last executing test programs: 1m27.74067651s ago: executing program 1 (id=4383): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00031e0000000403"], &(0x7f0000000180)=ANY=[@ANYBLOB="000f82000000050f8200030710021a7602000a1003020b0001d8f4ff6c1003288baa2af1283279f2102f96fe5bd2a102e210686284d3ec03d07c5a6c0c715a36e93f82bb1c3533d684a7426a14b40824a084b31760a1a700334fc1a4043dcb04a0cb83ba6e0f5a194d6e88e6f0b9fb1030d1cbd8cf1d920077e88ae2e172ccf1ee1947201fecff1193"], 0x0, 0x0}, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) getsockopt(r1, 0xff, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r2) syz_usb_disconnect(r0) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r4 = fsopen(&(0x7f00000000c0)='ntfs3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xa3, &(0x7f0000000280)=ANY=[]) 1m24.672998279s ago: executing program 1 (id=4402): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc02000000000000000000003c0000000000000000000000000000000000000000000003000000000200002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000000000000000000000000000000000001d00000000000000000000000000000000000000000000000000000000000000dd020000000000000000000000000000000000000000000084010500ac14143b000000000000000000000000000000002b00000000000000ac14140c000000000000000000000000000000000000ff00000000000000000000000000fc02000000000000000000000000000100000000320000000000000000000000000000000000000000000000023500000000000000000000000000000000000000000000000000000000000000000001000000003c"], 0x23c}}, 0x0) 1m24.524633152s ago: executing program 1 (id=4404): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001140)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3e0, 0xe8, 0x0, 0x1b0, 0x1b0, 0x1b0, 0x410, 0x410, 0x410, 0x410, 0x410, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x21, 0xda, 0x1}}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x800, 0xb, @multicast1, 0x4e23}}}, {{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x0, 0xe801}}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x4, 0x22, @ipv6=@private1, 0x4e23}}}, {{@uncond, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x9, 0x2, @ipv6=@dev={0xfe, 0x80, '\x00', 0x21}, 0x4e22}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f6c4a249d66066a9b10184b0e9791995204aad03e768fdca588cc884cd63"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440) 1m24.518876121s ago: executing program 1 (id=4405): syz_emit_ethernet(0x76, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a8435"], 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)="180c45", 0x3) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x4c, 0x4, 0x8, 0x802, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4890}, 0x880) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00000900", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c55080000000c547d03d8a0f4bd00", [0x0, 0x6]}}) 1m24.272407246s ago: executing program 1 (id=4409): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0xfffffffffffffffe}) mprotect(&(0x7f0000d7d000/0x3000)=nil, 0x3000, 0x2000003) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) ioctl$TCSETS(0xffffffffffffffff, 0x545c, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) (async) landlock_restrict_self(0xffffffffffffffff, 0xc) timer_create(0x0, 0x0, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) (async) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) (async) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r2 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) timer_create(0x4, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) (async) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x406, r3) read$FUSE(r4, &(0x7f0000002480)={0x2020}, 0x2020) write$tun(r4, &(0x7f0000000400)=ANY=[], 0xa2) (async) write$tun(r4, &(0x7f0000000400)=ANY=[], 0xa2) creat(0x0, 0xd931d3864d39dcca) (async) creat(0x0, 0xd931d3864d39dcca) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) ioctl$XFS_IOC_COMMIT_RANGE(r4, 0x40585883, &(0x7f0000000100)={r1, 0x0, 0x100000001, 0xfff, 0x2a, 0x8, [0x5, 0x9, 0xffff, 0x566f, 0x7, 0x7fff]}) 1m24.064709883s ago: executing program 1 (id=4410): syz_emit_ethernet(0x32, &(0x7f0000000300)={@multicast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x4, 0x4e25, 0x10, 0x0, @opaque="403ad9366bb63620"}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000680)=ANY=[@ANYBLOB="0180c2000002bbbbbbbbbbbb08004500001c000040020011907800000000000000004e240000000890781db6acecf5ef958750b045babc7cbf91eb7b5d6afe941620323af97c10a2279601beff30f17ed187cb09dc81169751662753155e90524297d961d3ca574db4c82e6c5138fc725441b19605a7a0c9958ca6a6e8e2552c228ee45295dd92e4c157b9ec3eff031facd2e1d74e578e9a5172d8adf145d7b2338db9bce4f8540a9c2b94173fc3fb7c25ce7140346fcea5c82417fd028037f59f702a18530340307f4d0e02f40ac54e84bb686b7af1bf2dda7c9eaa0bb8afc4cf908118a8ee423a23383b9075b10685a5ae512faf7021840fe1f83dd5bf703a7747e958569a548563"], 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = syz_usb_connect(0x2, 0x3f, &(0x7f00000015c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @random="5fb04fe346d2"}) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000001580)={0x34, &(0x7f0000000100)=ANY=[@ANYRES16=r3], 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000240)={0x0, 0x6, 0xf, 0x400, 0x8, 0x1, 0x0, 0x81, {0x0, @in={{0x2, 0x4e24, @loopback}}, 0x6, 0x1bae2b84, 0x101, 0x527a, 0x9}}, &(0x7f0000000300)=0xb0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000340)={r6, 0xe}, &(0x7f0000000380)=0x8) write$char_usb(r4, &(0x7f0000000480)='\x00', 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) select(0x2a, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0x1, 0x2, 0x300}, &(0x7f0000000440)={0x0, 0x2710}) r9 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r9, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002ac0)=""/84, 0x54}, 0x4}], 0x1, 0x40, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000080)) dup(r5) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x12c, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3629ff075475e4bd6e43be1712bf8b4dc", 0x20) 1m8.998802788s ago: executing program 32 (id=4410): syz_emit_ethernet(0x32, &(0x7f0000000300)={@multicast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x4, 0x4e25, 0x10, 0x0, @opaque="403ad9366bb63620"}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = syz_usb_connect(0x2, 0x3f, &(0x7f00000015c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @random="5fb04fe346d2"}) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000001580)={0x34, &(0x7f0000000100)=ANY=[@ANYRES16=r3], 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000240)={0x0, 0x6, 0xf, 0x400, 0x8, 0x1, 0x0, 0x81, {0x0, @in={{0x2, 0x4e24, @loopback}}, 0x6, 0x1bae2b84, 0x101, 0x527a, 0x9}}, &(0x7f0000000300)=0xb0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000340)={r6, 0xe}, &(0x7f0000000380)=0x8) write$char_usb(r4, &(0x7f0000000480)='\x00', 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) select(0x2a, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0x1, 0x2, 0x300}, &(0x7f0000000440)={0x0, 0x2710}) r9 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r9, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002ac0)=""/84, 0x54}, 0x4}], 0x1, 0x40, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000080)) dup(r5) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x12c, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3629ff075475e4bd6e43be1712bf8b4dc", 0x20) 9.129466182s ago: executing program 2 (id=4933): syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r0, 0xe) accept$unix(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x600202, 0x0) ioctl$PPPIOCSNPMODE(r1, 0x4008744b, &(0x7f0000000100)={0x21}) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$VIDIOC_ENUMOUTPUT(r2, 0xc0485630, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x16}, @hci_ev_le_advertising_info={{}, {0x2, [{0x1, 0x2, @none, 0x0, "", 0x7}, {0x4, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x0, "", 0x6}]}}}}, 0x19) set_mempolicy(0x4005, &(0x7f0000000000)=0x1, 0x4) r3 = socket(0x10, 0x3, 0x2) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) rseq(&(0x7f0000000280), 0x20, 0x0, 0x0) userfaultfd(0xc0400) ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$TCSETS(r4, 0x545c, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, "43e6323cce19dc42a867c4e745c80552a700"}) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMSET(r5, 0x5418, &(0x7f0000000000)=0x8001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x34, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0xf3c4}, @TCA_FQ_CODEL_FLOWS={0xc, 0x5, 0xffffffff}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x6}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8}, @TCA_FQ_CODEL_ECN={0x8}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1e, 0x2, 0x3, 0x9, 0x2, 0xffffffff, 0x3}}, {0x4}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x800}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000280)=[@ioring_restriction_register_op], 0x1) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 8.315387664s ago: executing program 2 (id=4946): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_io_uring_setup(0x5d99, 0x0, &(0x7f0000000140), 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x8001, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x800, 0x807, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0xe6}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@remote, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe8) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000006000a0060"], 0xb8}}, 0x20040014) 8.060491963s ago: executing program 2 (id=4947): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x3, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}]}}}]}, 0x50}}, 0x0) 8.032843004s ago: executing program 2 (id=4949): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x81, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRES16=r0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00']) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000004c0), 0x200183, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0x70bd28, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x7, 0xffff, 0xfffffffffffffff9, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0xa, 0xfffffffffffffffe}, {0xfffffffe, 0xfffffffc, 0x8}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0x40000000000084, 0x9, 0x5f}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x80, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x844) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mq_notify(r4, 0x0) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="d800000000000000f9ffffffffffffff00000000000000000200000000000000020000000000000000010000000000000200010008000000060000000000000009000000000000000200000000000000ff0000000000008003000000000000000000000000000000ffffff7f58000000030000000060000009000000", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="010000000400000000000000000000000000200037050000000000002b000000f60000003a2d285cc9800072c4bee9996df38cd86d4d928d14d3a461b60245898556c20600000000002b133b0800000000000000"], 0x0, 0x0, 0x0}) getdents64(r7, &(0x7f0000000100)=""/134, 0x86) getdents64(r7, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f000000a3c0)="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", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="10002000e6ff04000000000000000400"], 0x0, 0x0, 0x0, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x5}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}}, 0x4c840) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xfff3, 0xfff3}, {0x0, 0xfff3}, {0x2, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @local}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041010}, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r10, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r11 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r11, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0\x00') pivot_root(&(0x7f0000000400)='./file0/../file0/../file0/../file0\x00', &(0x7f00000003c0)='./file0\x00') 7.957117838s ago: executing program 3 (id=4951): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x1c3001) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000180)=[r5, r5], 0x2, r3, r4, 0x3, 0x0, 0xffffffff, 0x804, {0xac7c, 0x1, 0x3, 0x58, 0xf4b, 0x1, 0x2, 0x5, 0x412e, 0xe154, 0x1000, 0x7f, 0x1, 0xffffffff, "fe1d00003413000000000020b42717e47f00000000000000000000dd00"}}) 7.791884861s ago: executing program 3 (id=4953): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = gettid() (async, rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x0) (async) tkill(r1, 0x8) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000040)={0x10000, 0xe1d, {r1}, {0xee01}, 0x5, 0x8}) fcntl$lock(r0, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0xe, 0x73e9, r3}) (async) syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0xfffc, 