last executing test programs: 9.726462357s ago: executing program 2 (id=594): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) syz_open_procfs(0x0, 0x0) socket(0xa, 0x1, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002480)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0x5, &(0x7f0000000080)=0x7, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001000010010000000ffdbdf2500000000", @ANYRES32=r6, @ANYBLOB="dc02000011000400140012800b0001006d616373656300e5590002800a000100000000ebffffff00f4b96cf96c4dd2f4018866a56d5a9d257fc7d5b1839cab9e532241fdd4c2169a979499eaa1609d0abb87a119fce6f64b6bb1ee006ffcf9c8975bf137c682595114ce151474636593c6"], 0x40}}, 0x800) 8.184901847s ago: executing program 2 (id=601): r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='attr\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000001000030427bd7000fedbdf2500007400", @ANYRES32=0x0, @ANYBLOB="0008000043d00700200012800b0001006272696467650000100002800a001400aaaaaaaaaaaa0000"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) r2 = socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000480)=0x102, 0x4) (async) sendto$packet(r2, 0x0, 0x0, 0x200004c0, &(0x7f0000000540)={0x11, 0x0, r3, 0x1, 0x9, 0x6, @local}, 0x14) 7.940400662s ago: executing program 2 (id=602): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/kexec_crash_loaded', 0x40000, 0x41) read$watch_queue(r3, &(0x7f00000002c0)=""/28, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0xfffffff9, @loopback, 0x4}, 0x1c) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r4, 0x80104592, 0x0) memfd_create(0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x0, 0x0}) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x20008804) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2400000001040101310000000000000000000400050001"], 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x14}}, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r10 = socket$pppl2tp(0x18, 0x1, 0x1) r11 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r10, &(0x7f0000001080)=@pppol2tpv3={0x18, 0x1, {0x3, r11, {0x41, 0x0, @multicast2}, 0x20020003}}, 0x2e) 6.15745552s ago: executing program 2 (id=611): r0 = syz_usb_connect$lan78xx(0x6, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000400)={0x14, &(0x7f0000000280)={0x40, 0x31, 0xd9, {0xd9, 0xd, "0f517ca7cd1fa378ff83c20b5582b9f416769a821d31a8577c3f8723f0057aaec65b64f8cea0ad25a40810ad51885e5bf5469185549648517c96d2b6ff966fd76de95c672ce0ecf5af187d351531e60c29dcf14cf6950891998c358dfcbb22f0f675b60c80f751ef75393c5d517877d5dee7b0c1c98e51d13ab77981fdbfc950ece08906738d5bcbbcc42557e1d3d98cc9e88f7653ba856359dbaee03313ca6e0c7f02ce16b2414731454c3b59e104c064b087fef7d02ca48f80335af9353ab0f19208ac2914d846e13cee5b6d06c6d2ee44588ad4909c"}}, &(0x7f00000003c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x426}}}, &(0x7f0000000700)={0x34, &(0x7f0000000480)={0x0, 0x12, 0xfe, "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"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000640)={0xc0, 0xa1, 0x4, 0x81}, &(0x7f0000000680)={0x40, 0xa0, 0x4, 0x2}, &(0x7f00000006c0)={0xc0, 0xa2, 0x2f, "0fcda1a662ebc4c53170478170437328dd3a484bd583c9344a9c561f4d86f9463824073e00d2b94f43270660b53186"}}) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x10010, r1, 0xfffff000) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r1, 0xf502, 0x0) socket$nl_audit(0x10, 0x3, 0x9) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x2000) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x402, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100d0000000fbdbdf252100000018000180140002007665746831"], 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x4008800) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000140)={&(0x7f00000001c0)=""/44, 0x0, 0x800, 0xffffffff, 0x2}, 0x2f) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000440), 0x4ab00, 0x0) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000200)={0x8}) ioctl$TIOCPKT(r6, 0x5420, &(0x7f0000000100)=0xcf5) ioctl$TCSETSW2(r6, 0x402c542c, &(0x7f00000000c0)={0x7, 0x9, 0x8, 0x7fffffff, 0x1, "e2e4a644f9fba86d63de77450928cf020ed53e", 0x3, 0x1000}) read(r2, &(0x7f0000000040)=""/148, 0xffffff96) 5.42080134s ago: executing program 0 (id=614): socket$packet(0x11, 0x3, 0x300) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) keyctl$set_reqkey_keyring(0x10, 0xfffffff8) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000500)={0x14, &(0x7f0000000400)={0x40, 0x7, 0x20, {0x20, 0x30, "193f5b9eaf79c2c3bbc370f6bae80e8d3f8e78c4cff40f4e7b5ce0423b40"}}, &(0x7f00000004c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000640)={0x1c, &(0x7f0000000540)={0x20, 0x3, 0x42, "c92b96220797118b3f0547cb6bbd0bfc43f4ccf191ac935f8a49ce04dc1b85e07e849528cc480b09ef9c04aa642b15f1f2b2676ba8f41e74d07a66f5b997490d1f92"}, &(0x7f00000005c0)={0x0, 0xa, 0x1}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x3}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000180)={0x14, &(0x7f0000000080)={0x40, 0x9, 0xe6, {0xe6, 0x9, "b6cbc65346192543308694659dd940907947947fc62333cc3a92831856cfe41b02e175a7a062659c36ad7bb1d2d1d81e390da6f9d9428bca46224ff9335b67b3686dd99de4db5107b98622bdd98f5825bf831009138be7918f41ef98d99b4fca86086df527d1391de3247f9c79edbef0bf2f597695f070b99133408b44fdd88e69334b6c39fb28f0c68ea66a5e43d07d2f89fe63382bf3442a10dd1c9c8457cda2df77dbe1a95466cfffdf5bb1404102e5740a6aa3960f4b1676201ba3e49cc8e95659df50b3e83aaf74466cdb8ff195e0d755d14295ea744db4f1f7265f3261c8fc95f9"}}, &(0x7f0000000000)={0x0, 0x3, 0x2b, @string={0x2b, 0x3, "331148a9db07ee62a9b139d6062bde9b2f18a16a3e8ca57e1386d370edbdbe604228d7138c3bd17ead"}}}, &(0x7f00000003c0)={0x34, &(0x7f00000001c0)={0x20, 0x15, 0x94, "e696b9abab09a90f1182b93d5aa3e812f7f53a4d49c87c86b0750a51cf5e00fe1ee6cd3dd8e1efec006e4e7c17a09d88e13f16b003d4cf26cbbb6a83b591c453cfd1180c9f6c126e1438f14efec12707db610c784ade530b06b95ac0ab32ef4138661eab0550123c76623b87eae34e2cd52348f746a5d34309d849773eebccbbf53eb7dfd57a6c01053417f65dc9d882dcd8dd0a"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000300)={0xc0, 0xa1, 0x4, 0x2}, &(0x7f0000000340)={0x40, 0xa0, 0x4, 0x1}, &(0x7f0000000380)={0xc0, 0xa2, 0x2f, "9d2efabcbe6e584790ebc04086394832d7cd06256b51c9509970ebbc8d98aa9eb74574473781f97b371e06bdf8eccf"}}) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.667664599s ago: executing program 0 (id=618): bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e21, 0x3, 'sed\x00', 0x1, 0x10000004, 0x8}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/uevent_seqnum', 0x0, 0x0) fsetxattr$security_capability(r3, &(0x7f0000000000), 0x0, 0x2, 0x1) (async) fsetxattr$security_capability(r3, &(0x7f0000000000), 0x0, 0x2, 0x1) syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') (async) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') pread64(r4, &(0x7f00000001c0)=""/144, 0x90, 0x100000001) pread64(r4, &(0x7f0000000000)=""/16, 0x10, 0x8) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'dummy0\x00', 0x10}) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'dummy0\x00', 0x10}) fgetxattr(r3, &(0x7f0000000000)=ANY=[], 0x0, 0x8) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) unshare(0x400) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (async) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 4.438026426s ago: executing program 0 (id=619): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x400002}, @IFLA_IPTUN_PMTUDISC={0x5, 0xa, 0x1}]}}}, @IFLA_OPERSTATE={0x5, 0x10, 0x6}]}, 0x4c}}, 0x1020) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080), 0x13f}}, 0x20) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 4.304229105s ago: executing program 2 (id=620): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) syz_open_procfs(0x0, 0x0) socket(0xa, 0x1, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002480)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001000010010ffc300ffdbdf2500000000", @ANYRES32=r5, @ANYBLOB="dc02000011000400140012800b0001006d616373656300e5590002800a000100000000ebffffff00f4b96cf96c4dd2f4018866a56d5a9d257fc7d5b1839cab9e532241fdd4c2169a979499eaa1609d0abb87a119fce6f64b6bb1ee006ffcf9c8975bf137c682595114ce151474636593c6"], 0x40}}, 0x800) 4.032375846s ago: executing program 0 (id=622): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f00006dbffc)=0x6, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000e80)='c', 0x1}], 0x1, 0x0, 0x0, 0x4090}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = io_uring_setup(0x1fb8, &(0x7f0000000540)={0x0, 0x1ae0, 0x400, 0x0, 0xea}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000000)={0x285002400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x46) io_uring_register$IORING_REGISTER_FILES(r3, 0x1e, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[], 0x7c}}, 0x80) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'nicvf0\x00', 0x0}) io_uring_setup(0x74a3, &(0x7f00000002c0)={0x0, 0x7797, 0x8000, 0x2, 0x268}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, 0x0, 0x1, 0x0, 0x8000000, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4810}, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000140)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x10) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000540)={r7, 0x1}, 0x8) r8 = syz_open_pts(0xffffffffffffffff, 0x101800) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r8, 0x8010671f, &(0x7f0000000280)={&(0x7f00000001c0)=""/172, 0xac}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x1000, 0x455965fb809f3fb7}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_NEIGH_SUPPRESS={0x5, 0x20, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20048800}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r9, &(0x7f00000000c0)=[{&(0x7f0000000000)='w', 0x1}], 0x1, 0x1) 3.935369607s ago: executing program 1 (id=623): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0xab, @loopback, 0x10001}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @loopback, 0x23}, 0x1c) fcntl$setstatus(r0, 0x4, 0x42800) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet(0x2b, 0x801, 0x0) listen(r2, 0x0) splice(r2, 0x0, r1, 0x0, 0x8ec0, 0x0) r3 = dup(r0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r4 = ioctl$TIOCGPTPEER(r3, 0x5441, 0x3) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2080) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r5, 0xc0605345, &(0x7f00000000c0)={0x0, 0x1, {0x1, 0x0, 0xc00000, 0x1, 0xe5}, 0xffff}) fcntl$dupfd(r4, 0x0, r0) syz_io_uring_submit(0x0, 0x0, 0x0) r6 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0xffffffff, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r6, 0x47f6, 0x0, 0x2, 0x0, 0x300) socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r9, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r9, &(0x7f0000002080)={0x2, 0x0, {&(0x7f0000001f80)=""/152, 0x98, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r9, &(0x7f00000003c0)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f00000000c0)={0x7, 0xffffffffffffffa0, 0xfa00, {0xffffffffffffffff, 0x10c}}, 0xfffffd88) 3.644600936s ago: executing program 3 (id=624): socket$l2tp6(0xa, 0x2, 0x73) userfaultfd(0x80001) r0 = socket$inet(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r1, &(0x7f0000000a80)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @loopback, 0x200, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029000000", @ANYRES16=r0], 0x108}}], 0x1, 0xc040) 3.584211103s ago: executing program 1 (id=625): socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$loop(0x0, 0x4, 0xca042) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000700)={'#! ', './file1/../file0', [{0x20, 'cgroQ\xedB\x9f\xc6\vQ\xf8~up.23\x06\xc6\x8bSG\xfbstat\x00\x88\xd8K\x91\x17\xb3s*h\xb6\x95k_\xc6\xca\xc2\x89\x89\xf8\x83\xe4w\x956\xf1\xce\xdcX\xf5\x03\x1a\x84\xdaj\xf8\v\x00#g\xad\x8d;xu\x16W_!m\xd0I\xe1\x98?3lA\x82\xa1. K\xa6\x9c\xcc\x02:k\x9d\xd4\x14\xb1\xdfK\xf3\x9e$\xe4\x04\x91\xc2\xf6\xc5%+r*zt\"c\x03N%E\xee\x9c9\xfe\xa5\xeb\xda'}, {0x20, 'EY\x86\x97\x01\xa3\xa6\b\x008/\xea\xf9W\x11\xbd\x0e\xe6\xb8\x8d\x03\xca\xf0\x881\xe8 Pj4\xe9\x021\xe8\x88\x1a\x13C\xf6\xb1\xc2\x7f\x04\xc5*`b3\xe8%5\xeexZ\bii\v\xea\t\xfd\xbc\xc2\xbf?gpv5\xab\xd1W\xf0\x92\x86\x86\x05\x00\x00\x00\xaa\xb1.n\xbf\xc8\xd1\xa5\r\xc7\x04O\xde\xd3w\xe1\xdd\x11g3\x15}\xe0\xc5V\xc3\x97J\x10\x17\xd9\x1c\xf9\xfc:>\x0eN\x81*\x15\x14\xfe\xec\x1d@~\x0f9\xce\xb0\xa5\xe3\x12\x04\xef\x12\xd2J$)7/R8\x0eS\xa7\x14\xfdz\x80g\xd5\x9d\x8e{\xeb\xc9\x19\xf4\xf3k\v\xd0\xeaP\xd8p\xf4\n\xe0\x81\x9c\x9a\xd4o\xc2\xb3\xbc\xd2\x8d3\x87\f\xe1C\xb6\x8ct\x97\xeb\xe9\\\x9c\xb8bs#\xf7*\x1c\xb4g\x9d\xaa,\x0e\a\x00\x00\x00\x00\x00\x00\x00\a\xdbt\xb3\x84\x98\x87$\xbc\xf8\x91\x06D\xa6\xc0\x90?J\xec@\xa3\xfd\x193\xe7\x01d\xd4\xdfP~\xa1}\x83\x12~>\x89\xcd\xf7\x9d\xbfgV\x02\xb0\x88\x9a\x17\xf2\xb2\xa5z4\xe3&Zc\n\xf4\x19U\xeb\a\xe2W\xeeU\xc6\x06\xeb\n\x045\xe7\x94Ho\xb1\x91+9\xb8=\xe2b\xc0+\xfc\xd1oz\xdd\xbdDHh\xf8\x04m\a\r$\x8f\x93\xfdw\xb4\xc5&CF$\xeb\x91\xad\x1b-\r\xbe2f\xd38R\\?O;\x01\xac\xb3\xa8\xdc\xf5\x9f]\xc2O\xda]=\r\xff8\x99\xa1\xbd\x85#\x88\xb7C\x7f\xf0\xb8f\x90>P>=\xedBQO\xeb\xbd\xa8%a\xddX\xaa\xfb1\xfc\xb9\xbb\xa2\t\x90xao\x9d\x1d.\x82g\x9b\x13\b\x84\x1d\xba?\xb7\x0elp1\x9b\xac\x8c\xaex\x7f\x12\xd6\xf1C%\xec<\xec\xeblp\xd9\x9dt\x97\xe2|8\x9aVE\xa7\xdc\xdf\xe3L\xd4N\xce\x7fbb$$,48\x12\xa0w\x8c\x90x\xddjt\x1b\x93O\xdc\x12\f\xf0\x99\xb10\xc1\xecW\xe2/\x1e\x1d\xc2\x8a\x90d\xb6C-\xdb<\x86\xe5\xd8\xfa\x9f\xd5>\x13\xf0\xb5\xa1Y\x90\x01\xbd\xbcC#\x00'/536}]}, 0x2b1) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000480)={'tunl0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x0, 0x700, 0x1, 0x9, {{0x5, 0x4, 0x0, 0x9, 0x14, 0x66, 0x0, 0x8, 0x29, 0x0, @private=0xa010100, @empty}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wg2\x00'}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'dummy0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000008, 0x12, r4, 0x100000000) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x6, 0x8, 0xfffffffe, 0xd99d}}]}]}}}]}, 0x70}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) socket$nl_generic(0x10, 0x3, 0x10) 3.525637373s ago: executing program 3 (id=626): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x765142, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0xbdd, &(0x7f0000000640)={0x0, 0x6f34, 0x400, 0x200001, 0x3a1}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000080)={0x1, 0x110003, 0xfffffffd, 0x80000005}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400", @ANYRES8=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSDEBUG(r0, 0x40047440, 0x0) 3.367326038s ago: executing program 2 (id=627): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100004b004660163209ea800102030200021e0001000000000904f92dc3002a03000000f6f65f06af0dbcc222ab75bee3146121ee58a9"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000340)={&(0x7f0000000140)=[{0x5, 0xd410, 0x0, 0x0}], 0x1}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0xfffffffffffffffe, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000340)={&(0x7f00000000c0)=[{0x7, 0x800, 0x58, &(0x7f00000001c0)="1b828900d8fe771ef36e6e7e227862c7f456a9a388fb77044b0411f49eb84aabfd7edbed2638dd16dbf3842865d04fbb4a61cfde8979a070d3f88e6cc8be6d9b4922759088fed49b40520c02272c26b8e68754f05f247887"}, {0x1, 0x1000, 0xc9, &(0x7f0000000240)="8c981ab6db6aee21e44137e6a3ec6bbd3526edecdf3ab1dafd4d97d911cb21bf845d806a89431903a2bcc111e62b998d2440c03811ce878706858195ca7fecfd5d1a071b448325e6d2b87fac3d1d46bd0ed15a1aa50e0456413fefb8a84b62d8811719501cde531b92f5b725b347ae3a09f65db0bf0fdfe88e75eadaa6521bf0fbb7ebecd43661224d66f007ace424a84c22bbf0ab91914167c8348d1b5891dd661c7d30e6d0b9ad0df1219d3a3e207998da073fcf56fbe48b2b457c0e47b6728e1b19e9ae32b0d434"}], 0x2}) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='pagemap\x00') preadv(r2, &(0x7f00000003c0)=[{&(0x7f0000000100)=""/163, 0xa3}], 0x1, 0x2000, 0x0) ioctl$I2C_SLAVE(r2, 0x703, 0x3c2) 3.301936116s ago: executing program 3 (id=628): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x2b, 0x7, 0x4004000, 0x80, 0x7, 0xfff, 0x4, 0x0, 0x0, 0x20, 0x101}}, 0x50) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mq_open(0x0, 0x42, 0x1f0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/cpu_byteorder', 0x107000, 0x20) unshare(0x22020400) r2 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f00000001c0)=0xd0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="1e00000000000000040000c29478bf433773dbf33954c700ffff010000000000", @ANYRES32=0x1, @ANYBLOB="8dcd00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000002000000030000000d00"/28], 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={0xffffffffffffffff, r3}, 0xc) 3.132552448s ago: executing program 3 (id=629): r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000000)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = getpgid(0x0) r2 = syz_pidfd_open(r1, 0x0) pidfd_send_signal(r2, 0x21, 0x0, 0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x484, 0x0, 0x84}]}) socket$pppoe(0x18, 0x1, 0x0) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) getpgid(0x0) (async) syz_pidfd_open(r1, 0x0) (async) pidfd_send_signal(r2, 0x21, 0x0, 0x4) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) (async) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x484, 0x0, 0x84}]}) (async) 3.079790395s ago: executing program 0 (id=630): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x8081) r1 = socket(0xa, 0x3, 0xff) close(0x3) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) close(r2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32}, 0x94) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x67) io_setup(0x3, &(0x7f0000000000)=0x0) r5 = eventfd(0xffff1a80) r6 = eventfd(0x3) r7 = syz_open_procfs$pagemap(0x0, &(0x7f0000000380)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000001c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000430109029200030172e5000904000000010100000a24010000000201020c0d240700000500006e626805000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r9, @ANYBLOB="05", @ANYRES32=r8, @ANYRES16=r9], 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000480)={{0x1, 0x1, 0x18, r3, {0xb0000000, 0x1ffc00}}, './file0\x00'}) io_submit(r4, 0x4, &(0x7f0000000500)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0xb0, r2, &(0x7f0000000140)="1685c1e1d715067917d8d2cc7b64942a1085a665f234c34a09cbae5fa340d992f1ddd7ce1eb1859bc8ab06045a95ff072c0e11cb241f83f514777b836dd0706c2ba43ef4ff443b411b40d8fdd60709a7c72bd556fbdab3d817a903e6c30133b38dee303e8a7e9c2637d8281ebf4eb90ee113dbef57ea1f34a5622b7f7e3b95e10b0dbc6e8b3faab72e54bfbd594668f4a093ad65c644c349eb51135e41dbf8ffe7685fc5a0c12a14778266058da3e1c3ba386ddefc9a5326fa4a85c0b091e2483c359a9f19edd8a7d5f6a4568876d54eed879fda141d089eabe7ddfd8526f245248a93db8bbf5771", 0xe8, 0x7, 0x0, 0x3, r5}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x1, r1, &(0x7f0000000240)="500e5b5c544525883a8d524180c123fa28ace276f1e8106db090b285f30d6671bbf9eeee61a238dd0f8873e9b352e1e28f4dcd6a2067856d5830c6d4b19e7cea684768c7fb2a7421bc0c69ecbb4e00eaf7ccc0a73427e2718cf206ba0d6652e8f8b2a7bc14b70738b6e7bdec1b2fe83c96d9769c96891810efde41276440d17175a3b006af50953f60a170056a7259315ad3f39cb973e601e1f9a8f96156d1b9600d28dc53f2df2fbef6bf9bb9a0a8b07f3e00b3cd67a48255e57fedc3523e82857a3a", 0xc3, 0xfffffffffffffffe, 0x0, 0x2, r6}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x7, r7, &(0x7f00000003c0)="df71ae3971661ee132916e47bf38bd1ffe7bc4157e548209d5e81c60a67694d90cf4", 0x22, 0x8, 0x0, 0x1, r9}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0xd, 0x4, r0, &(0x7f0000000440)="730230f46637196a224044dc00c50c85578bb3c68f33ae58c47062b79aceaa183cb4fd6fa87f83776ae0bd3eb41a15f6061ad2e12ac12869", 0x38, 0x80000000, 0x0, 0x1, r10}]) listen(r3, 0x0) r11 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r11, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) sendmmsg$inet6(r1, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)='^', 0x1}], 0x1}}], 0x1, 0x4046040) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000540), 0x400800) prctl$PR_SET_MM_MAP(0x41, 0x3, 0x0, 0x0) mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc0106442, 0x0) 2.913179627s ago: executing program 3 (id=631): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'macvtap0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4040040) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000}) read$FUSE(r6, &(0x7f00000025c0)={0x2020}, 0x2020) preadv(r6, &(0x7f00000003c0), 0x0, 0x80000000, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000200)=r9, 0x4) sendmsg$nl_xfrm(r7, &(0x7f0000005880)={0x0, 0x0, &(0x7f0000005840)={&(0x7f0000001c80)=ANY=[@ANYBLOB="34000000120001"], 0x34}, 0x1, 0x0, 0x0, 0x1090}, 