4a0 [ 301.306055][T10426] ? __pfx_get_compat_msghdr+0x10/0x10 [ 301.306090][T10426] ___sys_sendmsg+0x193/0x2a0 [ 301.306109][T10426] ? __pfx____sys_sendmsg+0x10/0x10 [ 301.306155][T10426] ? __fget_files+0x2a/0x420 [ 301.306175][T10426] ? __fget_files+0x3a0/0x420 [ 301.306201][T10426] __sys_sendmsg+0x164/0x220 [ 301.306220][T10426] ? __pfx___sys_sendmsg+0x10/0x10 [ 301.306244][T10426] ? __pfx_ksys_write+0x10/0x10 [ 301.306265][T10426] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 301.306284][T10426] ? lockdep_hardirqs_on+0x9c/0x150 [ 301.306300][T10426] __do_fast_syscall_32+0xb6/0x2b0 [ 301.306325][T10426] ? lockdep_hardirqs_on+0x9c/0x150 [ 301.306342][T10426] do_fast_syscall_32+0x34/0x80 [ 301.306356][T10426] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 301.306373][T10426] RIP: 0023:0xf7fb2539 [ 301.306386][T10426] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 301.306398][T10426] RSP: 002b:00000000f54a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 301.306413][T10426] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000300 [ 301.306423][T10426] RDX: 0000000000004800 RSI: 0000000000000000 RDI: 0000000000000000 [ 301.306431][T10426] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 301.306446][T10426] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 301.306454][T10426] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 301.306475][T10426] [ 301.522507][ T30] audit: type=1326 audit(1760892543.497:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10419 comm="syz.3.1609" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2539 code=0x7ffc0000 [ 301.544491][ T30] audit: type=1326 audit(1760892543.497:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10419 comm="syz.3.1609" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fb2539 code=0x7ffc0000 [ 301.566339][ T30] audit: type=1326 audit(1760892543.497:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10419 comm="syz.3.1609" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2539 code=0x7ffc0000 [ 301.588259][ T30] audit: type=1326 audit(1760892543.507:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10419 comm="syz.3.1609" exe="/root/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf7fb2539 code=0x7ffc0000 [ 301.610700][ T30] audit: type=1326 audit(1760892543.507:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10419 comm="syz.3.1609" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2539 code=0x7ffc0000 [ 301.632696][ T30] audit: type=1326 audit(1760892543.507:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10419 comm="syz.3.1609" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fb2539 code=0x7ffc0000 [ 301.654705][ T30] audit: type=1326 audit(1760892543.507:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10419 comm="syz.3.1609" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2539 code=0x7ffc0000 [ 301.676618][ T30] audit: type=1326 audit(1760892543.507:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10419 comm="syz.3.1609" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2539 code=0x7ffc0000 [ 302.246845][T10440] vlan2: entered promiscuous mode [ 302.252156][T10440] team0: entered promiscuous mode [ 302.287841][T10440] team_slave_0: entered promiscuous mode [ 302.316855][T10440] team_slave_1: entered promiscuous mode [ 302.485868][T10454] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1619'. [ 302.874676][T10458] FAULT_INJECTION: forcing a failure. [ 302.874676][T10458] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 302.893135][T10459] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1611'. [ 302.953710][T10458] CPU: 0 UID: 0 PID: 10458 Comm: syz.3.1620 Not tainted syzkaller #0 PREEMPT(full) [ 302.953737][T10458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 302.953747][T10458] Call Trace: [ 302.953754][T10458] [ 302.953762][T10458] dump_stack_lvl+0x189/0x250 [ 302.953786][T10458] ? __pfx____ratelimit+0x10/0x10 [ 302.953813][T10458] ? __pfx_dump_stack_lvl+0x10/0x10 [ 302.953831][T10458] ? __pfx__printk+0x10/0x10 [ 302.953849][T10458] ? __might_fault+0xb0/0x130 [ 302.953879][T10458] should_fail_ex+0x414/0x560 [ 302.953910][T10458] _copy_from_user+0x2d/0xb0 [ 302.953934][T10458] __sys_sendto+0x25c/0x520 [ 302.953961][T10458] ? __pfx___sys_sendto+0x10/0x10 [ 302.953983][T10458] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 302.954014][T10458] ? __fget_files+0x3a0/0x420 [ 302.954046][T10458] ? ksys_write+0x22a/0x250 [ 302.954063][T10458] ? exc_page_fault+0x82/0x100 [ 302.954081][T10458] ? __pfx_ksys_write+0x10/0x10 [ 302.954105][T10458] __ia32_sys_sendto+0xdd/0x100 [ 302.954132][T10458] __do_fast_syscall_32+0xb6/0x2b0 [ 302.954152][T10458] ? lockdep_hardirqs_on+0x9c/0x150 [ 302.954174][T10458] do_fast_syscall_32+0x34/0x80 [ 302.954194][T10458] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 302.954214][T10458] RIP: 0023:0xf7fb2539 [ 302.954230][T10458] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 302.954282][T10458] RSP: 002b:00000000f54a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 302.954301][T10458] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 302.954313][T10458] RDX: 000000000000ffc0 RSI: 0000000000044004 RDI: 0000000080000100 [ 302.954324][T10458] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 302.954335][T10458] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 302.954345][T10458] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 302.954373][T10458] [ 303.964827][T10477] FAULT_INJECTION: forcing a failure. [ 303.964827][T10477] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 303.986059][T10477] CPU: 1 UID: 0 PID: 10477 Comm: syz.0.1627 Not tainted syzkaller #0 PREEMPT(full) [ 303.986083][T10477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 303.986105][T10477] Call Trace: [ 303.986112][T10477] [ 303.986118][T10477] dump_stack_lvl+0x189/0x250 [ 303.986141][T10477] ? __pfx____ratelimit+0x10/0x10 [ 303.986167][T10477] ? __pfx_dump_stack_lvl+0x10/0x10 [ 303.986184][T10477] ? __pfx__printk+0x10/0x10 [ 303.986202][T10477] ? __might_fault+0xb0/0x130 [ 303.986231][T10477] should_fail_ex+0x414/0x560 [ 303.986261][T10477] _copy_from_user+0x2d/0xb0 [ 303.986285][T10477] eventfd_write+0xdd/0x5c0 [ 303.986309][T10477] ? __pfx_eventfd_write+0x10/0x10 [ 303.986328][T10477] ? common_file_perm+0x1b5/0x230 [ 303.986358][T10477] ? bpf_lsm_file_permission+0x9/0x20 [ 303.986380][T10477] ? security_file_permission+0x75/0x290 [ 303.986405][T10477] ? rw_verify_area+0x255/0x4d0 [ 303.986423][T10477] ? __lock_acquire+0xab9/0xd20 [ 303.986443][T10477] ? __pfx_eventfd_write+0x10/0x10 [ 303.986464][T10477] vfs_write+0x27e/0xb30 [ 303.986491][T10477] ? __pfx_vfs_write+0x10/0x10 [ 303.986512][T10477] ? __fget_files+0x2a/0x420 [ 303.986535][T10477] ? __fget_files+0x2a/0x420 [ 303.986555][T10477] ? __fget_files+0x3a0/0x420 [ 303.986574][T10477] ? __fget_files+0x2a/0x420 [ 303.986603][T10477] ksys_write+0x145/0x250 [ 303.986621][T10477] ? exc_page_fault+0x82/0x100 [ 303.986639][T10477] ? __pfx_ksys_write+0x10/0x10 [ 303.986661][T10477] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 303.986681][T10477] ? lockdep_hardirqs_on+0x9c/0x150 [ 303.986703][T10477] __do_fast_syscall_32+0xb6/0x2b0 [ 303.986723][T10477] ? lockdep_hardirqs_on+0x9c/0x150 [ 303.986745][T10477] do_fast_syscall_32+0x34/0x80 [ 303.986764][T10477] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 303.986785][T10477] RIP: 0023:0xf702d539 [ 303.986801][T10477] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 303.986816][T10477] RSP: 002b:00000000f541d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 303.986834][T10477] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 303.986846][T10477] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000000 [ 303.986856][T10477] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 303.986866][T10477] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 303.986875][T10477] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 303.986903][T10477] [ 304.366049][T10486] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1630'. [ 304.687791][T10495] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1626'. [ 304.875187][T10502] tmpfs: Unknown parameter 'mMIVMCD'_vZ>iJ6P3!qh/U}x;0>W[o2N|XTZajX1XZ{(Hlə_*)a8|t} Xp$R)RV'9RdXXi'ܣj<}Ka hmJF}x^w' [ 305.366929][T10515] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1639'. [ 305.471689][ T5914] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 305.639628][ T5914] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 305.732593][ T5914] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 305.747819][ T5914] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 305.760113][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.821293][ T5914] usb 3-1: Product: syz [ 305.851499][ T5914] usb 3-1: Manufacturer: syz [ 305.896612][T10527] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1644'. [ 305.896794][ T5914] usb 3-1: SerialNumber: syz [ 306.211851][T10533] FAULT_INJECTION: forcing a failure. [ 306.211851][T10533] name failslab, interval 1, probability 0, space 0, times 0 [ 