last executing test programs: 27.62044535s ago: executing program 2 (id=2816): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000006c0), 0x28c9c1, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000200)=[{0x40, 0x2, 0xff, 0x3}, {0x6, 0x0, 0xff, 0x1}]}, 0x10) (async, rerun: 64) sendmmsg$inet(r1, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) (rerun: 64) close_range(r0, 0xffffffffffffffff, 0x0) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 32) timer_create(0x1, &(0x7f0000000200)={0x0, 0x21, 0x0, @thr={&(0x7f0000000340)="b8b5f044f6d0ac551d21ef4e1b88e9f81f15198601443629431cd781091796a14e3a95746c10abc48eebad6e7bb1fd6930fb1b71b93faec94cfac0059e3d4892aa6ec8a447de37b367896cda032be9d593ce9790cec05de4db600f377a1811a0f6b52459c1b4ac3db4d59f206ea05a9efbe460d303d88f45f6efb5fa33dbeb869587222996203bdf2e262e78c9405060f1", &(0x7f00000000c0)="cb0ff69c66ad4315836446635b26620bd604550d029c76d5d0039ee8c457f253a8b9b9a2df6024376cca3402f46c532b97c955f9badf9e6a5a6637e8a3da90459d132291a35e631c3d08db134b1eccd9a1ac753e7bb3e1468952e9cddbb637751aa13591d842a6a178b638aacf1a2282756615953f50"}}, &(0x7f0000000000)=0x0) clock_gettime(0x0, &(0x7f00000001c0)) (async, rerun: 32) timer_settime(r3, 0x1, &(0x7f0000000300)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) (async, rerun: 32) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000080)={0x50, 0x0, r7, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) (async) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r6, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x4, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) syz_fuse_handle_req(r6, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="550100000000000003000000000000000700000000000000030000000000000000800200000000000300000000000000090000000100010006000000000000000902000000000096040000000000000009000000000000000600000000000000030a00000000000006000000010000000608000000800000de000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="0180000000000880000000000100000000000000010000000000000001"], 0x0, 0x0, 0x0}) (async, rerun: 32) getdents64(r8, 0x0, 0x0) timer_settime(r3, 0x0, &(0x7f0000000040)={{0x77359400}, {r4, r5+10000000}}, &(0x7f0000000180)) r9 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff4]}, 0x8, 0x800) (async) r10 = epoll_create1(0x0) (async) r11 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) fcntl$F_GET_FILE_RW_HINT(r11, 0x40d, &(0x7f0000000400)) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000240)={0xe}) (async, rerun: 64) epoll_pwait2(r10, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 64) 27.264479578s ago: executing program 2 (id=2820): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x6, 0xa, 0x20}, {0x8, 0x10, 0x100000002, 0x0, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x2c000010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e000000200000000000000000000000000000000000000000000000000ffffff80000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff00000000000000000000000000000000000000000200000000000000000000000000000000000000000000000500000000000000fbffffffffffffff00000000000000000000000000004000000000aa6cc190c250086a544b9800000000020000"], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 27.060543347s ago: executing program 2 (id=2821): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000060000000800000008"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x2, 0x0, 0xffff}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x8, 0x2d, &(0x7f0000000280)=""/45, 0x40f00, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 26.699561936s ago: executing program 2 (id=2823): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r2, 0x0) r3 = socket(0xa, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x25, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e1b, @broadcast}}, 0xfff9, 0x4}, 0x90) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$binfmt_script(r4, &(0x7f00000004c0)={'#! ', '', [{0x20, '\t\xbb\x9b\x81\xa61\xdd\xd6\xe6\xb3R\xb9\xdb?\xbe\xd3&n\xe2\xb6\xf5%\xb2\xdf\xf5\x83\xba\xeb\x93~\x88\xdc\xec[6=\x01p\xcd\x8ay\x0ez\\U\xd4\bj@5\x1dN\xe3\rf\xe5W\xcers\x04\x84)\xecq\xb2\x89\x00\x17\xe3\x82\x81\xbeS\xd8\x00\x1c\x10\xf8\xf3\xd4\xddI<%\xbb\xa6\xab\x9a\xe5\xec\x19\xfa\xcb\x94\x90u\x9b\x13W\xbd\xab\xfa\x032-{\x96{\x9cb\xfe\xccO\x00\xf0\xf2\x9dZ\x19n\xc7\xf2\vIR=T\x05)jIeR}\xecNg\x9b\a \x84\x93\x82\x1d1i\xf0\xa1\xe2\xf6L\xe84\xb6\n\x16\xc7\xa1\xf6\x7f\nl\x969\x99>\xf0\xdd\xfe\x06\xdd\xa5\f\xd3E\xdd\xae-\xf1\xfd\xc4@\x85L\x1e\xd2\x18\xc5TN\x0f\xe6@\xa0\xfd\xdaf\x9d<\xdb\xf1<\xff\xf4]\xd1K\xe1xj\x16\xaaQ(:\xa6'}], 0xa, "c3c7b2e1312e0841e5544d48428c"}, 0xec) read$watch_queue(r4, &(0x7f0000000240)=""/12, 0xc) write(r4, &(0x7f0000000180)='transport=tcp,traddr=127.0.0.1,trsvcid=4420,nqn=n', 0x31) mkdirat(r4, &(0x7f0000000180)='./file0\x00', 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r6, 0x5420, &(0x7f0000000340)=0x8) readv(r6, &(0x7f0000000280)=[{&(0x7f0000001000)=""/145, 0x91}], 0x1) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000000)={0x340000, 0x4d2, 0xde, 0x84, 0x16, "bc113800000000000000000600"}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x100, 0x0) 25.978429062s ago: executing program 2 (id=2826): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d2407010604000000000000e90924030000000001"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000005c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x20, 0x81, 0x1, "9a"}, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0x3a, &(0x7f0000000500)={@local, @remote, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @broadcast}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x4c}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000040)={0x40, 0x14, 0x1, 'e'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23.666990743s ago: executing program 2 (id=2836): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, 0x0}, 0x48043) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r3, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) read$snapshot(0xffffffffffffffff, 0x0, 0x0) splice(r2, 0x0, r0, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e22, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x6, 0x36, 0xffffffbc, 0x1a}, 0x9c) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000480)={0x0, 0x46ae, 0x2, 0x1, 0x100, 0xb6, 0x7f, 0x3, {0x0, @in={{0x2, 0x4e21, @local}}, 0x0, 0x2, 0x3ff, 0x8, 0x7}}, &(0x7f0000000540)=0xb0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) sync() r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) socket(0x10, 0x3, 0x0) write$FUSE_INIT(r6, &(0x7f00000002c0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x4f834c58, 0x3, 0x101, 0x7, 0xa15, 0x0, 0x0, 0x1}}, 0x50) r7 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r7, 0xc1105511, &(0x7f0000000040)={0x1, 0x3, 0xfffe, 0xfff, 'syz1\x00', 0x2}) r8 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x2, 0x400) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r8, 0xc1105518, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0xc1105511, &(0x7f0000000140)=0x400001) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0x9af8dba271b76fd5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f0000000380)=r10, 0x4) 16.29581896s ago: executing program 0 (id=2874): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, r0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x40000, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x1, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x300}, 0x0) 16.230759349s ago: executing program 0 (id=2876): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$VIDIOC_QBUF(r1, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x6, 0x4, 0x4, 0x0, {}, {0x0, 0xb846941ed94b4582, 0x96, 0x0, 0x0, 0xa, "ee0f09a2"}, 0xffff, 0x2, {}, 0x80000}) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000380)={0x5, &(0x7f00000000c0)=[{0x1f, '\x00', @st={0x4, [{0x0, @uvalue=0x8}, {0x3, @uvalue=0x3}, {0x1, @svalue=0xff}, {0x2, @uvalue=0x8d3c}]}, 0x4}, {0x39, '\x00', @buffer={"55eb476b13d85ef7a019aef895e9baae03d9401b33813c1f29bc0c0ac8383761", 0x20}, 0x5}, {0xf, '\x00', @data=0x81, 0x3}, {0x28}, {0x3c, '\x00', @data=0x8, 0x1}]}) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000454649205041525400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x31]}}) 16.090160357s ago: executing program 0 (id=2877): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="1201100154e108101e041840b4ed010203010902120001000000000904"], 0x0) r1 = syz_usb_connect(0x5, 0x38, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xde, 0xd4, 0x9b, 0x8, 0x499, 0x1051, 0x2ec8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x26, 0x1, 0x6, 0x4, 0x10, 0x6, "", [{{0x9, 0x4, 0xce, 0x2, 0x1, 0xf6, 0xf6, 0xfc, 0x5, [@hid_hid={0x9, 0x21, 0x6, 0x9, 0x1, {0x22, 0x95d}}, @generic={0x2, 0x31}], [{{0x9, 0x5, 0x6, 0x3, 0x40, 0x2, 0x8, 0x81}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_clone(0x100, &(0x7f00000004c0)="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", 0x1000, &(0x7f00000014c0), &(0x7f0000001500), &(0x7f0000001540)="a2702be85b4ea39d9de03f7848a2eca1e19d2be535924b7d94126a79405baeebaa9e6417f1fd0a57f4deca86b56a6b70acd62862f8c73f3daf9784de1050ff1578add09c38e6314aae9562fab40f74c5d650b9181d6987b3a2fe857e54f378971c238d4fc606f9aedda3c4ad02cfd5") ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000040)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) move_pages(r2, 0x2, &(0x7f00000000c0)=[&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil], 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x2) r3 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000000140)={'\be \x00', 0x8000, 0x5, 0x2, 0x0, 0x8000, '\x00', '\x00', "00018400", '\x00', ["fdfeffbf84a438dfc5d5c010", "0000000000000400", "00859ca33eecff0500", "0c000700007f210003716000"]}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x40, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r1, &(0x7f0000000400)={0x14, &(0x7f0000000280)={0x0, 0x6, 0x7b, {0x7b, 0x24, "73cb6a1725b4bbade561ed867214570600ceea33a6d02a25d78a54f4c1e04fba94b7b4ac330efcadce72b425561d52647058cf7526c9cc3fe4b23e266f334c14cf3031ec7f0badd6d3badfcf8c16b4f67260c9a3461e183e56dd79ae74bc3e57ff8c047540c91aad3e367ece2fb63a6f4983e4c69da8e6ca46"}}, &(0x7f0000000340)={0x0, 0x3, 0x98, @string={0x98, 0x3, "1ad1bb97ea8caaa29f2a6b811a3d2375bb4a11c739774e929630592966cf875ab6220c31eed8a65179bbd4cba5d718bfcc2a39b101ac0a905fa2b386e426b9a2dceb90090b407443c5c5160702dacc8817b2bcab3f835abd74fc53fe00419a787c3a710d283107cf30a6610866a09ae1a8125d7df74600c1eaac21061f797f52848eec41c062c313cf172a2fb55482a5f723b6213396"}}}, &(0x7f00000017c0)={0x44, &(0x7f00000015c0)={0x40, 0xb, 0x39, "fe090915a6ef0404b3add8a3cf4bce8cdc3fdf59eb18e8778c66b1f6719b520e49406e17810942aa9641146a115479c599823d2e77fe4f2645"}, &(0x7f0000001600)={0x0, 0xa, 0x1, 0xe}, &(0x7f0000001640)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000001680)={0x20, 0x81, 0x3, "aa9811"}, &(0x7f00000016c0)={0x20, 0x82, 0x2, "d75a"}, &(0x7f0000001700)={0x20, 0x83, 0x3, "277f04"}, &(0x7f0000001740)={0x20, 0x84, 0x1, "12"}, &(0x7f0000001780)={0x20, 0x85, 0x3, "b65488"}}) 14.361015205s ago: executing program 0 (id=2880): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000440)}, 0x20) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000500)={&(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x80800, 0x0, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={0xffffffffffffffff, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000900)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000980)=[0x0, 0x0, 0x0], 0x0, 0xd0, &(0x7f00000009c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000a00), &(0x7f0000000a40), 0x8, 0x24, 0x8, 0x8, &(0x7f0000000a80)}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000100), 0x0}, 0x20) set_tid_address(&(0x7f0000000680)) r6 = socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) landlock_restrict_self(r5, 0x2) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500"], 0x3c}}, 0x0) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380), 0x8100, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x18, 0x7, 0xffffffff, 0x81, 0x601, r4, 0x2, '\x00', r3, r5, 0x0, 0x2}, 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000085000000a0000000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d40)=@bpf_ext={0x1c, 0x0, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x847, 0x79, &(0x7f0000000300)=""/121, 0x41100, 0x49, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f00000003c0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x5, 0x6, 0x81, 0x101}, 0x10, 0x2702, r5, 0x0, &(0x7f0000000d00)=[r4, r8, r9], 0x0, 0x10, 0x7}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x1) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000400)={r1, r10}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="0c0001800800010022a004"], 0x24}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 14.025408521s ago: executing program 0 (id=2882): socket$inet(0x2, 0x3, 0x4) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r0, &(0x7f0000002300)={@val={0x3, 0x800}, @val={0x0, 0x0, 0x6, 0x0, 0x14}, @ipv4=@gre={{0x5, 0x4, 0x0, 0x5, 0x5a, 0x65, 0x0, 0x5, 0x2f, 0x0, @empty, @multicast1}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x1, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x8]}, {0x8, 0x88be, 0x0, {{0x2, 0x1, 0x5, 0x0, 0x0, 0x3, 0x5, 0x7f}, 0x1, {0x7}}}, {0x8, 0x22eb, 0x1, {{0x0, 0x2, 0x6, 0x3, 0x0, 0x3, 0x0, 0x4e}, 0x2, {0x9, 0xfff7, 0x1, 0x8, 0x1, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x1}}}}, 0x68) 13.700252176s ago: executing program 0 (id=2884): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x4e23, 0x0, 0xa}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x40}, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x5, 0x3}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="a000000021000100000000000000e0ff00000000000000000000000000000000ffffffff000000000000000000000000fffc0000000100000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000050001100ac141440000000000000000000000011fe8000000000000000000000000000aae0000001000000000000000000000000fe8000000000000000000000000000bb3c05"], 0xa0}, 0x1, 0xffffffffffffff84, 0x0, 0x800}, 0x0) 8.501112234s ago: executing program 32 (id=2836): socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, 0x0}, 0x48043) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r3, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) read$snapshot(0xffffffffffffffff, 0x0, 0x0) splice(r2, 0x0, r0, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e22, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x6, 0x36, 0xffffffbc, 0x1a}, 0x9c) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000480)={0x0, 0x46ae, 0x2, 0x1, 0x100, 0xb6, 0x7f, 0x3, {0x0, @in={{0x2, 0x4e21, @local}}, 0x0, 0x2, 0x3ff, 0x8, 0x7}}, &(0x7f0000000540)=0xb0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) sync() r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) socket(0x10, 0x3, 0x0) write$FUSE_INIT(r6, &(0x7f00000002c0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x4f834c58, 0x3, 0x101, 0x7, 0xa15, 0x0, 0x0, 0x1}}, 0x50) r7 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r7, 0xc1105511, &(0x7f0000000040)={0x1, 0x3, 0xfffe, 0xfff, 'syz1\x00', 0x2}) r8 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x2, 0x400) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r8, 0xc1105518, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0xc1105511, &(0x7f0000000140)=0x400001) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0x9af8dba271b76fd5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f0000000380)=r10, 0x4) 7.44764131s ago: executing program 4 (id=2905): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0xe, 0x7ffffffe}]}) bpf$MAP_CREATE(0xb00000000000014, &(0x7f00000001c0)=ANY=[], 0x48) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r1, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x1, 0x0, r2}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, 0x0, 0x0) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb08004500001c100000008002907800000000e00003000800907800060003fa9874dc39349424f077aab502284b44b8f8fa39203d8403c2c1e6f852ea78bd2436ef2753a6b50fb27a8627dc6fe22e4d4161bbc0631734d92ad0618efb51d95891e07704d34c929f776f129f05140c2d59c3d375218933cfe100bd5dc014965be0e2d41decc98a5aa874696d7074d48b703bcdd9a57d91e5e8894d5f018a75300429d3d835b1b1d4072a206936d938a250a3275ea3c2fe9c30f1027130ed3faf6bff649ed943d4f5563bdb7ccd9b8d687c19c1"], 0x0) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x2, 0x7fff0006}]}) syz_usb_connect(0x0, 0xb6, &(0x7f0000000280)=ANY=[@ANYBLOB="12010003cf7e8f4040201f7200f2010203010902a400018104004f0904870605a97a37020a24010a0b06020102092403050703020496062404029cfe09050b004000800000072501af82a7ce1932dc70000464040507250103"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1555555555555709}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr\x00') getdents(r5, &(0x7f0000000080)=""/60, 0x3c) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000000440), 0x4) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_DEBUGREGS(r9, 0x4080aea2, 0x0) syz_kvm_setup_cpu$x86(r6, r9, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f0000000180)="26f30f2b2a0f870600b80b008ee8bad10466b80000000066ef0f01d4652b13b8fd000f00d0660fdaa45000baf80c66b8203b898566efbafc0c66ed66b828dd00000f23d80f21f86635400000700f23f8", 0x50}], 0xaaaaaaaaaaaab6b, 0x4, &(0x7f0000000400)=[@efer], 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$inet(0x2, 0x3, 0x8) epoll_create1(0x80000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffef}]}) 5.116125198s ago: executing program 3 (id=2909): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2803, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x4) (async) syz_clone3(&(0x7f0000000080)={0xa9a8f33c3025cd14, &(0x7f0000000000), 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = shmat(0x0, &(0x7f0000ff1000/0x3000)=nil, 0x400c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) sync_file_range(0xffffffffffffffff, 0x11, 0x10000, 0x4) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) (async) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x80, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x1ff}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x4}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @local}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x859d}]}, 0x80}, 0x1, 0x0, 0x0, 0x68044}, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) ioctl(0xffffffffffffffff, 0x4048aecb, 0x0) shmdt(r2) (async) syz_ublk_setup_io_uring(0x250b, &(0x7f0000000340)={0x0, 0x5638, 0x400, 0x2, 0xb4}, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600)) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000090000000000000000000000100000308000b400a1d6b9c78000480340001800b000100657874686472000024000280080001400000000c08000340000000020500020007000000080004400000002f3000018008000100636d7000240002801000038009000100910d000000000000080001400000001508000240000000000900010073797a3000000000140000001100010000000000000000000000000a3d203e8105566711be7ca158174c7dcf048621af5c16dd3cd0074889c9730754a47bedbd5c4591273a298ed8c58e318089f3aeb22b18127e5684925a34ec7457f9c32541a87d661b7d468ba745abeaa8641c396e31be54fe1c"], 0x104}, 0x1, 0x0, 0x0, 0x910}, 0x0) (async) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000003c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r5, 0x4068aea3, &(0x7f0000000100)={0xa3, 0x0, &(0x7f0000000040)}) prctl$PR_SET_TIMERSLACK(0x1d, 0x4) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000000)="f00fc7494d36f08266060266b9800000c00f326635000400000f30eade780066b9aa0200000fb266b9ab0900000f30f2b031b3e759dc2c", 0x37}], 0x1, 0x9f6a364b3fac2a47, 0x0, 0x0) times(0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) 4.731683995s ago: executing program 4 (id=2910): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000001300)=[@in6={0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x2c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="38000000100003042bbd7000fedbdf2500000300", @ANYRES32=0x0, @ANYBLOB="211000000000000018001280"], 0x38}, 0x1, 0x0, 0x0, 0x4044005}, 0x4014) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x600) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r4 = dup(r0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14, 0x3b, 0x301, 0x2270bc22, 0x25dfdbfd, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4000000) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff", @ANYRESOCT=r2, @ANYRES32=r3, @ANYRES32=r0, @ANYRES64=r6], 0x1c}}, 0x4800) recvmmsg$unix(r6, &(0x7f0000002380)=[{{0x0, 