0x40080) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x2, 0x0, 0x300) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@gettfilter={0x24, 0x2e, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, r11}}, 0x24}}, 0x0) 2.81341826s ago: executing program 1 (id=632): r0 = socket$kcm(0x10, 0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x40001ba, 0x4040) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x400, 0x0, 0x3, 0xfa11, 0x7ff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = socket$tipc(0x1e, 0x5, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x90000000, {0x30, 0x3, 0x8, 0x6, 0x5}}) bind$tipc(r3, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff0200000000000000000000000000010000000033"], 0x124}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x2c8, 0x98, 0x168, 0x98, 0x98, 0x360, 0x360, 0x360, 0x360, 0x360, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'veth1_vlan\x00', {}, {0xff}, 0x5c, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x81, 0x9}}}, {{@ip={@private=0xa010100, @local, 0xff000000, 0x0, 'vcan0\x00', 'pim6reg1\x00', {}, {0xff}, 0x6}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x6, 0x3]}, {0x0, [0x5, 0x0, 0x0, 0x2, 0x4, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x0, 0x3}}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) r6 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_current(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB='permprofile && \r'], 0xff) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r8, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x480, 0x0, 0x7}]}) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5c00000014006b", 0x7}, {&(0x7f00000017c0)="00000000ffffffff1f01a0c9a1171aa56a7f9138a6c073e99f8f2ffed6bd642c1238663e9e5189a46cb56c776afa8ec3d4d4d9c0648fc18bad3a6b5656235d60cb5af5c5a69e10ed9fd4ea", 0x4b}, {&(0x7f0000001840)="9a9245a259250adbc6e2", 0xa}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.956229662s ago: executing program 0 (id=633): r0 = socket$kcm(0x10, 0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x400, 0x0, 0x3, 0xfa11, 0x7ff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = socket$tipc(0x1e, 0x5, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000040)={0x90000000, {0x30, 0x3, 0x8, 0x6, 0x5}}) bind$tipc(r3, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff0200000000000000000000000000010000000033"], 0x124}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x2c8, 0x98, 0x168, 0x98, 0x98, 0x360, 0x360, 0x360, 0x360, 0x360, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'veth1_vlan\x00', {}, {0xff}, 0x5c, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x81, 0x9}}}, {{@ip={@private=0xa010100, @local, 0xff000000, 0x0, 'vcan0\x00', 'pim6reg1\x00', {}, {0xff}, 0x6}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x6, 0x3]}, {0x0, [0x5, 0x0, 0x0, 0x2, 0x4, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x0, 0x3}}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) r6 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_current(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB='permprofile && \r'], 0xff) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r8, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x480, 0x0, 0x7}]}) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5c00000014006b", 0x7}, {&(0x7f00000017c0)="00000000ffffffff1f01a0c9a1171aa56a7f9138a6c073e99f8f2ffed6bd642c1238663e9e5189a46cb56c776afa8ec3d4d4d9c0648fc18bad3a6b5656235d60cb5af5c5a69e10ed9fd4ea", 0x4b}, {&(0x7f0000001840)="9a9245a259250adbc6e2", 0xa}], 0x3, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.799737352s ago: executing program 4 (id=634): sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000300)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="310300000000000000000800000008000300", @ANYRES32=r2, @ANYBLOB="acecce1e4f069077c4ed5fe0e7b5b6edf7bd6076a3eacf9448ba4c5207b595f8d07cd33311b9aba915a4a448792702d974c39346c9eb7a67bcaee771a7b51fb1f3bcefe839e822f941b0bba5d7194a218a56080185065b1bd73ef6eec69c5d4a5b5fc0b6"], 0x1c}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) close(r4) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$can_j1939(r6, 0x0, 0x10000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 1.580511489s ago: executing program 4 (id=635): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000007000000324908007f"], 0x50) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000000)=0x573b, 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x100000, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x54, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0x1}, @IFLA_BR_STP_STATE={0x8}, @IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_PRIORITY={0x6, 0x6, 0x6}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c824}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x30}}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x5b30}], 0x30, 0x40}], 0x2, 0x40840) openat$nvram(0xffffffffffffff9c, 0x0, 0x1, 0x0) 1.519667211s ago: executing program 1 (id=636): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x4042, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x10c4, 0x200, 0x0, 0x180000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_FSYNC={0x3, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, 0x3, 0x1}) r5 = socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8916, &(0x7f0000000040)={'veth1_macvtap\x00', @random="0200ac7f7f00"}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = dup(r6) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x111000, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x18, 0x68, 0x1, 0x2, 0x7ffffffc}, 0x18}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xff, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x2008000, &(0x7f0000000400)={{'fd', 0x3d, r11}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}, {@allow_other}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x4}}, {@max_read={'max_read', 0x3d, 0x2}}, {@allow_other}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x600}}]}}) 1.519186877s ago: executing program 4 (id=637): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x48, r0, 0xb97534d5fe9704cf, 0xfffffffc, 0x25dfdbff, {{}, {@void, @val={0x0, 0x99, {0x0, 0x39}}}}, [@NL80211_ATTR_STA_VLAN={0x0, 0x14, r2}, @NL80211_ATTR_MAC={0xffffffba}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x65d}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x4, 0xac, "16c202964dedec009cd1655b2f50c581196c6e79b96b381a01e3"}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x0, 0xbd, [0x4ea2, 0x8, 0xa4, 0x0, 0x9, 0x0, 0x2]}, @NL80211_ATTR_MESH_PEER_AID={0x0, 0xed, 0x293}]}, 0x48}, 0x1, 0x0, 0x0, 0xd79e83d06faff0cc}, 0x20048884) socket$kcm(0x29, 0x2, 0x0) 1.245337205s ago: executing program 4 (id=638): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40040, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000040)=@v={0x93, 0x0, 0x80, 0x16, @MIDI_NOTEON=@special, 0xee, 0x8}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x336) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000000)={0x4, r2, 0x80000}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000050000001800218014000a007379665f74756e00000000000000000014000344ebdaec11ad54861904328457667768b5b9770008000200"], 0x40}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) syz_emit_ethernet(0xf87, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd606410a60f51000000000000000000000000ffff7f000001fe8000000000000000000000000000aa8400000000000000223427d5c9a46b9fa14172170a013589317d2af31ba55431762f462a5abc3f46494ee91bfca594d52f8c3785143e92da5d2d81edc09f68f122fbf741257bf1319408347a17c89212dfe27a0fc65362487e5afe673f0954f60d9d08b61276ce0b3aa520b5f30a9f52c4aa53fc003f8570383ca63530d93b78a7875338b3d7645ef2c24ab05db63cfdcde7b3cac2248c9d1c73d0d4382b3f520ad6e9be698eaa9bf5b939ce09919c9485c4725690ee2483315829a196f85a5ae552ebe19a2d6768ce2a6bf60fbb53104c7919b7cf28fa555fc9460df11e72eddebb2fc4eb6f83b16e0d65307e4210dfc209f0c68df65b57f420fd215546b798af6b6ab7bfb2fe6bd6142f877852717370b1ca39d199c149c3ead97c4e16229ce4c08a111a0fc64651c21e9174dd72442a9ae2a42d9433c7b54c8dd4b59203f9a2e227e9b043eb430e606cf98f3428ac8511948dd553bc0728c0626fbda71bd2a1d734d605e27bdb0be93b7b91284689e31fccb70c15f2c39da9011c84d36fe4b4b36ff26e45a34685fc638dbdaa068a3d3d4f5d44b74afc0fc7956e5fcc3fe405ac6d292d1d90f257f18fe14a3192d28ed369956aa2f91f9fee773cf7fb5d90705347eeadc1af86de78a498fa1a20e5b3f481a0595769654d969299506d8ffbc172a7fb9453a8a3787e80b167936863f2cc16c1d03481bd40e1abcf87a292559771572136932bf30e48174012a1d4d5f138f93140af2ceb9c821c7966ea7592d762975b5b33ef141b6b91eb388c91b924945c3231d0f299adb5a36e0c95a17872e7ebf0bc0e33baf5c46f9e2087b77bad0794d519ce7bc8674a70f3545d020454ded22f164185df3b4f952b132947b75333993fd73a6bac5836dd5720e559bcb82a4926734c5c3b1287c5fec219a99f71eb398430001f007306e9232c269c2886357f75d935e8de054341ac36f1df1fc77fbc347d90660f4d5658cfeb9e289f70968a7c0b38ae34c4bfa46b47964e223ac34f472e3231e8c285add5713592c76c062c3477beb55b279846f04f8d6a5ce2743c6a2020f0c5164953b8dca7e57239dc8a7f507bcf77767ab0b4602437171a09c8e80f5a165c4c37eaae386cfcb927dd1a935fa717fa1608790b34bafbc20cf11a678455894ede62788309ab7a7075535847a2b48260a613e521b01d75648263ad78e6176528dbf3e6c4e4d72066e617be5387183a51dd97d2e846c5d173b51e17a4c8d78a49c914cbe44236c52c78de45b44f9d80bc6f77c75135922a84579bce77baa71311889f5b7b90c5124b8298d5e9c81c442d60df00795854d3213a1ac254c8963c109f68b3ff5451c381f6fb56c116f86b71f988d1e9f732280cbf3d4e9791fefc4bdec5dc293fb77b02d5aab6bd8cd179b7e425126b7f78c0d004bc6470ecc2bbc422bd06a6bd8f717009509e6a88b01347b7a62b9dea6f7a7446a371f422499a6e66eeb6a7b0beb4a86a61f875a9bfe0f5d5f0d0e4c85852afaea97d74ebc80d6491a8a1c998c4b5bc34b3edaeba2df902cd5e14e016720e6c3c8b15287b2471c34251e26dc442720cd5d984e30b110b7370f233f865b9ac129fdf49ff02b303d7d4f91039d3bb58a9d64d7a72d8b8eba6b45a000370d4f0e9c0d411768441372e7112e5d4e7d70a9d6b428b8b85ee6209d6f73e7b024740c052166deeb843e4ab78d1d354d75a5827ff0d49d8964e75785f3594c7299c0917b48f3b2efb81a4c3a7d6e0f1cf50efe0360963c2e3ee390ed2a4c39f42e856eced0f2ee7beacd2ecbece493e911ca0460584323ea6d4a0c00864693c979cae38f0c5841bfaeebf609d1075163c120fea0bd0207d2dd07e5e2e0a5afe3efee0ee6bb9a926a8dba7a27a82c5421a5b20bfb5dbdef532a12435fcd899f15603209831711e0dcfaaf2104b2016f087fce44848c70b65a34b9be83df2064391fc5a8d169dc1943d226e57ab5ba06c656273d4efba73a8a61aae19df4d2445f3ce7e649af1b4ffc86106c9092ddd0aafeb45653d181cb32b06a1dd41573495f15c3b8c0019ba72a2eb163dfcbdbb235322ae27d7116af506f295c2424ab9191aa8ce0e4617b212af21983f8d2b19d7fdeec881f6fa448acc7c3e133b6f281583fad4467c05801e69f6ffc1ae2e1f54655534d884c2f8f60303da33ccbe47a293643edb61c7d9fad4e3e54028bc64be8e5b1da53446869b136660b8e96ff96c48641ece275967b27b291c5c240b3399b5b901b699227735f821938bc88ded45bada2b257b1a4bcab7ed6647f2027e5680c87329e9cfdba6bde2f2a9b676be016001702bebbabb2eae3eba01d6f49ab70245a4c5ef0e136b531e1843487b3f69c5b811217d6d2f5e71b47f40c28117bd09a88bb21887a06e2cc164d4281d0df47cbd5781f1524098d89ccae32f24c5f9d86469106685fdc683ad5e873030b621dc00354e0621106da90aca69bb53848dd57251a45bc1898aca9bc84c9a8d2f8aabeed888560771c8cb03aab02620430fec8e9740880790060ccbffd5b8edaa219ca61587eff1b1b03ae8af53059f121efdec8b3ee8aba06f494a5b4575bc848d5a9773d2346f75811cb82a078fc960c9bd374555d78b1b4ba0b438ef00e8aa75810ca5efc5c70936e2cb0e515912cb7f625a2130a9ad58f29e58ae6eac5c3f15f22f0163ee6dead6947c4390b92c8dfb146fec7bfc0b37e8ff2c9de90c30f2d8b5e334107f9835bc47fbc193c60ebd5ac4e677c7fd5b6261ff96e97c185c726ec02941bc2336946f181fd2aff43f0e95f06105a049fcb8e4e3738407d6356856f533f17fae281a3be9f2050ae3d19d1b8350d424087ac9b7875824a9b7e098775b53d6ec960fc052ecd165d17a7897de75f15316a072bb9ccf6ce1ec085bb5356c271b985a437a32f12308fc927410fd444bcded9859e7b8a3cfaaf29ebfb92cc7cbfad2559bbe4f90e189e8708e93827b221869cc78fa41fd5bcb6577b7dfe4c3927dc25a58aa84419f76e71d1f3c10cbb5e52ab2bebe0d39bdffda0fa1b55fe3a03683f882a82dd58498d62b101acd710fd436aa7409fe3cf5352dffb399d560323e14d564bdb3121b89c1f43fc9a892b799cd32f7ce2ededb868920b4547735ef0bf3e148251a4f65dddb7f96b2f33734522a8cffdc51520ac98926b3406e96618cf15a042a67239e755afc70ec6a9c99f8e08ec2946e5901364d85223a63d49572519137d93b6b0798e72acf9da120e706ee73367dec1450a68def886c149bcd734469e10b933899501011cd548e99d638821d5709fde050ab382d4896ecfd7999d40ea9c690c26d396545224c8f9e19705593df2688eb592e2476a0193f7054ab6f703d41c545a80bf285bbc7cc735bd306c9ea5eb64f40752fd4c741d9b6e03cd41b636ef8f5e810047a21c0b24c6fde1f2e98f2f27730c90d93af9e7564e4e209a61ff626b666fcc4f75f7d560da688169ff0af5e674a0b89a99fb54bb438a65f953c2db0faec2ce09cec33b6d25620b5a0393ac473fed48a38beaca5223997419876d571ce969b83b5b3ae54de83dd89fd92ed2a93c087828bef49a24ed1a97778c47fdc691a94fd5b437dfe494b5c6fadf499d9d15583b0439d3d5ecb61a32a2508a6960be6009accfd1d5d75a16dbc4121c6ef07bda12646792449c18a56e7aa3893f3f0e55a8e09ca64193dd29ea24ed8614ee8e717f046dd99a8e3750506655331125a502aa89c0d7e8e30c36a4be22cd911322695144d3bf034f38ef32d49431d50da583d08a3e4c5862483cdd52d031b12c89fdaafc3334e877e464134baece883d301193a9c27311a987d4dae82a061f48182cc747cd64441e88b68e26e4975f0fdde3129a9e6af80009962581d5349676df9c73b81514b175709d9193749660f480bd4009b528c1db4f76f42b6a175126603c39a374e890f871c97b2eebb4500451d827cc15497dc5ae89edc6f47f25db7efa4b4b2afbbb2ee543e3db8d20fe93faf300247f59075921e8b2f2a025af8a1d46f274e0c6cb4be0293c7c16c88e98d7d189e9733e4c0e3b96be4aa3fa6ecf42732e0b1432d38aeaf2330d92713cd5580ce42bfe47fb98fea64783de23f456300dd193008211a5ba408d32dedbf12aa8237a6e1a2c9890a2c1011855241fea186906a5139d1c300be57dc7ff493de80010520d10fc3eda0ee9cd413e075d3dc02258fdab567a16e43edbeecc366a69d8d75512f43a2b79cbb9132cdcd00c531730d05f1eabf66613d6e7ebb8c4c3f4f7efd415d41049786352808b22a3bde40121968af39c8f00296001662adc72b7963c8bafab4a496b50f3237a29d19ad4a51a62b1c77a04c14004734189cf7ec49e3d041a1e5658d080f09df77f39782e7133968c1f39ab3ae2a5f24a60073288f3c5825dafd614a379b8b905aaf961caa14ffa38de0d632918d31e4a9291b0f0789248e232e4276840a1ed0257300e522d83111dffd424b1b33148981e3794b2b649ba9174e6697bcc96049f4f3dcc7cf4ca97e2006ec8a146014bb49184632e4fb159a34b6530e959e60a6b4e0427cc697f14cfe6bb7a662a6f5012744f3cf2307abc19c58449864d98fcfebc5d598cd32a1c38c207896468fe8da75eb1edb1d6e7cb1eab671e4e92f139c81d79f15df2a2dc075acc982dec769e2f49aad0fdf594cb590e054616e4f4582b6c4a149ae45d844903ef68d211df2a180178e178b7c7a5012ccf8a1e677586588620365e6111f5192ecfdbd97e2284128de02e08ebc13d4bb4d114faa1e6c16c51c12da2c52d68f73640ce866ce4e794b9fafdc392c91c1f824bc301b3069a02b9c86d2ffac3ed63ddee130cbc248d6a3345d3f9553db78077072d569a6633f8bdbdb1a209a8be9b6830225994f9021b57ddd6a44e8ea40b205c6cf437f45bffaef053a5916dcc6de62ee02bdb8ce3acec8ad97fc95dab1307d254790c71f32e4678957cf0121dccabe73a03c6cacbcbdaad8801b04d9836555a982c357a06e2db7e9bf62aed8cdebbb7a71a2410b929015b61f16e54bffd038996a717b9c7cc3696d8a1205e8266bf782c3a45b0e31461d6a3ed62396088833f69248b24fbf6f81dcc08b98826c3bd2325ade54f614f2d4a153e3e3527d93978483f2bfeada6b64bc43f2a725c30e843d13e6ab34cfc38d488b3ef50cd04318fac1f89905f017644cfa2de058ad399871d1316264813c2289d0b6cfeddfbca36ce93fd4a1bfc93bb74453cfbb9c6ca22320ffc9cb0a3fff046a5678c066e617cd3ac024dfead04b99877f448b78208938585c7563efe815ff0cc47da5fff521d9730ddc89f4aeceadd06f2ea6b9ae72c9407aa550a0155db3b4bc6aaa382a30552f699cb6a1af9972a8ccc483f98952dfbde3d712ea8673eacdbb77490d833fc90f0f02e7c073d2917db70831496a88defc10667dc4c1b7399191bdc7857eb090e79c332bf9f71bb5377178e6232800c93d22318dc5ab8d5dfa2f074a6c23acb61c89f2f078ec91e9817e11a4c8295c19634b5ca2df74"], 0x0) r6 = socket(0x27, 0x4, 0x3ff) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r7, 0x3b85, &(0x7f0000000100)={0x28, 0x6, r8, 0x0, &(0x7f0000000000)='\x00', 0x1, 0x7fff800000000002}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r7, 0x3b87, &(0x7f0000000180)={0x18, 0x1, 0x0, 0x0, r8}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x401}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000080)={r9, 0x0, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000040)={r9, 0x5}, &(0x7f0000000080)=0x8) read$FUSE(r3, &(0x7f00000022c0)={0x2020}, 0x2020) 847.40343ms ago: executing program 3 (id=639): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1000000000, 0x4, &(0x7f0000006680)) truncate(&(0x7f0000000040)='./file0\x00', 0x3) bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x10}, 0x18) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902120001000000000904"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000001480)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'sh\x00', 0x23, 0x7fffffff, 0x5}, {@rand_addr=0x64010101, 0x4e23, 0x10000, 0x7f, 0x0, 0x12d58}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (fail_nth: 2) 704.277634ms ago: executing program 4 (id=640): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYRESOCT], 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xf0b, 0x4003, 0x25dfdbfc, {0x60, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0x2, 0xffff}, {0x4, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0x4000885) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x2, 0xe, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x7, 0xda, 0x0, 0x0, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x14}}}]}, 0x28}}, 0x0) syz_fuse_handle_req(r0, &(0x7f000000a100)="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", 0x2000, &(0x7f0000000200)={&(0x7f0000000380)={0x50, 0x0, 0x100000002, {0x7, 0x28, 0x7a, 0x2143040, 0x4, 0x7, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x11, 0x65, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r6, @ANYBLOB="080003"], 0x44}}, 0x0) r7 = socket$kcm(0xa, 0x2, 0x73) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_sys\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x3e, &(0x7f00000002c0)=r8, 0x4) write$FUSE_NOTIFY_STORE(r8, &(0x7f00000002c0)={0x2e, 0x4, 0x0, {0x4, 0x1, 0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2e) syz_fuse_handle_req(r0, &(0x7f0000004080)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x78, 0x0, 0x7, {0x9, 0x1, 0x0, {0x3, 0x1, 0x1, 0x400000000f91c, 0x6dc6, 0x7659, 0x170a, 0x7, 0xe000, 0x4000, 0xcd35, 0x0, 0xffffffffffffffff, 0x100a, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chmod(&(0x7f0000000040)='./file0\x00', 0x2c) r9 = socket$l2tp(0x2, 0x2, 0x73) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) accept4$inet(r9, &(0x7f00000000c0)={0x2, 0x0, @remote}, &(0x7f0000000100)=0x10, 0x0) 218.521688ms ago: executing program 1 (id=641): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_setup(0x3fe, &(0x7f00000001c0)=0x0) io_getevents(r1, 0x1, 0x1, &(0x7f0000004600)=[{}], 0x0) r2 = mq_open(&(0x7f0000000100)=']:^@(\x00', 0x2, 0x1af, &(0x7f0000000140)={0x7, 0x3, 0x4, 0x9}) mq_timedsend(r2, 0x0, 0x0, 0x8000000000000000, &(0x7f0000000200)) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) lgetxattr(0x0, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000240)="8ed8c80ec8d1f63b04ce9c3ac2c0d1873f49c463b3aa8684799ae1c8c5432e6b0dbfb3503482e4deee993e602be3aee7fec17f1f1e245e53a34f0fdcdce9897adc867b0d2313f973d71e71821aa6d7170c076f70b3fb22634a67e6062c653157ba6f62d2fc2e33d13b1ac9048f6e26a8f5d09ffeb9d3905a4fbdd2007c39c56f57c261effa04a86aec4c0a12b45f26a1a17404552518662c575390e88f2fdd870083f30019b2f2dd92216e103a7b594a88d380a4d56fca04fd8e45ec6c", 0xbd) (async) write(r0, &(0x7f0000000240)="8ed8c80ec8d1f63b04ce9c3ac2c0d1873f49c463b3aa8684799ae1c8c5432e6b0dbfb3503482e4deee993e602be3aee7fec17f1f1e245e53a34f0fdcdce9897adc867b0d2313f973d71e71821aa6d7170c076f70b3fb22634a67e6062c653157ba6f62d2fc2e33d13b1ac9048f6e26a8f5d09ffeb9d3905a4fbdd2007c39c56f57c261effa04a86aec4c0a12b45f26a1a17404552518662c575390e88f2fdd870083f30019b2f2dd92216e103a7b594a88d380a4d56fca04fd8e45ec6c", 0xbd) socketpair(0x26, 0x100000005, 0x0, &(0x7f0000000000)) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a300000000034000480300001800a0001006d617463680000002000028005000300000000000b000100736f636b657400000800024000000003"], 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a300000000034000480300001800a0001006d617463680000002000028005000300000000000b000100736f636b657400000800024000000003"], 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) 136.962188ms ago: executing program 1 (id=642): gettid() syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r0 = socket$inet6(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80021}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x28880) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x2000000, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) recvmmsg(r3, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000640)=""/35, 0x23}, {&(0x7f0000000680)=""/127, 0x7f}], 0x2, &(0x7f0000000740)=""/23, 0x17}, 0x3}], 0x1, 0x40012100, 0x0) unshare(0x100) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000000000002000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de", 