306.289582][T10533] CPU: 0 UID: 0 PID: 10533 Comm: syz.1.1645 Not tainted syzkaller #0 PREEMPT(full) [ 306.289606][T10533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 306.289616][T10533] Call Trace: [ 306.289623][T10533] [ 306.289630][T10533] dump_stack_lvl+0x189/0x250 [ 306.289652][T10533] ? __pfx____ratelimit+0x10/0x10 [ 306.289679][T10533] ? __pfx_dump_stack_lvl+0x10/0x10 [ 306.289697][T10533] ? __pfx__printk+0x10/0x10 [ 306.289719][T10533] ? __pfx___might_resched+0x10/0x10 [ 306.289740][T10533] ? fs_reclaim_acquire+0x7d/0x100 [ 306.289763][T10533] should_fail_ex+0x414/0x560 [ 306.289793][T10533] should_failslab+0xa8/0x100 [ 306.289817][T10533] __kmalloc_noprof+0xcb/0x7f0 [ 306.289834][T10533] ? alloc_pipe_info+0x1fd/0x4d0 [ 306.289868][T10533] alloc_pipe_info+0x1fd/0x4d0 [ 306.289899][T10533] splice_direct_to_actor+0xa5d/0xcc0 [ 306.289935][T10533] ? __pfx_aa_file_perm+0x10/0x10 [ 306.289956][T10533] ? __lock_acquire+0xab9/0xd20 [ 306.289976][T10533] ? __pfx_direct_splice_actor+0x10/0x10 [ 306.289995][T10533] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 306.290026][T10533] do_splice_direct+0x181/0x270 [ 306.290049][T10533] ? __pfx_do_splice_direct+0x10/0x10 [ 306.290067][T10533] ? common_file_perm+0x1b5/0x230 [ 306.290087][T10533] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 306.290109][T10533] ? bpf_lsm_file_permission+0x9/0x20 [ 306.290130][T10533] ? security_file_permission+0x75/0x290 [ 306.290155][T10533] ? rw_verify_area+0x255/0x4d0 [ 306.290176][T10533] do_sendfile+0x4da/0x7e0 [ 306.290204][T10533] ? __pfx_do_sendfile+0x10/0x10 [ 306.290225][T10533] ? __pfx_ksys_write+0x10/0x10 [ 306.290245][T10533] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 306.290264][T10533] ? __ia32_compat_sys_sendfile+0x180/0x1d0 [ 306.290284][T10533] ? lockdep_hardirqs_on+0x9c/0x150 [ 306.290303][T10533] __do_fast_syscall_32+0xb6/0x2b0 [ 306.290321][T10533] ? lockdep_hardirqs_on+0x9c/0x150 [ 306.290340][T10533] do_fast_syscall_32+0x34/0x80 [ 306.290359][T10533] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 306.290378][T10533] RIP: 0023:0xf7f81539 [ 306.290393][T10533] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 306.290407][T10533] RSP: 002b:00000000f547655c EFLAGS: 00000206 ORIG_RAX: 00000000000000bb [ 306.290425][T10533] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000005 [ 306.290436][T10533] RDX: 0000000000000000 RSI: 000000001d00c0d1 RDI: 0000000000000000 [ 306.290445][T10533] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 306.290455][T10533] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 306.290464][T10533] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 306.290490][T10533] [ 306.587145][ T5914] usb 3-1: 0:2 : does not exist [ 306.911021][ T5914] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 307.106319][T10542] usb usb8: usbfs: process 10542 (syz.4.1647) did not claim interface 0 before use [ 307.240782][ T5914] usb 3-1: USB disconnect, device number 22 [ 307.326380][ T5925] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 307.379656][ T5878] udevd[5878]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 307.508318][ T5925] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 307.517535][ T5925] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 307.543648][ T5925] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 307.573827][ T5925] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 307.620709][ T5925] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 307.669883][ T5925] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 307.688496][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 307.725268][ T5925] usb 2-1: Product: syz [ 307.735307][ T5925] usb 2-1: Manufacturer: syz [ 307.778982][ T5925] cdc_wdm 2-1:1.0: skipping garbage [ 307.784202][ T5925] cdc_wdm 2-1:1.0: skipping garbage [ 307.811915][ T5925] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 307.830170][ T5925] cdc_wdm 2-1:1.0: Unknown control protocol [ 307.967005][T10561] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1656'. [ 307.991129][T10562] ip6t_REJECT: ECHOREPLY is not supported [ 308.059437][T10561] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1656'. [ 308.087820][ T5925] usb 2-1: USB disconnect, device number 25 [ 308.261059][ T5915] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 308.467891][ T5915] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 308.479541][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 308.503386][T10569] netlink: 'syz.0.1657': attribute type 10 has an invalid