0x4000000, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0xecc}], 0x1}}], 0x8, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0xad}}, 0x7, 0x1, 0x457, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000100)=0x3, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, 0x0) r10 = dup3(r9, r8, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r11 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x1fd, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r11, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f0000000e00)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r9, 0x40046208, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r7, 0x3b88, &(0x7f0000000080)={0xc}) 4.176909851s ago: executing program 3 (id=2912): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000003380)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0xfffffffe}], 0x2, 0x2, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r1 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) (async, rerun: 32) fstatfs(r0, &(0x7f0000000000)=""/127) (rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$VIDIOC_QBUF(r2, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x3, 0x4, 0x80, 0x0, {0x77359400}, {0x0, 0xb846941ed94b4582, 0x80, 0x0, 0x0, 0xa, "a500e300"}, 0x4, 0x2, {}, 0x20804, 0x0, r2}) (async) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) (async, rerun: 32) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x31]}}) (async, rerun: 32) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 4.039910908s ago: executing program 4 (id=2913): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf8}}, 0xffbfffff}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x24088000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900000000000000000000004200", [0x8, 0xffffffff9673e35d]}}) 4.038098337s ago: executing program 3 (id=2914): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x2}}, [@TCA_RATE={0x6, 0x5, {0xb, 0x5}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240448a4}, 0x20004085) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r5, &(0x7f0000000280)="30b7", 0x2, 0x40000, &(0x7f0000000340)={0x11, 0x6, r4, 0x1, 0x2, 0x6, @local}, 0x14) syz_usb_connect$midi(0x5, 0x3b, &(0x7f0000000680)=ANY=[], 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0xffffffff, 0x40) syz_usb_disconnect(r0) r7 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) r8 = syz_usb_connect(0x2, 0x5a, &(0x7f0000000080)=ANY=[@ANYRESHEX=r6], 0x0) syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io(r8, 0x0, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x50041, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000180)={'syzkaller1\x00', 0x1000}) ioctl$AUTOFS_IOC_SETTIMEOUT(r9, 0x80049367, &(0x7f00000001c0)=0x5) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000080)={'bond_slave_1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}}) write$tun(r10, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) recvmmsg(r9, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) syz_usb_control_io$uac3(r8, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r7, 0x0, 0x0) 3.802853369s ago: executing program 4 (id=2915): ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000140)={@empty, @rand_addr=0x64010102, 0x1e, 0x1a}}) r0 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e"], 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)) r4 = semget$private(0x0, 0x6, 0x0) semtimedop(r4, &(0x7f00000003c0)=[{0x0, 0x1}], 0x1, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) connect$rds(r5, &(0x7f0000000180)={0x2, 0x4e20, @private=0xa010102}, 0x10) socket$inet6(0x10, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.kill\x00', 0x275a, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000240)=ANY=[@ANYRES32=r6, @ANYRESOCT, @ANYRESHEX=r0], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x40010, r1, 0x18388000) r8 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42) ioctl$HIDIOCGFEATURE(r8, 0xc0404807, &(0x7f0000000080)={0x3, "8faa7ab68aefc96940add94dd986d4f32634f14a10c1df59d27a3e745fb11661b2c297044eb0864509a8cbc7c48a18ef12f2fb379d0c1959605e2a52b1586bde"}) semop(r4, &(0x7f0000001240)=[{}], 0x1f4) semop(r4, &(0x7f00000005c0)=[{0x0, 0xffff, 0x1000}], 0x1) r9 = pidfd_getfd(0xffffffffffffffff, r3, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r9, 0x4040aea0, &(0x7f0000000100)=@arm64={0xd2, 0xff, 0x7, '\x00', 0xfffffffffffffff9}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f00000000c0)={0x40000039}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$dri(&(0x7f0000000080), 0xa, 0x54600) r10 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2002, 0x0) write$dsp(r10, &(0x7f0000000040)='F', 0x1) ioctl$SNDCTL_DSP_SPEED(r10, 0xc0045002, &(0x7f0000000040)=0x10004) writev(r10, &(0x7f00000015c0)=[{&(0x7f0000000000)='T', 0x1}], 0x1) 3.392810917s ago: executing program 1 (id=2916): r0 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='*', 0x1, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000540), &(0x7f0000000640)={'fscrypt:', @desc4}, &(0x7f0000000740)={0x0, "d120e097f4d5b2b1a14a86db3b96cf27943196bf60bfb7044b0bdb6f87fc1f64f30282455999ff6ab03bfda317a18146d025828e6bf3ca0215686b9993601865", 0x18}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x33, 0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(0x0, &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33, 0x30, 0x30, 0x30, 0x30, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x33, 0x62, 0x31, 0x39, 0x66, 0x61, 0x63, 0x37, 0x38, 0x62, 0x66, 0x64, 0x34, 0x30, 0x36, 0x39]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x32, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x62, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3b}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000600)={'fscrypt:', @auto=[0x30, 0x30, 0x38, 0x30, 0x30, 0x37, 0x30, 0x63, 0x30, 0x30, 0x39, 0x30, 0x63, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x32, 0x30, 0x38, 0x67, 0x30, 0x30, 0x0, 0x30, 0x30, 0x62, 0x30, 0x30, 0x64, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3c}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x61, 0x30, 0x30, 0x30, 0x32, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x37, 0x65, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x31, 0x33]}, &(0x7f00000006c0)={0x0, "001122334455667788990100ccddeeff00112233445566778899aabbccddeeff004a2233445566778899aabbccddeeff445566778899aabbccddeeff00", 0x40}, 0xc, r1) add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='c', 0x1, r1) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r2, 0x1) 3.22006279s ago: executing program 1 (id=2917): unshare(0x2040680) timer_create(0x7, 0x0, &(0x7f0000001180)=0x0) timer_settime(r0, 0x0, &(0x7f0000001200), 0x0) unshare(0x62000600) 2.374404692s ago: executing program 1 (id=2918): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x8, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0xf72cb191e650caa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$VIDIOC_QBUF(r1, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x6, 0x4, 0x4, 0x0, {}, {0x0, 0xb846941ed94b4582, 0x96, 0x0, 0x0, 0xa, "ee0f09a2"}, 0xffff, 0x2, {}, 0x80000}) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000380)={0x5, &(0x7f00000000c0)=[{0x1f, '\x00', @st={0x4, [{0x0, @uvalue=0x8}, {0x3, @uvalue=0x3}, {0x1, @svalue=0xff}, {0x2, @uvalue=0x8d3c}]}, 0x4}, {0x39, '\x00', @buffer={"55eb476b13d85ef7a019aef895e9baae03d9401b33813c1f29bc0c0ac8383761", 0x20}, 0x5}, {0xf, '\x00', @data=0x81, 0x3}, {0x28}, {0x3c, '\x00', @data=0x8, 0x1}]}) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x80000000700, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000ffffffffffffefff00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x31]}}) 2.11736054s ago: executing program 1 (id=2919): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x40) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(r0, 0x0, 0xff2e) setxattr$system_posix_acl(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000100)={{}, {0x1, 0x1}, [], {0x4, 0x6}, [], {0x10, 0x5}, {0x20, 0x1}}, 0x24, 0x2) rmdir(&(0x7f0000000140)='./bus\x00') r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000180)={0xcc, 0x7, 0x1}) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@setlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4280}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_1\x00'}, @IFLA_MASTER={0x8, 0x3a}, @IFLA_GSO_MAX_SEGS={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004804}, 0x0) 1.894370816s ago: executing program 1 (id=2920): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGSERIAL(r2, 0x541e, 0x0) ioctl$IOMMU_IOAS_IOVA_RANGES(r0, 0x3b84, &(0x7f0000000000)={0x20, r1, 0x2, 0x0, &(0x7f0000000100)=[{}, {}]}) 1.723027315s ago: executing program 1 (id=2921): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x7b5, 0x312, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x1, 0x5, 0x1, {0x22, 0xeb}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xf2}}}}}]}}]}}, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default trusted:syz -92'], 0x2d, 0xfffffffffffffff9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r1) r2 = syz_usb_connect(0x5, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$sierra_net(r2, 0x0, 0x0) syz_usb_control_io$uac3(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000880)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x140}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) syz_usb_control_io$hid(r0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x87) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40008840}, 0x0) r7 = msgget$private(0x0, 0x2) msgsnd(r7, &(0x7f0000000c40)={0x2, "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"}, 0x401, 0x800) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000280)={{{@in=@dev={0xac, 0x14, 0x14, 0x40}, @in=@local, 0x0, 0xfffe, 0x4e20, 0x4ff4, 0x2, 0x0, 0x0, 0x5e}, {0x0, 0x1000000004, 0x1, 0x0, 0x8, 0xffffffffffffff31, 0x18}, {0x1ff, 0xffffffffe, 0x5053e5, 0x20}, 0x2, 0x4080001, 0x1, 0x1, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d4, 0x32}, 0xa, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3502, 0x4, 0x0, 0x2, 0x6, 0x61}}, 0xe8) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r8) keyctl$search(0xa, r4, &(0x7f00000000c0)='rxrpc_s\x00', &(0x7f0000000200)={'syz', 0x2}, r4) 815.592777ms ago: executing program 3 (id=2922): r0 = getpgid(0x0) r1 = syz_open_procfs(r0, &(0x7f0000000100)='net/tcp6\x00') getdents(r1, &(0x7f0000001000)=""/4075, 0xfeb) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000004c0)='secret\x00\xa0\x95=K4\xe8\xad`W\xd1+\x18\x9a\x99\v\xfa,9\x15M\xee\xe7\xb7d\x9f\x1f\xd8\xa2\x89Y\xf0\xa2;b\x96TkG\x7fh\xd3p}\x19_Z\xe7\xeb\x06\xcf\xf3>I\xd4/\xd4\x84\xca\xf7Y\xa1y\'Ujl$J\x1b9\xcf\xben\x93\xa1\xe7c\xed\xfd\xd8p\xea\xbc\x8d\"\xe3\xbaS\xba\xb7Jv\xbas\xd0\xb1\xdf\x17\xc5\x7f|\xc65\v>\xa8n\v\xbe\r\x13\x845\x18\x87\x87q\xe1\x9e{~\x9f\xf7\x1a\xe2L\x1a\xec\xd7\xe2\xd8\x85\x96\x1a\b7\xb7\x99\x1e`\xbaS\xae\xe16\xe6\x1f\xc7\xae\x11H;JK\xb4\xdex\xee\x9e2Z\xe7\x85YQ\\ }\xb3\xae7T\xb9\x83\x11\x06\xff\xac]\x023\xe8.tG\x10\xe5%\x1f\f\xdaD\x94\xe0\x9d\xda\xaf\xe1w\xc8R\x83\x84\xb1\xcc\xedu\f1c\xd4u\x8eH\xbd\x85\xf7\xb8\xcd<`z\xa0P\xeer\xec\xac\xb3\xf08\xe9>\x983d\x88\x19\x1a\x85\xbb\x88\xca0\xdf?k\xb9\xf3k\xb9m\xaf4\x9f\x14H}\x0e\xf3`X\xbf\x99\x98\xfa~g}y\xb1U\xa6\xaf\xf6C\a\xb7\x85):\xf4\xc7P\x81\xae2\xf7d\xfa\xd2}\x92\x83\x9c\xa2c\x1b\x91 +?+\xb7\xae^*b\xb1\x18\x86\x8a\x11\x06B\xa8\xfcmrhzA\xadS\xda\xd5a%Y\xe9\xfb\f\x9f!\xf5\v$\xd8,`At1\xc4\a\x13}\x0e\x88c\xb0\xfc,\xc3\x8a\x171\x13\x1eP84\xd8\x9a\x17\x18\x16\xf7\xe4\x9e\xf0\xf3\x9f2\xc2Q\x89\xd7\xcc\xe8\xac5\x12\xaa\f\x18}#\xb9\xd1/\xed\xdb\xc2R()\x87\x8a6\x05U\xaaS\xd11\x83k\xa6\xb8g\x01Ur{\xa0\x13\xc9O\xbc\xe5:!bv](\xa1\x1b\xe0\xda\xc712h\a\xd3\x85g\x17\v\x87\x8d\x0e\xf7\xf69h\xd1w3\x14Z\xa7\xa1\xf3[\xa5c\x80\xf7\xdc{\xf6\x9f=\x98\\\x88o\x7f\xaf=^\xb9\x9c\xf1\xea\x18\x9d\x1d6*\xe5\x96\x05\xeb>}8\x82\xa8<\xc0\x9b\xe3\xf5\x8fi\xc2\xbat\xf2pK4\xf0q\x11\xb18\x18M\b0\xa4q\xc5Soma:@S\xde\xe0Hu\v\xac\xd9\x9d\x7f\x91\x0eN\r\x80\xd5\xa2\x11\xc8,\x98t\xb7\x01F. \xd52\xdb\xce>\xb6[\xd1#A\x0f\x88\xc2Bn4\x83\xd9\xc8H\a\xc3\xb5\xb1\x7fjQ\xc8\xb6\x91\x1dC\x1b\x85K2H\xa9eh\xc6m', &(0x7f0000000740)='ceph\x00', 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000080), 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f0000000180)={0x79, 0x0, 0x43e}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r7 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r7, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13}) dup2(r6, r7) r8 = syz_io_uring_complete(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r9, 0x4004ae86, &(0x7f0000000040)) ioctl$KVM_INTERRUPT(r9, 0x4004ae86, &(0x7f0000000000)=0xb8) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000001000030d2dbc7000fb00000000fdfff06baea923e67975c936881135dba3ca2ca8544e3137e2468d359e8d272fc6c176ce036584cec0", @ANYRES32=0x0, @ANYBLOB="20000000030200002800128008000100677265001c000280060011004e230000060010004e20000006000f0000000000"], 0x48}, 0x1, 0x0, 0x0, 0x24008011}, 0x16c3035550932880) getpgid(0x0) (async) syz_open_procfs(r0, &(0x7f0000000100)='net/tcp6\x00') (async) getdents(r1, &(0x7f0000001000)=""/4075, 0xfeb) (async) socket$nl_route(0x10, 0x3, 0x0) (async) fsopen(&(0x7f0000000000)='ceph\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000004c0)='secret\x00\xa0\x95=K4\xe8\xad`W\xd1+\x18\x9a\x99\v\xfa,9\x15M\xee\xe7\xb7d\x9f\x1f\xd8\xa2\x89Y\xf0\xa2;b\x96TkG\x7fh\xd3p}\x19_Z\xe7\xeb\x06\xcf\xf3>I\xd4/\xd4\x84\xca\xf7Y\xa1y\'Ujl$J\x1b9\xcf\xben\x93\xa1\xe7c\xed\xfd\xd8p\xea\xbc\x8d\"\xe3\xbaS\xba\xb7Jv\xbas\xd0\xb1\xdf\x17\xc5\x7f|\xc65\v>\xa8n\v\xbe\r\x13\x845\x18\x87\x87q\xe1\x9e{~\x9f\xf7\x1a\xe2L\x1a\xec\xd7\xe2\xd8\x85\x96\x1a\b7\xb7\x99\x1e`\xbaS\xae\xe16\xe6\x1f\xc7\xae\x11H;JK\xb4\xdex\xee\x9e2Z\xe7\x85YQ\\ }\xb3\xae7T\xb9\x83\x11\x06\xff\xac]\x023\xe8.tG\x10\xe5%\x1f\f\xdaD\x94\xe0\x9d\xda\xaf\xe1w\xc8R\x83\x84\xb1\xcc\xedu\f1c\xd4u\x8eH\xbd\x85\xf7\xb8\xcd<`z\xa0P\xeer\xec\xac\xb3\xf08\xe9>\x983d\x88\x19\x1a\x85\xbb\x88\xca0\xdf?k\xb9\xf3k\xb9m\xaf4\x9f\x14H}\x0e\xf3`X\xbf\x99\x98\xfa~g}y\xb1U\xa6\xaf\xf6C\a\xb7\x85):\xf4\xc7P\x81\xae2\xf7d\xfa\xd2}\x92\x83\x9c\xa2c\x1b\x91 +?+\xb7\xae^*b\xb1\x18\x86\x8a\x11\x06B\xa8\xfcmrhzA\xadS\xda\xd5a%Y\xe9\xfb\f\x9f!\xf5\v$\xd8,`At1\xc4\a\x13}\x0e\x88c\xb0\xfc,\xc3\x8a\x171\x13\x1eP84\xd8\x9a\x17\x18\x16\xf7\xe4\x9e\xf0\xf3\x9f2\xc2Q\x89\xd7\xcc\xe8\xac5\x12\xaa\f\x18}#\xb9\xd1/\xed\xdb\xc2R()\x87\x8a6\x05U\xaaS\xd11\x83k\xa6\xb8g\x01Ur{\xa0\x13\xc9O\xbc\xe5:!bv](\xa1\x1b\xe0\xda\xc712h\a\xd3\x85g\x17\v\x87\x8d\x0e\xf7\xf69h\xd1w3\x14Z\xa7\xa1\xf3[\xa5c\x80\xf7\xdc{\xf6\x9f=\x98\\\x88o\x7f\xaf=^\xb9\x9c\xf1\xea\x18\x9d\x1d6*\xe5\x96\x05\xeb>}8\x82\xa8<\xc0\x9b\xe3\xf5\x8fi\xc2\xbat\xf2pK4\xf0q\x11\xb18\x18M\b0\xa4q\xc5Soma:@S\xde\xe0Hu\v\xac\xd9\x9d\x7f\x91\x0eN\r\x80\xd5\xa2\x11\xc8,\x98t\xb7\x01F. \xd52\xdb\xce>\xb6[\xd1#A\x0f\x88\xc2Bn4\x83\xd9\xc8H\a\xc3\xb5\xb1\x7fjQ\xc8\xb6\x91\x1dC\x1b\x85K2H\xa9eh\xc6m', &(0x7f0000000740)='ceph\x00', 0x0) (async) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000080), 0x4) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f0000000180)={0x79, 0x0, 0x43e}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) (async) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r7, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13}) (async) dup2(r6, r7) (async) syz_io_uring_complete(0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) (async) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) ioctl$KVM_INTERRUPT(r9, 0x4004ae86, &(0x7f0000000040)) (async) ioctl$KVM_INTERRUPT(r9, 0x4004ae86, &(0x7f0000000000)=0xb8) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000001000030d2dbc7000fb00000000fdfff06baea923e67975c936881135dba3ca2ca8544e3137e2468d359e8d272fc6c176ce036584cec0", @ANYRES32=0x0, @ANYBLOB="20000000030200002800128008000100677265001c000280060011004e230000060010004e20000006000f0000000000"], 0x48}, 0x1, 0x0, 0x0, 0x24008011}, 0x16c3035550932880) (async) 548.560601ms ago: executing program 4 (id=2923): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000440)}, 0x20) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000500)={&(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x80800, 0x0, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={0xffffffffffffffff, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000900)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000980)=[0x0, 0x0, 0x0], 0x0, 0xd0, &(0x7f00000009c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000a00), &(0x7f0000000a40), 0x8, 0x24, 0x8, 0x8, &(0x7f0000000a80)}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000100), 0x0}, 0x20) set_tid_address(&(0x7f0000000680)) r6 = socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) landlock_restrict_self(r5, 0x2) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500"], 0x3c}}, 0x0) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380), 0x8100, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x18, 0x7, 0xffffffff, 0x81, 0x601, r4, 0x2, '\x00', r3, r5, 0x0, 0x2}, 0x50) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000085000000a0000000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d40)=@bpf_ext={0x1c, 0x0, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x847, 0x79, &(0x7f0000000300)=""/121, 0x41100, 0x49, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f00000003c0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x5, 0x6, 0x81, 0x101}, 0x10, 0x2702, r5, 0x0, &(0x7f0000000d00)=[r4, r8, r9], 0x0, 0x10, 0x7}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x14, 0x0, 0x800, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x41004}, 0x1) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000400)={r1, r10}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="0c0001800800010022a004"], 0x24}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 382.073789ms ago: executing program 3 (id=2924): r0 = io_uring_setup(0x2dd6, &(0x7f0000000080)={0x0, 0x417a, 0x2, 0x2, 0x148}) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000000)=@file={0x1}, 0x6e) connect$unix(r2, &(0x7f0000000080)=@file={0x1}, 0x6e) close_range(r0, 0xffffffffffffffff, 0x0) 71.034669ms ago: executing program 4 (id=2925): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)={0xffffffffffffffff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f00000003c0)=0x6, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}, @in6={0xa, 0x0, 0xffffffff, @private0}], 0x38) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f00000002c0)=[@in={0x2, 0x4e23, @multicast1}], 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x1000, 0x1000, &(0x7f0000001000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl(r2, 0x4038ae7a, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00@\x00'/56) ioctl(r0, 0x4048aec9, &(0x7f0000000300)="0100000000000000010000000000000000000000000000800000000000000000001700"/72) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="03000809fffffff500"/20, @ANYRES32, @ANYRES8=r2, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000050000000200"/28], 0x50) r6 = socket$inet6(0xa, 0x1, 0x8010000000000084) syz_emit_ethernet(0x7e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaac6eb8947e4e4080045000070000000000001907864010100ac1414aa0bba90780300000045000000000000000089000000000000e0000001862a00000003020d5e000000ff00000000000000054eb8a600129606053d00b61af93a93831300ac1414007f000001e0000001e0000002000000"], 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000300)={0x0, 0x1, 0x4}, &(0x7f0000000340)=0x8) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000380)=r5, 0x4) ioctl(r4, 0x4048aecb, &(0x7f0000000400)='\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'/72) ioctl(r2, 0x400caed0, &(0x7f0000000500)="0100000000000000ffffffff") ioctl$KVM_RUN(r4, 0xae80, 0x0) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000300)={0x8, "030000000000000023eeffc603000100", 0xffffffffffffffff}) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000040)={0x10000001}) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r10, 0x29, 0x1000000000021, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r10, 0x29, 0x46, 0x0, 0x0) sendmsg$inet6(r10, &(0x7f00000000c0)={&(0x7f0000000180)={0xa, 0x4a21, 0x4080000, @dev={0xfe, 0x80, '\x00', 0x1e}}, 0x1c, 0x0}, 0xd158e5cd3365400d) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x8027, &(0x7f0000000000)={0x28, 0x87, 0x40}) 0s ago: executing program 3 (id=2926): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000016c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001680)={&(0x7f0000001700)=ANY=[@ANYBLOB="080f0000", @ANYRES16=0x0, @ANYBLOB="040028bd7000fddbdf253900000008000300", @ANYRES32=r1, @ANYBLOB="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"], 0xf08}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = fsopen(&(0x7f0000000280)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) fchdir(r4) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x183080, 0x100) getdents64(r5, &(0x7f00000000c0)=""/55, 0x37) lseek(r5, 0x3, 0x0) fcntl$lock(r2, 0x24, &(0x7f0000000080)={0x0, 0x0, 0x7ffffffffffffffb, 0x10000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0xa9525000) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) nanosleep(&(0x7f00000000c0), &(0x7f0000000100)) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) socket$nl_audit(0x10, 0x3, 0x9) r7 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x80000) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000080)=ANY=[], 0x32600) mknod$loop(&(0x7f00000006c0)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) mount$fuseblk(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, 0x10c091, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r7, 0xc2604110, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040), 0x0) execveat(r0, &(0x7f0000000140)='./cgroup/cgroup.procs\x00', &(0x7f0000000400)={[&(0x7f0000000180)='}/-!