last executing test programs: 16m8.565857658s ago: executing program 1 (id=611): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$SG_SET_DEBUG(r5, 0x227e, 0x0) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x0, 0x9, 0x5, 0x0, 0x7043}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010069703667726500001c0002800600030080000000080004000300000006000e00020000006c96743f898dd104495c5a97a79c73a6e8a86aa550ec76800b88eaa414e98a2a55b47d8c47d2923aadf4d1b057ed3bae71862c83da9718970337c02cffbafc3f13137949ab8f9befb3bd106559d94d3019f7eed9194b7de8bf662fae14a5dd3bfb2295171cbdaca02ebe31445c40828d62d5458fd2304697bb531bfdcefb71fe6432e56200738f66179959bac6415d1d93c461527a22a467f5a9ca6dc9a04a73fe78767234a88e22a3d96f38194eefbe039c65407c18c204f6f712cef0a338040f"], 0x4c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) munmap(&(0x7f00006bb000/0x1000)=nil, 0x1000) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000005180)={0x2020}, 0x2020) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000002f80)=@mangle={'mangle\x00', 0x44, 0x6, 0x4a0, 0x138, 0x0, 0x368, 0x1d0, 0x138, 0x408, 0x408, 0x408, 0x408, 0x408, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x4}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff000000, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x11, 0x0, 0x28}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x10, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0xffffff00, 'vlan1\x00', 'nr0\x00', {}, {0xff}}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @multicast2, 0xff, 0xffffff00, 'ip6gre0\x00', 'virt_wifi0\x00', {0xff}, {}, 0x2e, 0x0, 0x1}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {0xe6d959333babc205}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500) socket$kcm(0x29, 0xc, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) shutdown(r0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002fff500240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c001080080001400000000008"], 0x80}}, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 16m7.600664426s ago: executing program 1 (id=613): r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup3(r1, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 16m7.464624023s ago: executing program 1 (id=614): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x52, 0x0, 0x88, {0x0, 0x1}, {0x75, 0x2}, @const={0x2, {0x2, 0x3400}}}) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x963b01) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd1d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x4, 0x9}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4c, 0x2, [@TCA_FLOWER_ACT={0x48, 0x3, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x7, 0x8, 0x6, 0x5f3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8848}, 0x4080) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCGKEY(r2, 0x80404518, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) r7 = socket(0x80000000000000a, 0x80000, 0x20000) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000340)="0000000000000002ff69000020000801000000180000000200b900861fa72e5b01504104bfeacdd5a9007d16", 0x2c, 0xffffffffffffffff) r9 = socket$rds(0x15, 0x5, 0x0) bind$rds(r9, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r9, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000001280)={0x0, [[0x101, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7f3], [0x2, 0x9, 0x0, 0x0, 0x0, 0xecdc, 0xfffffffc, 0xfffffffc], [0xb, 0x5, 0x0, 0x0, 0xc3d3, 0x0, 0x0, 0x20001]], '\x00', [{0x0, 0x3}, {0x1000000}, {0x3, 0x4}, {0x0, 0x803}, {0x1000}, {0x0, 0x1000}, {0x200000, 0x3}, {0xffffffff}, {0x0, 0x4}, {0x5, 0xffffffff}, {0xd, 0x400000}, {0x10000}], '\x00', 0x401, 0x0, 0x0, 0x2}) recvmmsg(r8, &(0x7f0000000d80), 0x0, 0x10162, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2a, 0x0, 0x0) 16m6.144097644s ago: executing program 1 (id=619): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_LIMIT_BURST={0x8}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}}, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001b80)={'bridge0\x00', &(0x7f0000000000)=@ethtool_coalesce={0xf, 0x7, 0x7, 0x7ffd, 0x5, 0x5, 0x4, 0x3ff, 0xfffffff7, 0x1, 0x1, 0x96be, 0x9, 0x4, 0xebfc, 0x6, 0x3, 0x3, 0x2, 0x4, 0x8, 0x4, 0xff}}) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f00000001c0)={r0, &(0x7f0000000080)='\x00', 0x34d800, &(0x7f0000000100)={@_ha_fsid={[0x0, 0x5]}, {0x3, 0xa, 0x3, 0x8}}, 0x9, &(0x7f0000000140), &(0x7f0000000180)}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f0000000440)={0x14, &(0x7f0000000300)={0x20, 0xf, 0xee, {0xee, 0x10, "164ab69615a85e20faac06d0d982dabcb63fbfc7b102054acd8b225ee34ea756c43ce0e9c0956626e474fefd814d33200cd59a7e526ce2319e239817b148a8375d8e90ca4a599b519fd82a08ae1ae473e4d7171947fb5a19abe20be22f7eb0dd1b13bef86bdf376291d5c0fb218f45179cfa69b2ffafb457d4980dc6457f53317dd2e918a1421a166609d084bbbf25747b7e06b1b1a6dd035cbf0b707133b36f8ace9b50b0787dfa67ec04da0328889589464b3a58b57748bccff68f20e545c8f26ef9c4468fd5c57b07420435927427257c14385c7984418e70b076c99740c64f0927e09784eba0944f6e87"}}, &(0x7f0000000400)={0x0, 0x3, 0x7, @string={0x7, 0x3, "65a28b1963"}}}, &(0x7f0000000800)={0x44, &(0x7f0000000480)={0x40, 0x8, 0x96, "a1922600a4db8843566dcdaba6beb3e4e5c4ea415cafcb6a1bdd3dfcb46d0facb049457d851ac09e9b9ca43396fd59506f388863dec80592f5a6560b35e4296fe9f3aba448e879d0fb2881448ae2e4ca15e8fc73e8a713be8cd3aecea434ac7e2add914280a6b5cdc936a37cef61e1df235616f812e7ee28a90cb0b7574584cf2a9af47a44e594f4360e79ad92e28341915fad3b9921"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000006c0)={0x20, 0x81, 0x3, "987c0b"}, &(0x7f0000000700)={0x20, 0x82, 0x3, "c01708"}, &(0x7f0000000740)={0x20, 0x83, 0x2, "da4b"}, &(0x7f0000000780)={0x20, 0x84, 0x3, "97bc48"}, &(0x7f00000007c0)={0x20, 0x85, 0x3, "7cdf99"}}) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r6 = open_tree(r4, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r2, &(0x7f00000002c0)={&(0x7f0000000200), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x2, 0x9, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1b}]}, 0x24}, 0x1, 0x0, 0x0, 0x40041}, 0x2015) 16m4.664120045s ago: executing program 1 (id=624): socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000280)={&(0x7f00000059c0)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, r6}) r7 = syz_genetlink_get_family_id$devlink(0x0, r4) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0xd0, r7, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9609}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80c}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xc}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', 0x8, 0x1) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00}) fsopen(0x0, 0x0) socket(0x2b, 0xa, 0x3) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1001}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r10 = dup(r9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x12, r10, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) 16m4.366278685s ago: executing program 1 (id=626): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x5, 0x802, 0x0, {}, {0x77359400}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "cb7d302847bb1a28e8a4004b789607ed47df355645f2178a039ed508ff76df3536741848cc6cb65c6e77aad714472cb8856fcdd536f9d9655dcf800549436e96"}}, 0x80}}, 0x800) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x48, 0x1e, 0x109, 0x2, 0x25dfdbfc, {}, [{0x34, 0x1, [@m_mirred={0x30, 0x8, 0x0, 0x0, {{0xb, 0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x48}, 0x1, 0x2b1e, 0x0, 0x20044000}, 0x2000c000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xd24}, {0x0, 0x4000}, {0x0, 0x21}, {0x0}, {&(0x7f00000020c0)}], 0x5}, 0x0) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x1, {{0x43, 0x1}, 0x3}}, 0x10) 16m4.004158165s ago: executing program 32 (id=626): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x5, 0x802, 0x0, {}, {0x77359400}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "cb7d302847bb1a28e8a4004b789607ed47df355645f2178a039ed508ff76df3536741848cc6cb65c6e77aad714472cb8856fcdd536f9d9655dcf800549436e96"}}, 0x80}}, 0x800) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x48, 0x1e, 0x109, 0x2, 0x25dfdbfc, {}, [{0x34, 0x1, [@m_mirred={0x30, 0x8, 0x0, 0x0, {{0xb, 0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x48}, 0x1, 0x2b1e, 0x0, 0x20044000}, 0x2000c000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xd24}, {0x0, 0x4000}, {0x0, 0x21}, {0x0}, {&(0x7f00000020c0)}], 0x5}, 0x0) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x1, {{0x43, 0x1}, 0x3}}, 0x10) 7m33.359564862s ago: executing program 5 (id=2266): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e22, 0xfffffffd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r1 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000ffdbdf250c000000200001801400020076657468315f746f5f6873720000000008000300030000001800038014000380"], 0x4c}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) writev(r1, &(0x7f0000000540)=[{&(0x7f00000005c0)}], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="00000000000000001c001a800800028008000200080000003e1200000800"], 0x44}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000340)={'syztnl2\x00', &(0x7f0000000240)={'gretap0\x00', 0x0, 0x10, 0x721, 0x7fff, 0x7fffffff, {{0x2b, 0x4, 0x1, 0xd, 0xac, 0x67, 0x0, 0xff, 0x29, 0x0, @private=0xa010101, @loopback, {[@generic={0x94, 0xc, "5dc47e4b67c93ba9c280"}, @cipso={0x86, 0x24, 0x1, [{0x5, 0x4, 'W('}, {0x5, 0xb, "af44bdd6eaa71dc913"}, {0x6, 0x6, "2c3d4690"}, {0x5, 0x9, "ed3f24a7fc2d0e"}]}, @generic={0x88, 0x6, "a7ae4607"}, @timestamp_prespec={0x44, 0x4c, 0xcd, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffff7}, {@remote, 0x3}, {@broadcast, 0x6}, {@local, 0x132d}, {@local, 0x100}, {@local, 0x7ac}, {@rand_addr=0x64010102, 0xa}, {@remote, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}]}, @ssrr={0x89, 0x13, 0x5f, [@multicast2, @multicast1, @remote, @remote]}]}}}}}) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x400, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4, 0x1}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x64, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x812}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_CONTAINER={0x10, 0x2, 0x0, 0x0, {{0x1, 0x0, 0x5}, 'Z'}}]}]}]}}]}, 0x64}}, 0x40000) 7m32.896372817s ago: executing program 5 (id=2268): keyctl$get_keyring_id(0x0, 0x0, 0x4) io_uring_setup(0x5f41, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0x80000000, 0x80000}) r0 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x0, 0x0, 0x0, 0x0, 0x0, 0x62]}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00", 0x25}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000001"]) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x7f, 0x20203443, 0x0, [0x2], [0x800], [0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x80000]}) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) unshare(0x22020400) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x121c02, 0x0) r4 = getpgrp(0x0) getpgid(r4) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r3, 0x40107446, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r5, 0x28, 0x600, 0x0, &(0x7f0000000080)) 7m32.36998623s ago: executing program 5 (id=2270): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000c80)=ANY=[@ANYBLOB="bc00000021000100000001a800000000fc020000000000000000000000000000fc02000000000000000000000000000100000000000000000200002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100e0000001000000000000000000000000000000000000000000000000000000000a01010000000000000000000000000064010100000000000000eb09000000003c"], 0xbc}}, 0x0) 7m31.972362242s ago: executing program 5 (id=2272): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000180)={0x8}) write$UHID_CREATE(r3, &(0x7f0000001ac0)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000001a80)=""/24, 0xb, 0x103, 0x4, 0x0, 0x2, 0xc04}}, 0x120) write$UHID_DESTROY(r3, &(0x7f0000000040), 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'dummy0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x0, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0xd0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000091c2f20c81403006c05010203010902"], 0x0) mmap$xdp(&(0x7f0000344000/0x1000)=nil, 0x1000, 0x1000000, 0x13, r0, 0x100000000) 7m30.076107737s ago: executing program 5 (id=2278): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000019200)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0x3}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0xc801}, 0x8000) socket$netlink(0x10, 0x3, 0x1) 7m29.897447411s ago: executing program 5 (id=2279): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x80400) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) r3 = openat$urandom(0xffffffffffffff9c, 0x0, 0x581b02, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4) writev(r3, &(0x7f0000000380)=[{0x0}, {0x0}], 0x2) read$FUSE(0xffffffffffffffff, &(0x7f00000051c0)={0x2020}, 0xfffffecd) r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)=@usbdevfs_disconnect={0x0, 0x5516, 0x1000000}) ioctl$USBDEVFS_IOCTL(r5, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) openat$cgroup_int(r4, 0x0, 0x2, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r5, 0x80045505, &(0x7f0000000000)=0x1) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r7) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 7m14.628811361s ago: executing program 33 (id=2279): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x80400) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xb, 0x8000000000000000, 0x6, 0xfa11, 0xffffffff}, 0x0) r3 = openat$urandom(0xffffffffffffff9c, 0x0, 0x581b02, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4) writev(r3, &(0x7f0000000380)=[{0x0}, {0x0}], 0x2) read$FUSE(0xffffffffffffffff, &(0x7f00000051c0)={0x2020}, 0xfffffecd) r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)=@usbdevfs_disconnect={0x0, 0x5516, 0x1000000}) ioctl$USBDEVFS_IOCTL(r5, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) openat$cgroup_int(r4, 0x0, 0x2, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r5, 0x80045505, &(0x7f0000000000)=0x1) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r7) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 1m32.385964438s ago: executing program 0 (id=3660): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) add_key$user(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xffffffffffffffff) 1m32.237828111s ago: executing program 0 (id=3662): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40081}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240000000000018ab6e14000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x4, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f00000009c0)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b4002b007e", 0x2b}], 0x1}, 0x0) 1m32.116577487s ago: executing program 4 (id=3664): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x503, 0xfffffffc, 0x40000, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x31}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 1m32.036423392s ago: executing program 0 (id=3666): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) socketpair(0x22, 0x3, 0xfffffff9, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_int(r1, 0x0, 0x15, &(0x7f0000000200)=0x4, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100040}, 0xc, &(0x7f00000000c0)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88a8}]}]}, @NFT_MSG_DELSET={0x1c, 0xb, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e24, @remote}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @private0}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}, 0xfd}, 0x18) sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0x1}, 0x18, &(0x7f0000000180)={&(0x7f00000002c0)="92557aac2cf961b6e1", 0x9}, 0x1, 0x0, 0x0, 0x8046}, 0x4000000) sendmsg$can_j1939(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}, 0xfd}, 0x18, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x10000000}, 0x40000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0x3, 0x28}, 0x2e) setsockopt$sock_int(r6, 0x1, 0x6, 0x0, 0x0) sendmsg$inet(r6, 0x0, 0x4048081) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r7, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 1m31.985352684s ago: executing program 4 (id=3668): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x7}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x2}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 1m31.898233171s ago: executing program 4 (id=3670): getdents(0xffffffffffffffff, 0x0, 0x0) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4bfa, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) syz_emit_ethernet(0x32, &(0x7f0000000140)={@random="3f0cb265933b", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0xe, 0x24, 0x66, 0x0, 0x3, 0x11, 0x0, @empty, @empty=0xe0000001}, {0x4e1f, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x6, 0x100}}}}}}}, 0x0) 1m31.85561308s ago: executing program 0 (id=3671): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000010000)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000100)={&(0x7f0000000480)=[{0x0, 0x8800, 0x0, 0x0}, {0x9, 0x6000, 0x0, 0x0}], 0x2}) 1m31.773989001s ago: executing program 6 (id=3673): r0 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) readv(r0, &(0x7f0000001480)=[{&(0x7f00000000c0)=""/29, 0x1d}], 0x1) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f0000000040)=0x4, 0x4) sendmsg(r1, &(0x7f0000002c40)={&(0x7f0000000140)=@in={0x2, 0x4e24, @empty}, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)='k', 0x1}], 0x1}, 0x0) 1m31.768291192s ago: executing program 4 (id=3674): ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000002c0)={&(0x7f00000001c0)=[{0x2, 0x8411, 0x22, &(0x7f00000006c0)="0203204bdcc36cda8907f47563863d1428f47b34551c000bce0f6bc6584f11a7489c"}], 0x1}) 1m31.509642932s ago: executing program 6 (id=3676): setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000300)={0x40, 0x3, 0x3, 0x3}, 0x10) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r0, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) 1m31.368355212s ago: executing program 6 (id=3677): r0 = openat$vsock(0xffffff9c, &(0x7f0000000040), 0x802, 0x0) writev(r0, 0x0, 0x0) 1m31.0081415s ago: executing program 6 (id=3679): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f18e55afb9fd0800000000000000d2dfa8237788bb71f36b177a80fb78c7699c74e891a0c7"}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0xfffffffd, @local, 0x1}, 0x1c) 1m30.108703616s ago: executing program 6 (id=3686): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) r1 = epoll_create1(0x80000) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x4, 0x7ffe, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfffffffe, 0xffffffff}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x22102, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r5, 