last executing test programs: 9.300117641s ago: executing program 4 (id=1067): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x40008001, 0x0, 0x4, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000001100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158dab05f9f37e094750e60465cc7c24a854ea51fc24580c40dffc8a355e38aa7f19ce94e116cea269988452ab369df6f891abff9f24c0a00a0f4e86ac7017ebea935728bc6103d6bd5ee3ed5ab3b88f5fcc6d9e0fd7bba62b0cfc3f8b938dc6f9195c1f695088d745523e40464dd6f0f0fb8150d6b452d0be3b952a7c2c520bc6ebe018a6a7f32292d22f575", 0xbd}], 0x1, &(0x7f0000000180)}], 0x1, 0x20040800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1}, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, 0x0, 0x0) r7 = syz_usb_connect(0x6, 0x24, &(0x7f0000000b00)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYRES16=r4, @ANYRES32=r2], 0x0) syz_usb_control_io$uac1(r7, 0x0, &(0x7f0000000580)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, 0x0, 0xa6c3, 0x0) fcntl$setlease(r8, 0x400, 0x0) lsetxattr$system_posix_acl(0x0, &(0x7f0000000340)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) r9 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r9, 0x720, &(0x7f0000000140)={0x1, 0x2, 0x0, 0x0}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sysvipc/msg\x00', 0x41, 0x0) r10 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000001200010300000000fefffdff000803004e250100000000000000000001000000fdffffff001000800400"/56, @ANYRES32=0x0, @ANYBLOB="0100000000000000fefffff000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) 8.413265142s ago: executing program 1 (id=1068): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="7b18000000000000180a02200000000000000000000000009500000000bb0000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffb7}, 0x25) 8.326013162s ago: executing program 1 (id=1069): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e00000010000ffffffffffffff800000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) 8.208046243s ago: executing program 1 (id=1070): bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0xff08, 0x0) keyctl$reject(0x14, 0x0, 0x1ffffffd, 0x8000000000000001, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) read$alg(r3, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000007e40)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="4789d3aefc1a4d03345aed327be33c28c8dc0d", 0x13}, {&(0x7f00000002c0)="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", 0xfed}, {&(0x7f0000000100)="f8", 0x1}], 0x3, 0x0, 0x0, 0x20000000}], 0x1, 0x20040894) open(&(0x7f0000000200)='./file0\x00', 0x441201, 0x84) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x82}, 0x20040044) r4 = socket(0x10, 0x80002, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_GROUP={0x8, 0x1b, 0x3}]}, 0x40}, 0x1, 0x0, 0x4000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) sendmsg$nl_route(r4, 0x0, 0x0) r6 = io_uring_setup(0x160f, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r6, 0xf, &(0x7f0000001580)={0x2, 0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/168, 0xa8}, {0x0}], &(0x7f0000001540)=[0x2, 0x0, 0x4]}, 0x20) 6.876268386s ago: executing program 2 (id=1074): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x840000000002, 0x3, 0xfa) getsockname$inet(r2, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xe}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x4000) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@deltfilter={0x80, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xfff1, 0xc}, {0xd, 0xffff}, {0xf, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x50, 0x2, [@TCA_FLOWER_KEY_CT_STATE_MASK={0x6, 0x5c, 0x8}, @TCA_FLOWER_KEY_IPV4_DST_MASK={0x8}, @TCA_FLOWER_KEY_UDP_DST_MASK={0x6}, @TCA_FLOWER_KEY_PORT_DST_MAX={0x6, 0x5a, 0x4e21}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14, 0x20, [0xff, 0x0, 0xffffffff]}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x3, 0x1e, 0xff000000}, @TCA_FLOWER_KEY_SCTP_DST={0x6}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x1}]}}]}, 0x80}}, 0x40080) mkdir(&(0x7f00000000c0)='./file0\x00', 0x22) syz_io_uring_setup(0x184f, &(0x7f0000000640)={0x0, 0xcbe6, 0x1000, 0x3, 0xc1}, &(0x7f00000006c0), &(0x7f0000000700)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000300)={0x6, 0x2, 0x4}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES8=r0], 0x50) unshare(0x62040200) socket$inet6(0xa, 0x800000000000002, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfb, 0x200000}, 0xc) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="300000001000010028bd7000f9dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15888804000700000008000dfb1048770008001b0008b500"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001000000125bd7000f6dbdf2500000000", @ANYRES32=0x0], 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r7, 0x0, 0xffffffffffffffff, 0x1}) unshare(0x40000080) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000280)=0x7, 0x4) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r6, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r9, 0x0, 0x0, 0x0, 0x5, 0x2de07c, 0x334e8b}) 6.12211817s ago: executing program 4 (id=1076): connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0600000004000000008000008a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00e2d6000200"/18], 0x50) 5.945663872s ago: executing program 4 (id=1077): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = getpid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x34) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000ec8000/0x3000)=nil}) connect$unix(r2, &(0x7f0000000640)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(0x0, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000580)={0x48, 0x2, r6}) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_CONTINUE(r7, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r8 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r8, 0xc0606610, &(0x7f00000003c0)={0x60, 0x0, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0, &(0x7f00000000c0)=[{0x8138}], 0x1, 0x9, 0x20, 0x0, 0x0, 0x3f}) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, 0x0, 0x0) r9 = syz_pidfd_open(r0, 0x0) setns(r9, 0x24020000) syz_clone(0xdda2b180, 0x0, 0x80, 0x0, 0x0, 0x0) 5.023792297s ago: executing program 2 (id=1080): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) msgctl$MSG_STAT(0x0, 0xb, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x4000) r3 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x7c, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2b24d, 0x11a20}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x48, 0x16, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x40, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x3ff, 0x6fb, 0xffffffff, 0x88a8}}, {0x14, 0x1, {0xe39, 0x3f, 0xd, 0x8100}}, {0x14, 0x1, {0x6, 0x6af, 0x7, 0x88a8}}]}]}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc1}, 0x0) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_open_dev$swradio(0x0, 0x0, 0x2) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}]}) msgget$private(0x0, 0x4a0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000010000504000000ef0000000000000000", @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c0002800600010000000000"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) 4.429387622s ago: executing program 1 (id=1083): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000034709d405f0530c6acb60102030109021200fd000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000400)=ANY=[@ANYBLOB="a001fcffff0faf"], 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000400)=ANY=[@ANYBLOB="a001fcffff0faf"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000540)={0x20, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000540)={0x20, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000900)={0x1c, &(0x7f0000000780)={0x20, 0xe}, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000900)={0x1c, &(0x7f0000000780)={0x20, 0xe}, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000180)={0x40, 0xb, 0x4, "4ce96999"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000029c0), &(0x7f0000003880), 0x0) 3.9030704s ago: executing program 4 (id=1085): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PROBE_CLIENT(r2, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r1, 0x10, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x742, 0x1c}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x38}}, 0x1) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xb0}]}, 0x28}}, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000600)={0x2, @pix={0x80000000, 0xbb46, 0x34324142, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}}) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000100)={0x410000, 0x2, 0x2}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000000)=0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f00000007c0)="3c0845b897d033cf13ae4030d481dff6f52df67a7c064a84d295f0b1e54c0181cca65a76b07f3c0a648a89457416981e50bc97cb268390a22a2786e0903b524f6e17ebd9678ef510e706723bee7d2da52ddb502735159a9be4daf74dd6ea878165bd7640676b9727bf14b3b84a088445bf631d54ac03e7b978563c0e10bb99a5d89031d324afcb068c42e36e4a50b276552cbe460dce2208ee616f725d05288ece175619ef8484ed1861ff59cb047ebbad11dc84282ba737e629d5431459ba0e6f1efb84a12447a007055d", 0xcb) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r7, @ANYBLOB="05005b0016000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000005000000003a00000008000300", @ANYRES32=r7, @ANYBLOB="05005b"], 0x24}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000070000000060a010400000000000000000100000008000b400000000048000480440001800b000100657874686472000034000280080001400000000c080003400000000008000408000000220500020007000000080006400000000208000540000000200900010073797a30"], 0xe4}}, 0x0) 3.033238995s ago: executing program 2 (id=1088): openat$vnet(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x240448c1) landlock_create_ruleset(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000280)={r4, 0x1}, &(0x7f00000002c0)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r9, 0xc040aed5, &(0x7f0000000000)={0xfee00000, 0x10000}) syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x2040, 0x0) ioctl$SNDCTL_DSP_SYNC(r10, 0x5001, 0x0) mlock(&(0x7f0000426000/0x1000)=nil, 0x1000) 2.24653189s ago: executing program 0 (id=1090): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="6d0500000000fd8f71103d00000003016e050000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) 2.107339451s ago: executing program 4 (id=1091): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x6, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"6b2f3b6a399bc2f1af59106a2a1667f8", 0x0, 0x0, {0x9, 0x9d5f}, {0xd, 0x41}, 0xffff, [0xde99, 0x8e9, 0xc, 0x1d, 0x43, 0xfffffffffffffffb, 0x28, 0x1, 0x34e0000, 0x7ffffffffffffffb, 0x9, 0x5, 0x6, 0x8, 0x7, 0x4]}) write$cgroup_subtree(r4, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x11fe726f7e78fcf0}, 0x28) close(r2) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r3, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000080), &(0x7f0000000100)=0xe) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xd5}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x8000) 1.958827672s ago: executing program 0 (id=1092): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000003dc0)={0x0, 0x0, &(0x7f0000003d80)={&(0x7f0000000480)={0x44, 0x2, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x15, 0x1, @multicast1}, {0x8, 0x2, @rand_addr=0x64010101}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x29}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4040050) (fail_nth: 4) 1.54433678s ago: executing program 1 (id=1093): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd01000000000014000000600008fff50000000000a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 1.219607887s ago: executing program 0 (id=1094): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x3, 0x20) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) eventfd2(0x1, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f0000001ac0)={[0x1]}, 0x8) r4 = eventfd2(0x8000, 0x0) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000001d40), 0x606180, 0x0) io_submit(0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e23, @loopback}}, 0x0, 0x20000000005, 0x4a}, 0xd8) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x240087f9, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) close(r2) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000002040)=ANY=[@ANYRES64, @ANYRES16=r6, @ANYBLOB="010025bd7000fedbdf25010000000000000002410000001000137564703a73797a3000000000ecfd9552e846b87f2397af8358ef7ddc6816692eb00fb4f8a2efdeef9cd974621e067b61e9a46885defd9bdf64f340bd2ffe492afa5866ba3b2a8228d4bddca9932e3ac4a13a4e27cc23b5bde46bd7fc9600"/132], 0x2c}}, 0x10) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010025bd7000fddbdfea0e996c1a2e7d5858388055a72d2506000000200001800800030006000000140002007665"], 0x34}, 0x1, 0x0, 0x0, 0x8094}, 0x90) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000004, 0x11, 0xffffffffffffffff, 0xabd6b000) sendto$inet(0xffffffffffffffff, &(0x7f0000000280)="4bb4f3db20e10376debe2997654af37ca208b96371309eaf4ff5285209aefa0c9db014ef250589794c406b03fab6e4814df36b3c3fee4f974b0e750bb3237198a955223d55397a4098edc1da3fceaf36e77d25030556f72b044d64272033e511324cd24f01bcd16d185e56b7d7103ae13aa9d1e466c64f02d299e990f28ac38efec86b311ff095bfaa8c6bee83d28bdbadf36d11e34f8a846e8368c71fd742b0c86f482aae9f53f68512b88834276ed50aabd727634b874ddd943cde0ec4f8c08488856c", 0xc4, 0x48004, &(0x7f0000000380)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9) bind$inet6(r3, 0x0, 0x0) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES16=r4, @ANYRESDEC, @ANYRESOCT=r1, @ANYRES16=r1, @ANYRES32=r6, @ANYRES8=r6], 0x13a}, 0x1, 0x0, 0x0, 0x8061}, 0x48080) 1.195032084s ago: executing program 3 (id=1095): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000240a64000000060a0b0400000000000000000200000038000480340001800b00010065787468647200002400028008000740000000050800064000000002050002000000000008000340000000000900010073797a30000000000900020073797a32"], 0x8c}}, 0x0) 1.130093032s ago: executing program 2 (id=1096): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000640)=@bridge_newneigh={0x30, 0x1c, 0x1, 0x703d29, 0x25dfdbfb, {0x7, 0x0, 0x0, r1, 0x80, 0x7e, 0xa}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, @NDA_VLAN={0x6, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x91}, 0x4046558) 1.065855741s ago: executing program 0 (id=1097): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000200)={0x1d, r1}, 0x10) write(r2, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) 952.338246ms ago: executing program 3 (id=1098): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000032000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) 924.056891ms ago: executing program 3 (id=1099): ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) writev(r0, &(0x7f0000000440)=[{&(0x7f00000005c0)="f81ac0798ce6b2527603ad62a2911f1174b68b43a082cc8e9089a2dfb564fde039917e023d2bb7c8fd2c1f8122fa5269ff13035de7ca8d972ec8539052b1ee94c117f1fc858e9832babc51d2ceb73cebfc592d00d54a56380b8e1c6400e475f68762e5f31132d003cac0a8217e782f01f0d11badf2cdffeb999a254e01b61498fe8175a75fad9b8a7be60cc66921318c2f9f7a3fd26fb07c0ed76df1a6186a90c05ff16f7d5fee5af5a2dce911ee00bf6385e6f68ccc253d63babe31c1ba28ae083517fd88f3e867b4f97a86ae4f37217fdf2f93952ae399bed8b07fe5cb79d516828814", 0xe4}, {&(0x7f0000000800)="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", 0x1000}, {&(0x7f0000000100)="c124f64d8197281db82ce958c9c93b24d259348b9e5183bfc0f6ef04e9098b007e138ce07f7d63e563c548cd4c79989b3b3b29be1ca4261508fefbb9b82300a05fcb96450c880227", 0x48}, {&(0x7f0000001800)="f5a847af833c1c0eee1b13acc829bc697fcf816c7a821fedbbe56b60f594d78ec971502c3acab87c5e50a9c1229a63ad5d6c860ae328cce6f351eb1d0a9a014b245a97620b786595f6954e9dc9a79097e199b4d792aa56009279da07c85094f76973fad6cc66054184a78489510e27c7ea007151ba047b9c343fbe59f6adc9d0348681c80f7bfdca1dea6a1b9080956f4796c1db735bf66ef425fc996d64e95c33d7de5b9bd39ee046b1b92abe8c09e0858da589daea3d7dc010bf860c673528b560ac4d942726c1e56b87da5114fa0f0b0119d472c0bb98966dba39bb", 0xdd}, {&(0x7f00000002c0)="2e7b0908089ac0aea98ed36582006d481d98f0c6a0b198d9c282e927e339ffdad85cef91e1cbb5ba3d871377b6eb143816621f8c09586f50122ef5cfb411d40e21518a97beb1cbb2d95e0de9cc12901cc826597f0a8cb98734f2d6be7e71ee150e", 0x61}], 0x5) (async) socket$xdp(0x2c, 0x3, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x7ffd, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa13, 0xffffffff}, 0x0) (async) syz_open_dev$sndpcmc(0x0, 0x0, 0x42c200) (async) syz_open_procfs(0xffffffffffffffff, 0x0) syz_emit_ethernet(0xa8, &(0x7f00000004c0)=ANY=[], 0x0) (async) r3 = syz_open_procfs(0x0, 0x0) mount_setattr(r3, 0x0, 0x800, &(0x7f0000000080)={0x9, 0x100070, 0x40000}, 0x20) (async) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_SETCONFIGURATION(r4, 0x80045505, &(0x7f0000000000)=0x1) (async) pipe2$watch_queue(0x0, 0x80) r5 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r5, 0x80106f53, &(0x7f0000000400)={0x4, &(0x7f00000006c0)=[{0x3a, '\x00', @data=0x13a6, 0x8}, {0xc, '\x00', @buffer={"1a1ce1ba1b497db100000400", 0x20}, 0x33}, {0x2b, '\x00', @data=0x7c7, 0x9b10}, {0x3e, '\x00', @st={0x4, [{0x2, @svalue=0x80000000d}, {0x1, @svalue=0x7}, {0x1, @svalue=0x4}, {0x2, @svalue}]}, 0x5}]}) process_vm_writev(0x0, &(0x7f0000000000), 0x0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) (async) r6 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f00000004c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x80, 0x1c, {0x1, 0x800, 0x3, 0x35c, 0xc, 0x8, 0xff, 0x0, 0x81, 0x4401, 0x401, 0x40}}, 0x0, 0x0, 0x0, 0x0}) (async) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r7, 0x80015b12, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="01032757c38d085641a726"], 0x20}, 0x1, 0x0, 0x0, 0x20040845}, 0x48d4) 866.292367ms ago: executing program 1 (id=1100): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x3e, 0x208604) r3 = syz_usb_connect$cdc_ecm(0x0, 0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001020000402505a1a440000102030d0902"], 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f01"], 0x0) syz_usb_disconnect(r3) syz_usb_disconnect(r2) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058a"], 0x0) syz_usb_control_io$cdc_ecm(r4, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r3) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000000300)=[{{&(0x7f00000001c0)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/28, 0x1c}], 0x2, &(0x7f0000000240)}, 0x5}], 0x1, 0x2, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="4fa2ac505748efddbacfc612e72df86d2eb909ffe1d63b215124d7dcc075bf9f57feb47c67474e2c112ba0ac0cb62cfdfaa63a04d2f41db6de26b0c521e4f52909d824dcccf532cc230fdce980c2d1c6dd27b3af50c2fe3f442c988aa39fc201cd288e79669e0411083681", 0x6b}, {&(0x7f0000000400)="f95192047c282d74b93da92ab6265c58cd4c483f12484cd25bb6ba73ac0eccc3b3c04da09a7f8afc0116362faefd2074a64c6b45bd2e27ee7d1763d5b3f0dda7257a9efd6b7bdf4be5c14416e962aff466483135f7147da30eda961f8e75c8c954efd72d4563adb0f747fb", 0x6b}], 0x2, &(0x7f0000000480)}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000200000000000000000000109022400"], 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x189802) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) syz_io_uring_setup(0x498, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x0, 0x272}, &(0x7f0000000340), &(0x7f0000000040)) 811.80556ms ago: executing program 0 (id=1101): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) eventfd(0x5ef) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000180)=0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "00009200000000000000000000000058b200"}) r2 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(morus1280-avx2)\x00'}, 0x58) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$kcm(0x11, 0x3, 0x0) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r13, {0x5, 0x4}, {}, {0x8, 0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb, [{0xff, 0x7, 0xc, 0x5, 0x2, 0x5}]}, [{0x2, 0x9c, 0x81, 0x6, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x80000001, 0x8, 0x101, 0x3}, {0x3, 0x9, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x8}, {0x3, 0x4, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0x0, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x0, 0xffffffff}, {0x5, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0xffff997c, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x5, 0x2, 0xc, 0x8, 0x9, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x9}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0xffffff81, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x81, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0x9}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001}, {0x0, 0x6, 0x8000, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0xad, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53ce, 0x3}, {0xffffff81, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x6, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x3ff, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x4, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x8000, 0x7, 0x9}, {0xff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x4, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x26c0, 0xff, 0x52e2}, {0x0, 0x9, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0xffff, 0xfffffffd, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b5}, {0xa24b, 0x947d, 0x3, 0x4, 0x80000000, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x6}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x0, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x3, 0xffe00000, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0x7, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x7, 0x7}, {0x20000006, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x5, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x9, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x4, 0x7, 0x4, 0x78d, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7c0, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x4}, {0x5}, {0x4}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x5}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f0000000600), 0x56) 811.490019ms ago: executing program 2 (id=1102): r0 = syz_io_uring_setup(0x3f36, &(0x7f0000000000)={0x0, 0x961e, 0x1000, 0x0, 0x2ab}, &(0x7f0000000080), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[r0], 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000003dc0)={0x0, 0x0, &(0x7f0000003d80)={&(0x7f0000000480)={0x44, 0x2, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x15, 0x1, @multicast1}, {0x8, 0x2, @rand_addr=0x64010101}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x29}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4040050) 779.648164ms ago: executing program 4 (id=1103): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000529000/0x2000)=nil, 0x2000, 0x16) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x80054) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0xa0000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x2, 0x8}}, 0x20) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x42) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x50483, 0x21401}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_LINK={0x8, 0x1, r5}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20048044}, 0x24000000) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001080)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808ff9500000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 721.809092ms ago: executing program 3 (id=1104): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000040000701feffffff02000000017c0000040042800c00018006000600800a000014000280100014800c0009"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0x80) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newnexthop={0x2c, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0x14, 0x2, [{0x1, 0x4}, {0x0, 0x79}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000fc0), 0xa01) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r3, 0xc0a85352, &(0x7f0000000380)={{0x0, 0x10}, 'port0\x00', 0xe6, 0x6, 0x0, 0x10001, 0x4, 0xb3b, 0x5, 0x0, 0x3, 0x9}) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000007c0), r2) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c050000", @ANYRES16=r4, @ANYBLOB="0100000000000001000001000000080007000000000014000200776730000000000000000000000000001c05088068000080380004000a004e2100000007fc000000000000000000000000000000570100001400040002004e207f000001000000000000000004000980240001000000000000000000000000000000000000000000000000000000000000000000060005"], 0x54c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 664.28147ms ago: executing program 2 (id=1105): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000100)={0x6, 'dvmrp1\x00', {0x2}, 0x7}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)}, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfe73, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x0, 0xc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, 0x8, 0x0, 0x0}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0x8800) mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept$alg(r3, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000600), 0xfec8) recvmmsg(r4, &(0x7f0000001d40)=[{{0x0, 0x0, &(0x7f0000001a00)=[{0x0}], 0x1}, 0x80000000}], 0x1, 0x100, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002f00)='fdinfo\x00') syz_open_procfs$namespace(0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000004c0)={r5, r5, 0x9, 0x0, @val=@netkit={@void, @value=r5}}, 0x1c) setsockopt$packet_int(r6, 0x107, 0x3, 0x0, 0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x6, 0x0, 0x0, "5debca561a5fbf61048955f6f876b2ff"}) r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r7, r7, r7}, 0x0, 0x0, 0x0) 566.543631ms ago: executing program 3 (id=1106): socket$netlink(0x10, 0x3, 0xc) r0 = socket$igmp(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0) connect$inet6(r1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000003c0), 0x3) getsockopt$bt_hci(r1, 0x11a, 0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$key(0xf, 0x3, 0x2) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000d60500000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0x0) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, 0x0, 0x0) 201.461294ms ago: executing program 0 (id=1107): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000000)={0x200, 0x5}) r1 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)=""/21, 0x2b}], 0x1, 0x0, 0xfffffced}, 0x80) r2 = socket$kcm(0x1e, 0x4, 0x0) close(r1) r3 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x403, 0x2402) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r3, 0xc040564b, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x40040) ioctl$VIDIOC_OVERLAY(r3, 0x4004560e, &(0x7f0000000480)=0x9) r4 = openat$dir(0xffffffffffffff9c, 0x0, 0x80, 0x2) execveat(r4, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)={[&(0x7f0000000040)='8\xeb\xa4\xc0\xcfZ\rj\x00\x00\x00@\b\x01\x00\x00\x00']}, &(0x7f0000000440)={[&(0x7f0000000280)='/dev/v4l-subdev#\x00', &(0x7f00000006c0)='/dev/v4l-\xa3\x0f\x8e\f\x95\xcc\xbe:\x8a\xeb\xca\xaf\x18\x1c`G\xa9\xa0\x85F\x96\x85\x92\xef1C\x94\xf4\xc4\xc2=y\x89\x9e9\xb1\r\x95\x02#/F\xfd)\"22\xe4\xc9\xcb\x97\xa0!\x1b`\xcb\xd4X\xdd\xeb\x1buP\xaf9-\xa7\xbbC\x8f`\xef\x82e\xe8\xf1\xe36\x02=o\xab\xc4\xab\xcb\x83s\xce\xa99D\xa59\xce*X4p\x9c\x17\xe7-)\xdc\xe6\x99\x96g\b\a\xc4q\x14\x19h\x86\xc2\xcb\x91\xed\xbcD\x16\x19\xbf{\xa8-\xe1\x91\xd5\xf9\x91,\x16\xe3\x12u2|\xdc[(R+\x89Y\xc3\x96t\xba\xaf\xef\x85/\x19h', &(0x7f0000000300)='veth0_to_team\x00', &(0x7f0000000600)='\x00\x00\x00\x00\x00/\xfa\xca\xfe\x16\x1c\xef.B\x05?\xd2\x9a\xd9\xc9;A\xc5OJ\x92 Q~\x18\x16\xa0fl\xb3\xa5$\xf5L\xcf\x92\x02\xc0\x13\xd3\xa6b\xbb\x11\x81\xac\x9ble\xc6d\xb4\xaf\xff\xdc\a\x11t\xc8\xc5\x1a^\af\x18yo\x95\xdd5\xeb,\'&\xca\xc5VL\x01\r\b\xe0\xe1\x9e<\xa8r\x03\xa7\x8d61#\x01\a\xaa\xf8u0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="020c0000060000002cbd7000000000000000000000ff0300"/42], 0x30}}, 0x40) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xf, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(0xffffffffffffffff, 0x4068aea3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000000)={0x2108, r3}, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x8) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) chmod(&(0x7f0000000300)='./file0\x00', 0x104) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x78, 0x0, 0xfffffffffffffffc, {0x88, 0x0, 0x0, {0x4, 0x0, 0x0, 0xfffffffffffffffe, 0x8, 0x100000000000, 0x0, 0x0, 0x0, 0x4000, 0x3, 0xffffffffffffffff, r5, 0xffffffff, 0x20000000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x21, 0xffffffff, 0x58339298, 0x1002, 0x6, 0x0, 0x0, 0x0, 0x0, 0x40, 0x11}}, 0x50) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) kernel console output (not intermixed with test programs): gh-speed USB device number 20 using dummy_hcd [ 184.008782][ T797] usb 5-1: Using ep0 maxpacket: 32 [ 184.016513][ T797] usb 5-1: unable to get BOS descriptor or descriptor too short [ 184.026207][ T797] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.036869][ T797] usb 5-1: config 0 has no interfaces? [ 184.045364][ T797] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 184.055336][ T797] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.063501][ T797] usb 5-1: Product: syz [ 184.067998][ T797] usb 5-1: Manufacturer: syz [ 184.072775][ T797] usb 5-1: SerialNumber: syz [ 184.097974][ T797] usb 5-1: config 0 descriptor?? [ 184.498199][ T10] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 184.514537][ T7933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.536161][ T7933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.611447][ T7945] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 184.623306][ T797] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 184.688261][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 184.758134][ T797] usb 4-1: device descriptor read/64, error -71 [ 184.765790][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.778876][ T10] usb 1-1: config 0 has no interfaces? [ 184.825512][ T10] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 184.835151][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.840379][ T7947] loop2: detected capacity change from 0 to 7 [ 184.854680][ T7947] Dev loop2: unable to read RDB block 7 [ 184.864446][ T10] usb 1-1: config 0 descriptor?? [ 184.873473][ T7947] loop2: unable to read partition table [ 184.888220][ T7947] loop2: partition table beyond EOD, truncated [ 184.906158][ T7948] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 184.908083][ T7947] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 184.922883][ T7948] syzkaller1: entered promiscuous mode [ 184.922906][ T7948] syzkaller1: entered allmulticast mode [ 184.998349][ T797] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 185.128162][ T797] usb 4-1: device descriptor read/64, error -71 [ 185.247962][ T797] usb usb4-port1: attempt power cycle [ 185.622743][ T797] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 185.668949][ T797] usb 4-1: device descriptor read/8, error -71 [ 185.908853][ T797] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 185.972125][ T797] usb 4-1: device descriptor read/8, error -71 [ 186.100262][ T797] usb usb4-port1: unable to enumerate USB device [ 186.535069][ T7995] netlink: 4 bytes leftover after parsing attributes in process `syz.1.591'. [ 186.543977][ T797] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 186.557125][ T7995] bridge_slave_1: left allmulticast mode [ 186.563625][ T7995] bridge_slave_1: left promiscuous mode [ 186.569819][ T7995] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.582553][ T7995] bridge_slave_0: left allmulticast mode [ 186.588456][ T7995] bridge_slave_0: left promiscuous mode [ 186.594350][ T7995] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.629013][ T29] usb 5-1: USB disconnect, device number 20 [ 186.710261][ T797] usb 3-1: unable to get BOS descriptor or descriptor too short [ 186.744447][ T797] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 186.755667][ T797] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.796821][ T7999] fuse: Bad value for 'fd' [ 186.822541][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 186.822558][ T30] audit: type=1326 audit(1774333422.645:3485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7996 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2fd19c799 code=0x7ffc0000 [ 186.853407][ T797] usb 3-1: Product: syz [ 186.867539][ T797] usb 3-1: Manufacturer: syz [ 186.872437][ T797] usb 3-1: SerialNumber: syz [ 186.878681][ T30] audit: type=1326 audit(1774333422.645:3486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7996 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2fd19c799 code=0x7ffc0000 [ 186.932946][ T30] audit: type=1326 audit(1774333422.645:3487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7996 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2fd19c799 code=0x7ffc0000 [ 187.042803][ T30] audit: type=1326 audit(1774333422.645:3488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7996 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff2fd19c799 code=0x7ffc0000 [ 187.098973][ T30] audit: type=1326 audit(1774333422.645:3489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7996 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2fd19c799 code=0x7ffc0000 [ 187.172899][ T10] usb 1-1: USB disconnect, device number 17 [ 187.315713][ T30] audit: type=1326 audit(1774333422.645:3490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7996 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2fd19c799 code=0x7ffc0000 [ 187.397976][ T30] audit: type=1326 audit(1774333422.645:3491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7996 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2fd19c799 code=0x7ffc0000 [ 187.496272][ T30] audit: type=1326 audit(1774333422.645:3492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7996 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7ff2fd19c799 code=0x7ffc0000 [ 187.596906][ T797] usb 3-1: current rate 47898 is different from the runtime rate 48000 [ 187.611014][ T30] audit: type=1326 audit(1774333422.645:3493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7996 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2fd19c799 code=0x7ffc0000 [ 187.678583][ T30] audit: type=1326 audit(1774333422.645:3494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7996 comm="syz.4.592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2fd19c799 code=0x7ffc0000 [ 187.815450][ T5913] usb 3-1: USB disconnect, device number 14 [ 187.828138][ T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 187.981093][ T10] usb 4-1: New USB device found, idVendor=057b, idProduct=0000, bcdDevice= 0.00 [ 187.990662][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.003548][ T10] usb-storage 4-1:32.0: USB Mass Storage device detected [ 188.015448][ T10] usb-storage 4-1:32.0: Quirks match for vid 057b pid 0000: 1 [ 188.217421][ T10] usb 4-1: USB disconnect, device number 15 [ 188.799726][ T8024] netlink: 6 bytes leftover after parsing attributes in process `syz.3.598'. [ 189.002869][ T29] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 189.160586][ T29] usb 5-1: config 0 has an invalid interface number: 37 but max is 1 [ 189.169602][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 189.179257][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 189.188889][ T29] usb 5-1: config 0 has an invalid interface number: 255 but max is 1 [ 189.202752][ T29] usb 5-1: config 0 has no interface number 0 [ 189.211523][ T29] usb 5-1: config 0 has no interface number 1 [ 189.232966][ T29] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 189.261493][ T29] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 189.284056][ T29] usb 5-1: config 0 interface 255 has no altsetting 0 [ 189.305941][ T29] usb 5-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 189.321102][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.334265][ T29] usb 5-1: Product: syz [ 189.348301][ T29] usb 5-1: Manufacturer: syz [ 189.385777][ T29] usb 5-1: SerialNumber: syz [ 189.419016][ T29] usb 5-1: config 0 descriptor?? [ 191.250904][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 191.256992][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 191.263469][ T5835] Bluetooth: hci3: command 0x0406 tx timeout [ 191.263507][ T5834] Bluetooth: hci0: command 0x0406 tx timeout [ 191.269805][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 192.219424][ T29] usb 5-1: selecting invalid altsetting 0 [ 192.232897][ T29] usb 5-1: Could not set interface, error -22 [ 192.244451][ T29] usb 5-1: USB disconnect, device number 21 [ 192.918216][ T5875] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 193.068086][ T5875] usb 4-1: Using ep0 maxpacket: 8 [ 193.075075][ T5875] usb 4-1: config 0 has an invalid interface number: 97 but max is 0 [ 193.084922][ T5875] usb 4-1: config 0 has no interface number 0 [ 193.091535][ T5875] usb 4-1: too many endpoints for config 0 interface 97 altsetting 97: 97, using maximum allowed: 30 [ 193.102918][ T5875] usb 4-1: config 0 interface 97 altsetting 97 has 0 endpoint descriptors, different from the interface descriptor's value: 97 [ 193.116310][ T5875] usb 4-1: config 0 interface 97 has no altsetting 0 [ 193.125226][ T5875] usb 4-1: New USB device found, idVendor=102c, idProduct=6251, bcdDevice=7e.68 [ 193.134589][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.142789][ T5875] usb 4-1: Product: syz [ 193.147215][ T5875] usb 4-1: Manufacturer: syz [ 193.151866][ T5875] usb 4-1: SerialNumber: syz [ 193.159115][ T5875] usb 4-1: config 0 descriptor?? [ 193.379236][ T5875] gspca_main: etoms-2.14.0 probing 102c:6251 [ 193.442422][ T5875] usb 4-1: USB disconnect, device number 16 [ 193.647881][ T8099] tipc: Started in network mode [ 193.656246][ T8099] tipc: Node identity 96490c567c17, cluster identity 4711 [ 193.663868][ T8099] tipc: Enabled bearer , priority 0 [ 193.671494][ T8099] syzkaller0: entered promiscuous mode [ 193.677040][ T8099] syzkaller0: entered allmulticast mode [ 193.695769][ T8099] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.622'. [ 193.729650][ T8099] tipc: Resetting bearer [ 193.825732][ T8102] tipc: Enabled bearer , priority 0 [ 193.839400][ T8102] syzkaller0: entered promiscuous mode [ 193.849166][ T8102] syzkaller0: entered allmulticast mode [ 193.882425][ T8102] netlink: 212336 bytes leftover after parsing attributes in process `syz.1.623'. [ 193.951910][ T8102] tipc: Resetting bearer [ 194.169563][ T8116] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 194.183688][ T8116] [U] .