0x0, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x2, 0x1, 0x0, [{@remote, 0x5}]}, @cipso={0x86, 0x31, 0x3, [{0x6, 0x12, "bbceafad251a3932592059b156a5f057"}, {0x0, 0x2}, {0x2, 0xf, "d109567cb50ec760777fb80755"}, {0x5, 0x6, "c92d3002"}, {0x5, 0x2}]}]}}}}}}}, 0x0) (async) r4 = socket$kcm(0x2, 0x5, 0x84) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x7c, &(0x7f0000000000)=r5, 0x62) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x0, 0xc2, 0xe, 0xd, 0x30, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xe10, 0x700, 0x401, 0xf6a}}) (async) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r5) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r8, 0x120, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) (async, rerun: 32) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="d8000000180008002dbd7000fddbdf2502202005ff03000600250000080006007900000006001c004e21000008000b0000000000080007000a01010008000300", @ANYRES32=r7, @ANYBLOB="0c00090006002404", @ANYRES32=r7, @ANYBLOB="700008808f04be6336757003e39de96b5a670e3c27b0ed400df173f2624fab4052ec28a9fbabd03ac5581f7264f07b25f2aae09d56b6e78d313bf9cfd61a0805b02eda4e77fecb35dbb608d24f2b8cc133a3864afbf30e56452da9d3ba5f230cad9f48e2a769d1060d675791c61fc25ac4fea3c7709a70765bfb2deb36823c7c08000f00df090000080002006401010006001c004e200000"], 0xd8}, 0x1, 0x0, 0x0, 0x4008010}, 0x18040) (rerun: 32) 7.035496652s ago: executing program 2 (id=4955): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a0302000200000000000002000000090002"], 0x80}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000100010000000900010073797a30000000100900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10) openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) sendmmsg$inet(r1, 0x0, 0x0, 0x20046014) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket(0x40000000015, 0x5, 0x0) sendmmsg$inet6(r3, &(0x7f0000000800)=[{{&(0x7f0000000200)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff}}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x28}}], 0x1, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, 0x0, 0x58) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) 6.758076799s ago: executing program 2 (id=4958): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f1400000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec001210000140090c0c00bdad446b9bbc7a46e39882a5dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0xff0f0000}, 0x8080) openat$uinput(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc00e}, 0x12000) 6.325132231s ago: executing program 33 (id=4958): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f1400000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec001210000140090c0c00bdad446b9bbc7a46e39882a5dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0xff0f0000}, 0x8080) openat$uinput(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc00e}, 0x12000) 6.024280098s ago: executing program 5 (id=4962): madvise(&(0x7f00007fb000/0x1000)=nil, 0x1000, 0x18) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008}, 0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0x40000400004, &(0x7f0000000040)) r0 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000b1f000/0xf000)=nil, &(0x7f0000f4a000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fbc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00008f7000/0x1000)=nil, &(0x7f00004d9000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x2405a045) (async) r1 = io_uring_setup(0x7bc1, &(0x7f0000000640)={0x0, 0x4898, 0x2, 0x6, 0x7b}) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={r0, 0x20, &(0x7f00000004c0)={&(0x7f0000000300)=""/234, 0xea, 0x0, &(0x7f0000000400)=""/177, 0xb1}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) (async) r3 = socket(0x1d, 0x80802, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000380)={0x1d, r4, 0x1, {0x0, 0xf0, 0x3}, 0xfe}, 0x18) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000540)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x35}, 0x4e22, 0x4, 0x4e20, 0xfff, 0xa, 0xa0, 0x80, 0xff, r4, r5}, {0x0, 0x3, 0x8, 0x5, 0x4, 0x7ff, 0x9, 0xfffffffffffffff7}, {0x6, 0x9, 0x1, 0x8214}, 0x20, 0x6e6bb1, 0x1, 0x0, 0x3, 0x1}, {{@in=@remote, 0x4d6, 0x6}, 0x2, @in=@loopback, 0x34ff, 0x2, 0x1, 0x2, 0x401, 0x40, 0xa56}}, 0xe8) (async) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000040)={[0x4]}, 0x8) (async) r6 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) (async) ioctl$FE_SET_PROPERTY(0xffffffffffffffff, 0x40106f52, &(0x7f0000000180)={0x3e, 0x0}) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000002940)=ANY=[@ANYBLOB="12019d9d930fba4c2be20c01000000000001090224000800005000090400e3090300010009210000000122290009058103000000fce9"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) (async) syz_usb_control_io(r7, &(0x7f00000002c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="9e1b6c"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) mkdirat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x108) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'veth0_to_hsr\x00', 0x0}) (async) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) r8 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001964d408861a92e03f530102030109022400010200100309041f0202e917f300090502020002020000090582020002"], 0x0) syz_usb_control_io$cdc_ecm(r8, 0x0, 0x0) (async) syz_usb_control_io$sierra_net(r8, 0x0, &(0x7f0000001040)={0x1c, &(0x7f0000000b80)=ANY=[@ANYBLOB="20173b"], 0x0, 0x0}) 6.023985618s ago: executing program 3 (id=4963): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f0000000200)={0x1d, r6}, 0x10) sendmsg$can_bcm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=r7, @ANYRES64=r6, @ANYRES64=r5, @ANYBLOB="3bf81b"], 0x20000600}}, 0x0) sendmsg$sock(r7, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x5, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8}]}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000700"/20, @ANYRES32=0x0, @ANYBLOB="04010100010a0000140003007866726d30000000000000000000000008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x20000000}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000ffdbdf250100000000000000014100000018001700010000000000006574683a7465616d30000000eeb44147e1eacef687acb7db9c239a9b149db6ef946e78b647cd292bec3a5a6ef3af6c55f05c2dccebfe94d30cd00a71d9dcfa8d2d09ab15c58683183c8f8d3e70a9c279d89bb2f9915d3bbbf293d933120eb419b8f954b4f345da49e8647c62716198a55777cb55fa"], 0x34}}, 0x2800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8923, &(0x7f0000000480)={'lo\x00', @local}) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) socket$key(0xf, 0x3, 0x2) 5.048472193s ago: executing program 0 (id=4970): r0 = socket$nl_route(0x10, 0x3, 0x0) clock_nanosleep(0x7, 0x1, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f00000000c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'hsr0\x00', 0x0}) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r3, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x400008a, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, 0x0, 0x20800) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) sendmsg$key(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="a8c1587e733dbd13601b5bef8897742c59448702406d35c08387557c258ecb993a31fbe42c9924a9cde9a9466f3a940200000000000000fd46d8a839f641bc3dd3959a4177ae5877c95b378cd9a886d1e14ad886e144900d834a9c4f0929469386a858f84404cd2c84cca9e0ebe4f32c5b94b28b071ee4561b8bd916080152e251a0f6d0806b8bab59ce08e22c4e68f04ba32b76f73b8f0eda5f32fdef6d33d29f6f71b10fb36eb12a626a2283"], 0x10}}, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0x40383d0c, &(0x7f0000000040)={{0x0, 0x2}, {0xffffffffffffffff, 0x4}, 0xfffffff8, 0x6}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x42, 0x2021}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x8000000) socket$nl_route(0x10, 0x3, 0x0) (async) clock_nanosleep(0x7, 0x1, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f00000000c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'hsr0\x00'}) (async) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) (async) sendmsg$key(r3, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) (async) sendmmsg(r3, &(0x7f0000000180), 0x400008a, 0x0) (async) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, 0x0, 0x20800) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) (async) sendmsg$key(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="a8c1587e733dbd13601b5bef8897742c59448702406d35c08387557c258ecb993a31fbe42c9924a9cde9a9466f3a940200000000000000fd46d8a839f641bc3dd3959a4177ae5877c95b378cd9a886d1e14ad886e144900d834a9c4f0929469386a858f84404cd2c84cca9e0ebe4f32c5b94b28b071ee4561b8bd916080152e251a0f6d0806b8bab59ce08e22c4e68f04ba32b76f73b8f0eda5f32fdef6d33d29f6f71b10fb36eb12a626a2283"], 0x10}}, 0x0) (async) ioctl$PTP_PEROUT_REQUEST2(r2, 0x40383d0c, &(0x7f0000000040)={{0x0, 0x2}, {0xffffffffffffffff, 0x4}, 0xfffffff8, 0x6}) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x42, 0x2021}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x8000000) (async) 4.716516779s ago: executing program 0 (id=4971): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mount_setattr(0xffffffffffffff9c, 0x0, 0x100, &(0x7f0000000180)={0x10001e, 0x100074, 0x40000}, 0x20) remap_file_pages(&(0x7f000075d000/0x3000)=nil, 0x3000, 0x0, 0x7, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 4.692393953s ago: executing program 3 (id=4972): openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') 4.447106386s ago: executing program 3 (id=4974): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6000007110089600000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a2c001280110001006272696467655f736c617665000000001400058005000500010000000500040001000000140003006272696467655f736c6176655f300000"], 0x60}}, 0x4040) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a30000000000800024000f500032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900038073797a3200000000140000001100014707a082b178795ad1fcc02173fc70f8"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r8, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x64, 0x0, 0x7, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_FILTER={0x2c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6fcb}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x100}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfffffffe}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xf42a}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x128c00000000}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x20004020) getsockopt$inet6_int(r7, 0x29, 0x35, 0x0, &(0x7f0000000140)) bind$inet(r1, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x2f, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 4.323450923s ago: executing program 4 (id=4975): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240408a0}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x300) openat$tun(0xffffffffffffff9c, 0x0, 0x100, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400c801}, 0x20000004) socket$unix(0x1, 0x5, 0x0) 4.112607479s ago: executing program 5 (id=4976): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000060000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r2], 0x3c}}, 0x0) 3.764503402s ago: executing program 4 (id=4977): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 3.582067894s ago: executing program 4 (id=4978): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x3, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="1802000002000000000000000000000085000000b500000018290000", @ANYRES32, @ANYBLOB="020000cfef1d0a060000005f91"], 0x0}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c0200001900010025bd700001000000fe8800000000000000000000000001010000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 3.385068389s ago: executing program 4 (id=4979): sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="c10e000018001f06", 0x8, 0x4000000, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a280000fff50a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000010a"], 0x14}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x24, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x4}]}], {0x14}}, 0x4c}, 0x1, 0x0, 0x0, 0x93a162fb1f423eb1}, 0x0) recvmmsg(r0, &(0x7f00000058c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002160, 0x0) 3.383055383s ago: executing program 0 (id=4980): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b708000000000000dbaaf8fff1000000b5080000020000007b8af0ff00000000bfa1"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000380)={0xffffffffffffffff, r1, 0x36, 0x0, @val=@uprobe_multi={&(0x7f0000000040)='./file0\x00', &(0x7f0000000300)=[0x7ff, 0xb, 0x2], 0x0, 0x9, 0x3, 0x1}}, 0x40) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000c40000/0x4000)=nil) 3.238752488s ago: executing program 0 (id=4981): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f0000000200)={0x1d, r6}, 