0xc008aec1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffffff"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = syz_open_dev$vim2m(0x0, 0x5, 0x2) writev(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$vim2m_VIDIOC_DQBUF(r7, 0xc0585611, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) munmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000) openat$ttyprintk(0xffffff9c, &(0x7f0000000200), 0x84142, 0x0) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x185802, 0x0) sendfile(r8, r9, 0x0, 0xb524) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e60, 0x4, @remote, 0xb}, 0x1c) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x1e}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) 1m30.045974573s ago: executing program 2 (id=3687): bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) timer_create(0x9, 0x0, &(0x7f0000000500)) 1m29.91170652s ago: executing program 2 (id=3688): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000280)={0x4, 0x3132564e, 0x0, @discrete={0x3, 0x19b}}) 1m29.816728475s ago: executing program 3 (id=3689): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000080)={0x28, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan1\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) 1m29.742026883s ago: executing program 2 (id=3690): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newchain={0x24, 0x64, 0x1, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xffe0, 0x2}, {0xfff1, 0xc}, {0x0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20044801}, 0x0) 1m29.605175693s ago: executing program 3 (id=3691): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x8}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0x8, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x608, r6, 0x3e}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x5) 1m29.544905087s ago: executing program 2 (id=3692): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x16\x02\x00\x00\x00\x00\x00\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) write$binfmt_misc(r1, &(0x7f0000000740), 0xff67) sendfile(r0, r1, &(0x7f0000000000), 0xfffb) close(0x3) getsockopt(r0, 0x1, 0x4, &(0x7f0000000640)=""/172, &(0x7f0000000700)=0xac) 1m29.318991888s ago: executing program 2 (id=3693): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x2) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0xb, 0x318145a8, 0x0, 0xfffe, 0x2, 0xfffffff6, 0x0, 0x0, 0x20}}, 0x50) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x145042, 0x1) close(r0) 1m29.021856374s ago: executing program 2 (id=3694): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x88400) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x206, 0x3601) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$USBDEVFS_BULK(r1, 0x5523, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='htcp', 0x4) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x2, 0x2}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000100)={0x0, 0x0, 0x0}) r5 = socket$igmp(0x2, 0x3, 0x2) sendmmsg(r5, &(0x7f0000008200)=[{{&(0x7f00000008c0)=@l2tp={0x2, 0x0, @empty}, 0x80, 0x0}}, {{&(0x7f0000000c80)=@un=@abs={0x0, 0x0, 0x4e24}, 0x80, 0x0, 0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"/262], 0x10}}], 0x2, 0x844) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r3, 0xc01064ac, &(0x7f00000001c0)={r4, 0x41, &(0x7f0000000140)=""/65}) sendmsg$nl_route(r3, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x20080}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)=@ipv6_newrule={0x58, 0x20, 0x20, 0x70bd25, 0x25dfdbff, {0xa, 0x0, 0x10, 0x5, 0x0, 0x0, 0x0, 0x0, 0x17}, [@FRA_DST={0x14, 0x1, @private1}, @FRA_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FRA_SRC={0x14, 0x2, @mcast1}]}, 0x58}}, 0x48c4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c80)={{r3}, &(0x7f0000000c00), &(0x7f0000000c40)}, 0x1c) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x5c, r7, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @dev={0xfe, 0x80, '\x00', 0x39}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000240)={r3}, 0x8) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r9, 0x1e, &(0x7f0000000280)={r3}, 0x1) sendfile(r3, r3, 0x0, 0xe) 1m29.014363101s ago: executing program 4 (id=3695): sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0, @ANYBLOB="000327bd7000fedbdf251300000008000100706369303a30303a31302e3000000000080003000000000008000b00d009000006001100070000000800010070636900110002"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48050) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x18, &(0x7f0000000400)=@req3={0xc, 0x47, 0x8004, 0x4, 0x3, 0xfffffffe, 0xfffe0}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002cc0)=[{{0x0, 0x0, 0x0}, 0x13}], 0x1, 0x0, 0x0) socket(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace(0x4206, r5) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setsig(0x4203, r5, 0x6, &(0x7f0000000100)={0x2d, 0x5, 0x200}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@empty}}, &(0x7f0000000000)=0xe4) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) getgroups(0x2, &(0x7f00000000c0)=[0x0, 0x0]) fchown(r6, r7, r8) ptrace(0x4208, r5) r9 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_TRANSMIT(r9, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffff7, 0x2, 0x2, 0x0, 0x6, 0x5, "16a0bc0800", 0x1, 0x52, 0x4, 0x4, 0x9, 0x8, 0xa}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) 1m28.981228423s ago: executing program 3 (id=3696): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x2, &(0x7f00000000c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x1, 0x0, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x3) 1m28.952395978s ago: executing program 0 (id=3697): syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') close(0x3) 1m28.761002198s ago: executing program 3 (id=3698): unshare(0x2040400) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x8201, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x402c582b, 0x0) 1m28.726361401s ago: executing program 0 (id=3699): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x6000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x50) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x18) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 1m28.713795843s ago: executing program 3 (id=3700): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket(0x2d, 0x2, 0x0) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000100)=""/251, 0xfb}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1m27.466342903s ago: executing program 4 (id=3701): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x1043, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}}, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000680)={0x0, 0x4, 0x28}, 0xc) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x4b5, &(0x7f0000000580)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000), &(0x7f0000000000)) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) 1m27.329477843s ago: executing program 6 (id=3702): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x3, 0x5, 0x12, @mcast2, @private0, 0x10, 0x8007, 0x100, 0x5}}) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x7}]}, &(0x7f0000000180)=0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f00000004c0)={r2, @in={{0x2, 0xfffe, @empty}}, 0x0, 0x7ffe}, 0x90) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000000a00)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0xc52, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f00000004c0)="f3", 0x1}], 0x1}}], 0x1, 0x4000841) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) 1m27.157245015s ago: executing program 3 (id=3703): r0 = socket$isdn(0x22, 0x2, 0x10) recvmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x1d17}], 0x1, 0x40000060, 0x0) 0s ago: executing program 34 (id=3699): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x6000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x50) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x18) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) kernel console output (not intermixed with test programs): [ 1016.650483][T17870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1016.692137][T17870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1016.704172][T17947] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3103'. [ 1017.299511][T17870] hsr_slave_0: entered promiscuous mode [ 1017.484906][T17870] hsr_slave_1: entered promiscuous mode [ 1017.588521][T17870] debugfs: 'hsr0' already exists in 'hsr' [ 1017.599729][T17870] Cannot create hsr debugfs directory [ 1017.986711][ T1226] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1018.066813][ T5825] Bluetooth: hci0: command tx timeout [ 1018.180289][ T1226] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1018.196493][ T1226] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.224899][ T1226] usb 7-1: Product: syz [ 1018.250599][ T1226] usb 7-1: Manufacturer: syz [ 1018.260419][ T1226] usb 7-1: SerialNumber: syz [ 1018.301228][T17982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3110'. [ 1018.321622][T17982] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3110'. [ 1018.607314][T12285] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1018.681307][T17995] FAULT_INJECTION: forcing a failure. [ 1018.681307][T17995] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1018.697674][T17995] CPU: 1 UID: 0 PID: 17995 Comm: syz.2.3113 Tainted: G L syzkaller #0 PREEMPT(full) [ 1018.697702][T17995] Tainted: [L]=SOFTLOCKUP [ 1018.697709][T17995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1018.697722][T17995] Call Trace: [ 1018.697729][T17995] [ 1018.697737][T17995] dump_stack_lvl+0xe8/0x150 [ 1018.697769][T17995] should_fail_ex+0x412/0x560 [ 1018.697802][T17995] _copy_to_user+0x31/0xb0 [ 1018.697827][T17995] simple_read_from_buffer+0xe1/0x170 [ 1018.697859][T17995] proc_fail_nth_read+0x1bb/0x230 [ 1018.697890][T17995] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1018.697921][T17995] ? rw_verify_area+0x2a6/0x4d0 [ 1018.697942][T17995] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1018.697971][T17995] vfs_read+0x20c/0xa70 [ 1018.697989][T17995] ? fdget_pos+0x246/0x320 [ 1018.698006][T17995] ? ksys_read+0x1e6/0x270 [ 1018.698029][T17995] ? __pfx___mutex_lock+0x10/0x10 [ 1018.698055][T17995] ? __pfx_vfs_read+0x10/0x10 [ 1018.698077][T17995] ? __fget_files+0x2a/0x420 [ 1018.698098][T17995] ? __fget_files+0x3a0/0x420 [ 1018.698114][T17995] ? __fget_files+0x2a/0x420 [ 1018.698144][T17995] ksys_read+0x150/0x270 [ 1018.698167][T17995] ? __pfx_ksys_read+0x10/0x10 [ 1018.698197][T17995] do_syscall_64+0x14d/0xf80 [ 1018.698221][T17995] ? trace_irq_disable+0x3b/0x150 [ 1018.698237][T17995] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.698257][T17995] ? clear_bhb_loop+0x40/0x90 [ 1018.698279][T17995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.698298][T17995] RIP: 0033:0x7f6ddf55d04e [ 1018.698316][T17995] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1018.698332][T17995] RSP: 002b:00007f6de0454fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1018.698352][T17995] RAX: ffffffffffffffda RBX: 00007f6de04556c0 RCX: 00007f6ddf55d04e [ 1018.698366][T17995] RDX: 000000000000000f RSI: 00007f6de04550a0 RDI: 0000000000000005 [ 1018.698378][T17995] RBP: 00007f6de0455090 R08: 0000000000000000 R09: 0000000000000000 [ 1018.698390][T17995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1018.698401][T17995] R13: 00007f6ddf816038 R14: 00007f6ddf815fa0 R15: 00007f6ddf93fa48 [ 1018.698431][T17995] [ 1018.936460][T12285] usb 1-1: Using ep0 maxpacket: 16 [ 1018.949797][T17970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1018.967603][T12285] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1018.991410][T17997] input: syz0 as /devices/virtual/input/input34 [ 1018.998147][T17970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1019.030682][T12285] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1019.055149][T17870] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1019.069370][T17870] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1019.092067][T12285] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1019.105486][T17870] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1019.139803][T17870] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1019.153899][T12285] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1019.239799][T12285] usb 1-1: config 0 descriptor?? [ 1019.385656][T17870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1019.414253][T17870] 8021q: adding VLAN 0 to HW filter on device team0 [ 1019.430252][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1019.437436][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1019.453834][T12285] usbhid 1-1:0.0: can't add hid device: -71 [ 1019.462562][T12285] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1019.486064][ T1226] rtl8150 7-1:1.0: couldn't reset the device [ 1019.492423][ T1226] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5 [ 1019.513055][T16655] bridge0: port 2(bridge_slave_1) entered blocking state [ 1019.517485][T12285] usb 1-1: USB disconnect, device number 87 [ 1019.520401][T16655] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1019.555224][ T1226] usb 7-1: USB disconnect, device number 17 [ 1019.903642][T17870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1019.980310][T17870] veth0_vlan: entered promiscuous mode [ 1020.034447][T17870] veth1_vlan: entered promiscuous mode [ 1020.224339][ T5825] Bluetooth: hci0: command tx timeout [ 1020.295010][T17870] veth0_macvtap: entered promiscuous mode [ 1020.310332][T17870] veth1_macvtap: entered promiscuous mode [ 1020.574461][T17870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1020.726596][T18015] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1020.750127][T17870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1020.876584][T18015] usb 1-1: Using ep0 maxpacket: 8 [ 1020.883482][T18015] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1020.896223][T18015] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1020.908386][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1020.921479][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1020.935221][T18015] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1020.962268][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1020.971753][T18015] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 1020.984211][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1020.993650][T18015] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1021.007164][T18015] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1021.049432][T18015] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.063910][T18015] usb 1-1: config 0 descriptor?? [ 1021.072329][T18026] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1021.283537][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1021.291952][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1021.303504][T18015] usb 1-1: USB disconnect, device number 88 [ 1021.305582][ T5825] Bluetooth: hci1: Opcode 0x0c03 failed: -71 [ 1021.385499][T18041] FAULT_INJECTION: forcing a failure. [ 1021.385499][T18041] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1021.406455][T18041] CPU: 0 UID: 0 PID: 18041 Comm: syz.3.3124 Tainted: G L syzkaller #0 PREEMPT(full) [ 1021.406485][T18041] Tainted: [L]=SOFTLOCKUP [ 1021.406493][T18041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1021.406506][T18041] Call Trace: [ 1021.406514][T18041] [ 1021.406524][T18041] dump_stack_lvl+0xe8/0x150 [ 1021.406557][T18041] should_fail_ex+0x412/0x560 [ 1021.406591][T18041] prepare_alloc_pages+0x22a/0x650 [ 1021.406623][T18041] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1021.406652][T18041] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1021.406681][T18041] ? __pfx_policy_nodemask+0x10/0x10 [ 1021.406717][T18041] alloc_pages_mpol+0x232/0x4a0 [ 1021.406758][T18041] ___kmalloc_large_node+0x4e/0x150 [ 1021.406782][T18041] __kmalloc_large_node_noprof+0x18/0x90 [ 1021.406806][T18041] __kmalloc_noprof+0x3e8/0x760 [ 1021.406834][T18041] ? rds_message_alloc+0x47/0x1f0 [ 1021.406868][T18041] rds_message_alloc+0x47/0x1f0 [ 1021.406898][T18041] rds_sendmsg+0xb0f/0x2150 [ 1021.406929][T18041] ? __pfx_rds_sendmsg+0x10/0x10 [ 1021.406956][T18041] ? __pfx_aa_sk_perm+0x10/0x10 [ 1021.406982][T18041] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1021.407008][T18041] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1021.407057][T18041] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1021.407085][T18041] ____sys_sendmsg+0x972/0x9f0 [ 1021.407119][T18041] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1021.407154][T18041] ? import_iovec+0x73/0xa0 [ 1021.407182][T18041] ___sys_sendmsg+0x2a5/0x360 [ 1021.407213][T18041] ? __pfx____sys_sendmsg+0x10/0x10 [ 1021.407271][T18041] ? __fget_files+0x2a/0x420 [ 1021.407290][T18041] ? __fget_files+0x3a0/0x420 [ 1021.407318][T18041] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1021.407346][T18041] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1021.407381][T18041] ? __pfx_ksys_write+0x10/0x10 [ 1021.407415][T18041] do_syscall_64+0x14d/0xf80 [ 1021.407440][T18041] ? trace_irq_disable+0x3b/0x150 [ 1021.407458][T18041] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1021.407480][T18041] ? clear_bhb_loop+0x40/0x90 [ 1021.407505][T18041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1021.407526][T18041] RIP: 0033:0x7f002579c819 [ 1021.407545][T18041] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1021.407563][T18041] RSP: 002b:00007f00239f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1021.407585][T18041] RAX: ffffffffffffffda RBX: 00007f0025a16180 RCX: 00007f002579c819 [ 1021.407601][T18041] RDX: 0000000000000000 RSI: 0000200000001600 RDI: 0000000000000008 [ 1021.407614][T18041] RBP: 00007f00239f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1021.407627][T18041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1021.407639][T18041] R13: 00007f0025a16218 R14: 00007f0025a16180 R15: 00007f0025b3fa48 [ 1021.407670][T18041] [ 1021.865503][T16654] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1021.873434][T16654] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1021.966349][T18044] input: syz0 as /devices/virtual/input/input35 [ 1022.323057][ T5825] Bluetooth: hci0: command tx timeout [ 1022.394118][T18058] xt_TCPMSS: Only works on TCP SYN packets [ 1022.525019][T18065] netlink: 'syz.4.3088': attribute type 3 has an invalid length. [ 1023.997480][T18077] netlink: 'syz.6.3135': attribute type 15 has an invalid length. [ 1024.423763][T18089] netlink: 212356 bytes leftover after parsing attributes in process `syz.4.3138'. [ 1024.649516][T18097] netlink: 'syz.0.3142': attribute