Ž§hòÛ0FƒwZ,ßúiŒqg«ƒÛÒV2ÆôsO¾½ [ 194.190215][ T8116] [U] …¥` w*ÌÀBØBOLhUÇ [ 194.194738][ T8116] [U] w$·nÓ|ÝÅ#‘±%o.z\ï̧mРûàw [ 194.199919][ T8116] [U] ÁóàR{ê«¢þ S„ðì [ 194.206205][ T8116] input: syz0 as /devices/virtual/input/input10 [ 194.301249][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.307626][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.739019][ T10] tipc: Node number set to 3932032086 [ 195.031634][ T8124] syzkaller0: left promiscuous mode [ 195.037017][ T8124] syzkaller0: left allmulticast mode [ 195.547489][ T8130] binder: BINDER_SET_CONTEXT_MGR already set [ 195.553847][ T8130] binder: 8129:8130 ioctl 40046207 0 returned -16 [ 195.561223][ T8130] libceph: resolve '0.' (ret=-3): failed [ 195.567289][ T8130] binder: 8129:8130 ioctl 8002f515 200000000080 returned -22 [ 195.778827][ T8134] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 195.792516][ T8134] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 196.828260][ T10] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 196.951604][ T8100] tipc: Resetting bearer [ 196.992791][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.005360][ T10] usb 1-1: config 0 has no interfaces? [ 197.018835][ T10] usb 1-1: New USB device found, idVendor=0e67, idProduct=0002, bcdDevice=7f.0b [ 197.029902][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 197.038664][ T10] usb 1-1: Product: syz [ 197.043110][ T10] usb 1-1: Manufacturer: syz [ 197.047821][ T10] usb 1-1: SerialNumber: syz [ 197.172663][ T10] usb 1-1: config 0 descriptor?? [ 197.216327][ T8100] tipc: Disabling bearer [ 197.443231][ T8140] netlink: 16 bytes leftover after parsing attributes in process `syz.0.632'. [ 197.480511][ T8160] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.635'. [ 197.535240][ T8152] tipc: Enabled bearer , priority 0 [ 197.560067][ T5875] usb 1-1: USB disconnect, device number 18 [ 197.607282][ T8157] syzkaller0: entered promiscuous mode [ 197.675404][ T8157] syzkaller0: entered allmulticast mode [ 197.998624][ T8105] tipc: Resetting bearer [ 198.040704][ T8105] tipc: Disabling bearer [ 198.969574][ T8180] syzkaller0: entered promiscuous mode [ 199.659428][ T5882] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 200.228493][ T5882] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 200.415703][ T8209] tipc: Enabling of bearer rejected, failed to enable media [ 200.545818][ T8211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.656'. [ 200.642198][ T8214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.657'. [ 200.687634][ T8214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.657'. [ 200.776762][ T8216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.658'. [ 200.838832][ T8219] netlink: 'syz.3.659': attribute type 4 has an invalid length. [ 201.071874][ T8228] binder_alloc: 8227: binder_alloc_buf, no vma [ 201.188154][ T5875] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 201.411798][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 201.411816][ T30] audit: type=1326 audit(1774333437.275:3555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8238 comm="syz.0.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09b3f9c799 code=0x7ffc0000 [ 201.459261][ T8250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.667'. [ 201.472252][ T30] audit: type=1326 audit(1774333437.315:3556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8238 comm="syz.0.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f09b3f9c799 code=0x7ffc0000 [ 201.626343][ T5875] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 201.631023][ T30] audit: type=1326 audit(1774333437.315:3557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8238 comm="syz.0.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09b3f9c799 code=0x7ffc0000 [ 201.638060][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.666100][ T30] audit: type=1326 audit(1774333437.315:3558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8238 comm="syz.0.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f09b3f9c799 code=0x7ffc0000 [ 201.699921][ T30] audit: type=1326 audit(1774333437.315:3559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8238 comm="syz.0.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09b3f9c799 code=0x7ffc0000 [ 201.751818][ T30] audit: type=1326 audit(1774333437.315:3560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8238 comm="syz.0.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f09b3f9c799 code=0x7ffc0000 [ 201.774812][ T30] audit: type=1326 audit(1774333437.315:3561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8238 comm="syz.0.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09b3f9c799 code=0x7ffc0000 [ 201.802051][ T30] audit: type=1326 audit(1774333437.315:3562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8238 comm="syz.0.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f09b3f9c799 code=0x7ffc0000 [ 201.941364][ T30] audit: type=1326 audit(1774333437.315:3563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8238 comm="syz.0.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09b3f9c799 code=0x7ffc0000 [ 201.978235][ T5875] usb 3-1: Product: syz [ 202.032503][ T5875] usb 3-1: Manufacturer: syz [ 202.042986][ T5875] usb 3-1: SerialNumber: syz [ 202.078272][ T5875] usb 3-1: config 0 descriptor?? [ 202.092427][ T5875] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 202.138330][ T30] audit: type=1326 audit(1774333437.315:3564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8238 comm="syz.0.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f09b3f9c799 code=0x7ffc0000 [ 202.787931][ T5903] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 202.958130][ T5903] usb 2-1: Using ep0 maxpacket: 8 [ 202.967511][ T5903] usb 2-1: config index 0 descriptor too short (expected 32921, got 36) [ 202.988823][ T5903] usb 2-1: config 207 has too many interfaces: 215, using maximum allowed: 32 [ 203.010316][ T5903] usb 2-1: config 207 has an invalid descriptor of length 30, skipping remainder of the config [ 203.028310][ T5882] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 203.044847][ T5903] usb 2-1: config 207 has 0 interfaces, different from the descriptor's value: 215 [ 203.070693][ T5903] usb 2-1: config index 1 descriptor too short (expected 32921, got 36) [ 203.086810][ T5903] usb 2-1: config 207 has too many interfaces: 215, using maximum allowed: 32 [ 203.104783][ T5903] usb 2-1: config 207 has an invalid descriptor of length 30, skipping remainder of the config [ 203.127482][ T5903] usb 2-1: config 207 has 0 interfaces, different from the descriptor's value: 215 [ 203.149437][ T5903] usb 2-1: config index 2 descriptor too short (expected 32921, got 36) [ 203.166879][ T5903] usb 2-1: config 207 has too many interfaces: 215, using maximum allowed: 32 [ 203.188163][ T5882] usb 1-1: Using ep0 maxpacket: 16 [ 203.196788][ T8263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.205631][ T5903] usb 2-1: config 207 has an invalid descriptor of length 30, skipping remainder of the config [ 203.232650][ T5903] usb 2-1: config 207 has 0 interfaces, different from the descriptor's value: 215 [ 203.256490][ T8263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.272650][ T5903] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 203.294266][ T5882] usb 1-1: unable to get BOS descriptor or descriptor too short [ 203.298561][ T5875] gspca_stk1135: reg_w 0x0 err -110 [ 203.308294][ T5875] gspca_stk1135: serial bus timeout: status=0x00 [ 203.321674][ T5875] gspca_stk1135: Sensor write failed [ 203.334255][ T5875] gspca_stk1135: serial bus timeout: status=0x00 [ 203.336043][ T5903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.356647][ T5882] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 203.368333][ T5882] usb 1-1: can't read configurations, error -71 [ 203.379432][ T5903] usb 2-1: Product: syz [ 203.379455][ T5875] gspca_stk1135: Sensor write failed [ 203.389167][ T5875] gspca_stk1135: serial bus timeout: status=0x00 [ 203.395372][ T5903] usb 2-1: Manufacturer: syz [ 203.398113][ T5875] gspca_stk1135: Sensor read failed [ 203.406126][ T5875] gspca_stk1135: serial bus timeout: status=0x00 [ 203.412719][ T5875] gspca_stk1135: Sensor read failed [ 203.412896][ T8161] tipc: Resetting bearer [ 203.424335][ T5903] usb 2-1: SerialNumber: syz [ 203.429642][ T5875] gspca_stk1135: Detected sensor type unknown (0x0) [ 203.444923][ T5875] gspca_stk1135: serial bus timeout: status=0x00 [ 203.459813][ T5875] gspca_stk1135: Sensor read failed [ 203.469390][ T5875] gspca_stk1135: serial bus timeout: status=0x00 [ 203.481799][ T5875] gspca_stk1135: Sensor read failed [ 203.491280][ T5875] gspca_stk1135: serial bus timeout: status=0x00 [ 203.503927][ T5875] gspca_stk1135: Sensor write failed [ 203.513068][ T5875] gspca_stk1135: serial bus timeout: status=0x00 [ 203.524472][ T5875] gspca_stk1135: Sensor write failed [ 203.534535][ T5875] stk1135 3-1:0.0: probe with driver stk1135 failed with error -110 [ 203.597730][ T8161] tipc: Disabling bearer [ 203.642700][ T8255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.653746][ T8255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.674813][ T8255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.693818][ T8255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.722864][ T5903] usb 2-1: USB disconnect, device number 13 [ 203.928909][ T8268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.951508][ T8268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.969782][ T8268] netlink: 8 bytes leftover after parsing attributes in process `syz.1.670'. [ 203.987448][ T8269] netlink: 8 bytes leftover after parsing attributes in process `syz.1.670'. [ 204.080497][ T8273] fuse: Bad value for 'fd' [ 204.238149][ T5875] usb 2-1: new low-speed USB device number 14 using dummy_hcd [ 204.391761][ T5875] usb 2-1: config 0 has an invalid interface number: 6 but max is 2 [ 204.400031][ T5875] usb 2-1: config 0 has an invalid interface number: 176 but max is 2 [ 204.421010][ T5875] usb 2-1: config 0 has an invalid interface number: 214 but max is 2 [ 204.438307][ T5875] usb 2-1: config 0 has no interface number 0 [ 204.464219][ T5875] usb 2-1: config 0 has no interface number 1 [ 204.689781][ T5913] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 204.725624][ T5875] usb 2-1: config 0 has no interface number 2 [ 204.739546][ T8281] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 204.757424][ T5875] usb 2-1: too many endpoints for config 0 interface 214 altsetting 123: 238, using maximum allowed: 30 [ 204.781365][ T5875] usb 2-1: config 0 interface 214 altsetting 123 has 0 endpoint descriptors, different from the interface descriptor's value: 238 [ 204.863248][ T5875] usb 2-1: config 0 interface 214 has no altsetting 0 [ 204.870267][ T5913] usb 5-1: Using ep0 maxpacket: 16 [ 204.890590][ T5913] usb 5-1: config 0 has no interfaces? [ 204.921150][ T5913] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 204.936054][ T5875] usb 2-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=29.ac [ 204.962360][ T8283] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 205.167116][ T5913] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 205.366869][ T5913] usb 5-1: Manufacturer: syz [ 205.385263][ T5875] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.546144][ T5913] usb 5-1: config 0 descriptor?? [ 205.559983][ T5875] usb 2-1: config 0 descriptor?? [ 205.580950][ T5875] usb 2-1: can't set config #0, error -71 [ 205.598981][ T5875] usb 2-1: USB disconnect, device number 14 [ 205.676782][ T5913] usb 3-1: USB disconnect, device number 15 [ 205.866641][ T8295] netlink: 8 bytes leftover after parsing attributes in process `syz.2.681'. [ 205.912909][ T8277] netlink: 'syz.4.676': attribute type 1 has an invalid length. [ 205.948304][ T8277] 8021q: adding VLAN 0 to HW filter on device bond2 [ 205.957792][ T8277] netlink: 44 bytes leftover after parsing attributes in process `syz.4.676'. [ 205.987928][ T5875] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 206.329796][ T5875] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.340962][ T5875] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.457188][ T5875] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 206.469910][ T5875] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.492981][ T5875] usb 2-1: config 0 descriptor?? [ 206.949812][ T5875] hid-steam 0003:28DE:1142.0006: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 207.050355][ T5875] hid-steam 0003:28DE:1142.0006: Steam wireless receiver connected [ 207.087035][ T5875] hid-steam 0003:28DE:1142.0007: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 207.299331][ T5903] usb 5-1: USB disconnect, device number 22 [ 207.478884][ T8309] FAULT_INJECTION: forcing a failure. [ 207.478884][ T8309] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 207.528413][ T8309] CPU: 1 UID: 0 PID: 8309 Comm: syz.3.685 Tainted: G L syzkaller #0 PREEMPT(full) [ 207.528441][ T8309] Tainted: [L]=SOFTLOCKUP [ 207.528448][ T8309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 207.528458][ T8309] Call Trace: [ 207.528466][ T8309] [ 207.528473][ T8309] dump_stack_lvl+0xe8/0x150 [ 207.528505][ T8309] should_fail_ex+0x412/0x560 [ 207.528534][ T8309] prepare_alloc_pages+0x22a/0x650 [ 207.528563][ T8309] __alloc_frozen_pages_noprof+0x12f/0x380 [ 207.528590][ T8309] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 207.528615][ T8309] ? __pfx_policy_nodemask+0x10/0x10 [ 207.528641][ T8309] ? __lock_acquire+0x6b5/0x2cf0 [ 207.528665][ T8309] alloc_pages_mpol+0x232/0x4a0 [ 207.528690][ T8309] vma_alloc_folio_noprof+0xea/0x210 [ 207.528713][ T8309] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 207.528742][ T8309] do_pte_missing+0x1656/0x3490 [ 207.528779][ T8309] handle_mm_fault+0x1bec/0x3310 [ 207.528816][ T8309] ? handle_mm_fault+0xee/0x3310 [ 207.528848][ T8309] ? __pfx_handle_mm_fault+0x10/0x10 [ 207.528873][ T8309] ? follow_page_pte+0x841/0x1450 [ 207.528908][ T8309] ? __pfx_follow_page_pte+0x10/0x10 [ 207.528945][ T8309] __get_user_pages+0x165b/0x29d0 [ 207.529004][ T8309] __gup_longterm_locked+0x3db/0x1630 [ 207.529052][ T8309] gup_fast_fallback+0x1d82/0x22e0 [ 207.529080][ T8309] ? lruvec_stat_mod_folio+0x70/0x4b0 [ 207.529127][ T8309] ? __pfx_gup_fast_fallback+0x10/0x10 [ 207.529157][ T8309] ? is_valid_gup_args+0x11f/0x200 [ 207.529186][ T8309] ? pin_user_pages_fast+0x4d/0xb0 [ 207.529213][ T8309] io_pin_pages+0xba/0x1b0 [ 207.529241][ T8309] io_sqe_buffer_register+0x268/0x1c90 [ 207.529286][ T8309] ? rcu_is_watching+0x15/0xb0 [ 207.529312][ T8309] ? __pfx_io_sqe_buffer_register+0x10/0x10 [ 207.529341][ T8309] ? __kvmalloc_node_noprof+0x545/0x8a0 [ 207.529363][ T8309] ? io_sqe_buffers_register+0x12d/0x7e0 [ 207.529389][ T8309] ? iovec_from_user+0x1ba/0x250 [ 207.529413][ T8309] io_sqe_buffers_register+0x2fa/0x7e0 [ 207.529450][ T8309] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 207.529476][ T8309] ? __fget_files+0x3a0/0x420 [ 207.529500][ T8309] ? __fget_files+0x2a/0x420 [ 207.529527][ T8309] ? io_is_uring_fops+0xd/0x50 [ 207.529548][ T8309] __se_sys_io_uring_register+0x122a/0x19a0 [ 207.529578][ T8309] ? __pfx___se_sys_io_uring_register+0x10/0x10 [ 207.529604][ T8309] ? ksys_write+0x242/0x270 [ 207.529626][ T8309] ? __pfx_ksys_write+0x10/0x10 [ 207.529657][ T8309] do_syscall_64+0x14d/0xf80 [ 207.529677][ T8309] ? trace_irq_disable+0x3b/0x150 [ 207.529702][ T8309] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.529721][ T8309] ? clear_bhb_loop+0x40/0x90 [ 207.529743][ T8309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.529760][ T8309] RIP: 0033:0x7fa5b899c799 [ 207.529778][ T8309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 207.529793][ T8309] RSP: 002b:00007fa5b993b028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 207.529813][ T8309] RAX: ffffffffffffffda RBX: 00007fa5b8c15fa0 RCX: 00007fa5b899c799 [ 207.529826][ T8309] RDX: 00002000000002c0 RSI: 0000000000000000 RDI: 0000000000000005 [ 207.529837][ T8309] RBP: 00007fa5b993b090 R08: 0000000000000000 R09: 0000000000000000 [ 207.529848][ T8309] R10: 100000000000011a R11: 0000000000000246 R12: 0000000000000002 [ 207.529860][ T8309] R13: 00007fa5b8c16038 R14: 00007fa5b8c15fa0 R15: 00007fa5b8d3fa48 [ 207.529890][ T8309] [ 208.141723][ T30] kauditd_printk_skb: 382 callbacks suppressed [ 208.141741][ T30] audit: type=1326 audit(1774333444.005:3947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8315 comm="syz.3.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b899c799 code=0x7ffc0000 [ 208.173871][ T30] audit: type=1326 audit(1774333444.045:3948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8315 comm="syz.3.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b899c799 code=0x7ffc0000 [ 208.188647][ T5875] usb 2-1: reset high-speed USB device number 15 using dummy_hcd [ 208.196328][ T30] audit: type=1326 audit(1774333444.045:3949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8315 comm="syz.3.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b899c799 code=0x7ffc0000 [ 208.227525][ T8318] fuse: Bad value for 'fd' [ 208.232086][ T30] audit: type=1326 audit(1774333444.045:3950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8315 comm="syz.3.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa5b899c799 code=0x7ffc0000 [ 208.254559][ T30] audit: type=1326 audit(1774333444.045:3951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8315 comm="syz.3.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b899c799 code=0x7ffc0000 [ 208.277029][ T30] audit: type=1326 audit(1774333444.045:3952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8315 comm="syz.3.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b899c799 code=0x7ffc0000 [ 208.326978][ T30] audit: type=1326 audit(1774333444.045:3953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8315 comm="syz.3.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b899c799 code=0x7ffc0000 [ 208.377376][ T30] audit: type=1326 audit(1774333444.045:3954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8315 comm="syz.3.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b899c799 code=0x7ffc0000 [ 208.444097][ T30] audit: type=1326 audit(1774333444.045:3955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8315 comm="syz.3.