length. [ 308.515157][T10569] team0: Port device netdevsim0 added [ 308.527437][T10569] netlink: 'syz.0.1657': attribute type 10 has an invalid length. [ 308.545661][ T5915] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 308.660989][T10569] team0: Port device netdevsim0 removed [ 308.715848][T10569] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 308.785645][ T5915] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 308.978464][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.150507][T10578] usb usb8: usbfs: process 10578 (syz.3.1658) did not claim interface 0 before use [ 309.379744][ T5915] usb 3-1: config 0 descriptor?? [ 309.429380][ T5915] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 312.223110][ T9] usb 3-1: USB disconnect, device number 23 [ 312.225888][T10613] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1668'. [ 312.831953][T10627] netlink: 'syz.3.1673': attribute type 1 has an invalid length. [ 312.849748][T10627] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1673'. [ 314.000923][T10647] ip6t_REJECT: ECHOREPLY is not supported [ 314.336054][ T874] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 315.035528][ T874] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 315.067925][ T5915] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 315.078254][ T874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 315.119333][ T874] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 315.211390][ T874] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 315.236105][ T1211] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 315.281350][ T5915] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 315.297588][ T5915] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 315.309784][ T874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.339934][ T874] usb 5-1: config 0 descriptor?? [ 315.369044][ T5915] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 315.389897][T10660] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1684'. [ 315.438566][ T1211] usb 4-1: Using ep0 maxpacket: 32 [ 315.461580][ T1211] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 315.472119][ T5915] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 315.509089][ T1211] usb 4-1: config 0 has no interface number 0 [ 315.523495][ T5915] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 315.537585][ T1211] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 315.558955][ T1211] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.568053][ T1211] usb 4-1: Product: syz [ 315.572439][ T1211] usb 4-1: Manufacturer: syz [ 315.614263][ T1211] usb 4-1: SerialNumber: syz [ 315.616380][ T874] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 315.829765][ T5915] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 315.877192][ T1211] usb 4-1: config 0 descriptor?? [ 315.901596][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 315.915907][ T1211] smsc95xx v2.0.0 [ 315.947237][ T5915] usb 3-1: Product: syz [ 315.951555][ T5915] usb 3-1: Manufacturer: syz [ 315.977828][ T5915] cdc_wdm 3-1:1.0: skipping garbage [ 315.983506][ T5915] cdc_wdm 3-1:1.0: skipping garbage [ 315.992589][ T5915] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 316.003846][ T5915] cdc_wdm 3-1:1.0: Unknown control protocol [ 316.327597][ T874] usb 3-1: USB disconnect, device number 24 [ 316.528201][T10655] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1682'. [ 316.537471][T10655] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1682'. [ 316.547724][T10655] netlink: 'syz.3.1682': attribute type 3 has an invalid length. [ 316.556209][T10655] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1682'. [ 316.786530][ T5915] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 316.955996][ T5915] usb 1-1: Using ep0 maxpacket: 16 [ 316.966684][ T5915] usb 1-1: unable to get BOS descriptor or descriptor too short [ 316.976178][ T5915] usb 1-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 316.986683][ T5915] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 317.070229][ T5915] usb 1-1: Dual-Role OTG device on HNP port [ 317.077247][ T5915] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 317.091513][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.141926][ T5915] usb 1-1: Product: syz [ 317.170116][ T5915] usb 1-1: Manufacturer: syz [ 317.196313][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.202765][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.211911][ T5915] usb 1-1: SerialNumber: syz [ 317.237139][T10676] netlink: 