0x7f, 0x0, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000300)="d800000018008105e00212ba0d8105040a020200020f108b067c55a1bc000900b80006990200000015000500fc038178a80015000338004002000c0901ac040000d67f6f947a7100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e970300"/203, 0xcb}], 0x1}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000f5ff20a751bd1eb1a8ce8c000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="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"], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet(0x2, 0x1, 0x100) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r7, 0x0, 0x0, 0x10) 0s ago: executing program 4 (id=643): syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x14, 0x6, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0x7, 0x0, 0x3}}}}}}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x100000, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) kernel console output (not intermixed with test programs): 000000000000 R09: 0000000000000000 [ 114.671738][ T6183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.671746][ T6183] R13: 00007f8c0f3e6038 R14: 00007f8c0f3e5fa0 R15: 00007f8c0f50fa28 [ 114.671771][ T6183] [ 115.516817][ T6186] netlink: 12 bytes leftover after parsing attributes in process `syz.2.69'. [ 115.526867][ T6186] netlink: 'syz.2.69': attribute type 13 has an invalid length. [ 115.715275][ T6186] gretap0: refused to change device tx_queue_len [ 115.726668][ T6186] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 115.923962][ T6195] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 116.064430][ T6192] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 116.072043][ T6192] IPv6: NLM_F_CREATE should be set when creating new route [ 116.267197][ T6192] netlink: 8 bytes leftover after parsing attributes in process `syz.1.71'. [ 116.277371][ T6192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.286712][ T6192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.425754][ T6203] loop4: detected capacity change from 0 to 1 [ 116.494489][ T6203] Dev loop4: unable to read RDB block 1 [ 116.512592][ T6203] loop4: unable to read partition table [ 116.520825][ T6203] loop4: partition table beyond EOD, truncated [ 116.560557][ T6203] loop_reread_partitions: partition scan of loop4 (þ被xü^>Ñà– ) failed (rc=-5) [ 116.723020][ T6203] netlink: 4 bytes leftover after parsing attributes in process `syz.0.74'. [ 116.776605][ T6206] netlink: 12 bytes leftover after parsing attributes in process `syz.0.74'. [ 118.154916][ T6222] Invalid logical block size (150994944) [ 118.380553][ T10] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 118.861236][ T10] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 118.870462][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.878461][ T10] usb 1-1: Product: syz [ 118.910607][ T10] usb 1-1: Manufacturer: syz [ 118.983788][ T10] usb 1-1: SerialNumber: syz [ 119.001195][ T10] usb 1-1: config 0 descriptor?? [ 119.249498][ T10] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 119.455161][ T10] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 119.488313][ T10] usb 1-1: USB disconnect, device number 5 [ 119.952326][ T6236] fuse: Bad value for 'fd' [ 120.237777][ T6236] ipip0: entered promiscuous mode [ 120.289712][ T6236] ipip0: entered allmulticast mode [ 121.100464][ T10] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 121.300433][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 121.314052][ T10] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 121.340401][ T10] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 121.391599][ T10] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 121.456641][ T10] usb 3-1: config 1 interface 0 has no altsetting 0 [ 121.492511][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 121.503972][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.514129][ T10] usb 3-1: Product: syz [ 121.530702][ T10] usb 3-1: Manufacturer: syz [ 121.540148][ T10] usb 3-1: SerialNumber: syz [ 121.887239][ T10] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 122.261413][ T6259] usblp0:failed reading printer status (-32) [ 122.397812][ T6266] netlink: 12 bytes leftover after parsing attributes in process `syz.1.90'. [ 122.412189][ T6266] netlink: 'syz.1.90': attribute type 13 has an invalid length. [ 122.574568][ T5925] usb 3-1: USB disconnect, device number 3 [ 122.606563][ T5925] usblp0: removed [ 122.789608][ T6266] gretap0: refused to change device tx_queue_len [ 122.897375][ T6266] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 123.221891][ T10] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 123.406966][ T10] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 123.427975][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.448622][ T10] usb 4-1: Product: syz [ 123.454495][ T10] usb 4-1: Manufacturer: syz [ 123.468822][ T10] usb 4-1: SerialNumber: syz [ 123.485028][ T6292] netlink: 'syz.4.95': attribute type 4 has an invalid length. [ 123.504931][ T10] usb 4-1: config 0 descriptor?? [ 123.722344][ T10] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 123.738717][ T6294] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 123.759263][ T6294] Cannot find add_set index 0 as target [ 123.959888][ T10] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 124.025342][ T10] usb 4-1: USB disconnect, device number 3 [ 124.883602][ T6307] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.891857][ T6307] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.120488][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 125.334849][ T10] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 125.352531][ T10] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 125.374855][ T10] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 125.400681][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 125.421947][ T10] usb 4-1: SerialNumber: syz [ 126.221089][ T30] audit: type=1326 audit(1765671644.493:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6315 comm="syz.2.102" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5c94d8f749 code=0x0 [ 126.273255][ T6307] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.371281][ T6307] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.822955][ T6318] gtp0: entered promiscuous mode [ 126.841663][ T6318] gtp0: entered allmulticast mode [ 126.863375][ T36] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.865629][ T10] usb 4-1: USB disconnect, device number 4 [ 126.924946][ T36] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.964028][ T36] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.001148][ T36] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.590491][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 127.652823][ T6344] netlink: 12 bytes leftover after parsing attributes in process `syz.4.109'. [ 127.664558][ T6344] netlink: 'syz.4.109': attribute type 13 has an invalid length. [ 127.723790][ T6344] gretap0: refused to change device tx_queue_len [ 127.734121][ T6344] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 127.750042][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 127.757599][ T10] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 127.769784][ T10] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 127.780491][ T5925] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 127.780736][ T10] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 127.805734][ T10] usb 3-1: config 1 interface 0 has no altsetting 0 [ 127.815588][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 127.825152][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.835765][ T10] usb 3-1: Product: syz [ 127.840068][ T10] usb 3-1: Manufacturer: syz [ 127.848062][ T10] usb 3-1: SerialNumber: syz [ 127.958699][ T5925] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 127.979705][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.103405][ T10] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 128.125073][ T5925] usb 4-1: Product: syz [ 128.140024][ T5925] usb 4-1: Manufacturer: syz [ 128.186219][ T5925] usb 4-1: SerialNumber: syz [ 128.212990][ T5925] usb 4-1: config 0 descriptor?? [ 128.434191][ T5925] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 128.465446][ T6335] usblp0:failed reading printer status (-32) [ 128.542144][ T43] usb 3-1: USB disconnect, device number 4 [ 128.552596][ T43] usblp0: removed [ 128.668228][ T5925] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 128.687431][ T5925] usb 4-1: USB disconnect, device number 5 [ 128.821998][ T6352] netlink: 72 bytes leftover after parsing attributes in process `syz.1.113'. [ 129.063492][ T6362] FAULT_INJECTION: forcing a failure. [ 129.063492][ T6362] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 129.080466][ T6362] CPU: 1 UID: 0 PID: 6362 Comm: syz.1.116 Tainted: G L syzkaller #0 PREEMPT(full) [ 129.080501][ T6362] Tainted: [L]=SOFTLOCKUP [ 129.080509][ T6362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 129.080521][ T6362] Call Trace: [ 129.080530][ T6362] [ 129.080539][ T6362] dump_stack_lvl+0x189/0x250 [ 129.080571][ T6362] ? __pfx____ratelimit+0x10/0x10 [ 129.080602][ T6362] ? __pfx_dump_stack_lvl+0x10/0x10 [ 129.080628][ T6362] ? __pfx__printk+0x10/0x10 [ 129.080661][ T6362] ? __might_fault+0xb0/0x130 [ 129.080706][ T6362] should_fail_ex+0x414/0x560 [ 129.080740][ T6362] _copy_from_user+0x2d/0xb0 [ 129.080763][ T6362] __sys_connect+0x123/0x440 [ 129.080796][ T6362] ? do_sys_openat2+0x15a/0x200 [ 129.080825][ T6362] ? __pfx___sys_connect+0x10/0x10 [ 129.080870][ T6362] ? __pfx_ksys_write+0x10/0x10 [ 129.080898][ T6362] __x64_sys_connect+0x7a/0x90 [ 129.080932][ T6362] do_syscall_64+0xfa/0xf80 [ 129.080965][ T6362] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.080986][ T6362] ? clear_bhb_loop+0x60/0xb0 [ 129.081013][ T6362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.081034][ T6362] RIP: 0033:0x7f2ba338f749 [ 129.081054][ T6362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.081072][ T6362] RSP: 002b:00007f2ba42a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 129.081095][ T6362] RAX: ffffffffffffffda RBX: 00007f2ba35e5fa0 RCX: 00007f2ba338f749 [ 129.081111][ T6362] RDX: 000000000000001c RSI: 0000200000000480 RDI: 0000000000000003 [ 129.081132][ T6362] RBP: 00007f2ba42a7090 R08: 0000000000000000 R09: 0000000000000000 [ 129.081146][ T6362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.081158][ T6362] R13: 00007f2ba35e6038 R14: 00007f2ba35e5fa0 R15: 00007f2ba370fa28 [ 129.081193][ T6362] [ 129.414835][ T6369] netlink: 12 bytes leftover after parsing attributes in process `syz.3.118'. [ 129.424425][ T6369] 8021q: VLANs not supported on ip_vti0 [ 129.695475][ T6373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.820996][ T6373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.092008][ T6372] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.099531][ T6372] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.320672][ T6376] netlink: 4 bytes leftover after parsing attributes in process `syz.4.120'. [ 132.157617][ T6372] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.369658][ T6372] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.050506][ T5981] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.110457][ T5981] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.119420][ T5981] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.176097][ T5981] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.306052][ T52] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 133.672147][ T5902] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 133.695651][ T6399] openvswitch: netlink: Message has 12 unknown bytes. [ 133.878374][ T5902] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 133.887783][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.935633][ T5902] usb 3-1: Product: syz [ 133.945655][ T5902] usb 3-1: Manufacturer: syz [ 133.958499][ T5902] usb 3-1: SerialNumber: syz [ 133.999824][ T5902] usb 3-1: config 0 descriptor?? [ 134.007528][ T6399] netlink: 4 bytes leftover after parsing attributes in process `syz.3.126'. [ 134.068927][ T30] audit: type=1326 audit(1765671652.663:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6403 comm="syz.0.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c0f18f749 code=0x7ffc0000 [ 134.071236][ T6404] FAULT_INJECTION: forcing a failure. [ 134.071236][ T6404] name failslab, interval 1, probability 0, space 0, times 0 [ 134.150986][ T6404] CPU: 1 UID: 0 PID: 6404 Comm: syz.0.129 Tainted: G L syzkaller #0 PREEMPT(full) [ 134.151020][ T6404] Tainted: [L]=SOFTLOCKUP [ 134.151027][ T6404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 134.151039][ T6404] Call Trace: [ 134.151048][ T6404] [ 134.151058][ T6404] dump_stack_lvl+0x189/0x250 [ 134.151090][ T6404] ? __pfx____ratelimit+0x10/0x10 [ 134.151120][ T6404] ? __pfx_dump_stack_lvl+0x10/0x10 [ 134.151147][ T6404] ? __pfx__printk+0x10/0x10 [ 134.151177][ T6404] ? vsnprintf+0x38b/0xee0 [ 134.151202][ T6404] ? __pfx_snprintf+0x10/0x10 [ 134.151234][ T6404] should_fail_ex+0x414/0x560 [ 134.151267][ T6404] should_failslab+0xa8/0x100 [ 134.151296][ T6404] __kmalloc_noprof+0xdf/0x800 [ 134.151318][ T6404] ? aa_label_asxprint+0x70/0x130 [ 134.151369][ T6404] aa_label_asxprint+0x70/0x130 [ 134.151405][ T6404] apparmor_lsmprop_to_secctx+0x9d/0x170 [ 134.151436][ T6404] audit_log_subj_ctx+0xfa/0x510 [ 134.151466][ T6404] ? __pfx_audit_log_subj_ctx+0x10/0x10 [ 134.151501][ T6404] ? apparmor_current_getlsmprop_subj+0xdd/0x180 [ 134.151528][ T6404] audit_log_task_context+0x8c/0xd0 [ 134.151556][ T6404] ? __pfx_audit_log_task_context+0x10/0x10 [ 134.151584][ T6404] ? audit_log_start+0x7f4/0xa20 [ 134.151615][ T6404] audit_log_task+0x190/0x3c0 [ 134.151633][ T6404] ? get_pid_task+0x20/0x1f0 [ 134.151662][ T6404] ? __pfx_audit_log_task+0x10/0x10 [ 134.151688][ T6404] ? __pfx___cant_migrate+0x10/0x10 [ 134.151719][ T6404] audit_seccomp+0x86/0x190 [ 134.151748][ T6404] __seccomp_filter+0xcf0/0x1e20 [ 134.151779][ T6404] ? ksys_write+0x1cb/0x250 [ 134.151801][ T6404] ? __pfx___seccomp_filter+0x10/0x10 [ 134.151823][ T6404] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 134.151857][ T6404] ? __pfx_vfs_write+0x10/0x10 [ 134.151880][ T6404] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 134.151918][ T6404] ? __fget_files+0x3a0/0x420 [ 134.151955][ T6404] ? ksys_write+0x22a/0x250 [ 134.151980][ T6404] ? __secure_computing+0xe2/0x2a0 [ 134.152007][ T6404] syscall_trace_enter+0xaa/0x160 [ 134.152035][ T6404] do_syscall_64+0xd3/0xf80 [ 134.152068][ T6404] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.152089][ T6404] ? clear_bhb_loop+0x60/0xb0 [ 134.152114][ T6404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.152133][ T6404] RIP: 0033:0x7f8c0f18f749 [ 134.152152][ T6404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.152170][ T6404] RSP: 002b:00007f8c10035038 EFLAGS: 00000246 ORIG_RAX: 00000000000001bd [ 134.152193][ T6404] RAX: ffffffffffffffda RBX: 00007f8c0f3e5fa0 RCX: 00007f8c0f18f749 [ 134.152208][ T6404] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffffffffffffffff [ 134.152222][ T6404] RBP: 00007f8c10035090 R08: 0000000000000000 R09: 0000000000000000 [ 134.152234][ T6404] R10: 0000000002000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.152246][ T6404] R13: 00007f8c0f3e6038 R14: 00007f8c0f3e5fa0 R15: 00007f8c0f50fa28 [ 134.152280][ T6404] [ 134.152569][ T6404] audit: error in audit_log_subj_ctx [ 134.464036][ T5902] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 134.485092][ T30] audit: type=1326 audit(1765671652.743:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6403 comm="syz.0.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f8c0f18f749 code=0x7ffc0000 [ 134.583588][ T30] audit: type=1326 audit(1765671652.743:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6403 comm="syz.0.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c0f18f749 code=0x7ffc0000 [ 134.707784][ T5902] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 134.790956][ T5902] usb 3-1: USB disconnect, device number 5 [ 134.802050][ T30] audit: type=1326 audit(1765671652.743:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6403 comm="syz.0.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8c0f18f749 code=0x7ffc0000 [ 134.866781][ T30] audit: type=1326 audit(1765671652.743:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6403 comm="syz.0.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8c0f18df90 code=0x7ffc0000 [ 135.020418][ T30] audit: type=1326 audit(1765671652.753:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6403 comm="syz.0.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8c0f18e1ff code=0x7ffc0000 [ 135.136618][ T30] audit: type=1326 audit(1765671652.753:10): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=6403 comm="syz.0.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=445 compat=0 ip=0x7f8c0f18f749 code=0x7ffc0000 [ 135.245390][ T30] audit: type=1326 audit(1765671653.153:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6403 comm="syz.0.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f8c0f18e15c code=0x7ffc0000 [ 135.326964][ T30] audit: type=1326 audit(1765671653.153:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6403 comm="syz.0.129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8c0f18e1ff code=0x7ffc0000 [ 135.800606][ T43] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 135.991618][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 136.000377][ T43] usb 1-1: unable to get BOS descriptor or descriptor too short [ 136.009712][ T43] usb 1-1: config 1 interface 0 has no altsetting 0 [ 136.020979][ T43] usb 1-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 136.031405][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.049488][ T43] usb 1-1: Product: syz [ 136.073464][ T43] usb 1-1: Manufacturer: syz [ 136.097290][ T43] usb 1-1: SerialNumber: syz [ 136.350521][ T43] usbhid 1-1:1.0: can't add hid device: -71 [ 136.356606][ T43] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 136.412337][ T43] usb 1-1: USB disconnect, device number 6 [ 136.770131][ T6419] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.778017][ T6419] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.592276][ T6419] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.820581][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 137.828868][ T6419] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.169828][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.180451][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.677357][ T6441] openvswitch: netlink: nsh attribute has 65288 unknown bytes. [ 138.708884][ T6441] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.744344][ T6441] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 138.751649][ T6441] IPv6: NLM_F_CREATE should be set when creating new route [ 138.801212][ T6321] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 138.830091][ T3440] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.840446][ T6439] veth1_to_bond: entered allmulticast mode [ 138.846736][ T3440] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.857665][ T3440] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.868203][ T3440] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.960462][ T6321] usb 3-1: Using ep0 maxpacket: 16 [ 138.967486][ T6321] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 138.977949][ T6321] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 138.991987][ T6321] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 139.010651][ T6321] usb 3-1: config 1 interface 0 has no altsetting 0 [ 139.042502][ T6321] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 139.053153][ T6446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.061799][ T6321] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.070305][ T6446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.078336][ T6321] usb 3-1: Product: syz [ 139.088535][ T6321] usb 3-1: Manufacturer: syz [ 139.093218][ T6321] usb 3-1: SerialNumber: syz [ 139.110716][ T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 139.167649][ T6448] netlink: 'syz.3.143': attribute type 1 has an invalid length. [ 139.214135][ T6448] 8021q: adding VLAN 0 to HW filter on device bond1 [ 139.236256][ T6450] bond1: (slave gretap1): making interface the new active one [ 139.245961][ T6450] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 139.285386][ T10] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 