0x10) sendmsg$can_bcm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=r7, @ANYRES64=r6, @ANYRES64=r5, @ANYBLOB="3bf81b"], 0x20000600}}, 0x0) sendmsg$sock(r7, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x5, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8}]}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010000700"/20, @ANYRES32=0x0, @ANYBLOB="04010100010a0000140003007866726d30000000000000000000000008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x28000000}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000ffdbdf250100000000000000014100000018001700010000000000006574683a7465616d30000000eeb44147e1eacef687acb7db9c239a9b149db6ef946e78b647cd292bec3a5a6ef3af6c55f05c2dccebfe94d30cd00a71d9dcfa8d2d09ab15c58683183c8f8d3e70a9c279d89bb2f9915d3bbbf293d933120eb419b8f954b4f345da49e8647c62716198a55777cb55fa"], 0x34}}, 0x2800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8923, &(0x7f0000000480)={'lo\x00', @local}) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) socket$key(0xf, 0x3, 0x2) 3.160795162s ago: executing program 4 (id=4982): io_uring_setup(0x178e, &(0x7f0000000140)={0x0, 0x52c1, 0x8, 0xfffffffe, 0xc}) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80100, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0x1, 0xb}, {0xd, 0x5}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0xc020}, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(r4, 0x0, 0x0) r5 = dup(r1) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="540000007dea3cc9e18bc313797d37b1b5ab34f7482471e5a9c3d2f5af9468b2a02dbcda4635c6019110c71920ddd4a370", @ANYRES16=r7, @ANYBLOB="01002abd70000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73797a3200000000"], 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010028bd7000fbdbdf2505000000200001800d0001007564703a73797a32000000000c0002800800040002400000"], 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r8, 0x84, 0x7, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1136f858, 0x0, 0xffffffffffffffff}, 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170478560f60eb8dc258ded60aee45b04b15db386", 0x30) r10 = accept$alg(r9, 0x0, 0x0) sendmmsg$alg(r10, &(0x7f00000008c0)=[{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000001c0)="517da1c92aab73880163a1d2967e7932", 0x10}], 0x1, &(0x7f00000002c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x408d0}], 0x1, 0x0) recvmsg(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000540)=""/31, 0x1f}], 0x1}, 0x0) 3.025578507s ago: executing program 0 (id=4983): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xbd}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x84}, {}, {}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x0, 0x1010000}}, {}, [@ldst={0x1, 0x0, 0x4, 0x0, 0x0, 0x100}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001fc0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.847917412s ago: executing program 0 (id=4984): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x40d82, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = landlock_create_ruleset(0x0, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xa8282, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r5, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r0, @ANYRES32=r1], 0x0) r6 = dup(r5) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1c, 0x20000000000001bf, &(0x7f00000012c0)=ANY=[@ANYRES16=r5, @ANYRESDEC=r4], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000280)={[0x5, 0x7fffffffffffffff, 0x1000, 0x1, 0xec, 0x40, 0xd, 0xffffffffffffffff, 0x800, 0x6, 0x0, 0x2, 0x9, 0x1000, 0x0, 0x31809d10], 0x60000, 0x80}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x0, 0xe, 0x0, &(0x7f0000000080)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0xb20c, 0x0, 0x0, 0xc0, 0x0, &(0x7f0000001200)="4c4228369f88e91870041ef4c8baa41449dc6ad5553764e898ddee1dfbb587ef4e6854a6bea12aecd99ac5dd4e39745d195df155a8628b7483b791d4de8609a893ccfbe9dc5c2ed555df193d92968b81da97fe3f0f220dd48b29c98152d9ecb2bb68cbf0bfe454a10e0adf453bd021ba3b502665c757d209f1fa9daa8979aa1fc22684d52bba1cd3c5946a6ea16b40f3bf8cc0134fb55a63817f6bac437682ed4c30147c2d86997f970ba094a19b0de4904bf83ff6fc3f0e46aba38692387ce1", 0x4}, 0xffffffffffffff8f) r8 = syz_clone(0x4039080, 0x0, 0x0, 0x0, 0x0, 0x0) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd86) prctl$PR_SCHED_CORE(0x3e, 0x2, r8, 0x2, 0x0) madvise(&(0x7f00009ef000/0x4000)=nil, 0x4000, 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x13) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001a00010028bd7000fedbdf2481808000000000000000000008000f000180000000000000000000000001"], 0x38}, 0x1, 0x0, 0x0, 0x40048c0}, 0x884) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 2.796504152s ago: executing program 5 (id=4985): r0 = socket$inet6(0xa, 0x3, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e22, @private=0xa010100}}, [0x9, 0x100000000, 0x6, 0x7, 0xffffffffffffff78, 0x1, 0xe9d, 0x1558, 0x7, 0x800000000000000, 0x5, 0x3, 0xa, 0x8, 0x7e6]}, &(0x7f00000001c0)=0x100) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000200)={r1, 0xb}, &(0x7f0000000240)=0x8) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000280)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r3, &(0x7f0000000340)={'full', 0x20, 0xffffffff, 0x20, 0x7}, 0x2f) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371c00000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x6000, 0x0) ioctl$TUNSETSNDBUF(r4, 0x400454d4, &(0x7f0000000040)=0x7) 1.77323322s ago: executing program 3 (id=4986): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x88440) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f00000000c0)=""/43) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@bridge_delneigh={0x34, 0x1c, 0x1, 0x4, 0x0, {0x7, 0x0, 0x0, r5, 0x80, 0xf2, 0x4}, [@NDA_VLAN={0x6, 0x5, 0x6}, @NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @NDA_FDB_EXT_ATTRS={0x4}]}, 0x34}, 0x1, 0x1000000, 0x0, 0x1040}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000249000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f00000002c0)="f30f015b0cf20f117000660fe4f5f00fbabe6b000026329b7900262e0ff5c9642e0f013d819b010000000f21c5f4", 0x2e}], 0x1, 0x240420e80f944c00, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x50, 0x7, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xe}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xfffffff1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x4040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newlink={0x40, 0x10, 0x439, 0x70bd25, 0x2, {0x0, 0x0, 0x0, 0x0, 0x8010, 0x3c044}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x1}]}}}]}, 0x40}}, 0x0) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0) syz_usb_control_io$hid(r8, 0x0, &(0x7f00000003c0)={0x13, &(0x7f00000001c0)={0x20, 0xe, 0x6, "1ec80200b9d3"}, 0x0, 0x0, 0x0, 0x0}) socket$inet6(0xa, 0x6, 0x10) 1.041820022s ago: executing program 5 (id=4987): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 676.307025ms ago: executing program 5 (id=4988): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b708000000000000dbaaf8fff1000000b5080000020000007b8af0ff00000000bfa1"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000380)={0xffffffffffffffff, r1, 0x36, 0x0, @val=@uprobe_multi={&(0x7f0000000040)='./file0\x00', &(0x7f0000000300)=[0x7ff, 0xb, 0x2], 0x0, 0x9, 0x3, 0x1}}, 0x40) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000c40000/0x4000)=nil) 26.206011ms ago: executing program 4 (id=4989): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c80)={0x3, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="1802000002000000000000000000000085000000b500000018290000", @ANYRES32, @ANYBLOB="020000cfef1d0a060000005f91"], 0x0}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c0200001900010025bd700001000000fe8800000000000000000000000001010000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 0s ago: executing program 5 (id=4990): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b708000000000000dbaaf8fff1000000b5080000020000007b8af0ff00000000bfa1"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000380)={0xffffffffffffffff, r1, 0x36, 0x0, @val=@uprobe_multi={&(0x7f0000000040)='./file0\x00', &(0x7f0000000300)=[0x7ff, 0xb, 0x2], 0x0, 0x9, 0x3, 0x1}}, 0x40) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000c40000/0x4000)=nil) kernel console output (not intermixed with test programs): 18610] veth1_macvtap: entered promiscuous mode [ 503.328545][ T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 503.347679][T18721] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 503.381172][T18721] team0: Port device batadv1 added [ 503.397618][T18610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 503.429112][T18610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 503.482036][ T5879] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.542298][ T5879] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.586497][ T5281] 8021q: adding VLAN 0 to HW filter on device eth2 [ 503.635978][ T5879] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.657209][ T5879] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.757769][ T5879] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.775283][ T5879] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.809194][ T5724] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.831181][ T5724] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.960638][T18735] gre0: left promiscuous mode [ 503.974414][T18735] gre0: left allmulticast mode [ 504.179624][T18735] vlan0: left promiscuous mode [ 504.438467][T18735] erspan1: left promiscuous mode [ 504.446499][T18735] erspan1: left allmulticast mode [ 504.472263][T17212] Bluetooth: hci4: command tx timeout [ 504.510393][T18735] bond2: left promiscuous mode [ 504.536524][T18764] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4540'. [ 504.599009][ T5281] 8021q: adding VLAN 0 to HW filter on device eth3 [ 504.646772][T18764] bond2: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 504.681853][T18764] bond2 (unregistering): Released all slaves [ 504.726926][T18769] loop3: detected capacity change from 0 to 7 [ 504.773281][T18769] Dev loop3: unable to read RDB block 7 [ 504.818206][T18769] loop3: unable to read partition table [ 504.841064][T18769] loop3: partition table beyond EOD, truncated [ 504.863642][T18769] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 505.072549][T18778] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 505.098635][T18778] team0: Port device batadv2 added [ 505.572233][T18814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4553'. [ 505.723067][ T5281] 8021q: adding VLAN 0 to HW filter on device eth4 [ 505.773816][T18826] loop3: detected capacity change from 0 to 7 [ 505.787053][T18826] Dev loop3: unable to read RDB block 7 [ 505.814487][T18826] loop3: unable to read partition table [ 505.851840][T18826] loop3: partition table beyond EOD, truncated [ 505.861843][T18826] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 506.012111][T18833] loop3: detected capacity change from 0 to 7 [ 506.057649][T18833] Dev loop3: unable to read RDB block 7 [ 506.097151][T18833] loop3: unable to read partition table [ 506.127460][T18833] loop3: partition table beyond EOD, truncated [ 506.166311][T18833] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 506.342195][T18841] netlink: 108 bytes leftover after parsing attributes in process `syz.4.4560'. [ 506.376010][T18841] netlink: 31 bytes leftover after parsing attributes in process `syz.4.4560'. [ 506.425586][T18841] netlink: 6016 bytes leftover after parsing attributes in process `syz.4.4560'. [ 506.539953][T17212] Bluetooth: hci4: command tx timeout [ 506.557486][T18851] syzkaller0: entered promiscuous mode [ 506.566071][T18841] netlink: 212336 bytes leftover after parsing attributes in process `syz.4.4560'. [ 506.589354][T18851] syzkaller0: entered allmulticast mode [ 506.670798][T18851] tipc: Started in network mode [ 506.697838][T18851] tipc: Node identity 9acb7e6ceb12, cluster identity 4711 [ 506.722350][T18851] tipc: Enabled bearer , priority 0 [ 506.750152][T18849] tipc: Resetting bearer [ 506.775379][T18849] tipc: Disabling bearer [ 506.922382][ T6911] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 507.079918][ T6911] usb 3-1: Using ep0 maxpacket: 8 [ 507.088319][ T6911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 507.100240][ T6911] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 507.109969][ T6911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.120855][ T6911] usb 3-1: config 0 descriptor?? [ 507.199921][ T6895] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 507.250200][ T6912] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 507.335052][ T6911] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 507.354423][ T6911] usb 3-1: USB disconnect, device number 5 [ 507.371105][ T6895] usb 5-1: Using ep0 maxpacket: 16 [ 507.378885][ T6895] usb 5-1: config 129 has too many interfaces: 160, using maximum