'syz.2.1689': attribute type 1 has an invalid length. [ 317.245214][T10676] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1689'. [ 317.464864][T10667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.475028][T10667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.490195][ T5915] usb 1-1: 0:2 : does not exist [ 317.507108][ T5915] usb 1-1: USB disconnect, device number 23 [ 317.540019][ T5975] udevd[5975]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 318.448965][ T5914] usb 5-1: USB disconnect, device number 14 [ 318.476668][ T1211] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 318.489288][ T1211] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 318.563291][ T1211] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 318.607212][ T1211] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 318.631437][ T874] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 318.651164][ T1211] usb 4-1: USB disconnect, device number 28 [ 318.685262][ T30] audit: type=1326 audit(1760892561.077:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10711 comm="syz.3.1704" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2539 code=0x7ffc0000 [ 318.836574][ T30] audit: type=1326 audit(1760892561.077:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10711 comm="syz.3.1704" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2539 code=0x7ffc0000 [ 318.875369][ T874] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 318.877772][ T30] audit: type=1326 audit(1760892561.117:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10711 comm="syz.3.1704" exe="/root/syz-executor" sig=0 arch=40000003 syscall=174 compat=1 ip=0xf7fb2539 code=0x7ffc0000 [ 318.913210][ T874] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 318.936314][ T30] audit: type=1326 audit(1760892561.117:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10711 comm="syz.3.1704" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2539 code=0x7ffc0000 [ 318.986022][ T874] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 319.015736][ T30] audit: type=1326 audit(1760892561.117:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10711 comm="syz.3.1704" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2539 code=0x7ffc0000 [ 319.024653][ T874] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 319.059374][ T874] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 319.114676][T10719] program syz.4.1706 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 319.124665][ T30] audit: type=1326 audit(1760892561.117:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10711 comm="syz.3.1704" exe="/root/syz-executor" sig=0 arch=40000003 syscall=168 compat=1 ip=0xf7fb2539 code=0x7ffc0000 [ 319.177147][ T30] audit: type=1326 audit(1760892561.117:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10711 comm="syz.3.1704" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2539 code=0x7ffc0000 [ 319.203529][ T30] audit: type=1326 audit(1760892561.117:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10711 comm="syz.3.1704" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2539 code=0x7ffc0000 [ 319.241339][ T30] audit: type=1326 audit(1760892561.117:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10711 comm="syz.3.1704" exe="/root/syz-executor" sig=0 arch=40000003 syscall=174 compat=1 ip=0xf7fb2539 code=0x7ffc0000 [ 319.308546][ T30] audit: type=1326 audit(1760892561.117:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10711 comm="syz.3.1704" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fb2539 code=0x7ffc0000 [ 319.392931][ T874] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 319.402898][ T874] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 319.436019][ T874] usb 3-1: Product: syz [ 319.488209][ T874] usb 3-1: Manufacturer: syz [ 319.531595][ T874] cdc_wdm 3-1:1.0: skipping garbage [ 319.540196][ T874] cdc_wdm 3-1:1.0: skipping garbage [ 319.557132][ T874] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 319.586271][ T874] cdc_wdm 3-1:1.0: Unknown control protocol [ 319.836799][T10738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1713'. [ 319.859639][T10737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1713'. [ 319.896558][ T24] usb 3-1: USB disconnect, device number 25 [ 320.180536][T10745] tipc: Started in network mode [ 320.185595][T10745] tipc: Node identity 5ebe7363f65f, cluster identity 4711 [ 320.193597][T10745] tipc: Enabled bearer , priority 0 [ 320.203584][T10745] syzkaller0: entered promiscuous mode [ 320.210310][T10745] syzkaller0: entered