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b899c799 code=0x7ffc0000 [ 208.488097][ T30] audit: type=1326 audit(1774333444.045:3956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8315 comm="syz.3.688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7fa5b899c799 code=0x7ffc0000 [ 208.840999][ T8324] netlink: 4 bytes leftover after parsing attributes in process `syz.1.689'. [ 209.072300][ T5913] usb 2-1: USB disconnect, device number 15 [ 209.102364][ T5913] hid-steam 0003:28DE:1142.0006: Steam wireless receiver disconnected [ 209.546769][ T8331] input: syz1 as /devices/virtual/input/input11 [ 210.588103][ T5903] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 210.919825][ T5903] usb 4-1: Using ep0 maxpacket: 16 [ 210.945737][ T5903] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.012047][ T5903] usb 4-1: config 0 has no interfaces? [ 211.061449][ T5903] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 211.107172][ T5903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.188174][ T5903] usb 4-1: config 0 descriptor?? [ 211.258821][ T5913] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 211.419964][ T5913] usb 3-1: Using ep0 maxpacket: 32 [ 211.430634][ T5913] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 211.542561][ T5903] usb 4-1: USB disconnect, device number 17 [ 211.560819][ T5913] usb 3-1: config 0 has no interface number 0 [ 211.940452][ T5913] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 211.950480][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.968073][ T5913] usb 3-1: Product: syz [ 211.978989][ T5913] usb 3-1: Manufacturer: syz [ 211.988141][ T5913] usb 3-1: SerialNumber: syz [ 212.003051][ T5913] usb 3-1: config 0 descriptor?? [ 212.429640][ T5913] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 212.441012][ T5913] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 212.776321][ T8381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.703'. [ 214.039031][ T5913] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 214.063095][ T5913] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 214.139871][ T5913] usb 3-1: USB disconnect, device number 16 [ 215.298183][ T5882] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 215.448108][ T5882] usb 3-1: Using ep0 maxpacket: 16 [ 215.462655][ T5882] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.477551][ T5882] usb 3-1: config 0 has no interfaces? [ 215.493825][ T5882] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 215.518078][ T5882] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.577131][ T5882] usb 3-1: config 0 descriptor?? [ 216.181972][ T5875] usb 3-1: USB disconnect, device number 17 [ 218.486880][ T5913] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 218.682823][ T5913] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 218.694624][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.721807][ T5913] usb 2-1: Product: syz [ 218.729239][ T5913] usb 2-1: Manufacturer: syz [ 218.741720][ T5913] usb 2-1: SerialNumber: syz [ 218.769570][ T5913] usb 2-1: config 0 descriptor?? [ 218.781762][ T5913] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 218.938400][ T8482] bridge_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 219.477193][ T8488] xt_cgroup: invalid path, errno=-2 [ 219.889993][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 219.898826][ T5913] gspca_stk1135: reg_w 0x0 err -110 [ 219.906050][ T5913] gspca_stk1135: serial bus timeout: status=0x00 [ 219.912933][ T5913] gspca_stk1135: Sensor write failed [ 219.919917][ T5913] gspca_stk1135: serial bus timeout: status=0x00 [ 219.929686][ T5913] gspca_stk1135: Sensor write failed [ 219.935462][ T5913] gspca_stk1135: serial bus timeout: status=0x00 [ 219.947052][ T5913] gspca_stk1135: Sensor read failed [ 219.961381][ T5913] gspca_stk1135: serial bus timeout: status=0x00 [ 219.970988][ T5913] gspca_stk1135: Sensor read failed [ 219.995574][ T5913] gspca_stk1135: Detected sensor type unknown (0x0) [ 220.013213][ T5913] gspca_stk1135: serial bus timeout: status=0x00 [ 220.324391][ T8502] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 220.496867][ T8501] netlink: 'syz.3.736': attribute type 1 has an invalid length. [ 220.614619][ T5913] gspca_stk1135: Sensor read failed [ 220.640471][ T5913] gspca_stk1135: serial bus timeout: status=0x00 [ 220.669595][ T5913] gspca_stk1135: Sensor read failed [ 220.691299][ T5913] gspca_stk1135: serial bus timeout: status=0x00 [ 220.708251][ T5913] gspca_stk1135: Sensor write failed [ 220.734710][ T5913] gspca_stk1135: serial bus timeout: status=0x00 [ 220.741163][ T5913] gspca_stk1135: Sensor write failed [ 220.746570][ T5913] stk1135 2-1:0.0: probe with driver stk1135 failed with error -110 [ 220.772000][ T8501] 8021q: adding VLAN 0 to HW filter on device bond2 [ 220.934953][ T8502] bond2: (slave veth3): Enslaving as an active interface with a down link [ 221.139157][ T10] usb 5-1: new low-speed USB device number 23 using dummy_hcd [ 221.287077][ T30] kauditd_printk_skb: 314 callbacks suppressed [ 221.287095][ T30] audit: type=1326 audit(1774333457.145:4271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8513 comm="syz.2.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa3219c799 code=0x7ffc0000 [ 221.319137][ T30] audit: type=1326 audit(1774333457.185:4272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8513 comm="syz.2.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faa3219c799 code=0x7ffc0000 [ 221.342397][ T30] audit: type=1326 audit(1774333457.205:4273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8513 comm="syz.2.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa3219c799 code=0x7ffc0000 [ 221.365655][ T30] audit: type=1326 audit(1774333457.225:4274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8513 comm="syz.2.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7faa3219c799 code=0x7ffc0000 [ 221.388983][ T30] audit: type=1326 audit(1774333457.255:4275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8513 comm="syz.2.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa3219c799 code=0x7ffc0000 [ 221.414026][ T30] audit: type=1326 audit(1774333457.275:4276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8513 comm="syz.2.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7faa3219c799 code=0x7ffc0000 [ 221.440157][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 221.458138][ T8521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.742'. [ 221.508567][ T10] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 221.517743][ T30] audit: type=1326 audit(1774333457.295:4277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8513 comm="syz.2.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa3219c799 code=0x7ffc0000 [ 221.549379][ T10] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 221.561244][ T10] usb 5-1: config 1 interface 0 has no altsetting 0 [ 221.576618][ T30] audit: type=1326 audit(1774333457.295:4278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8513 comm="syz.2.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7faa3219c799 code=0x7ffc0000 [ 221.613881][ T10] usb 5-1: string descriptor 0 read error: -22 [ 221.620425][ T10] usb 5-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 221.634393][ T30] audit: type=1326 audit(1774333457.295:4279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8513 comm="syz.2.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa3219c799 code=0x7ffc0000 [ 221.662072][ T10] usb 5-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 221.685421][ T10] usb 5-1: 0:2 : does not exist [ 221.701391][ T8523] fuse: Bad value for 'fd' [ 221.722382][ T30] audit: type=1326 audit(1774333457.305:4280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8513 comm="syz.2.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faa3219c799 code=0x7ffc0000 [ 221.781330][ T10] usb-storage 5-1:1.1: USB Mass Storage device detected [ 221.949001][ T29] usb 1-1: new low-speed USB device number 21 using dummy_hcd [ 221.951788][ T8510] netlink: 14 bytes leftover after parsing attributes in process `syz.4.740'. [ 222.108135][ T29] usb 1-1: Invalid ep0 maxpacket: 32 [ 222.169462][ T8510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.200117][ T8510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.227352][ T10] usb 5-1: us122l: couldn't allocate write buffer [ 222.234482][ T10] snd-usb-us122l 5-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 222.249472][ T29] usb 1-1: new low-speed USB device number 22 using dummy_hcd [ 222.256865][ T10] usb 5-1: USB disconnect, device number 23 [ 222.271998][ T5882] usb 2-1: USB disconnect, device number 16 [ 222.408112][ T29] usb 1-1: Invalid ep0 maxpacket: 32 [ 222.413686][ T29] usb usb1-port1: attempt power cycle [ 222.577034][ T8533] netlink: 'syz.1.746': attribute type 10 has an invalid length. [ 222.668721][ T8534] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 222.677777][ T5875] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 222.707360][ T8533] team0: Device veth1_macvtap failed to register rx_handler [ 222.860138][ T5875] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 222.870591][ T5875] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 222.881362][ T5875] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 222.908060][ T5875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 222.925521][ T5875] usb 3-1: SerialNumber: syz [ 222.958148][ T29] usb 1-1: new low-speed USB device number 23 using dummy_hcd [ 222.999341][ T29] usb 1-1: Invalid ep0 maxpacket: 32 [ 223.168175][ T29] usb 1-1: new low-speed USB device number 24 using dummy_hcd [ 223.177967][ T5875] usb 3-1: 0:2 : does not exist [ 223.195156][ T5875] usb 3-1: unit 5: unexpected type 0x0c [ 223.221633][ T29] usb 1-1: Invalid ep0 maxpacket: 32 [ 223.257308][ T29] usb usb1-port1: unable to enumerate USB device [ 223.303174][ T5875] usb 3-1: USB disconnect, device number 18 [ 223.498333][ T5913] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 223.668157][ T5913] usb 4-1: Using ep0 maxpacket: 32 [ 223.677644][ T5913] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.713271][ T5913] usb 4-1: config 0 has no interfaces? [ 223.723384][ T5913] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 223.755018][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.796992][ T5913] usb 4-1: config 0 descriptor?? [ 223.937011][ T8552] FAULT_INJECTION: forcing a failure. [ 223.937011][ T8552] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 224.008684][ T8552] CPU: 0 UID: 0 PID: 8552 Comm: syz.4.751 Tainted: G L syzkaller #0 PREEMPT(full) [ 224.008712][ T8552] Tainted: [L]=SOFTLOCKUP [ 224.008716][ T8552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 224.008723][ T8552] Call Trace: [ 224.008728][ T8552] [ 224.008732][ T8552] dump_stack_lvl+0xe8/0x150 [ 224.008752][ T8552] should_fail_ex+0x412/0x560 [ 224.008770][ T8552] prepare_alloc_pages+0x22a/0x650 [ 224.008786][ T8552] __alloc_frozen_pages_noprof+0x12f/0x380 [ 224.008801][ T8552] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 224.008816][ T8552] ? __pfx_policy_nodemask+0x10/0x10 [ 224.008830][ T8552] ? __lock_acquire+0x6b5/0x2cf0 [ 224.008845][ T8552] alloc_pages_mpol+0x232/0x4a0 [ 224.008860][ T8552] vma_alloc_folio_noprof+0xea/0x210 [ 224.008874][ T8552] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 224.008892][ T8552] do_pte_missing+0x1656/0x3490 [ 224.008914][ T8552] handle_mm_fault+0x1bec/0x3310 [ 224.008936][ T8552] ? handle_mm_fault+0xee/0x3310 [ 224.008953][ T8552] ? __pfx_handle_mm_fault+0x10/0x10 [ 224.008971][ T8552] ? follow_page_pte+0x841/0x1450 [ 224.008990][ T8552] ? __pfx_follow_page_pte+0x10/0x10 [ 224.009010][ T8552] __get_user_pages+0x165b/0x29d0 [ 224.009039][ T8552] __gup_longterm_locked+0x3db/0x1630 [ 224.009065][ T8552] gup_fast_fallback+0x1d82/0x22e0 [ 224.009081][ T8552] ? lruvec_stat_mod_folio+0x70/0x4b0 [ 224.009120][ T8552] ? __pfx_gup_fast_fallback+0x10/0x10 [ 224.009137][ T8552] ? is_valid_gup_args+0x11f/0x200 [ 224.009151][ T8552] ? pin_user_pages_fast+0x4d/0xb0 [ 224.009166][ T8552] io_pin_pages+0xba/0x1b0 [ 224.009183][ T8552] io_sqe_buffer_register+0x268/0x1c90 [ 224.009207][ T8552] ? rcu_is_watching+0x15/0xb0 [ 224.009221][ T8552] ? __pfx_io_sqe_buffer_register+0x10/0x10 [ 224.009236][ T8552] ? __kvmalloc_node_noprof+0x545/0x8a0 [ 224.009248][ T8552] ? io_sqe_buffers_register+0x12d/0x7e0 [ 224.009263][ T8552] ? iovec_from_user+0x1ba/0x250 [ 224.009275][ T8552] io_sqe_buffers_register+0x2fa/0x7e0 [ 224.009295][ T8552] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 224.009309][ T8552] ? __fget_files+0x3a0/0x420 [ 224.009323][ T8552] ? __fget_files+0x2a/0x420 [ 224.009338][ T8552] ? io_is_uring_fops+0xd/0x50 [ 224.009349][ T8552] __se_sys_io_uring_register+0x122a/0x19a0 [ 224.009366][ T8552] ? __pfx___se_sys_io_uring_register+0x10/0x10 [ 224.009380][ T8552] ? ksys_write+0x242/0x270 [ 224.009392][ T8552] ? __pfx_ksys_write+0x10/0x10 [ 224.009408][ T8552] do_syscall_64+0x14d/0xf80 [ 224.009420][ T8552] ? trace_irq_disable+0x3b/0x150 [ 224.009433][ T8552] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.009443][ T8552] ? clear_bhb_loop+0x40/0x90 [ 224.009455][ T8552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.009471][ T8552] RIP: 0033:0x7ff2fd19c799 [ 224.009482][ T8552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.009490][ T8552] RSP: 002b:00007ff2fdf87028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 224.009502][ T8552] RAX: ffffffffffffffda RBX: 00007ff2fd415fa0 RCX: 00007ff2fd19c799 [ 224.009510][ T8552] RDX: 00002000000002c0 RSI: 0000000000000000 RDI: 0000000000000005 [ 224.009516][ T8552] RBP: 00007ff2fdf87090 R08: 0000000000000000 R09: 0000000000000000 [ 224.009522][ T8552] R10: 100000000000011a R11: 0000000000000246 R12: 0000000000000002 [ 224.009528][ T8552] R13: 00007ff2fd416038 R14: 00007ff2fd415fa0 R15: 00007ff2fd53fa48 [ 224.009543][ T8552] [ 226.084734][ T8562] Set syz1 is full, maxelem 65536 reached [ 226.224291][ T29] usb 4-1: USB disconnect, device number 18 [ 226.657734][ T8573] capability: warning: `syz.4.756' uses deprecated v2 capabilities in a way that may be insecure [ 227.079606][ T5913] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 227.247523][ T8607] netlink: 4 bytes leftover after parsing attributes in process `syz.1.765'. [ 227.278070][ T5913] usb 4-1: Using ep0 maxpacket: 16 [ 227.297869][ T5913] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.317927][ T5913] usb 4-1: config 0 has no interfaces? [ 227.338934][ T5913] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 227.364706][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.399601][ T5913] usb 4-1: config 0 descriptor?? [ 227.773528][ T5882] usb 4-1: USB disconnect, device number 19 [ 230.028183][ T29] usb 1-1: new low-speed USB device number 25 using dummy_hcd [ 230.178140][ T29] usb 1-1: device descriptor read/64, error -71 [ 230.453897][ T29] usb 1-1: new low-speed USB device number 26 using dummy_hcd [ 230.510000][ T8623] Set syz1 is full, maxelem 65536 reached [ 230.658598][ T29] usb 1-1: device descriptor read/64, error -71 [ 230.768515][ T29] usb usb1-port1: attempt power cycle [ 230.928168][ T797] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 230.977451][ T8645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.778'. [ 231.030908][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 231.030928][ T30] audit: type=1326 audit(1774333466.825:4299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8642 comm="syz.1.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bc039c799 code=0x7ffc0000 [ 231.092500][ T30] audit: type=1326 audit(1774333466.835:4300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8642 comm="syz.1.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8bc039c799 code=0x7ffc0000 [ 231.125238][ T29] usb 1-1: new low-speed USB device number 27 using dummy_hcd [ 231.152628][ T30] audit: type=1326 audit(1774333466.835:4301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8642 comm="syz.1.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bc039c799 code=0x7ffc0000 [ 231.183705][ T29] usb 1-1: device descriptor read/8, error -71 [ 231.232821][ T797] usb 5-1: Using ep0 maxpacket: 16 [ 231.244431][ T797] usb 5-1: config 0 has no interfaces? [ 231.259728][ T797] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 231.269345][ T797] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.277861][ T797] usb 5-1: Product: syz [ 231.283790][ T797] usb 5-1: Manufacturer: syz [ 231.289225][ T797] usb 5-1: SerialNumber: syz [ 231.294031][ T30] audit: type=1326 audit(1774333466.835:4302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8642 comm="syz.1.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f8bc039c799 code=0x7ffc0000 [ 231.320410][ T797] usb 5-1: config 0 descriptor?? [ 231.354144][ T30] audit: type=1326 audit(1774333466.835:4303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8642 comm="syz.1.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bc039c799 code=0x7ffc0000 [ 231.453665][ T30] audit: type=1326 audit(1774333466.835:4304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8642 comm="syz.1.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f8bc039c799 code=0x7ffc0000 [ 231.489112][ T29] usb 1-1: new low-speed USB device number 28 using dummy_hcd [ 231.522437][ T29] usb 1-1: device descriptor read/8, error -71 [ 231.533422][ T30] audit: type=1326 audit(1774333466.835:4305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8642 comm="syz.1.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bc039c799 code=0x7ffc0000 [ 231.645355][ T29] usb usb1-port1: unable to enumerate USB device [ 231.892490][ T30] audit: type=1326 audit(1774333466.835:4306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8642 comm="syz.1.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8bc039c799 code=0x7ffc0000 [ 232.040528][ T30] audit: type=1326 audit(1774333466.835:4307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8642 comm="syz.1.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bc039c799 code=0x7ffc0000 [ 232.176450][ T30] audit: type=1326 audit(1774333466.835:4308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8642 comm="syz.1.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8bc039c799 code=0x7ffc0000 [ 232.849045][ T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 233.148239][ T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 233.200143][ T8668] FAULT_INJECTION: forcing a failure. [ 233.200143][ T8668] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 233.213359][ T8668] CPU: 0 UID: 0 PID: 8668 Comm: syz.0.786 Tainted: G L syzkaller #0 PREEMPT(full) [ 233.213389][ T8668] Tainted: [L]=SOFTLOCKUP [ 233.213393][ T8668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 233.213401][ T8668] Call Trace: [ 233.213496][ T8668] [ 233.213531][ T8668] dump_stack_lvl+0xe8/0x150 [ 233.213702][ T8668] should_fail_ex+0x412/0x560 [ 233.213770][ T8668] strncpy_from_user+0x36/0x2b0 [ 233.213808][ T8668] do_getname+0x77/0x250 [ 233.213840][ T8668] __se_sys_mknodat+0x27/0x150 [ 233.213853][ T8668] do_syscall_64+0x14d/0xf80 [ 233.213934][ T8668] ? trace_irq_disable+0x3b/0x150 [ 233.213987][ T8668] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.214009][ T8668] ? clear_bhb_loop+0x40/0x90 [ 233.214021][ T8668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.214031][ T8668] RIP: 0033:0x7f09b3f9c799 [ 233.214064][ T8668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.214073][ T8668] RSP: 002b:00007f09b4db8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 233.214111][ T8668] RAX: ffffffffffffffda RBX: 00007f09b4215fa0 RCX: 00007f09b3f9c799 [ 233.214118][ T8668] RDX: 00000000000081c0 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 233.214125][ T8668] RBP: 00007f09b4db8090 R08: 0000000000000000 R09: 0000000000000000 [ 233.214132][ T8668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.214137][ T8668] R13: 00007f09b4216038 R14: 00007f09b4215fa0 R15: 00007f09b433fa48 [ 233.214159][ T8668] [ 233.387048][ T8670] binder: BINDER_SET_CONTEXT_MGR already set [ 233.394096][ T8670] binder: 8669:8670 ioctl 4018620d 200000004a80 returned -16 [ 233.516633][ T797] usb 5-1: USB disconnect, device number 24 [ 234.197673][ T8692] binder: 8691:8692 ioctl 8933 200000000280 returned -22 [ 234.718145][ T29] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 234.890217][ T29] usb 5-1: config 0 interface 0 has no altsetting 0 [ 234.897038][ T29] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 234.917418][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.939251][ T29] usb 5-1: config 0 descriptor?? [ 235.033182][ T8708] fuse: Bad value for 'user_id' [ 235.038385][ T8708] fuse: Bad value for 'user_id' [ 235.441369][ T8694] binder: 8691:8694 ioctl 1265 200000000240 returned -22 [ 235.547357][ T8721] netlink: 4 bytes leftover after parsing attributes in process `syz.2.797'. [ 235.576812][ T8721] bridge_slave_1: left allmulticast mode [ 235.582663][ T8721] bridge_slave_1: left promiscuous mode [ 235.588625][ T8721] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.781167][ T8721] bridge_slave_0: left allmulticast mode [ 236.039568][ T29] video4linux radio48: keene_cmd_set failed (-110) [ 236.058188][ T29] radio-keene 5-1:0.0: V4L2 device registered as radio48 [ 236.189872][ T8721] bridge_slave_0: left promiscuous mode [ 236.202374][ T8721] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.192027][ T5903] usb 5-1: USB disconnect, device number 25 [ 237.228944][ T8740] FAULT_INJECTION: forcing a failure. [ 237.228944][ T8740] name failslab, interval 1, probability 0, space 0, times 0 [ 237.280075][ T8740] CPU: 0 UID: 0 PID: 8740 Comm: syz.1.803 Tainted: G L syzkaller #0 PREEMPT(full) [ 237.280096][ T8740] Tainted: [L]=SOFTLOCKUP [ 237.280100][ T8740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 237.280106][ T8740] Call Trace: [ 237.280111][ T8740] [ 237.280116][ T8740] dump_stack_lvl+0xe8/0x150 [ 237.280135][ T8740] should_fail_ex+0x412/0x560 [ 237.280162][ T8740] should_failslab+0xa8/0x100 [ 237.280201][ T8740] __kmalloc_noprof+0xe8/0x760 [ 237.280217][ T8740] ? io_cache_alloc_new+0x40/0x100 [ 237.280302][ T8740] ? __memcg_slab_post_alloc_hook+0x3df/0xa80 [ 237.280320][ T8740] io_cache_alloc_new+0x40/0x100 [ 237.280335][ T8740] io_msg_alloc_async+0x212/0x380 [ 237.280372][ T8740] io_recvmsg_prep+0x7da/0x10f0 [ 237.280393][ T8740] ? __pfx_io_recvmsg_prep+0x10/0x10 [ 237.280406][ T8740] ? __pfx___io_alloc_req_refill+0x10/0x10 [ 237.280422][ T8740] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 237.280462][ T8740] ? io_task_refs_refill+0xba/0x180 [ 237.280516][ T8740] io_submit_sqes+0xb6d/0x2400 [ 237.280587][ T8740] __se_sys_io_uring_enter+0x2cc/0x18c0 [ 237.280608][ T8740] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 237.280655][ T8740] ? __fget_files+0x3a0/0x420 [ 237.280693][ T8740] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 237.280712][ T8740] ? fput+0xa0/0xd0 [ 237.280731][ T8740] ? ksys_write+0x242/0x270 [ 237.280743][ T8740] ? __pfx_ksys_write+0x10/0x10 [ 237.280756][ T8740] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 237.280768][ T8740] do_syscall_64+0x14d/0xf80 [ 237.280779][ T8740] ? trace_irq_disable+0x3b/0x150 [ 237.280793][ T8740] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.280802][ T8740] ? clear_bhb_loop+0x40/0x90 [ 237.280814][ T8740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.280824][ T8740] RIP: 0033:0x7f8bc039c799 [ 237.280835][ T8740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.280844][ T8740] RSP: 002b:00007f8bc1268028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 237.280856][ T8740] RAX: ffffffffffffffda RBX: 00007f8bc0616090 RCX: 00007f8bc039c799 [ 237.280863][ T8740] RDX: 0000000000000000 RSI: 0000000000003516 RDI: 0000000000000006 [ 237.280869][ T8740] RBP: 00007f8bc1268090 R08: 0000000000000000 R09: 0000000000000000 [ 237.280875][ T8740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.280881][ T8740] R13: 00007f8bc0616128 R14: 00007f8bc0616090 R15: 00007f8bc073fa48 [ 237.280896][ T8740] [ 237.633375][ T8750] loop5: detected capacity change from 0 to 7 [ 237.659537][ T8750] Dev loop5: unable to read RDB block 7 [ 237.679500][ T8750] loop5: AHDI p1 p2 p3 [ 237.690721][ T8750] loop5: partition table partially beyond EOD, truncated [ 237.710740][ T8750] loop5: p1 start 1818582900 is beyond EOD, truncated [ 237.737593][ T8750] loop5: p3 start 335544320 is beyond EOD, truncated [ 238.208852][ T5913] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 238.314664][ T8768] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 238.380947][ T5913] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 238.393502][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.406733][ T5913] usb 1-1: Product: syz [ 238.417902][ T5913] usb 1-1: Manufacturer: syz [ 238.423935][ T5913] usb 1-1: SerialNumber: syz [ 238.435199][ T5913] usb 1-1: config 0 descriptor?? [ 238.447385][ T5913] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 239.242550][ T5913] gspca_stk1135: reg_w 0x2 err -110 [ 239.274637][ T5913] gspca_stk1135: serial bus timeout: status=0x00 [ 239.293709][ T5913] gspca_stk1135: Sensor write failed [ 239.301722][ T8774] VFS: Lookup of 'devices.allow' in fuse fuse would have caused loop [ 239.320871][ T5913] gspca_stk1135: serial bus timeout: status=0x00 [ 239.327243][ T5913] gspca_stk1135: Sensor write failed [ 239.457778][ T5913] gspca_stk1135: serial bus timeout: status=0x00 [ 239.484546][ T5913] gspca_stk1135: Sensor read failed [ 239.500023][ T5913] gspca_stk1135: serial bus timeout: status=0x00 [ 239.506423][ T5913] gspca_stk1135: Sensor read failed [ 239.532312][ T5913] gspca_stk1135: Detected sensor type unknown (0x0) [ 239.545897][ T5913] gspca_stk1135: serial bus timeout: status=0x00 [ 239.559360][ T5913] gspca_stk1135: Sensor read failed [ 239.564633][ T5913] gspca_stk1135: serial bus timeout: status=0x00 [ 239.578489][ T5913] gspca_stk1135: Sensor read failed [ 239.583734][ T5913] gspca_stk1135: serial bus timeout: status=0x00 [ 239.602702][ T5913] gspca_stk1135: Sensor write failed [ 239.620253][ T5913] gspca_stk1135: serial bus timeout: status=0x00 [ 239.626628][ T5913] gspca_stk1135: Sensor write failed [ 240.091069][ T5913] stk1135 1-1:0.0: probe with driver stk1135 failed with error -110 [ 240.188736][ T8777] xt_cgroup: invalid path, errno=-2 [ 240.579198][ T8793] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000 [ 240.587822][ T8793] tipc: Enabled bearer , priority 10 [ 240.718950][ T8797] tipc: Enabled bearer , priority 0 [ 240.738981][ T8797] syzkaller0: entered promiscuous mode [ 240.756029][ T8797] syzkaller0: entered allmulticast mode [ 240.806964][ T8797] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.818'. [ 240.834652][ T8797] tipc: Resetting bearer [ 242.063354][ T5875] usb 1-1: USB disconnect, device number 29 [ 242.625716][ T8839] input: syz1 as /devices/virtual/input/input12 [ 243.505280][ T8861] xt_socket: unknown flags 0xc [ 243.860527][ T8865] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 244.648345][ T8878] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 244.788655][ T8798] tipc: Resetting bearer [ 244.824923][ T8798] tipc: Disabling bearer [ 245.190204][ T8887] netlink: 16 bytes leftover after parsing attributes in process `syz.2.845'. [ 245.718233][ T5913] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 245.869866][ T5913] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 245.883706][ T5913] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 245.893903][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.902137][ T5913] usb 3-1: Product: syz [ 245.906435][ T5913] usb 3-1: Manufacturer: syz [ 245.911092][ T5913] usb 3-1: SerialNumber: syz [ 246.161085][ T8899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.178234][ T8899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.222386][ T5913] usb 3-1: unit 8 not found! [ 246.248257][ T5913] usb 3-1: unit 0 not found! [ 246.321207][ T5913] usb 3-1: USB disconnect, device number 19 [ 246.345822][ T5824] udevd[5824]: setting owner of /dev/mixer3 to uid=0, gid=29 failed: No such file or directory [ 246.438251][ T5935] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 246.604071][ T5935] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 246.624711][ T5935] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 246.646361][ T5935] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 246.667924][ T5935] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 246.680517][ T5935] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 246.696512][ T5935] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 246.706146][ T5935] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 246.716312][ T5935] usb 4-1: Product: syz [ 246.720828][ T5935] usb 4-1: Manufacturer: syz [ 246.735601][ T5935] cdc_wdm 4-1:1.0: skipping garbage [ 246.755461][ T5935] cdc_wdm 4-1:1.0: skipping garbage [ 246.796350][ T5935] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 246.882862][ T5875] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 246.893065][ T5935] cdc_wdm 4-1:1.0: Unknown control protocol [ 246.982192][ T5935] usb 4-1: USB disconnect, device number 20 [ 247.103934][ T8931] netlink: 'syz.4.860': attribute type 2 has an invalid length. [ 247.159405][ T8933] netlink: 'syz.4.860': attribute type 2 has an invalid length. [ 247.273554][ T8931] ‚#{6c: entered promiscuous mode [ 247.358283][ T5935] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 247.918465][ T5875] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 248.100068][ T5875] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 248.158070][ T5875] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 248.272849][ T5875] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 248.382762][ T5875] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 248.393938][ T5875] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 248.421111][ T5875] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 248.438275][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 248.461794][ T5875] usb 4-1: Product: syz [ 248.471776][ T5875] usb 4-1: Manufacturer: syz [ 248.499816][ T5875] cdc_wdm 4-1:1.0: skipping garbage [ 248.521046][ T5875] cdc_wdm 4-1:1.0: skipping garbage [ 248.554971][ T5875] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 248.575885][ T5875] cdc_wdm 4-1:1.0: Unknown control protocol [ 248.714371][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 248.720111][ C0] cdc_wdm 4-1:1.0: Cannot schedule work [ 248.725894][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 248.731755][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 248.737597][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 248.743439][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 248.749300][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 248.755151][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 248.760989][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 248.766835][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 248.772734][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 248.778624][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 248.784464][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 248.790314][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 248.796164][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 248.802009][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 248.807856][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 248.813794][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 248.819672][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 248.825512][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 248.831361][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 248.837195][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 248.843030][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 248.849052][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 248.854918][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 248.860810][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 248.866666][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 248.872508][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 248.878449][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 248.884094][ C0] cdc_wdm 4-1:1.0: Cannot schedule work [ 248.890600][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 248.896426][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 248.902262][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 248.908083][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 248.913926][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 248.919774][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 248.925606][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 248.931497][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 248.937322][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 248.943163][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 248.948984][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 248.954807][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 248.960631][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 248.966432][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 248.972227][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 248.978056][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 248.983877][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 248.989695][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 248.995524][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 249.001383][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 249.007339][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 249.014204][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 249.020234][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 249.026978][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 249.032818][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 249.039875][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 249.046517][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 249.052464][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 249.058548][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 249.064405][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 249.070425][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 249.076255][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 249.082097][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 249.087917][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 249.093726][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 249.099547][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 249.105422][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 249.111262][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 249.117119][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 249.122814][ C0] cdc_wdm 4-1:1.0: Cannot schedule work [ 249.128579][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -EPIPE [ 249.136229][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 249.142044][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 249.147756][ C0] cdc_wdm 4-1:1.0: Cannot schedule work [ 249.153767][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 249.159629][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 249.165451][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 249.171289][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 249.177105][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 249.182910][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 249.188692][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 249.194474][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 249.200312][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 249.206091][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 249.211872][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 249.217670][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 249.223460][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 249.229245][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 249.235032][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 249.240828][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 249.246606][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 249.252409][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 249.258243][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 249.264132][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 249.270013][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 249.275805][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 249.281603][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 249.287393][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 249.293206][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 249.299021][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 249.304819][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 249.310621][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 249.316414][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 249.322236][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 249.328065][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 249.333870][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 249.339695][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 249.345487][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 249.351288][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 249.357086][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 249.362910][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 249.368707][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 249.374510][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 249.380337][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 249.386178][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 249.391982][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 249.397837][ C0] cdc_wdm 4-1:1.0: Stall on int endpoint [ 249.412414][ T5935] usb 4-1: USB disconnect, device number 21 [ 250.578385][ T5903] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 250.769150][ T5903] usb 2-1: Using ep0 maxpacket: 16 [ 250.795396][ T5903] usb 2-1: config 0 has no interfaces? [ 250.831294][ T5903] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 250.864883][ T5903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.907965][ T5903] usb 2-1: Product: syz [ 250.912237][ T5903] usb 2-1: Manufacturer: syz [ 250.916846][ T5903] usb 2-1: SerialNumber: syz [ 250.971839][ T5903] usb 2-1: config 0 descriptor?? [ 251.009602][ T8989] loop5: detected capacity change from 0 to 7 [ 251.039141][ T8989] Dev loop5: unable to read RDB block 7 [ 251.059338][ T8989] loop5: AHDI p1 p2 p3 [ 251.074486][ T8989] loop5: partition table partially beyond EOD, truncated [ 251.111246][ T8989] loop5: p1 start 1818582900 is beyond EOD, truncated [ 251.130492][ T8989] loop5: p3 start 335544320 is beyond EOD, truncated [ 251.862836][ T9005] IPv6: addrconf: prefix option has invalid lifetime [ 252.118121][ T5875] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 252.145108][ T8987] syz.0.877 (8987): drop_caches: 2 [ 252.268789][ T9005] fuse: Bad value for 'fd' [ 252.331798][ T5875] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.362324][ T5875] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 252.393886][ T5875] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 252.410541][ T5875] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 212, setting to 64 [ 252.422996][ T5875] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 252.506088][ T5875] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 252.516737][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.526130][ T5875] usb 4-1: Product: syz [ 252.531071][ T5875] usb 4-1: Manufacturer: syz [ 252.537387][ T5875] usb 4-1: SerialNumber: syz [ 252.560197][ T5875] usb 4-1: config 0 descriptor?? [ 252.605028][ T9003] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 252.704414][ T5935] usb 2-1: USB disconnect, device number 17 [ 252.768107][ T5875] rc_core: IR keymap rc-xbox-dvd not found [ 252.774089][ T5875] Registered IR keymap rc-empty [ 252.784392][ T5875] rc rc0: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 252.797713][ T5875] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input13 [ 252.875612][ T9021] fuse: Bad value for 'fd' [ 252.888573][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 252.888590][ T30] audit: type=1326 audit(1774333488.735:4327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9015 comm="syz.4.