allowed: 32 [ 507.396974][ T6895] usb 5-1: config 129 has 1 interface, different from the descriptor's value: 160 [ 507.410187][ T6912] usb 4-1: Using ep0 maxpacket: 8 [ 507.428376][ T6895] usb 5-1: config 129 interface 0 altsetting 0 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 507.441454][ T6895] usb 5-1: config 129 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 507.454190][ T6912] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 507.464548][ T6895] usb 5-1: config 129 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 507.474978][ T6912] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 507.487784][ T6895] usb 5-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 507.499224][ T6912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.512667][ T6895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.526066][T18873] loop3: detected capacity change from 0 to 7 [ 507.532685][ T6912] usb 4-1: config 0 descriptor?? [ 507.534013][T18873] Dev loop3: unable to read RDB block 7 [ 507.538759][ T6895] usb 5-1: Product: syz [ 507.548562][T18873] loop3: unable to read partition table [ 507.555486][ T6895] usb 5-1: Manufacturer: syz [ 507.561303][ T6912] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 507.568143][ T6895] usb 5-1: SerialNumber: syz [ 507.568602][T18873] loop3: partition table beyond EOD, truncated [ 507.589859][T18873] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 507.781369][T18862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 507.793540][T18862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 507.814868][T18877] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4571'. [ 507.838254][ T6895] powermate: Expected payload of 3--6 bytes, found 0 bytes! [ 507.869704][ T6895] powermate 5-1:129.0: probe with driver powermate failed with error -5 [ 507.926511][ T6895] usb 5-1: USB disconnect, device number 18 [ 507.982576][T18882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 507.996784][T18883] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4571'. [ 507.998933][T18882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.038711][T18882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.055002][T18882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.069272][T18886] batman_adv: batadv0: Adding interface: dummy0 [ 508.084813][T18886] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 508.119742][T18886] batman_adv: batadv0: Interface activated: dummy0 [ 508.141818][T18887] batadv0: mtu less than device minimum [ 508.152837][T18887] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 508.163720][T18887] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 508.174399][T18887] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 508.185092][T18887] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 508.195747][T18887] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 508.206403][T18887] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 508.217096][T18887] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 508.227784][T18887] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 508.238452][T18887] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-304) [ 508.273844][T18867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.289187][T18867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.449218][T18892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4576'. [ 508.508039][T18867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.522468][T18867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.583216][ T6912] gspca_vc032x: reg_w err -71 [ 508.588034][ T6912] vc032x 4-1:0.0: probe with driver vc032x failed with error -71 [ 508.598002][ T6912] usb 4-1: USB disconnect, device number 120 [ 508.620342][T17212] Bluetooth: hci4: command tx timeout [ 508.838794][T18902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4580'. [ 508.896998][T18907] loop3: detected capacity change from 0 to 7 [ 508.904848][T18902] bond1: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 508.931787][T18907] Dev loop3: unable to read RDB block 7 [ 508.944025][T18907] loop3: unable to read partition table [ 508.951640][T18902] bond1 (unregistering): Released all slaves [ 508.957737][T18907] loop3: partition table beyond EOD, truncated [ 508.970914][T18907] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 509.340088][ T6895] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 509.514196][ T6895] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 509.533928][ T6895] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 509.546724][ T6895] usb 3-1: config 0 interface 0 has no altsetting 0 [ 509.555194][ T6895] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 509.565182][ T6895] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 509.574196][ T6895] usb 3-1: Product: syz [ 509.578573][ T6895] usb 3-1: Manufacturer: syz [ 509.584165][ T6895] usb 3-1: SerialNumber: syz [ 509.594658][ T6895] usb 3-1: config 0 descriptor?? [ 509.607317][ T6895] hub 3-1:0.0: bad descriptor, ignoring hub [ 509.625507][ T6895] hub 3-1:0.0: probe with driver hub failed with error -5 [ 509.632973][ T6912] usb 4-1: new full-speed USB device number 121 using dummy_hcd [ 509.655525][ T6895] usb 3-1: selecting invalid altsetting 0 [ 509.791429][ T6912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 255, setting to 64 [ 509.806931][ T6912] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 509.817751][ T6912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.828202][ T6912] usb 4-1: Product: syz [ 509.832461][ T6912] usb 4-1: Manufacturer: syz [ 509.849026][ T6912] usb 4-1: SerialNumber: syz [ 509.863148][T18945] netlink: 'syz.0.4596': attribute type 1 has an invalid length. [ 509.863363][ T6912] usb 4-1: config 0 descriptor?? [ 509.871306][T18945] netlink: 'syz.0.4596': attribute type 1 has an invalid length. [ 509.884218][T18945] netlink: 'syz.0.4596': attribute type 1 has an invalid length. [ 509.888362][T18927] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 509.901855][T18945] netlink: 'syz.0.4596': attribute type 1 has an invalid length. [ 509.913996][T18661] usb 3-1: USB disconnect, device number 6 [ 509.980065][T18106] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 510.052055][T18952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.069721][T18952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.150066][T18106] usb 6-1: Using ep0 maxpacket: 8 [ 510.160181][T18106] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 510.179685][T18106] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 510.204141][T18106] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.216167][T18106] usb 6-1: config 0 descriptor?? [ 510.224721][T18106] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 510.447157][T18962] vlan2: entered promiscuous mode [ 510.449867][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 510.466959][T18962] batadv0: entered promiscuous mode [ 510.829388][T18971] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 510.868209][T18940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.921718][T18940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.200176][T18940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.232007][T18940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.297116][T18106] gspca_vc032x: reg_w err -71 [ 511.322663][T18106] vc032x 6-1:0.0: probe with driver vc032x failed with error -71 [ 511.357589][T18106] usb 6-1: USB disconnect, device number 2 [ 511.449859][ T0] NOHZ tick-stop error: local softirq work is pending, handler #206!!! [ 511.837779][T18982] xt_CT: No such helper "snmp_trap" [ 512.008463][T18989] FAULT_INJECTION: forcing a failure. [ 512.008463][T18989] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 512.040203][T18989] CPU: 1 UID: 0 PID: 18989 Comm: syz.2.4611 Tainted: G L syzkaller #0 PREEMPT(full) [ 512.040232][T18989] Tainted: [L]=SOFTLOCKUP [ 512.040238][T18989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 512.040249][T18989] Call Trace: [ 512.040256][T18989] [ 512.040265][T18989] dump_stack_lvl+0xe8/0x150 [ 512.040290][T18989] should_fail_ex+0x40c/0x560 [ 512.040317][T18989] _copy_from_user+0x2d/0xb0 [ 512.040339][T18989] restore_altstack+0xae/0x4f0 [ 512.040355][T18989] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 512.040380][T18989] ? __pfx_restore_altstack+0x10/0x10 [ 512.040398][T18989] ? rcu_is_watching+0x15/0xb0 [ 512.040416][T18989] ? trace_irq_enable+0x3b/0x140 [ 512.040438][T18989] __ia32_sys_rt_sigreturn+0x2bd/0x8c0 [ 512.040465][T18989] ? rcu_is_watching+0x15/0xb0 [ 512.040482][T18989] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 512.040504][T18989] ? kvm_sched_clock_read+0x11/0x20 [ 512.040522][T18989] ? sched_clock+0x3f/0x60 [ 512.040544][T18989] ? sched_clock_cpu+0x74/0x440 [ 512.040570][T18989] ? __pfx_xfrm_dev_backlog+0x10/0x10 [ 512.040587][T18989] ? __pfx_sched_clock_cpu+0x10/0x10 [ 512.040612][T18989] ? lock_release+0x4b/0x3c0 [ 512.040636][T18989] ? __task_pid_nr_ns+0x28/0x470 [ 512.040652][T18989] ? rcu_is_watching+0x15/0xb0 [ 512.040670][T18989] ? rcu_is_watching+0x15/0xb0 [ 512.040687][T18989] ? lock_release+0x4b/0x3c0 [ 512.040714][T18989] ? rcu_is_watching+0x15/0xb0 [ 512.040732][T18989] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.040750][T18989] do_syscall_64+0x174/0x580 [ 512.040771][T18989] ? clear_bhb_loop+0x40/0x90 [ 512.040790][T18989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.040808][T18989] RIP: 0033:0x7f404f73e1d9 [ 512.040824][T18989] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 512.040840][T18989] RSP: 002b:00007f405070da80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 512.040860][T18989] RAX: ffffffffffffffda RBX: 00007f404fa15fa0 RCX: 00007f404f73e1d9 [ 512.040874][T18989] RDX: 00007f405070da80 RSI: 00007f405070dbb0 RDI: 0000000000000021 [ 512.040886][T18989] RBP: 00007f405070e090 R08: 0000000000000000 R09: 0000000000000000 [ 512.040898][T18989] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 512.040909][T18989] R13: 00007f404fa16038 R14: 00007f404fa15fa0 R15: 00007f404fb3fa48 [ 512.040930][T18989] [ 512.348412][T18996] vlan2: entered promiscuous mode [ 512.573630][ T6912] dm9601 4-1:0.0: probe with driver dm9601 failed with error -71 [ 512.596868][ T6912] usb 4-1: USB disconnect, device number 121 [ 512.624968][T18991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.645294][T18991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.010080][ T6911] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 513.109291][T19011] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4618'. [ 513.179923][ T6911] usb 3-1: Using ep0 maxpacket: 16 [ 513.192630][ T6911] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 513.209945][ T6911] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 513.230328][ T6911] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 513.252502][ T6911] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 513.264097][ T6911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.283561][ T6911] usb 3-1: Product: syz [ 513.297361][ T6911] usb 3-1: Manufacturer: syz [ 513.307451][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 513.307466][ T29] audit: type=1326 audit(1781765968.243:11112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19001 comm="syz.3.4616" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f13d0b9ce59 code=0x0 [ 513.310995][ T6911] usb 3-1: SerialNumber: syz [ 513.385852][ T6911] usb 3-1: 0:2 : does not exist [ 513.414783][T19003] fuse: Bad value for 'fd' [ 513.640473][T18106] usb 5-1: new low-speed USB device number 19 using dummy_hcd [ 513.652457][T19032] FAULT_INJECTION: forcing a failure. [ 513.652457][T19032] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 513.683467][T19032] CPU: 1 UID: 0 PID: 19032 Comm: syz.5.4625 Tainted: G L syzkaller #0 PREEMPT(full) [ 513.683502][T19032] Tainted: [L]=SOFTLOCKUP [ 513.683511][T19032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 513.683517][T19032] Call Trace: [ 513.683522][T19032] [ 513.683526][T19032] dump_stack_lvl+0xe8/0x150 [ 513.683542][T19032] should_fail_ex+0x40c/0x560 [ 513.683559][T19032] _copy_from_user+0x2d/0xb0 [ 513.683573][T19032] __ia32_sys_rt_sigreturn+0x362/0x8c0 [ 513.683590][T19032] ? trace_irq_enable+0x3b/0x140 [ 513.683605][T19032] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 513.683620][T19032] ? _raw_spin_unlock_irq+0x2e/0x50 [ 513.683635][T19032] ? lock_release+0x4b/0x3c0 [ 513.683651][T19032] ? rcu_is_watching+0x15/0xb0 [ 513.683662][T19032] ? rcu_is_watching+0x15/0xb0 [ 513.683672][T19032] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.683682][T19032] do_syscall_64+0x174/0x580 [ 513.683695][T19032] ? clear_bhb_loop+0x40/0x90 [ 513.683706][T19032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.683716][T19032] RIP: 0033:0x7f6e6633e1d9 [ 513.683726][T19032] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 