allmulticast mode [ 320.226986][T10744] tipc: Resetting bearer [ 320.253745][T10744] tipc: Disabling bearer [ 320.301197][ T1211] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 320.469094][ T1211] usb 5-1: Using ep0 maxpacket: 8 [ 320.479959][ T1211] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 320.490743][ T1211] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 320.508262][ T9] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 320.515410][ T1211] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.546494][ T1211] usb 5-1: Product: syz [ 320.550713][ T1211] usb 5-1: Manufacturer: syz [ 320.566646][ T1211] usb 5-1: SerialNumber: syz [ 320.577961][ T1211] usb 5-1: config 0 descriptor?? [ 320.588931][ T1211] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 320.597664][ T1211] usb 5-1: setting power ON [ 320.606918][ T1211] dvb-usb: bulk message failed: -22 (2/0) [ 320.628964][ T1211] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 320.646677][ T1211] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 320.655183][ T1211] usb 5-1: media controller created [ 320.672850][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 320.681424][ T1211] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 320.693566][ T9] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 320.716076][ T9] usb 2-1: can't read configurations, error -71 [ 320.728882][ T1211] usb 5-1: selecting invalid altsetting 6 [ 320.735777][ T1211] usb 5-1: digital interface selection failed (-22) [ 320.747842][ T1211] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 320.759078][ T1211] usb 5-1: setting power OFF [ 320.763947][ T1211] dvb-usb: bulk message failed: -22 (2/0) [ 320.770645][ T1211] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 320.780157][ T1211] (NULL device *): no alternate interface [ 321.008064][T10767] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1724'. [ 321.054893][ T1211] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 321.087096][ T1211] usb 5-1: USB disconnect, device number 15 [ 321.431693][T10774] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1723'. [ 321.582276][T10774] bond1: option resend_igmp: invalid value (511) [ 321.613820][T10774] bond1: option resend_igmp: allowed values 0 - 255 [ 321.705874][T10774] bond1 (unregistering): Released all slaves [ 321.731760][T10768] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 321.742632][T10768] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 321.752704][T10768] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 321.781262][T10768] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 321.805069][T10768] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 322.383427][T10763] ------------[ cut here ]------------ [ 322.389151][T10763] WARNING: CPU: 1 PID: 10763 at kernel/kcov.c:872 kcov_remote_start+0x55a/0x7f0 [ 322.398198][T10763] Modules linked in: [ 322.402276][T10763] CPU: 1 UID: 0 PID: 10763 Comm: syz.2.1724 Not tainted syzkaller #0 PREEMPT(full) [ 322.411649][T10763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 322.421713][T10763] RIP: 0010:kcov_remote_start+0x55a/0x7f0 [ 322.427445][T10763] Code: ff 4c 89 ff be 03 00 00 00 e8 e2 c4 d0 02 e9 eb fa ff ff e8 c8 2f 8c 09 f7 c3 00 02 00 00 0f 84 da fa ff ff e9 5a fc ff ff 90 <0f> 0b 90 e8 9e 48 8c 09 89 c0 48 c7 c7 48 b7 91 92 48 03 3c c5 d0 [ 322.447044][T10763] RSP: 0018:ffffc90003617250 EFLAGS: 00010002 [ 322.453125][T10763] RAX: 0000000080000200 RBX: 0000000000000246 RCX: 0000000000000002 [ 322.461090][T10763] RDX: 0000000000030000 RSI: ffffffff8d9d1081 RDI: ffffffff8bc073e0 [ 322.469054][T10763] RBP: ffffc900036174b0 R08: ffffc90003616fd0 R09: 0000000000000020 [ 322.477006][T10763] R10: dffffc0000000000 R11: ffffffff819e0350 R12: ffff8880b8728748 [ 322.484965][T10763] R13: ffffffff81c04d97 R14: ffff8880272bbc80 R15: 0000000000000000 [ 322.492925][T10763] FS: 0000000000000000(0000) GS:ffff888125e0d000(0063) knlGS:00000000f547db40 [ 322.501837][T10763] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 322.508406][T10763] CR2: 000000008000c018 CR3: 000000006fda4000 CR4: 00000000003526f0 [ 322.516367][T10763] Call Trace: [ 322.519632][T10763] [ 322.522545][T10763] ieee80211_rx_list+0x52c/0x2b90 [ 322.527560][T10763] ? do_raw_spin_lock+0x121/0x290 [ 322.532775][T10763] ? __d_instantiate+0x197/0x740 [ 322.537721][T10763] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 322.543186][T10763] ? __lock_acquire+0xab9/0xd20 [ 322.548080][T10763] ? ieee80211_rx_napi+0xca/0x3d0 [ 322.553102][T10763] ? ieee80211_rx_napi+0xca/0x3d0 [ 322.558123][T10763] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 322.564027][T10763] ? ieee80211_rx_napi+0xca/0x3d0 [ 322.569077][T10763] ieee80211_rx_napi+0x1a8/0x3d0 [ 322.574102][T10763] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 322.579550][T10763] ? skb_dequeue+0x10e/0x150 [ 322.584132][T10763] ieee80211_handle_queued_frames+0xe8/0x1f0 [ 322.590114][T10763] ? ieee80211_stop_device+0x29/0xf0 [ 322.595388][T10763] ieee80211_stop_device+0x3e/0xf0 [ 322.600525][T10763] ieee80211_do_stop+0x1797/0x1f50 [ 322.605717][T10763] ? trace_irq_disable+0x37/0x110 [ 322.610755][T10763] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 322.616223][T10763] ieee80211_stop+0x1b1/0x240 [ 322.620906][T10763] ? __pfx_ieee80211_stop+0x10/0x10 [ 322.626276][T10763] __dev_close_many+0x364/0x6f0 [ 322.631131][T10763] ? __pfx___dev_close_many+0x10/0x10 [ 322.636489][T10763] ? __mutex_trylock_common+0x153/0x260 [ 322.642028][T10763] netif_close_many+0x225/0x410 [ 322.646887][T10763] ? __pfx_netif_close_many+0x10/0x10 [ 322.652241][T10763] ? __mutex_lock+0x335/0x1350 [ 322.656999][T10763] ? __lock_acquire+0xab9/0xd20 [ 322.661837][T10763] netif_close+0x158/0x210 [ 322.666257][T10763] ? __pfx_netif_close+0x10/0x10 [ 322.671180][T10763] ? __pfx___mutex_lock+0x10/0x10 [ 322.676230][T10763] dev_close+0x10a/0x220 [ 322.680470][T10763] cfg80211_shutdown_all_interfaces+0xd4/0x220 [ 322.686606][T10763] ? __pfx_cfg80211_rfkill_set_block+0x10/0x10 [ 322.692740][T10763] cfg80211_rfkill_set_block+0x2d/0x50 [ 322.698190][T10763] rfkill_set_block+0x1d2/0x440 [ 322.703053][T10763] rfkill_fop_write+0x44b/0x570 [ 322.707906][T10763] ? __pfx_rfkill_fop_write+0x10/0x10 [ 322.713275][T10763] ? security_file_permission+0x40/0x290 [ 322.718985][T10763] ? rw_verify_area+0x255/0x4d0 [ 322.723820][T10763] ? __lock_acquire+0xab9/0xd20 [ 322.728659][T10763] ? __pfx_rfkill_fop_write+0x10/0x10 [ 322.734020][T10763] vfs_write+0x27e/0xb30 [ 322.738252][T10763] ? __pfx_vfs_write+0x10/0x10 [ 322.743010][T10763] ? __fget_files+0x2a/0x420 [ 322.747586][T10763] ? __fget_files+0x2a/0x420 [ 322.752159][T10763] ? __fget_files+0x3a0/0x420 [ 322.756818][T10763] ? __fget_files+0x2a/0x420 [ 322.761397][T10763] ksys_write+0x145/0x250 [ 322.765712][T10763] ? __pfx_ksys_write+0x10/0x10 [ 322.770555][T10763] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 322.777231][T10763] ? lockdep_hardirqs_on+0x9c/0x150 [ 322.782431][T10763] __do_fast_syscall_32+0xb6/0x2b0 [ 322.787534][T10763] ? lockdep_hardirqs_on+0x9c/0x150 [ 322.792726][T10763] do_fast_syscall_32+0x34/0x80 [ 322.797563][T10763] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 322.803873][T10763] RIP: 0023:0xf708d539 [ 322.807924][T10763] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 322.827547][T10763] RSP: 002b:00000000f547d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 322.835952][T10763] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 0000000080000080 [ 322.843917][T10763] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000000 [ 322.851894][T10763] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 322.859852][T10763] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 322.867812][T10763] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 322.875779][T10763] [ 322.878784][T10763] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 322.886136][T10763] CPU: 1 UID: 0 PID: 10763 Comm: syz.2.1724 Not tainted syzkaller #0 PREEMPT(full) [ 322.895499][T10763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 322.905627][T10763] Call Trace: [ 322.908898][T10763] [ 322.911814][T10763] dump_stack_lvl+0x99/0x250 [ 322.916387][T10763] ? __asan_memcpy+0x40/0x70 [ 322.920957][T10763] ? __pfx_dump_stack_lvl+0x10/0x10 [ 322.926320][T10763] ? __pfx__printk+0x10/0x10 [ 322.930905][T10763] vpanic+0x237/0x6d0 [ 322.934872][T10763] ? __pfx_vpanic+0x10/0x10 [ 322.939400][T10763] panic+0xb9/0xc0 [ 322.943108][T10763] ? __pfx_panic+0x10/0x10 [ 322.947525][T10763] __warn+0x31b/0x4b0 [ 322.951496][T10763] ? kcov_remote_start+0x55a/0x7f0 [ 322.956591][T10763] ? kcov_remote_start+0x55a/0x7f0 [ 322.961688][T10763] report_bug+0x2be/0x4f0 [ 322.966008][T10763] ? kcov_remote_start+0x55a/0x7f0 [ 322.971131][T10763] ? kcov_remote_start+0x55a/0x7f0 [ 322.976262][T10763] ? kcov_remote_start+0x55c/0x7f0 [ 322.981370][T10763] handle_bug+0x84/0x160 [ 322.985612][T10763] exc_invalid_op+0x1a/0x50 [ 322.990106][T10763] asm_exc_invalid_op+0x1a/0x20 [ 322.994954][T10763] RIP: 0010:kcov_remote_start+0x55a/0x7f0 [ 323.000668][T10763] Code: ff 4c 89 