*\xf2}-\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000240)=':.\x00', &(0x7f00000003c0)='^\xcb`f\x00', &(0x7f0000000340)='+/\x00', &(0x7f0000000380)='\',:\x00', &(0x7f0000000780)='\x00']}, &(0x7f0000000640)={[&(0x7f0000000440)='\'/[\\]#\x00', &(0x7f0000000480)=',[[+\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000500)='%+)}&\x00', &(0x7f0000000540)='*,%\x00', &(0x7f0000000580)=')-+($\xa0.]\x00', &(0x7f00000005c0)='-\x00', &(0x7f0000000600)='\x00']}, 0x1000) kernel console output (not intermixed with test programs): 08][T14646] prepare_alloc_pages+0x223/0x600 [ 578.532247][T14646] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 578.532287][T14646] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 578.532325][T14646] ? __pfx_policy_nodemask+0x10/0x10 [ 578.532347][T14646] ? __folio_batch_add_and_move+0x11a/0xc50 [ 578.532375][T14646] ? lock_acquire+0x106/0x350 [ 578.532415][T14646] alloc_pages_mpol+0x21e/0x390 [ 578.532445][T14646] folio_alloc_mpol_noprof+0x39/0x160 [ 578.532471][T14646] vma_alloc_folio_noprof+0xe1/0x1e0 [ 578.532499][T14646] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 578.532544][T14646] do_wp_page+0x117d/0x4b80 [ 578.532589][T14646] ? __pfx_do_wp_page+0x10/0x10 [ 578.532612][T14646] ? do_raw_spin_lock+0x12b/0x2f0 [ 578.532642][T14646] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 578.532681][T14646] handle_mm_fault+0x1576/0x3720 [ 578.532720][T14646] ? handle_mm_fault+0xf4/0x3720 [ 578.532757][T14646] ? __pfx_handle_mm_fault+0x10/0x10 [ 578.532798][T14646] ? __lock_acquire+0x683/0x2cf0 [ 578.532835][T14646] ? lock_mm_and_find_vma+0xa7/0x340 [ 578.532868][T14646] do_user_addr_fault+0x746/0x1340 [ 578.532919][T14646] exc_page_fault+0x6a/0xc0 [ 578.532953][T14646] asm_exc_page_fault+0x26/0x30 [ 578.532976][T14646] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 578.533002][T14646] Code: 67 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 578.533022][T14646] RSP: 0018:ffffc9001b197618 EFLAGS: 00050206 [ 578.533043][T14646] RAX: ffffffff84d94301 RBX: ffff8880315ba000 RCX: 00000000000006a0 [ 578.533060][T14646] RDX: 0000000000000000 RSI: ffff8880315ba960 RDI: 0000200000034000 [ 578.533076][T14646] RBP: ffffc9001b197790 R08: ffff8880315bafff R09: 1ffff110062b75ff [ 578.533093][T14646] R10: dffffc0000000000 R11: ffffed10062b7600 R12: 1ffff92003632fc3 [ 578.533110][T14646] R13: 00002000000336a0 R14: ffffc9001b197e28 R15: 0000000000001000 [ 578.533136][T14646] ? _copy_to_iter+0x1d1/0x1810 [ 578.533168][T14646] _copy_to_iter+0x255/0x1810 [ 578.533195][T14646] ? __pfx___mutex_trylock_common+0x10/0x10 [ 578.533229][T14646] ? do_raw_spin_lock+0x12b/0x2f0 [ 578.533256][T14646] ? __pfx__copy_to_iter+0x10/0x10 [ 578.533291][T14646] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 578.533325][T14646] __skb_datagram_iter+0x419/0x980 [ 578.533358][T14646] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 578.533397][T14646] skb_copy_datagram_iter+0xb5/0x240 [ 578.533431][T14646] __unix_dgram_recvmsg+0x664/0xd70 [ 578.533466][T14646] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 578.533496][T14646] ? ktime_get+0x45/0x220 [ 578.533538][T14646] ? __lock_acquire+0x683/0x2cf0 [ 578.533575][T14646] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 578.533598][T14646] ? unix_dgram_recvmsg+0xae/0xd0 [ 578.533627][T14646] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 578.533658][T14646] sock_recvmsg+0x196/0x1e0 [ 578.533693][T14646] ____sys_recvmsg+0x1e6/0x4a0 [ 578.533728][T14646] ? __pfx_____sys_recvmsg+0x10/0x10 [ 578.533770][T14646] ? import_iovec+0x73/0xa0 [ 578.533800][T14646] ___sys_recvmsg+0x213/0x5a0 [ 578.533832][T14646] ? __pfx____sys_recvmsg+0x10/0x10 [ 578.533864][T14646] ? __fget_files+0x2a/0x420 [ 578.533907][T14646] ? __fget_files+0x3a2/0x420 [ 578.533943][T14646] __x64_sys_recvmsg+0x1ae/0x290 [ 578.533974][T14646] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 578.534026][T14646] do_syscall_64+0x166/0x520 [ 578.534057][T14646] ? trace_irq_disable+0x3b/0x140 [ 578.534089][T14646] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.534113][T14646] ? clear_bhb_loop+0x70/0xc0 [ 578.534143][T14646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.534165][T14646] RIP: 0033:0x7f04b999e0d9 [ 578.534186][T14646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 578.534205][T14646] RSP: 002b:00007f04ba8cf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 578.534227][T14646] RAX: ffffffffffffffda RBX: 00007f04b9c25fa0 RCX: 00007f04b999e0d9 [ 578.534244][T14646] RDX: 0000000000000012 RSI: 00002000000004c0 RDI: 0000000000000009 [ 578.534259][T14646] RBP: 00007f04ba8cf090 R08: 0000000000000000 R09: 0000000000000000 [ 578.534273][T14646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 578.534288][T14646] R13: 00007f04b9c26038 R14: 00007f04b9c25fa0 R15: 00007f04b9d4fa48 [ 578.534324][T14646] [ 578.751680][ T5617] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 579.079825][ T24] usb 1-1: device firmware changed [ 579.098772][ T24] usb 1-1: USB disconnect, device number 122 [ 579.353056][ T5617] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.378693][ T5617] usb 3-1: config 0 descriptor?? [ 579.564246][T14653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.608380][T14652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.618834][T14653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 579.667110][T14653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.676784][T14652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 579.717599][T14653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 579.737108][T14652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.766015][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.775449][T14653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.786382][T14652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 579.808765][T14658] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.822678][T14658] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.824264][T14653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 579.841785][T14658] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.872256][T14658] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.883043][T14658] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.986053][ T9] usb 2-1: new full-speed USB device number 86 using dummy_hcd [ 580.002444][T14661] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2599'. [ 580.016681][T14661] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 580.031843][T14661] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 580.147518][ T9] usb 2-1: New USB device found, idVendor=2b73, idProduct=003c, bcdDevice= 0.40 [ 580.159854][ T9] usb 2-1: config 1 has an invalid interface descriptor of length 8, skipping [ 580.169889][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 580.180132][ T9] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 580.191285][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.199620][ T9] usb 2-1: Product: syz [ 580.203890][ T9] usb 2-1: Manufacturer: syz [ 580.208612][ T9] usb 2-1: SerialNumber: syz [ 580.327863][ T3334] net_ratelimit: 7 callbacks suppressed [ 580.327893][ T3334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.361372][ T5617] ath6kl: Failed to submit usb control message: -71 [ 580.374746][ T5617] ath6kl: unable to send the bmi data to the device: -71 [ 580.389755][ T5617] ath6kl: Unable to send get target info: -71 [ 580.406540][ T5617] ath6kl: Failed to init ath6kl core: -71 [ 580.425062][ T5617] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 580.467880][ T5617] usb 3-1: USB disconnect, device number 22 [ 580.805670][ T5617] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 580.833517][T14668] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2602'. [ 580.954075][T14677] gretap0: entered promiscuous mode [ 580.965905][ T1161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.973024][T14677] macsec2: entered allmulticast mode [ 580.980363][T14678] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2605'. [ 580.993482][T14677] gretap0: entered allmulticast mode [ 581.006749][ T5617] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 581.031302][T14677] gretap0: left allmulticast mode [ 581.038059][ T5348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.045669][T14677] gretap0: left promiscuous mode [ 581.065433][ T5617] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.073732][ T5617] usb 3-1: Product: syz [ 581.081132][ T5617] usb 3-1: Manufacturer: syz [ 581.097822][ T5617] usb 3-1: SerialNumber: syz [ 581.117765][ T5617] usb 3-1: config 0 descriptor?? [ 581.136436][ T5617] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 581.331388][T14685] FAULT_INJECTION: forcing a failure. [ 581.331388][T14685] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 581.378086][T14685] CPU: 1 UID: 0 PID: 14685 Comm: syz.0.2607 Tainted: G L syzkaller #0 PREEMPT(full) [ 581.378122][T14685] Tainted: [L]=SOFTLOCKUP [ 581.378131][T14685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 581.378144][T14685] Call Trace: [ 581.378154][T14685] [ 581.378164][T14685] dump_stack_lvl+0xe8/0x150 [ 581.378203][T14685] should_fail_ex+0x410/0x560 [ 581.378233][T14685] _copy_to_user+0x31/0xb0 [ 581.378264][T14685] simple_read_from_buffer+0xe1/0x170 [ 581.378294][T14685] proc_fail_nth_read+0x1bb/0x230 [ 581.378360][T14685] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 581.378393][T14685] ? rw_verify_area+0x24a/0x4c0 [ 581.378418][T14685] ? __fget_files+0x2a/0x420 [ 581.378442][T14685] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 581.378471][T14685] vfs_read+0x213/0xa80 [ 581.378502][T14685] ? __pfx___mutex_lock+0x10/0x10 [ 581.378605][T14685] ? __pfx_vfs_read+0x10/0x10 [ 581.378634][T14685] ? __fget_files+0x2a/0x420 [ 581.378662][T14685] ? __fget_files+0x3a2/0x420 [ 581.378686][T14685] ? __fget_files+0x2a/0x420 [ 581.378718][T14685] ksys_read+0x150/0x270 [ 581.378747][T14685] ? __pfx_ksys_read+0x10/0x10 [ 581.378787][T14685] do_syscall_64+0x166/0x520 [ 581.378817][T14685] ? trace_irq_disable+0x3b/0x140 [ 581.378857][T14685] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.378886][T14685] ? clear_bhb_loop+0x70/0xc0 [ 581.378914][T14685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.378937][T14685] RIP: 0033:0x7fd06bb5e90e [ 581.378958][T14685] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 581.378976][T14685] RSP: 002b:00007fd069df5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 581.379000][T14685] RAX: ffffffffffffffda RBX: 00007fd069df66c0 RCX: 00007fd06bb5e90e [ 581.379016][T14685] RDX: 000000000000000f RSI: 00007fd069df60a0 RDI: 000000000000000b [ 581.379034][T14685] RBP: 00007fd069df6090 R08: 0000000000000000 R09: 0000000000000000 [ 581.379049][T14685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 581.379064][T14685] R13: 00007fd06be26038 R14: 00007fd06be25fa0 R15: 00007fd06bf4fa48 [ 581.379097][T14685] [ 581.722414][ T5738] usb 3-1: USB disconnect, device number 23 [ 581.925622][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.695555][ T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 582.787367][ T9] usb 2-1: USB disconnect, device number 86 [ 582.821813][ T5617] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.866849][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 582.892538][ T10] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 582.941193][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 1024 [ 582.985486][ T10] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024 [ 583.020763][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.046030][ T10] usb 4-1: Product: 宽ᡨ쪜ྍ풞嗞Ъ썎뮳℃檯㊐Ϫꀪ㨽᚞튣㱀듌런戜޲ᄏﶛ舉셭皣ᰢꆅ朘哲瀨､䵳깣䀇撡卮듃骥荆ꤹ㺉欽辶⊂⛳ᆂ㓾䪇轘鞮毡븂㣐湴Ꮡ죞逵汝맾ꍟₐ겮뫭ᢗꂽ䦺쭝拁綅Ⅾ㻱棡湫︫씪붻኎ಒ㝩텦蛿샖Ⱗ旒ꏎ [ 583.118868][T14742] xt_hl: Unknown Hop Limit match mode: 206 [ 583.126058][ T10] usb 4-1: Manufacturer: 全ႄ﯄쇽赮硆㦳 [ 583.136643][T14742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 583.150736][T14742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 583.156633][ T10] usb 4-1: SerialNumber: ␉ [ 583.178318][T14732] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 583.203658][T14750] binder: 14743:14750 ioctl c0306201 200000000080 returned -14 [ 583.260250][T14750] binder: 14743:14750 ioctl c0306201 2000000003c0 returned -14 [ 583.365554][ T24] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 583.401615][ T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 583.415350][ T10] usb 4-1: MIDIStreaming interface descriptor not found [ 583.503548][ T10] usb 4-1: USB disconnect, device number 13 [ 583.516220][ T24] usb 3-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.00 [ 583.529602][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 583.544920][ T24] usb 3-1: config 1 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 583.561449][ T24] usb 3-1: config 1 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 583.567414][ T9] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 583.577678][ T24] usb 3-1: config 1 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 583.592327][ T24] usb 3-1: config 1 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 583.611004][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.661689][ T24] usb 3-1: invalid MIDI out EP 0 [ 583.684737][ T24] snd-ua101 3-1:1.0: probe with driver snd-ua101 failed with error -22 [ 583.766093][ T9] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 583.805832][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 583.818653][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 583.830154][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 583.862353][ T24] usb 3-1: USB disconnect, device number 24 [ 583.888927][T14753] FAULT_INJECTION: forcing a failure. [ 583.888927][T14753] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 583.924024][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.945608][ T9] usb 2-1: Product: syz [ 583.951759][ T9] usb 2-1: Manufacturer: syz [ 583.960858][T14753] CPU: 0 UID: 0 PID: 14753 Comm: syz.0.2623 Tainted: G L syzkaller #0 PREEMPT(full) [ 583.960893][T14753] Tainted: [L]=SOFTLOCKUP [ 583.960903][T14753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 583.960917][T14753] Call Trace: [ 583.960927][T14753] [ 583.960937][T14753] dump_stack_lvl+0xe8/0x150 [ 583.960977][T14753] should_fail_ex+0x410/0x560 [ 583.961011][T14753] _copy_from_user+0x2d/0xb0 [ 583.961042][T14753] __ia32_sys_rt_sigreturn+0x362/0x8c0 [ 583.961120][T14753] ? lock_acquire+0x106/0x350 [ 583.961171][T14753] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 583.961247][T14753] do_syscall_64+0x166/0x520 [ 583.961282][T14753] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.961306][T14753] ? clear_bhb_loop+0x70/0xc0 [ 583.961335][T14753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.961358][T14753] RIP: 0033:0x7fd06bb3f459 [ 583.961378][T14753] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 583.961397][T14753] RSP: 002b:00007fd069df5a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 583.961421][T14753] RAX: ffffffffffffffda RBX: 00007fd06be25fa0 RCX: 00007fd06bb3f459 [ 583.961438][T14753] RDX: 00007fd069df5a80 RSI: 00007fd069df5bb0 RDI: 0000000000000021 [ 583.961454][T14753] RBP: 00007fd069df6090 R08: 0000000000000000 R09: 0000000000000000 [ 583.961469][T14753] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 583.961482][T14753] R13: 00007fd06be26038 R14: 00007fd06be25fa0 R15: 00007fd06bf4fa48 [ 583.961516][T14753] [ 583.965149][ T9] usb 2-1: SerialNumber: syz [ 584.161376][ T9] usb 2-1: config 0 descriptor?? [ 584.194059][ T9] usb 2-1: ucan: probing device on interface #0 [ 584.200542][ T9] usb 2-1: ucan: invalid EP count (0) [ 584.206229][ T9] usb 2-1: ucan: probe failed; try to update the device firmware [ 584.229903][T14757] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2624'. [ 584.246394][T14757] netlink: 'syz.3.2624': attribute type 10 has an invalid length. [ 584.448855][T14766] binder: 14764:14766 unknown command 0 [ 584.454576][T14766] binder: 14764:14766 ioctl c0306201 2000000001c0 returned -22 [ 585.069090][ T10] usb 2-1: USB disconnect, device number 87 [ 585.245080][T14790] sctp: [Deprecated]: syz.1.2634 (pid 14790) Use of struct sctp_assoc_value in delayed_ack socket option. [ 585.245080][T14790] Use struct sctp_sack_info instead [ 585.417445][T14797] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2635'. [ 585.433353][T14797] netlink: 'syz.1.2635': attribute type 10 has an invalid length. [ 585.555395][ T24] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 585.716748][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 585.855606][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.885566][T14811] nvme_tcp: malformed address passed: .27.0.0.1:4420 [ 585.951720][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 585.982122][ T24] usb 3-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.40 [ 585.998621][ T24] usb 3-1: too many configurations: 80, using maximum allowed: 8 [ 586.018199][ T24] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 586.035373][ T24] usb 3-1: can't read configurations, error -71 [ 586.085918][ T8289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.168440][T14826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 586.182226][T14826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 586.191828][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 586.259047][T14827] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 586.356109][ T9] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 586.372768][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 586.396069][ T9] usb 4-1: config 0 has no interfaces? [ 586.418741][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.445333][ T9] usb 4-1: Product: syz [ 586.449862][ T9] usb 4-1: Manufacturer: syz [ 586.460078][ T9] usb 4-1: SerialNumber: syz [ 586.481516][ T9] usb 4-1: config 0 descriptor?? [ 586.515627][ T5605] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 586.707248][ T5605] usb 1-1: Using ep0 maxpacket: 16 [ 586.719061][ T5605] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 586.739384][ T3365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.750220][ T5605] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 586.758690][ T5605] usb 1-1: config 0 has no interface number 0 [ 586.777877][ T5605] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.792066][ T5348] usb 4-1: USB disconnect, device number 14 [ 586.812778][ T5605] usb 1-1: config 0 descriptor?? [ 586.905760][ T3365] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvmexpress.discovery! [ 586.928352][T14832] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvmexpress.discovery" [ 586.960451][T14840] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2646'. [ 586.975821][T14840] netlink: 'syz.4.2646': attribute type 10 has an invalid length. [ 587.085393][ T24] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 587.095276][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 587.127012][ T9] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 587.256992][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 587.272368][ T24] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 587.306878][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 587.327931][ T24] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 587.366466][ T24] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 587.395120][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.422676][ T24] usb 3-1: Product: syz [ 587.431841][ T24] usb 3-1: Manufacturer: syz [ 587.445980][ T24] usb 3-1: SerialNumber: syz [ 587.577945][ T5605] uclogic 0003:28BD:0071.002D: pen parameters not found [ 587.590748][ T5605] uclogic 0003:28BD:0071.002D: interface is invalid, ignoring [ 587.757746][T14832] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 587.791801][T14848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 587.839953][T14848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 587.891830][ T24] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 587.940454][ T24] usb 3-1: clock source 0 is not valid, cannot use [ 587.969469][ T24] usb 3-1: 1:1: cannot get freq (v2/v3): err -71 [ 587.990236][ T24] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 588.078693][ T5617] usb 1-1: USB disconnect, device number 124 [ 588.204135][ T24] usb 3-1: USB disconnect, device number 26 [ 588.347252][ T7742] udevd[7742]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 588.896142][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.066221][T14873] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2657'. [ 589.107937][T14873] netlink: 'syz.4.2657': attribute type 10 has an invalid length. [ 589.339948][T14878] fuse: Bad value for 'fd' [ 589.360276][T14876] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 591.208357][ T3334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.232908][T14905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 591.256613][T14905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 591.286616][T14905] fuse: Unknown parameter 'mounts' [ 591.926036][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.240542][T14920] fuse: Invalid rootmode [ 592.486342][ T3365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.581273][T14923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 592.616268][T14923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 592.913473][T14932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 592.990441][T14932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 593.026231][T14932] 8021q: VLANs not supported on vcan0 [ 593.694819][T14952] nvme_fabrics: unknown parameter or missing value '#! 