type 3 has an invalid length. [ 1025.408219][T18106] openvswitch: netlink: Key type 248 is out of range max 32 [ 1026.041867][ T5904] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 1026.064383][ T30] audit: type=1326 audit(1774976091.244:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18121 comm="syz.6.3151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dfcb9c819 code=0x7ffc0000 [ 1026.103419][ T5904] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1026.166859][ T30] audit: type=1326 audit(1774976091.244:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18121 comm="syz.6.3151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dfcb9c819 code=0x7ffc0000 [ 1026.250562][ T30] audit: type=1326 audit(1774976091.244:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18121 comm="syz.6.3151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7dfcb9c819 code=0x7ffc0000 [ 1026.325950][ T30] audit: type=1326 audit(1774976091.244:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18121 comm="syz.6.3151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dfcb9c819 code=0x7ffc0000 [ 1026.380385][ T30] audit: type=1326 audit(1774976091.244:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18121 comm="syz.6.3151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dfcb9c819 code=0x7ffc0000 [ 1026.434752][ T30] audit: type=1326 audit(1774976091.304:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18121 comm="syz.6.3151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f7dfcb9c819 code=0x7ffc0000 [ 1026.481628][T18129] netlink: 'syz.4.3153': attribute type 3 has an invalid length. [ 1026.516476][ T30] audit: type=1326 audit(1774976091.304:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18121 comm="syz.6.3151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dfcb9c819 code=0x7ffc0000 [ 1026.616448][ T30] audit: type=1326 audit(1774976091.304:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18121 comm="syz.6.3151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dfcb9c819 code=0x7ffc0000 [ 1026.664731][ T30] audit: type=1326 audit(1774976091.304:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18121 comm="syz.6.3151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7dfcb9c819 code=0x7ffc0000 [ 1026.743981][T18141] FAULT_INJECTION: forcing a failure. [ 1026.743981][T18141] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1026.759065][ T30] audit: type=1326 audit(1774976091.304:966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18121 comm="syz.6.3151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7dfcb9c819 code=0x7ffc0000 [ 1026.811931][T18141] CPU: 1 UID: 0 PID: 18141 Comm: syz.0.3156 Tainted: G L syzkaller #0 PREEMPT(full) [ 1026.811958][T18141] Tainted: [L]=SOFTLOCKUP [ 1026.811965][T18141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1026.811977][T18141] Call Trace: [ 1026.811985][T18141] [ 1026.811992][T18141] dump_stack_lvl+0xe8/0x150 [ 1026.812024][T18141] should_fail_ex+0x412/0x560 [ 1026.812057][T18141] _copy_to_user+0x31/0xb0 [ 1026.812082][T18141] simple_read_from_buffer+0xe1/0x170 [ 1026.812114][T18141] proc_fail_nth_read+0x1bb/0x230 [ 1026.812153][T18141] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1026.812184][T18141] ? rw_verify_area+0x2a6/0x4d0 [ 1026.812205][T18141] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1026.812234][T18141] vfs_read+0x20c/0xa70 [ 1026.812253][T18141] ? fdget_pos+0x246/0x320 [ 1026.812275][T18141] ? __pfx___mutex_lock+0x10/0x10 [ 1026.812301][T18141] ? __pfx_vfs_read+0x10/0x10 [ 1026.812323][T18141] ? __fget_files+0x2a/0x420 [ 1026.812344][T18141] ? __fget_files+0x3a0/0x420 [ 1026.812360][T18141] ? __fget_files+0x2a/0x420 [ 1026.812384][T18141] ksys_read+0x150/0x270 [ 1026.812406][T18141] ? __pfx_ksys_read+0x10/0x10 [ 1026.812437][T18141] do_syscall_64+0x14d/0xf80 [ 1026.812461][T18141] ? trace_irq_disable+0x3b/0x150 [ 1026.812478][T18141] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1026.812497][T18141] ? clear_bhb_loop+0x40/0x90 [ 1026.812520][T18141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1026.812539][T18141] RIP: 0033:0x7f23c255d04e [ 1026.812555][T18141] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1026.812571][T18141] RSP: 002b:00007f23c07f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1026.812591][T18141] RAX: ffffffffffffffda RBX: 00007f23c07f66c0 RCX: 00007f23c255d04e [ 1026.812605][T18141] RDX: 000000000000000f RSI: 00007f23c07f60a0 RDI: 0000000000000004 [ 1026.812617][T18141] RBP: 00007f23c07f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1026.812629][T18141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1026.812640][T18141] R13: 00007f23c2816128 R14: 00007f23c2816090 R15: 00007f23c293fa48 [ 1026.812668][T18141] [ 1027.110219][T18120] hid-generic 0000:0000:0000.001E: pid 18120 passed too large report [ 1027.227361][ T5904] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1027.237147][ T1226] usb 4-1: new full-speed USB device number 78 using dummy_hcd [ 1027.376529][ T5904] usb 5-1: Using ep0 maxpacket: 32 [ 1027.376688][T12285] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1027.396689][ T5918] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1027.404352][ T5904] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1027.414403][ T1226] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1027.423573][ T5904] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1027.433718][ T1226] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.442139][ T5904] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1027.448862][ T1226] usb 4-1: Product: syz [ 1027.453045][ T1226] usb 4-1: Manufacturer: syz [ 1027.457720][T18015] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1027.465420][ T1226] usb 4-1: SerialNumber: syz [ 1027.472601][ T5904] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1027.481703][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.491106][ T5904] usb 5-1: Product: syz [ 1027.496072][ T1226] usb 4-1: config 0 descriptor?? [ 1027.501241][ T5904] usb 5-1: Manufacturer: syz [ 1027.505872][ T5904] usb 5-1: SerialNumber: syz [ 1027.520121][ T5904] usb 5-1: config 0 descriptor?? [ 1027.538227][T12285] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1027.548123][T12285] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1027.566299][T12285] usb 3-1: config 0 descriptor?? [ 1027.566783][ T5918] usb 7-1: device descriptor read/64, error -71 [ 1027.621841][T18015] usb 1-1: config 0 has an invalid interface number: 33 but max is 0 [ 1027.630193][T18015] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1027.640403][T18015] usb 1-1: config 0 has no interface number 0 [ 1027.646594][T18015] usb 1-1: config 0 interface 33 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 1027.656694][T18015] usb 1-1: config 0 interface 33 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1027.672048][T18015] usb 1-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=68.64 [ 1027.681673][T18015] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.691869][T18015] usb 1-1: Product: syz [ 1027.696085][T18015] usb 1-1: Manufacturer: syz [ 1027.700790][T18015] usb 1-1: SerialNumber: syz [ 1027.708864][T18015] usb 1-1: config 0 descriptor?? [ 1027.715789][T18153] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 1027.731461][T18015] hdpvr 1-1:0.33: Could not find bulk-in endpoint [ 1027.741685][ T1226] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1027.752225][T18015] hdpvr 1-1:0.33: probe with driver hdpvr failed with error -12 [ 1027.781776][T12285] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1027.816494][ T5918] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1027.946692][ T5918] usb 7-1: device descriptor read/64, error -71 [ 1027.985341][T12285] [drm:udl_init] *ERROR* Selecting channel failed [ 1028.025401][T12285] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 1028.033197][T12285] [drm] Initialized udl on minor 2 [ 1028.041193][T12285] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1028.051577][T12285] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1028.057684][ T5918] usb usb7-port1: attempt power cycle [ 1028.064575][T12291] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1028.089496][T12285] usb 3-1: USB disconnect, device number 94 [ 1028.098282][T12291] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1028.426579][ T5918] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1028.457483][ T5918] usb 7-1: device descriptor read/8, error -71 [ 1028.697187][ T5918] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1028.740439][ T5918] usb 7-1: device descriptor read/8, error -71 [ 1028.786915][ T5904] gs_usb 5-1:0.0: Couldn't get device config: (err=-110) [ 1028.814140][ T5904] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -110 [ 1028.857378][ T5918] usb usb7-port1: unable to enumerate USB device [ 1028.921413][ T1226] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1028.936753][ T1226] usb 4-1: USB disconnect, device number 78 [ 1029.376489][ T5918] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1029.550717][ T5918] usb 3-1: Using ep0 maxpacket: 16 [ 1029.566864][ T5918] usb 3-1: config 0 has no interfaces? [ 1029.575549][ T5918] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1029.616813][ T5918] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1029.640822][ T5918] usb 3-1: Manufacturer: syz [ 1029.668016][ T5918] usb 3-1: config 0 descriptor?? [ 1029.821832][T18172] fuse: blksize only supported for fuseblk [ 1029.835121][T12285] usb 5-1: USB disconnect, device number 92 [ 1030.011521][T18175] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1030.399520][ T5918] usb 1-1: USB disconnect, device number 89 [ 1031.455909][T18199] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1031.489478][T18199] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1031.661504][T18202] netlink: 'syz.6.3175': attribute type 3 has an invalid length. [ 1031.763728][T18207] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3177'. [ 1031.793459][T18208] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3176'. [ 1031.911869][T12285] usb 3-1: USB disconnect, device number 95 [ 1032.016481][T12284] usb 7-1: new low-speed USB device number 22 using dummy_hcd [ 1032.181804][T12284] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1032.208016][T12284] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1032.248972][T12284] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1032.288587][T12284] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1032.317566][T12284] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.550489][T18216] blktrace: Concurrent blktraces are not allowed on sg0 [ 1032.752630][T12284] hub 7-1:1.0: bad descriptor, ignoring hub [ 1032.760816][T12284] hub 7-1:1.0: probe with driver hub failed with error -5 [ 1032.779235][T18218] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3179'. [ 1032.818545][T12284] cdc_wdm 7-1:1.0: skipping garbage [ 1032.830758][T12284] cdc_wdm 7-1:1.0: skipping garbage [ 1032.872033][T12284] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1032.925109][T12284] usb 7-1: USB disconnect, device number 22 [ 1033.456605][T12284] usb 7-1: new low-speed USB device number 23 using dummy_hcd [ 1033.630696][T12284] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1033.641579][T12284] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1033.885532][T12284] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1033.903325][T12284] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1033.931262][T12284] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.962015][T12284] hub 7-1:1.0: bad descriptor, ignoring hub [ 1033.973807][T12284] hub 7-1:1.0: probe with driver hub failed with error -5 [ 1033.986987][T12284] cdc_wdm 7-1:1.0: skipping garbage [ 1033.992470][T12284] cdc_wdm 7-1:1.0: skipping garbage [ 1034.085651][T12284] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1034.227600][T12284] usb 7-1: USB disconnect, device number 23 [ 1034.348939][ T5918] IPVS: starting estimator thread 0... [ 1034.436895][T18240] IPVS: using max 31 ests per chain, 74400 per kthread [ 1034.931561][T18247] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1035.110613][T18249] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3188'. [ 1035.152150][T18249] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3188'. [ 1035.330220][ T30] kauditd_printk_skb: 62 callbacks suppressed [ 1035.330235][ T30] audit: type=1326 audit(1774976100.514:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18250 comm="syz.3.3189" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f002579c819 code=0x0 [ 1036.659569][T18273] fuse: Unknown parameter 'user_i00000000000000000000' [ 1036.732114][T18270] nvme_fabrics: missing parameter 'transport=%s' [ 1036.866659][T18270] nvme_fabrics: missing parameter 'nqn=%s' [ 1037.093369][T18279] xt_TCPMSS: Only works on TCP SYN packets [ 1037.629452][T18281] input: syz1 as /devices/virtual/input/input37 [ 1038.600783][T18293] netlink: 'syz.4.3199': attribute type 1 has an invalid length. [ 1038.638042][T18293] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3199'. [ 1038.666463][ T1226] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1038.836475][ T1226] usb 7-1: Using ep0 maxpacket: 32 [ 1038.844132][ T1226] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 1038.878139][ T1226] usb 7-1: config 0 has no interface number 0 [ 1038.992324][ T1226] usb 7-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1039.040331][ T1226] usb 7-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1039.082159][ T1226] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.108229][ T1226] usb 7-1: Product: syz [ 1039.115915][ T1226] usb 7-1: Manufacturer: syz [ 1039.129518][ T1226] usb 7-1: SerialNumber: syz [ 1039.165504][ T1226] usb 7-1: config 0 descriptor?? [ 1039.213123][ T1226] em28xx 7-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1039.225174][ T1226] em28xx 7-1:0.132: Video interface 132 found: [ 1039.289844][T18304] netlink: 'syz.2.3203': attribute type 29 has an invalid length. [ 1039.313234][T18304] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3203'. [ 1039.803625][ T5918] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1039.810300][T18289] netlink: 'syz.6.3197': attribute type 10 has an invalid length. [ 1039.887445][T18289] team0: Device xfrm0 is of different type [ 1039.975837][ T1226] em28xx 7-1:0.132: unknown em28xx chip ID (0) [ 1040.049662][ T5918] usb 3-1: config index 0 descriptor too short (expected 59188, got 18) [ 1040.058838][ T5918] usb 3-1: config 51 has too many interfaces: 77, using maximum allowed: 32 [ 1040.067716][ T1226] em28xx 7-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 1040.096446][ T1226] em28xx 7-1:0.132: board has no eeprom [ 1040.107101][ T5918] usb 3-1: config 51 has an invalid descriptor of length 187, skipping remainder of the config [ 1040.126712][ T5918] usb 3-1: config 51 has 0 interfaces, different from the descriptor's value: 77 [ 1040.167839][ T5918] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1040.178442][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.187360][ T1226] em28xx 7-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1040.199600][ T1226] em28xx 7-1:0.132: analog set to bulk mode. [ 1040.219915][ T5904] em28xx 7-1:0.132: Registering V4L2 extension [ 1040.227937][ T5918] usb 3-1: Product: syz [ 1040.232129][ T5918] usb 3-1: Manufacturer: syz [ 1040.246722][ T1226] usb 7-1: USB disconnect, device number 24 [ 1040.270743][ T5918] usb 3-1: SerialNumber: syz [ 1040.281882][ T1226] em28xx 7-1:0.132: Disconnecting em28xx [ 1040.660685][T18321] netlink: 'syz.6.3205': attribute type 3 has an invalid length. [ 1040.848300][ T5904] em28xx 7-1:0.132: Config register raw data: 0xffffffed [ 1040.855498][ T5904] em28xx 7-1:0.132: AC97 chip type couldn't be determined [ 1040.886500][ T5904] em28xx 7-1:0.132: No AC97 audio processor [ 1040.937964][ T5904] usb 7-1: Decoder not found [ 1040.942617][ T5904] em28xx 7-1:0.132: failed to create media graph [ 1040.954156][ T5904] em28xx 7-1:0.132: V4L2 device video103 deregistered [ 1040.997116][ T5904] em28xx 7-1:0.132: Remote control support is not available for this card. [ 1041.046726][ T1226] em28xx 7-1:0.132: Closing input extension [ 1041.094377][ T1226] em28xx 7-1:0.132: Freeing device [ 1041.230748][ T5918] usb 3-1: USB disconnect, device number 96 [ 1041.406742][ T1226] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1041.630085][T18345] fuse: Unknown parameter 'user_i00000000000000000000' [ 1041.711325][ T1226] usb 7-1: Using ep0 maxpacket: 8 [ 1041.738570][ T1226] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 1041.750476][ T1226] usb 7-1: config 0 has no interface number 0 [ 1041.757432][ T1226] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1041.795740][ T1226] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1041.835818][ T1226] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1041.848737][ T1226] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1041.873688][T18349] binder: 18342:18349 ioctl c0306201 0 returned -14 [ 1041.915065][T18349] syz.4.3213 (18349): drop_caches: 2 [ 1041.940433][ T1226] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1041.964788][ T1226] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1042.222293][ T1226] usb 7-1: config 0 descriptor?? [ 1042.249331][ T1226] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1042.533559][T18357] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3214'. [ 1042.589367][T18357] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3214'. [ 1042.607275][T18325] ldusb 7-1:0.55: Write buffer overflow, 3782 bytes dropped [ 1042.976488][ T5918] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1043.156472][ T5918] usb 3-1: Using ep0 maxpacket: 16 [ 1043.199011][ T5918] usb 3-1: config 0 has no interfaces? [ 1043.296624][ T5918] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1043.336708][ T5918] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1043.396772][ T5918] usb 3-1: Manufacturer: syz [ 1043.474087][ T5918] usb 3-1: config 0 descriptor?? [ 1043.779284][T18357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1043.795134][T18357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1043.881671][ T5918] usb 7-1: USB disconnect, device number 25 [ 1043.935186][ T5918] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 1044.733254][T18015] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1044.946753][T18015] usb 7-1: Using ep0 maxpacket: 16 [ 1045.187101][T18015] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1045.291822][T18015] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1045.394567][T18015] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1045.418664][ T5918] usb 3-1: USB disconnect, device number 97 [ 1045.476806][T18381] netlink: 'syz.4.3220': attribute type 4 has an invalid length. [ 1045.560190][T18015] usb 7-1: config 0 descriptor?? [ 1045.993054][T18015] mcp2221 0003:04D8:00DD.001F: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 1046.397382][T18374] xt_TCPMSS: Only works on TCP SYN packets [ 1046.896495][ T1226] usb 3-1: new low-speed USB device number 98 using dummy_hcd [ 1046.916998][T18015] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1047.032764][ T1226] usb 3-1: device descriptor read/64, error -71 [ 1047.108536][T18015] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1047.126753][T18015] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1047.162328][T18015] usb 1-1: New USB device found, idVendor=046d, idProduct=0a07, bcdDevice= 0.00 [ 1047.194878][T18015] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1047.235882][T18015] usb 1-1: config 0 descriptor?? [ 1047.286470][ T1226] usb 3-1: new low-speed USB device number 99 using dummy_hcd [ 1047.416500][ T1226] usb 3-1: device descriptor read/64, error -71 [ 1047.528520][ T5904] usb 7-1: USB disconnect, device number 26 [ 1047.543986][ T1226] usb usb3-port1: attempt power cycle [ 1047.673958][T18394] xt_TCPMSS: Only works on TCP SYN packets [ 1047.958365][ T1226] usb 3-1: new low-speed USB device number 100 using dummy_hcd [ 1047.989221][ T1226] usb 3-1: device descriptor read/8, error -71 [ 1048.057940][T18015] lg-g15 0003:046D:0A07.0020: unknown main item tag 0x0 [ 1048.202964][T18015] lg-g15 0003:046D:0A07.0020: unknown main item tag 0x0 [ 1048.225234][T18015] lg-g15 0003:046D:0A07.0020: unknown main item tag 0x0 [ 1048.235843][T18015] lg-g15 0003:046D:0A07.0020: unknown main item tag 0x0 [ 1048.251082][ T1226] usb 3-1: new low-speed USB device number 101 using dummy_hcd [ 1048.262408][T18015] lg-g15 0003:046D:0A07.0020: unknown main item tag 0x0 [ 1048.289814][ T1226] usb 3-1: device descriptor read/8, error -71 [ 1048.300166][T18406] netlink: 'syz.4.3228': attribute type 14 has an invalid length. [ 1048.412755][ T1226] usb usb3-port1: unable to enumerate USB device [ 1048.454762][T18015] lg-g15 0003:046D:0A07.0020: hidraw0: USB HID v0.00 Device [HID 046d:0a07] on usb-dummy_hcd.0-1/input0 [ 1049.691545][T12285] usb 1-1: USB disconnect, device number 90 [ 1050.194159][T18430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3233'. [ 1050.950679][T18435] fuse: Bad value for 'fd' [ 1050.992489][T18427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3232'. [ 1051.004795][T18427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3232'. [ 1051.682124][T18449] FAULT_INJECTION: forcing a failure. [ 1051.682124][T18449] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1051.695550][T18449] CPU: 1 UID: 0 PID: 18449 Comm: syz.6.3240 Tainted: G L syzkaller #0 PREEMPT(full) [ 1051.695579][T18449] Tainted: [L]=SOFTLOCKUP [ 1051.695587][T18449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1051.695599][T18449] Call Trace: [ 1051.695607][T18449] [ 1051.695615][T18449] dump_stack_lvl+0xe8/0x150 [ 1051.695647][T18449] should_fail_ex+0x412/0x560 [ 1051.695681][T18449] _copy_to_user+0x31/0xb0 [ 1051.695706][T18449] simple_read_from_buffer+0xe1/0x170 [ 1051.695739][T18449] proc_fail_nth_read+0x1bb/0x230 [ 1051.695770][T18449] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1051.695800][T18449] ? rw_verify_area+0x2a6/0x4d0 [ 1051.695820][T18449] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1051.695848][T18449] vfs_read+0x20c/0xa70 [ 1051.695867][T18449] ? fdget_pos+0x246/0x320 [ 1051.695888][T18449] ? __pfx___mutex_lock+0x10/0x10 [ 1051.695915][T18449] ? __pfx_vfs_read+0x10/0x10 [ 1051.695937][T18449] ? __fget_files+0x2a/0x420 [ 1051.695957][T18449] ? __fget_files+0x3a0/0x420 [ 1051.695974][T18449] ? __fget_files+0x2a/0x420 [ 1051.695998][T18449] ksys_read+0x150/0x270 [ 1051.696027][T18449] ? __pfx_ksys_read+0x10/0x10 [ 1051.696058][T18449] do_syscall_64+0x14d/0xf80 [ 1051.696081][T18449] ? trace_irq_disable+0x3b/0x150 [ 1051.696098][T18449] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1051.696117][T18449] ? clear_bhb_loop+0x40/0x90 [ 1051.696141][T18449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1051.696160][T18449] RIP: 0033:0x7f7dfcb5d04e [ 1051.696177][T18449] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1051.696193][T18449] RSP: 002b:00007f7dfda54fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1051.696213][T18449] RAX: ffffffffffffffda RBX: 00007f7dfda556c0 RCX: 00007f7dfcb5d04e [ 1051.696227][T18449] RDX: 000000000000000f RSI: 00007f7dfda550a0 RDI: 0000000000000004 [ 1051.696239][T18449] RBP: 00007f7dfda55090 R08: 0000000000000000 R09: 0000000000000000 [ 1051.696250][T18449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1051.696261][T18449] R13: 00007f7dfce16038 R14: 00007f7dfce15fa0 R15: 00007f7dfcf3fa48 [ 1051.696289][T18449] [ 1052.262128][T18453] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3242'. [ 1052.398768][T18453] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1052.476927][T18457] bond1: (slave macvlan1): Enslaving as an active interface with an up link [ 1053.168665][T18453] bond1 (unregistering): (slave macvlan1): Releasing backup interface [ 1053.257578][T18453] bond1 (unregistering): Released all slaves [ 1053.396509][ T5904] usb 7-1: new low-speed USB device number 27 using dummy_hcd [ 1053.508694][T18472] input: syz1 as /devices/virtual/input/input38 [ 1053.548638][ T5904] usb 7-1: device descriptor read/64, error -71 [ 1053.786472][ T5904] usb 7-1: new low-speed USB device number 28 using dummy_hcd [ 1053.937202][ T5904] usb 7-1: device descriptor read/64, error -71 [ 1054.012255][ T30] audit: type=1326 audit(1774976119.194:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18486 comm="syz.4.3251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38f339c819 code=0x7ffc0000 [ 1054.035188][ T30] audit: type=1326 audit(1774976119.204:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18486 comm="syz.4.3251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38f339c819 code=0x7ffc0000 [ 1054.066136][ T5904] usb usb7-port1: attempt power cycle [ 1054.135231][ T30] audit: type=1326 audit(1774976119.214:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18486 comm="syz.4.3251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f38f339c819 code=0x7ffc0000 [ 1054.471391][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.477808][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.529886][ T30] audit: type=1326 audit(1774976119.314:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18486 comm="syz.4.3251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38f339c819 code=0x7ffc0000 [ 1054.587757][T18494] netlink: 'syz.2.3253': attribute type 4 has an invalid length. [ 1054.647865][ T30] audit: type=1326 audit(1774976119.344:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18486 comm="syz.4.3251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f38f335d04e code=0x7ffc0000 [ 1054.670493][ T5904] usb 7-1: new low-speed USB device number 29 using dummy_hcd [ 1054.722654][ T5904] usb 7-1: device descriptor read/8, error -71 [ 1054.743996][ T30] audit: type=1326 audit(1774976119.404:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18486 comm="syz.4.3251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38f339c819 code=0x7ffc0000 [ 1054.801167][ T30] audit: type=1326 audit(1774976119.404:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18486 comm="syz.4.3251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38f339c819 code=0x7ffc0000 [ 1055.003812][ T30] audit: type=1326 audit(1774976119.574:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18486 comm="syz.4.3251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f38f339c819 code=0x7ffc0000 [ 1055.044603][ T30] audit: type=1326 audit(1774976119.574:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18486 comm="syz.4.3251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38f339c819 code=0x7ffc0000 [ 1055.078245][ T30] audit: type=1326 audit(1774976119.574:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18486 comm="syz.4.3251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f38f339c819 code=0x7ffc0000 [ 1055.100914][ T5904] usb 7-1: new low-speed USB device number 30 using dummy_hcd [ 1055.153485][ T5904] usb 7-1: device descriptor read/8, error -71 [ 1055.267402][ T5904] usb usb7-port1: unable to enumerate USB device [ 1055.623018][T18511] fuse: Bad value for 'fd' [ 1056.218579][T18518] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3259'. [ 1056.238459][T18518] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3259'. [ 1056.544669][T18523] fuse: Unknown parameter 'user_id00000000000000000000' [ 1056.676444][ T5904] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1056.866892][ T5904] usb 1-1: Using ep0 maxpacket: 16 [ 1056.893557][ T5904] usb 1-1: config 0 has no interfaces? [ 1056.917221][ T5904] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1057.011884][ T5904] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1057.057103][ T5904] usb 1-1: Manufacturer: syz [ 1057.108133][ T5904] usb 1-1: config 0 descriptor?? [ 1057.815599][T18539] netlink: 'syz.3.3263': attribute type 39 has an invalid length. [ 1058.233459][ T1226] usb 4-1: new low-speed USB device number 79 using dummy_hcd [ 1058.384599][T18544] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3266'. [ 1058.446978][ T1226] usb 4-1: device descriptor read/64, error -71 [ 1058.556652][ T5904] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1058.706629][ T1226] usb 4-1: new low-speed USB device number 80 using dummy_hcd [ 1058.736522][ T5904] usb 5-1: Using ep0 maxpacket: 32 [ 1058.746723][ T5904] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1058.755956][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1058.823285][ T5904] usb 5-1: Product: syz [ 1058.831172][ T5904] usb 5-1: Manufacturer: syz [ 1058.839386][ T5904] usb 5-1: SerialNumber: syz [ 1058.854563][ T5904] usb 5-1: config 0 descriptor?? [ 1058.859703][ T1226] usb 4-1: device descriptor read/64, error -71 [ 1058.882778][ T5904] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1058.974000][T18154] usb 1-1: USB disconnect, device number 91 [ 1058.980306][ T1226] usb usb4-port1: attempt power cycle [ 1059.323333][T18541] IPv6: addrconf: prefix option has invalid lifetime [ 1059.346615][ T1226] usb 4-1: new low-speed USB device number 81 using dummy_hcd [ 1059.367282][ T1226] usb 4-1: device descriptor read/8, error -71 [ 1059.602619][T18550] syz.2.3268 (18550): drop_caches: 2 [ 1059.636750][ T1226] usb 4-1: new low-speed USB device number 82 using dummy_hcd [ 1059.677419][ T1226] usb 4-1: device descriptor read/8, error -71 [ 1059.798382][ T1226] usb usb4-port1: unable to enumerate USB device [ 1060.062889][T18557] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3270'. [ 1060.072633][T18557] netlink: 'syz.6.3270': attribute type 5 has an invalid length. [ 1060.081073][T18557] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3270'. [ 1060.112437][T18557] geneve2: entered promiscuous mode [ 1060.119955][T18557] geneve2: entered allmulticast mode [ 1060.128510][ T1147] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 1060.137673][ T1147] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 1060.213967][T16659] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 1060.223302][T16659] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 1060.679233][T18541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1060.708067][T18541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1060.841497][T18541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1060.852976][T18571] fuse: Bad value for 'fd' [ 1060.992748][T18541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1061.255024][T18579] xt_TCPMSS: Only works on TCP SYN packets [ 1061.839342][ T5904] gspca_ov534_9: reg_r err -71 [ 1062.156552][ T5904] gspca_ov534_9: Unknown sensor 0000 [ 1062.156682][ T5904] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 1062.172212][ T5904] usb 5-1: USB disconnect, device number 93 [ 1062.650896][T18588] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3277'. [ 1062.956454][ T1226] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1063.207632][ T1226] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 1063.216254][ T1226] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1063.247653][ T1226] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1063.256858][ T1226] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1063.274983][ T1226] usb 5-1: Manufacturer: syz [ 1063.302076][ T1226] usb 5-1: config 0 descriptor?? [ 1063.496427][ T1226] rc_core: IR keymap rc-hauppauge not found [ 1063.502500][ T1226] Registered IR keymap rc-empty [ 1063.534027][ T1226] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1063.577356][ T1226] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input39 [ 1063.627757][ C1] igorplugusb 5-1:0.0: Error: urb status = -32 [ 1063.794131][ T1226] usb 5-1: USB disconnect, device number 94 [ 1064.336608][T12285] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1064.459400][T18621] FAULT_INJECTION: forcing a failure. [ 1064.459400][T18621] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1064.474177][T18621] CPU: 1 UID: 0 PID: 18621 Comm: syz.4.3289 Tainted: G L syzkaller #0 PREEMPT(full) [ 1064.474199][T18621] Tainted: [L]=SOFTLOCKUP [ 1064.474204][T18621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1064.474213][T18621] Call Trace: [ 1064.474219][T18621] [ 1064.474224][T18621] dump_stack_lvl+0xe8/0x150 [ 1064.474247][T18621] should_fail_ex+0x412/0x560 [ 1064.474290][T18621] _copy_from_iter+0x1d3/0x1670 [ 1064.474312][T18621] ? __pfx__copy_from_iter+0x10/0x10 [ 1064.474325][T18621] ? sock_alloc_send_pskb+0x896/0x990 [ 1064.474349][T18621] ? __pfx__copy_from_iter+0x10/0x10 [ 1064.474365][T18621] ? page_copy_sane+0x16a/0x270 [ 1064.474399][T18621] copy_page_from_iter+0xdd/0x170 [ 1064.474418][T18621] skb_copy_datagram_from_iter+0x306/0x710 [ 1064.474446][T18621] packet_sendmsg+0x37e4/0x50f0 [ 1064.474471][T18621] ? __lock_acquire+0x6b5/0x2cf0 [ 1064.474498][T18621] ? __lock_acquire+0x6b5/0x2cf0 [ 1064.474527][T18621] ? aa_sk_perm+0x6d5/0x900 [ 1064.474548][T18621] ? __pfx_packet_sendmsg+0x10/0x10 [ 1064.474570][T18621] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1064.474590][T18621] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1064.474614][T18621] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1064.474631][T18621] ? __pfx_packet_sendmsg+0x10/0x10 [ 1064.474649][T18621] __sys_sendto+0x672/0x710 [ 1064.474667][T18621] ? __pfx___sys_sendto+0x10/0x10 [ 1064.474682][T18621] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1064.474711][T18621] ? __fget_files+0x3a0/0x420 [ 1064.474731][T18621] ? ksys_write+0x242/0x270 [ 1064.474749][T18621] ? __pfx_ksys_write+0x10/0x10 [ 1064.474769][T18621] __x64_sys_sendto+0xde/0x100 [ 1064.474788][T18621] do_syscall_64+0x14d/0xf80 [ 1064.474806][T18621] ? trace_irq_disable+0x3b/0x150 [ 1064.474819][T18621] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1064.474840][T18621] ? clear_bhb_loop+0x40/0x90 [ 1064.474858][T18621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1064.474873][T18621] RIP: 0033:0x7f38f339c819 [ 1064.474887][T18621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1064.474900][T18621] RSP: 002b:00007f38f15ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1064.474916][T18621] RAX: ffffffffffffffda RBX: 00007f38f3615fa0 RCX: 00007f38f339c819 [ 1064.474927][T18621] RDX: 000000000000fce0 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1064.474938][T18621] RBP: 00007f38f15ee090 R08: 0000200000000140 R09: 0000000000000014 [ 1064.474948][T18621] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000002 [ 1064.474957][T18621] R13: 00007f38f3616038 R14: 00007f38f3615fa0 R15: 00007f38f373fa48 [ 1064.474980][T18621] [ 1064.918040][T18622] netlink: 'syz.2.3288': attribute type 29 has an invalid length. [ 1064.927451][T18619] netlink: 'syz.2.3288': attribute type 29 has an invalid length. [ 1064.935550][T18622] netlink: 'syz.2.3288': attribute type 29 has an invalid length. [ 1064.953055][T12285] usb 7-1: Using ep0 maxpacket: 32 [ 1064.996941][T12285] usb 7-1: config 0 has an invalid interface number: 119 but max is 0 [ 1065.005159][T12285] usb 7-1: config 0 has no interface number 0 [ 1065.054056][T12285] usb 7-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1065.089187][T12285] usb 7-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1065.113406][T12285] usb 7-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27 [ 1065.136414][T12285] usb 7-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1065.172171][T12285] usb 7-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 1065.181741][T12285] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.191252][T12285] usb 7-1: Product: syz [ 1065.195572][T12285] usb 7-1: Manufacturer: syz [ 1065.200992][T12285] usb 7-1: SerialNumber: syz [ 1065.228348][T18624] syzkaller0: entered promiscuous mode [ 1065.242551][T18624] syzkaller0: entered allmulticast mode [ 1065.315833][T12285] usb 7-1: config 0 descriptor?? [ 1065.331194][T18615] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1065.388829][T12285] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.119/input/input40 [ 1065.421802][ T5178] usb 7-1: BOGUS urb xfer, pipe 1 != type 3 [ 1066.007058][T12285] usb 7-1: USB disconnect, device number 31 [ 1066.827814][T18661] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3300'. [ 1067.286642][T18665] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3299'. [ 1067.336885][T18652] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3298'. [ 1067.773904][T18673] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3303'. [ 1068.267610][T18683] Cannot find del_set index 4 as target [ 1068.547802][T18691] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3309'. [ 1068.856474][T18154] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1068.996524][T18154] usb 4-1: device descriptor read/64, error -71 [ 1069.083878][T18699] netlink: 4436 bytes leftover after parsing attributes in process `syz.2.3312'. [ 1069.093813][T18699] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1069.246492][T18154] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1069.381266][T18154] usb 4-1: device descriptor read/64, error -71 [ 1069.391027][T18712] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3314'. [ 1069.506669][T18154] usb usb4-port1: attempt power cycle [ 1069.595384][T18715] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1069.626832][ T5904] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1069.781081][ T5904] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1069.796421][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.813381][ T5904] usb 3-1: Product: syz [ 1069.818298][ T5904] usb 3-1: Manufacturer: syz [ 1069.822896][ T5904] usb 3-1: SerialNumber: syz [ 1069.854182][ T5904] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1069.862622][T18154] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1069.896896][ T5823] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1069.915036][ T1226] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1069.925927][T18154] usb 4-1: device descriptor read/8, error -71 [ 1070.059194][ T5823] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 1070.067821][ T5823] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1070.080118][ T5823] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1070.097943][ T5823] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1070.110450][ T5823] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1070.124242][ T5823] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1070.134636][ T5823] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1070.162138][ T5823] usb 1-1: config 0 descriptor?? [ 1070.176523][T18154] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1070.186803][T18715] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1070.218483][T18154] usb 4-1: device descriptor read/8, error -71 [ 1070.337667][T18154] usb usb4-port1: unable to enumerate USB device [ 1070.623563][ T5823] plantronics 0003:047F:FFFF.0021: reserved main item tag 0xd [ 1070.705641][T18727] input: syz1 as /devices/virtual/input/input41 [ 1070.793295][ T5823] plantronics 0003:047F:FFFF.0021: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1070.905268][ T5823] usb 1-1: USB disconnect, device number 92 [ 1071.022265][T18730] fido_id[18730]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1071.051978][ T1226] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1071.076067][ T1226] ath9k_htc: Failed to initialize the device [ 1071.145541][ T1226] usb 3-1: ath9k_htc: USB layer deinitialized [ 1071.537560][T18738] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1072.066551][T18154] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1072.234519][T18154] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1072.253860][T18154] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1072.309920][ T5932] usb 3-1: USB disconnect, device number 102 [ 1072.337128][T18154] usb 5-1: config 0 descriptor?? [ 1072.374582][T18154] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1072.777175][T18154] cpia1 5-1:0.0: unexpected state after lo power cmd: 00 [ 1072.953465][T18766] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1073.021953][T18763] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1073.178628][T18154] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 1073.488989][T18750] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3326'. [ 1073.613242][T18775] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3334'. [ 1074.134929][T18788] fuse: Unknown parameter 'fd½°ò…É4Îøê*˜T! ÷·d!J§—¼¢º‡mM²Œ—cÕÂÎaQ|kaW›KU?PN û¹(@ÕùháTÅM³ððÙ».ËGMwh[{#Ä>ΡƒY wPÝ€bÜïEñÚ­Èc0j›±òÇu;ØAñÞQÈk„µ¡5NX' [ 1074.223011][ T1226] usb 5-1: USB disconnect, device number 95 [ 1074.582919][T18797] sctp: [Deprecated]: syz.0.3339 (pid 18797) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1074.582919][T18797] Use struct sctp_sack_info instead [ 1074.662959][T18797] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1074.686640][T18789] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1075.386569][T18802] IPv6: NLM_F_CREATE should be specified when creating new route [ 1075.961495][T18810] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3345'. [ 1076.535897][T18822] FAULT_INJECTION: forcing a failure. [ 1076.535897][T18822] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1076.579081][T18822] CPU: 1 UID: 0 PID: 18822 Comm: syz.0.3348 Tainted: G L syzkaller #0 PREEMPT(full) [ 1076.579130][T18822] Tainted: [L]=SOFTLOCKUP [ 1076.579143][T18822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1076.579162][T18822] Call Trace: [ 1076.579175][T18822] [ 1076.579185][T18822] dump_stack_lvl+0xe8/0x150 [ 1076.579219][T18822] should_fail_ex+0x412/0x560 [ 1076.579253][T18822] _copy_to_user+0x31/0xb0 [ 1076.579279][T18822] simple_read_from_buffer+0xe1/0x170 [ 1076.579313][T18822] proc_fail_nth_read+0x1bb/0x230 [ 1076.579345][T18822] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1076.579378][T18822] ? rw_verify_area+0x2a6/0x4d0 [ 1076.579399][T18822] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1076.579430][T18822] vfs_read+0x20c/0xa70 [ 1076.579456][T18822] ? __pfx_poll_select_finish+0x10/0x10 [ 1076.579486][T18822] ? __pfx_vfs_read+0x10/0x10 [ 1076.579506][T18822] ? set_user_sigmask+0xcd/0x1c0 [ 1076.579531][T18822] ? __pfx_set_user_sigmask+0x10/0x10 [ 1076.579556][T18822] ? kmem_cache_free+0x187/0x630 [ 1076.579576][T18822] ? fd_install+0x94/0x3d0 [ 1076.579602][T18822] ? do_sys_openat2+0x14c/0x200 [ 1076.579642][T18822] ksys_read+0x150/0x270 [ 1076.579665][T18822] ? __pfx_ksys_read+0x10/0x10 [ 1076.579696][T18822] do_syscall_64+0x14d/0xf80 [ 1076.579729][T18822] ? trace_irq_disable+0x3b/0x150 [ 1076.579746][T18822] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1076.579766][T18822] ? clear_bhb_loop+0x40/0x90 [ 1076.579789][T18822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1076.579809][T18822] RIP: 0033:0x7f23c255d04e [ 1076.579827][T18822] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1076.579844][T18822] RSP: 002b:00007f23c3383fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1076.579865][T18822] RAX: ffffffffffffffda RBX: 00007f23c33846c0 RCX: 00007f23c255d04e [ 1076.579880][T18822] RDX: 000000000000000f RSI: 00007f23c33840a0 RDI: 0000000000000004 [ 1076.579893][T18822] RBP: 00007f23c3384090 R08: 0000000000000000 R09: 0000000000000000 [ 1076.579904][T18822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1076.579915][T18822] R13: 00007f23c2816038 R14: 00007f23c2815fa0 R15: 00007f23c293fa48 [ 1076.579944][T18822] [ 1077.569819][T18844] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3357'. [ 1078.104090][T18856] loop5: detected capacity change from 0 to 7 [ 1078.147728][T18856] Dev loop5: unable to read RDB block 7 [ 1078.153339][T18856] loop5: AHDI p1 [ 1078.161850][T18856] loop5: partition table partially beyond EOD, truncated [ 1078.362678][T18872] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1078.382438][T18873] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1078.413069][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 1078.413081][ T30] audit: type=1326 audit(1774976143.554:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18865 comm="syz.0.3366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23c259c819 code=0x7ffc0000 [ 1078.470090][ T30] audit: type=1326 audit(1774976143.554:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18865 comm="syz.0.3366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23c259c819 code=0x7ffc0000 [ 1078.477618][ T1226] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1078.494384][ T30] audit: type=1326 audit(1774976143.554:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18865 comm="syz.0.3366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f23c259c819 code=0x7ffc0000 [ 1078.566255][ T30] audit: type=1326 audit(1774976143.554:1061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18865 comm="syz.0.3366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23c259c819 code=0x7ffc0000 [ 1078.590309][ T30] audit: type=1326 audit(1774976143.554:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18865 comm="syz.0.3366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23c259c819 code=0x7ffc0000 [ 1078.779914][ T1226] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1078.791893][ T1226] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1078.816566][ T1226] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1078.835874][ T1226] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1078.852136][ T1226] usb 5-1: Product: syz [ 1078.858951][ T1226] usb 5-1: Manufacturer: syz [ 1078.868244][ T1226] usb 5-1: SerialNumber: syz [ 1078.875440][ T30] audit: type=1326 audit(1774976143.554:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18865 comm="syz.0.3366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f23c259c819 code=0x7ffc0000 [ 1078.953727][ T1226] cdc_mbim 5-1:1.0: skipping garbage [ 1078.974057][T18881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3369'. [ 1079.020129][T18881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3369'. [ 1079.038396][ T30] audit: type=1326 audit(1774976143.554:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18865 comm="syz.0.3366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23c259c819 code=0x7ffc0000 [ 1079.111003][ T30] audit: type=1326 audit(1774976143.564:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18865 comm="syz.0.3366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23c259c819 code=0x7ffc0000 [ 1079.154673][T18856] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1079.283163][ T30] audit: type=1326 audit(1774976143.564:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18865 comm="syz.0.3366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f23c259c819 code=0x7ffc0000 [ 1079.306591][ T30] audit: type=1326 audit(1774976143.564:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18865 comm="syz.0.3366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23c259c819 code=0x7ffc0000 [ 1080.011826][T18856] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1080.019781][ T1226] cdc_mbim 5-1:1.0: setting tx_max = 184 [ 1080.030469][T18893] sctp: [Deprecated]: syz.6.3372 (pid 18893) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1080.030469][T18893] Use struct sctp_sack_info instead [ 1080.052051][ T1226] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device [ 1080.255358][ T1226] wwan wwan0: port wwan0mbim0 attached [ 1080.290713][ T1226] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, f6:98:35:fa:d7:51 [ 1080.375546][ T1226] usb 5-1: USB disconnect, device number 96 [ 1080.415775][ T1226] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM [ 1080.508494][ T1226] wwan wwan0: port wwan0mbim0 disconnected [ 1081.031627][T18908] netlink: 'syz.4.3377': attribute type 3 has an invalid length. [ 1081.103206][T18906] input: syz1 as /devices/virtual/input/input44 [ 1081.161992][T18912] netlink: 'syz.4.3378': attribute type 10 has an invalid length. [ 1081.192115][T18912] team0: Device ipvlan1 failed to register rx_handler [ 1081.225242][T18912] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3378'. [ 1081.258626][T18906] netlink: 'syz.2.3375': attribute type 21 has an invalid length. [ 1081.284577][T18906] IPv6: NLM_F_CREATE should be specified when creating new route [ 1081.318718][T18906] netlink: 'syz.2.3375': attribute type 1 has an invalid length. [ 1081.506766][T12284] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1081.660482][T12284] usb 5-1: device descriptor read/64, error -71 [ 1081.911567][T12284] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1081.997184][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1082.072755][T12284] usb 5-1: device descriptor read/64, error -71 [ 1082.186697][T12284] usb usb5-port1: attempt power cycle [ 1082.299133][ T5918] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1082.457494][ T5918] usb 1-1: Using ep0 maxpacket: 16 [ 1082.464537][ T5918] usb 1-1: config 0 has an invalid descriptor of length 231, skipping remainder of the config [ 1082.475356][ T5918] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1082.488617][ T5918] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1082.497913][ T5918] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1082.509316][ T5918] usb 1-1: config 0 descriptor?? [ 1082.522665][ T5918] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1082.536594][T12284] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1082.557138][T12284] usb 5-1: device descriptor read/8, error -71 [ 1082.796465][T12284] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1082.827912][T12284] usb 5-1: device descriptor read/8, error -71 [ 1082.972491][T12284] usb usb5-port1: unable to enumerate USB device [ 1083.025894][T18952] binder: 18947:18952 ioctl c0306201 0 returned -14 [ 1083.044341][T18952] syz.6.3390 (18952): drop_caches: 2 [ 1083.205029][T18954] syzkaller1: entered promiscuous mode [ 1083.211018][T18954] syzkaller1: entered allmulticast mode [ 1084.264058][T18964] FAULT_INJECTION: forcing a failure. [ 1084.264058][T18964] name failslab, interval 1, probability 0, space 0, times 0 [ 1084.286712][T18964] CPU: 1 UID: 0 PID: 18964 Comm: syz.6.3394 Tainted: G L syzkaller #0 PREEMPT(full) [ 1084.286740][T18964] Tainted: [L]=SOFTLOCKUP [ 1084.286751][T18964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1084.286763][T18964] Call Trace: [ 1084.286771][T18964] [ 1084.286780][T18964] dump_stack_lvl+0xe8/0x150 [ 1084.286811][T18964] should_fail_ex+0x412/0x560 [ 1084.286845][T18964] should_failslab+0xa8/0x100 [ 1084.286870][T18964] ? do_getname+0x2e/0x250 [ 1084.286895][T18964] kmem_cache_alloc_noprof+0x87/0x650 [ 1084.286923][T18964] do_getname+0x2e/0x250 [ 1084.286948][T18964] ? getname_uflags+0x11/0x30 [ 1084.286979][T18964] __x64_sys_execveat+0xad/0xf0 [ 1084.286997][T18964] do_syscall_64+0x14d/0xf80 [ 1084.287020][T18964] ? trace_irq_disable+0x3b/0x150 [ 1084.287032][T18964] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1084.287045][T18964] ? clear_bhb_loop+0x40/0x90 [ 1084.287061][T18964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1084.287074][T18964] RIP: 0033:0x7f7dfcb9c819 [ 1084.287086][T18964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1084.287097][T18964] RSP: 002b:00007f7dfda13028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1084.287111][T18964] RAX: ffffffffffffffda RBX: 00007f7dfce16180 RCX: 00007f7dfcb9c819 [ 1084.287121][T18964] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1084.287130][T18964] RBP: 00007f7dfda13090 R08: 0000000000000000 R09: 0000000000000000 [ 1084.287138][T18964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1084.287146][T18964] R13: 00007f7dfce16218 R14: 00007f7dfce16180 R15: 00007f7dfcf3fa48 [ 1084.287165][T18964] [ 1084.477398][T18965] input: syz0 as /devices/virtual/input/input45 [ 1084.728393][T18969] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1085.057831][ T5904] usb 1-1: USB disconnect, device number 93 [ 1085.116491][ T5932] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1085.247141][T12284] usb 5-1: new full-speed USB device number 101 using dummy_hcd [ 1085.256449][ T5932] usb 4-1: device descriptor read/64, error -71 [ 1085.301847][T18985] FAULT_INJECTION: forcing a failure. [ 1085.301847][T18985] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1085.355350][T18985] CPU: 1 UID: 0 PID: 18985 Comm: syz.0.3403 Tainted: G L syzkaller #0 PREEMPT(full) [ 1085.355382][T18985] Tainted: [L]=SOFTLOCKUP [ 1085.355388][T18985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1085.355397][T18985] Call Trace: [ 1085.355403][T18985] [ 1085.355409][T18985] dump_stack_lvl+0xe8/0x150 [ 1085.355434][T18985] should_fail_ex+0x412/0x560 [ 1085.355459][T18985] _copy_from_user+0x2d/0xb0 [ 1085.355477][T18985] ___sys_sendmsg+0x1c6/0x360 [ 1085.355499][T18985] ? __pfx____sys_sendmsg+0x10/0x10 [ 1085.355539][T18985] ? __fget_files+0x2a/0x420 [ 1085.355552][T18985] ? __fget_files+0x3a0/0x420 [ 1085.355570][T18985] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1085.355590][T18985] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1085.355614][T18985] ? __pfx_ksys_write+0x10/0x10 [ 1085.355641][T18985] do_syscall_64+0x14d/0xf80 [ 1085.355659][T18985] ? trace_irq_disable+0x3b/0x150 [ 1085.355672][T18985] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1085.355688][T18985] ? clear_bhb_loop+0x40/0x90 [ 1085.355705][T18985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1085.355719][T18985] RIP: 0033:0x7f23c259c819 [ 1085.355732][T18985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1085.355744][T18985] RSP: 002b:00007f23c3384028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1085.355759][T18985] RAX: ffffffffffffffda RBX: 00007f23c2815fa0 RCX: 00007f23c259c819 [ 1085.355770][T18985] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 1085.355779][T18985] RBP: 00007f23c3384090 R08: 0000000000000000 R09: 0000000000000000 [ 1085.355788][T18985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1085.355797][T18985] R13: 00007f23c2816038 R14: 00007f23c2815fa0 R15: 00007f23c293fa48 [ 1085.355818][T18985] [ 1085.507532][ T5932] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1085.548687][T12284] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1085.567105][T12284] usb 5-1: not running at top speed; connect to a high speed hub [ 1085.585698][T12284] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 248, changing to 4 [ 1085.609105][T12284] usb 5-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 1085.649890][T12284] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1085.677386][T12284] usb 5-1: Product: 沙䧾ḇ칿覜鴖à²î½”里㟜籒胦뻭䈡 [ 1085.696880][T12284] usb 5-1: Manufacturer: èŽã”¶É³â˜ªÅ‰é²£áŸ©ã„ºå§¥îœ©ê¡˜â–•ç•’㘓㧆懗å¨í”†å“½éŠ–䩌믱綜빌è‰i䞬ï«ïŠé¹…⋥齆⊽îˆì¹’蒽ꎼ䡠ë±î¦Ÿàº¹ç¢è¥–ëŸá¯¿æ…¤ï¦†ä»œæ°…î³î¾¢à­‹äƒšæ”žä»­ï±´ì—½ã‹ƒé“…疎泶쭓ᅒ旯늟㌽㴵 [ 1085.722176][T12284] usb 5-1: SerialNumber: 暨䫶㛞㥔ܒÈ驪᭔雦࣮뗢ï‹æ¯¿å·™è•êš§êˆŠ [ 1085.736486][ T5932] usb 4-1: device descriptor read/64, error -71 [ 1085.819738][T18992] input: syz0 as /devices/virtual/input/input46 [ 1085.851392][ T5932] usb usb4-port1: attempt power cycle [ 1085.907459][T18994] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3404'. [ 1085.984341][T12284] usb 5-1: BAAD SPEAKERPHONE c_chmask mismatch [ 1086.077950][T12284] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1086.078585][T18998] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1086.178053][T12284] usb 5-1: USB disconnect, device number 101 [ 1086.247625][ T5932] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1086.261823][T19000] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1086.282612][ T5932] usb 4-1: device descriptor read/8, error -71 [ 1086.291601][T14953] udevd[14953]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1086.570311][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 1086.570330][ T30] audit: type=1326 audit(1774976151.754:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19006 comm="syz.6.3411" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7dfcb9c819 code=0x0 [ 1086.602042][ T5932] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1086.647155][ T5932] usb 4-1: device descriptor read/8, error -71 [ 1086.756796][ T5932] usb usb4-port1: unable to enumerate