139.308872][ T10] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 139.338935][ T6321] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 139.350580][ T10] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 139.359663][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 139.373181][ T10] usb 1-1: SerialNumber: syz [ 139.581034][ T6457] netlink: 'syz.4.145': attribute type 13 has an invalid length. [ 139.589083][ T6457] netlink: 28 bytes leftover after parsing attributes in process `syz.4.145'. [ 139.624207][ T10] usb 1-1: USB disconnect, device number 8 [ 139.820746][ T6321] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 139.981264][ T6321] usb 4-1: Using ep0 maxpacket: 32 [ 139.998353][ T6321] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 140.007751][ T6321] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.022100][ T6321] usb 4-1: Product: syz [ 140.033269][ T6321] usb 4-1: Manufacturer: syz [ 140.044859][ T6321] usb 4-1: SerialNumber: syz [ 140.075035][ T6321] usb 4-1: config 0 descriptor?? [ 140.093468][ T6321] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 140.107953][ T6321] dvb-usb: bulk message failed: -22 (2/0) [ 140.147415][ T6321] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 140.183189][ T6441] veth1_to_bond: left allmulticast mode [ 140.190029][ T6321] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 140.205819][ T6321] usb 4-1: media controller created [ 140.331662][ T6321] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 140.432355][ T6321] usb 4-1: selecting invalid altsetting 7 [ 140.450446][ T6321] cxusb: set interface failed [ 140.468706][ T6321] dvb-usb: bulk message failed: -22 (1/0) [ 141.110265][ T6464] netlink: 12 bytes leftover after parsing attributes in process `syz.4.147'. [ 141.125771][ T6464] netlink: 'syz.4.147': attribute type 13 has an invalid length. [ 141.134414][ T6464] gretap0: refused to change device tx_queue_len [ 141.140877][ T6464] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 141.234915][ T6321] DVB: Unable to find symbol lgdt330x_attach() [ 141.253397][ T6321] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 141.521211][ T6321] rc_core: IR keymap rc-dvico-portable not found [ 141.593357][ T6321] Registered IR keymap rc-empty [ 141.623760][ T6321] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 141.778908][ T6321] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input14 [ 141.869460][ T6321] dvb-usb: schedule remote query interval to 100 msecs. [ 141.878789][ T5917] usb 3-1: USB disconnect, device number 6 [ 141.900750][ T5917] usblp0: removed [ 141.956936][ T6321] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 142.014194][ T6476] FAULT_INJECTION: forcing a failure. [ 142.014194][ T6476] name failslab, interval 1, probability 0, space 0, times 0 [ 142.073520][ T6321] dvb-usb: bulk message failed: -22 (1/0) [ 142.105292][ T6476] CPU: 1 UID: 0 PID: 6476 Comm: syz.4.150 Tainted: G L syzkaller #0 PREEMPT(full) [ 142.105327][ T6476] Tainted: [L]=SOFTLOCKUP [ 142.105335][ T6476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 142.105347][ T6476] Call Trace: [ 142.105356][ T6476] [ 142.105365][ T6476] dump_stack_lvl+0x189/0x250 [ 142.105397][ T6476] ? __pfx____ratelimit+0x10/0x10 [ 142.105427][ T6476] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.105453][ T6476] ? __pfx__printk+0x10/0x10 [ 142.105487][ T6476] ? __pfx___might_resched+0x10/0x10 [ 142.105512][ T6476] ? fs_reclaim_acquire+0x7d/0x100 [ 142.105539][ T6476] should_fail_ex+0x414/0x560 [ 142.105577][ T6476] should_failslab+0xa8/0x100 [ 142.105605][ T6476] __kmalloc_cache_noprof+0x84/0x700 [ 142.105628][ T6476] ? iopt_map_pages+0x11b/0xfb0 [ 142.105655][ T6476] iopt_map_pages+0x11b/0xfb0 [ 142.105684][ T6476] ? xa_load+0x60/0x210 [ 142.105718][ T6476] ? __pfx_iopt_map_pages+0x10/0x10 [ 142.105752][ T6476] ? do_raw_spin_unlock+0x122/0x240 [ 142.105786][ T6476] ? _raw_spin_unlock+0x28/0x50 [ 142.105812][ T6476] ? iommufd_get_object+0x358/0x490 [ 142.105848][ T6476] ? __pfx_iommufd_get_object+0x10/0x10 [ 142.105886][ T6476] iommufd_ioas_copy+0x57d/0x6e0 [ 142.105922][ T6476] ? __pfx_iommufd_ioas_copy+0x10/0x10 [ 142.105962][ T6476] iommufd_fops_ioctl+0x452/0x580 [ 142.105997][ T6476] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 142.106027][ T6476] ? __fget_files+0x2a/0x420 [ 142.106061][ T6476] ? __fget_files+0x2a/0x420 [ 142.106091][ T6476] ? bpf_lsm_file_ioctl+0x9/0x20 [ 142.106115][ T6476] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 142.106144][ T6476] __se_sys_ioctl+0xfc/0x170 [ 142.106182][ T6476] do_syscall_64+0xfa/0xf80 [ 142.106215][ T6476] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.106236][ T6476] ? clear_bhb_loop+0x60/0xb0 [ 142.106263][ T6476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.106284][ T6476] RIP: 0033:0x7f5e6a18f749 [ 142.106303][ T6476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.106321][ T6476] RSP: 002b:00007f5e6af7a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 142.106345][ T6476] RAX: ffffffffffffffda RBX: 00007f5e6a3e5fa0 RCX: 00007f5e6a18f749 [ 142.106360][ T6476] RDX: 0000200000000040 RSI: 0000000000003b83 RDI: 0000000000000003 [ 142.106373][ T6476] RBP: 00007f5e6af7a090 R08: 0000000000000000 R09: 0000000000000000 [ 142.106386][ T6476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.106399][ T6476] R13: 00007f5e6a3e6038 R14: 00007f5e6a3e5fa0 R15: 00007f5e6a50fa28 [ 142.106433][ T6476] [ 142.393425][ T6321] dvb-usb: bulk message failed: -22 (1/0) [ 142.500549][ T6321] dvb-usb: bulk message failed: -22 (1/0) [ 142.612230][ T6321] dvb-usb: bulk message failed: -22 (1/0) [ 142.628731][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 142.628749][ T30] audit: type=1326 audit(1765671661.303:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6477 comm="syz.2.151" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5c94d8f749 code=0x0 [ 142.720594][ T6321] dvb-usb: bulk message failed: -22 (1/0) [ 142.773531][ T6489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.151'. [ 142.834039][ T6321] dvb-usb: bulk message failed: -22 (1/0) [ 143.006134][ T6321] dvb-usb: bulk message failed: -22 (1/0) [ 143.290758][ T6321] dvb-usb: bulk message failed: -22 (1/0) [ 143.360995][ T6321] usb 4-1: USB disconnect, device number 6 [ 143.614568][ T6321] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 143.748350][ T6497] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.756098][ T6497] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.970629][ T5951] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 144.100642][ T6321] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 144.155738][ T5951] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 144.166612][ T5951] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 144.234534][ T6497] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.245495][ T5951] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 144.255097][ T5951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 144.260468][ T6321] usb 4-1: Using ep0 maxpacket: 16 [ 144.272487][ T6321] usb 4-1: config 162 has no interfaces? [ 144.278492][ T5951] usb 3-1: SerialNumber: syz [ 144.282882][ T6321] usb 4-1: New USB device found, idVendor=1410, idProduct=8000, bcdDevice=bf.8f [ 144.302613][ T6321] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.331986][ T6321] usb 4-1: Product: syz [ 144.347446][ T6321] usb 4-1: Manufacturer: syz [ 144.363288][ T6497] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.372641][ T6321] usb 4-1: SerialNumber: syz [ 144.618511][ T6321] usb 4-1: USB disconnect, device number 7 [ 144.898863][ T3499] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.908316][ T3499] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.939192][ T3499] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.956965][ T3499] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.006857][ T5951] usb 3-1: USB disconnect, device number 7 [ 145.723629][ T43] IPVS: starting estimator thread 0... [ 146.008720][ T6521] netlink: 12 bytes leftover after parsing attributes in process `syz.2.163'. [ 146.021166][ T6521] netlink: 'syz.2.163': attribute type 13 has an invalid length. [ 146.030703][ T6521] gretap0: refused to change device tx_queue_len [ 146.039097][ T6521] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 146.160558][ T6519] IPVS: using max 26 ests per chain, 62400 per kthread [ 146.524979][ T6530] random: crng reseeded on system resumption [ 147.173897][ T6542] veth1_to_bond: entered allmulticast mode [ 147.265269][ T6542] openvswitch: netlink: nsh attribute has 65288 unknown bytes. [ 147.273046][ T6542] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 147.580786][ T5951] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 147.732522][ T5951] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 147.757200][ T5951] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 147.801184][ T5951] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 147.825706][ T5951] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 147.850377][ T5951] usb 4-1: SerialNumber: syz [ 148.634052][ T6542] veth1_to_bond: left allmulticast mode [ 148.642266][ T5951] usb 4-1: USB disconnect, device number 8 [ 149.105754][ T6561] binder: 6560:6561 ioctl c0306201 200000000040 returned -11 [ 149.211568][ T5951] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 149.393456][ T5951] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.406084][ T5951] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.429743][ T5951] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 149.471394][ T5951] usb 4-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 149.492619][ T5951] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.516856][ T5951] usb 4-1: config 0 descriptor?? [ 149.601532][ T43] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 149.774743][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 149.786724][ T43] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 149.805745][ T43] usb 1-1: config 0 has no interface number 0 [ 149.813655][ T43] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 149.835053][ T43] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 149.854278][ T6569] syz.1.180 uses obsolete (PF_INET,SOCK_PACKET) [ 149.863742][ T6569] syzkaller1: entered promiscuous mode [ 149.869438][ T6569] syzkaller1: entered allmulticast mode [ 149.879731][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.892507][ T43] usb 1-1: Product: syz [ 149.898108][ T43] usb 1-1: Manufacturer: syz [ 149.908202][ T43] usb 1-1: SerialNumber: syz [ 149.925603][ T43] usb 1-1: config 0 descriptor?? [ 149.937389][ T6564] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 149.953018][ T6571] FAULT_INJECTION: forcing a failure. [ 149.953018][ T6571] name failslab, interval 1, probability 0, space 0, times 0 [ 149.970441][ T6571] CPU: 1 UID: 0 PID: 6571 Comm: syz.4.181 Tainted: G L syzkaller #0 PREEMPT(full) [ 149.970473][ T6571] Tainted: [L]=SOFTLOCKUP [ 149.970481][ T6571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 149.970491][ T6571] Call Trace: [ 149.970497][ T6571] [ 149.970504][ T6571] dump_stack_lvl+0x189/0x250 [ 149.970528][ T6571] ? __pfx____ratelimit+0x10/0x10 [ 149.970549][ T6571] ? __pfx_dump_stack_lvl+0x10/0x10 [ 149.970568][ T6571] ? __pfx__printk+0x10/0x10 [ 149.970602][ T6571] should_fail_ex+0x414/0x560 [ 149.970626][ T6571] should_failslab+0xa8/0x100 [ 149.970647][ T6571] __kmalloc_cache_noprof+0x84/0x700 [ 149.970663][ T6571] ? sctp_add_bind_addr+0x8c/0x370 [ 149.970686][ T6571] sctp_add_bind_addr+0x8c/0x370 [ 149.970707][ T6571] sctp_copy_local_addr_list+0x30b/0x4e0 [ 149.970729][ T6571] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 149.970747][ T6571] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 149.970767][ T6571] ? sctp_v6_is_any+0x64/0x80 [ 149.970787][ T6571] ? sctp_copy_one_addr+0x93/0x360 [ 149.970808][ T6571] sctp_bind_addr_copy+0xb3/0x3c0 [ 149.970848][ T6571] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 149.970873][ T6571] sctp_connect_new_asoc+0x2e0/0x690 [ 149.970898][ T6571] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 149.970922][ T6571] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 149.970945][ T6571] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 149.970966][ T6571] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 149.970989][ T6571] ? sctp_endpoint_lookup_assoc+0x22f/0x260 [ 149.971014][ T6571] __sctp_connect+0x5b5/0xda0 [ 149.971045][ T6571] ? __pfx___sctp_connect+0x10/0x10 [ 149.971075][ T6571] sctp_inet_connect+0x12e/0x210 [ 149.971098][ T6571] __sys_connect+0x316/0x440 [ 149.971123][ T6571] ? __fget_files+0x3a0/0x420 [ 149.971143][ T6571] ? __pfx___sys_connect+0x10/0x10 [ 149.971175][ T6571] ? __pfx_ksys_write+0x10/0x10 [ 149.971194][ T6571] __x64_sys_connect+0x7a/0x90 [ 149.971218][ T6571] do_syscall_64+0xfa/0xf80 [ 149.971247][ T6571] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.971262][ T6571] ? clear_bhb_loop+0x60/0xb0 [ 149.971281][ T6571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.971296][ T6571] RIP: 0033:0x7f5e6a18f749 [ 149.971310][ T6571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.971322][ T6571] RSP: 002b:00007f5e6af7a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 149.971338][ T6571] RAX: ffffffffffffffda RBX: 00007f5e6a3e5fa0 RCX: 00007f5e6a18f749 [ 149.971350][ T6571] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000004 [ 149.971359][ T6571] RBP: 00007f5e6af7a090 R08: 0000000000000000 R09: 0000000000000000 [ 149.971368][ T6571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 149.971377][ T6571] R13: 00007f5e6a3e6038 R14: 00007f5e6a3e5fa0 R15: 00007f5e6a50fa28 [ 149.971401][ T6571] [ 149.971797][ T5951] hid-multitouch 0003:0EEF:72D0.0003: unbalanced collection at end of report description [ 150.274388][ T6564] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 150.346113][ T5951] hid-multitouch 0003:0EEF:72D0.0003: probe with driver hid-multitouch failed with error -22 [ 150.381589][ T5951] usb 4-1: USB disconnect, device number 9 [ 150.439661][ T6576] netlink: 'syz.2.182': attribute type 10 has an invalid length. [ 150.473858][ T6576] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 150.484411][ T6576] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 150.510149][ T6564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.519240][ T6564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.538254][ T43] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 150.549667][ T6576] netlink: 6 bytes leftover after parsing attributes in process `syz.2.182'. [ 150.563728][ T43] asix 1-1:0.188: probe with driver asix failed with error -71 [ 150.586579][ T43] usb 1-1: USB disconnect, device number 9 [ 151.233823][ T6595] netlink: 12 bytes leftover after parsing attributes in process `syz.0.187'. [ 151.767816][ T6615] xt_hashlimit: max too large, truncated to 1048576 [ 151.919108][ T6615] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 152.447062][ T6631] FAULT_INJECTION: forcing a failure. [ 152.447062][ T6631] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 152.499383][ T6631] CPU: 0 UID: 0 PID: 6631 Comm: syz.2.199 Tainted: G L syzkaller #0 PREEMPT(full) [ 152.499419][ T6631] Tainted: [L]=SOFTLOCKUP [ 152.499427][ T6631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 152.499440][ T6631] Call Trace: [ 152.499448][ T6631] [ 152.499458][ T6631] dump_stack_lvl+0x189/0x250 [ 152.499490][ T6631] ? __pfx____ratelimit+0x10/0x10 [ 152.499521][ T6631] ? __pfx_dump_stack_lvl+0x10/0x10 [ 152.499547][ T6631] ? __pfx__printk+0x10/0x10 [ 152.499580][ T6631] ? __might_fault+0xb0/0x130 [ 152.499625][ T6631] should_fail_ex+0x414/0x560 [ 152.499660][ T6631] _copy_from_user+0x2d/0xb0 [ 152.499683][ T6631] video_usercopy+0x349/0x13f0 [ 152.499725][ T6631] ? __pfx___video_do_ioctl+0x10/0x10 [ 152.499755][ T6631] ? __pfx_video_usercopy+0x10/0x10 [ 152.499803][ T6631] ? __fget_files+0x3a0/0x420 [ 152.499835][ T6631] v4l2_ioctl+0x18d/0x1e0 [ 152.499865][ T6631] ? __pfx_v4l2_ioctl+0x10/0x10 [ 152.499901][ T6631] __se_sys_ioctl+0xfc/0x170 [ 152.499938][ T6631] do_syscall_64+0xfa/0xf80 [ 152.499970][ T6631] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.499992][ T6631] ? clear_bhb_loop+0x60/0xb0 [ 152.500018][ T6631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.500039][ T6631] RIP: 0033:0x7f5c94d8f749 [ 152.500058][ T6631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.500076][ T6631] RSP: 002b:00007f5c95b8b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 152.500099][ T6631] RAX: ffffffffffffffda RBX: 00007f5c94fe5fa0 RCX: 00007f5c94d8f749 [ 152.500114][ T6631] RDX: 0000200000000a40 RSI: 00000000c0145608 RDI: 0000000000000003 [ 152.500128][ T6631] RBP: 00007f5c95b8b090 R08: 0000000000000000 R09: 0000000000000000 [ 152.500141][ T6631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.500152][ T6631] R13: 00007f5c94fe6038 R14: 00007f5c94fe5fa0 R15: 00007f5c9510fa28 [ 152.500186][ T6631] [ 153.125151][ T6640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.134536][ T6640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.329222][ T6650] netlink: 8 bytes leftover after parsing attributes in process `syz.2.206'. [ 153.338193][ T6650] netlink: 4 bytes leftover after parsing attributes in process `syz.2.206'. [ 153.347419][ T6650] netlink: 'syz.2.206': attribute type 11 has an invalid length. [ 153.356445][ T6650] netlink: 'syz.2.206': attribute type 12 has an invalid length. [ 153.441116][ T5951] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 153.610544][ T5951] usb 1-1: Using ep0 maxpacket: 32 [ 153.620198][ T5951] usb 1-1: config 0 has no interfaces? [ 153.629012][ T5951] usb 1-1: New USB device found, idVendor=09c0, idProduct=0202, bcdDevice=a6.fa [ 153.639252][ T5951] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.647361][ T5951] usb 1-1: Product: syz [ 153.651801][ T5951] usb 1-1: Manufacturer: syz [ 153.656434][ T5951] usb 1-1: SerialNumber: syz [ 153.669664][ T5951] usb 1-1: rejected 1 configuration due to insufficient available bus power [ 153.680152][ T5951] usb 1-1: no configuration chosen from 1 choice [ 153.831511][ T5917] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 154.044999][ T5917] usb 4-1: not running at top speed; connect to a high speed hub [ 154.060633][ T5917] usb 4-1: config 1 interface 0 altsetting 5 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 154.076138][ T5917] usb 4-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 154.090969][ T5917] usb 4-1: config 1 interface 0 has no altsetting 0 [ 154.102626][ T5917] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 154.116246][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.128034][ T5917] usb 4-1: Product: syz [ 154.134021][ T5917] usb 4-1: Manufacturer: በ[ 154.140416][ T5917] usb 4-1: SerialNumber: syz [ 154.161999][ T6657] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 154.200834][ T6657] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 154.443047][ T6657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.452996][ T6657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.464794][ T6657] loop9: detected capacity change from 0 to 7 [ 154.475138][ T6657] Dev loop9: unable to read RDB block 7 [ 154.481503][ T6657] loop9: unable to read partition table [ 154.493800][ T6657] loop9: partition table beyond EOD, truncated [ 154.510245][ T6657] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 154.576186][ T5917] usb 4-1: USB disconnect, device number 10 [ 155.841545][ T6685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.864603][ T6685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.205418][ T5917] usb 1-1: USB disconnect, device number 10 [ 156.649700][ T6705] fuse: Invalid rootmode [ 157.210260][ T6725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.221180][ T6725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.121177][ T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 158.300677][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 158.324132][ T10] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 158.334058][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.355231][ T10] usb 4-1: Product: syz [ 158.367879][ T10] usb 4-1: Manufacturer: syz [ 158.384938][ T10] usb 4-1: SerialNumber: syz [ 158.410255][ T10] usb 4-1: config 0 descriptor?? [ 158.483394][ T10] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 158.501876][ T6739] netlink: 8 bytes leftover after parsing attributes in process `syz.0.231'. [ 158.511100][ T6739] netlink: 24 bytes