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2fd19c799 code=0x7ffc0000 [ 252.959390][ T30] audit: type=1326 audit(1774333488.735:4328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9015 comm="syz.4.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2fd19c799 code=0x7ffc0000 [ 253.146389][ T30] audit: type=1326 audit(1774333488.735:4329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9015 comm="syz.4.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2fd19c799 code=0x7ffc0000 [ 253.185311][ T30] audit: type=1326 audit(1774333488.735:4330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9015 comm="syz.4.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff2fd19c799 code=0x7ffc0000 [ 253.209140][ T30] audit: type=1326 audit(1774333488.735:4331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9015 comm="syz.4.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2fd19c799 code=0x7ffc0000 [ 253.270766][ T30] audit: type=1326 audit(1774333488.735:4332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9015 comm="syz.4.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2fd19c799 code=0x7ffc0000 [ 253.301285][ T30] audit: type=1326 audit(1774333488.735:4333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9015 comm="syz.4.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2fd19c799 code=0x7ffc0000 [ 253.332833][ T30] audit: type=1326 audit(1774333488.735:4334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9015 comm="syz.4.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7ff2fd19c799 code=0x7ffc0000 [ 253.493974][ T30] audit: type=1326 audit(1774333488.735:4335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9015 comm="syz.4.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2fd19c799 code=0x7ffc0000 [ 253.641276][ T30] audit: type=1326 audit(1774333488.735:4336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9015 comm="syz.4.887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2fd19c799 code=0x7ffc0000 [ 254.038062][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 254.128061][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 254.218043][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 254.278042][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 254.288073][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 254.448058][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 254.548033][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 254.588055][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 254.694549][ T5903] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 254.859566][ T5882] usb 4-1: USB disconnect, device number 22 [ 254.859619][ C0] xbox_remote 4-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 254.922975][ T5903] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 254.934956][ T5903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.951651][ T5903] usb 3-1: Product: syz [ 254.967315][ T5903] usb 3-1: Manufacturer: syz [ 254.980684][ T5903] usb 3-1: SerialNumber: syz [ 254.997001][ T5903] usb 3-1: config 0 descriptor?? [ 255.057699][ T5903] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 255.082878][ T5903] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 255.100000][ T5903] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 255.119705][ T5903] usb 3-1: media controller created [ 255.157065][ T5903] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 255.296810][ T9032] dvb-usb: bulk message failed: -22 (7/0) [ 255.418210][ T5903] DVB: Unable to find symbol mt352_attach() [ 255.470200][ T9054] fuse: Unknown parameter 'a­Å' [ 255.541253][ T5903] DVB: Unable to find symbol nxt6000_attach() [ 255.547381][ T5903] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 255.602855][ T9060] fuse: Bad value for 'fd' [ 255.610688][ T5903] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input14 [ 255.768821][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.775201][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.802509][ T5903] dvb-usb: schedule remote query interval to 1000 msecs. [ 255.809952][ T5903] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 255.820731][ T5903] dvb-usb: bulk message failed: -22 (7/0) [ 255.826780][ T5903] dvb-usb: bulk message failed: -22 (7/0) [ 255.853108][ T9062] fuse: Bad value for 'fd' [ 255.906735][ T5903] usb 3-1: USB disconnect, device number 20 [ 256.095556][ T5903] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 256.184801][ T9067] fuse: Bad value for 'fd' [ 256.431497][ T9069] sch_tbf: burst 5874 is lower than device lo mtu (65550) ! [ 256.476101][ T9071] ip6tnl2: entered promiscuous mode [ 256.648279][ T5935] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 256.985752][ T5935] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 257.648305][ T5903] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 257.878301][ T5903] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 259.396304][ T9115] fuse: Bad value for 'fd' [ 259.405270][ T30] kauditd_printk_skb: 845 callbacks suppressed [ 259.405286][ T30] audit: type=1326 audit(1774333495.255:5182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9113 comm="syz.3.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b899c799 code=0x7ffc0000 [ 259.480089][ T9117] netlink: 20 bytes leftover after parsing attributes in process `syz.2.911'. [ 259.525000][ T30] audit: type=1326 audit(1774333495.255:5183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9113 comm="syz.3.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b899c799 code=0x7ffc0000 [ 259.556217][ T30] audit: type=1326 audit(1774333495.255:5184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9113 comm="syz.3.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b899c799 code=0x7ffc0000 [ 259.579853][ T30] audit: type=1326 audit(1774333495.255:5185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9113 comm="syz.3.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa5b899c799 code=0x7ffc0000 [ 259.672301][ T30] audit: type=1326 audit(1774333495.255:5186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9113 comm="syz.3.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b899c799 code=0x7ffc0000 [ 259.756476][ T30] audit: type=1326 audit(1774333495.255:5187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9113 comm="syz.3.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b899c799 code=0x7ffc0000 [ 259.848099][ T30] audit: type=1326 audit(1774333495.255:5188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9113 comm="syz.3.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7fa5b899c799 code=0x7ffc0000 [ 259.905770][ T30] audit: type=1326 audit(1774333495.255:5189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9113 comm="syz.3.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b899c799 code=0x7ffc0000 [ 259.942731][ T30] audit: type=1326 audit(1774333495.255:5190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9113 comm="syz.3.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b899c799 code=0x7ffc0000 [ 259.985228][ T30] audit: type=1326 audit(1774333495.255:5191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9113 comm="syz.3.912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b899c799 code=0x7ffc0000 [ 260.041680][ T9125] tipc: Enabled bearer , priority 0 [ 260.050053][ T9125] syzkaller0: entered promiscuous mode [ 260.059938][ T9125] syzkaller0: entered allmulticast mode [ 260.106535][ T9125] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.915'. [ 260.155416][ T9127] netlink: 'syz.0.916': attribute type 1 has an invalid length. [ 260.218156][ T5875] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 260.282721][ T9125] tipc: Resetting bearer [ 260.401459][ T5875] usb 3-1: Using ep0 maxpacket: 32 [ 260.413379][ T5875] usb 3-1: config 7 has an invalid interface number: 160 but max is 0 [ 260.432543][ T5875] usb 3-1: config 7 has an invalid interface association descriptor of length 2, skipping [ 260.453318][ T5875] usb 3-1: config 7 has no interface number 0 [ 260.537776][ T5875] usb 3-1: config 7 interface 160 altsetting 6 has a duplicate endpoint with address 0x5, skipping [ 260.552645][ T5875] usb 3-1: config 7 interface 160 has no altsetting 0 [ 260.563702][ T5875] usb 3-1: New USB device found, idVendor=0545, idProduct=800d, bcdDevice= 3.0a [ 260.598389][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.624676][ T5875] usb 3-1: Product: syz [ 260.629503][ T5875] usb 3-1: Manufacturer: syz [ 260.635397][ T5875] usb 3-1: SerialNumber: syz [ 260.800442][ T9143] netlink: 132 bytes leftover after parsing attributes in process `syz.4.920'. [ 260.939514][ T5875] usb 3-1: USB disconnect, device number 21 [ 261.398118][ T10] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 261.621592][ T10] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 261.715234][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.821316][ T10] usb 5-1: config 0 descriptor?? [ 263.099840][ T9166] fuse: Bad value for 'fd' [ 263.239160][ T5903] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 263.428106][ T5903] usb 3-1: Using ep0 maxpacket: 8 [ 263.446628][ T5903] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 263.491357][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.524373][ T5903] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.569817][ T5903] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 263.605361][ T5903] usb 3-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 263.620908][ T5903] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.636274][ T5903] usb 3-1: config 0 descriptor?? [ 263.816896][ T9128] tipc: Resetting bearer [ 263.841635][ T9128] tipc: Disabling bearer [ 263.858214][ T9164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.867485][ T9164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.047440][ T10] usb 5-1: Cannot set autoneg [ 264.052963][ T10] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 264.083477][ T10] usb 5-1: USB disconnect, device number 26 [ 264.116096][ T5903] hid (null): report_id 0 is invalid [ 264.139373][ T5903] redragon 0003:0C45:760B.0008: report_id 0 is invalid [ 264.164616][ T5903] redragon 0003:0C45:760B.0008: item 0 1 1 8 parsing failed [ 264.192425][ T5903] redragon 0003:0C45:760B.0008: probe with driver redragon failed with error -22 [ 264.371896][ T10] usb 3-1: USB disconnect, device number 22 [ 264.577214][ T9188] xt_socket: unknown flags 0xc [ 266.276174][ T9212] fuse: Bad value for 'fd' [ 266.302230][ T30] kauditd_printk_skb: 405 callbacks suppressed [ 266.302250][ T30] audit: type=1326 audit(1774333502.125:5597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9208 comm="syz.2.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa3219c799 code=0x7ffc0000 [ 266.687154][ T30] audit: type=1326 audit(1774333502.125:5598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9208 comm="syz.2.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa3219c799 code=0x7ffc0000 [ 266.711087][ T9214] netlink: 'syz.4.940': attribute type 1 has an invalid length. [ 266.719062][ T30] audit: type=1326 audit(1774333502.125:5599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9208 comm="syz.2.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa3219c799 code=0x7ffc0000 [ 266.741574][ T30] audit: type=1326 audit(1774333502.125:5600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9208 comm="syz.2.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa3219c799 code=0x7ffc0000 [ 266.764054][ T30] audit: type=1326 audit(1774333502.125:5601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9208 comm="syz.2.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faa3219c799 code=0x7ffc0000 [ 266.870011][ T9214] 8021q: adding VLAN 0 to HW filter on device bond3 [ 266.944719][ T9218] netlink: 12 bytes leftover after parsing attributes in process `syz.0.942'. [ 267.043147][ T9218] vlan3: entered promiscuous mode [ 267.123463][ T30] audit: type=1326 audit(1774333502.125:5602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9208 comm="syz.2.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa3219c799 code=0x7ffc0000 [ 267.296329][ T30] audit: type=1326 audit(1774333502.125:5603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9208 comm="syz.2.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa3219c799 code=0x7ffc0000 [ 267.428210][ T30] audit: type=1326 audit(1774333502.125:5604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9208 comm="syz.2.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa3219c799 code=0x7ffc0000 [ 267.441337][ T9222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.944'. [ 267.503380][ T30] audit: type=1326 audit(1774333502.135:5605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9208 comm="syz.2.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7faa3219c799 code=0x7ffc0000 [ 267.693791][ T30] audit: type=1326 audit(1774333502.135:5606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9208 comm="syz.2.941" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa3219c799 code=0x7ffc0000 [ 268.179293][ T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 268.498161][ T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 269.784145][ T9252] input: syz1 as /devices/virtual/input/input15 [ 270.078109][ T5875] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 270.248415][ T5875] usb 2-1: Using ep0 maxpacket: 16 [ 270.286090][ T5875] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.296760][ T5875] usb 2-1: config 0 has no interfaces? [ 270.302926][ T5875] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 270.322122][ T5875] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.379668][ T5875] usb 2-1: config 0 descriptor?? [ 270.744340][ T5882] usb 2-1: USB disconnect, device number 18 [ 270.982179][ T9284] fuse: Bad value for 'fd' [ 271.316658][ T30] kauditd_printk_skb: 151 callbacks suppressed [ 271.316678][ T30] audit: type=1326 audit(1774333507.175:5758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9280 comm="syz.4.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff2fd15cfce code=0x7ffc0000 [ 271.367898][ T9288] netlink: 'syz.1.963': attribute type 1 has an invalid length. [ 271.468281][ T30] audit: type=1326 audit(1774333507.215:5759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9280 comm="syz.4.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff2fd15cfce code=0x7ffc0000 [ 271.491109][ T30] audit: type=1326 audit(1774333507.215:5760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9280 comm="syz.4.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff2fd15cfce code=0x7ffc0000 [ 271.509248][ T9288] bond2: entered promiscuous mode [ 271.513660][ T30] audit: type=1326 audit(1774333507.215:5761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9280 comm="syz.4.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff2fd15cfce code=0x7ffc0000 [ 271.540980][ T30] audit: type=1326 audit(1774333507.215:5762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9280 comm="syz.4.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff2fd15cfce code=0x7ffc0000 [ 271.625494][ T9288] 8021q: adding VLAN 0 to HW filter on device bond2 [ 271.758135][ T30] audit: type=1326 audit(1774333507.215:5763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9280 comm="syz.4.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff2fd15cfce code=0x7ffc0000 [ 271.784081][ T9294] tipc: Enabled bearer , priority 0 [ 271.794069][ T9294] syzkaller0: entered promiscuous mode [ 271.799783][ T9294] syzkaller0: entered allmulticast mode [ 271.842724][ T9294] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.964'. [ 271.864220][ T30] audit: type=1326 audit(1774333507.215:5764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9280 comm="syz.4.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff2fd15cfce code=0x7ffc0000 [ 272.010003][ T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 272.151842][ T30] audit: type=1326 audit(1774333507.215:5765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9280 comm="syz.4.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff2fd15cfce code=0x7ffc0000 [ 272.179094][ T30] audit: type=1326 audit(1774333507.215:5766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9280 comm="syz.4.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff2fd15cfce code=0x7ffc0000 [ 272.211676][ T30] audit: type=1326 audit(1774333507.215:5767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9280 comm="syz.4.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff2fd15cfce code=0x7ffc0000 [ 272.261779][ T9303] tipc: Resetting bearer [ 272.383394][ T9307] binder_alloc: 9306: binder_alloc_buf, no vma [ 273.070612][ T5935] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 273.302424][ T9318] input: syz1 as /devices/virtual/input/input16 [ 273.779816][ T9304] tipc: Resetting bearer [ 273.811440][ T9304] tipc: Disabling bearer [ 274.036633][ T9322] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 274.046975][ T9322] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 274.675387][ T9331] netlink: 'syz.2.974': attribute type 2 has an invalid length. [ 274.787917][ T9331] @„;: entered promiscuous mode [ 275.386451][ T9356] tipc: Enabled bearer , priority 0 [ 275.408843][ T9356] syzkaller0: entered promiscuous mode [ 275.416552][ T9356] syzkaller0: entered allmulticast mode [ 275.458148][ T5903] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 275.482954][ T9356] netlink: 212396 bytes leftover after parsing attributes in process `syz.2.980'. [ 275.575335][ T9363] input: syz1 as /devices/virtual/input/input17 [ 275.682278][ T5903] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 275.706463][ T5903] usb 5-1: can't read configurations, error -71 [ 275.881315][ T9356] tipc: Resetting bearer [ 276.138429][ T5875] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 276.415259][ T5875] IPVS: starting estimator thread 0... [ 276.698298][ T5875] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 276.760309][ T9390] IPVS: using max 32 ests per chain, 76800 per kthread [ 276.827700][ T9399] netlink: 4 bytes leftover after parsing attributes in process `syz.3.988'. [ 276.925177][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 276.925196][ T30] audit: type=1326 audit(1774333512.785:5789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9393 comm="syz.0.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09b3f9c799 code=0x7ffc0000 [ 276.972287][ T9399] netlink: 12 bytes leftover after parsing attributes in process `syz.3.988'. [ 277.004010][ T30] audit: type=1326 audit(1774333512.785:5790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9393 comm="syz.0.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f09b3f9c799 code=0x7ffc0000 [ 277.064219][ T9401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.987'. [ 277.290151][ T30] audit: type=1326 audit(1774333512.785:5791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9393 comm="syz.0.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09b3f9c799 code=0x7ffc0000 [ 277.410470][ T9407] tipc: Enabled bearer , priority 0 [ 277.461166][ T9407] syzkaller0: entered promiscuous mode [ 277.466659][ T9407] syzkaller0: entered allmulticast mode [ 277.530799][ T9407] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.989'. [ 277.535492][ T30] audit: type=1326 audit(1774333512.785:5792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9393 comm="syz.0.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09b3f9c799 code=0x7ffc0000 [ 277.578995][ T9407] tipc: Resetting bearer [ 277.659306][ T30] audit: type=1326 audit(1774333512.785:5793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9393 comm="syz.0.