USB device [ 1086.846654][ T5918] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1087.007228][ T5918] usb 5-1: Using ep0 maxpacket: 16 [ 1087.018522][ T5918] usb 5-1: config 0 has an invalid descriptor of length 231, skipping remainder of the config [ 1087.034325][ T5918] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1087.067466][ T5918] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1087.080617][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1087.089868][T19019] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3414'. [ 1087.142148][ T5918] usb 5-1: config 0 descriptor?? [ 1087.151404][ T5918] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1087.172228][T19020] input: syz1 as /devices/virtual/input/input47 [ 1087.271117][ T5833] Bluetooth: hci4: command 0x0406 tx timeout [ 1087.297116][T19022] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3417'. [ 1087.433745][T19024] input: syz0 as /devices/virtual/input/input48 [ 1087.460469][T19027] program syz.6.3419 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1088.095646][T19039] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1088.232121][T19039] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1088.322120][T19039] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1088.921036][T19048] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1088.933067][T19049] blktrace: Concurrent blktraces are not allowed on sg0 [ 1089.009185][T19049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3424'. [ 1089.614031][ T5932] usb 5-1: USB disconnect, device number 102 [ 1089.884136][T19066] input: syz0 as /devices/virtual/input/input49 [ 1089.985561][T19069] tipc: Started in network mode [ 1089.990748][T19069] tipc: Node identity 0e34e36c2226, cluster identity 4711 [ 1090.007611][T19069] tipc: Enabled bearer , priority 0 [ 1090.040994][T19069] syzkaller0: entered promiscuous mode [ 1090.085139][T19069] syzkaller0: entered allmulticast mode [ 1090.091153][ T5932] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1090.250851][ T5932] usb 5-1: Using ep0 maxpacket: 8 [ 1090.258478][ T5932] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1090.269554][ T5932] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1090.282929][ T5932] usb 5-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 1090.292454][ T5932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1090.320432][ T5932] usb 5-1: config 0 descriptor?? [ 1090.390991][ T1226] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1090.777022][T12284] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1090.808012][ T1226] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1090.829542][ T1226] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1090.854223][ T1226] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1090.883968][ T1226] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1090.926694][T12284] usb 3-1: Using ep0 maxpacket: 8 [ 1090.986840][T19084] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3435'. [ 1090.992940][T12284] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 1091.006837][T19069] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1091.027703][T12284] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1091.037711][T12284] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1091.046413][ T1226] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1091.128503][ T5823] tipc: Node number set to 739435372 [ 1091.135484][T12284] usb 3-1: Product: syz [ 1091.140549][T12284] usb 3-1: Manufacturer: syz [ 1091.145268][T12284] usb 3-1: SerialNumber: syz [ 1091.225276][T12284] usb 3-1: config 0 descriptor?? [ 1091.333257][ T1226] usb 4-1: USB disconnect, device number 91 [ 1091.514916][T12284] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1091.526007][T19069] tipc: Resetting bearer [ 1091.555299][T12284] usb 3-1: setting power ON [ 1091.577447][T12284] dvb-usb: bulk message failed: -22 (2/0) [ 1091.601730][T12284] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1091.617707][T12284] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1091.634917][T12284] usb 3-1: media controller created [ 1091.690846][T19069] tipc: Disabling bearer [ 1091.738330][T12284] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1091.790199][T12284] usb 3-1: selecting invalid altsetting 6 [ 1091.796239][T12284] usb 3-1: digital interface selection failed (-22) [ 1091.803057][T12284] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1091.813346][T12284] usb 3-1: setting power OFF [ 1091.818072][T12284] dvb-usb: bulk message failed: -22 (2/0) [ 1091.823944][T12284] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1091.834129][T12284] (NULL device *): no alternate interface [ 1091.942985][T12284] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1091.986773][T12284] usb 3-1: USB disconnect, device number 103 [ 1092.728746][T19102] 0: reclassify loop, rule prio 0, protocol 700 [ 1092.926504][ T1226] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1093.001403][ T5932] usbhid 5-1:0.0: can't add hid device: -71 [ 1093.020056][ T5932] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1093.076816][ T5932] usb 5-1: USB disconnect, device number 103 [ 1093.096474][ T1226] usb 4-1: Using ep0 maxpacket: 16 [ 1093.123317][ T1226] usb 4-1: config 0 has an invalid descriptor of length 231, skipping remainder of the config [ 1093.144316][T19104] FAULT_INJECTION: forcing a failure. [ 1093.144316][T19104] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1093.154250][ T1226] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1093.179953][ T1226] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1093.206523][ T1226] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1093.216685][T19104] CPU: 1 UID: 0 PID: 19104 Comm: syz.4.3441 Tainted: G L syzkaller #0 PREEMPT(full) [ 1093.216716][T19104] Tainted: [L]=SOFTLOCKUP [ 1093.216722][T19104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1093.216730][T19104] Call Trace: [ 1093.216736][T19104] [ 1093.216742][T19104] dump_stack_lvl+0xe8/0x150 [ 1093.216764][T19104] should_fail_ex+0x412/0x560 [ 1093.216788][T19104] _copy_to_user+0x31/0xb0 [ 1093.216806][T19104] simple_read_from_buffer+0xe1/0x170 [ 1093.216829][T19104] proc_fail_nth_read+0x1bb/0x230 [ 1093.216851][T19104] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1093.216872][T19104] ? rw_verify_area+0x2a6/0x4d0 [ 1093.216887][T19104] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1093.216907][T19104] vfs_read+0x20c/0xa70 [ 1093.216926][T19104] ? __pfx_vfs_read+0x10/0x10 [ 1093.216944][T19104] ? __sys_bpf+0x77c/0x950 [ 1093.216958][T19104] ? __pfx___sys_bpf+0x10/0x10 [ 1093.216969][T19104] ? kmem_cache_free+0x187/0x630 [ 1093.216993][T19104] ksys_read+0x150/0x270 [ 1093.217009][T19104] ? __pfx_ksys_read+0x10/0x10 [ 1093.217030][T19104] do_syscall_64+0x14d/0xf80 [ 1093.217048][T19104] ? trace_irq_disable+0x3b/0x150 [ 1093.217059][T19104] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1093.217073][T19104] ? clear_bhb_loop+0x40/0x90 [ 1093.217089][T19104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1093.217102][T19104] RIP: 0033:0x7f38f335d04e [ 1093.217115][T19104] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1093.217127][T19104] RSP: 002b:00007f38f15edfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1093.217141][T19104] RAX: ffffffffffffffda RBX: 00007f38f15ee6c0 RCX: 00007f38f335d04e [ 1093.217150][T19104] RDX: 000000000000000f RSI: 00007f38f15ee0a0 RDI: 0000000000000005 [ 1093.217159][T19104] RBP: 00007f38f15ee090 R08: 0000000000000000 R09: 0000000000000000 [ 1093.217167][T19104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1093.217175][T19104] R13: 00007f38f3616038 R14: 00007f38f3615fa0 R15: 00007f38f373fa48 [ 1093.217196][T19104] [ 1093.440579][ T1226] usb 4-1: config 0 descriptor?? [ 1093.462592][ T1226] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1093.544713][T19112] input: syz0 as /devices/virtual/input/input50 [ 1093.934722][T19115] nvme_fabrics: missing parameter 'transport=%s' [ 1093.945394][T19115] nvme_fabrics: missing parameter 'nqn=%s' [ 1094.713769][T19134] ip6gretap0: entered promiscuous mode [ 1094.720148][T19134] macvtap1: entered promiscuous mode [ 1094.822318][T19134] ip6gretap0: left promiscuous mode [ 1095.715605][ T1226] usb 4-1: USB disconnect, device number 92 [ 1096.580880][T19150] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3452'. [ 1096.741462][T19150] team0: Port device team_slave_0 removed [ 1097.663413][T19165] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3454'. [ 1097.942230][T19175] binder: 19164:19175 ioctl c0306201 0 returned -14 [ 1098.051730][T19175] syz.2.3458 (19175): drop_caches: 2 [ 1098.792247][ T30] audit: type=1800 audit(1774976163.954:1094): pid=19177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3459" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 1102.229476][T19235] FAULT_INJECTION: forcing a failure. [ 1102.229476][T19235] name failslab, interval 1, probability 0, space 0, times 0 [ 1102.246200][T19235] CPU: 1 UID: 0 PID: 19235 Comm: syz.6.3474 Tainted: G L syzkaller #0 PREEMPT(full) [ 1102.246229][T19235] Tainted: [L]=SOFTLOCKUP [ 1102.246238][T19235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1102.246249][T19235] Call Trace: [ 1102.246258][T19235] [ 1102.246266][T19235] dump_stack_lvl+0xe8/0x150 [ 1102.246298][T19235] should_fail_ex+0x412/0x560 [ 1102.246336][T19235] should_failslab+0xa8/0x100 [ 1102.246361][T19235] ? do_getname+0x2e/0x250 [ 1102.246385][T19235] kmem_cache_alloc_noprof+0x87/0x650 [ 1102.246413][T19235] do_getname+0x2e/0x250 [ 1102.246438][T19235] ? getname_uflags+0x11/0x30 [ 1102.246465][T19235] __x64_sys_execveat+0xad/0xf0 [ 1102.246488][T19235] do_syscall_64+0x14d/0xf80 [ 1102.246512][T19235] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1102.246532][T19235] ? clear_bhb_loop+0x40/0x90 [ 1102.246555][T19235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1102.246574][T19235] RIP: 0033:0x7f7dfcb9c819 [ 1102.246592][T19235] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1102.246609][T19235] RSP: 002b:00007f7dfda13028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1102.246630][T19235] RAX: ffffffffffffffda RBX: 00007f7dfce16180 RCX: 00007f7dfcb9c819 [ 1102.246644][T19235] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1102.246657][T19235] RBP: 00007f7dfda13090 R08: 0000000000000000 R09: 0000000000000000 [ 1102.246669][T19235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1102.246680][T19235] R13: 00007f7dfce16218 R14: 00007f7dfce16180 R15: 00007f7dfcf3fa48 [ 1102.246708][T19235] [ 1102.638981][ T5833] Bluetooth: hci3: command 0x0406 tx timeout [ 1102.804793][ T30] audit: type=1800 audit(1774976167.954:1095): pid=19228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3473" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 1103.102972][ T30] audit: type=1326 audit(1774976168.284:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19249 comm="syz.0.3480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23c259c819 code=0x7ffc0000 [ 1103.330439][ T30] audit: type=1326 audit(1774976168.284:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19249 comm="syz.0.3480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f23c259c819 code=0x7ffc0000 [ 1103.447449][ T30] audit: type=1326 audit(1774976168.284:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19249 comm="syz.0.3480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23c259c819 code=0x7ffc0000 [ 1103.606110][ T30] audit: type=1326 audit(1774976168.284:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19249 comm="syz.0.3480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f23c259c819 code=0x7ffc0000 [ 1103.723362][ T30] audit: type=1326 audit(1774976168.284:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19249 comm="syz.0.3480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23c259c819 code=0x7ffc0000 [ 1103.825744][ T30] audit: type=1326 audit(1774976168.284:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19249 comm="syz.0.3480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f23c259c819 code=0x7ffc0000 [ 1103.861029][ T30] audit: type=1326 audit(1774976168.284:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19249 comm="syz.0.3480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23c259c819 code=0x7ffc0000 [ 1103.980848][ T30] audit: type=1326 audit(1774976168.284:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19249 comm="syz.0.3480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f23c259c819 code=0x7ffc0000 [ 1104.046765][ T30] audit: type=1326 audit(1774976168.284:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19249 comm="syz.0.3480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23c259c819 code=0x7ffc0000 [ 1104.139497][ T30] audit: type=1326 audit(1774976168.284:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19249 comm="syz.0.3480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f23c259c819 code=0x7ffc0000 [ 1104.212526][ T30] audit: type=1326 audit(1774976168.284:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19249 comm="syz.0.3480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23c259c819 code=0x7ffc0000 [ 1104.401946][ T30] audit: type=1326 audit(1774976168.284:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19249 comm="syz.0.3480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f23c259c819 code=0x7ffc0000 [ 1104.406823][ T1226] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1104.589344][ T30] audit: type=1326 audit(1774976169.104:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19249 comm="syz.0.3480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23c259c819 code=0x7ffc0000 [ 1104.617226][T19267] netlink: 124 bytes leftover after parsing attributes in process `syz.2.3485'. [ 1104.677078][ T1226] usb 1-1: Using ep0 maxpacket: 16 [ 1104.691268][ T1226] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1104.701492][ T1226] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1104.717559][ T1226] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1104.720012][ T30] audit: type=1326 audit(1774976169.104:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19249 comm="syz.0.3480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23c259c819 code=0x7ffc0000 [ 1104.803330][ T1226] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1104.920594][ T1226] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.936442][ T1226] usb 1-1: Product: syz [ 1104.956728][ T1226] usb 1-1: Manufacturer: syz [ 1104.961884][ T1226] usb 1-1: SerialNumber: syz [ 1105.485062][T19277] bond1 (unregistering): Released all slaves [ 1106.208725][T19286] syzkaller0: entered promiscuous mode [ 1106.215619][T19286] syzkaller0: entered allmulticast mode [ 1106.701051][ T30] audit: type=1800 audit(1774976171.884:1110): pid=19284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3489" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 1106.730843][T19290] netlink: set zone limit has 4 unknown bytes [ 1107.006457][ T5932] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 1107.114124][ T1226] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 1107.307395][ T5932] usb 5-1: Using ep0 maxpacket: 16 [ 1107.336498][ T5932] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1107.370826][ T5932] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1107.451033][ T5932] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1107.475351][ T5932] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1107.542039][ T5932] usb 5-1: Product: syz [ 1107.552232][ T5932] usb 5-1: Manufacturer: syz [ 1107.616411][ T5932] usb 5-1: SerialNumber: syz [ 1107.636191][ T5932] usb 5-1: config 0 descriptor?? [ 1107.688750][ T5932] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1107.720946][ T5932] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 1107.801778][ T1226] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1107.838099][ T1226] usb 1-1: USB disconnect, device number 94 [ 1107.993046][T14953] udevd[14953]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1108.253194][T19310] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3496'. [ 1108.417622][ T5932] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1108.425502][ T5932] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 1109.098734][ T5932] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 1110.156830][ T5904] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1110.250482][ T5932] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 1110.262800][ T5932] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 1110.270025][ T5932] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 1110.316835][ T5932] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 1110.326846][ T5904] usb 3-1: Using ep0 maxpacket: 16 [ 1110.336954][ T5904] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1110.366386][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1110.386580][ T5932] usb 5-1: USB disconnect, device number 104 [ 1110.422236][ T5904] usb 3-1: config 0 descriptor?? [ 1110.447488][ T5904] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1110.494242][T19335] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1112.100967][ T5904] gspca_sonixj: reg_w1 err -110 [ 1112.126557][ T5904] sonixj 3-1:0.0: probe with driver sonixj failed with error -110 [ 1112.148772][T19094] IPVS: starting estimator thread 0... [ 1112.236468][T19355] IPVS: using max 46 ests per chain, 110400 per kthread [ 1113.149478][T19094] usb 3-1: USB disconnect, device number 104 [ 1113.276433][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 1113.276451][ T30] audit: type=1326 audit(1774976178.444:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19363 comm="syz.3.3510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002579c819 code=0x7ffc0000 [ 1113.309477][T19370] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1113.329971][ T30] audit: type=1326 audit(1774976178.444:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19363 comm="syz.3.3510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002579c819 code=0x7ffc0000 [ 1113.378148][ T30] audit: type=1326 audit(1774976178.444:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19363 comm="syz.3.3510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f002579c819 code=0x7ffc0000 [ 1113.410816][ T30] audit: type=1326 audit(1774976178.444:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19363 comm="syz.3.3510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002579c819 code=0x7ffc0000 [ 1113.689326][ T30] audit: type=1326 audit(1774976178.444:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19363 comm="syz.3.3510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002579c819 code=0x7ffc0000 [ 1113.856644][T19380] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3512'. [ 