leftover after parsing attributes in process `syz.0.231'. [ 158.521624][ T6739] netlink: 484 bytes leftover after parsing attributes in process `syz.0.231'. [ 158.521718][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 158.561469][ T6739] netlink: 24 bytes leftover after parsing attributes in process `syz.0.231'. [ 158.610846][ T6741] netlink: 12 bytes leftover after parsing attributes in process `syz.2.232'. [ 158.620609][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 158.635114][ T10] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 158.645965][ T10] usb 4-1: media controller created [ 158.666595][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 158.695533][ T10] usb 4-1: selecting invalid altsetting 7 [ 158.724378][ T6741] netlink: 'syz.2.232': attribute type 13 has an invalid length. [ 158.733974][ T6741] gretap0: refused to change device tx_queue_len [ 158.740505][ T6741] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 158.756430][ T10] cxusb: set interface failed [ 158.756450][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 158.852260][ T10] DVB: Unable to find symbol lgdt330x_attach() [ 158.864134][ T10] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 159.112500][ T10] rc_core: IR keymap rc-dvico-portable not found [ 159.177072][ T10] Registered IR keymap rc-empty [ 159.189818][ T10] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 159.228360][ T10] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input15 [ 159.264678][ T10] dvb-usb: schedule remote query interval to 100 msecs. [ 159.286510][ T10] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 159.401040][ T5926] dvb-usb: bulk message failed: -22 (1/0) [ 159.510942][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 159.620647][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 159.732121][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 159.844888][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 159.971237][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 160.099474][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 160.251245][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 160.391864][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 160.530754][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 160.599724][ T6756] netlink: 12 bytes leftover after parsing attributes in process `syz.2.235'. [ 160.644641][ T6759] openvswitch: netlink: nsh attribute has 65288 unknown bytes. [ 160.664379][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 160.679784][ T6759] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.802367][ T5926] dvb-usb: bulk message failed: -22 (1/0) [ 160.810999][ T5951] usb 4-1: USB disconnect, device number 11 [ 160.864782][ T6761] use of bytesused == 0 is deprecated and will be removed in the future, [ 160.867085][ T6762] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 160.880789][ T6762] IPv6: NLM_F_CREATE should be set when creating new route [ 160.889258][ T6761] use the actual size instead. [ 160.940860][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 160.947421][ T5951] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 161.085087][ T6765] faux_driver vgem: [drm] Unknown color mode 127; guessing buffer size. [ 161.123965][ T6767] netlink: 40 bytes leftover after parsing attributes in process `syz.4.239'. [ 161.137664][ T6769] netlink: 4 bytes leftover after parsing attributes in process `syz.3.240'. [ 161.161690][ T10] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 161.210405][ T10] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 161.230625][ T43] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 161.239272][ T10] usb 3-1: config 0 has no interfaces? [ 161.286378][ T10] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 161.307851][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.412489][ T43] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 161.469056][ T43] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 161.529902][ T10] usb 3-1: config 0 descriptor?? [ 161.616169][ T43] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 161.625980][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 161.635069][ T43] usb 1-1: SerialNumber: syz [ 162.025133][ T43] usb 1-1: USB disconnect, device number 11 [ 162.494550][ T6790] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 162.742366][ T6794] fuse: blksize only supported for fuseblk [ 163.513352][ T5917] usb 3-1: USB disconnect, device number 8 [ 163.770581][ T43] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 163.997963][ T43] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 164.006873][ T43] usb 1-1: config 0 has no interface number 0 [ 164.017649][ T43] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 164.027791][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.041272][ T43] usb 1-1: Product: syz [ 164.041299][ T43] usb 1-1: Manufacturer: syz [ 164.041311][ T43] usb 1-1: SerialNumber: syz [ 164.043576][ T43] usb 1-1: config 0 descriptor?? [ 164.063081][ T5917] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 164.239059][ T6809] netlink: 12 bytes leftover after parsing attributes in process `syz.4.248'. [ 164.248961][ T6809] netlink: 'syz.4.248': attribute type 13 has an invalid length. [ 164.257575][ T6809] gretap0: refused to change device tx_queue_len [ 164.264229][ T6809] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 164.290164][ T43] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 164.360395][ T5917] usb 3-1: Using ep0 maxpacket: 32 [ 164.480976][ T5917] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 164.492934][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.512649][ T43] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 164.537846][ T5917] usb 3-1: Product: syz [ 164.543048][ T5917] usb 3-1: Manufacturer: syz [ 164.549335][ T5917] usb 3-1: SerialNumber: syz [ 164.555862][ T43] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 164.569528][ T5917] usb 3-1: config 0 descriptor?? [ 164.575350][ T43] usb 1-1: media controller created [ 164.636662][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 164.735882][ T5917] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 164.746852][ T5917] dvb-usb: bulk message failed: -22 (2/0) [ 164.774247][ T5917] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 164.800846][ T5917] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 164.808939][ T5917] usb 3-1: media controller created [ 164.830052][ T5917] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 164.935860][ T5917] usb 3-1: selecting invalid altsetting 7 [ 164.947051][ T5917] cxusb: set interface failed [ 164.967584][ T5917] dvb-usb: bulk message failed: -22 (1/0) [ 165.174527][ T5917] DVB: Unable to find symbol lgdt330x_attach() [ 165.253269][ T5917] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 165.408319][ T6821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.477518][ T6821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.527911][ T6822] xt_hashlimit: max too large, truncated to 1048576 [ 165.599072][ T6823] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 165.606963][ T6823] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 165.630984][ T5917] rc_core: IR keymap rc-dvico-portable not found [ 165.639747][ T5917] Registered IR keymap rc-empty [ 165.660103][ T5917] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 165.727688][ T5917] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input17 [ 165.742208][ T5917] dvb-usb: schedule remote query interval to 100 msecs. [ 165.749923][ T6824] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 165.760244][ T6824] netlink: 76 bytes leftover after parsing attributes in process `syz.1.251'. [ 165.772278][ T6824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.783640][ T6824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.796489][ T5917] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 165.854497][ T43] i2c i2c-2: ec100: i2c rd failed=-110 reg=33 [ 165.915035][ T5917] dvb-usb: bulk message failed: -22 (1/0) [ 166.030962][ T5917] dvb-usb: bulk message failed: -22 (1/0) [ 166.163691][ T43] dvb-usb: bulk message failed: -22 (1/0) [ 166.336599][ T43] dvb-usb: bulk message failed: -22 (1/0) [ 166.461659][ T43] dvb-usb: bulk message failed: -22 (1/0) [ 166.586896][ T43] dvb-usb: bulk message failed: -22 (1/0) [ 166.710443][ T43] dvb-usb: bulk message failed: -22 (1/0) [ 166.822304][ T5917] dvb-usb: bulk message failed: -22 (1/0) [ 166.880674][ T43] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 166.942678][ T5917] dvb-usb: bulk message failed: -22 (1/0) [ 167.211044][ T5917] dvb-usb: bulk message failed: -22 (1/0) [ 167.239233][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 167.247538][ T43] usb 4-1: config 4 has an invalid interface number: 124 but max is 0 [ 167.257059][ T43] usb 4-1: config 4 has no interface number 0 [ 167.263739][ T43] usb 4-1: config 4 interface 124 has no altsetting 0 [ 167.274527][ T43] usb 4-1: New USB device found, idVendor=054c, idProduct=0058, bcdDevice=72.b4 [ 167.284334][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.292738][ T43] usb 4-1: Product: syz [ 167.300242][ T43] usb 4-1: Manufacturer: syz [ 167.313629][ T43] usb 4-1: SerialNumber: syz [ 167.320429][ T5917] dvb-usb: bulk message failed: -22 (1/0) [ 167.400479][ T5917] usb 3-1: USB disconnect, device number 9 [ 167.581846][ T5917] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 167.882091][ T43] usb-storage 4-1:4.124: USB Mass Storage device detected [ 167.914857][ T43] usb-storage 4-1:4.124: Quirks match for vid 054c pid 0058: 8 [ 168.009632][ T43] usb 4-1: USB disconnect, device number 12 [ 168.061483][ T5917] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 168.231511][ T5917] usb 3-1: Using ep0 maxpacket: 32 [ 168.245874][ T5917] usb 3-1: too many endpoints for config 0 interface 0 altsetting 2: 228, using maximum allowed: 30 [ 168.257885][ T5917] usb 3-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 228 [ 168.271646][ T5917] usb 3-1: config 0 interface 0 has no altsetting 0 [ 168.285440][ T5917] usb 3-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 168.303233][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.333043][ T5917] usb 3-1: Product: syz [ 168.337892][ T5917] usb 3-1: Manufacturer: syz [ 168.348441][ T5917] usb 3-1: SerialNumber: syz [ 168.358912][ T5917] usb 3-1: config 0 descriptor?? [ 168.568407][ T6844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.606363][ T6844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.633636][ T6836] process 'syz.2.255' launched '/dev/fd/5' with NULL argv: empty string added [ 168.715921][ T6847] 8021q: VLANs not supported on lo [ 168.745005][ T5917] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 168.890823][ T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 169.060133][ T6853] netlink: 'syz.1.259': attribute type 13 has an invalid length. [ 169.120729][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 169.151517][ T5917] gspca_topro: reg_w err -71 [ 169.185560][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.205864][ T10] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 169.211337][ T5917] gspca_topro: Sensor soi763a [ 169.273596][ T5917] usb 3-1: USB disconnect, device number 10 [ 169.273661][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.359430][ T10] usb 4-1: config 0 descriptor?? [ 169.970873][ T10] mcp2221 0003:04D8:00DD.0004: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 170.174694][ T10] usb 4-1: USB disconnect, device number 13 [ 171.984953][ T6873] batadv0: entered promiscuous mode [ 172.820292][ T6895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.873426][ T6895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.997193][ T5917] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 173.130686][ T5951] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 173.151983][ T5917] usb 3-1: Using ep0 maxpacket: 32 [ 173.172773][ T5917] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 173.191631][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.201321][ T5917] usb 3-1: Product: syz [ 173.205784][ T5917] usb 3-1: Manufacturer: syz [ 173.211400][ T5917] usb 3-1: SerialNumber: syz [ 173.215799][ T6891] cgroup: fork rejected by pids controller in /syz1 [ 173.219469][ T5917] usb 3-1: config 0 descriptor?? [ 173.314870][ T5917] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 173.324252][ T5917] dvb-usb: bulk message failed: -22 (2/0) [ 173.333218][ T5951] usb 4-1: config 4 has an invalid interface number: 88 but max is 0 [ 173.342499][ T5951] usb 4-1: config 4 has no interface number 0 [ 173.350669][ T5951] usb 4-1: config 4 interface 88 altsetting 119 has an invalid endpoint descriptor of length 5, skipping [ 173.364602][ T5917] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 173.376870][ T5951] usb 4-1: config 4 interface 88 altsetting 119 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 173.391156][ T5917] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 173.408945][ T5917] usb 3-1: media controller created [ 173.435359][ T5951] usb 4-1: config 4 interface 88 has no altsetting 0 [ 173.504539][ T6931] netlink: 16 bytes leftover after parsing attributes in process `syz.0.276'. [ 173.524252][ T5951] usb 4-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=af.e7 [ 173.583767][ T5917] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 173.593419][ T5951] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.614623][ T5951] usb 4-1: Product: syz [ 173.625738][ T5951] usb 4-1: Manufacturer: syz [ 173.642999][ T5951] usb 4-1: SerialNumber: syz [ 173.649698][ T5917] usb 3-1: selecting invalid altsetting 7 [ 173.685190][ T5917] cxusb: set interface failed [ 173.693457][ T6894] raw-gadget.5 gadget.3: fail, usb_ep_enable returned -22 [ 173.704102][ T5917] dvb-usb: bulk message failed: -22 (1/0) [ 173.784906][ T6934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.800834][ T6934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.833450][ T5917] DVB: Unable to find symbol lgdt330x_attach() [ 173.839689][ T5917] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 173.923766][ T5917] rc_core: IR keymap rc-dvico-portable not found [ 173.936093][ T5926] usb 4-1: USB disconnect, device number 14 [ 173.978807][ T5917] Registered IR keymap rc-empty [ 173.988478][ T5917] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 174.003896][ T5917] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input19 [ 174.049055][ T5917] dvb-usb: schedule remote query interval to 100 msecs. [ 174.066097][ T5917] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 174.170422][ T5917] dvb-usb: bulk message failed: -22 (1/0) [ 174.280525][ T5917] dvb-usb: bulk message failed: -22 (1/0) [ 174.400951][ T5917] dvb-usb: bulk message failed: -22 (1/0) [ 174.510802][ T5917] dvb-usb: bulk message failed: -22 (1/0) [ 174.622017][ T5917] dvb-usb: bulk message failed: -22 (1/0) [ 174.703469][ T6947] netlink: 148 bytes leftover after parsing attributes in process `syz.3.281'. [ 174.740408][ T5917] dvb-usb: bulk message failed: -22 (1/0) [ 174.851544][ T5917] dvb-usb: bulk message failed: -22 (1/0) [ 174.970434][ T5917] dvb-usb: bulk message failed: -22 (1/0) [ 175.090469][ T5917] dvb-usb: bulk message failed: -22 (1/0) [ 175.200405][ T5917] dvb-usb: bulk message failed: -22 (1/0) [ 175.310428][ T5917] dvb-usb: bulk message failed: -22 (1/0) [ 175.337731][ T6951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.346598][ T6951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.384205][ T6951] netlink: 20 bytes leftover after parsing attributes in process `syz.1.282'. [ 175.430498][ T5917] dvb-usb: bulk message failed: -22 (1/0) [ 175.550446][ T5917] dvb-usb: bulk message failed: -22 (1/0) [ 175.559087][ T6954] kvm: vcpu 0: requested 2048 ns lapic timer period limited to 200000 ns [ 175.567933][ T6954] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 175.660401][ T5917] dvb-usb: bulk message failed: -22 (1/0) [ 175.770441][ T5917] dvb-usb: bulk message failed: -22 (1/0) [ 175.890440][ T5951] dvb-usb: bulk message failed: -22 (1/0) [ 176.000781][ T5917] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 176.009410][ T5951] dvb-usb: bulk message failed: -22 (1/0) [ 176.120389][ T5951] dvb-usb: bulk message failed: -22 (1/0) [ 176.170535][ T5917] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 176.200728][ T5917] usb 4-1: config 0 has no interface number 0 [ 176.231160][ T5917] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 176.275811][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.284566][ T5951] dvb-usb: bulk message failed: -22 (1/0) [ 176.303743][ T5917] usb 4-1: Product: syz [ 176.310814][ T5917] usb 4-1: Manufacturer: syz [ 176.322236][ T5917] usb 4-1: SerialNumber: syz [ 176.339497][ T5917] usb 4-1: config 0 descriptor?? [ 176.400458][ T5951] dvb-usb: bulk message failed: -22 (1/0) [ 176.476910][ T5926] usb 3-1: USB disconnect, device number 11 [ 176.569685][ T5917] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 176.593129][ T6962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.700248][ T5917] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 176.720502][ T5926] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 176.762407][ T5917] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 176.796024][ T5917] usb 4-1: media controller created [ 176.810030][ T5917] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 176.823310][ T6962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.023097][ T6971] vivid-007: disconnect [ 177.314146][ T5926] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 177.423515][ T6975] FAULT_INJECTION: forcing a failure. [ 177.423515][ T6975] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.513490][ T6975] CPU: 0 UID: 0 PID: 6975 Comm: syz.4.289 Tainted: G L syzkaller #0 PREEMPT(full) [ 177.513526][ T6975] Tainted: [L]=SOFTLOCKUP [ 177.513533][ T6975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 177.513545][ T6975] Call Trace: [ 177.513554][ T6975] [ 177.513563][ T6975] dump_stack_lvl+0x189/0x250 [ 177.513588][ T6975] ? __pfx____ratelimit+0x10/0x10 [ 177.513610][ T6975] ? __pfx_dump_stack_lvl+0x10/0x10 [ 177.513634][ T6975] ? __pfx__printk+0x10/0x10 [ 177.513667][ T6975] ? __might_fault+0xb0/0x130 [ 177.513710][ T6975] should_fail_ex+0x414/0x560 [ 177.513746][ T6975] _copy_from_user+0x2d/0xb0 [ 177.513769][ T6975] sctp_getsockopt_rtoinfo+0xbe/0x5c0 [ 177.513802][ T6975] ? __pfx_sctp_getsockopt_rtoinfo+0x10/0x10 [ 177.513839][ T6975] sctp_getsockopt+0xab2/0xb90 [ 177.513869][ T6975] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 177.513900][ T6975] do_sock_getsockopt+0x2b4/0x3d0 [ 177.513923][ T6975] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 177.513944][ T6975] ? do_syscall_64+0x80/0xf80 [ 177.513978][ T6975] ? __fget_files+0x2a/0x420 [ 177.514002][ T6975] ? __fget_files+0x3a0/0x420 [ 177.514023][ T6975] ? __fget_files+0x2a/0x420 [ 177.514048][ T6975] __x64_sys_getsockopt+0x1a5/0x250 [ 177.514062][ T6975] ? do_syscall_64+0x80/0xf80 [ 177.514094][ T6975] ? do_syscall_64+0x80/0xf80 [ 177.514129][ T6975] do_syscall_64+0xfa/0xf80 [ 177.514160][ T6975] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.514176][ T6975] ? clear_bhb_loop+0x60/0xb0 [ 177.514194][ T6975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.514209][ T6975] RIP: 0033:0x7f5e6a18f749 [ 177.514225][ T6975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.514251][ T6975] RSP: 002b:00007f5e6af59038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 177.514274][ T6975] RAX: ffffffffffffffda RBX: 00007f5e6a3e6090 RCX: 00007f5e6a18f749 [ 177.514289][ T6975] RDX: 0000000000000000 RSI: 0000000000000084 RDI: 0000000000000003 [ 177.514301][ T6975] RBP: 00007f5e6af59090 R08: 0000200000000500 R09: 0000000000000000 [ 177.514313][ T6975] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000001 [ 177.514323][ T6975] R13: 00007f5e6a3e6128 R14: 00007f5e6a3e6090 R15: 00007f5e6a50fa28 [ 177.514347][ T6975] [ 178.025664][ T5917] i2c i2c-3: ec100: i2c rd failed=-110 reg=33 [ 178.072583][ T5926] usb 3-1: Using ep0 maxpacket: 32 [ 178.111656][ T5926] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 178.121242][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.199060][ T6968] vivid-007: reconnect [ 178.212033][ T5926] usb 3-1: Product: syz [ 178.216420][ T5926] usb 3-1: Manufacturer: syz [ 178.221327][ T5926] usb 3-1: SerialNumber: syz [ 178.248874][ T5926] usb 3-1: config 0 descriptor?? [ 178.412220][ T5926] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 178.500741][ T5926] dvb-usb: bulk message failed: -22 (2/0) [ 178.515956][ T5926] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 178.548504][ T5926] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 178.548581][ T5926] usb 3-1: media controller created [ 178.597857][ T5926] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 178.677492][ T5926] usb 3-1: selecting invalid altsetting 7 [ 178.677511][ T5926] cxusb: set interface failed [ 178.677521][ T5926] dvb-usb: bulk message failed: -22 (1/0) [ 178.902092][ T5926] DVB: Unable to find symbol lgdt330x_attach() [ 178.902108][ T5926] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 179.132206][ T5926] rc_core: IR keymap rc-dvico-portable not found [ 179.132228][ T5926] Registered IR keymap rc-empty [ 179.134340][ T5926] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 179.139466][ T5926] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input21 [ 179.143879][ T5926] dvb-usb: schedule remote query interval to 100 msecs. [ 179.143897][ T5926] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 179.250439][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 179.395080][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 179.515422][ T5926] dvb-usb: bulk message failed: -22 (1/0) [ 179.621014][ T5926] dvb-usb: bulk message failed: -22 (1/0) [ 179.700502][ T6990] netlink: 24 bytes leftover after parsing attributes in process `syz.0.293'. [ 179.742091][ T6992] vivid-007: disconnect [ 179.759481][ T5926] dvb-usb: bulk message failed: -22 (1/0) [ 179.860410][ T5926] dvb-usb: bulk message failed: -22 (1/0) [ 179.970498][ T5926] dvb-usb: bulk message failed: -22 (1/0) [ 180.080708][ T5926] dvb-usb: bulk message failed: -22 (1/0) [ 180.191544][ T5926] dvb-usb: bulk message failed: -22 (1/0) [ 180.300460][ T5926] dvb-usb: bulk message failed: -22 (1/0) [ 180.410646][ T5926] dvb-usb: bulk message failed: -22 (1/0) [ 180.547222][ T6987] vivid-007: reconnect [ 180.556118][ T5926] dvb-usb: bulk message failed: -22 (1/0) [ 180.579566][ T5917] usb 3-1: USB disconnect, device number 12 [ 180.769016][ T5917] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 181.076529][ T7000] syzkaller1: entered promiscuous mode [ 181.106644][ T7000] syzkaller1: entered allmulticast mode [ 181.191921][ T7002] netlink: 4 bytes leftover after parsing attributes in process `syz.2.297'. [ 181.243728][ T7005] netlink: 12 bytes leftover after parsing attributes in process `syz.2.297'. [ 181.894635][ T7015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.910754][ T7015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.484210][ T30] audit: type=1326 audit(1765671703.163:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7045 comm="syz.3.