1R?&n%~[6=p͊yz\Uj@5NfWrs)q' in ctrl creation request [ 593.766013][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 593.831242][T14956] fuse: Invalid rootmode [ 594.967118][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.296144][T14971] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 595.846593][T14987] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2690'. [ 595.887033][T14987] netlink: 'syz.3.2690': attribute type 10 has an invalid length. [ 596.124094][T14992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 596.148744][T14992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 596.326741][ T1161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.390328][T14998] fuse: Invalid rootmode [ 596.906382][ T24] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 597.076338][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 597.092820][ T24] usb 3-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 597.120734][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 597.154496][ T24] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 224, changing to 7 [ 597.188556][ T24] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 597.219278][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.246254][ T24] usb 3-1: Product: syz [ 597.257564][ T24] usb 3-1: Manufacturer: syz [ 597.270848][ T24] usb 3-1: SerialNumber: syz [ 597.605409][ T10] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 597.795625][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 597.884625][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 597.910902][ T10] usb 1-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 597.962598][ T10] usb 1-1: Product: syz [ 597.968143][ T10] usb 1-1: Manufacturer: syz [ 597.972946][ T10] usb 1-1: SerialNumber: syz [ 597.985777][ T10] usb 1-1: config 0 descriptor?? [ 598.000071][ T10] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 598.008035][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.211645][T15017] CIFS: iocharset name too long [ 598.246732][ T3334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.327542][T15021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 598.343494][T15021] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 598.439918][ T10] gspca_zc3xx: reg_w_i err -71 [ 598.461616][ T10] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 598.483066][ T10] usb 1-1: USB disconnect, device number 125 [ 598.545440][ T5617] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 598.695448][ T5617] usb 4-1: device descriptor read/64, error -71 [ 598.861885][T15012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 598.887911][T15012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 598.896392][ T10] usb 1-1: new full-speed USB device number 126 using dummy_hcd [ 598.945336][ T5617] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 598.977007][T15002] openvswitch: netlink: Tunnel attr 260 out of range max 16 [ 599.008126][ T24] snd-ua101 3-1:1.1: invalid format type [ 599.020938][ T24] snd-ua101 3-1:1.0: invalid num_altsetting [ 599.044509][ T24] usb 3-1: USB disconnect, device number 27 [ 599.056408][ T10] usb 1-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 599.075387][ T5605] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 599.091850][ T5617] usb 4-1: device descriptor read/64, error -71 [ 599.118265][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 599.135405][ T10] usb 1-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 599.163223][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.176935][ T10] usb 1-1: Product: syz [ 599.181240][ T10] usb 1-1: Manufacturer: syz [ 599.186385][ T10] usb 1-1: SerialNumber: syz [ 599.235842][ T5617] usb usb4-port1: attempt power cycle [ 599.240813][ T5605] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 599.273717][ T5605] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 599.285491][ T5605] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 599.294723][ T5605] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 599.306088][ T5605] usb 2-1: config 220 has no interface number 2 [ 599.312550][ T5605] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 599.326055][ T5605] usb 2-1: config 220 interface 0 has no altsetting 0 [ 599.332901][ T5605] usb 2-1: config 220 interface 76 has no altsetting 0 [ 599.340437][ T5605] usb 2-1: config 220 interface 1 has no altsetting 0 [ 599.350981][ T5605] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.359675][ T5605] usb 2-1: Product: syz [ 599.364167][ T5605] usb 2-1: Manufacturer: syz [ 599.378989][T15033] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2702'. [ 599.388296][ T5605] usb 2-1: SerialNumber: syz [ 599.406883][T15033] netlink: 'syz.4.2702': attribute type 10 has an invalid length. [ 599.585988][ T5617] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 599.626179][ T5617] usb 4-1: device descriptor read/8, error -71 [ 599.644816][ T5605] usb 2-1: selecting invalid altsetting 0 [ 599.651121][ C0] usb 1-1: received EP1 urb->status = -2 [ 599.665039][ T10] usb 1-1: unable to init card! (ret=-110) [ 599.684770][ T5605] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 599.692892][ T5605] uvcvideo 2-1:220.0: No valid video chain found. [ 599.700293][ T10] snd-usb-caiaq 1-1:1.0: probe with driver snd-usb-caiaq failed with error -110 [ 599.720235][ T5605] usb 2-1: selecting invalid altsetting 0 [ 599.727595][ T5605] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 599.742405][ T5605] usb 2-1: USB disconnect, device number 89 [ 599.875355][ T5617] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 599.896029][ T5617] usb 4-1: device descriptor read/8, error -71 [ 600.015897][ T5617] usb usb4-port1: unable to enumerate USB device [ 600.137884][ T5605] usb 1-1: USB disconnect, device number 126 [ 600.220307][T15043] fuse: Bad value for 'rootmode' [ 600.419054][T15048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 600.428275][T15048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 600.705409][ T5617] usb 2-1: new full-speed USB device number 90 using dummy_hcd [ 600.848220][T15054] loop4: detected capacity change from 0 to 7 [ 600.859200][T15054] loop4: [ 600.862337][T15054] loop4: partition table partially beyond EOD, truncated [ 600.871191][ T5617] usb 2-1: not running at top speed; connect to a high speed hub [ 600.888850][ T5617] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 600.917178][ T5617] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 600.943209][ T5617] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.971540][ T5617] usb 2-1: Product: syz [ 600.988767][ T5617] usb 2-1: Manufacturer: syz [ 600.998940][ T5617] usb 2-1: SerialNumber: syz [ 601.030114][ T5617] keyspan 2-1:1.0: Keyspan 4 port adapter converter detected [ 601.045636][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.062977][ T5617] keyspan 2-1:1.0: unsupported endpoint type 0 [ 601.115095][ T5617] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 601.138900][ T5617] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 601.154189][ T5617] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 601.173036][ T5617] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 601.230384][T15058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 601.243333][T15058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 601.446267][ T8289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.463415][T15064] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2711'. [ 601.499545][T15068] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2712'. [ 601.519898][T15066] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2713'. [ 601.555466][T15066] netlink: 'syz.3.2713': attribute type 10 has an invalid length. [ 601.654950][T15074] fuse: Unknown parameter '000000000000000000000070x0000000000000008' [ 601.663787][T15075] fuse: Bad value for 'rootmode' [ 602.373085][ T24] usb 2-1: USB disconnect, device number 90 [ 602.415419][ T24] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 602.452407][ T24] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 602.509843][ T24] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 602.563862][ T24] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 602.606671][ T24] keyspan 2-1:1.0: device disconnected [ 602.830584][T15092] loop4: detected capacity change from 0 to 7 [ 602.873263][T15092] loop4: [ 602.880473][T15092] loop4: partition table partially beyond EOD, truncated [ 603.150807][T15102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 603.219203][T15102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 603.321694][T15102] IPVS: set_ctl: invalid protocol: 2 100.1.1.2:20002 [ 603.711142][T15104] FAULT_INJECTION: forcing a failure. [ 603.711142][T15104] name failslab, interval 1, probability 0, space 0, times 0 [ 603.739975][T15104] CPU: 0 UID: 0 PID: 15104 Comm: syz.2.2723 Tainted: G L syzkaller #0 PREEMPT(full) [ 603.740011][T15104] Tainted: [L]=SOFTLOCKUP [ 603.740019][T15104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 603.740033][T15104] Call Trace: [ 603.740042][T15104] [ 603.740052][T15104] dump_stack_lvl+0xe8/0x150 [ 603.740101][T15104] should_fail_ex+0x410/0x560 [ 603.740133][T15104] should_failslab+0xa8/0x100 [ 603.740158][T15104] __kmalloc_noprof+0xfe/0x720 [ 603.740187][T15104] ? rcu_is_watching+0x16/0xb0 [ 603.740241][T15104] ? tomoyo_realpath_from_path+0xef/0x640 [ 603.740359][T15104] ? tomoyo_realpath_from_path+0xef/0x640 [ 603.740396][T15104] tomoyo_realpath_from_path+0xef/0x640 [ 603.740438][T15104] ? tomoyo_path_number_perm+0x219/0x5f0 [ 603.740473][T15104] tomoyo_path_number_perm+0x246/0x5f0 [ 603.740502][T15104] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 603.740526][T15104] ? __lock_acquire+0x683/0x2cf0 [ 603.740576][T15104] ? chmod_common+0x186/0x470 [ 603.740624][T15104] ? chmod_common+0x186/0x470 [ 603.740654][T15104] ? down_write_killable+0x17e/0x240 [ 603.740697][T15104] ? __pfx_down_write_killable+0x10/0x10 [ 603.740737][T15104] security_path_chmod+0x132/0x330 [ 603.740821][T15104] chmod_common+0x1a7/0x470 [ 603.740855][T15104] ? __pfx_chmod_common+0x10/0x10 [ 603.740892][T15104] ? strncpy_from_user+0x150/0x2c0 [ 603.740917][T15104] ? do_getname+0x151/0x250 [ 603.740942][T15104] do_fchmodat+0x12d/0x230 [ 603.740967][T15104] ? __pfx_do_fchmodat+0x10/0x10 [ 603.740989][T15104] ? __pfx_ksys_write+0x10/0x10 [ 603.741023][T15104] __x64_sys_fchmodat+0x7d/0x90 [ 603.741055][T15104] do_syscall_64+0x166/0x520 [ 603.741083][T15104] ? trace_irq_disable+0x3b/0x140 [ 603.741115][T15104] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.741137][T15104] ? clear_bhb_loop+0x70/0xc0 [ 603.741163][T15104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.741185][T15104] RIP: 0033:0x7f07daf9e0d9 [ 603.741206][T15104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 603.741225][T15104] RSP: 002b:00007f07dbe19028 EFLAGS: 00000246 ORIG_RAX: 000000000000010c [ 603.741249][T15104] RAX: ffffffffffffffda RBX: 00007f07db225fa0 RCX: 00007f07daf9e0d9 [ 603.741266][T15104] RDX: 00000000fffffffb RSI: 0000200000000000 RDI: ffffffffffffff9c [ 603.741282][T15104] RBP: 00007f07dbe19090 R08: 0000000000000000 R09: 0000000000000000 [ 603.741295][T15104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 603.741308][T15104] R13: 00007f07db226038 R14: 00007f07db225fa0 R15: 00007f07db34fa48 [ 603.741342][T15104] [ 603.741352][T15104] ERROR: Out of memory at tomoyo_realpath_from_path. [ 603.891121][T15114] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2725'. [ 604.027300][ T3334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.067015][T15114] netlink: 'syz.1.2725': attribute type 10 has an invalid length. [ 604.085911][ T5617] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.129545][T15117] fuse: Bad value for 'rootmode' [ 604.674130][T15131] loop4: detected capacity change from 0 to 7 [ 604.694549][T15131] loop4: [ 604.705030][T15131] loop4: partition table partially beyond EOD, truncated [ 605.059875][T15145] usb usb7: usbfs: process 15145 (syz.0.2736) did not claim interface 0 before use [ 605.080317][T15145] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 605.182758][T15152] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2737'. [ 605.255346][ T5763] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 605.383742][T15155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.395114][T15155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.425354][ T5763] usb 3-1: Using ep0 maxpacket: 32 [ 605.431865][T15155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.453422][ T5763] usb 3-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 605.483371][T15156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.500327][ T5763] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.528929][ T5763] usb 3-1: Product: syz [ 605.536898][T15156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.548536][ T5763] usb 3-1: Manufacturer: syz [ 605.565350][ T5763] usb 3-1: SerialNumber: syz [ 605.580722][T15156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.597341][T15156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.600457][T15161] fuse: Unknown parameter 'use00000000000000000000' [ 605.667335][T15158] xt_CT: No such helper "snmp_trap" [ 605.947772][ T5763] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 605.990161][ T5763] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 606.040817][ T5763] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 606.263145][T15168] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2735'. [ 606.306424][ T5630] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 606.319129][ T5630] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 606.328126][ T5630] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 606.337138][ T5630] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 606.348901][ T5630] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 606.489462][T15154] net_ratelimit: 596 callbacks suppressed [ 606.489483][T15154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.649121][T15175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.675946][T15175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 606.913763][ T9503] team0: Port device syz_tun removed [ 606.980670][ T5617] usb 5-1: USB disconnect, device number 77 [ 607.126203][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.205768][ T3365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.228839][T15172] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.236379][T15172] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.243818][T15172] bridge_slave_0: entered allmulticast mode [ 607.252572][T15172] bridge_slave_0: entered promiscuous mode [ 607.262417][T15172] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.270190][T15172] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.280204][T15172] bridge_slave_1: entered allmulticast mode [ 607.289320][T15172] bridge_slave_1: entered promiscuous mode [ 607.351557][T15172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 607.367885][T15172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 607.431159][T15172] team0: Port device team_slave_0 added [ 607.441103][T15172] team0: Port device team_slave_1 added [ 607.482357][T15172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 607.490762][T15172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 607.517895][T15172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 607.534234][T15172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 607.543001][T15172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 607.570833][T15172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 607.577661][ T5605] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 607.627823][ T5763] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 607.670155][T15172] hsr_slave_0: entered promiscuous mode [ 607.678990][T15172] hsr_slave_1: entered promiscuous mode [ 607.686241][T15172] debugfs: 'hsr0' already exists in 'hsr' [ 607.692205][T15172] Cannot create hsr debugfs directory [ 607.775823][ T5605] usb 2-1: Using ep0 maxpacket: 32 [ 607.790771][ T5605] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 607.806083][ T5763] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 607.828965][ T5605] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.838008][ T5763] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.848467][ T5763] usb 4-1: Product: syz [ 607.854492][ T5763] usb 4-1: Manufacturer: syz [ 607.865169][ T5605] usb 2-1: config 0 descriptor?? [ 607.873306][ T5763] usb 4-1: SerialNumber: syz [ 607.906145][ T5763] usb 4-1: config 0 descriptor?? [ 607.922872][ T5763] hub 4-1:0.0: bad descriptor, ignoring hub [ 607.933731][ T5763] hub 4-1:0.0: probe with driver hub failed with error -5 [ 608.089784][ T10] usb 3-1: USB disconnect, device number 28 [ 608.098567][ T5605] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 608.113842][ T10] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 608.133112][ T5763] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 608.163951][ T10] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 608.188487][ T5605] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 608.208771][ T10] visor 3-1:1.0: device disconnected [ 608.220400][ T5763] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 608.231702][ T5605] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 608.268850][ T5763] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 608.285351][ T5605] usb 2-1: media controller created [ 608.308495][T15183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 608.325545][ T5763] usb 4-1: media controller created [ 608.351801][T15183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 608.367438][ T5605] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 608.405673][ T5619] Bluetooth: hci5: command tx timeout [ 608.440389][T15183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2743'. [ 608.474857][ T5763] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 608.515920][ T5605] az6027: usb out operation failed. (-71) [ 608.528749][ T5605] az6027: usb out operation failed. (-71) [ 608.553445][ T5605] stb0899_attach: Driver disabled by Kconfig [ 608.563179][ T5605] az6027: no front-end attached [ 608.563179][ T5605] [ 608.582447][ T5605] az6027: usb out operation failed. (-71) [ 608.603206][ T5605] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 608.641064][ T5605] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input56 [ 608.687195][ T5763] DVB: Unable to find symbol dib7000p_attach() [ 608.696901][ T5605] dvb-usb: schedule remote query interval to 400 msecs. [ 608.704384][ T5763] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 608.718002][ T5605] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 608.756440][ T10] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 608.778335][ T5605] usb 2-1: USB disconnect, device number 91 [ 608.929692][ T5763] rc_core: IR keymap rc-dib0700-rc5 not found [ 608.936756][ T10] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 608.949740][ T5763] Registered IR keymap rc-empty [ 608.967006][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.977582][ T5763] dvb-usb: could not initialize remote control. [ 608.997696][ T5763] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 608.998201][ T10] usb 3-1: Product: syz [ 609.029571][ T5605] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 609.035047][ T10] usb 3-1: Manufacturer: syz [ 609.042111][ T5763] usb 4-1: USB disconnect, device number 19 [ 609.068002][ T10] usb 3-1: SerialNumber: syz [ 609.116747][ T10] usb 3-1: config 0 descriptor?? [ 609.127804][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.172359][ T5763] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 609.339204][T15211] fuse: Unknown parameter 'use00000000000000000000' [ 609.372227][ T10] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 609.584507][ T10] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 609.629017][ T10] usb 3-1: USB disconnect, device number 29 [ 610.034581][T15226] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2754'. [ 610.167712][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.422029][T15172] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 610.459151][T15172] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 610.479017][T15172] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 610.485940][ T5619] Bluetooth: hci5: command tx timeout [ 610.505452][ T10] usb 1-1: new full-speed USB device number 127 using dummy_hcd [ 610.516660][T15172] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 610.536400][T15172] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 610.550149][T15172] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 610.568744][T15172] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 610.591996][T15172] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 610.696890][ T10] usb 1-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 610.722224][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 610.776146][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.827923][ T10] usb 1-1: config 0 descriptor?? [ 610.854677][T15229] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 611.021842][T15172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 611.109165][T15229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 611.161802][T15172] 8021q: adding VLAN 0 to HW filter on device team0 [ 611.175565][T15247] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2755'. [ 611.200718][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.208039][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 611.233541][T15250] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2759'. [ 611.262243][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.269594][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 611.280993][T15229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 611.311056][T15250] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2759'. [ 611.398991][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 611.429302][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 611.499525][ T10] usb 1-1: USB disconnect, device number 127 [ 611.640188][T15255] fuse: Unknown parameter 'use00000000000000000000' [ 611.692041][T15172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 611.937406][T15172] veth0_vlan: entered promiscuous mode [ 611.974759][T15172] veth1_vlan: entered promiscuous mode [ 612.012007][T15262] syzkaller0: entered promiscuous mode [ 612.020413][T15262] syzkaller0: entered allmulticast mode [ 612.044212][T15262] tipc: Enabled bearer , priority 0 [ 612.075913][T15260] tipc: Resetting bearer [ 612.121821][T15260] tipc: Disabling bearer [ 612.158724][T15172] veth0_macvtap: entered promiscuous mode [ 612.184123][T15172] veth1_macvtap: entered promiscuous mode [ 612.269915][T15172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 612.303558][T15172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 612.321023][T15266] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2760'. [ 612.334081][ T3334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.395473][ T58] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.424302][ T58] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.486736][ T3365] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.569423][ T3365] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.581332][ T5619] Bluetooth: hci5: command tx timeout [ 612.923340][ T3365] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 612.947200][ T3365] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 612.965607][ T5605] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 613.114405][T15282] netlink: 'syz.0.2769': attribute type 5 has an invalid length. [ 613.126291][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 613.152278][ T5605] usb 4-1: New USB device found, idVendor=046d, idProduct=c219, bcdDevice= 0.00 [ 613.167163][ T30] kauditd_printk_skb: 64 callbacks suppressed [ 613.167184][ T30] audit: type=1326 audit(1787682845.057:5395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15278 comm="syz.0.2769" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06bb9e0d9 code=0x7ffc0000 [ 613.198306][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 613.208513][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.232224][ T5605] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 613.253903][ T5605] usb 4-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 613.279004][ T30] audit: type=1326 audit(1787682845.057:5396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15278 comm="syz.0.2769" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06bb9e0d9 code=0x7ffc0000 [ 613.307665][ T5605] usb 4-1: config 0 interface 0 has no altsetting 0 [ 613.324977][ T5605] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.373413][ T5605] usb 4-1: config 0 descriptor?? [ 613.385590][ T30] audit: type=1326 audit(1787682845.067:5397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15278 comm="syz.0.2769" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06bb9e0d9 code=0x7ffc0000 [ 613.519767][ T30] audit: type=1326 audit(1787682845.067:5398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15278 comm="syz.0.2769" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06bb9e0d9 code=0x7ffc0000 [ 613.552837][ T30] audit: type=1326 audit(1787682845.067:5399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15278 comm="syz.0.2769" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fd06bb9e0d9 code=0x7ffc0000 [ 613.578011][ T30] audit: type=1326 audit(1787682845.067:5400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15278 comm="syz.0.2769" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06bb9e0d9 code=0x7ffc0000 [ 613.611455][ T30] audit: type=1326 audit(1787682845.067:5401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15278 comm="syz.0.2769" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06bb9e0d9 code=0x7ffc0000 [ 613.648852][ T30] audit: type=1326 audit(1787682845.067:5402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15278 comm="syz.0.2769" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06bb9e0d9 code=0x7ffc0000 [ 613.699823][ T30] audit: type=1326 audit(1787682845.067:5403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15278 comm="syz.0.2769" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06bb9e0d9 code=0x7ffc0000 [ 613.742935][ T30] audit: type=1326 audit(1787682845.117:5404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15278 comm="syz.0.2769" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd06bb9e0d9 code=0x7ffc0000 [ 613.856893][ T5605] usbhid 4-1:0.0: can't add hid device: -71 [ 613.864061][ T5605] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 613.924889][ T5605] usb 4-1: USB disconnect, device number 20 [ 614.166202][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.353350][T15297] tipc: Started in network mode [ 614.389871][T15297] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 614.439050][T15297] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 614.478663][T15297] tipc: Enabled bearer , priority 10 [ 614.646182][ T5619] Bluetooth: hci5: command tx timeout [ 614.682512][T15300] netlink: 670 bytes leftover after parsing attributes in process `syz.0.2772'. [ 614.737811][T15300] netlink: 'syz.0.2772': attribute type 1 has an invalid length. [ 614.905678][ T5605] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 614.974685][T15306] fuse: Unknown parameter 'user_i00000000000000000000' [ 615.085415][ T5605] usb 4-1: Using ep0 maxpacket: 16 [ 615.103198][ T5605] usb 4-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 615.143707][ T5605] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 615.183199][ T5605] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 615.250869][ T5605] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.284496][ T5605] usb 4-1: Product: syz [ 615.305207][ T5605] usb 4-1: Manufacturer: syz [ 615.326505][ T5605] usb 4-1: SerialNumber: syz [ 615.418505][T15311] syzkaller0: entered promiscuous mode [ 615.457495][T15311] syzkaller0: entered allmulticast mode [ 615.484904][ T29] tipc: Node number set to 1 [ 615.519993][T15311] tipc: Enabled bearer , priority 0 [ 615.552807][T15310] tipc: Resetting bearer [ 615.676070][T15310] tipc: Disabling bearer [ 615.774348][ T5605] usb 4-1: USB disconnect, device number 21 [ 616.021433][ T7742] udevd[7742]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 616.248037][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.372663][T15324] syzkaller0: left promiscuous mode [ 616.396917][T15324] syzkaller0: left allmulticast mode [ 617.444210][T15350] fuse: Unknown parameter 'user_i00000000000000000000' [ 618.114774][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.124825][ T10] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 618.165985][ T5605] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 618.297349][ T10] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 618.320211][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.335431][ T5605] usb 1-1: Using ep0 maxpacket: 16 [ 618.343034][ T10] usb 4-1: Product: syz [ 618.347888][ T5605] usb 1-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 618.358981][ T10] usb 4-1: Manufacturer: syz [ 618.368697][ T5605] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.375728][ T10] usb 4-1: SerialNumber: syz [ 618.377632][ T5605] usb 1-1: Product: syz [ 618.391896][ T5605] usb 1-1: Manufacturer: syz [ 618.396809][ T5605] usb 1-1: SerialNumber: syz [ 618.426457][ T5605] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 618.783981][ T9] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 618.821000][ T5605] snd-usb-audio 1-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 618.859671][ T5605] usb 1-1: USB disconnect, device number 2 [ 618.941562][ T6336] udevd[6336]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 619.110486][T15370] lo: Caught tx_queue_len zero misconfig [ 619.232203][ T24] usb 4-1: USB disconnect, device number 22 [ 619.286346][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.376468][T15381] netlink: 670 bytes leftover after parsing attributes in process `syz.3.2797'. [ 619.401442][T15381] netlink: 'syz.3.2797': attribute type 1 has an invalid length. [ 619.545619][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 619.625140][T15374] tipc: Enabled bearer , priority 0 [ 619.641481][T15374] syzkaller0: MTU too low for tipc bearer [ 619.649686][T15374] tipc: Disabling bearer [ 619.706304][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 619.712649][ T10] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 619.729825][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.743311][ T10] usb 1-1: Product: syz [ 619.755350][ T5617] usb 2-1: new low-speed USB device number 92 using dummy_hcd [ 619.764307][ T10] usb 1-1: Manufacturer: syz [ 619.781126][ T10] usb 1-1: SerialNumber: syz [ 619.805436][ T10] usb 1-1: config 0 descriptor?? [ 619.832575][ T10] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 619.926618][ T9] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 619.935895][ T5617] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 619.946429][ T9] ath9k_htc: Failed to initialize the device [ 619.955805][ T24] usb 4-1: ath9k_htc: USB layer deinitialized [ 619.959112][ T5617] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 619.972735][ T5617] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 619.982311][ T5617] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 619.992926][ T5617] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.007205][ T3334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.041984][ T5617] hub 2-1:1.0: bad descriptor, ignoring hub [ 620.052006][ T10] gspca_stk1135: reg_w 0x2 err -71 [ 620.074018][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 620.084370][ T5617] hub 2-1:1.0: probe with driver hub failed with error -5 [ 620.096022][ T10] gspca_stk1135: Sensor write failed [ 620.102125][ T5617] cdc_wdm 2-1:1.0: skipping garbage [ 620.108042][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 620.114507][ T5617] cdc_wdm 2-1:1.0: skipping garbage [ 620.120302][ T10] gspca_stk1135: Sensor write failed [ 620.126836][ T5617] cdc_wdm 2-1:1.0: skipping garbage [ 620.132354][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 620.139344][ T5617] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 620.148039][ T10] gspca_stk1135: Sensor read failed [ 620.160144][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 620.172704][ T10] gspca_stk1135: Sensor read failed [ 620.178515][ T10] gspca_stk1135: Detected sensor type unknown (0x0) [ 620.189267][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 620.196554][ T10] gspca_stk1135: Sensor read failed [ 620.202878][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 620.210692][ T10] gspca_stk1135: Sensor read failed [ 620.216546][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 620.222949][ T10] gspca_stk1135: Sensor write failed [ 620.230073][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 620.237203][ T10] gspca_stk1135: Sensor write failed [ 620.248999][ T10] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71 [ 620.262099][ T10] usb 1-1: USB disconnect, device number 3 [ 620.335688][ T24] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 620.506120][ T24] usb 4-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00 [ 620.527250][ T24] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 620.542767][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 620.560315][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.601961][ T24] usb 4-1: config 0 descriptor?? [ 620.675456][ T5763] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 620.835369][ T5763] usb 5-1: Using ep0 maxpacket: 8 [ 620.847948][ T5763] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 620.879848][ T5763] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 620.937481][ T5763] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 620.962888][ T5763] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.984291][ T5763] usb 5-1: Product: syz [ 620.998842][ T5763] usb 5-1: Manufacturer: syz [ 621.018468][ T5763] usb 5-1: SerialNumber: syz [ 621.064106][ T24] ntrig 0003:1B96:0009.002E: item fetching failed at offset 5/7 [ 621.072918][ T5763] usb 5-1: 0:1 : does not exist [ 621.085558][ T5763] usb 5-1: unit 1 not found! [ 621.091154][ T24] ntrig 0003:1B96:0009.002E: parse failed [ 621.097553][ T5763] usb 5-1: unit 9 not found! [ 621.107444][ T24] ntrig 0003:1B96:0009.002E: probe with driver ntrig failed with error -22 [ 621.247233][ T9] usb 4-1: USB disconnect, device number 23 [ 621.297575][T15400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.322184][T15400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 621.615626][ T5763] usb 5-1: USB disconnect, device number 78 [ 621.714505][ T5631] udevd[5631]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 622.155690][ T10] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 622.316854][ T10] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 622.346684][ T5617] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.355039][ T10] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 622.370763][ T10] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 622.392292][ T10] usb 4-1: config 0 has no interface number 0 [ 622.412272][ T10] usb 4-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 622.454451][ T10] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 622.487416][T15421] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2809'. [ 622.504950][ T10] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 622.554914][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.602966][ T10] usb 4-1: config 0 descriptor?? [ 622.636110][T15414] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 622.785644][ T29] usb 2-1: USB disconnect, device number 92 [ 622.950431][T15425] bond0: entered promiscuous mode [ 622.969984][T15425] bond_slave_0: entered promiscuous mode [ 623.008639][T15425] bond_slave_1: entered promiscuous mode [ 623.036235][ T5617] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 623.060784][T15425] bridge0: entered promiscuous mode [ 623.095945][T15425] bond0: left promiscuous mode [ 623.119809][ T10] usb 4-1: USB disconnect, device number 24 [ 623.137322][T15425] bond_slave_0: left promiscuous mode [ 623.182990][T15425] bond_slave_1: left promiscuous mode [ 623.196912][ T5617] usb 5-1: device descriptor read/64, error -71 [ 623.225169][T15425] bridge0: left promiscuous mode [ 623.471840][ T5617] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 623.627113][ T5617] usb 5-1: device descriptor read/64, error -71 [ 623.700861][T15429] netlink: 'syz.1.2811': attribute type 1 has an invalid length. [ 623.758597][ T5617] usb usb5-port1: attempt power cycle [ 623.847743][ T3334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.887465][T15429] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 623.984616][ T30] kauditd_printk_skb: 155 callbacks suppressed [ 623.984637][ T30] audit: type=1326 audit(1787682855.877:5560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15418 comm="syz.0.2809" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd06bb9e0d9 code=0x0 [ 624.155525][ T5763] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 624.185594][ T5617] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 624.226259][ T5617] usb 5-1: device descriptor read/8, error -71 [ 624.336135][ T5763] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 624.363337][ T5763] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 624.388475][ T5763] usb 4-1: config 0 has no interface number 0 [ 624.416796][ T5763] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.437781][ T5763] usb 4-1: Product: syz [ 624.448449][ T5763] usb 4-1: Manufacturer: syz [ 624.459545][T15445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2813'. [ 624.460595][ T5763] usb 4-1: SerialNumber: syz [ 624.486664][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.493809][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.512396][ T5617] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 624.528227][ T5763] usb 4-1: config 0 descriptor?? [ 624.549450][ T5617] usb 5-1: device descriptor read/8, error -71 [ 624.635280][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 624.799303][ T5763] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 624.826339][ T5617] usb usb5-port1: unable to enumerate USB device [ 624.847947][T15442] bridge0: port 3(veth0) entered blocking state [ 624.854422][T15442] bridge0: port 3(veth0) entered forwarding state [ 624.861510][T15442] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.868696][T15442] bridge0: port 2(bridge_slave_1) entered forwarding state [ 624.876213][T15442] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.883359][T15442] bridge0: port 1(bridge_slave_0) entered forwarding state [ 624.906793][ T5763] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 624.939675][ T5763] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 624.977115][ T5763] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 625.028152][ T5763] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 625.284530][T15442] 8021q: adding VLAN 0 to HW filter on device bond2 [ 625.319056][T15442] 8021q: adding VLAN 0 to HW filter on device bond3 [ 625.365875][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.421767][T15452] batadv_slave_0: entered promiscuous mode [ 625.590267][ T8289] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 625.771086][ T58] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.862388][T15466] tipc: Enabling of bearer rejected, failed to enable media [ 626.498020][T15479] nvme_fabrics: unknown parameter or missing value '#! 