513.683734][T19032] RSP: 002b:00007f6e67323a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 513.683746][T19032] RAX: ffffffffffffffda RBX: 00007f6e66615fa0 RCX: 00007f6e6633e1d9 [ 513.683754][T19032] RDX: 00007f6e67323a80 RSI: 00007f6e67323bb0 RDI: 0000000000000021 [ 513.683761][T19032] RBP: 00007f6e67324090 R08: 0000000000000000 R09: 0000000000000000 [ 513.683767][T19032] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 513.683773][T19032] R13: 00007f6e66616038 R14: 00007f6e66615fa0 R15: 00007f6e6673fa48 [ 513.683784][T19032] [ 513.690482][T19030] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4621'. [ 513.869866][ T0] NOHZ tick-stop error: local softirq work is pending, handler #106!!! [ 513.878775][T19000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.923415][T19000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.991242][T18106] usb 5-1: No LPM exit latency info found, disabling LPM. [ 514.008748][T18106] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 514.030526][T18106] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 8, setting to 0 [ 514.064129][T18106] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 66, changing to 4 [ 514.094728][T19037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4627'. [ 514.118051][T18106] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 64, setting to 0 [ 514.156325][T18106] usb 5-1: string descriptor 0 read error: -22 [ 514.163297][T18106] usb 5-1: New USB device found, idVendor=18d1, idProduct=2d05, bcdDevice= 0.40 [ 514.195109][T18106] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.297178][T19037] bond3: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 514.354811][T19037] bond3 (unregistering): Released all slaves [ 514.560175][ T6912] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 514.719974][ T6912] usb 6-1: Using ep0 maxpacket: 16 [ 514.733735][ T6912] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 514.750301][ T6912] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.765328][ T6912] usb 6-1: Product: syz [ 514.775949][ T6912] usb 6-1: Manufacturer: syz [ 514.786259][ T6912] usb 6-1: SerialNumber: syz [ 514.809464][ T6912] r8152-cfgselector 6-1: Unknown version 0x0000 [ 514.831798][ T6912] r8152-cfgselector 6-1: config 0 descriptor?? [ 515.215915][ T6912] r8152-cfgselector 6-1: Unknown version 0x0000 [ 515.227484][ T6912] r8152-cfgselector 6-1: No union descriptors [ 515.325018][T19063] gtp0: entered allmulticast mode [ 515.361536][T19000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.385572][T19000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.410412][T19065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.447166][T19065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.523326][ T6911] usb 3-1: 1:0: failed to get current value for ch 0 (-22) [ 515.607770][T18106] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 515.649586][ T6911] usb 3-1: USB disconnect, device number 7 [ 515.739274][T18106] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 515.783442][T19070] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4635'. [ 515.807995][T18106] usb 5-1: USB disconnect, device number 19 [ 516.040759][T19091] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4639'. [ 516.064255][T19091] bond3: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 516.076444][T19091] bond3 (unregistering): Released all slaves [ 516.119918][T18106] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 516.202729][ T6911] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 516.229163][T19099] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4640'. [ 516.271393][T18106] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 516.292264][T18106] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 516.320953][T18106] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 516.347963][T18106] usb 5-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 516.359015][T18106] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.372049][ T6911] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 516.372498][T19105] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4642'. [ 516.392892][T18106] usb 5-1: Product: syz [ 516.393682][ T6911] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 516.408479][T18106] usb 5-1: Manufacturer: syz [ 516.408498][T18106] usb 5-1: SerialNumber: syz [ 516.414199][T18106] usb 5-1: config 0 descriptor?? [ 516.416313][ T6911] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 516.434639][T18106] radioshark2 5-1:0.0: Invalid radioSHARK2 device [ 516.435958][ T6911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.459982][T18106] radioshark2 5-1:0.0: probe with driver radioshark2 failed with error -22 [ 516.479400][T18106] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 516.557828][T19085] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 516.565049][T19085] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 516.637189][ T6912] usb 5-1: USB disconnect, device number 20 [ 516.675980][ T6911] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 516.820271][T19124] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4645'. [ 516.833280][T19124] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4645'. [ 516.851030][ T6895] usb 4-1: new full-speed USB device number 122 using dummy_hcd [ 516.891618][T19084] netlink: 'syz.2.4638': attribute type 3 has an invalid length. [ 516.912758][T19127] FAULT_INJECTION: forcing a failure. [ 516.912758][T19127] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 516.928689][T19127] CPU: 0 UID: 0 PID: 19127 Comm: syz.0.4646 Tainted: G L syzkaller #0 PREEMPT(full) [ 516.928719][T19127] Tainted: [L]=SOFTLOCKUP [ 516.928726][T19127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 516.928738][T19127] Call Trace: [ 516.928745][T19127] [ 516.928753][T19127] dump_stack_lvl+0xe8/0x150 [ 516.928778][T19127] should_fail_ex+0x40c/0x560 [ 516.928809][T19127] copy_fpstate_to_sigframe+0xa83/0xd20 [ 516.928838][T19127] ? copy_fpstate_to_sigframe+0x188/0xd20 [ 516.928868][T19127] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 516.928894][T19127] ? rcu_is_watching+0x15/0xb0 [ 516.928916][T19127] ? ktime_get+0x45/0x220 [ 516.928941][T19127] ? ktime_get+0x45/0x220 [ 516.928965][T19127] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 516.928992][T19127] ? ktime_get+0x1f5/0x220 [ 516.929019][T19127] ? fpu__alloc_mathframe+0xac/0x130 [ 516.929046][T19127] get_sigframe+0x603/0x830 [ 516.929075][T19127] ? __pfx_get_sigframe+0x10/0x10 [ 516.929104][T19127] x64_setup_rt_frame+0x163/0xc50 [ 516.929130][T19127] ? rcu_is_watching+0x15/0xb0 [ 516.929150][T19127] ? _raw_spin_unlock_irq+0x2e/0x50 [ 516.929170][T19127] ? get_signal+0x10dd/0x12c0 [ 516.929195][T19127] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 516.929228][T19127] arch_do_signal_or_restart+0x456/0x860 [ 516.929255][T19127] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 516.929284][T19127] ? do_readv+0x2b1/0x2e0 [ 516.929302][T19127] ? rcu_is_watching+0x15/0xb0 [ 516.929323][T19127] exit_to_user_mode_loop+0x104/0x730 [ 516.929348][T19127] ? rcu_is_watching+0x15/0xb0 [ 516.929367][T19127] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.929386][T19127] do_syscall_64+0x353/0x580 [ 516.929408][T19127] ? clear_bhb_loop+0x40/0x90 [ 516.929435][T19127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.929453][T19127] RIP: 0033:0x7f226df9ce57 [ 516.929470][T19127] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 516.929486][T19127] RSP: 002b:00007f226ee33028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 516.929506][T19127] RAX: 0000000000000013 RBX: 00007f226e215fa0 RCX: 00007f226df9ce59 [ 516.929520][T19127] RDX: 0000000000000001 RSI: 0000200000000200 RDI: 0000000000000003 [ 516.929532][T19127] RBP: 00007f226ee33090 R08: 0000000000000000 R09: 0000000000000000 [ 516.929545][T19127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 516.929556][T19127] R13: 00007f226e216038 R14: 00007f226e215fa0 R15: 00007f226e33fa48 [ 516.929577][T19127] [ 517.182090][ T6895] usb 4-1: device descriptor read/64, error -71 [ 517.203551][T18106] usb 3-1: USB disconnect, device number 8 [ 517.292406][T19134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.304095][T19134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.318219][T19134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.341130][ T5710] r8152-cfgselector 6-1: USB disconnect, device number 3 [ 517.350835][T19134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.396003][T19134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4648'. [ 517.409640][T19134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.418601][T19134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.420535][ T6895] usb 4-1: new full-speed USB device number 123 using dummy_hcd [ 517.496646][T19139] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 517.504385][T19139] IPv6: NLM_F_CREATE should be set when creating new route [ 517.505816][T19143] netlink: 'syz.4.4650': attribute type 5 has an invalid length. [ 517.530016][T18106] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 517.580008][ T6895] usb 4-1: device descriptor read/64, error -71 [ 517.682648][T18106] usb 3-1: no configurations [ 517.687296][T18106] usb 3-1: can't read configurations, error -22 [ 517.693889][ T6895] usb usb4-port1: attempt power cycle [ 517.820278][T18106] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 517.879904][ T5710] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 517.970603][T18106] usb 3-1: no configurations [ 517.975286][T18106] usb 3-1: can't read configurations, error -22 [ 517.984993][T18106] usb usb3-port1: attempt power cycle [ 518.033016][ T5710] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 518.039988][ T6895] usb 4-1: new full-speed USB device number 124 using dummy_hcd [ 518.042199][ T5710] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.057886][ T5710] usb 5-1: Product: syz [ 518.062863][ T5710] usb 5-1: Manufacturer: syz [ 518.067486][ T5710] usb 5-1: SerialNumber: syz [ 518.070523][ T6895] usb 4-1: device descriptor read/8, error -71 [ 518.310692][ T6895] usb 4-1: new full-speed USB device number 125 using dummy_hcd [ 518.329970][T18106] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 518.342220][ T6895] usb 4-1: device descriptor read/8, error -71 [ 518.366764][T19166] tipc: Enabled bearer , priority 10 [ 518.374906][T18106] usb 3-1: no configurations [ 518.379593][T18106] usb 3-1: can't read configurations, error -22 [ 518.387268][T19166] ªªªªªª: renamed from lo (while UP) [ 518.460164][ T6895] usb usb4-port1: unable to enumerate USB device [ 518.520020][T18106] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 518.552415][T18106] usb 3-1: no configurations [ 518.558953][T18106] usb 3-1: can't read configurations, error -22 [ 518.570090][T18106] usb usb3-port1: unable to enumerate USB device [ 518.572722][T19173] FAULT_INJECTION: forcing a failure. [ 518.572722][T19173] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 518.601009][T19173] CPU: 1 UID: 0 PID: 19173 Comm: syz.5.4658 Tainted: G L syzkaller #0 PREEMPT(full) [ 518.601038][T19173] Tainted: [L]=SOFTLOCKUP [ 518.601045][T19173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 518.601056][T19173] Call Trace: [ 518.601063][T19173] [ 518.601071][T19173] dump_stack_lvl+0xe8/0x150 [ 518.601095][T19173] should_fail_ex+0x40c/0x560 [ 518.601124][T19173] _copy_to_user+0x31/0xb0 [ 518.601147][T19173] copy_siginfo_to_user+0x22/0xc0 [ 518.601172][T19173] x64_setup_rt_frame+0x764/0xc50 [ 518.601198][T19173] ? rcu_is_watching+0x15/0xb0 [ 518.601223][T19173] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 518.601253][T19173] arch_do_signal_or_restart+0x456/0x860 [ 518.601279][T19173] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 518.601310][T19173] ? rcu_is_watching+0x15/0xb0 [ 518.601330][T19173] exit_to_user_mode_loop+0x104/0x730 [ 518.601356][T19173] ? rcu_is_watching+0x15/0xb0 [ 518.601375][T19173] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.601394][T19173] do_syscall_64+0x353/0x580 [ 518.601416][T19173] ? clear_bhb_loop+0x40/0x90 [ 518.601436][T19173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.601454][T19173] RIP: 0033:0x7f6e6639ce57 [ 518.601471][T19173] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 518.601487][T19173] RSP: 002b:00007f6e67324028 EFLAGS: 00000246 [ 518.601504][T19173] RAX: 0000000000000013 RBX: 00007f6e66615fa0 RCX: 00007f6e6639ce59 [ 518.601517][T19173] RDX: 0000000000000001 RSI: 0000200000000200 RDI: 0000000000000003 [ 518.601530][T19173] RBP: 00007f6e67324090 R08: 0000000000000000 R09: 0000000000000000 [ 518.601542][T19173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 518.601560][T19173] R13: 00007f6e66616038 R14: 00007f6e66615fa0 R15: 00007f6e6673fa48 [ 518.601580][T19173] [ 519.315106][T19189] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 