ff be 03 00 00 00 e8 e2 c4 d0 02 e9 eb fa ff ff e8 c8 2f 8c 09 f7 c3 00 02 00 00 0f 84 da fa ff ff e9 5a fc ff ff 90 <0f> 0b 90 e8 9e 48 8c 09 89 c0 48 c7 c7 48 b7 91 92 48 03 3c c5 d0 [ 323.020271][T10763] RSP: 0018:ffffc90003617250 EFLAGS: 00010002 [ 323.026344][T10763] RAX: 0000000080000200 RBX: 0000000000000246 RCX: 0000000000000002 [ 323.034320][T10763] RDX: 0000000000030000 RSI: ffffffff8d9d1081 RDI: ffffffff8bc073e0 [ 323.042282][T10763] RBP: ffffc900036174b0 R08: ffffc90003616fd0 R09: 0000000000000020 [ 323.050275][T10763] R10: dffffc0000000000 R11: ffffffff819e0350 R12: ffff8880b8728748 [ 323.058238][T10763] R13: ffffffff81c04d97 R14: ffff8880272bbc80 R15: 0000000000000000 [ 323.066278][T10763] ? kcov_remote_start+0x97/0x7f0 [ 323.071380][T10763] ? __pfx_hlock_conflict+0x10/0x10 [ 323.076607][T10763] ieee80211_rx_list+0x52c/0x2b90 [ 323.081761][T10763] ? do_raw_spin_lock+0x121/0x290 [ 323.086796][T10763] ? __d_instantiate+0x197/0x740 [ 323.091748][T10763] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 323.097205][T10763] ? __lock_acquire+0xab9/0xd20 [ 323.102064][T10763] ? ieee80211_rx_napi+0xca/0x3d0 [ 323.107116][T10763] ? ieee80211_rx_napi+0xca/0x3d0 [ 323.112135][T10763] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 323.118030][T10763] ? ieee80211_rx_napi+0xca/0x3d0 [ 323.123045][T10763] ieee80211_rx_napi+0x1a8/0x3d0 [ 323.127972][T10763] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 323.133458][T10763] ? skb_dequeue+0x10e/0x150 [ 323.138157][T10763] ieee80211_handle_queued_frames+0xe8/0x1f0 [ 323.144236][T10763] ? ieee80211_stop_device+0x29/0xf0 [ 323.149521][T10763] ieee80211_stop_device+0x3e/0xf0 [ 323.154633][T10763] ieee80211_do_stop+0x1797/0x1f50 [ 323.159734][T10763] ? trace_irq_disable+0x37/0x110 [ 323.164768][T10763] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 323.170239][T10763] ieee80211_stop+0x1b1/0x240 [ 323.174904][T10763] ? __pfx_ieee80211_stop+0x10/0x10 [ 323.180093][T10763] __dev_close_many+0x364/0x6f0 [ 323.184954][T10763] ? __pfx___dev_close_many+0x10/0x10 [ 323.190316][T10763] ? __mutex_trylock_common+0x153/0x260 [ 323.195864][T10763] netif_close_many+0x225/0x410 [ 323.200713][T10763] ? __pfx_netif_close_many+0x10/0x10 [ 323.206078][T10763] ? __mutex_lock+0x335/0x1350 [ 323.210838][T10763] ? __lock_acquire+0xab9/0xd20 [ 323.215696][T10763] netif_close+0x158/0x210 [ 323.220100][T10763] ? __pfx_netif_close+0x10/0x10 [ 323.225034][T10763] ? __pfx___mutex_lock+0x10/0x10 [ 323.230055][T10763] dev_close+0x10a/0x220 [ 323.234731][T10763] cfg80211_shutdown_all_interfaces+0xd4/0x220 [ 323.240963][T10763] ? __pfx_cfg80211_rfkill_set_block+0x10/0x10 [ 323.247110][T10763] cfg80211_rfkill_set_block+0x2d/0x50 [ 323.252555][T10763] rfkill_set_block+0x1d2/0x440 [ 323.257400][T10763] rfkill_fop_write+0x44b/0x570 [ 323.262244][T10763] ? __pfx_rfkill_fop_write+0x10/0x10 [ 323.267608][T10763] ? security_file_permission+0x40/0x290 [ 323.273239][T10763] ? rw_verify_area+0x255/0x4d0 [ 323.278101][T10763] ? __lock_acquire+0xab9/0xd20 [ 323.282962][T10763] ? __pfx_rfkill_fop_write+0x10/0x10 [ 323.288334][T10763] vfs_write+0x27e/0xb30 [ 323.292584][T10763] ? __pfx_vfs_write+0x10/0x10 [ 323.297345][T10763] ? __fget_files+0x2a/0x420 [ 323.301932][T10763] ? __fget_files+0x2a/0x420 [ 323.306513][T10763] ? __fget_files+0x3a0/0x420 [ 323.311189][T10763] ? __fget_files+0x2a/0x420 [ 323.315779][T10763] ksys_write+0x145/0x250 [ 323.320099][T10763] ? __pfx_ksys_write+0x10/0x10 [ 323.324949][T10763] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 323.331633][T10763] ? lockdep_hardirqs_on+0x9c/0x150 [ 323.336830][T10763] __do_fast_syscall_32+0xb6/0x2b0 [ 323.341930][T10763] ? lockdep_hardirqs_on+0x9c/0x150 [ 323.347118][T10763] do_fast_syscall_32+0x34/0x80 [ 323.351963][T10763] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 323.358278][T10763] RIP: 0023:0xf708d539 [ 323.362334][T10763] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 323.381944][T10763] RSP: 002b:00000000f547d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 323.390373][T10763] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 0000000080000080 [ 323.398376][T10763] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000000 [ 323.406368][T10763] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 323.414328][T10763] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 323.422315][T10763] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 323.430288][T10763] [ 323.433563][T10763] Kernel Offset: disabled [ 323.437873][T10763] Rebooting in 86400 seconds..