1R?&n%~[6=p͊yz\Uj@5NfWrs)q' in ctrl creation request [ 626.806577][T15479] nvme nvme0: failed to connect socket: -111 [ 626.847781][ T29] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 626.867143][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 626.925354][ T5617] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 627.025473][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 627.034507][ T29] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 627.069584][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 627.085330][ T5617] usb 2-1: Using ep0 maxpacket: 32 [ 627.092581][ T10] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 627.096888][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.116272][ T5617] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 627.136694][ T10] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 627.149237][ T29] usb 5-1: Product: syz [ 627.155541][ T5617] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 627.175123][ T29] usb 5-1: Manufacturer: syz [ 627.181286][ T29] usb 5-1: SerialNumber: syz [ 627.182271][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.197337][ T5617] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 627.208347][ T10] usb 1-1: Product: syz [ 627.212912][ T5617] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.220511][ T29] usb 5-1: config 0 descriptor?? [ 627.222065][ T10] usb 1-1: Manufacturer: syz [ 627.235673][ T10] usb 1-1: SerialNumber: syz [ 627.245890][ T29] gspca_main: se401-2.14.0 probing 047d:5003 [ 627.249142][ T5617] usb 2-1: config 0 descriptor?? [ 627.269624][ T5617] hub 2-1:0.0: USB hub found [ 627.465192][ T5617] hub 2-1:0.0: 1 port detected [ 627.487986][ T10] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 627.515664][ T5703] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 627.654556][ T29] gspca_se401: write req failed req 0x57 val 0x00 error -71 [ 627.676098][ T29] se401 5-1:0.0: probe with driver se401 failed with error -71 [ 627.692922][T15485] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2825'. [ 627.702599][ T5703] usb 3-1: Using ep0 maxpacket: 16 [ 627.709457][T15485] netlink: 'syz.1.2825': attribute type 30 has an invalid length. [ 627.722606][ T29] usb 5-1: USB disconnect, device number 83 [ 627.734643][ T5703] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 627.756944][ T5703] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 627.770162][ T5703] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 627.782341][ T5703] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 627.796146][ T5703] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.804914][ T5703] usb 3-1: Product: syz [ 627.809541][ T5703] usb 3-1: Manufacturer: syz [ 627.815419][ T5703] usb 3-1: SerialNumber: syz [ 627.839964][T15485] vxlan1: entered promiscuous mode [ 627.846283][T15485] vxlan1: entered allmulticast mode [ 627.868031][ T58] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 627.890854][ T58] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 627.912270][ T58] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 627.928405][ T58] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 627.968641][ T5617] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 627.991490][ T5617] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 628.011649][ T5617] usbhid 2-1:0.0: can't add hid device: -71 [ 628.018511][ T5617] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 628.056863][ T5617] usb 2-1: USB disconnect, device number 93 [ 628.160658][ T10] usb 1-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 628.271048][ T5703] usb 3-1: 0:2 : does not exist [ 628.284102][ T10] usb 1-1: USB disconnect, device number 4 [ 628.326094][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.416834][ T5617] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.480930][T15496] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 628.523033][T15496] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 628.552551][T15496] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 628.581137][ T5617] usb 4-1: USB disconnect, device number 25 [ 628.633076][ T5617] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 628.670090][ T5617] keyspan 4-1:0.133: device disconnected [ 628.825652][T15500] loop4: detected capacity change from 0 to 7 [ 628.843025][T15500] loop4: [ 628.851450][T15500] loop4: partition table partially beyond EOD, truncated [ 628.879461][ T5703] usb 3-1: USB disconnect, device number 30 [ 628.909295][T15503] netlink: 670 bytes leftover after parsing attributes in process `syz.0.2830'. [ 628.937085][T15503] netlink: 'syz.0.2830': attribute type 1 has an invalid length. [ 628.987995][ T5631] udevd[5631]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 629.080091][ T5631] udevd[5631]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 629.192451][T15508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 629.230594][T15508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 629.262757][T15511] openvswitch: netlink: Message has 4 unknown bytes. [ 629.290796][T15511] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 629.445464][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 629.462528][T15515] tipc: Enabling of bearer rejected, failed to enable media [ 629.516533][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 629.606298][ T8287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.685656][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 629.697586][ T10] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 629.723144][ T10] usb 1-1: config index 0 descriptor too short (expected 65, got 36) [ 629.736968][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 629.756011][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 629.771578][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 629.785170][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 629.800941][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.848500][ T10] usb 1-1: config 0 descriptor?? [ 629.869544][T15507] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 629.931725][ T10] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input59 [ 630.120846][ T10] usb 1-1: USB disconnect, device number 5 [ 630.164770][T15533] netlink: 774 bytes leftover after parsing attributes in process `syz.4.2842'. [ 630.177655][T15531] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 630.217224][T15533] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2842'. [ 631.245534][ T10] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 631.390436][T15557] tipc: Enabled bearer , priority 0 [ 631.398276][T15557] syzkaller0: entered promiscuous mode [ 631.403913][T15557] syzkaller0: entered allmulticast mode [ 631.413038][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 631.420589][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 631.432471][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 631.445561][ T10] usb 2-1: config index 0 descriptor too short (expected 43220, got 149) [ 631.454983][T15557] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 631.463537][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.472146][ T10] usb 2-1: config 132 has too many interfaces: 190, using maximum allowed: 32 [ 631.484388][ T10] usb 2-1: config 132 has an invalid descriptor of length 0, skipping remainder of the config [ 631.495033][ T5617] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 631.515391][ T10] usb 2-1: config 132 has 0 interfaces, different from the descriptor's value: 190 [ 631.535167][ T3365] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.542558][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.557334][ T10] usb 2-1: Product: syz [ 631.568275][ T10] usb 2-1: Manufacturer: syz [ 631.578731][T15557] tipc: Resetting bearer [ 631.586249][ T10] usb 2-1: SerialNumber: syz [ 631.663984][T15556] tipc: Resetting bearer [ 631.725449][ T5617] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 631.734653][ T5617] usb 1-1: too many configurations: 21, using maximum allowed: 8 [ 631.749195][T15556] tipc: Disabling bearer [ 631.759035][ T5617] usb 1-1: config index 0 descriptor too short (expected 45, got 28) [ 631.783683][ T5617] usb 1-1: config 1 descriptor has 1 excess byte, ignoring [ 631.801569][ T5617] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 631.818642][T15546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 631.829188][ T5617] usb 1-1: config index 1 descriptor too short (expected 45, got 28) [ 631.861775][ T5617] usb 1-1: config 1 descriptor has 1 excess byte, ignoring [ 631.869899][ T5617] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 631.890550][T15546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 631.894230][ T5617] usb 1-1: config index 2 descriptor too short (expected 45, got 28) [ 631.911654][ T5617] usb 1-1: config 1 descriptor has 1 excess byte, ignoring [ 631.919799][ T5617] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 631.936064][ T5617] usb 1-1: config index 3 descriptor too short (expected 45, got 28) [ 631.945997][ T5617] usb 1-1: config 1 descriptor has 1 excess byte, ignoring [ 631.953575][ T5617] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 631.976068][ T5617] usb 1-1: config index 4 descriptor too short (expected 45, got 28) [ 631.986182][ T5617] usb 1-1: config 1 descriptor has 1 excess byte, ignoring [ 631.993560][ T5617] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 632.010978][ T5617] usb 1-1: config index 5 descriptor too short (expected 45, got 28) [ 632.022441][ T5617] usb 1-1: config 1 descriptor has 1 excess byte, ignoring [ 632.031569][ T5617] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 632.047989][ T5617] usb 1-1: config index 6 descriptor too short (expected 45, got 28) [ 632.058048][ T5617] usb 1-1: config 1 descriptor has 1 excess byte, ignoring [ 632.066434][ T5617] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 632.083633][ T10] usb 2-1: USB disconnect, device number 94 [ 632.130681][ T5617] usb 1-1: config index 7 descriptor too short (expected 45, got 28) [ 632.141158][ T5617] usb 1-1: config 1 descriptor has 1 excess byte, ignoring [ 632.154253][ T5617] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 632.170352][ T5617] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.179256][ T5617] usb 1-1: Product: syz [ 632.183495][ T5617] usb 1-1: Manufacturer: syz [ 632.188824][ T5617] usb 1-1: SerialNumber: syz [ 632.209661][ T5617] rtl8150 1-1:1.0: couldn't find required endpoints [ 632.216872][ T5617] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 632.427085][T15548] netlink: 'syz.0.2847': attribute type 32 has an invalid length. [ 632.440720][ T5617] usb 1-1: USB disconnect, device number 6 [ 632.480033][T15570] loop5: detected capacity change from 0 to 7 [ 632.486478][ T29] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 632.497514][T15570] Dev loop5: unable to read RDB block 7 [ 632.505197][T15570] loop5: AHDI p2 [ 632.511310][T15570] loop5: partition table partially beyond EOD, truncated [ 632.645871][ T29] usb 4-1: Using ep0 maxpacket: 32 [ 632.654059][ T29] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 632.668305][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.672218][T15572] netlink: 774 bytes leftover after parsing attributes in process `syz.4.2853'. [ 632.687848][T15572] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2853'. [ 632.690761][ T29] usb 4-1: config 0 descriptor?? [ 632.711473][ T29] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 632.923478][ T29] gspca_vc032x: reg_r err -32 [ 632.930254][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 632.935801][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 632.941330][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 632.946720][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 632.952259][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 632.957837][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 632.963410][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 632.992699][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 633.010698][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 633.031461][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 633.059633][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 633.076304][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 633.092605][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 633.105761][ T5617] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 633.112974][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 633.120513][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 633.137589][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 633.148074][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 633.163684][ T29] gspca_vc032x: I2c Bus Busy Wait 00 [ 633.178740][ T29] gspca_vc032x: Unknown sensor... [ 633.191332][ T29] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 633.231730][T15587] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.247543][T15587] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.259981][T15587] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.276203][ T5617] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 633.286680][T15587] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.300026][ T5617] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 633.315365][ T5617] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 633.337006][T15587] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.348095][ T5617] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 633.357120][ T5617] usb 2-1: Manufacturer: syz [ 633.364127][T15587] fuse: Unknown parameter 'q|p촮eZv"'U7Ld$qG0x0000000000000006' [ 633.396875][ T5617] usb 2-1: config 0 descriptor?? [ 633.412766][ T29] usb 4-1: USB disconnect, device number 26 [ 633.536874][ T5617] rc_core: IR keymap rc-hauppauge not found [ 633.545846][ T5617] Registered IR keymap rc-empty [ 633.556162][ T5617] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 633.576918][ T5617] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input60 [ 633.612853][T15577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 633.653196][T15577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 633.688226][ C0] igorplugusb 2-1:0.0: Error: urb status = -32 [ 633.775154][ T5617] usb 2-1: USB disconnect, device number 95 [ 633.952470][T15609] loop5: detected capacity change from 0 to 7 [ 633.976762][T15609] Dev loop5: unable to read RDB block 7 [ 633.986908][T15609] loop5: AHDI p2 [ 633.990754][T15609] loop5: partition table partially beyond EOD, truncated [ 634.225709][ T29] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 634.365514][ T5617] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 634.376057][ T29] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 634.386498][ T29] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 634.395700][ T29] usb 4-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 634.406616][ T29] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 634.415778][ T29] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 12336, setting to 64 [ 634.429564][ T29] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 634.435647][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 634.438173][ T29] usb 4-1: Product: syz [ 634.450361][ T29] usb 4-1: Manufacturer: syz [ 634.461536][ T29] cdc_wdm 4-1:1.0: skipping garbage [ 634.469397][ T29] cdc_wdm 4-1:1.0: skipping garbage [ 634.474820][ T29] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 634.486007][ T5703] net_ratelimit: 2 callbacks suppressed [ 634.486025][ T5703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.526150][ T5617] usb 5-1: Using ep0 maxpacket: 32 [ 634.532391][ T5617] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 634.543397][ T5617] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.554354][ T5617] usb 5-1: config 0 descriptor?? [ 634.564894][ T5617] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 634.605375][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 634.613957][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 634.622278][ T10] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 634.633174][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 634.643731][ T10] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 634.654684][ T10] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 634.668443][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.676785][ T10] usb 1-1: Product: syz [ 634.681040][ T10] usb 1-1: Manufacturer: syz [ 634.685775][ T10] usb 1-1: SerialNumber: syz [ 634.862448][ T29] usb 4-1: USB disconnect, device number 27 [ 635.030213][ T10] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 635.074217][ T10] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 635.145699][T15630] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2869'. [ 635.218971][ T10] usb 1-1: USB disconnect, device number 7 [ 635.277583][T15633] tipc: Enabling of bearer rejected, failed to enable media [ 635.333879][T15630] netlink: 'syz.0.2869': attribute type 10 has an invalid length. [ 635.375758][ T8282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.995068][T15639] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 636.202584][T15638] openvswitch: netlink: IPv6 tunnel dst address is zero [ 636.466795][ T5617] gspca_vc032x: I2c Bus Busy Wait 00 [ 636.615544][ T10] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 636.766321][T15652] tipc: Enabling of bearer rejected, already enabled [ 636.785935][ T10] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 636.799155][ T10] usb 2-1: config index 0 descriptor too short (expected 65183, got 72) [ 636.811099][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.820009][ T10] usb 2-1: Product: syz [ 636.824791][ T10] usb 2-1: Manufacturer: syz [ 636.831315][ T10] usb 2-1: SerialNumber: syz [ 636.863737][ T9] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 636.874678][T15656] loop5: detected capacity change from 0 to 7 [ 636.889199][T15656] Dev loop5: unable to read RDB block 7 [ 636.898150][T15656] loop5: AHDI p2 [ 636.901894][T15656] loop5: partition table partially beyond EOD, truncated [ 637.025710][ T5605] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 637.078182][T15645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 637.088181][T15645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 637.097575][T15645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 637.107244][T15645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 637.117395][T15646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 637.128602][T15646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 637.139449][ T5348] usb 2-1: USB disconnect, device number 96 [ 637.186732][ T5605] usb 4-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice= 0.01 [ 637.200683][ T5605] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.210043][ T5605] usb 4-1: Product: 祳z [ 637.214372][ T5605] usb 4-1: Manufacturer: 祳z [ 637.219266][ T5605] usb 4-1: SerialNumber: 祳z [ 637.229916][ T5605] etas_es58x 4-1:1.0: Starting 祳z 祳z (Serial Number 祳z) [ 637.245411][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 637.285499][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 637.294727][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.352921][T15646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 637.363704][T15646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 637.405780][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 637.412700][ T10] usb 1-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 