519.420096][T18106] tipc: Node number set to 1910079084 [ 520.316824][T19209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 520.348456][T19209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 520.366659][T19212] loop3: detected capacity change from 0 to 7 [ 520.378017][T19212] Dev loop3: unable to read RDB block 7 [ 520.386422][T19212] loop3: unable to read partition table [ 520.392766][T19212] loop3: partition table beyond EOD, truncated [ 520.399355][T19212] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 520.514875][T19216] 8021q: adding VLAN 0 to HW filter on device batadv6 [ 520.523709][T19216] team0: Port device batadv6 added [ 520.540431][T18106] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 520.710408][T18106] usb 6-1: device descriptor read/64, error -71 [ 520.735319][ T5710] net_ratelimit: 10 callbacks suppressed [ 520.735341][ T5710] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 520.794685][ T5710] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 520.824969][ T5710] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 520.847485][ T5710] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 520.888571][ T5710] usb 5-1: USB disconnect, device number 21 [ 520.960591][T18106] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 521.059919][ T9] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 521.100559][T18106] usb 6-1: device descriptor read/64, error -71 [ 521.232300][T18106] usb usb6-port1: attempt power cycle [ 521.240717][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 521.268794][ T9] usb 3-1: config 4 has an invalid interface number: 152 but max is 3 [ 521.279080][T19237] netlink: 'syz.3.4676': attribute type 12 has an invalid length. [ 521.291177][ T9] usb 3-1: config 4 has an invalid interface number: 241 but max is 3 [ 521.299335][T19237] netlink: 'syz.3.4676': attribute type 11 has an invalid length. [ 521.299366][T19237] netlink: 212004 bytes leftover after parsing attributes in process `syz.3.4676'. [ 521.364704][ T9] usb 3-1: config 4 has an invalid interface number: 58 but max is 3 [ 521.386160][T19239] tipc: Bearer : already 2 bearers with priority 10 [ 521.399078][T19239] tipc: Bearer : trying with adjusted priority [ 521.402449][ T9] usb 3-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 521.412478][T19239] tipc: Enabled bearer , priority 9 [ 521.454482][ T9] usb 3-1: config 4 has an invalid interface number: 181 but max is 3 [ 521.485234][ T9] usb 3-1: config 4 has an invalid interface number: 30 but max is 3 [ 521.513023][ T9] usb 3-1: config 4 has 5 interfaces, different from the descriptor's value: 4 [ 521.538276][ T9] usb 3-1: config 4 has no interface number 0 [ 521.552556][ T9] usb 3-1: config 4 has no interface number 1 [ 521.565744][ T9] usb 3-1: config 4 has no interface number 2 [ 521.579784][ T9] usb 3-1: config 4 has no interface number 3 [ 521.595270][ T9] usb 3-1: config 4 has no interface number 4 [ 521.607118][ T9] usb 3-1: config 4 interface 152 altsetting 8 endpoint 0xC has an invalid bInterval 227, changing to 4 [ 521.618632][T18106] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 521.629100][ T9] usb 3-1: config 4 interface 152 altsetting 8 endpoint 0xE has an invalid bInterval 0, changing to 10 [ 521.642464][T18106] usb 6-1: device descriptor read/8, error -71 [ 521.649505][ T9] usb 3-1: config 4 interface 152 altsetting 8 endpoint 0x1 has an invalid bInterval 255, changing to 4 [ 521.662119][ T9] usb 3-1: config 4 interface 152 altsetting 8 endpoint 0x1 has invalid maxpacket 1072, setting to 1023 [ 521.676336][ T9] usb 3-1: config 4 interface 152 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 521.689531][ T9] usb 3-1: config 4 interface 152 altsetting 8 endpoint 0x9 has an invalid bInterval 244, changing to 4 [ 521.705340][ T9] usb 3-1: config 4 interface 152 altsetting 8 endpoint 0x9 has invalid wMaxPacketSize 0 [ 521.716902][ T9] usb 3-1: config 4 interface 152 altsetting 8 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 521.729156][ T9] usb 3-1: config 4 interface 152 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 521.751113][ T9] usb 3-1: config 4 interface 152 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 521.762526][ T9] usb 3-1: config 4 interface 152 altsetting 8 has a duplicate endpoint with address 0x5, skipping [ 521.774112][ T9] usb 3-1: config 4 interface 58 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 521.824408][ T9] usb 3-1: config 4 interface 58 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 521.839201][ T9] usb 3-1: config 4 interface 58 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 521.849938][T18661] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 521.862244][ T9] usb 3-1: config 4 interface 58 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 521.872266][ T9] usb 3-1: config 4 interface 58 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 8 [ 521.889065][ T9] usb 3-1: too many endpoints for config 4 interface 181 altsetting 194: 139, using maximum allowed: 30 [ 521.900847][T18106] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 521.909975][ T9] usb 3-1: config 4 interface 181 altsetting 194 has a duplicate endpoint with address 0x1, skipping [ 521.924056][ T9] usb 3-1: config 4 interface 181 altsetting 194 has 2 endpoint descriptors, different from the interface descriptor's value: 139 [ 521.938450][T18106] usb 6-1: device descriptor read/8, error -71 [ 521.947500][ T9] usb 3-1: config 4 interface 30 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 521.959551][ T9] usb 3-1: config 4 interface 30 altsetting 5 has a duplicate endpoint with address 0xF, skipping [ 521.972504][ T9] usb 3-1: config 4 interface 152 has no altsetting 0 [ 521.982838][ T9] usb 3-1: config 4 interface 241 has no altsetting 0 [ 521.989708][ T9] usb 3-1: config 4 interface 181 has no altsetting 0 [ 522.019903][T18661] usb 5-1: Using ep0 maxpacket: 32 [ 522.026657][T18661] usb 5-1: config 1 has an invalid descriptor of length 238, skipping remainder of the config [ 522.050616][T18106] usb usb6-port1: unable to enumerate USB device [ 522.057608][T18661] usb 5-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 522.070885][T18661] usb 5-1: config 1 interface 0 has no altsetting 0 [ 522.078683][ T9] usb 3-1: config 4 interface 30 has no altsetting 0 [ 522.092172][T18661] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 522.102085][T18661] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.110323][ T9] usb 3-1: Dual-Role OTG device on HNP port [ 522.117790][ T9] usb 3-1: New USB device found, idVendor=1b3d, idProduct=01e3, bcdDevice=cb.88 [ 522.127297][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.136500][T18661] usb 5-1: Product: syz [ 522.141330][ T9] usb 3-1: Product: ä Š [ 522.145574][T18661] usb 5-1: Manufacturer: syz [ 522.149951][ T6895] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 522.150237][ T9] usb 3-1: Manufacturer: ј [ 522.163575][T18661] usb 5-1: SerialNumber: syz [ 522.169140][ T9] usb 3-1: SerialNumber: á Œ [ 522.312121][ T6895] usb 4-1: Using ep0 maxpacket: 32 [ 522.319091][ T6895] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 522.327885][ T6895] usb 4-1: config 0 has no interface number 0 [ 522.334532][ T6895] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 522.347747][ T6895] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 522.358539][ T6895] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 522.368147][ T6895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.378931][ T6895] usb 4-1: config 0 descriptor?? [ 522.390731][T18661] cdc_ether 5-1:1.0: skipping garbage [ 522.398689][T18661] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 522.409183][ T9] ftdi_sio 3-1:4.152: FTDI USB Serial Device converter detected [ 522.418915][T18661] usb 5-1: USB disconnect, device number 22 [ 522.426010][ T9] ftdi_sio ttyUSB0: unknown device type: 0xcb88 [ 522.440992][ T9] ftdi_sio 3-1:4.241: FTDI USB Serial Device converter detected [ 522.449278][ T9] ftdi_sio ttyUSB1: unknown device type: 0xcb88 [ 522.457844][ T9] ftdi_sio 3-1:4.58: FTDI USB Serial Device converter detected [ 522.467878][ T9] ftdi_sio ttyUSB2: unknown device type: 0xcb88 [ 522.479020][ T9] ftdi_sio 3-1:4.181: FTDI USB Serial Device converter detected [ 522.487417][ T9] ftdi_sio ttyUSB3: unknown device type: 0xcb88 [ 522.496191][ T9] ftdi_sio 3-1:4.30: FTDI USB Serial Device converter detected [ 522.504594][ T9] ftdi_sio ttyUSB4: unknown device type: 0xcb88 [ 522.514613][ T9] usb 3-1: USB disconnect, device number 13 [ 522.524068][ T9] ftdi_sio 3-1:4.152: device disconnected [ 522.532381][ T9] ftdi_sio 3-1:4.241: device disconnected [ 522.539968][ T9] ftdi_sio 3-1:4.58: device disconnected [ 522.546951][ T9] ftdi_sio 3-1:4.181: device disconnected [ 522.554198][ T9] ftdi_sio 3-1:4.30: device disconnected [ 522.948197][T19247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 522.975698][T19247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 522.985819][ T6895] usbhid 4-1:0.1: can't add hid device: -71 [ 522.992460][ T6895] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 523.003928][ T6895] usb 4-1: USB disconnect, device number 126 [ 523.037158][T19257] loop5: detected capacity change from 0 to 7 [ 523.044004][T19257] Dev loop5: unable to read RDB block 7 [ 523.049684][T19257] loop5: AHDI p1 [ 523.053807][T19257] loop5: partition table partially beyond EOD, truncated [ 523.176795][T19262] FAULT_INJECTION: forcing a failure. [ 523.176795][T19262] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 523.192695][T19262] CPU: 0 UID: 0 PID: 19262 Comm: syz.0.4683 Tainted: G L syzkaller #0 PREEMPT(full) [ 523.192725][T19262] Tainted: [L]=SOFTLOCKUP [ 523.192732][T19262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 523.192743][T19262] Call Trace: [ 523.192751][T19262] [ 523.192758][T19262] dump_stack_lvl+0xe8/0x150 [ 523.192783][T19262] should_fail_ex+0x40c/0x560 [ 523.192812][T19262] _copy_from_user+0x2d/0xb0 [ 523.192836][T19262] __ia32_sys_rt_sigreturn+0x362/0x8c0 [ 523.192864][T19262] ? trace_irq_enable+0x3b/0x140 [ 523.192888][T19262] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 523.192910][T19262] ? _raw_spin_unlock_irq+0x2e/0x50 [ 523.192939][T19262] ? lock_release+0x4b/0x3c0 [ 523.192963][T19262] ? rcu_is_watching+0x15/0xb0 [ 523.192983][T19262] ? rcu_is_watching+0x15/0xb0 [ 523.193002][T19262] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.193021][T19262] do_syscall_64+0x174/0x580 [ 523.193044][T19262] ? trace_irq_disable+0x3b/0x140 [ 523.193068][T19262] ? clear_bhb_loop+0x40/0x90 [ 523.193088][T19262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.193106][T19262] RIP: 0033:0x7f226df3e1d9 [ 523.193123][T19262] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 523.193141][T19262] RSP: 002b:00007f226ee32a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 523.193161][T19262] RAX: ffffffffffffffda RBX: 00007f226e215fa0 RCX: 00007f226df3e1d9 [ 523.193175][T19262] RDX: 00007f226ee32a80 RSI: 00007f226ee32bb0 RDI: 0000000000000021 [ 523.193189][T19262] RBP: 00007f226ee33090 R08: 0000000000000000 R09: 0000000000000000 [ 523.193201][T19262] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 523.193213][T19262] R13: 00007f226e216038 R14: 00007f226e215fa0 R15: 00007f226e33fa48 [ 523.193232][T19262] [ 523.418605][ T4986] Dev loop5: unable to read RDB block 7 [ 523.428706][ T4986] loop5: AHDI p1 [ 523.433725][ T4986] loop5: partition table partially beyond EOD, truncated [ 523.509264][ T4986] Dev loop5: unable to read RDB block 7 [ 523.518025][ T4986] loop5: AHDI p1 [ 523.522013][ T4986] loop5: partition table partially beyond EOD, truncated [ 523.717364][T19277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 523.726928][T19277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 523.738379][T19277] FAULT_INJECTION: forcing a failure. [ 523.738379][T19277] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 523.760210][T19277] CPU: 0 UID: 0 PID: 19277 Comm: syz.0.4688 Tainted: G L syzkaller #0 PREEMPT(full) [ 523.760241][T19277] Tainted: [L]=SOFTLOCKUP [ 523.760249][T19277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 523.760260][T19277] Call Trace: [ 523.760268][T19277] [ 523.760275][T19277] dump_stack_lvl+0xe8/0x150 [ 523.760300][T19277] should_fail_ex+0x40c/0x560 [ 523.760330][T19277] prepare_alloc_pages+0x230/0x650 [ 523.760358][T19277] __alloc_frozen_pages_noprof+0x12f/0x380 [ 523.760385][T19277] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 523.760412][T19277] ? __pfx_policy_nodemask+0x10/0x10 [ 523.760435][T19277] ? kasan_save_track+0x4f/0x80 [ 523.760456][T19277] ? kasan_save_track+0x3e/0x80 [ 523.760476][T19277] ? __kasan_kmalloc+0x93/0xb0 [ 523.760498][T19277] ? __kmalloc_cache_node_noprof+0x3dd/0x690 [ 523.760521][T19277] ? __get_vm_area_node+0x136/0x300 [ 523.760540][T19277] ? vmalloc_user_noprof+0xad/0xe0 [ 523.760561][T19277] ? vb2_vmalloc_alloc+0xef/0x360 [ 523.760579][T19277] ? __vb2_queue_alloc+0xa0b/0x1660 [ 523.760604][T19277] ? vb2_core_reqbufs+0xc3f/0x1470 [ 523.760628][T19277] ? __vb2_init_fileio+0x310/0x1040 [ 523.760646][T19277] alloc_pages_mpol+0x212/0x380 [ 523.760671][T19277] alloc_pages_noprof+0xac/0x2a0 [ 523.760696][T19277] get_free_pages_noprof+0xf/0x80 [ 523.760719][T19277] __kasan_populate_vmalloc+0x38/0x1c0 [ 523.760739][T19277] ? do_raw_spin_unlock+0xf5/0x210 [ 523.760762][T19277] alloc_vmap_area+0xd1a/0x1420 [ 523.760783][T19277] ? rcu_is_watching+0x15/0xb0 [ 523.760803][T19277] ? __pfx_alloc_vmap_area+0x10/0x10 [ 523.760820][T19277] ? __kasan_kmalloc+0x93/0xb0 [ 523.760842][T19277] ? __get_vm_area_node+0x136/0x300 [ 523.760860][T19277] ? __kmalloc_cache_node_noprof+0x236/0x690 [ 523.760879][T19277] __get_vm_area_node+0x1f2/0x300 [ 523.760900][T19277] __vmalloc_node_range_noprof+0x358/0x1730 [ 523.760921][T19277] ? vb2_vmalloc_alloc+0xef/0x360 [ 523.760949][T19277] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 523.760974][T19277] vmalloc_user_noprof+0xad/0xe0 [ 523.760995][T19277] ? vb2_vmalloc_alloc+0xef/0x360 [ 523.761013][T19277] vb2_vmalloc_alloc+0xef/0x360 [ 523.761032][T19277] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 523.761050][T19277] __vb2_queue_alloc+0xa0b/0x1660 [ 523.761073][T19277] vb2_core_reqbufs+0xc3f/0x1470 [ 523.761101][T19277] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 523.761124][T19277] ? __kasan_kmalloc+0x93/0xb0 [ 523.761142][T19277] ? __kmalloc_cache_noprof+0x318/0x660 [ 523.761163][T19277] ? __kmalloc_cache_noprof+0x157/0x660 [ 523.761189][T19277] __vb2_init_fileio+0x310/0x1040 [ 523.761207][T19277] ? do_raw_spin_lock+0x12b/0x2f0 [ 523.761230][T19277] ? __fget_files+0x2a/0x420 [ 523.761251][T19277] vb2_core_poll+0x4b0/0x830 [ 523.761270][T19277] ? rcu_is_watching+0x15/0xb0 [ 523.761288][T19277] vb2_fop_poll+0x196/0x310 [ 523.761308][T19277] ? __pfx_vb2_fop_poll+0x10/0x10 [ 523.761326][T19277] v4l2_poll+0x147/0x2c0 [ 523.761344][T19277] ? __pfx_v4l2_poll+0x10/0x10 [ 523.761362][T19277] do_sys_poll+0x990/0x1110 [ 523.761382][T19277] ? do_sys_poll+0x491/0x1110 [ 523.761402][T19277] ? __pfx_do_sys_poll+0x10/0x10 [ 523.761420][T19277] ? is_bpf_text_address+0x292/0x2b0 [ 523.761439][T19277] ? aa_file_perm+0x18b/0x15f0 [ 523.761457][T19277] ? rcu_is_watching+0x15/0xb0 [ 523.761477][T19277] ? __pfx_pollwake+0x10/0x10 [ 523.761496][T19277] ? __pfx_pollwake+0x10/0x10 [ 523.761514][T19277] ? __pfx_pollwake+0x10/0x10 [ 523.761531][T19277] ? __pfx_pollwake+0x10/0x10 [ 523.761549][T19277] ? __pfx_pollwake+0x10/0x10 [ 523.761567][T19277] ? __pfx_pollwake+0x10/0x10 [ 523.761585][T19277] ? __pfx_pollwake+0x10/0x10 [ 523.761608][T19277] ? __pfx_pollwake+0x10/0x10 [ 523.761626][T19277] ? __pfx_pollwake+0x10/0x10 [ 523.761644][T19277] ? rcu_is_watching+0x15/0xb0 [ 523.761663][T19277] ? lock_release+0x4b/0x3c0 [ 523.761689][T19277] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 523.761721][T19277] ? set_user_sigmask+0xcd/0x1c0 [ 523.761744][T19277] ? __pfx_set_user_sigmask+0x10/0x10 [ 523.761768][T19277] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 523.761794][T19277] __se_sys_ppoll+0x209/0x2b0 [ 523.761820][T19277] ? fput+0xa0/0xd0 [ 523.761838][T19277] ? __pfx___se_sys_ppoll+0x10/0x10 [ 523.761864][T19277] ? __pfx_ksys_write+0x10/0x10 [ 523.761886][T19277] ? rcu_is_watching+0x15/0xb0 [ 523.761904][T19277] ? __x64_sys_ppoll+0x20/0xc0 [ 523.761926][T19277] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.761944][T19277] do_syscall_64+0x174/0x580 [ 523.761965][T19277] ? trace_irq_disable+0x3b/0x140 [ 523.761988][T19277] ? clear_bhb_loop+0x40/0x90 [ 523.762007][T19277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.762021][T19277] RIP: 0033:0x7f226df9ce59 [ 523.762037][T19277] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 523.762052][T19277] RSP: 002b:00007f226ee33028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 523.762070][T19277] RAX: ffffffffffffffda RBX: 00007f226e215fa0 RCX: 00007f226df9ce59 [ 523.762082][T19277] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 523.762092][T19277] RBP: 00007f226ee33090 R08: 0000000000000000 R09: 0000000000000000 [ 523.762104][T19277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 523.762114][T19277] R13: 00007f226e216038 R14: 00007f226e215fa0 R15: 00007f226e33fa48 [ 523.762131][T19277] [ 523.762272][T19277] syz.0.4688: vmalloc error: size 4096, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 524.019868][ T0] NOHZ tick-stop error: local softirq work is pending, handler #06!!! [ 524.329024][T19281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.379173][T19281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.411786][T19277] ,cpuset=/,mems_allowed=0-1 [ 524.427524][T19277] CPU: 1 UID: 0 PID: 19277 Comm: syz.0.4688 Tainted: G L syzkaller #0 PREEMPT(full) [ 524.427554][T19277] Tainted: [L]=SOFTLOCKUP [ 524.427560][T19277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 524.427571][T19277] Call Trace: [ 524.427577][T19277] [ 524.427585][T19277] dump_stack_lvl+0xe8/0x150 [ 524.427608][T19277] warn_alloc+0x249/0x340 [ 524.427629][T19277] ? trace_irq_enable+0x3b/0x140 [ 524.427653][T19277] ? __pfx_warn_alloc+0x10/0x10 [ 524.427674][T19277] ? __get_vm_area_node+0x20b/0x300 [ 524.427696][T19277] ? __get_vm_area_node+0x20b/0x300 [ 524.427716][T19277] __vmalloc_node_range_noprof+0x37d/0x1730 [ 524.427747][T19277] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 524.427774][T19277] vmalloc_user_noprof+0xad/0xe0 [ 524.427795][T19277] ? vb2_vmalloc_alloc+0xef/0x360 [ 524.427815][T19277] vb2_vmalloc_alloc+0xef/0x360 [ 524.427832][T19277] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 524.427852][T19277] __vb2_queue_alloc+0xa0b/0x1660 [ 524.427880][T19277] vb2_core_reqbufs+0xc3f/0x1470 [ 524.427911][T19277] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 524.427937][T19277] ? __kasan_kmalloc+0x93/0xb0 [ 524.427960][T19277] ? __kmalloc_cache_noprof+0x318/0x660 [ 524.427983][T19277] ? __kmalloc_cache_noprof+0x157/0x660 [ 524.428005][T19277] __vb2_init_fileio+0x310/0x1040 [ 524.428025][T19277] ? do_raw_spin_lock+0x12b/0x2f0 [ 524.428048][T19277] ? __fget_files+0x2a/0x420 [ 524.428068][T19277] vb2_core_poll+0x4b0/0x830 [ 524.428086][T19277] ? rcu_is_watching+0x15/0xb0 [ 524.428107][T19277] vb2_fop_poll+0x196/0x310 [ 524.428125][T19277] ? __pfx_vb2_fop_poll+0x10/0x10 [ 524.428145][T19277] v4l2_poll+0x147/0x2c0 [ 524.428168][T19277] ? __pfx_v4l2_poll+0x10/0x10 [ 524.428185][T19277] do_sys_poll+0x990/0x1110 [ 524.428204][T19277] ? do_sys_poll+0x491/0x1110 [ 524.428221][T19277] ? __pfx_do_sys_poll+0x10/0x10 [ 524.428240][T19277] ? is_bpf_text_address+0x292/0x2b0 [ 524.428257][T19277] ? aa_file_perm+0x18b/0x15f0 [ 524.428274][T19277] ? rcu_is_watching+0x15/0xb0 [ 524.428293][T19277] ? __pfx_pollwake+0x10/0x10 [ 524.428309][T19277] ? __pfx_pollwake+0x10/0x10 [ 524.428325][T19277] ? __pfx_pollwake+0x10/0x10 [ 524.428340][T19277] ? __pfx_pollwake+0x10/0x10 [ 524.428355][T19277] ? __pfx_pollwake+0x10/0x10 [ 524.428370][T19277] ? __pfx_pollwake+0x10/0x10 [ 524.428385][T19277] ? __pfx_pollwake+0x10/0x10 [ 524.428400][T19277] ? __pfx_pollwake+0x10/0x10 [ 524.428415][T19277] ? __pfx_pollwake+0x10/0x10 [ 524.428433][T19277] ? rcu_is_watching+0x15/0xb0 [ 524.428451][T19277] ? lock_release+0x4b/0x3c0 [ 524.428474][T19277] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 524.428506][T19277] ? set_user_sigmask+0xcd/0x1c0 [ 524.428529][T19277] ? __pfx_set_user_sigmask+0x10/0x10 [ 524.428552][T19277] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 524.428578][T19277] __se_sys_ppoll+0x209/0x2b0 [ 524.428605][T19277] ? fput+0xa0/0xd0 [ 524.428623][T19277] ? __pfx___se_sys_ppoll+0x10/0x10 [ 524.428648][T19277] ? __pfx_ksys_write+0x10/0x10 [ 524.428670][T19277] ? rcu_is_watching+0x15/0xb0 [ 524.428688][T19277] ? __x64_sys_ppoll+0x20/0xc0 [ 524.428713][T19277] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.428732][T19277] do_syscall_64+0x174/0x580 [ 524.428753][T19277] ? trace_irq_disable+0x3b/0x140 [ 524.428777][T19277] ? clear_bhb_loop+0x40/0x90 [ 524.428797][T19277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.428815][T19277] RIP: 0033:0x7f226df9ce59 [ 524.428831][T19277] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 524.428849][T19277] RSP: 002b:00007f226ee33028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 524.428869][T19277] RAX: ffffffffffffffda RBX: 00007f226e215fa0 RCX: 00007f226df9ce59 [ 524.428882][T19277] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 524.428895][T19277] RBP: 00007f226ee33090 R08: 0000000000000000 R09: 0000000000000000 [ 524.428907][T19277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 524.428918][T19277] R13: 00007f226e216038 R14: 00007f226e215fa0 R15: 00007f226e33fa48 [ 524.428939][T19277] [ 524.429054][T19277] Mem-Info: [ 524.864354][T19277] active_anon:8494 inactive_anon:1 isolated_anon:0 [ 524.864354][T19277] active_file:18323 inactive_file:42373 isolated_file:0 [ 524.864354][T19277] unevictable:768 dirty:107 writeback:0 [ 524.864354][T19277] slab_reclaimable:7671 slab_unreclaimable:116429 [ 524.864354][T19277] mapped:31920 shmem:2554 pagetables:1965 [ 524.864354][T19277] sec_pagetables:0 bounce:0 [ 524.864354][T19277] kernel_misc_reclaimable:0 [ 524.864354][T19277] free:1275927 free_pcp:16578 free_cma:0 [ 524.944068][T19277] Node 0 active_anon:32404kB inactive_anon:4kB active_file:73264kB inactive_file:169276kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:127564kB dirty:436kB writeback:0kB shmem:6632kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14008kB pagetables:7824kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 525.025103][T19277] Node 1 active_anon:2048kB inactive_anon:0kB active_file:28kB inactive_file:212kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28kB dirty:0kB writeback:0kB shmem:3584kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 525.060613][T19277] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 525.135865][T19277] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 525.155857][T19277] Node 0 DMA32 free:1141320kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:35304kB inactive_anon:4kB active_file:73264kB inactive_file:169276kB unevictable:1536kB writepending:436kB zspages:0kB present:3129332kB managed:2552320kB mlocked:0kB bounce:0kB free_pcp:57352kB local_pcp:20144kB free_cma:0kB [ 525.244286][T19277] lowmem_reserve[]: 0 0 0 0 0 [ 525.259332][T19277] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:656kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 525.310837][T19302] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4695'. [ 525.354025][T19277] lowmem_reserve[]: 0 0 0 0 0 [ 525.387726][T19277] Node 1 Normal free:3947028kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:2048kB inactive_anon:0kB active_file:28kB inactive_file:212kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:5892kB local_pcp:5892kB free_cma:0kB [ 525.453509][T19277] lowmem_reserve[]: 0 0 0 0 0 [ 525.493699][T19277] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 525.524209][T19277] Node 0 DMA32: 4766*4kB (UE) 2876*8kB (UME) 3377*16kB (UME) 820*32kB (UME) 1015*64kB (UME) 978*128kB (UME) 692*256kB (UME) 384*512kB (UME) 215*1024kB (UM) 31*2048kB (UM) 40*4096kB (UME) = 1133736kB [ 525.638697][T19277] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 525.651150][T19300] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4693'. [ 525.691880][T19277] Node 1 Normal: 2*4kB (M) 10*8kB (UM) 9*16kB (UM) 9*32kB (UM) 9*64kB (UM) 8*128kB (UM) 2*256kB (UM) 2*512kB (UM) 1*1024kB (U) 3*2048kB (UM) 961*4096kB (M) = 3947080kB [ 525.779531][T19308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4697'. [ 525.815450][T19277] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 525.849957][T19277] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 525.914782][T19277] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 525.963571][T19277] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 526.032275][T19277] 64321 total pagecache pages [ 526.055789][T19277] 2 pages in swap cache [ 526.074360][T19277] Free swap = 124988kB [ 526.101985][T19277] Total swap = 124996kB [ 526.129637][T19277] 2097051 pages RAM [ 526.157232][T19277] 0 pages HighMem/MovableOnly [ 526.168638][T19277] 427192 pages reserved [ 526.177707][T19277] 0 pages cma reserved [ 526.186232][T19277] vivid-007: kernel_thread() failed [ 526.198913][T19277] vivid-007: kernel_thread() failed [ 526.205644][T19277] vivid-007: kernel_thread() failed [ 526.211958][T19277] vivid-007: kernel_thread() failed [ 526.264659][T19308] bond1: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 526.278868][T19308] bond1 (unregistering): Released all slaves [ 526.458112][T19322] Cannot find add_set index 0 as target [ 526.667405][T19330] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 