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff56c58f749 code=0x7ffc0000 [ 184.589781][ T30] audit: type=1326 audit(1765671703.163:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7045 comm="syz.3.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff56c58f749 code=0x7ffc0000 [ 184.613334][ T30] audit: type=1326 audit(1765671703.183:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7045 comm="syz.3.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff56c58f749 code=0x7ffc0000 [ 184.674957][ T30] audit: type=1326 audit(1765671703.183:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7045 comm="syz.3.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7ff56c58f749 code=0x7ffc0000 [ 184.690472][ T5917] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 184.698852][ T30] audit: type=1326 audit(1765671703.183:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7045 comm="syz.3.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff56c58f749 code=0x7ffc0000 [ 184.733088][ T30] audit: type=1326 audit(1765671703.213:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7045 comm="syz.3.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff56c58f749 code=0x7ffc0000 [ 184.850434][ T5917] usb 3-1: Using ep0 maxpacket: 32 [ 184.863627][ T5917] usb 3-1: config 0 has an invalid interface number: 150 but max is 0 [ 184.880618][ T5917] usb 3-1: config 0 has no interface number 0 [ 184.891012][ T5917] usb 3-1: config 0 interface 150 has no altsetting 0 [ 184.908564][ T5917] usb 3-1: New USB device found, idVendor=093a, idProduct=2603, bcdDevice=53.01 [ 184.923895][ T7058] netlink: 4 bytes leftover after parsing attributes in process `syz.3.313'. [ 184.932956][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.941965][ T5917] usb 3-1: Product: syz [ 184.946309][ T5917] usb 3-1: Manufacturer: syz [ 184.951074][ T5917] usb 3-1: SerialNumber: syz [ 184.961972][ T5917] usb 3-1: config 0 descriptor?? [ 184.975645][ T7061] netlink: 12 bytes leftover after parsing attributes in process `syz.3.313'. [ 184.986919][ T5917] gspca_main: pac7311-2.14.0 probing 093a:2603 [ 185.395485][ T7066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.494145][ T7066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.510652][ T5917] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -110 [ 185.554328][ T5917] pac7311 3-1:0.150: probe with driver pac7311 failed with error -110 [ 185.779669][ T7070] netlink: 12 bytes leftover after parsing attributes in process `syz.1.316'. [ 185.953541][ T5917] usb 3-1: USB disconnect, device number 13 [ 186.248074][ T7080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.263367][ T7080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.281539][ T7080] loop7: detected capacity change from 0 to 7 [ 186.289717][ T7080] Dev loop7: unable to read RDB block 7 [ 186.297202][ T7080] loop7: AHDI p1 p2 p3 [ 186.302906][ T7080] loop7: partition table partially beyond EOD, truncated [ 186.386696][ T7080] loop7: p1 start 1601398130 is beyond EOD, truncated [ 186.394122][ T7080] loop7: p2 start 1702059890 is beyond EOD, truncated [ 186.573336][ T30] audit: type=1804 audit(1765671705.253:22): pid=7082 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.320" name="/newroot/66/file1" dev="tmpfs" ino=362 res=1 errno=0 [ 187.067604][ T7088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.077039][ T7088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.095079][ T10] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 187.324185][ T7092] fuse: Unknown parameter 'r¸Ñtå²I¬^$tmode' [ 187.337615][ T7093] fuse: Unknown parameter 'r¸Ñtå²I¬^$tmode' [ 187.368797][ T10] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 187.384027][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.395633][ T10] usb 3-1: Product: syz [ 187.400042][ T10] usb 3-1: Manufacturer: syz [ 187.407076][ T10] usb 3-1: SerialNumber: syz [ 187.822473][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 187.837937][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 187.886865][ T7100] program syz.3.325 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 187.912636][ T7100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.919969][ T7101] loop4: detected capacity change from 0 to 1 [ 187.969736][ T7100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.979492][ T6479] Dev loop4: unable to read RDB block 1 [ 188.024524][ T6479] loop4: unable to read partition table [ 188.042685][ T6479] loop4: partition table beyond EOD, truncated [ 188.088909][ T7101] Dev loop4: unable to read RDB block 1 [ 188.123618][ T7101] loop4: unable to read partition table [ 188.145205][ T7101] loop4: partition table beyond EOD, truncated [ 188.168719][ T7101] loop_reread_partitions: partition scan of loop4 (þ被xü^>Ñà– ) failed (rc=-5) [ 188.192185][ T7102] netlink: 4 bytes leftover after parsing attributes in process `syz.1.326'. [ 188.249290][ T7101] netlink: 12 bytes leftover after parsing attributes in process `syz.1.326'. [ 188.642531][ T5201] Dev loop4: unable to read RDB block 1 [ 188.649871][ T5201] loop4: unable to read partition table [ 188.657638][ T5201] loop4: partition table beyond EOD, truncated [ 189.202641][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 189.216680][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 190.666779][ T7122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.850277][ T7122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.982075][ T7122] Invalid logical block size (32) [ 191.320131][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000404. ret = -EPROTO [ 191.343789][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 191.381801][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 191.784360][ T7133] xt_TCPMSS: Only works on TCP SYN packets [ 191.822202][ T10] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 192.283940][ T30] audit: type=1400 audit(1765671710.703:23): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=2626200D28 pid=7137 comm="syz.1.335" [ 192.474241][ T10] usb 3-1: USB disconnect, device number 14 [ 194.338966][ T7178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.348405][ T7178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.450698][ T5926] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 194.616623][ T5926] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 194.653239][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.697563][ T5926] usb 3-1: Product: syz [ 194.716761][ T7186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.725657][ T7186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.748111][ T5926] usb 3-1: Manufacturer: syz [ 194.758499][ T5926] usb 3-1: SerialNumber: syz [ 194.795068][ T5926] usb 3-1: config 0 descriptor?? [ 194.896026][ T7186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.919309][ T5917] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 194.941432][ T7186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.043729][ T7175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.071805][ T5917] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 195.073199][ T7175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.152124][ T7175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.208186][ T7175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.258938][ T7175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.317796][ T7193] fido_id[7193]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 195.337082][ T7175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.362987][ T7175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.410537][ T7175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.437190][ T7175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.464108][ T7175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.587239][ T5926] cx82310_eth 3-1:0.0: probe with driver cx82310_eth failed with error -22 [ 195.639332][ T5926] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 195.667764][ T5926] usb 3-1: USB disconnect, device number 15 [ 195.898049][ T7200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.925440][ T7200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.681481][ T43] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 197.143618][ T43] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 197.200827][ T43] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 197.212172][ T43] usb 3-1: config 0 interface 0 has no altsetting 0 [ 197.529980][ T43] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 197.559272][ T43] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 197.596249][ T43] usb 3-1: Product: syz [ 197.614370][ T43] usb 3-1: Manufacturer: syz [ 197.801419][ T43] usb 3-1: SerialNumber: syz [ 197.808351][ T43] usb 3-1: config 0 descriptor?? [ 197.822682][ T43] usb 3-1: selecting invalid altsetting 0 [ 198.026917][ T7209] netlink: 12 bytes leftover after parsing attributes in process `syz.3.350'. [ 198.036911][ T7209] netlink: 'syz.3.350': attribute type 13 has an invalid length. [ 198.192515][ T7209] gretap0: refused to change device tx_queue_len [ 198.199184][ T7209] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 198.334707][ T10] usb 3-1: USB disconnect, device number 16 [ 198.975404][ T7218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.009113][ T7218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.058977][ T7218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.100006][ T7218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.385517][ T7225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.402416][ T7225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.433979][ T7226] netlink: 12 bytes leftover after parsing attributes in process `syz.0.355'. [ 199.445438][ T7226] netlink: 'syz.0.355': attribute type 13 has an invalid length. [ 199.458902][ T7226] gretap0: refused to change device tx_queue_len [ 199.466128][ T7226] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 199.604984][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.613461][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.829374][ T30] audit: type=1326 audit(1765671718.503:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7229 comm="syz.2.358" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5c94d8f749 code=0x0 [ 201.507820][ T7248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.523305][ T7248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.780478][ T7251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.799039][ T7251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.908823][ T7251] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 201.915649][ T7251] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 201.943599][ T7237] netlink: 20 bytes leftover after parsing attributes in process `syz.1.360'. [ 201.953495][ T7237] netlink: 36 bytes leftover after parsing attributes in process `syz.1.360'. [ 201.969463][ T7237] capability: warning: `syz.1.360' uses 32-bit capabilities (legacy support in use) [ 201.990127][ T7251] vhci_hcd vhci_hcd.0: Device attached [ 202.017793][ T7253] vhci_hcd: connection closed [ 202.036632][ T991] vhci_hcd vhci_hcd.0: stop threads [ 202.053768][ T991] vhci_hcd vhci_hcd.0: release socket [ 202.088053][ T991] vhci_hcd vhci_hcd.0: disconnect device [ 202.352590][ T7257] netlink: 4 bytes leftover after parsing attributes in process `syz.4.364'. [ 202.395825][ T7256] netlink: 12 bytes leftover after parsing attributes in process `syz.4.364'. [ 202.906480][ T7261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.068918][ T7261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.535466][ T7273] netlink: 24 bytes leftover after parsing attributes in process `syz.4.369'. [ 204.545551][ T7273] netlink: 4 bytes leftover after parsing attributes in process `syz.4.369'. [ 204.706208][ T7276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.731764][ T7276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.761334][ T7279] netlink: 12 bytes leftover after parsing attributes in process `syz.3.372'. [ 204.793129][ T7276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.809816][ T7278] netlink: 12 bytes leftover after parsing attributes in process `syz.2.371'. [ 204.829453][ T7276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.850500][ T7278] netlink: 'syz.2.371': attribute type 1 has an invalid length. [ 205.195932][ T7284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.261929][ T7284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.086931][ T7297] usb 1-1: USB disconnect, device number 12 [ 206.111842][ T7301] netlink: 4 bytes leftover after parsing attributes in process `syz.0.378'. [ 206.152424][ T7301] netlink: 12 bytes leftover after parsing attributes in process `syz.0.378'. [ 207.266292][ T7318] netlink: 12 bytes leftover after parsing attributes in process `syz.1.382'. [ 207.334996][ T7324] netlink: 'syz.1.382': attribute type 13 has an invalid length. [ 207.354108][ T7324] gretap0: refused to change device tx_queue_len [ 207.360807][ T7324] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 207.526570][ T7329] netlink: 48 bytes leftover after parsing attributes in process `syz.0.384'. [ 208.367406][ T7335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.401820][ T7335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.682015][ T7335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.712398][ T7335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.798776][ T7336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.851248][ T7336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.550869][ T43] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 209.992095][ T43] usb 3-1: config 0 has an invalid interface number: 129 but max is 0 [ 210.058202][ T43] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.201321][ T43] usb 3-1: config 0 has no interface number 0 [ 210.207495][ T43] usb 3-1: config 0 interface 129 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 210.223753][ T43] usb 3-1: New USB device found, idVendor=04e8, idProduct=a101, bcdDevice=80.8e [ 210.233262][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.241634][ T43] usb 3-1: Product: syz [ 210.245920][ T43] usb 3-1: Manufacturer: syz [ 210.256459][ T43] usb 3-1: SerialNumber: syz [ 210.277352][ T43] r8152-cfgselector 3-1: Unknown version 0x0000 [ 210.283779][ T43] r8152-cfgselector 3-1: config 0 descriptor?? [ 210.498904][ T7342] netlink: 'syz.2.388': attribute type 39 has an invalid length. [ 210.871847][ T7363] can: request_module (can-proto-0) failed. [ 211.152476][ T7368] netlink: 4 bytes leftover after parsing attributes in process `syz.3.394'. [ 211.199296][ T7368] netlink: 12 bytes leftover after parsing attributes in process `syz.3.394'. [ 211.931690][ T5842] Bluetooth: hci3: command 0x0406 tx timeout [ 211.940128][ T5842] Bluetooth: hci1: command 0x0406 tx timeout [ 211.946661][ T5830] Bluetooth: hci0: command 0x0406 tx timeout [ 211.972231][ T5842] Bluetooth: hci4: command 0x0406 tx timeout [ 211.984006][ T5835] Bluetooth: hci2: command 0x0406 tx timeout [ 212.471568][ T43] r8152 3-1:0.129: Expected endpoints are not found [ 212.494174][ T43] r8152-cfgselector 3-1: USB disconnect, device number 17 [ 212.811729][ T7389] random: crng reseeded on system resumption [ 212.879005][ T7396] netlink: 'syz.3.402': attribute type 2 has an invalid length. [ 213.303687][ T7401] loop6: detected capacity change from 0 to 2640 [ 213.327133][ T7401] Buffer I/O error on dev loop6, logical block 0, async page read [ 213.363053][ T7401] Buffer I/O error on dev loop6, logical block 0, async page read [ 213.395012][ T7401] Buffer I/O error on dev loop6, logical block 0, async page read [ 213.420424][ T7401] Buffer I/O error on dev loop6, logical block 0, async page read [ 213.439521][ T7401] Buffer I/O error on dev loop6, logical block 0, async page read [ 213.512969][ T7401] Buffer I/O error on dev loop6, logical block 0, async page read [ 213.545004][ T7401] Buffer I/O error on dev loop6, logical block 0, async page read [ 213.580867][ T7401] Buffer I/O error on dev loop6, logical block 0, async page read [ 213.601628][ T7401] ldm_validate_partition_table(): Disk read failed. [ 213.608415][ T7401] Buffer I/O error on dev loop6, logical block 0, async page read [ 213.628083][ T7401] Buffer I/O error on dev loop6, logical block 0, async page read [ 213.636860][ T7401] Dev loop6: unable to read RDB block 0 [ 213.643508][ T7401] loop6: unable to read partition table [ 213.712331][ T7401] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 213.839995][ T7411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.851380][ T7411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.997238][ T7413] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 214.015693][ T7418] capability: warning: `syz.1.409' uses deprecated v2 capabilities in a way that may be insecure [ 214.054658][ T7413] syzkaller1: entered promiscuous mode [ 214.076150][ T7413] syzkaller1: entered allmulticast mode [ 214.683911][ T7428] netlink: 192 bytes leftover after parsing attributes in process `syz.4.414'. [ 214.910425][ T5926] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 215.060379][ T5926] usb 3-1: Using ep0 maxpacket: 8 [ 215.076336][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 215.095255][ T5926] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 215.106738][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.195381][ T5926] usb 3-1: config 0 descriptor?? [ 215.435679][ T5926] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 215.692841][ T7451] netlink: 4 bytes leftover after parsing attributes in process `syz.2.413'. [ 215.771673][ T7451] netlink: 28 bytes leftover after parsing attributes in process `syz.2.413'. [ 217.499919][ T10] usb 3-1: USB disconnect, device number 18 [ 217.789079][ T7468] Invalid logical block size (16777472) [ 218.584995][ T7484] loop9: detected capacity change from 0 to 4511 [ 218.651253][ T7485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.693157][ T7485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.776700][ T7489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.806902][ T7489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.695899][ T7509] FAULT_INJECTION: forcing a failure. [ 219.695899][ T7509] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.733988][ T7509] CPU: 1 UID: 0 PID: 7509 Comm: syz.1.440 Tainted: G L syzkaller #0 PREEMPT(full) [ 219.734023][ T7509] Tainted: [L]=SOFTLOCKUP [ 219.734031][ T7509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 219.734044][ T7509] Call Trace: [ 219.734053][ T7509] [ 219.734062][ T7509] dump_stack_lvl+0x189/0x250 [ 219.734113][ T7509] ? __pfx____ratelimit+0x10/0x10 [ 219.734143][ T7509] ? __pfx_dump_stack_lvl+0x10/0x10 [ 219.734178][ T7509] ? __pfx__printk+0x10/0x10 [ 219.734211][ T7509] ? __might_fault+0xb0/0x130 [ 219.734257][ T7509] should_fail_ex+0x414/0x560 [ 219.734292][ T7509] _copy_from_user+0x2d/0xb0 [ 219.734316][ T7509] sctp_getsockopt_maxseg+0x178/0x6c0 [ 219.734347][ T7509] ? __pfx_sctp_getsockopt_maxseg+0x10/0x10 [ 219.734386][ T7509] sctp_getsockopt+0x92d/0xb90 [ 219.734426][ T7509] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 219.734456][ T7509] do_sock_getsockopt+0x2b4/0x3d0 [ 219.734473][ T7509] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 219.734488][ T7509] ? do_syscall_64+0x80/0xf80 [ 219.734510][ T7509] ? __fget_files+0x2a/0x420 [ 219.734529][ T7509] ? __fget_files+0x3a0/0x420 [ 219.734547][ T7509] ? __fget_files+0x2a/0x420 [ 219.734571][ T7509] __x64_sys_getsockopt+0x1a5/0x250 [ 219.734586][ T7509] ? do_syscall_64+0x80/0xf80 [ 219.734610][ T7509] ? do_syscall_64+0x80/0xf80 [ 219.734634][ T7509] do_syscall_64+0xfa/0xf80 [ 219.734657][ T7509] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.734673][ T7509] ? clear_bhb_loop+0x60/0xb0 [ 219.734692][ T7509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.734707][ T7509] RIP: 0033:0x7f2ba338f749 [ 219.734726][ T7509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.734740][ T7509] RSP: 002b:00007f2ba42a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 219.734757][ T7509] RAX: ffffffffffffffda RBX: 00007f2ba35e5fa0 RCX: 00007f2ba338f749 [ 219.734769][ T7509] RDX: 000000000000000d RSI: 0000000000000084 RDI: 0000000000000003 [ 219.734778][ T7509] RBP: 00007f2ba42a7090 R08: 0000200000000200 R09: 0000000000000000 [ 219.734789][ T7509] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.734799][ T7509] R13: 00007f2ba35e6038 R14: 00007f2ba35e5fa0 R15: 00007f2ba370fa28 [ 219.734823][ T7509] [ 220.095840][ T7516] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 220.500452][ T5926] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 220.658419][ T5926] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.685182][ T5926] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 220.707884][ T5926] usb 3-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 220.731353][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.754834][ T5926] usb 3-1: config 0 descriptor?? [ 221.004704][ T30] audit: type=1326 audit(1765671739.683:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7519 comm="syz.3.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff56c58f749 code=0x7ffc0000 [ 221.080580][ T7524] binder: 7519:7524 ioctl c0306201 2000000016c0 returned -22 [ 221.097525][ T30] audit: type=1326 audit(1765671739.683:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7519 comm="syz.3.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff56c58f749 code=0x7ffc0000 [ 221.121254][ T7524] trusted_key: encrypted_key: insufficient parameters specified [ 221.176362][ T30] audit: type=1326 audit(1765671739.683:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7519 comm="syz.3.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff56c58f749 code=0x7ffc0000 [ 221.221130][ T7525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.245238][ T30] audit: type=1326 audit(1765671739.683:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7519 comm="syz.3.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff56c58f749 code=0x7ffc0000 [ 221.250265][ T7525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.306030][ T7528] netlink: 'syz.0.444': attribute type 1 has an invalid length. [ 221.336453][ T7528] netlink: 28 bytes leftover after parsing attributes in process `syz.0.444'. [ 221.354527][ T30] audit: type=1326 audit(1765671739.683:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7519 comm="syz.3.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7ff56c58f749 code=0x7ffc0000 [ 221.412913][ T30] audit: type=1326 audit(1765671739.683:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7519 comm="syz.3.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff56c58f749 code=0x7ffc0000 [ 221.477767][ T30] audit: type=1326 audit(1765671739.683:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7519 comm="syz.3.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7ff56c58f749 code=0x7ffc0000 [ 221.515814][ T30] audit: type=1326 audit(1765671739.683:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7519 comm="syz.3.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff56c58f749 code=0x7ffc0000 [ 221.551683][ T30] audit: type=1326 audit(1765671739.683:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7519 comm="syz.3.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff56c58f749 code=0x7ffc0000 [ 221.575071][ T30] audit: type=1326 audit(1765671739.683:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7519 comm="syz.3.442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7ff56c58f749 code=0x7ffc0000 [ 221.929998][ T7539] netlink: 12 bytes leftover after parsing attributes in process `syz.0.446'. [ 221.942194][ T7539] netlink: 'syz.0.446': attribute type 13 has an invalid length. [ 222.015168][ T7541] netlink: 12 bytes leftover after parsing attributes in process `syz.3.447'. [ 222.046736][ T7539] gretap0: refused to change device tx_queue_len [ 222.061979][ T7539] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 222.157403][ T7544] vivid-007: disconnect [ 222.794409][ T7540] vivid-007: reconnect [ 223.433708][ T7574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.443708][ T7574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.807428][ T43] usb 3-1: USB disconnect, device number 19 [ 224.178989][ T7587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.232327][ T7587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.283511][ T7590] netlink: 16 bytes leftover after parsing attributes in process `syz.2.458'. [ 224.590421][ T5926] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 224.770769][ T5926] usb 3-1: Using ep0 maxpacket: 32 [ 224.788405][ T5926] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 224.801026][ T5926] usb 3-1: config 0 has an invalid descriptor of length 137, skipping remainder of the config [ 224.830520][ T5926] usb 3-1: config 0 has no interface number 0 [ 224.847618][ T5926] usb 3-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 224.903169][ T5926] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 224.917706][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.927411][ T5926] usb 3-1: Product: syz [ 224.932878][ T5926] usb 3-1: Manufacturer: syz [ 224.937870][ T5926] usb 3-1: SerialNumber: syz [ 224.948703][ T5926] usb 3-1: config 0 descriptor?? [ 224.956410][ T7594] warning: `syz.3.460' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 224.992413][ T5926] smsc95xx v2.0.0 [ 224.996177][ T5926] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 225.017815][ T5926] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -22 [ 225.733193][ T7612] netlink: 12 bytes leftover after parsing attributes in process `syz.1.462'. [ 225.743286][ T7612] netlink: 'syz.1.462': attribute type 13 has an invalid length. [ 225.752028][ T7612] gretap0: refused to change device tx_queue_len [ 225.758517][ T7612] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 226.046230][ T7617] fuse: Bad value for 'group_id' [ 226.068366][ T7617] fuse: Bad value for 'group_id' [ 226.665196][ T7631] netlink: 56 bytes leftover after parsing attributes in process `syz.2.458'. [ 226.683191][ T7631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.458'. [ 227.038383][ T7635] x_tables: duplicate underflow at hook 2 [ 227.822241][ T5926] usb 3-1: USB disconnect, device number 20 [ 228.085799][ T7645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.095588][ T7645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.652689][ T7663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.478'. [ 229.664215][ T7663] netlink: 28 bytes leftover after parsing attributes in process `syz.3.478'. [ 230.042526][ T7671] FAULT_INJECTION: forcing a failure. [ 230.042526][ T7671] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 230.084033][ T7671] CPU: 1 UID: 0 PID: 7671 Comm: syz.3.481 Tainted: G L syzkaller #0 PREEMPT(full) [ 230.084068][ T7671] Tainted: [L]=SOFTLOCKUP [ 230.084076][ T7671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 230.084089][ T7671] Call Trace: [ 230.084098][ T7671] [ 230.084108][ T7671] dump_stack_lvl+0x189/0x250 [ 230.084142][ T7671] ? __pfx____ratelimit+0x10/0x10 [ 230.084173][ T7671] ? __pfx_dump_stack_lvl+0x10/0x10 [ 230.084200][ T7671] ? __pfx__printk+0x10/0x10 [ 230.084246][ T7671] should_fail_ex+0x414/0x560 [ 230.084282][ T7671] _copy_to_user+0x31/0xb0 [ 230.084308][ T7671] simple_read_from_buffer+0xe1/0x170 [ 230.084341][ T7671] proc_fail_nth_read+0x1b3/0x220 [ 230.084369][ T7671] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 230.084396][ T7671] ? rw_verify_area+0x2a6/0x4d0 [ 230.084430][ T7671] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 230.084456][ T7671] vfs_read+0x200/0xa30 [ 230.084483][ T7671] ? fdget_pos+0x247/0x320 [ 230.084515][ T7671] ? __pfx___mutex_lock+0x10/0x10 [ 230.084550][ T7671] ? __pfx_vfs_read+0x10/0x10 [ 230.084571][ T7671] ? __fget_files+0x2a/0x420 [ 230.084604][ T7671] ? __fget_files+0x3a0/0x420 [ 230.084630][ T7671] ? __fget_files+0x2a/0x420 [ 230.084668][ T7671] ksys_read+0x145/0x250 [ 230.084692][ T7671] ? __pfx_ksys_read+0x10/0x10 [ 230.084717][ T7671] ? do_syscall_64+0xbe/0xf80 [ 230.084755][ T7671] do_syscall_64+0xfa/0xf80 [ 230.084789][ T7671] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.084811][ T7671] ? clear_bhb_loop+0x60/0xb0 [ 230.084838][ T7671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.084860][ T7671] RIP: 0033:0x7ff56c58e15c [ 230.084880][ T7671] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 230.084899][ T7671] RSP: 002b:00007ff56d3c8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 230.084923][ T7671] RAX: ffffffffffffffda RBX: 00007ff56c7e5fa0 RCX: 00007ff56c58e15c [ 230.084939][ T7671] RDX: 000000000000000f RSI: 00007ff56d3c80a0 RDI: 0000000000000004 [ 230.084953][ T7671] RBP: 00007ff56d3c8090 R08: 0000000000000000 R09: 0000000000000000 [ 230.084967][ T7671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.084980][ T7671] R13: 00007ff56c7e6038 R14: 00007ff56c7e5fa0 R15: 00007ff56c90fa28 [ 230.085016][ T7671] [ 230.352710][ T7673] sctp: [Deprecated]: syz.0.483 (pid 7673) Use of int in max_burst socket option deprecated. [ 230.352710][ T7673] Use struct sctp_assoc_value instead [ 230.565714][ T7670] netlink: 4 bytes leftover after parsing attributes in process `syz.4.482'. [ 230.630530][ T7670] netlink: 12 bytes leftover after parsing attributes in process `syz.4.482'. [ 230.672305][ T7679] ip6t_srh: unknown srh invflags 4000 [ 230.790744][ T7679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.804303][ T7679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.062236][ T7682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.076316][ T7682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.364762][ T7679] netlink: 76 bytes leftover after parsing attributes in process `syz.0.483'. [ 231.692498][ T7696] netlink: 44 bytes leftover after parsing attributes in process `syz.4.488'. [ 231.844190][ T7700] openvswitch: netlink: nsh attribute has 65288 unknown bytes. [ 231.860370][ T7700] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.891670][ T7700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.902869][ T7700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.480509][ T5951] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 233.992535][ T5951] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.029700][ T5951] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 234.068058][ T5951] usb 3-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 234.126052][ T5951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.214587][ T5951] usb 3-1: config 0 descriptor?? [ 234.670622][ T7734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.682175][ T7734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.900473][ T7735] xt_limit: Overflow, try lower: 167772/2147483648 [ 235.955429][ T7745] FAULT_INJECTION: forcing a failure. [ 235.955429][ T7745] name failslab, interval 1, probability 0, space 0, times 0 [ 235.986433][ T7745] CPU: 1 UID: 0 PID: 7745 Comm: syz.0.502 Tainted: G L syzkaller #0 PREEMPT(full) [ 235.986465][ T7745] Tainted: [L]=SOFTLOCKUP [ 235.986471][ T7745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 235.986481][ T7745] Call Trace: [ 235.986488][ T7745] [ 235.986495][ T7745] dump_stack_lvl+0x189/0x250 [ 235.986519][ T7745] ? __pfx____ratelimit+0x10/0x10 [ 235.986542][ T7745] ? __pfx_dump_stack_lvl+0x10/0x10 [ 235.986561][ T7745] ? __pfx__printk+0x10/0x10 [ 235.986596][ T7745] should_fail_ex+0x414/0x560 [ 235.986620][ T7745] should_failslab+0xa8/0x100 [ 235.986642][ T7745] __kmalloc_cache_noprof+0x84/0x700 [ 235.986657][ T7745] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 235.986683][ T7745] ? sctp_add_bind_addr+0x8c/0x370 [ 235.986706][ T7745] sctp_add_bind_addr+0x8c/0x370 [ 235.986728][ T7745] sctp_copy_local_addr_list+0x30b/0x4e0 [ 235.986750][ T7745] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 235.986768][ T7745] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 235.986789][ T7745] ? sctp_v6_is_any+0x64/0x80 [ 235.986809][ T7745] ? sctp_copy_one_addr+0x93/0x360 [ 235.986830][ T7745] sctp_bind_addr_copy+0xb3/0x3c0 [ 235.986849][ T7745] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 235.986868][ T7745] sctp_connect_new_asoc+0x2e0/0x690 [ 235.986894][ T7745] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 235.986917][ T7745] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 235.986944][ T7745] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 235.986976][ T7745] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 235.987007][ T7745] ? sctp_endpoint_lookup_assoc+0x22f/0x260 [ 235.987032][ T7745] __sctp_connect+0x5b5/0xda0 [ 235.987057][ T7745] ? __local_bh_enable_ip+0x12d/0x1c0 [ 235.987079][ T7745] ? __pfx___sctp_connect+0x10/0x10 [ 235.987108][ T7745] sctp_inet_connect+0x12e/0x210 [ 235.987131][ T7745] __sys_connect+0x316/0x440 [ 235.987153][ T7745] ? __fget_files+0x3a0/0x420 [ 235.987174][ T7745] ? __pfx___sys_connect+0x10/0x10 [ 235.987206][ T7745] ? __pfx_ksys_write+0x10/0x10 [ 235.987225][ T7745] __x64_sys_connect+0x7a/0x90 [ 235.987249][ T7745] do_syscall_64+0xfa/0xf80 [ 235.987273][ T7745] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.987288][ T7745] ? clear_bhb_loop+0x60/0xb0 [ 235.987306][ T7745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.987321][ T7745] RIP: 0033:0x7f8c0f18f749 [ 235.987335][ T7745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.987349][ T7745] RSP: 002b:00007f8c10035038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 235.987365][ T7745] RAX: ffffffffffffffda RBX: 00007f8c0f3e5fa0 RCX: 00007f8c0f18f749 [ 235.987377][ T7745] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000004 [ 235.987387][ T7745] RBP: 00007f8c10035090 R08: 0000000000000000 R09: 0000000000000000 [ 235.987396][ T7745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 235.987405][ T7745] R13: 00007f8c0f3e6038 R14: 00007f8c0f3e5fa0 R15: 00007f8c0f50fa28 [ 235.987430][ T7745] [ 236.422059][ T43] usb 3-1: USB disconnect, device number 21 [ 237.950191][ T7781] tipc: Started in network mode [ 237.955744][ T7781] tipc: Node identity ac14140f, cluster identity 4711 [ 237.963571][ T7781] tipc: New replicast peer: 255.255.255.255 [ 237.970810][ T7781] tipc: Enabled bearer , priority 10 [ 237.980528][ T7781] netlink: 12 bytes leftover after parsing attributes in process `syz.4.511'. [ 237.989557][ T7781] tipc: Disabling bearer [ 238.827799][ T7785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.042187][ T7785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.536588][ T7792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.030831][ T7792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.576186][ T7797] can: request_module (can-proto-0) failed. [ 240.986324][ T7806] netlink: 8 bytes leftover after parsing attributes in process `syz.3.517'. [ 241.017070][ T7806] netlink: 4 bytes leftover after parsing attributes in process `syz.3.517'. [ 241.480189][ T7815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.510203][ T7815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.798600][ T7824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.810789][ T7824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.693061][ T7834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.711090][ T7834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.864937][ T7851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.873817][ T7851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.786582][ T7864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.809975][ T7864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.845397][ T7876] FAULT_INJECTION: forcing a failure. [ 245.845397][ T7876] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 245.895098][ T7876] CPU: 0 UID: 0 PID: 7876 Comm: syz.1.541 Tainted: G L syzkaller #0 PREEMPT(full) [ 245.895136][ T7876] Tainted: [L]=SOFTLOCKUP [ 245.895144][ T7876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 245.895165][ T7876] Call Trace: [ 245.895174][ T7876] [ 245.895184][ T7876] dump_stack_lvl+0x189/0x250 [ 245.895215][ T7876] ? __pfx____ratelimit+0x10/0x10 [ 245.895245][ T7876] ? __pfx_dump_stack_lvl+0x10/0x10 [ 245.895272][ T7876] ? __pfx__printk+0x10/0x10 [ 245.895305][ T7876] ? __might_fault+0xb0/0x130 [ 245.895348][ T7876] should_fail_ex+0x414/0x560 [ 245.895391][ T7876] _copy_from_user+0x2d/0xb0 [ 245.895414][ T7876] sctp_getsockopt_peer_auth_chunks+0xc2/0x5d0 [ 245.895447][ T7876] ? __pfx_sctp_getsockopt_peer_auth_chunks+0x10/0x10 [ 245.895488][ T7876] sctp_getsockopt+0x848/0xb90 [ 245.895517][ T7876] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 245.895548][ T7876] do_sock_getsockopt+0x2b4/0x3d0 [ 245.895571][ T7876] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 245.895591][ T7876] ? do_syscall_64+0x80/0xf80 [ 245.895623][ T7876] ? __fget_files+0x2a/0x420 [ 245.895649][ T7876] ? __fget_files+0x3a0/0x420 [ 245.895674][ T7876] ? __fget_files+0x2a/0x420 [ 245.895710][ T7876] __x64_sys_getsockopt+0x1a5/0x250 [ 245.895730][ T7876] ? do_syscall_64+0x80/0xf80 [ 245.895763][ T7876] ? do_syscall_64+0x80/0xf80 [ 245.895799][ T7876] do_syscall_64+0xfa/0xf80 [ 245.895832][ T7876] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.895854][ T7876] ? clear_bhb_loop+0x60/0xb0 [ 245.895881][ T7876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.895902][ T7876] RIP: 0033:0x7f2ba338f749 [ 245.895931][ T7876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.895954][ T7876] RSP: 002b:00007f2ba42a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 245.895977][ T7876] RAX: ffffffffffffffda RBX: 00007f2ba35e5fa0 RCX: 00007f2ba338f749 [ 245.895994][ T7876] RDX: 000000000000001a RSI: 0000000000000084 RDI: 0000000000000003 [ 245.896007][ T7876] RBP: 00007f2ba42a7090 R08: 0000200000001040 R09: 0000000000000000 [ 245.896021][ T7876] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.896035][ T7876] R13: 00007f2ba35e6038 R14: 00007f2ba35e5fa0 R15: 00007f2ba370fa28 [ 245.896071][ T7876] [ 247.294689][ T7880] syzkaller0: entered promiscuous mode [ 247.390557][ T7880] syzkaller0: entered allmulticast mode [ 247.931809][ T7900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.941121][ T7900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.500426][ T5951] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 248.652286][ T5951] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 248.667850][ T5951] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 248.726297][ T5951] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 248.805191][ T5951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 248.832809][ T5951] usb 3-1: SerialNumber: syz [ 249.073865][ T5951] usb 3-1: USB disconnect, device number 22 [ 249.559630][ T7929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.571470][ T7929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.831635][ T7933] usb usb7: usbfs: process 7933 (syz.2.556) did not claim interface 2 before use [ 250.781084][ T7956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.809994][ T7956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.568835][ T7967] binder_alloc: 7965: pid 7965 spamming oneway? 