637.426298][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.438732][ T10] usb 1-1: Product: syz [ 637.442977][ T10] usb 1-1: Manufacturer: syz [ 637.447698][ T10] usb 1-1: SerialNumber: syz [ 637.455980][ T10] usb 1-1: config 0 descriptor?? [ 637.467503][ T10] gspca_main: spca508-2.14.0 probing 041e:4018 [ 637.490458][ T5617] gspca_vc032x: reg_w err -71 [ 637.499071][ T5617] gspca_vc032x: I2c Bus Busy Wait 00 [ 637.508336][ T5617] gspca_vc032x: I2c Bus Busy Wait 00 [ 637.513838][ T5617] gspca_vc032x: I2c Bus Busy Wait 00 [ 637.536478][ T5617] gspca_vc032x: I2c Bus Busy Wait 00 [ 637.542357][ T5703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.550803][ T5617] gspca_vc032x: I2c Bus Busy Wait 00 [ 637.556501][ T5617] gspca_vc032x: I2c Bus Busy Wait 00 [ 637.562010][ T5617] gspca_vc032x: I2c Bus Busy Wait 00 [ 637.567461][ T5617] gspca_vc032x: I2c Bus Busy Wait 00 [ 637.574209][ T5617] gspca_vc032x: I2c Bus Busy Wait 00 [ 637.581590][ T8282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.583310][T15659] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2875'. [ 637.599483][ T5617] gspca_vc032x: I2c Bus Busy Wait 00 [ 637.608530][ T5703] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.617129][ T5617] gspca_vc032x: I2c Bus Busy Wait 00 [ 637.622547][ T5617] gspca_vc032x: I2c Bus Busy Wait 00 [ 637.628110][ T5738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.636683][ T5617] gspca_vc032x: I2c Bus Busy Wait 00 [ 637.642096][ T5617] gspca_vc032x: I2c Bus Busy Wait 00 [ 637.648117][ T5617] gspca_vc032x: I2c Bus Busy Wait 00 [ 637.653507][ T30] audit: type=1326 audit(1787682869.547:5561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15653 comm="syz.3.2875" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f689fd9e0d9 code=0x7ffc0000 [ 637.678877][ T5617] gspca_vc032x: I2c Bus Busy Wait 00 [ 637.685210][ T5617] gspca_vc032x: I2c Bus Busy Wait 00 [ 637.691604][ T5617] gspca_vc032x: Unknown sensor... [ 637.697535][ T5617] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 637.705908][ T30] audit: type=1326 audit(1787682869.547:5562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15653 comm="syz.3.2875" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f689fd9e0d9 code=0x7ffc0000 [ 637.732050][T15658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 637.750104][T15658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 637.758327][ T5617] usb 5-1: USB disconnect, device number 84 [ 637.765333][T15659] tipc: Enabling of bearer rejected, failed to enable media [ 637.776213][ T30] audit: type=1326 audit(1787682869.557:5563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15653 comm="syz.3.2875" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f689fd9e0d9 code=0x7ffc0000 [ 637.801856][T15659] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2875'. [ 637.812028][ T10] gspca_spca508: reg_read err -32 [ 637.818125][ T10] gspca_spca508: reg_read err -32 [ 637.843827][ T30] audit: type=1326 audit(1787682869.557:5564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15653 comm="syz.3.2875" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f689fd9e0d9 code=0x7ffc0000 [ 637.887411][ T30] audit: type=1326 audit(1787682869.577:5565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15653 comm="syz.3.2875" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7f689fd9e0d9 code=0x7ffc0000 [ 637.914744][ T30] audit: type=1326 audit(1787682869.577:5566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15653 comm="syz.3.2875" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f689fd9e0d9 code=0x7ffc0000 [ 637.942629][ T9] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 637.949865][ T9] ath9k_htc: Failed to initialize the device [ 637.957278][ T30] audit: type=1326 audit(1787682869.577:5567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15653 comm="syz.3.2875" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f689fd9e0d9 code=0x7ffc0000 [ 637.958018][ T5348] usb 2-1: ath9k_htc: USB layer deinitialized [ 637.982126][ T30] audit: type=1326 audit(1787682869.577:5568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15653 comm="syz.3.2875" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f689fd9e0d9 code=0x7ffc0000 [ 638.016392][ T30] audit: type=1326 audit(1787682869.577:5569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15653 comm="syz.3.2875" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f689fd9e0d9 code=0x7ffc0000 [ 638.041937][ T30] audit: type=1326 audit(1787682869.577:5570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15653 comm="syz.3.2875" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f689fd9e0d9 code=0x7ffc0000 [ 638.116742][ T10] gspca_spca508: reg_read err -71 [ 638.122558][ T10] gspca_spca508: reg_read err -71 [ 638.136841][ T10] gspca_spca508: reg write: error -71 [ 638.155908][ T10] spca508 1-1:0.0: probe with driver spca508 failed with error -71 [ 638.198589][ T10] usb 1-1: USB disconnect, device number 8 [ 638.366314][ T5348] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 638.429133][T15667] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2879'. [ 638.444770][ T5605] etas_es58x 4-1:1.0: could not retrieve the product info string [ 638.493227][ T5605] usb 4-1: USB disconnect, device number 28 [ 638.503312][ T5605] etas_es58x 4-1:1.0: Disconnecting 祳z 祳z [ 638.535539][ T5348] usb 2-1: Using ep0 maxpacket: 32 [ 638.541578][ T5348] usb 2-1: New USB device found, idVendor=110a, idProduct=2210, bcdDevice=bd.da [ 638.559387][ T5348] usb 2-1: config index 0 descriptor too short (expected 241, got 72) [ 638.569279][ T5348] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 638.587763][ T5348] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.608631][ T5348] usb 2-1: config 0 descriptor?? [ 638.627353][ T5348] mos7840 2-1:0.0: Moschip 7840/7820 USB Serial Driver converter detected [ 638.786418][T15671] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2880'. [ 638.825173][ T5348] mos7840 2-1:0.0: probe with driver mos7840 failed with error -71 [ 638.889254][ T5348] usb 2-1: USB disconnect, device number 97 [ 638.898537][T15671] netlink: 'syz.0.2880': attribute type 10 has an invalid length. [ 639.509494][ T29] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 639.665948][ T29] usb 4-1: Using ep0 maxpacket: 32 [ 639.682266][ T29] usb 4-1: New USB device found, idVendor=0582, idProduct=0050, bcdDevice= 0.40 [ 639.710828][ T29] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 130, changing to 7 [ 639.743782][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.769947][ T29] usb 4-1: Product: syz [ 639.785944][ T29] usb 4-1: Manufacturer: syz [ 639.804812][ T29] usb 4-1: SerialNumber: syz [ 639.887021][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.905658][ T29] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 639.987830][ T5630] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 640.005333][ T5630] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 640.016807][ T5630] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 640.028491][T15690] loop5: detected capacity change from 0 to 7 [ 640.030126][ T5630] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 640.048224][ T5630] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 640.120208][T15690] Dev loop5: unable to read RDB block 7 [ 640.180894][T15690] loop5: AHDI p2 [ 640.230348][T15690] loop5: partition table partially beyond EOD, truncated [ 640.339086][ T29] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 640.508571][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.615318][ T29] usb 4-1: USB disconnect, device number 29 [ 640.776798][ T6336] udevd[6336]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 640.851158][T15693] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2888'. [ 640.921660][T15693] kvm: emulating exchange as write [ 641.104342][T15700] netlink: 'syz.3.2890': attribute type 10 has an invalid length. [ 641.230950][ T8282] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.314701][T15700] 8021q: adding VLAN 0 to HW filter on device team0 [ 641.339362][T15700] bond0: (slave team0): Enslaving as an active interface with an up link [ 641.479402][ T8282] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.531758][T15709] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2892'. [ 641.551634][T15709] netlink: 'syz.1.2892': attribute type 10 has an invalid length. [ 641.631004][ T8282] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.715472][ T9] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 641.852531][ T8282] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.906266][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 641.916231][ T9] usb 5-1: New USB device found, idVendor=12d1, idProduct=e155, bcdDevice=ce.aa [ 641.942232][ T9] usb 5-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 641.963152][ T9] usb 5-1: config 6 has 0 interfaces, different from the descriptor's value: 1 [ 641.988354][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.000195][T15691] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.015500][T15691] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.021639][ T9] usb 5-1: Product: syz [ 642.024097][T15691] bridge_slave_0: entered allmulticast mode [ 642.031968][ T9] usb 5-1: Manufacturer: syz [ 642.040607][T15691] bridge_slave_0: entered promiscuous mode [ 642.043960][ T9] usb 5-1: SerialNumber: syz [ 642.074775][T15691] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.092596][ T5619] Bluetooth: hci4: command tx timeout [ 642.109396][T15691] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.125490][T15691] bridge_slave_1: entered allmulticast mode [ 642.138887][T15691] bridge_slave_1: entered promiscuous mode [ 642.212169][T15691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 642.244398][T15691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 642.305080][ T9] usb 5-1: USB disconnect, device number 85 [ 642.354813][T15691] team0: Port device team_slave_0 added [ 642.364778][T15691] team0: Port device team_slave_1 added [ 642.385310][ T5703] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 642.431784][ T8282] dvmrp0: left allmulticast mode [ 642.563950][ T5703] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 642.585329][ T5703] usb 4-1: too many configurations: 168, using maximum allowed: 8 [ 642.608519][ T5703] usb 4-1: config index 0 descriptor too short (expected 65016, got 133) [ 642.625583][ T5703] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 642.637637][ T8282] `: Port device xfrm0 removed [ 642.670896][ T5703] usb 4-1: config index 1 descriptor too short (expected 65016, got 133) [ 642.685298][ T5703] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 642.711893][ T5703] usb 4-1: config index 2 descriptor too short (expected 65016, got 133) [ 642.725292][ T5703] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 642.757751][ T5703] usb 4-1: config index 3 descriptor too short (expected 65016, got 133) [ 642.769284][ T5703] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 642.794099][ T5703] usb 4-1: config index 4 descriptor too short (expected 65016, got 133) [ 642.808224][ T5703] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 642.822358][ T5703] usb 4-1: config index 5 descriptor too short (expected 65016, got 133) [ 642.840758][ T8282] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 642.850219][ T5703] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 642.860614][ T8282] bond0 (unregistering): (slave bridge0): the permanent HWaddr of slave - aa:aa:aa:aa:aa:0c - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 642.881738][ T5703] usb 4-1: config index 6 descriptor too short (expected 65016, got 133) [ 642.896416][ T5703] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 642.932993][T15731] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 642.943493][ T5703] usb 4-1: config index 7 descriptor too short (expected 65016, got 133) [ 642.952336][ T5703] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 642.974481][ T5703] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.990751][ T5703] usb 4-1: Product: syz [ 642.996324][ T8282] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 643.007599][ T5703] usb 4-1: Manufacturer: syz [ 643.012435][ T5703] usb 4-1: SerialNumber: syz [ 643.022441][ T8282] bond0 (unregistering): Released all slaves [ 643.054363][ T9] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 643.091357][ T8282] bond1 (unregistering): Released all slaves [ 643.138537][ T8282] bond2 (unregistering): Released all slaves [ 643.201960][ T8282] bond3 (unregistering): Released all slaves [ 643.387372][T15739] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2900'. [ 643.403204][T15691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 643.433032][T15691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 643.461429][T15691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 643.494771][ T8282] tipc: Disabling bearer [ 643.538121][ T8282] tipc: Left network mode [ 643.547541][T15691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 643.577529][T15691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 643.652272][T15691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 643.665593][ T5617] usb 5-1: new full-speed USB device number 86 using dummy_hcd [ 643.699001][T15729] wg2: Caught tx_queue_len zero misconfig [ 643.763584][ T29] usb 4-1: USB disconnect, device number 30 [ 643.776415][ C0] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 643.821332][ T5617] usb 5-1: unable to get BOS descriptor or descriptor too short [ 643.839613][ T5617] usb 5-1: not running at top speed; connect to a high speed hub [ 643.860078][ T5617] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 643.872053][ T5617] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 643.883221][ T5617] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 643.893702][ T5617] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 643.926712][ T5617] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.934958][ T5617] usb 5-1: Product: syz [ 643.939733][ T5617] usb 5-1: Manufacturer: syz [ 643.944454][ T5617] usb 5-1: SerialNumber: syz [ 644.037643][T15691] hsr_slave_0: entered promiscuous mode [ 644.044551][T15691] hsr_slave_1: entered promiscuous mode [ 644.051403][T15691] debugfs: 'hsr0' already exists in 'hsr' [ 644.057619][T15691] Cannot create hsr debugfs directory [ 644.100357][ T9] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 644.121449][ T9] ath9k_htc: Failed to initialize the device [ 644.139828][ T29] usb 4-1: ath9k_htc: USB layer deinitialized [ 644.165309][ T5619] Bluetooth: hci4: command tx timeout [ 644.241629][T15741] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 644.306882][ T5617] usb 5-1: USB disconnect, device number 86 [ 644.439559][ T7742] udevd[7742]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 644.687745][T15752] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2903'. [ 644.819065][T15754] netlink: 'syz.3.2903': attribute type 10 has an invalid length. [ 644.950852][ T8282] hsr_slave_0: left promiscuous mode [ 644.989264][ T8282] hsr_slave_1: left promiscuous mode [ 645.156548][ T8282] batadv_slave_0: left promiscuous mode [ 645.176851][ T8282] veth1_vlan: left promiscuous mode [ 645.194458][ T8282] veth0_vlan: left promiscuous mode [ 645.261842][T15741] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2901'. [ 645.304796][ T5630] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 645.325557][ T5630] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 645.337558][ T5630] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 645.347677][ T5630] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 645.362158][ T5630] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 646.235630][ T5348] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 646.248379][ T5619] Bluetooth: hci4: command tx timeout [ 646.419648][ T5348] usb 5-1: unable to get BOS descriptor or descriptor too short [ 646.431621][ T5348] usb 5-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 646.455477][ T5348] usb 5-1: config 129 has an invalid interface number: 135 but max is 0 [ 646.496697][ T5348] usb 5-1: config 129 has an invalid interface number: 5 but max is 0 [ 646.531223][ T5348] usb 5-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 646.554966][ T5348] usb 5-1: config 129 has no interface number 0 [ 646.563023][ T5348] usb 5-1: config 129 has no interface number 1 [ 646.570949][ T5348] usb 5-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 646.573892][ T5277] 8021q: adding VLAN 0 to HW filter on device eth1 [ 646.657054][ T5348] usb 5-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 646.697834][ T5348] usb 5-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 646.713173][ T5348] usb 5-1: config 129 interface 135 has no altsetting 0 [ 646.748602][ T5348] usb 5-1: config 129 interface 5 has no altsetting 0 [ 646.819562][ T5348] usb 5-1: string descriptor 0 read error: -22 [ 646.828943][ T5348] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.928745][ T5348] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 646.955566][ T5348] usb 5-1: MIDIStreaming interface descriptor not found [ 647.427420][ T5348] usb 5-1: USB disconnect, device number 87 [ 647.455928][ T5619] Bluetooth: hci0: command tx timeout [ 648.054758][ T30] kauditd_printk_skb: 293 callbacks suppressed [ 648.054774][ T30] audit: type=1326 audit(1787682879.947:5864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15800 comm="syz.3.2909" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f689fd9e0d9 code=0x7ffc0000 [ 648.178936][ T30] audit: type=1326 audit(1787682879.997:5865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15800 comm="syz.3.2909" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f689fd9e0d9 code=0x7ffc0000 [ 648.234536][ T30] audit: type=1326 audit(1787682880.027:5866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15800 comm="syz.3.2909" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f689fd9e0d9 code=0x7ffc0000 [ 648.296762][ T30] audit: type=1326 audit(1787682880.027:5867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15800 comm="syz.3.2909" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f689fd9e0d9 code=0x7ffc0000 [ 648.344452][ T5619] Bluetooth: hci4: command tx timeout [ 648.379325][ T30] audit: type=1326 audit(1787682880.027:5868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15800 comm="syz.3.2909" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f689fd9e0d9 code=0x7ffc0000 [ 648.496231][ T30] audit: type=1326 audit(1787682880.027:5869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15800 comm="syz.3.2909" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7f689fd9e0d9 code=0x7ffc0000 [ 648.555861][ T30] audit: type=1326 audit(1787682880.027:5870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15800 comm="syz.3.2909" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f689fd9e0d9 code=0x7ffc0000 [ 648.592322][ T30] audit: type=1326 audit(1787682880.027:5871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15800 comm="syz.3.2909" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f689fd9e0d9 code=0x7ffc0000 [ 648.643577][ T30] audit: type=1326 audit(1787682880.027:5872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15800 comm="syz.3.2909" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f689fd9e0d9 code=0x7ffc0000 [ 648.678254][T15812] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2910'. [ 648.701655][ T30] audit: type=1326 audit(1787682880.027:5873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15800 comm="syz.3.2909" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f689fd9e0d9 code=0x7ffc0000 [ 648.835629][T15815] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2911'. [ 648.892390][T15812] binder: 15811:15812 ioctl c0306201 0 returned -14 [ 649.082991][T15830] loop4: detected capacity change from 0 to 7 [ 649.120784][T15830] loop4: [ 649.132464][T15830] loop4: partition table partially beyond EOD, truncated [ 649.312703][T15764] bridge0: port 1(bridge_slave_0) entered blocking state [ 649.338951][T15764] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.348029][ T24] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 649.363650][T15764] bridge_slave_0: entered allmulticast mode [ 649.386797][T15764] bridge_slave_0: entered promiscuous mode [ 649.410187][T15764] bridge0: port 2(bridge_slave_1) entered blocking state [ 649.419006][T15764] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.427191][T15764] bridge_slave_1: entered