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f09b3f9c799 code=0x7ffc0000 [ 277.808242][ T30] audit: type=1326 audit(1774333512.855:5794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9393 comm="syz.0.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09b3f9c799 code=0x7ffc0000 [ 277.911661][ T30] audit: type=1326 audit(1774333512.855:5795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9393 comm="syz.0.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09b3f9c799 code=0x7ffc0000 [ 277.963227][ T9412] FAULT_INJECTION: forcing a failure. [ 277.963227][ T9412] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 277.995887][ T30] audit: type=1326 audit(1774333512.905:5796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9393 comm="syz.0.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f09b3f9c799 code=0x7ffc0000 [ 278.063314][ T30] audit: type=1326 audit(1774333512.905:5797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9393 comm="syz.0.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09b3f9c799 code=0x7ffc0000 [ 278.195493][ T30] audit: type=1326 audit(1774333512.905:5798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9393 comm="syz.0.987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f09b3f9c799 code=0x7ffc0000 [ 278.201442][ T9412] CPU: 0 UID: 0 PID: 9412 Comm: syz.3.991 Tainted: G L syzkaller #0 PREEMPT(full) [ 278.201473][ T9412] Tainted: [L]=SOFTLOCKUP [ 278.201480][ T9412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 278.201501][ T9412] Call Trace: [ 278.201510][ T9412] [ 278.201517][ T9412] dump_stack_lvl+0xe8/0x150 [ 278.201552][ T9412] should_fail_ex+0x412/0x560 [ 278.201586][ T9412] _copy_from_user+0x2d/0xb0 [ 278.201699][ T9412] generic_map_update_batch+0x69a/0x990 [ 278.201752][ T9412] ? __pfx_generic_map_update_batch+0x10/0x10 [ 278.201776][ T9412] ? __fget_files+0x2a/0x420 [ 278.201807][ T9412] ? __pfx_generic_map_update_batch+0x10/0x10 [ 278.201828][ T9412] bpf_map_do_batch+0x39b/0x630 [ 278.201851][ T9412] __sys_bpf+0x7c1/0x950 [ 278.201878][ T9412] ? __pfx___sys_bpf+0x10/0x10 [ 278.201917][ T9412] ? ksys_write+0x242/0x270 [ 278.201938][ T9412] ? __pfx_ksys_write+0x10/0x10 [ 278.201964][ T9412] __x64_sys_bpf+0x7c/0x90 [ 278.201988][ T9412] do_syscall_64+0x14d/0xf80 [ 278.202008][ T9412] ? trace_irq_disable+0x3b/0x150 [ 278.202032][ T9412] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.202051][ T9412] ? clear_bhb_loop+0x40/0x90 [ 278.202072][ T9412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.202089][ T9412] RIP: 0033:0x7fa5b899c799 [ 278.202106][ T9412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.202121][ T9412] RSP: 002b:00007fa5b993b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 278.202141][ T9412] RAX: ffffffffffffffda RBX: 00007fa5b8c15fa0 RCX: 00007fa5b899c799 [ 278.202154][ T9412] RDX: 0000000000000038 RSI: 0000200000000240 RDI: 000000000000001a [ 278.202166][ T9412] RBP: 00007fa5b993b090 R08: 0000000000000000 R09: 0000000000000000 [ 278.202177][ T9412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 278.202187][ T9412] R13: 00007fa5b8c16038 R14: 00007fa5b8c15fa0 R15: 00007fa5b8d3fa48 [ 278.202214][ T9412] [ 279.408095][ T10] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 279.788181][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 280.029613][ T10] usb 3-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 280.038945][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.064605][ T10] usb 3-1: config 0 descriptor?? [ 280.121059][ T10] rndis_host 3-1:0.0: probe with driver rndis_host failed with error -22 [ 280.322578][ T797] usb 3-1: USB disconnect, device number 23 [ 280.862662][ T9438] input: syz1 as /devices/virtual/input/input18 [ 281.439585][ T9441] IPVS: Scheduler module ip_vs_ not found [ 281.640832][ T9408] tipc: Resetting bearer [ 281.695714][ T9408] tipc: Disabling bearer [ 281.996342][ T5913] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 282.420707][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 282.420724][ T30] audit: type=1326 audit(1774333518.285:5829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9462 comm="syz.0.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09b3f9c799 code=0x7ffc0000 [ 282.474221][ T5913] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 282.573388][ T9374] tipc: Resetting bearer [ 282.633757][ T9374] tipc: Disabling bearer [ 283.037047][ T30] audit: type=1326 audit(1774333518.325:5830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9462 comm="syz.0.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f09b3f9c799 code=0x7ffc0000 [ 283.208227][ T30] audit: type=1326 audit(1774333518.325:5831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9462 comm="syz.0.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09b3f9c799 code=0x7ffc0000 [ 283.387485][ T30] audit: type=1326 audit(1774333518.325:5832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9462 comm="syz.0.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f09b3f9c799 code=0x7ffc0000 [ 283.868378][ T30] audit: type=1326 audit(1774333518.325:5833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9462 comm="syz.0.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09b3f9c799 code=0x7ffc0000 [ 283.893332][ T30] audit: type=1326 audit(1774333518.325:5834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9462 comm="syz.0.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f09b3f9c799 code=0x7ffc0000 [ 283.933157][ T30] audit: type=1326 audit(1774333518.325:5835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9462 comm="syz.0.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09b3f9c799 code=0x7ffc0000 [ 283.965931][ T30] audit: type=1326 audit(1774333518.325:5836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9462 comm="syz.0.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09b3f9c799 code=0x7ffc0000 [ 283.966596][ T5875] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 284.035671][ T30] audit: type=1326 audit(1774333518.325:5837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9462 comm="syz.0.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f09b3f9c799 code=0x7ffc0000 [ 284.172629][ T30] audit: type=1326 audit(1774333518.325:5838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9462 comm="syz.0.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09b3f9c799 code=0x7ffc0000 [ 284.309845][ T5875] usb 3-1: Using ep0 maxpacket: 16 [ 284.379812][ T5875] usb 3-1: config 0 has no interfaces? [ 284.387841][ T5875] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 284.397178][ T5875] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 284.407334][ T5875] usb 3-1: Manufacturer: syz [ 284.420711][ T5875] usb 3-1: config 0 descriptor?? [ 284.478172][ T10] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 284.678099][ T10] usb 4-1: device descriptor read/64, error -71 [ 284.751601][ T9492] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1009'. [ 284.928527][ T10] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 285.078150][ T10] usb 4-1: device descriptor read/64, error -71 [ 285.226280][ T10] usb usb4-port1: attempt power cycle [ 285.314954][ T9504] input: syz1 as /devices/virtual/input/input19 [ 285.628258][ T10] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 285.648904][ T10] usb 4-1: device descriptor read/8, error -71 [ 285.888532][ T10] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 285.908704][ T10] usb 4-1: device descriptor read/8, error -71 [ 286.018743][ T10] usb usb4-port1: unable to enumerate USB device [ 286.853923][ T5875] usb 3-1: USB disconnect, device number 24 [ 287.553562][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 287.553581][ T30] audit: type=1326 audit(1774333523.315:5857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9527 comm="syz.3.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b899c799 code=0x7ffc0000 [ 287.595016][ T30] audit: type=1326 audit(1774333523.315:5858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9527 comm="syz.3.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b899c799 code=0x7ffc0000 [ 287.635992][ T30] audit: type=1326 audit(1774333523.315:5859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9527 comm="syz.3.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa5b899c799 code=0x7ffc0000 [ 287.710837][ T30] audit: type=1326 audit(1774333523.315:5860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9527 comm="syz.3.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b899c799 code=0x7ffc0000 [ 287.734841][ T30] audit: type=1326 audit(1774333523.315:5861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9527 comm="syz.3.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b899c799 code=0x7ffc0000 [ 287.954582][ T9540] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1021'. [ 287.955463][ T30] audit: type=1326 audit(1774333523.315:5862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9527 comm="syz.3.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fa5b899c799 code=0x7ffc0000 [ 288.089735][ T30] audit: type=1326 audit(1774333523.315:5863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9527 comm="syz.3.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b899c799 code=0x7ffc0000 [ 288.320404][ T30] audit: type=1326 audit(1774333523.315:5864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9527 comm="syz.3.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fa5b899c799 code=0x7ffc0000 [ 288.355241][ T30] audit: type=1326 audit(1774333523.315:5865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9527 comm="syz.3.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b899c799 code=0x7ffc0000 [ 288.384968][ T9548] input: syz1 as /devices/virtual/input/input20 [ 288.423032][ T30] audit: type=1326 audit(1774333523.315:5866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9527 comm="syz.3.1020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa5b899c799 code=0x7ffc0000 [ 288.832022][ T9552] syzkaller0: entered promiscuous mode [ 288.894417][ T9554] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1026'. [ 288.920340][ T9554] 8021q: adding VLAN 0 to HW filter on device bond3 [ 289.258161][ T797] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 289.635607][ T9572] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1031'. [ 289.648767][ T797] usb 4-1: Using ep0 maxpacket: 8 [ 289.723475][ T797] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 289.735094][ T797] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x6F, changing to 0xF [ 289.747037][ T797] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 289.797429][ T5882] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 289.832025][ T797] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 289.884406][ T797] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 289.948394][ T797] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 289.957719][ T797] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 289.965985][ T797] usb 4-1: Product: syz [ 289.970390][ T797] usb 4-1: Manufacturer: syz [ 289.999348][ T797] usb 4-1: SerialNumber: syz [ 290.073558][ T797] usb 4-1: config 0 descriptor?? [ 290.083747][ T797] radio-si470x 4-1:0.0: could not find interrupt in endpoint [ 290.098574][ T797] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 290.152835][ T797] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 290.198130][ T5875] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 290.239155][ T797] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 290.300985][ T797] usb 4-1: USB disconnect, device number 27 [ 290.358271][ T5875] usb 3-1: Using ep0 maxpacket: 32 [ 290.374384][ T5875] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 290.411268][ T5875] usb 3-1: config 0 has no interface number 0 [ 290.417429][ T5875] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 290.453332][ T5875] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 290.478176][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.486246][ T5875] usb 3-1: Product: syz [ 290.504146][ T5875] usb 3-1: Manufacturer: syz [ 290.512535][ T5875] usb 3-1: SerialNumber: syz [ 290.521465][ T5875] usb 3-1: config 0 descriptor?? [ 290.527108][ T9581] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 290.892906][ T9581] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 291.729388][ T9608] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1040'. [ 291.738518][ T9608] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1040'. [ 292.031095][ T5875] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 292.045037][ T5875] asix 3-1:0.188: probe with driver asix failed with error -61 [ 292.112997][ T9611] input: syz1 as /devices/virtual/input/input21 [ 293.068213][ T9630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.120614][ T9630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.265283][ T9636] Set syz1 is full, maxelem 65536 reached [ 293.391046][ T10] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 293.611607][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 293.611623][ T30] audit: type=1326 audit(1774333529.475:5907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9643 comm="syz.0.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09b3f9c799 code=0x7ffc0000 [ 293.659845][ T30] audit: type=1326 audit(1774333529.475:5908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9643 comm="syz.0.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f09b3f9c799 code=0x7ffc0000 [ 293.669926][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.756054][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.778277][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 293.797875][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 293.814401][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.814432][ T30] audit: type=1326 audit(1774333529.475:5909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9643 comm="syz.0.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09b3f9c799 code=0x7ffc0000 [ 293.866426][ T10] usb 4-1: config 0 descriptor?? [ 293.883864][ T30] audit: type=1326 audit(1774333529.475:5910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9643 comm="syz.0.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f09b3f9c799 code=0x7ffc0000 [ 293.923267][ T30] audit: type=1326 audit(1774333529.515:5911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9643 comm="syz.0.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09b3f9c799 code=0x7ffc0000 [ 293.968354][ T5875] usb 5-1: new low-speed USB device number 29 using dummy_hcd [ 293.991765][ T30] audit: type=1326 audit(1774333529.515:5912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9643 comm="syz.0.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f09b3f9c799 code=0x7ffc0000 [ 294.068712][ T30] audit: type=1326 audit(1774333529.515:5913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9643 comm="syz.0.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09b3f9c799 code=0x7ffc0000 [ 294.109104][ T5875] usb 5-1: device descriptor read/64, error -71 [ 294.147717][ T30] audit: type=1326 audit(1774333529.515:5914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9643 comm="syz.0.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f09b3f9c799 code=0x7ffc0000 [ 294.201522][ T5903] usb 3-1: USB disconnect, device number 25 [ 294.355245][ T9655] fuse: Bad value for 'fd' [ 294.365901][ T5875] usb 5-1: new low-speed USB device number 30 using dummy_hcd [ 294.383733][ T30] audit: type=1326 audit(1774333529.515:5915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9643 comm="syz.0.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09b3f9c799 code=0x7ffc0000 [ 294.501454][ T5875] usb 5-1: device descriptor read/64, error -71 [ 294.512064][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 294.518753][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 294.526386][ T30] audit: type=1326 audit(1774333529.515:5916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9643 comm="syz.0.1052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f09b3f9c799 code=0x7ffc0000 [ 294.579382][ T10] usb 4-1: USB disconnect, device number 28 [ 294.668589][ T5875] usb usb5-port1: attempt power cycle [ 295.108334][ T5875] usb 5-1: new low-speed USB device number 31 using dummy_hcd [ 295.256266][ T5875] usb 5-1: device descriptor read/8, error -71 [ 295.508107][ T5875] usb 5-1: new low-speed USB device number 32 using dummy_hcd [ 295.538733][ T5875] usb 5-1: device descriptor read/8, error -71 [ 295.670760][ T5875] usb usb5-port1: unable to enumerate USB device [ 295.988191][ T5875] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 296.139296][ T5875] usb 4-1: Using ep0 maxpacket: 16 [ 296.163972][ T5875] usb 4-1: config 0 has no interfaces? [ 296.172342][ T5875] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 296.182130][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.190931][ T5875] usb 4-1: Product: syz [ 296.195144][ T5875] usb 4-1: Manufacturer: syz [ 296.200545][ T5875] usb 4-1: SerialNumber: syz [ 296.207123][ T5875] usb 4-1: config 0 descriptor?? [ 296.398115][ T5875] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 296.608316][ T5875] usb 3-1: Using ep0 maxpacket: 32 [ 296.615467][ T5875] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 296.623919][ T5875] usb 3-1: config 0 has no interface number 0 [ 296.654267][ T5875] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 296.732570][ T5875] usb 3-1: config 0 interface 85 has no altsetting 0 [ 296.754575][ T5875] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 296.769213][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.784746][ T5875] usb 3-1: Product: syz [ 296.791339][ T5875] usb 3-1: Manufacturer: syz [ 296.808264][ T5875] usb 3-1: SerialNumber: syz [ 296.826654][ T5875] usb 3-1: config 0 descriptor?? [ 297.387495][ T5875] appletouch 3-1:0.85: Geyser mode initialized. [ 297.407150][ T5875] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input22 [ 297.583844][ T5875] usb 4-1: USB disconnect, device number 29 [ 297.721716][ T9682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.731321][ T9682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.843560][ T9697] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1069'. [ 299.205786][ T5903] usb 3-1: USB disconnect, device number 26 [ 299.272196][ T5903] appletouch 3-1:0.85: input: appletouch disconnected [ 299.481280][ T9716] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1074'. [ 300.558271][ T30] kauditd_printk_skb: 263 callbacks suppressed [ 300.558291][ T30] audit: type=1326 audit(1774333536.415:6180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9727 comm="syz.0.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09b3f9c799 code=0x7ffc0000 [ 300.612649][ T9732] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 300.646226][ T9732] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 300.813231][ T30] audit: type=1326 audit(1774333536.415:6181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9727 comm="syz.0.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09b3f9c799 code=0x7ffc0000 [ 300.908219][ T30] audit: type=1326 audit(1774333536.455:6182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9727 comm="syz.0.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f09b3f9c799 code=0x7ffc0000 [ 300.931881][ T30] audit: type=1326 audit(1774333536.455:6183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9727 comm="syz.0.