1113.968667][ T30] audit: type=1326 audit(1774976178.454:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19363 comm="syz.3.3510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f002579c819 code=0x7ffc0000 [ 1113.994020][ T30] audit: type=1326 audit(1774976178.454:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19363 comm="syz.3.3510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002579c819 code=0x7ffc0000 [ 1114.021415][ T30] audit: type=1326 audit(1774976178.454:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19363 comm="syz.3.3510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f002579c819 code=0x7ffc0000 [ 1114.046091][ T30] audit: type=1326 audit(1774976178.454:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19363 comm="syz.3.3510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f002579c819 code=0x7ffc0000 [ 1114.070987][ T30] audit: type=1326 audit(1774976178.454:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19363 comm="syz.3.3510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f002575d04e code=0x7ffc0000 [ 1115.931094][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.938404][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.074913][T19405] nvme_fabrics: missing parameter 'transport=%s' [ 1116.091785][T19405] nvme_fabrics: missing parameter 'nqn=%s' [ 1118.253308][T19444] sg_write: data in/out 405980/48 bytes for SCSI command 0x0-- guessing data in; [ 1118.253308][T19444] program syz.0.3530 not setting count and/or reply_len properly [ 1118.270428][T19094] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1118.286779][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 1118.286794][ T30] audit: type=1326 audit(1774976183.464:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19443 comm="syz.0.3530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23c259c819 code=0x7ffc0000 [ 1118.347128][T19444] syzkaller1: entered promiscuous mode [ 1118.352630][T19444] syzkaller1: entered allmulticast mode [ 1118.376488][ T1226] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1118.389693][ T30] audit: type=1326 audit(1774976183.514:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19443 comm="syz.0.3530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23c259c819 code=0x7ffc0000 [ 1118.445005][T19094] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 1118.453524][T19094] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1118.475982][T19094] usb 7-1: config 0 has no interface number 0 [ 1118.494037][ T30] audit: type=1326 audit(1774976183.524:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19443 comm="syz.0.3530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f23c259c819 code=0x7ffc0000 [ 1118.520746][ T30] audit: type=1326 audit(1774976183.524:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19443 comm="syz.0.3530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23c259c819 code=0x7ffc0000 [ 1118.543889][T19094] usb 7-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 1118.556738][T19094] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.565137][T19094] usb 7-1: Product: syz [ 1118.569711][T19094] usb 7-1: Manufacturer: syz [ 1118.576949][ T30] audit: type=1326 audit(1774976183.524:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19443 comm="syz.0.3530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23c259c819 code=0x7ffc0000 [ 1118.599470][T19094] usb 7-1: SerialNumber: syz [ 1118.605476][ T30] audit: type=1326 audit(1774976183.524:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19443 comm="syz.0.3530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f23c259c819 code=0x7ffc0000 [ 1118.606753][ T1226] usb 4-1: Using ep0 maxpacket: 16 [ 1118.630555][T19094] usb 7-1: config 0 descriptor?? [ 1118.651170][T19094] ims_pcu 7-1:0.41: Missing CDC union descriptor [ 1118.671445][T19094] ims_pcu 7-1:0.41: probe with driver ims_pcu failed with error -22 [ 1118.722890][ T30] audit: type=1326 audit(1774976183.524:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19443 comm="syz.0.3530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23c259c819 code=0x7ffc0000 [ 1118.741402][ T1226] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1118.796394][ T1226] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.804642][ T30] audit: type=1326 audit(1774976183.524:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19443 comm="syz.0.3530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f23c259c819 code=0x7ffc0000 [ 1118.826992][ T1226] usb 4-1: Product: syz [ 1118.827012][ T1226] usb 4-1: Manufacturer: syz [ 1118.827028][ T1226] usb 4-1: SerialNumber: syz [ 1118.894797][ T5932] usb 7-1: USB disconnect, device number 32 [ 1118.913291][ T1226] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1118.920667][ T30] audit: type=1326 audit(1774976183.524:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19443 comm="syz.0.3530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23c259c819 code=0x7ffc0000 [ 1118.934301][ T1226] r8152-cfgselector 4-1: config 0 descriptor?? [ 1118.963797][T19447] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3531'. [ 1119.237112][ T30] audit: type=1326 audit(1774976183.524:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19443 comm="syz.0.3530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f23c259c819 code=0x7ffc0000 [ 1119.696449][T19094] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1119.793097][T19457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1119.806853][T19457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1119.859133][T19094] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1119.929938][T19094] usb 1-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1119.963371][T19094] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1119.995740][T19094] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1120.055459][T19094] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1120.087173][T19094] usb 1-1: invalid MIDI out EP 0 [ 1120.336182][T19462] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3535'. [ 1120.462465][T19094] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1120.491971][T19462] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1120.512954][T19094] usb 1-1: USB disconnect, device number 95 [ 1120.539917][T19464] bond1: (slave macvlan1): Enslaving as an active interface with an up link [ 1120.641504][T19465] bond1 (unregistering): (slave macvlan1): Releasing backup interface [ 1120.678609][T19465] bond1 (unregistering): Released all slaves [ 1121.162925][ T1226] r8152-cfgselector 4-1: USB disconnect, device number 93 [ 1123.064617][T19484] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1123.163746][ T5833] Bluetooth: hci2: command 0x0406 tx timeout [ 1123.739487][T19492] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3542'. [ 1123.876972][T19498] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1124.156965][ T1226] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1124.317391][ T1226] usb 3-1: Using ep0 maxpacket: 8 [ 1124.391547][ T1226] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1124.403855][ T1226] usb 3-1: config 0 has no interfaces? [ 1124.447161][ T1226] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1124.500216][ T1226] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1124.606590][ T1226] usb 3-1: Product: syz [ 1124.694638][ T1226] usb 3-1: Manufacturer: syz [ 1124.727113][ T1226] usb 3-1: SerialNumber: syz [ 1124.783309][ T1226] usb 3-1: config 0 descriptor?? [ 1124.839544][T19524] netlink: 'syz.4.3550': attribute type 1 has an invalid length. [ 1125.144867][T19528] bond1: (slave geneve2): making interface the new active one [ 1125.182763][T19528] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1125.210520][T16654] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1125.363962][T16654] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1125.422855][T16654] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1125.512093][T16654] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1127.103813][ T1226] usb 3-1: USB disconnect, device number 105 [ 1127.464617][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 1127.464636][ T30] audit: type=1326 audit(1774976192.644:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19548 comm="syz.2.3556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ddf59c819 code=0x7ffc0000 [ 1127.522037][ T30] audit: type=1326 audit(1774976192.674:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19548 comm="syz.2.3556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ddf59c819 code=0x7ffc0000 [ 1127.571837][ T30] audit: type=1326 audit(1774976192.674:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19548 comm="syz.2.3556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f6ddf59c819 code=0x7ffc0000 [ 1127.835127][T19561] syzkaller0: entered promiscuous mode [ 1127.846462][ T30] audit: type=1326 audit(1774976192.674:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19548 comm="syz.2.3556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ddf59c819 code=0x7ffc0000 [ 1127.871994][T19561] syzkaller0: entered allmulticast mode [ 1127.930994][ T30] audit: type=1326 audit(1774976192.674:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19548 comm="syz.2.3556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ddf59c819 code=0x7ffc0000 [ 1128.049975][ T30] audit: type=1326 audit(1774976192.674:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19548 comm="syz.2.3556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f6ddf59c819 code=0x7ffc0000 [ 1128.123561][ T30] audit: type=1326 audit(1774976192.674:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19548 comm="syz.2.3556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ddf59c819 code=0x7ffc0000 [ 1128.315985][ T30] audit: type=1326 audit(1774976192.674:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19548 comm="syz.2.3556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ddf59c819 code=0x7ffc0000 [ 1128.402153][ T30] audit: type=1326 audit(1774976192.674:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19548 comm="syz.2.3556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f6ddf59c819 code=0x7ffc0000 [ 1128.629386][ T1226] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 1128.638180][ T30] audit: type=1326 audit(1774976192.684:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19548 comm="syz.2.3556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ddf59c819 code=0x7ffc0000 [ 1128.870963][ T1226] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1128.883210][ T1226] usb 1-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 1128.898011][ T1226] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1128.922891][ T1226] usb 1-1: config 0 descriptor?? [ 1128.937061][T19569] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1128.960102][T19575] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3563'. [ 1129.351096][T19569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1129.364271][T19569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1129.378501][ T1226] hid (null): unknown global tag 0xdc [ 1129.417830][ T1226] asus 0003:0B05:1ABE.0022: unknown main item tag 0x0 [ 1129.455089][ T1226] asus 0003:0B05:1ABE.0022: unknown main item tag 0x0 [ 1129.503158][ T1226] asus 0003:0B05:1ABE.0022: unknown main item tag 0x0 [ 1129.523360][ T1226] asus 0003:0B05:1ABE.0022: unknown main item tag 0x0 [ 1129.556481][ T1226] asus 0003:0B05:1ABE.0022: unknown main item tag 0x0 [ 1129.582243][ T1226] asus 0003:0B05:1ABE.0022: unknown main item tag 0x0 [ 1129.610256][T19581] fuse: Bad value for 'fd' [ 1129.619645][ T1226] asus 0003:0B05:1ABE.0022: unknown main item tag 0x0 [ 1129.639875][ T1226] asus 0003:0B05:1ABE.0022: unknown main item tag 0x0 [ 1129.660143][ T1226] asus 0003:0B05:1ABE.0022: unknown main item tag 0x0 [ 1129.686844][ T1226] asus 0003:0B05:1ABE.0022: unknown main item tag 0x0 [ 1129.722035][ T1226] asus 0003:0B05:1ABE.0022: unexpected long global item [ 1129.757264][ T1226] asus 0003:0B05:1ABE.0022: Asus hid parse failed: -22 [ 1129.794656][ T1226] asus 0003:0B05:1ABE.0022: probe with driver asus failed with error -22 [ 1129.863791][ T1226] usb 1-1: USB disconnect, device number 96 [ 1132.515445][T19628] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3577'. [ 1133.006656][ T1226] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1133.250044][T19644] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1133.276804][ T1226] usb 7-1: Using ep0 maxpacket: 16 [ 1133.326718][ T1226] usb 7-1: config 0 has no interfaces? [ 1133.334322][ T1226] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1133.346312][ T1226] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1133.357945][ T1226] usb 7-1: Manufacturer: syz [ 1133.473249][ T1226] usb 7-1: config 0 descriptor?? [ 1133.586482][T18154] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1133.844548][T19628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1133.859488][T19628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1133.907166][T18154] usb 3-1: Using ep0 maxpacket: 8 [ 1133.934326][T19650] syzkaller0: entered promiscuous mode [ 1133.940349][T19650] syzkaller0: entered allmulticast mode [ 1134.020224][T18154] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1134.030683][T18154] usb 3-1: config 0 has no interfaces? [ 1134.103881][T18154] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1134.231739][T18154] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1134.286444][T18154] usb 3-1: Product: syz [ 1134.306823][T18154] usb 3-1: Manufacturer: syz [ 1134.341764][T18154] usb 3-1: SerialNumber: syz [ 1134.397353][T18154] usb 3-1: config 0 descriptor?? [ 1135.647355][ T5823] usb 7-1: USB disconnect, device number 33 [ 1136.100213][T19673] fuse: Bad value for 'fd' [ 1136.650177][ T5823] usb 3-1: USB disconnect, device number 106 [ 1136.868042][T19688] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3592'. [ 1137.298275][ T5823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1137.974034][T19094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1138.546435][ T5833] Bluetooth: hci0: command 0x0406 tx timeout [ 1139.907726][T19724] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3600'. [ 1140.298707][T19730] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1140.736778][T18154] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1140.912400][T18154] usb 4-1: Using ep0 maxpacket: 8 [ 1140.979071][T18154] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1140.989230][T18154] usb 4-1: config 0 has no interfaces? [ 1141.052833][T19741] netlink: 1319 bytes leftover after parsing attributes in process `syz.0.3606'. [ 1141.271635][T18154] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 1141.337726][T18154] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1141.571581][T18154] usb 4-1: Product: syz [ 1141.604347][T18154] usb 4-1: Manufacturer: syz [ 1141.626456][T18154] usb 4-1: SerialNumber: syz [ 1141.804841][T18154] usb 4-1: config 0 descriptor?? [ 1142.679747][T19759] program syz.6.3610 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1142.807339][T19763] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1143.737464][T19094] usb 4-1: USB disconnect, device number 94 [ 1143.840775][T19771] geneve2: entered promiscuous mode [ 1144.010671][T19771] syzkaller0: entered promiscuous mode [ 1144.016707][T19771] syzkaller0: entered allmulticast mode [ 1146.008965][T19804] trusted_key: encrypted_key: insufficient parameters specified [ 1146.139534][T19806] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3622'. [ 1146.627418][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1148.393017][T19841] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3632'. [ 1148.434469][T19841] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3632'. [ 1149.013832][T19094] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 1149.277022][T19094] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1149.327572][T19094] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 1149.367065][T19094] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1149.527323][T19094] usb 1-1: config 0 descriptor?? [ 1149.540548][T19841] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1149.726666][T19853] FAULT_INJECTION: forcing a failure. [ 1149.726666][T19853] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1149.771328][T19853] CPU: 0 UID: 0 PID: 19853 Comm: syz.2.3634 Tainted: G L syzkaller #0 PREEMPT(full) [ 1149.771358][T19853] Tainted: [L]=SOFTLOCKUP [ 1149.771366][T19853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1149.771378][T19853] Call Trace: [ 1149.771386][T19853] [ 1149.771398][T19853] dump_stack_lvl+0xe8/0x150 [ 1149.771431][T19853] should_fail_ex+0x412/0x560 [ 1149.771466][T19853] prepare_alloc_pages+0x22a/0x650 [ 1149.771498][T19853] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1149.771527][T19853] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1149.771556][T19853] ? __pfx_policy_nodemask+0x10/0x10 [ 1149.771585][T19853] ? __lock_acquire+0x6b5/0x2cf0 [ 1149.771612][T19853] alloc_pages_mpol+0x232/0x4a0 [ 1149.771640][T19853] vma_alloc_folio_noprof+0xea/0x210 [ 1149.771663][T19853] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1149.771692][T19853] do_pte_missing+0x1656/0x3490 [ 1149.771722][T19853] handle_mm_fault+0x1bec/0x3310 [ 1149.771755][T19853] ? handle_mm_fault+0xee/0x3310 [ 1149.771784][T19853] ? __pfx_handle_mm_fault+0x10/0x10 [ 1149.771808][T19853] ? follow_page_pte+0x841/0x1450 [ 1149.771828][T19853] ? __pfx_follow_page_pte+0x10/0x10 [ 1149.771850][T19853] __get_user_pages+0x165b/0x29d0 [ 1149.771893][T19853] __gup_longterm_locked+0x3db/0x1630 [ 1149.771939][T19853] gup_fast_fallback+0x1d82/0x22e0 [ 1149.771982][T19853] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1149.772007][T19853] ? is_valid_gup_args+0x11f/0x200 [ 1149.772031][T19853] ? pin_user_pages_fast+0x4d/0xb0 [ 1149.772055][T19853] rds_cmsg_rdma_args+0x8f4/0x1240 [ 1149.772094][T19853] ? trace_kmalloc+0x2a/0x110 [ 1149.772112][T19853] rds_cmsg_send+0x33d/0x5c0 [ 1149.772137][T19853] rds_sendmsg+0x12be/0x2150 [ 1149.772161][T19853] ? __pfx_rds_sendmsg+0x10/0x10 [ 1149.772181][T19853] ? __pfx_aa_sk_perm+0x10/0x10 [ 1149.772203][T19853] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1149.772225][T19853] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1149.772249][T19853] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1149.772270][T19853] ____sys_sendmsg+0x972/0x9f0 [ 1149.772295][T19853] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1149.772321][T19853] ? import_iovec+0x73/0xa0 [ 1149.772341][T19853] ___sys_sendmsg+0x2a5/0x360 [ 1149.772364][T19853] ? __pfx____sys_sendmsg+0x10/0x10 [ 