allmulticast mode [ 649.436432][T15764] bridge_slave_1: entered promiscuous mode [ 649.525451][ T5619] Bluetooth: hci0: command tx timeout [ 649.532474][ T24] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 649.556452][T15691] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 649.565131][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 649.588787][T15691] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 649.608472][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.639421][ T24] usb 4-1: config 0 descriptor?? [ 649.641125][T15764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 649.664030][ T10] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 649.688390][T15764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 649.729527][T15691] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 649.753717][T15691] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 649.791061][T15691] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 649.836670][T15691] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 649.846455][ T10] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 649.857361][T15764] team0: Port device team_slave_0 added [ 649.863643][T15691] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 649.876759][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 649.893975][T15691] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 649.903393][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 649.920670][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 649.932428][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 649.946103][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.954348][ T10] usb 5-1: Product: syz [ 649.960527][ T10] usb 5-1: Manufacturer: syz [ 649.966015][ T10] usb 5-1: SerialNumber: syz [ 649.979894][T15764] team0: Port device team_slave_1 added [ 649.988734][ T10] usb 5-1: config 0 descriptor?? [ 649.997794][T15840] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 650.030882][ T10] usb 5-1: ucan: probing device on interface #0 [ 650.053109][ T10] usb 5-1: ucan: invalid in_ep MaxPacketSize [ 650.073884][ T10] usb 5-1: ucan: probe failed; try to update the device firmware [ 650.108753][T15855] syzkaller0: entered promiscuous mode [ 650.123378][T15833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 650.124660][T15855] syzkaller0: entered allmulticast mode [ 650.162588][T15833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 650.178547][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 650.183675][T15764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 650.198772][T15764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 650.200638][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 650.226425][T15764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 650.282254][ T24] usb 4-1: USB disconnect, device number 31 [ 650.294333][T15764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 650.308125][T15764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 650.336726][T15764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 650.499108][T15764] hsr_slave_0: entered promiscuous mode [ 650.512186][T15764] hsr_slave_1: entered promiscuous mode [ 650.519108][T15764] debugfs: 'hsr0' already exists in 'hsr' [ 650.524925][T15764] Cannot create hsr debugfs directory [ 650.715438][ T24] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 650.778750][T15871] loop5: detected capacity change from 0 to 7 [ 650.787776][T15871] Dev loop5: unable to read RDB block 7 [ 650.793528][T15871] loop5: AHDI p2 [ 650.801051][T15871] loop5: partition table partially beyond EOD, truncated [ 650.896855][ T24] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 650.927308][ T24] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 650.949431][T15691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 650.949963][ T24] usb 4-1: can't read configurations, error -61 [ 651.028973][T15691] 8021q: adding VLAN 0 to HW filter on device team0 [ 651.055045][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.062580][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 651.103302][ T3365] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.110622][ T3365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 651.128888][ T24] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 651.296158][ T24] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 651.338487][ T24] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 651.355591][ T24] usb 4-1: can't read configurations, error -61 [ 651.375790][ T24] usb usb4-port1: attempt power cycle [ 651.435602][T15764] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 651.451626][T15764] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 651.461146][T15764] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 651.480173][T15764] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 651.502035][T15764] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 651.514346][T15764] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 651.533307][T15764] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 651.554688][T15764] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 651.605472][ T5619] Bluetooth: hci0: command tx timeout [ 651.638659][ T29] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 651.702140][T15691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 651.727962][ T24] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 651.771526][ T24] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 651.792493][ T24] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 651.810300][ T24] usb 4-1: can't read configurations, error -61 [ 651.823810][ T29] usb 2-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 651.841288][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 242, changing to 11 [ 651.856521][ T29] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 651.878267][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.888065][T15691] veth0_vlan: entered promiscuous mode [ 651.895020][ T29] usb 2-1: config 0 descriptor?? [ 651.916558][T15764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 651.969270][ T24] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 651.978446][T15691] veth1_vlan: entered promiscuous mode [ 652.005639][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 652.016384][ T24] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 652.033085][ T24] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 652.042066][ T24] usb 4-1: can't read configurations, error -61 [ 652.049207][ T24] usb usb4-port1: unable to enumerate USB device [ 652.058900][T15764] 8021q: adding VLAN 0 to HW filter on device team0 [ 652.084937][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.092218][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 652.121389][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.128678][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 652.143635][T15884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 652.190450][T15884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 652.263835][T15691] veth0_macvtap: entered promiscuous mode [ 652.339633][T15691] veth1_macvtap: entered promiscuous mode [ 652.483393][ T5605] usb 5-1: USB disconnect, device number 88 [ 652.553550][T15691] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 652.630035][T15691] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 652.654847][T15910] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2923'. [ 652.708740][T15910] netlink: 'syz.4.2923': attribute type 10 has an invalid length. [ 652.731765][T15910] bridge0: port 2(bridge_slave_1) entered disabled state [ 652.739591][T15910] bridge0: port 1(bridge_slave_0) entered disabled state [ 652.766246][T15910] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.773625][T15910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 652.781295][T15910] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.788552][T15910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 652.819801][T15910] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 652.904507][T15764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 652.965610][ T48] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.142517][T15919] ------------[ cut here ]------------ [ 653.149016][T15919] kvm_is_error_gpa(gpa) == kvm_is_error_hva(uhva) [ 653.149052][T15919] WARNING: arch/x86/kvm/../../../virt/kvm/pfncache.c:267 at __kvm_gpc_refresh+0x1510/0x1710, CPU#0: syz.4.2925/15919 [ 653.168652][T15919] Modules linked in: [ 653.174246][T15919] CPU: 0 UID: 0 PID: 15919 Comm: syz.4.2925 Tainted: G L syzkaller #0 PREEMPT(full) [ 653.185431][T15919] Tainted: [L]=SOFTLOCKUP SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 653.191922][T15919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 653.202167][T15919] RIP: 0010:__kvm_gpc_refresh+0x1510/0x1710 [ 653.209709][T15919] Code: c6 05 cb 4c 22 0f 01 48 c7 c7 83 3d 45 8e be 3c 04 00 00 48 c7 c2 60 41 02 8c e8 4b 27 62 00 e9 81 ee ff ff e8 51 76 86 00 90 <0f> 0b 90 bb ea ff ff ff 49 bf 00 00 00 00 00 fc ff df e9 4b f6 ff [ 653.229635][T15919] RSP: 0018:ffffc9000722f1c0 EFLAGS: 00010287 [ 653.235841][T15919] RAX: ffffffff8140c80f RBX: ffff888000000000 RCX: 0000000000080000 [ 653.243878][T15919] RDX: ffffc9001e039000 RSI: 0000000000000381 RDI: 0000000000000382 [ 653.247892][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.258293][T15919] RBP: ffffc9000722f350 R08: ffffffff9079c73f R09: 1ffffffff20f38e7 [ 653.269280][T15919] R10: dffffc0000000000 R11: fffffbfff20f38e8 R12: 1ffff92000e45e4c [ 653.277668][T15919] R13: ffff888040b9db60 R14: ffff888000000000 R15: ffffffffffffff01 [ 653.286507][T15919] FS: 00007f122a0af6c0(0000) GS:ffff888124cf1000(0000) knlGS:0000000000000000 [ 653.296488][T15919] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 653.305939][T15919] CR2: 0000200000000283 CR3: 00000000373cc000 CR4: 00000000003526f0 [ 653.314000][T15919] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000400 [ 653.322175][T15919] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 653.330281][T15919] Call Trace: [ 653.333603][T15919] [ 653.336658][T15919] ? kvm_xen_set_evtchn_fast+0x1f4/0x9a0 [ 653.342346][T15919] ? lock_acquire+0x106/0x350 [ 653.347151][T15919] ? kvm_gpc_refresh+0x31/0x110 [ 653.352078][T15919] ? __pfx___kvm_gpc_refresh+0x10/0x10 [ 653.358030][T15919] ? kvm_xen_set_evtchn+0x11e/0x220 [ 653.363299][T15919] kvm_gpc_refresh+0xe1/0x110 [ 653.368218][T15919] ? kvm_xen_set_evtchn+0x11e/0x220 [ 653.373488][T15919] kvm_xen_set_evtchn+0x14f/0x220 [ 653.379111][T15919] kvm_xen_hvm_evtchn_send+0x120/0x1e0 [ 653.384927][T15919] kvm_arch_vm_ioctl+0xfad/0x1a10 [ 653.390086][T15919] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 653.395680][T15919] ? __lock_acquire+0x683/0x2cf0 [ 653.400688][T15919] ? __lock_acquire+0x683/0x2cf0 [ 653.405782][T15919] ? unwind_next_frame+0x8f/0x2550 [ 653.410957][T15919] ? is_bpf_text_address+0x26/0x2b0 [ 653.416296][T15919] ? is_bpf_text_address+0x26/0x2b0 [ 653.421578][T15919] ? is_bpf_text_address+0x292/0x2b0 [ 653.427133][T15919] ? kernel_text_address+0xa5/0xe0 [ 653.427811][ T29] usbhid 2-1:0.0: can't add hid device: -71 [ 653.432335][T15919] ? __kernel_text_address+0xd/0x30 [ 653.443570][T15919] ? unwind_get_return_address+0x4d/0x90 [ 653.449566][T15919] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 653.455944][T15919] ? arch_stack_walk+0xfb/0x150 [ 653.460865][T15919] ? stack_trace_save+0xa9/0x100 [ 653.465902][T15919] ? __pfx_stack_trace_save+0x10/0x10 [ 653.471551][T15919] ? kasan_save_track+0x4f/0x80 [ 653.476644][T15919] ? stack_depot_save_flags+0x33/0x7f0 [ 653.482152][T15919] ? __lock_acquire+0x683/0x2cf0 [ 653.487260][T15919] ? kasan_save_track+0x4f/0x80 [ 653.492219][T15919] ? kasan_save_track+0x3e/0x80 [ 653.497172][T15919] ? kasan_save_free_info+0x40/0x50 [ 653.497216][ T29] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 653.502428][T15919] ? __kasan_slab_free+0x5c/0x80 [ 653.502468][T15919] ? kfree+0x1c5/0x650 [ 653.519392][T15919] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 653.525121][T15919] ? security_file_ioctl+0xc3/0x2a0 [ 653.531744][T15919] ? __se_sys_ioctl+0x47/0x170 [ 653.536635][T15919] ? do_syscall_64+0x166/0x520 [ 653.541460][T15919] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.547701][T15919] kvm_vm_ioctl+0x8f7/0xd30 [ 653.552275][T15919] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 653.557451][T15919] ? kasan_quarantine_put+0xbb/0x1f0 [ 653.562886][T15919] ? tomoyo_path_number_perm+0x219/0x5f0 [ 653.568638][T15919] ? tomoyo_path_number_perm+0x219/0x5f0 [ 653.574555][T15919] ? do_vfs_ioctl+0x116f/0x1530 [ 653.579732][T15919] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 653.584860][T15919] ? kvm_vcpu_ioctl+0xcd5/0xfd0 [ 653.589873][T15919] ? hook_file_ioctl+0x1f2/0x600 [ 653.594994][T15919] ? __fget_files+0x2a/0x420 [ 653.599717][T15919] ? __fget_files+0x2a/0x420 [ 653.604368][T15919] ? __fget_files+0x3a2/0x420 [ 653.609255][T15919] ? __fget_files+0x2a/0x420 [ 653.613902][T15919] ? bpf_lsm_file_ioctl+0x9/0x20 [ 653.617712][ T29] usb 2-1: USB disconnect, device number 98 [ 653.618955][T15919] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 653.629982][T15919] __se_sys_ioctl+0xfc/0x170 [ 653.634644][T15919] do_syscall_64+0x166/0x520 [ 653.639383][T15919] ? trace_irq_disable+0x3b/0x140 [ 653.644464][T15919] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.650655][T15919] ? clear_bhb_loop+0x70/0xc0 [ 653.655436][T15919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.661375][T15919] RIP: 0033:0x7f122919e0d9 [ 653.666127][T15919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 653.686115][T15919] RSP: 002b:00007f122a0af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 653.694825][T15919] RAX: ffffffffffffffda RBX: 00007f1229425fa0 RCX: 00007f122919e0d9 [ 653.703013][T15919] RDX: 0000200000000500 RSI: 00000000400caed0 RDI: 0000000000000006 [ 653.711120][T15919] RBP: 00007f1229235024 R08: 0000000000000000 R09: 0000000000000000 [ 653.716463][ T5619] Bluetooth: hci0: command tx timeout [ 653.719386][T15919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 653.732642][T15919] R13: 00007f1229426038 R14: 00007f1229425fa0 R15: 00007f122954fa48 [ 653.740760][T15919] [ 653.743849][T15919] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 653.751182][T15919] CPU: 0 UID: 0 PID: 15919 Comm: syz.4.2925 Tainted: G L syzkaller #0 PREEMPT(full) [ 653.762169][T15919] Tainted: [L]=SOFTLOCKUP [ 653.766531][T15919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 653.776631][T15919] Call Trace: [ 653.779951][T15919] [ 653.782917][T15919] vpanic+0x56d/0xa60 [ 653.787016][T15919] ? __pfx__printk+0x10/0x10 [ 653.791688][T15919] ? __pfx_vpanic+0x10/0x10 [ 653.796251][T15919] ? is_bpf_text_address+0x292/0x2b0 [ 653.801586][T15919] ? is_bpf_text_address+0x26/0x2b0 [ 653.806828][T15919] panic+0xc5/0xd0 [ 653.810605][T15919] ? __pfx_panic+0x10/0x10 [ 653.815089][T15919] __warn+0x315/0x4c0 [ 653.819126][T15919] ? __kvm_gpc_refresh+0x1510/0x1710 [ 653.824559][T15919] ? __kvm_gpc_refresh+0x1510/0x1710 [ 653.829894][T15919] __report_bug+0x276/0x570 [ 653.834609][T15919] ? check_path+0x21/0x40 [ 653.838987][T15919] ? __kvm_gpc_refresh+0x1510/0x1710 [ 653.844341][T15919] ? __pfx___report_bug+0x10/0x10 [ 653.849417][T15919] ? lockdep_unlock+0x5c/0xd0 [ 653.854152][T15919] ? __lock_acquire+0x13e8/0x2cf0 [ 653.859238][T15919] ? unwind_next_frame+0x8f/0x2550 [ 653.864403][T15919] ? __kvm_gpc_refresh+0x1510/0x1710 [ 653.869736][T15919] report_bug+0x16b/0x220 [ 653.874128][T15919] ? __kvm_gpc_refresh+0x1510/0x1710 [ 653.879479][T15919] ? __kvm_gpc_refresh+0x1512/0x1710 [ 653.884830][T15919] handle_bug+0x9c/0x200 [ 653.889127][T15919] exc_invalid_op+0x1a/0x50 [ 653.893686][T15919] asm_exc_invalid_op+0x1a/0x20 [ 653.898578][T15919] RIP: 0010:__kvm_gpc_refresh+0x1510/0x1710 [ 653.904534][T15919] Code: c6 05 cb 4c 22 0f 01 48 c7 c7 83 3d 45 8e be 3c 04 00 00 48 c7 c2 60 41 02 8c e8 4b 27 62 00 e9 81 ee ff ff e8 51 76 86 00 90 <0f> 0b 90 bb ea ff ff ff 49 bf 00 00 00 00 00 fc ff df e9 4b f6 ff [ 653.924217][T15919] RSP: 0018:ffffc9000722f1c0 EFLAGS: 00010287 [ 653.930330][T15919] RAX: ffffffff8140c80f RBX: ffff888000000000 RCX: 0000000000080000 [ 653.938337][T15919] RDX: ffffc9001e039000 RSI: 0000000000000381 RDI: 0000000000000382 [ 653.946342][T15919] RBP: ffffc9000722f350 R08: ffffffff9079c73f R09: 1ffffffff20f38e7 [ 653.954340][T15919] R10: dffffc0000000000 R11: fffffbfff20f38e8 R12: 1ffff92000e45e4c [ 653.962339][T15919] R13: ffff888040b9db60 R14: ffff888000000000 R15: ffffffffffffff01 [ 653.970347][T15919] ? __kvm_gpc_refresh+0x150f/0x1710 [ 653.975685][T15919] ? kvm_xen_set_evtchn_fast+0x1f4/0x9a0 [ 653.981477][T15919] ? lock_acquire+0x106/0x350 [ 653.986199][T15919] ? kvm_gpc_refresh+0x31/0x110 [ 653.991096][T15919] ? __pfx___kvm_gpc_refresh+0x10/0x10 [ 653.996603][T15919] ? kvm_xen_set_evtchn+0x11e/0x220 [ 654.001842][T15919] kvm_gpc_refresh+0xe1/0x110 [ 654.006555][T15919] ? kvm_xen_set_evtchn+0x11e/0x220 [ 654.011791][T15919] kvm_xen_set_evtchn+0x14f/0x220 [ 654.016871][T15919] kvm_xen_hvm_evtchn_send+0x120/0x1e0 [ 654.022398][T15919] kvm_arch_vm_ioctl+0xfad/0x1a10 [ 654.027459][T15919] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 654.032948][T15919] ? __lock_acquire+0x683/0x2cf0 [ 654.037928][T15919] ? __lock_acquire+0x683/0x2cf0 [ 654.042934][T15919] ? unwind_next_frame+0x8f/0x2550 [ 654.048082][T15919] ? is_bpf_text_address+0x26/0x2b0 [ 654.053317][T15919] ? is_bpf_text_address+0x26/0x2b0 [ 654.058543][T15919] ? is_bpf_text_address+0x292/0x2b0 [ 654.063860][T15919] ? kernel_text_address+0xa5/0xe0 [ 654.069006][T15919] ? __kernel_text_address+0xd/0x30 [ 654.074229][T15919] ? unwind_get_return_address+0x4d/0x90 [ 654.079883][T15919] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 654.086107][T15919] ? arch_stack_walk+0xfb/0x150 [ 654.091005][T15919] ? stack_trace_save+0xa9/0x100 [ 654.095988][T15919] ? __pfx_stack_trace_save+0x10/0x10 [ 654.101386][T15919] ? kasan_save_track+0x4f/0x80 [ 654.106269][T15919] ? stack_depot_save_flags+0x33/0x7f0 [ 654.111758][T15919] ? __lock_acquire+0x683/0x2cf0 [ 654.116734][T15919] ? kasan_save_track+0x4f/0x80 [ 654.121612][T15919] ? kasan_save_track+0x3e/0x80 [ 654.126494][T15919] ? kasan_save_free_info+0x40/0x50 [ 654.131721][T15919] ? __kasan_slab_free+0x5c/0x80 [ 654.136689][T15919] ? kfree+0x1c5/0x650 [ 654.140873][T15919] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 654.146530][T15919] ? security_file_ioctl+0xc3/0x2a0 [ 654.151774][T15919] ? __se_sys_ioctl+0x47/0x170 [ 654.156578][T15919] ? do_syscall_64+0x166/0x520 [ 654.161388][T15919] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.167504][T15919] kvm_vm_ioctl+0x8f7/0xd30 [ 654.172063][T15919] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 654.177141][T15919] ? kasan_quarantine_put+0xbb/0x1f0 [ 654.182471][T15919] ? tomoyo_path_number_perm+0x219/0x5f0 [ 654.188130][T15919] ? tomoyo_path_number_perm+0x219/0x5f0 [ 654.193793][T15919] ? do_vfs_ioctl+0x116f/0x1530 [ 654.198685][T15919] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 654.203755][T15919] ? kvm_vcpu_ioctl+0xcd5/0xfd0 [ 654.208673][T15919] ? hook_file_ioctl+0x1f2/0x600 [ 654.213652][T15919] ? __fget_files+0x2a/0x420 [ 654.218265][T15919] ? __fget_files+0x2a/0x420 [ 654.222881][T15919] ? __fget_files+0x3a2/0x420 [ 654.227602][T15919] ? __fget_files+0x2a/0x420 [ 654.232221][T15919] ? bpf_lsm_file_ioctl+0x9/0x20 [ 654.237184][T15919] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 654.242246][T15919] __se_sys_ioctl+0xfc/0x170 [ 654.246873][T15919] do_syscall_64+0x166/0x520 [ 654.251499][T15919] ? trace_irq_disable+0x3b/0x140 [ 654.256559][T15919] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.262651][T15919] ? clear_bhb_loop+0x70/0xc0 [ 654.267362][T15919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.273285][T15919] RIP: 0033:0x7f122919e0d9 [ 654.277745][T15919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 654.297378][T15919] RSP: 002b:00007f122a0af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 654.305825][T15919] RAX: ffffffffffffffda RBX: 00007f1229425fa0 RCX: 00007f122919e0d9 [ 654.313821][T15919] RDX: 0000200000000500 RSI: 00000000400caed0 RDI: 0000000000000006 [ 654.321820][T15919] RBP: 00007f1229235024 R08: 0000000000000000 R09: 0000000000000000 [ 654.329819][T15919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 654.337815][T15919] R13: 00007f1229426038 R14: 00007f1229425fa0 R15: 00007f122954fa48 [ 654.345834][T15919] [ 654.349491][T15919] Kernel Offset: disabled [ 654.353828][T15919] Rebooting in 86400 seconds..