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09b3f9c799 code=0x7ffc0000 [ 300.957189][ T30] audit: type=1326 audit(1774333536.455:6184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9727 comm="syz.0.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f09b3f9c799 code=0x7ffc0000 [ 301.102719][ T30] audit: type=1326 audit(1774333536.455:6185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9727 comm="syz.0.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09b3f9c799 code=0x7ffc0000 [ 301.153700][ T30] audit: type=1326 audit(1774333536.565:6186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9727 comm="syz.0.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f09b3f9c799 code=0x7ffc0000 [ 301.225825][ T9737] pimreg: entered allmulticast mode [ 301.287090][ T30] audit: type=1326 audit(1774333536.565:6187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9727 comm="syz.0.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09b3f9c799 code=0x7ffc0000 [ 301.376700][ T30] audit: type=1326 audit(1774333536.565:6188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9727 comm="syz.0.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09b3f9c799 code=0x7ffc0000 [ 301.498997][ T9744] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 301.633503][ T30] audit: type=1326 audit(1774333536.875:6189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9727 comm="syz.0.1078" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f09b3f9c799 code=0x7ffc0000 [ 301.730601][ T9744] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 301.809156][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 302.464834][ T9762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1084'. [ 302.869649][ T5882] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 303.156338][ T5882] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 303.165790][ T5882] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 303.209349][ T5882] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 303.219234][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.243668][ T5882] usb 2-1: Product: syz [ 303.285939][ T5882] usb 2-1: Manufacturer: syz [ 303.300936][ T5882] usb 2-1: SerialNumber: syz [ 303.353986][ T5882] usb 2-1: config 0 descriptor?? [ 303.667355][ T5882] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 304.529647][ T5935] usb 2-1: USB disconnect, device number 19 [ 304.583288][ T9793] FAULT_INJECTION: forcing a failure. [ 304.583288][ T9793] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 304.597483][ T9793] CPU: 0 UID: 0 PID: 9793 Comm: syz.0.1092 Tainted: G L syzkaller #0 PREEMPT(full) [ 304.597514][ T9793] Tainted: [L]=SOFTLOCKUP [ 304.597520][ T9793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 304.597531][ T9793] Call Trace: [ 304.597538][ T9793] [ 304.597546][ T9793] dump_stack_lvl+0xe8/0x150 [ 304.597577][ T9793] should_fail_ex+0x412/0x560 [ 304.597608][ T9793] _copy_from_iter+0x1d3/0x1670 [ 304.597640][ T9793] ? rcu_is_watching+0x15/0xb0 [ 304.597713][ T9793] ? __pfx__copy_from_iter+0x10/0x10 [ 304.597748][ T9793] ? netlink_sendmsg+0x650/0xb40 [ 304.597869][ T9793] ? skb_put+0x11b/0x210 [ 304.597940][ T9793] netlink_sendmsg+0x6c0/0xb40 [ 304.597966][ T9793] ? __pfx_netlink_sendmsg+0x10/0x10 [ 304.597986][ T9793] ? aa_sock_msg_perm+0xf1/0x1b0 [ 304.598085][ T9793] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 304.598117][ T9793] ____sys_sendmsg+0x972/0x9f0 [ 304.598169][ T9793] ? __pfx_____sys_sendmsg+0x10/0x10 [ 304.598197][ T9793] ? import_iovec+0x73/0xa0 [ 304.598219][ T9793] ___sys_sendmsg+0x2a5/0x360 [ 304.598244][ T9793] ? __pfx____sys_sendmsg+0x10/0x10 [ 304.598294][ T9793] ? __fget_files+0x2a/0x420 [ 304.598317][ T9793] ? __fget_files+0x3a0/0x420 [ 304.598350][ T9793] __x64_sys_sendmsg+0x1bd/0x2a0 [ 304.598373][ T9793] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 304.598400][ T9793] ? __pfx_ksys_write+0x10/0x10 [ 304.598430][ T9793] do_syscall_64+0x14d/0xf80 [ 304.598451][ T9793] ? trace_irq_disable+0x3b/0x150 [ 304.598475][ T9793] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.598492][ T9793] ? clear_bhb_loop+0x40/0x90 [ 304.598513][ T9793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.598530][ T9793] RIP: 0033:0x7f09b3f9c799 [ 304.598547][ T9793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 304.598563][ T9793] RSP: 002b:00007f09b4db8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 304.598582][ T9793] RAX: ffffffffffffffda RBX: 00007f09b4215fa0 RCX: 00007f09b3f9c799 [ 304.598596][ T9793] RDX: 0000000004040050 RSI: 0000200000003dc0 RDI: 0000000000000003 [ 304.598607][ T9793] RBP: 00007f09b4db8090 R08: 0000000000000000 R09: 0000000000000000 [ 304.598619][ T9793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.598629][ T9793] R13: 00007f09b4216038 R14: 00007f09b4215fa0 R15: 00007f09b433fa48 [ 304.598658][ T9793] [ 305.075546][ T9803] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1097'. [ 305.182912][ T9806] bridge_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 305.326766][ T9811] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.1099' sets config #1 [ 305.367188][ T9818] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1102'. [ 305.477675][ T9824] syzkaller0: entered promiscuous mode [ 305.489085][ T9824] syzkaller0: entered allmulticast mode [ 305.495871][ T9826] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 305.568144][ T5935] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 305.705286][ T9838] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1106'. [ 305.732481][ T9838] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1106'. [ 305.749327][ T5935] usb 2-1: too many configurations: 13, using maximum allowed: 8 [ 305.759903][ T5935] usb 2-1: config 0 has no interfaces? [ 305.766967][ T5935] usb 2-1: config 0 has no interfaces? [ 305.773795][ T5935] usb 2-1: config 0 has no interfaces? [ 305.782399][ T5935] usb 2-1: config 0 has no interfaces? [ 305.789086][ T5935] usb 2-1: config 0 has no interfaces? [ 305.795817][ T5935] usb 2-1: config 0 has no interfaces? [ 305.802347][ T5935] usb 2-1: config 0 has no interfaces? [ 305.809949][ T5935] usb 2-1: config 0 has no interfaces? [ 305.817695][ T5935] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 305.827042][ T5935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.835342][ T5935] usb 2-1: Product: syz [ 305.841150][ T5935] usb 2-1: Manufacturer: syz [ 305.846998][ T5935] usb 2-1: SerialNumber: syz [ 305.883165][ T5935] usb 2-1: config 0 descriptor?? [ 306.049118][ T9838] ip6gretap0: entered promiscuous mode [ 306.090627][ T9841] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check. [ 306.110538][ T9814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.119517][ T5935] [ 306.121871][ T5935] ============================================ [ 306.128075][ T5935] WARNING: possible recursive locking detected [ 306.134293][ T5935] syzkaller #0 Tainted: G L [ 306.140267][ T5935] -------------------------------------------- [ 306.146416][ T5935] kworker/0:9/5935 is trying to acquire lock: [ 306.152471][ T5935] ffff88805be50fb0 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 306.161688][ T5935] [ 306.161688][ T5935] but task is already holding lock: [ 306.169045][ T5935] ffff88807c060fb0 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 306.178108][ T5935] [ 306.178108][ T5935] other info that might help us debug this: [ 306.186152][ T5935] Possible unsafe locking scenario: [ 306.186152][ T5935] [ 306.193656][ T5935] CPU0 [ 306.196917][ T5935] ---- [ 306.200231][ T5935] lock(&hsr->seqnr_lock); [ 306.204712][ T5935] lock(&hsr->seqnr_lock); [ 306.209189][ T5935] [ 306.209189][ T5935] *** DEADLOCK *** [ 306.209189][ T5935] [ 306.217305][ T5935] May be due to missing lock nesting notation [ 306.217305][ T5935] [ 306.225596][ T5935] 13 locks held by kworker/0:9/5935: [ 306.230851][ T5935] #0: ffff8880313f4d48 ((wq_completion)mld){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 306.241568][ T5935] #1: ffffc90004897c40 ((work_completion)(&(&idev->mc_ifc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 306.254668][ T5935] #2: ffff88805009d538 (&idev->mc_lock){+.+.}-{4:4}, at: mld_ifc_work+0x2d/0xe70 [ 306.263945][ T5935] #3: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: mld_sendpack+0x213/0xe40 [ 306.273164][ T5935] #4: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550 [ 306.282273][ T5935] #5: ffffffff8e75e640 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x277/0x3890 [ 306.292198][ T5935] #6: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360 [ 306.301319][ T5935] #7: ffff88807c060fb0 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 306.310774][ T5935] #8: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: hsr_forward_skb+0xb3/0x2860 [ 306.320245][ T5935] #9: ffffffff8e75e640 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x277/0x3890 [ 306.330131][ T5935] #10: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: br_dev_xmit+0x193/0x1980 [ 306.339499][ T5935] #11: ffffffff8e75e640 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x277/0x3890 [ 306.349490][ T5935] #12: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360 [ 306.358683][ T5935] [ 306.358683][ T5935] stack backtrace: [ 306.364557][ T5935] CPU: 0 UID: 0 PID: 5935 Comm: kworker/0:9 Tainted: G L syzkaller #0 PREEMPT(full) [ 306.364571][ T5935] Tainted: [L]=SOFTLOCKUP [ 306.364575][ T5935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 306.364584][ T5935] Workqueue: mld mld_ifc_work [ 306.364596][ T5935] Call Trace: [ 306.364603][ T5935] [ 306.364608][ T5935] dump_stack_lvl+0xe8/0x150 [ 306.364623][ T5935] print_deadlock_bug+0x279/0x290 [ 306.364667][ T5935] __lock_acquire+0x253f/0x2cf0 [ 306.364680][ T5935] ? __lock_acquire+0x6b5/0x2cf0 [ 306.364692][ T5935] ? unwind_next_frame+0xa5/0x23c0 [ 306.364711][ T5935] ? unwind_next_frame+0x1aaf/0x23c0 [ 306.364725][ T5935] lock_acquire+0xf0/0x2e0 [ 306.364736][ T5935] ? hsr_dev_xmit+0x237/0x360 [ 306.364750][ T5935] ? hsr_dev_xmit+0x237/0x360 [ 306.364761][ T5935] _raw_spin_lock_bh+0x36/0x50 [ 306.364772][ T5935] ? hsr_dev_xmit+0x237/0x360 [ 306.364783][ T5935] hsr_dev_xmit+0x237/0x360 [ 306.364794][ T5935] ? hsr_dev_xmit+0x2d/0x360 [ 306.364806][ T5935] dev_hard_start_xmit+0x2d8/0x870 [ 306.364822][ T5935] __dev_queue_xmit+0x16d1/0x3890 [ 306.364835][ T5935] ? __dev_queue_xmit+0x277/0x3890 [ 306.364846][ T5935] ? lockdep_hardirqs_on+0x7a/0x110 [ 306.364855][ T5935] ? ebt_do_table+0x2665/0x2830 [ 306.364952][ T5935] ? __local_bh_enable_ip+0xd0/0x130 [ 306.364965][ T5935] ? ebt_do_table+0x2665/0x2830 [ 306.364979][ T5935] ? __pfx___dev_queue_xmit+0x10/0x10 [ 306.364994][ T5935] ? br_nf_post_routing+0x219/0xfe0 [ 306.365008][ T5935] br_dev_queue_push_xmit+0x370/0x4a0 [ 306.365021][ T5935] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 306.365032][ T5935] NF_HOOK+0x360/0x3f0 [ 306.365043][ T5935] ? NF_HOOK+0xa2/0x3f0 [ 306.365053][ T5935] ? __pfx_NF_HOOK+0x10/0x10 [ 306.365063][ T5935] ? ret_from_fork+0x51e/0xb90 [ 306.365081][ T5935] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 306.365094][ T5935] br_forward_finish+0xd3/0x130 [ 306.365104][ T5935] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 306.365115][ T5935] ? __pfx_br_forward_finish+0x10/0x10 [ 306.365126][ T5935] NF_HOOK+0x360/0x3f0 [ 306.365137][ T5935] ? NF_HOOK+0xa2/0x3f0 [ 306.365147][ T5935] ? __pfx_NF_HOOK+0x10/0x10 [ 306.365157][ T5935] ? __pfx_br_forward_finish+0x10/0x10 [ 306.365169][ T5935] ? __skb_clone+0x483/0x7a0 [ 306.365204][ T5935] ? br_handle_vlan+0x61/0x530 [ 306.365236][ T5935] __br_forward+0x397/0x540 [ 306.365247][ T5935] ? __pfx_br_forward_finish+0x10/0x10 [ 306.365258][ T5935] br_flood+0x6ee/0xb80 [ 306.365271][ T5935] ? br_dev_xmit+0x193/0x1980 [ 306.365285][ T5935] br_dev_xmit+0x12bd/0x1980 [ 306.365298][ T5935] ? br_dev_xmit+0x193/0x1980 [ 306.365312][ T5935] ? __pfx_br_dev_xmit+0x10/0x10 [ 306.365324][ T5935] ? __skb_get_hash_net+0x13f/0x2e0 [ 306.365357][ T5935] ? __pfx___skb_get_hash_net+0x10/0x10 [ 306.365367][ T5935] ? qdisc_pkt_len_segs_init+0x2c4/0x970 [ 306.365379][ T5935] ? skb_network_protocol+0x23d/0x3f0 [ 306.365390][ T5935] ? __pfx_passthru_features_check+0x10/0x10 [ 306.365402][ T5935] dev_hard_start_xmit+0x2d8/0x870 [ 306.365415][ T5935] __dev_queue_xmit+0x16d1/0x3890 [ 306.365428][ T5935] ? __dev_queue_xmit+0x277/0x3890 [ 306.365440][ T5935] ? kmem_cache_alloc_node_noprof+0x3ce/0x690 [ 306.365453][ T5935] ? __pfx___dev_queue_xmit+0x10/0x10 [ 306.365463][ T5935] ? __asan_memcpy+0x40/0x70 [ 306.365472][ T5935] ? __pskb_copy_fclone+0x9c8/0xff0 [ 306.365483][ T5935] ? __asan_memcpy+0x40/0x70 [ 306.365492][ T5935] ? __pskb_copy_fclone+0x9c8/0xff0 [ 306.365503][ T5935] ? hsr_create_tagged_frame+0x500/0xe10 [ 306.365518][ T5935] ? __asan_memmove+0x40/0x70 [ 306.365526][ T5935] ? hsr_create_tagged_frame+0x8cd/0xe10 [ 306.365539][ T5935] ? hsr_addr_subst_dest+0x30d/0xa90 [ 306.365553][ T5935] hsr_forward_skb+0x157b/0x2860 [ 306.365562][ T5935] ? ret_from_fork_asm+0x1a/0x30 [ 306.365577][ T5935] ? hsr_forward_skb+0xb3/0x2860 [ 306.365587][ T5935] ? __pfx_hsr_forward_skb+0x10/0x10 [ 306.365595][ T5935] ? do_raw_spin_lock+0x12b/0x2f0 [ 306.365605][ T5935] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 306.365615][ T5935] ? hsr_dev_xmit+0x237/0x360 [ 306.365633][ T5935] hsr_dev_xmit+0x242/0x360 [ 306.365645][ T5935] ? hsr_dev_xmit+0x2d/0x360 [ 306.365657][ T5935] dev_hard_start_xmit+0x2d8/0x870 [ 306.365670][ T5935] __dev_queue_xmit+0x16d1/0x3890 [ 306.365683][ T5935] ? __dev_queue_xmit+0x277/0x3890 [ 306.365694][ T5935] ? ___neigh_create+0x1c5f/0x2280 [ 306.365730][ T5935] ? __local_bh_enable_ip+0xd0/0x130 [ 306.365742][ T5935] ? __pfx___dev_queue_xmit+0x10/0x10 [ 306.365753][ T5935] ? neigh_connected_output+0x1ea/0x460 [ 306.365767][ T5935] ? eth_header+0x11b/0x200 [ 306.365806][ T5935] ? __asan_memcpy+0x40/0x70 [ 306.365815][ T5935] ? eth_header+0x11b/0x200 [ 306.365823][ T5935] ? __pfx_eth_header+0x10/0x10 [ 306.365833][ T5935] ? neigh_connected_output+0x3b6/0x460 [ 306.365848][ T5935] ? ip6_output+0x126/0x550 [ 306.365863][ T5935] ip6_output+0x340/0x550 [ 306.365876][ T5935] ? __pfx_ip6_output+0x10/0x10 [ 306.365890][ T5935] NF_HOOK+0x177/0x4f0 [ 306.365899][ T5935] ? __pfx_NF_HOOK+0x10/0x10 [ 306.365909][ T5935] ? __pfx_dst_output+0x10/0x10 [ 306.365917][ T5935] ? lockdep_hardirqs_on+0x7a/0x110 [ 306.365927][ T5935] ? __local_bh_enable_ip+0xd0/0x130 [ 306.365938][ T5935] ? icmp6_dst_alloc+0x3a6/0x440 [ 306.365970][ T5935] mld_sendpack+0x8b4/0xe40 [ 306.365979][ T5935] ? look_up_lock_class+0x57/0x110 [ 306.365991][ T5935] ? mld_sendpack+0x213/0xe40 [ 306.366000][ T5935] ? __pfx_mld_sendpack+0x10/0x10 [ 306.366012][ T5935] mld_ifc_work+0x835/0xe70 [ 306.366022][ T5935] ? process_scheduled_works+0xa8d/0x18c0 [ 306.366034][ T5935] process_scheduled_works+0xb6e/0x18c0 [ 306.366052][ T5935] ? __pfx_process_scheduled_works+0x10/0x10 [ 306.366064][ T5935] ? assign_work+0x3d5/0x5e0 [ 306.366076][ T5935] worker_thread+0xa53/0xfc0 [ 306.366096][ T5935] kthread+0x388/0x470 [ 306.366119][ T5935] ? __pfx_worker_thread+0x10/0x10 [ 306.366137][ T5935] ? __pfx_kthread+0x10/0x10 [ 306.366149][ T5935] ret_from_fork+0x51e/0xb90 [ 306.366166][ T5935] ? __pfx_ret_from_fork+0x10/0x10 [ 306.366182][ T5935] ? __switch_to+0xc7d/0x1450 [ 306.366205][ T5935] ? __pfx_kthread+0x10/0x10 [ 306.366218][ T5935] ret_from_fork_asm+0x1a/0x30 [ 306.366240][ T5935] [ 306.951479][ T5935] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 306.959479][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 306.963807][ T9814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.968326][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 307.075232][ T10] usb 2-1: USB disconnect, device number 20 [ 307.084253][ T6077] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 307.098244][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 307.208293][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 307.318291][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 307.388450][ T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 307.404712][ T9846] fuse: Bad value for 'fd' [ 307.421025][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 307.421044][ T30] audit: type=1326 audit(1774333543.265:6192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9843 comm="syz.3.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b899c799 code=0x7ffc0000 [ 307.470856][ T30] audit: type=1326 audit(1774333543.265:6194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9843 comm="syz.3.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b899c799 code=0x7ffc0000 [ 307.511528][ T30] audit: type=1326 audit(1774333543.265:6195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9843 comm="syz.3.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b899c799 code=0x7ffc0000 [ 307.544856][ T30] audit: type=1326 audit(1774333543.265:6193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9843 comm="syz.3.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b899c799 code=0x7ffc0000 [ 307.588089][ T30] audit: type=1326 audit(1774333543.265:6196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9843 comm="syz.3.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa5b899c799 code=0x7ffc0000 [ 307.610742][ T30] audit: type=1326 audit(1774333543.265:6197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9843 comm="syz.3.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b899c799 code=0x7ffc0000 [ 307.633761][ T30] audit: type=1326 audit(1774333543.265:6198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9843 comm="syz.3.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b899c799 code=0x7ffc0000 [ 307.656455][ T30] audit: type=1326 audit(1774333543.265:6199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9843 comm="syz.3.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b899c799 code=0x7ffc0000 [ 307.679283][ T30] audit: type=1326 audit(1774333543.265:6200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9843 comm="syz.3.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=445 compat=0 ip=0x7fa5b899c799 code=0x7ffc0000 [ 307.702471][ T30] audit: type=1326 audit(1774333543.265:6201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9843 comm="syz.3.1108" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5b899c799 code=0x7ffc0000 [ 307.758078][ T10] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 307.909389][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 307.920591][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 307.930922][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 307.943787][ T10] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 307.953689][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.962053][ T10] usb 2-1: Product: syz [ 307.966472][ T10] usb 2-1: Manufacturer: syz [ 307.971659][ T10] usb 2-1: SerialNumber: syz [ 307.978429][ T10] usb 2-1: config 0 descriptor?? [ 308.128703][ T1336] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 308.136768][ T1336] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 308.189358][ T10] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 308.642224][ T9847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.652917][ T9847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.735002][ T797] usb 2-1: USB disconnect, device number 21 [ 312.049342][ C0] ip6_tnl_xmit_ctl: 3 callbacks suppressed [ 312.049364][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 313.488245][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 315.568261][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!