1149.772408][T19853] ? __fget_files+0x2a/0x420 [ 1149.772421][T19853] ? __fget_files+0x3a0/0x420 [ 1149.772441][T19853] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1149.772463][T19853] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1149.772489][T19853] ? __pfx_ksys_write+0x10/0x10 [ 1149.772515][T19853] do_syscall_64+0x14d/0xf80 [ 1149.772534][T19853] ? trace_irq_disable+0x3b/0x150 [ 1149.772547][T19853] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1149.772562][T19853] ? clear_bhb_loop+0x40/0x90 [ 1149.772580][T19853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1149.772596][T19853] RIP: 0033:0x7f6ddf59c819 [ 1149.772610][T19853] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1149.772623][T19853] RSP: 002b:00007f6de0413028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1149.772639][T19853] RAX: ffffffffffffffda RBX: 00007f6ddf816180 RCX: 00007f6ddf59c819 [ 1149.772650][T19853] RDX: 0000000000000000 RSI: 0000200000001600 RDI: 0000000000000008 [ 1149.772660][T19853] RBP: 00007f6de0413090 R08: 0000000000000000 R09: 0000000000000000 [ 1149.772671][T19853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1149.772680][T19853] R13: 00007f6ddf816218 R14: 00007f6ddf816180 R15: 00007f6ddf93fa48 [ 1149.772703][T19853] [ 1150.335395][T19094] hid_parser_main: 45 callbacks suppressed [ 1150.335419][T19094] koneplus 0003:1E7D:2E22.0023: unknown main item tag 0x0 [ 1150.351523][T19094] koneplus 0003:1E7D:2E22.0023: unknown main item tag 0x0 [ 1150.359079][T19094] koneplus 0003:1E7D:2E22.0023: unknown main item tag 0x0 [ 1150.366268][T19094] koneplus 0003:1E7D:2E22.0023: unknown main item tag 0x0 [ 1150.373971][T19094] koneplus 0003:1E7D:2E22.0023: unknown main item tag 0x0 [ 1150.384093][T19094] koneplus 0003:1E7D:2E22.0023: unknown main item tag 0x0 [ 1150.391824][T19094] koneplus 0003:1E7D:2E22.0023: unknown main item tag 0x0 [ 1150.399097][T19094] koneplus 0003:1E7D:2E22.0023: unknown main item tag 0x0 [ 1150.406239][T19094] koneplus 0003:1E7D:2E22.0023: unknown main item tag 0x0 [ 1150.413869][T19094] koneplus 0003:1E7D:2E22.0023: unknown main item tag 0x0 [ 1150.421927][T19094] koneplus 0003:1E7D:2E22.0023: unknown global tag 0xd [ 1150.429139][T19094] koneplus 0003:1E7D:2E22.0023: item 0 1 1 13 parsing failed [ 1150.437063][T19094] koneplus 0003:1E7D:2E22.0023: parse failed [ 1150.443148][T19094] koneplus 0003:1E7D:2E22.0023: probe with driver koneplus failed with error -22 [ 1150.528649][ T1226] usb 4-1: new low-speed USB device number 95 using dummy_hcd [ 1150.736424][ T1226] usb 4-1: Invalid ep0 maxpacket: 16 [ 1150.877763][ T1226] usb 4-1: new low-speed USB device number 96 using dummy_hcd [ 1151.036663][ T1226] usb 4-1: Invalid ep0 maxpacket: 16 [ 1151.042395][ T1226] usb usb4-port1: attempt power cycle [ 1151.416423][ T1226] usb 4-1: new low-speed USB device number 97 using dummy_hcd [ 1151.437096][ T1226] usb 4-1: Invalid ep0 maxpacket: 16 [ 1151.578254][ T1226] usb 4-1: new low-speed USB device number 98 using dummy_hcd [ 1151.606985][T18154] usb 1-1: USB disconnect, device number 97 [ 1151.618117][ T1226] usb 4-1: Invalid ep0 maxpacket: 16 [ 1151.631055][ T1226] usb usb4-port1: unable to enumerate USB device [ 1151.920177][T19879] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3640'. [ 1151.930788][T19879] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3640'. [ 1152.230154][T19886] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3642'. [ 1152.245393][T19886] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3642'. [ 1152.361053][T19094] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1152.517168][T19094] usb 3-1: Using ep0 maxpacket: 16 [ 1152.526550][T12284] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1152.542434][T19094] usb 3-1: config 0 has no interfaces? [ 1152.554806][T19094] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1152.564512][T19094] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1152.574949][T19094] usb 3-1: Manufacturer: syz [ 1152.588179][T19094] usb 3-1: config 0 descriptor?? [ 1152.774625][T12284] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 1152.794064][T12284] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 1152.825481][T19879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1152.843295][T19879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1152.865910][T12284] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1152.922394][T12284] usb 7-1: config 0 descriptor?? [ 1152.938754][T19886] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1153.126452][T18154] usb 5-1: new full-speed USB device number 105 using dummy_hcd [ 1153.286719][T18154] usb 5-1: device descriptor read/64, error -71 [ 1153.333850][T19898] tipc: Failed to remove unknown binding: 66,1,1/739435372:3757835137/3757835139 [ 1153.362807][T12284] koneplus 0003:1E7D:2E22.0024: unknown global tag 0xd [ 1153.410008][T12284] koneplus 0003:1E7D:2E22.0024: item 0 1 1 13 parsing failed [ 1153.504796][T12284] koneplus 0003:1E7D:2E22.0024: parse failed [ 1153.551311][T18154] usb 5-1: new full-speed USB device number 106 using dummy_hcd [ 1153.567774][T12284] koneplus 0003:1E7D:2E22.0024: probe with driver koneplus failed with error -22 [ 1153.687349][T18154] usb 5-1: device descriptor read/64, error -71 [ 1153.797627][T18154] usb usb5-port1: attempt power cycle [ 1154.156991][T18154] usb 5-1: new full-speed USB device number 107 using dummy_hcd [ 1154.191634][T18154] usb 5-1: device descriptor read/8, error -71 [ 1154.455202][T18154] usb 5-1: new full-speed USB device number 108 using dummy_hcd [ 1154.497269][T18154] usb 5-1: device descriptor read/8, error -71 [ 1154.665473][T18154] usb usb5-port1: unable to enumerate USB device [ 1154.697180][T12284] usb 3-1: USB disconnect, device number 107 [ 1154.731140][T19921] loop5: detected capacity change from 0 to 7 [ 1155.054420][ T5904] usb 7-1: USB disconnect, device number 34 [ 1155.095939][T14953] Dev loop5: unable to read RDB block 7 [ 1155.110616][T14953] loop5: unable to read partition table [ 1155.143699][T14953] loop5: partition table beyond EOD, truncated [ 1155.424650][T19921] Dev loop5: unable to read RDB block 7 [ 1155.444155][T19921] loop5: unable to read partition table [ 1155.486611][T19921] loop5: partition table beyond EOD, truncated [ 1155.523881][T19921] loop_reread_partitions: partition scan of loop5 (úùƒWå¡™‰ü¾Ã½) failed (rc=-5) [ 1155.793459][T19934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3661'. [ 1155.894132][T19936] geneve2: entered promiscuous mode [ 1155.938697][T19942] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3666'. [ 1156.436468][ T5904] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 1156.484696][T19967] usb usb8: usbfs: process 19967 (syz.6.3676) did not claim interface 0 before use [ 1156.546550][T19094] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 1156.602404][ T5904] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1156.614018][ T5904] usb 1-1: config 0 has no interface number 0 [ 1156.658114][ T5904] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1156.706676][T19094] usb 5-1: Using ep0 maxpacket: 16 [ 1156.721613][T19094] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1156.730983][T19094] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1156.740065][T19094] usb 5-1: Product: syz [ 1156.747141][T19094] usb 5-1: Manufacturer: syz [ 1156.751835][T19094] usb 5-1: SerialNumber: syz [ 1156.754562][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1156.792800][ T5904] usb 1-1: Product: syz [ 1156.803494][T19094] usb 5-1: config 0 descriptor?? [ 1156.808780][ T5904] usb 1-1: Manufacturer: syz [ 1156.855890][ T5904] usb 1-1: SerialNumber: syz [ 1156.877843][ T5904] usb 1-1: config 0 descriptor?? [ 1156.966166][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 1156.966185][ T30] audit: type=1326 audit(1774976222.144:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19971 comm="syz.3.3678" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f002579c819 code=0x0 [ 1157.099413][ T5904] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1157.128329][ T5904] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1157.145678][ T5904] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1157.163918][ T5904] usb 1-1: media controller created [ 1157.193691][ T5904] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1157.269639][T19094] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1157.282503][T19094] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1157.297520][T19094] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1157.306893][T19094] usb 5-1: media controller created [ 1157.338472][T19094] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1157.900272][T19094] zl10353_read_register: readreg error (reg=127, ret==0) [ 1157.910623][T19094] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1157.919837][T19094] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1158.023459][T19996] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3686'. [ 1158.243181][T20000] tipc: Enabled bearer , priority 10 [ 1158.319016][ T5904] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 1158.378427][T19094] usb 5-1: USB disconnect, device number 109 [ 1158.479410][T19094] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1158.515367][ T5904] usb 1-1: USB disconnect, device number 98 [ 1158.549895][T20004] syzkaller0: entered promiscuous mode [ 1158.566769][T20004] syzkaller0: entered allmulticast mode [ 1158.792960][ T30] audit: type=1800 audit(1774976223.974:1280): pid=20009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3693" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1161.108338][T20034] raw_sendmsg: syz.2.3694 forgot to set AF_INET. Fix it! [ 1161.119707][T20034] ªªªªªª: renamed from vlan0 (while UP) [ 1168.636352][ C0] sched: DL replenish lagged too much [ 1177.558977][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.578484][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.204919][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.224003][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1279.750148][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1300.360745][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.379048][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.824402][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1367.639900][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1397.596255][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1397.603345][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P17633/1:b..l P20014/1:b..l [ 1397.613157][ C1] rcu: (detected by 1, t=10503 jiffies, g=137813, q=1480533 ncpus=2) [ 1397.621340][ C1] task:syz.2.3694 state:R running task stack:26112 pid:20014 tgid:20012 ppid:17048 task_flags:0x40044c flags:0x00080003 [ 1397.635934][ C1] Call Trace: [ 1397.639236][ C1] [ 1397.642175][ C1] __schedule+0x15dd/0x52d0 [ 1397.646693][ C1] ? __pfx___schedule+0x10/0x10 [ 1397.651542][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1397.656558][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 1397.661920][ C1] preempt_schedule_common+0x82/0xd0 [ 1397.667201][ C1] ? nl80211_netlink_notify+0x46b/0x840 [ 1397.672742][ C1] preempt_schedule_thunk+0x16/0x30 [ 1397.677935][ C1] __local_bh_enable_ip+0xe1/0x130 [ 1397.683040][ C1] nl80211_netlink_notify+0x46b/0x840 [ 1397.688407][ C1] ? nl80211_netlink_notify+0x74/0x840 [ 1397.693880][ C1] notifier_call_chain+0x1be/0x400 [ 1397.698994][ C1] blocking_notifier_call_chain+0x6a/0x90 [ 1397.704709][ C1] netlink_release+0x123b/0x1ad0 [ 1397.709644][ C1] ? netlink_release+0x101/0x1ad0 [ 1397.714678][ C1] ? __pfx_netlink_release+0x10/0x10 [ 1397.719953][ C1] ? down_write+0x16d/0x200 [ 1397.724480][ C1] ? __pfx_down_write+0x10/0x10 [ 1397.729343][ C1] sock_close+0xc3/0x240 [ 1397.733589][ C1] ? __pfx_sock_close+0x10/0x10 [ 1397.738456][ C1] __fput+0x44f/0xa70 [ 1397.742449][ C1] task_work_run+0x1d9/0x270 [ 1397.747043][ C1] ? __pfx_task_work_run+0x10/0x10 [ 1397.752145][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 1397.757251][ C1] do_exit+0x70f/0x23c0 [ 1397.761406][ C1] ? __pfx_do_exit+0x10/0x10 [ 1397.765990][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1397.771016][ C1] do_group_exit+0x21b/0x2d0 [ 1397.775624][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1397.780820][ C1] get_signal+0x1284/0x1330 [ 1397.785337][ C1] arch_do_signal_or_restart+0xbc/0x830 [ 1397.790884][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1397.797061][ C1] exit_to_user_mode_loop+0x86/0x480 [ 1397.802358][ C1] ? rcu_is_watching+0x15/0xb0 [ 1397.807121][ C1] do_syscall_64+0x32d/0xf80 [ 1397.811705][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1397.817781][ C1] ? clear_bhb_loop+0x40/0x90 [ 1397.822467][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1397.828354][ C1] RIP: 0033:0x7f6ddf450780 [ 1397.832780][ C1] RSP: 002b:00007f6de0454b38 EFLAGS: 00000246 [ 1397.838847][ C1] RAX: 0000000000000000 RBX: 00007f6ddf815fa8 RCX: 00007f6ddf59c819 [ 1397.846832][ C1] RDX: 00007f6de0454b40 RSI: 00007f6de0454c70 RDI: 0000000000000011 [ 1397.854815][ C1] RBP: 00007f6ddf815fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1397.862779][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1397.870741][ C1] R13: 00007f6ddf816038 R14: 00007f6ddf93f960 R15: 00007f6ddf93fa48 [ 1397.878732][ C1] [ 1397.881749][ C1] task:syz-executor state:R running task stack:22688 pid:17633 tgid:17633 ppid:1 task_flags:0x40054c flags:0x00080002 [ 1397.895244][ C1] Call Trace: [ 1397.898527][ C1] [ 1397.901456][ C1] __schedule+0x15dd/0x52d0 [ 1397.905966][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 1397.911085][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 1397.916220][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 1397.921375][ C1] ? unwind_next_frame+0x1aaf/0x23c0 [ 1397.926662][ C1] ? __pfx___schedule+0x10/0x10 [ 1397.931515][ C1] preempt_schedule_irq+0x4d/0xa0 [ 1397.936540][ C1] irqentry_exit+0x599/0x620 [ 1397.941126][ C1] ? trace_irq_disable+0x3b/0x150 [ 1397.946175][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1397.952146][ C1] RIP: 0010:kasan_check_range+0x1c8/0x2c0 [ 1397.957864][ C1] Code: 49 01 dc 4d 01 f3 49 8d 5c 24 07 4d 85 e4 49 0f 49 dc 48 83 e3 f8 49 29 dc 74 0e 41 80 3b 00 75 7c 49 ff c3 49 ff cc 75 f2 5b <41> 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 45 84 ff 0f 85 a1 00 [ 1397.977565][ C1] RSP: 0018:ffffc90003306f48 EFLAGS: 00000256 [ 1397.983625][ C1] RAX: ffffc90003307f01 RBX: 0000000000000010 RCX: ffffffff81768c9e [ 1397.991595][ C1] RDX: 0000000000000001 RSI: 0000000000000010 RDI: ffffc900033070b8 [ 1397.999560][ C1] RBP: 0000000000000000 R08: ffffc900033070c7 R09: 1ffff92000660e18 [ 1398.007539][ C1] R10: dffffc0000000000 R11: fffff52000660e19 R12: 0000000000000002 [ 1398.015518][ C1] R13: 1ffff92000660e0f R14: fffff52000660e19 R15: 1ffff92000660e17 [ 1398.023493][ C1] ? unwind_next_frame+0xeae/0x23c0 [ 1398.028735][ C1] __asan_memset+0x22/0x50 [ 1398.033156][ C1] unwind_next_frame+0xeae/0x23c0 [ 1398.038179][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 1398.043290][ C1] ? do_syscall_64+0x32d/0xf80 [ 1398.048049][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1398.054193][ C1] arch_stack_walk+0x11b/0x150 [ 1398.058966][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1398.065040][ C1] stack_trace_save+0xa9/0x100 [ 1398.069798][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1398.075168][ C1] ? stack_depot_save_flags+0x33/0x810 [ 1398.080641][ C1] save_stack+0x122/0x230 [ 1398.084976][ C1] ? __pfx_save_stack+0x10/0x10 [ 1398.089836][ C1] ? free_unref_folios+0xed5/0x16d0 [ 1398.095029][ C1] ? folios_put_refs+0x789/0x8d0 [ 1398.099982][ C1] ? free_pages_and_swap_cache+0x2e7/0x5b0 [ 1398.105806][ C1] ? tlb_flush_mmu+0x6d3/0xa30 [ 1398.110561][ C1] ? tlb_finish_mmu+0xf9/0x230 [ 1398.115320][ C1] ? exit_mmap+0x498/0xa10 [ 1398.119762][ C1] ? __mmput+0x118/0x430 [ 1398.124003][ C1] ? exit_mm+0x168/0x220 [ 1398.128236][ C1] ? do_exit+0x6a2/0x23c0 [ 1398.132556][ C1] ? do_group_exit+0x21b/0x2d0 [ 1398.137314][ C1] ? get_signal+0x1284/0x1330 [ 1398.141987][ C1] ? arch_do_signal_or_restart+0xbc/0x830 [ 1398.147703][ C1] ? exit_to_user_mode_loop+0x86/0x480 [ 1398.153159][ C1] ? do_syscall_64+0x32d/0xf80 [ 1398.157924][ C1] ? page_ext_put+0x97/0xc0 [ 1398.162426][ C1] __reset_page_owner+0x71/0x1f0 [ 1398.167355][ C1] free_unref_folios+0xed5/0x16d0 [ 1398.172378][ C1] folios_put_refs+0x789/0x8d0 [ 1398.177136][ C1] ? arch_do_signal_or_restart+0xbc/0x830 [ 1398.182853][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 1398.188151][ C1] ? free_swap_cache+0x109/0x300 [ 1398.193089][ C1] free_pages_and_swap_cache+0x2e7/0x5b0 [ 1398.198743][ C1] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 1398.204923][ C1] ? __virt_addr_valid+0x1c8/0x5b0 [ 1398.210063][ C1] tlb_flush_mmu+0x6d3/0xa30 [ 1398.214670][ C1] ? __pfx_down_write+0x10/0x10 [ 1398.219523][ C1] tlb_finish_mmu+0xf9/0x230 [ 1398.224122][ C1] exit_mmap+0x498/0xa10 [ 1398.228379][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 1398.233147][ C1] ? __pfx_exit_aio+0x10/0x10 [ 1398.237826][ C1] ? uprobe_clear_state+0x27c/0x290 [ 1398.243027][ C1] __mmput+0x118/0x430 [ 1398.247102][ C1] exit_mm+0x168/0x220 [ 1398.251172][ C1] do_exit+0x6a2/0x23c0 [ 1398.255371][ C1] ? __pfx_do_exit+0x10/0x10 [ 1398.259959][ C1] ? schedule+0x90/0x360 [ 1398.264227][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1398.269251][ C1] do_group_exit+0x21b/0x2d0 [ 1398.273834][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1398.279033][ C1] get_signal+0x1284/0x1330 [ 1398.283544][ C1] arch_do_signal_or_restart+0xbc/0x830 [ 1398.289086][ C1] ? __pfx_get_timespec64+0x10/0x10 [ 1398.294300][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1398.300466][ C1] ? __se_sys_clock_nanosleep+0x35b/0x3b0 [ 1398.306184][ C1] exit_to_user_mode_loop+0x86/0x480 [ 1398.311462][ C1] ? rcu_is_watching+0x15/0xb0 [ 1398.316224][ C1] do_syscall_64+0x32d/0xf80 [ 1398.320810][ C1] ? trace_irq_disable+0x3b/0x150 [ 1398.325826][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1398.331912][ C1] ? clear_bhb_loop+0x40/0x90 [ 1398.336612][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1398.342510][ C1] RIP: 0033:0x7f23c255d04e [ 1398.346915][ C1] RSP: 002b:00007f23c293fd28 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 1398.355331][ C1] RAX: 0000000000000000 RBX: 00005555586cc500 RCX: 00007f23c255d04e [ 1398.363293][ C1] RDX: 00007f23c293fd80 RSI: 0000000000000000 RDI: 0000000000000000 [ 1398.371252][ C1] RBP: 00007f23c293fdec R08: 0000000000000000 R09: 0000000000000000 [ 1398.379223][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000082 [ 1398.387188][ C1] R13: 0000000000000063 R14: 000000000011b591 R15: 00007f23c293fe40 [ 1398.395160][ C1]