1 buffers allocated for a total size of 4096 [ 251.690573][ T5951] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 251.842439][ T5951] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 251.876483][ T5951] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 251.900119][ T5951] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 251.934102][ T5951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 251.951305][ T5951] usb 3-1: SerialNumber: syz [ 252.102167][ T7978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.133856][ T7978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.204263][ T5951] usb 3-1: USB disconnect, device number 23 [ 252.646254][ T7983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.687428][ T7983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.271215][ T8014] netlink: 12 bytes leftover after parsing attributes in process `syz.0.580'. [ 254.576742][ T8022] Invalid logical block size (7) [ 255.133585][ T5926] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 255.332494][ T5926] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 255.343640][ T5926] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 255.475922][ T5926] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 255.491302][ T5926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 255.499512][ T5926] usb 3-1: SerialNumber: syz [ 255.733312][ T5926] usb 3-1: USB disconnect, device number 24 [ 256.193414][ T8039] fuse: Bad value for 'fd' [ 256.372512][ T8044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.388689][ T8044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.427024][ T8045] syzkaller1: entered promiscuous mode [ 256.431964][ T8044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.443642][ T8045] syzkaller1: entered allmulticast mode [ 256.478544][ T8044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.491044][ T8045] qrtr: Invalid version 0 [ 256.524442][ T8044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.565252][ T8044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.645377][ T8054] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 256.657484][ T8054] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 256.707095][ T8056] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 256.716999][ T8056] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 256.732123][ T8056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.742175][ T8056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.778181][ T8060] netlink: 'syz.1.592': attribute type 27 has an invalid length. [ 256.806531][ T8060] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 256.814520][ T8060] ipip0: left promiscuous mode [ 256.819353][ T8060] ipip0: left allmulticast mode [ 256.924113][ T8062] netlink: 4 bytes leftover after parsing attributes in process `syz.1.593'. [ 256.934765][ T8062] netlink: 12 bytes leftover after parsing attributes in process `syz.1.593'. [ 257.221726][ T8070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.594'. [ 257.304418][ T8069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.341802][ T8069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.413856][ T8074] netlink: 32 bytes leftover after parsing attributes in process `syz.3.596'. [ 257.469560][ T8074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.483658][ T8074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.500648][ T8074] loop6: detected capacity change from 0 to 524288000 [ 257.572006][ T8074] support for the xor transformation has been removed. [ 258.104224][ T8079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.138584][ T8079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.220190][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 259.220211][ T30] audit: type=1800 audit(1765671777.893:48): pid=8100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.605" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 259.929804][ T8107] netlink: 4 bytes leftover after parsing attributes in process `syz.4.607'. [ 259.981012][ T8107] netlink: 12 bytes leftover after parsing attributes in process `syz.4.607'. [ 260.530884][ T8116] netlink: 12 bytes leftover after parsing attributes in process `syz.1.609'. [ 260.542251][ T8116] netlink: 'syz.1.609': attribute type 13 has an invalid length. [ 260.551409][ T8116] gretap0: refused to change device tx_queue_len [ 260.557901][ T8116] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 261.049587][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.058797][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.302145][ T8129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.342487][ T8129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.699018][ T8139] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 261.709329][ T8139] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 262.116428][ T5951] IPVS: starting estimator thread 0... [ 262.210437][ T8144] IPVS: using max 36 ests per chain, 86400 per kthread [ 262.615619][ T8151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.620'. [ 263.111692][ T8164] netlink: 4 bytes leftover after parsing attributes in process `syz.1.625'. [ 263.138688][ T8164] netlink: 12 bytes leftover after parsing attributes in process `syz.1.625'. [ 263.581101][ T5951] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 263.612201][ T8176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.622195][ T8176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.720369][ T5951] usb 3-1: device descriptor read/64, error -71 [ 263.930542][ T8185] netlink: 12 bytes leftover after parsing attributes in process `syz.3.631'. [ 263.941050][ T8185] netlink: 'syz.3.631': attribute type 13 has an invalid length. [ 263.949241][ T8185] gretap0: refused to change device tx_queue_len [ 263.955765][ T8185] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 263.980441][ T5951] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 264.292042][ T30] audit: type=1400 audit(1765671782.973:49): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=2626200D28 pid=8181 comm="syz.1.632" [ 264.390401][ T5951] usb 3-1: device descriptor read/64, error -71 [ 264.500766][ T5951] usb usb3-port1: attempt power cycle [ 264.840499][ T5951] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 264.889331][ T30] audit: type=1400 audit(1765671783.553:50): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=2626200D28 pid=8187 comm="syz.0.633" [ 264.937939][ T5951] usb 3-1: device descriptor read/8, error -71 [ 265.101345][ T8196] netlink: 52 bytes leftover after parsing attributes in process `syz.4.637'. [ 265.210694][ T5951] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 265.253002][ T5951] usb 3-1: device descriptor read/8, error -71 [ 265.360848][ T5951] usb usb3-port1: unable to enumerate USB device [ 265.686959][ T8200] fuse: blksize only supported for fuseblk [ 265.859755][ T8204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.912129][ T8204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.925571][ T8204] FAULT_INJECTION: forcing a failure. [ 265.925571][ T8204] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 265.939000][ T8204] CPU: 0 UID: 0 PID: 8204 Comm: syz.3.639 Tainted: G L syzkaller #0 PREEMPT(full) [ 265.939032][ T8204] Tainted: [L]=SOFTLOCKUP [ 265.939037][ T8204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 265.939047][ T8204] Call Trace: [ 265.939054][ T8204] [ 265.939061][ T8204] dump_stack_lvl+0x189/0x250 [ 265.939085][ T8204] ? __pfx____ratelimit+0x10/0x10 [ 265.939108][ T8204] ? __pfx_dump_stack_lvl+0x10/0x10 [ 265.939126][ T8204] ? __pfx__printk+0x10/0x10 [ 265.939159][ T8204] should_fail_ex+0x414/0x560 [ 265.939184][ T8204] _copy_from_user+0x2d/0xb0 [ 265.939200][ T8204] __copy_msghdr+0x3c5/0x5b0 [ 265.939219][ T8204] ___sys_sendmsg+0x1a5/0x2a0 [ 265.939236][ T8204] ? __pfx____sys_sendmsg+0x10/0x10 [ 265.939256][ T8204] ? rcu_read_lock_any_held+0xb3/0x120 [ 265.939299][ T8204] ? __fget_files+0x2a/0x420 [ 265.939319][ T8204] ? __fget_files+0x3a0/0x420 [ 265.939346][ T8204] __x64_sys_sendmsg+0x19b/0x260 [ 265.939363][ T8204] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 265.939394][ T8204] ? __pfx_ksys_write+0x10/0x10 [ 265.939413][ T8204] ? arch_syscall_is_vdso_sigreturn+0x120/0x1a0 [ 265.939449][ T8204] ? syscall_user_dispatch+0x4f/0x90 [ 265.939480][ T8204] do_syscall_64+0xfa/0xf80 [ 265.939514][ T8204] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.939530][ T8204] ? clear_bhb_loop+0x60/0xb0 [ 265.939548][ T8204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.939563][ T8204] RIP: 0033:0x7ff56c58f749 [ 265.939578][ T8204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.939592][ T8204] RSP: 002b:00007ff56d3c8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 265.939609][ T8204] RAX: ffffffffffffffda RBX: 00007ff56c7e5fa0 RCX: 00007ff56c58f749 [ 265.939621][ T8204] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000006 [ 265.939630][ T8204] RBP: 00007ff56d3c8090 R08: 0000000000000000 R09: 0000000000000000 [ 265.939640][ T8204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.939650][ T8204] R13: 00007ff56c7e6038 R14: 00007ff56c7e5fa0 R15: 00007ff56c90fa28 [ 265.939674][ T8204] [ 266.423654][ T8206] fuse: Bad value for 'group_id' [ 266.428741][ T8206] fuse: Bad value for 'group_id' [ 266.442094][ T8206] netlink: 8 bytes leftover after parsing attributes in process `syz.4.640'. [ 266.472360][ T8206] netlink: 12 bytes leftover after parsing attributes in process `syz.4.640'. [ 266.801170][ T31] INFO: task kworker/0:8:6020 blocked for more than 143 seconds. [ 266.844475][ T31] Tainted: G L syzkaller #0 [ 266.852244][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 266.861637][ T31] task:kworker/0:8 state:D stack:21552 pid:6020 tgid:6020 ppid:2 task_flags:0x4288060 flags:0x00080000 [ 266.876869][ T31] Workqueue: usb_hub_wq hub_event [ 266.884626][ T31] Call Trace: [ 266.888146][ T31] [ 266.893606][ T31] __schedule+0x14bc/0x5000 [ 266.898463][ T31] ? __pfx___schedule+0x10/0x10 [ 266.905048][ T31] ? schedule+0x91/0x360 [ 266.909537][ T31] schedule+0x165/0x360 [ 266.925405][ T31] schedule_timeout+0x9a/0x270 [ 266.940513][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 266.959783][ T8217] Invalid logical block size (1048576) [ 267.030804][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 267.044918][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 267.050878][ T31] ? wait_for_completion+0x267/0x5d0 [ 267.056423][ T31] wait_for_completion+0x2bf/0x5d0 [ 267.079741][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 267.104519][ T31] i2c_del_adapter+0x591/0x760 [ 267.124946][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 267.131719][ T31] ? rcu_is_watching+0x15/0xb0 [ 267.137885][ T31] ? dvb_usb_adapter_exit+0xd7/0x240 [ 267.149470][ T31] ? kfree+0x4d/0x660 [ 267.159217][ T31] dvb_usb_i2c_exit+0x64/0xb0 [ 267.165200][ T31] dvb_usb_device_exit+0x1be/0x350 [ 267.171163][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 267.176656][ T31] ? __pfx_dvb_usb_device_exit+0x10/0x10 [ 267.183248][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 267.196822][ T31] ? usb_disable_interface+0x31d/0x350 [ 267.219533][ T31] usb_unbind_interface+0x26e/0x910 [ 267.234442][ T31] ? __pfx_usb_unbind_interface+0x10/0x10 [ 267.242362][ T31] device_release_driver_internal+0x4d9/0x800 [ 267.248625][ T31] bus_remove_device+0x34d/0x440 [ 267.254064][ T31] device_del+0x511/0x8e0 [ 267.258551][ T31] ? __pm_runtime_barrier+0x212/0x460 [ 267.264446][ T31] ? __pfx_device_del+0x10/0x10 [ 267.269428][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 267.274927][ T31] usb_disable_device+0x3d4/0x8e0 [ 267.280169][ T31] usb_disconnect+0x32f/0x990 [ 267.286975][ T31] hub_event+0x1ca9/0x4ef0 [ 267.291768][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 267.298257][ T31] ? __pfx_hub_event+0x10/0x10 [ 267.304139][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 267.339437][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 267.349813][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 267.363585][ T31] ? process_scheduled_works+0x9ef/0x1770 [ 267.369407][ T31] process_scheduled_works+0xad1/0x1770 [ 267.390368][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 267.396604][ T31] worker_thread+0x8a0/0xda0 [ 267.411397][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 267.417813][ T31] ? __kthread_parkme+0x7b/0x200 [ 267.440343][ T31] kthread+0x711/0x8a0 [ 267.444493][ T31] ? __pfx_worker_thread+0x10/0x10 [ 267.460324][ T31] ? __pfx_kthread+0x10/0x10 [ 267.465038][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 267.474626][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 267.484900][ T31] ? __pfx_kthread+0x10/0x10 [ 267.505217][ T31] ret_from_fork+0x599/0xb30 [ 267.517872][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 267.525081][ T31] ? __switch_to_asm+0x39/0x70 [ 267.530378][ T31] ? __switch_to_asm+0x33/0x70 [ 267.535990][ T31] ? __pfx_kthread+0x10/0x10 [ 267.541759][ T31] ret_from_fork_asm+0x1a/0x30 [ 267.549313][ T31] [ 267.553822][ T31] [ 267.553822][ T31] Showing all locks held in the system: [ 267.562697][ T31] 1 lock held by khungtaskd/31: [ 267.567583][ T31] #0: ffffffff8df419e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 267.578801][ T31] 5 locks held by kworker/u8:4/75: [ 267.584244][ T31] 3 locks held by kworker/u8:8/1327: [ 267.590762][ T31] #0: ffff8880b863a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 267.606487][ T31] #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 267.618761][ T31] #2: ffff888055e48788 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x450 [ 267.628981][ T31] 1 lock held by klogd/5190: [ 267.634558][ T31] #0: ffff8880b863a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 267.650433][ T31] 2 locks held by getty/5591: [ 267.655698][ T31] #0: ffff88802fbbc0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 267.665624][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460 [ 267.677087][ T31] 1 lock held by syz-executor/5819: [ 267.683531][ T31] #0: ffff8880b863a918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 267.695180][ T31] 5 locks held by kworker/0:8/6020: [ 267.701571][ T31] #0: ffff8881422a7148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 267.714208][ T31] #1: ffffc90004cd7b80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 267.733180][ T31] #2: ffff888143776198 (&dev->mutex){....}-{4:4}, at: hub_event+0x187/0x4ef0 [ 267.742214][ T31] #3: ffff88802413c198 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xf8/0x990 [ 267.751468][ T31] #4: ffff888024138160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x800 [ 267.762328][ T31] [ 267.764683][ T31] ============================================= [ 267.764683][ T31] [ 267.773207][ T31] NMI backtrace for cpu 1 [ 267.773229][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 267.773259][ T31] Tainted: [L]=SOFTLOCKUP [ 267.773268][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 267.773281][ T31] Call Trace: [ 267.773289][ T31] [ 267.773298][ T31] dump_stack_lvl+0x189/0x250 [ 267.773332][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 267.773360][ T31] ? __pfx__printk+0x10/0x10 [ 267.773405][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 267.773434][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 267.773462][ T31] ? __pfx__printk+0x10/0x10 [ 267.773499][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 267.773537][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 267.773567][ T31] sys_info+0x135/0x170 [ 267.773588][ T31] watchdog+0xf95/0xfe0 [ 267.773625][ T31] ? watchdog+0x20a/0xfe0 [ 267.773663][ T31] kthread+0x711/0x8a0 [ 267.773695][ T31] ? __pfx_watchdog+0x10/0x10 [ 267.773724][ T31] ? __pfx_kthread+0x10/0x10 [ 267.773755][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 267.773783][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 267.773813][ T31] ? __pfx_kthread+0x10/0x10 [ 267.773843][ T31] ret_from_fork+0x599/0xb30 [ 267.773875][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 267.773907][ T31] ? __switch_to_asm+0x39/0x70 [ 267.773935][ T31] ? __switch_to_asm+0x33/0x70 [ 267.773963][ T31] ? __pfx_kthread+0x10/0x10 [ 267.773993][ T31] ret_from_fork_asm+0x1a/0x30 [ 267.774040][ T31] [ 267.774048][ T31] Sending NMI from CPU 1 to CPUs 0: [ 267.936871][ C0] NMI backtrace for cpu 0 [ 267.936898][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 267.936927][ C0] Tainted: [L]=SOFTLOCKUP [ 267.936934][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 267.936945][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 267.936977][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 00 0d 00 f3 0f 1e fa fb f4 c8 ed 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 267.936993][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 267.937010][ C0] RAX: d2918e5bdc83d500 RBX: ffffffff81978eba RCX: d2918e5bdc83d500 [ 267.937024][ C0] RDX: 0000000000000001 RSI: ffffffff8d790513 RDI: ffffffff8bc07be0 [ 267.937038][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b86336db R09: 1ffff110170c66db [ 267.937052][ C0] R10: dffffc0000000000 R11: ffffed10170c66dc R12: ffffffff8f81fb70 [ 267.937065][ C0] R13: 1ffffffff1b92a68 R14: 0000000000000000 R15: 0000000000000000 [ 267.937078][ C0] FS: 0000000000000000(0000) GS:ffff888125e3a000(0000) knlGS:0000000000000000 [ 267.937092][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 267.937105][ C0] CR2: 0000200000404030 CR3: 0000000075bd0000 CR4: 00000000003526f0 [ 267.937121][ C0] Call Trace: [ 267.937129][ C0] [ 267.937136][ C0] default_idle+0x13/0x20 [ 267.937154][ C0] default_idle_call+0x73/0xb0 [ 267.937173][ C0] do_idle+0x1ea/0x520 [ 267.937192][ C0] ? asm_sysvec_call_function_single+0x1a/0x20 [ 267.937216][ C0] ? __pfx_do_idle+0x10/0x10 [ 267.937240][ C0] ? do_idle+0x4f5/0x520 [ 267.937261][ C0] cpu_startup_entry+0x44/0x60 [ 267.937282][ C0] rest_init+0x2de/0x300 [ 267.937302][ C0] start_kernel+0x3a7/0x400 [ 267.937324][ C0] x86_64_start_reservations+0x24/0x30 [ 267.937352][ C0] x86_64_start_kernel+0x143/0x1c0 [ 267.937378][ C0] common_startup_64+0x13e/0x147 [ 267.937410][ C0] [ 268.135145][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 268.142010][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 268.152699][ T31] Tainted: [L]=SOFTLOCKUP [ 268.157053][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 268.167141][ T31] Call Trace: [ 268.170437][ T31] [ 268.173388][ T31] dump_stack_lvl+0x99/0x250 [ 268.177998][ T31] ? __asan_memcpy+0x40/0x70 [ 268.182600][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 268.187826][ T31] ? __pfx__printk+0x10/0x10 [ 268.192443][ T31] vpanic+0x237/0x6d0 [ 268.196441][ T31] ? __pfx_vpanic+0x10/0x10 [ 268.200968][ T31] ? preempt_schedule_common+0x83/0xd0 [ 268.206461][ T31] panic+0xb9/0xc0 [ 268.210193][ T31] ? __pfx_panic+0x10/0x10 [ 268.214624][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 268.220012][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 268.226184][ T31] watchdog+0xfdf/0xfe0 [ 268.230368][ T31] ? watchdog+0x20a/0xfe0 [ 268.234738][ T31] kthread+0x711/0x8a0 [ 268.238855][ T31] ? __pfx_watchdog+0x10/0x10 [ 268.243560][ T31] ? __pfx_kthread+0x10/0x10 [ 268.248175][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 268.253475][ T31] ? lockdep_hardirqs_on+0x98/0x140 [ 268.258689][ T31] ? __pfx_kthread+0x10/0x10 [ 268.263303][ T31] ret_from_fork+0x599/0xb30 [ 268.267906][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 268.273039][ T31] ? __switch_to_asm+0x39/0x70 [ 268.277821][ T31] ? __switch_to_asm+0x33/0x70 [ 268.282612][ T31] ? __pfx_kthread+0x10/0x10 [ 268.287218][ T31] ret_from_fork_asm+0x1a/0x30 [ 268.292015][ T31] [ 268.295383][ T31] Kernel Offset: disabled [ 268.299711][ T31] Rebooting in 86400 seconds..