527.082372][ T6911] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 527.270068][ T6911] usb 3-1: Using ep0 maxpacket: 32 [ 527.287764][ T6911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 527.303713][ T6911] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 527.332660][ T6911] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 527.354458][ T6911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.379124][ T6911] usb 3-1: config 0 descriptor?? [ 527.379946][T18661] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 527.408051][ T6911] hub 3-1:0.0: USB hub found [ 527.529953][T18661] usb 5-1: device descriptor read/64, error -71 [ 527.590974][T19349] binder: 19348:19349 ioctl c0306201 2000000001c0 returned -14 [ 527.613680][ T6911] hub 3-1:0.0: config failed, can't read hub descriptor (err -90) [ 527.790179][T18661] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 527.817574][ T6911] usbhid 3-1:0.0: can't add hid device: -71 [ 527.844116][ T6911] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 527.893047][ T6911] usb 3-1: USB disconnect, device number 14 [ 527.939957][T18661] usb 5-1: device descriptor read/64, error -71 [ 528.060425][T18661] usb usb5-port1: attempt power cycle [ 528.079557][T19365] x_tables: unsorted underflow at hook 4 [ 528.409936][T18661] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 528.440378][T18661] usb 5-1: device descriptor read/8, error -71 [ 528.681172][ T6911] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 528.701606][T18661] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 528.731078][T18661] usb 5-1: device descriptor read/8, error -71 [ 528.824689][T19385] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 528.840181][T18661] usb usb5-port1: unable to enumerate USB device [ 528.840267][ T6911] usb 6-1: Using ep0 maxpacket: 16 [ 528.871910][ T6911] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 528.884602][ T6911] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 528.895310][ T6911] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 528.912321][ T6911] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 528.923064][ T6911] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.945811][ T6911] usb 6-1: config 0 descriptor?? [ 528.974963][T19389] syzkaller0: entered promiscuous mode [ 528.981511][T19389] syzkaller0: entered allmulticast mode [ 528.992548][T19389] tipc: Enabled bearer , priority 0 [ 529.003643][T19388] tipc: Resetting bearer [ 529.018774][T19388] tipc: Disabling bearer [ 529.306878][T19408] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4728'. [ 529.376514][T19370] xt_cgroup: path and classid specified [ 529.394700][ T6911] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0030/input/input75 [ 529.464846][ T6911] microsoft 0003:045E:07DA.0030: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 529.513421][T19414] fuse: Bad value for 'fd' [ 529.601651][ T9] usb 6-1: USB disconnect, device number 8 [ 529.679959][T18106] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 529.841597][T18106] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 529.852848][T18106] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 529.863137][T18106] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 529.863227][T19421] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 529.876066][T18106] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 529.882486][T19421] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 529.900467][T19422] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(11) [ 529.907073][T19422] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 529.915238][T18106] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.925351][T18106] usb 4-1: config 0 descriptor?? [ 529.930320][T19421] vhci_hcd vhci_hcd.0: Device attached [ 529.937001][T19422] vhci_hcd vhci_hcd.0: Device attached [ 529.970513][T19425] vhci_hcd: connection closed [ 529.970795][T14458] vhci_hcd vhci_hcd.0: stop threads [ 529.970826][T19426] vhci_hcd: connection closed [ 529.975896][T14458] vhci_hcd vhci_hcd.0: release socket [ 529.995589][T14458] vhci_hcd vhci_hcd.0: disconnect device [ 530.001492][T14458] vhci_hcd vhci_hcd.0: stop threads [ 530.006737][T14458] vhci_hcd vhci_hcd.0: release socket [ 530.012193][T14458] vhci_hcd vhci_hcd.0: disconnect device [ 530.151633][T19430] loop3: detected capacity change from 0 to 7 [ 530.174450][T19430] Dev loop3: unable to read RDB block 7 [ 530.182398][T19430] loop3: unable to read partition table [ 530.189236][T19430] loop3: partition table beyond EOD, truncated [ 530.202998][T19430] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 530.273671][ T29] audit: type=1326 audit(1781765985.213:11113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19433 comm="syz.5.4736" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e6639ce59 code=0x7ffc0000 [ 530.307930][ T29] audit: type=1326 audit(1781765985.213:11114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19433 comm="syz.5.4736" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e6639ce59 code=0x7ffc0000 [ 530.332927][ T29] audit: type=1326 audit(1781765985.223:11115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19433 comm="syz.5.4736" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e6639ce59 code=0x7ffc0000 [ 530.361428][T19413] netlink: 'syz.3.4730': attribute type 10 has an invalid length. [ 530.365025][ T29] audit: type=1326 audit(1781765985.223:11116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19433 comm="syz.5.4736" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e6639ce59 code=0x7ffc0000 [ 530.370369][T19413] tipc: Resetting bearer [ 530.394453][ T29] audit: type=1326 audit(1781765985.223:11117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19433 comm="syz.5.4736" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f6e6639ce59 code=0x7ffc0000 [ 530.394503][ T29] audit: type=1326 audit(1781765985.223:11118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19433 comm="syz.5.4736" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e6639ce59 code=0x7ffc0000 [ 530.394537][ T29] audit: type=1326 audit(1781765985.223:11119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19433 comm="syz.5.4736" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e6639ce59 code=0x7ffc0000 [ 530.394584][ T29] audit: type=1326 audit(1781765985.223:11120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19433 comm="syz.5.4736" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e6639ce59 code=0x7ffc0000 [ 530.394617][ T29] audit: type=1326 audit(1781765985.223:11121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19433 comm="syz.5.4736" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e6639ce59 code=0x7ffc0000 [ 530.394648][ T29] audit: type=1326 audit(1781765985.223:11122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19433 comm="syz.5.4736" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6e6639ce59 code=0x7ffc0000 [ 530.575097][T19413] tipc: Resetting bearer [ 530.609094][T19413] 8021q: adding VLAN 0 to HW filter on device team0 [ 530.633821][T19413] bond0: (slave team0): Enslaving as an active interface with an up link [ 530.676234][T18106] usbhid 4-1:0.0: can't add hid device: -71 [ 530.682422][T18106] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 530.695236][T18106] usb 4-1: USB disconnect, device number 127 [ 530.723917][T19442] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4739'. [ 530.810339][T19442] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4739'. [ 531.360061][T18661] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 531.412794][T19465] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 531.489915][T18661] usb 6-1: device descriptor read/64, error -71 [ 531.498695][T19468] loop3: detected capacity change from 0 to 7 [ 531.511013][T19468] Dev loop3: unable to read RDB block 7 [ 531.516942][T19468] loop3: unable to read partition table [ 531.522764][T19468] loop3: partition table beyond EOD, truncated [ 531.529011][T19468] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 531.742067][T18661] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 531.880265][T18661] usb 6-1: device descriptor read/64, error -71 [ 532.012487][T18661] usb usb6-port1: attempt power cycle [ 532.172274][ T5710] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 532.290009][ T6895] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 532.331548][ T5710] usb 5-1: config 2 has an invalid interface number: 174 but max is 0 [ 532.344772][ T5710] usb 5-1: config 2 has no interface number 0 [ 532.358555][ T5710] usb 5-1: config 2 interface 174 altsetting 0 has an endpoint descriptor with address 0x9E, changing to 0x8E [ 532.373355][T18661] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 532.392559][ T5710] usb 5-1: config 2 interface 174 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 1023 [ 532.416683][ T5710] usb 5-1: config 2 interface 174 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 532.430871][T18661] usb 6-1: device descriptor read/8, error -71 [ 532.445486][ T5710] usb 5-1: config 2 interface 174 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 532.469015][ T5710] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 532.470084][ T6895] usb 4-1: Using ep0 maxpacket: 32 [ 532.487284][ T5710] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.504507][ T5710] usb 5-1: Product: syz [ 532.516106][ T5710] usb 5-1: Manufacturer: syz [ 532.520893][ T5710] usb 5-1: SerialNumber: syz [ 532.528576][T19485] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 532.543194][ T6895] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 532.589955][ T6895] usb 4-1: config 0 has no interface number 0 [ 532.624509][ T6895] usb 4-1: config 0 interface 184 has no altsetting 0 [ 532.670241][ T6895] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 532.700096][T18661] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 532.719622][ T6895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.731462][T18661] usb 6-1: device descriptor read/8, error -71 [ 532.790696][ T6895] usb 4-1: Product: syz [ 532.826144][ T6895] usb 4-1: Manufacturer: syz [ 532.829561][T19493] netlink: 'syz.0.4754': attribute type 1 has an invalid length. [ 532.859862][ T0] NOHZ tick-stop error: local softirq work is pending, handler #206!!! [ 532.870675][T18661] usb usb6-port1: unable to enumerate USB device [ 532.891952][ T6895] usb 4-1: SerialNumber: syz [ 532.906931][T19495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.922454][ T6895] usb 4-1: config 0 descriptor?? [ 532.982056][T19495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.005531][T19493] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 533.308189][ T5710] usb 5-1: probing VID:PID(0424:012C) [ 533.331192][ T5710] usb 5-1: vub300 testing BULK IN EndPoint(0) 8E [ 533.344819][T19502] 8021q: adding VLAN 0 to HW filter on device batadv7 [ 533.355838][ T5710] usb 5-1: vub300 testing BULK IN EndPoint(1) 82 [ 533.369163][ T5710] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs [ 533.378719][T19502] team0: Port device batadv7 added [ 533.405151][ T5710] vub300 5-1:2.174: probe with driver vub300 failed with error -22 [ 533.436277][ T5710] usb 5-1: USB disconnect, device number 27 [ 533.687044][T19510] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4760'. [ 533.718358][T19510] team0: Port device vlan0 removed [ 533.777430][T19511] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4760'. [ 533.820583][ T6912] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 533.945290][T19514] mac80211_hwsim hwsim41 syzkaller0: entered promiscuous mode [ 533.954427][T19514] mac80211_hwsim hwsim41 syzkaller0: entered allmulticast mode [ 533.994196][T19514] tipc: Enabled bearer , priority 0 [ 534.020028][ T6912] usb 3-1: Using ep0 maxpacket: 8 [ 534.032449][ T6912] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 534.048591][ T6912] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 534.065925][ T6912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.121584][ T6912] usb 3-1: config 0 descriptor?? [ 534.156894][ T6912] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 534.449978][ T6911] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 534.612914][ T6911] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 534.630840][ T6911] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 534.646630][ T6911] usb 5-1: config 0 interface 0 has no altsetting 0 [ 534.655699][ T6911] usb 5-1: New USB device found, idVendor=05ac, idProduct=0320, bcdDevice= 0.00 [ 534.667251][ T6911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.680078][ T6911] usb 5-1: config 0 descriptor?? [ 534.770272][T19508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.794741][T19508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.841365][ T5710] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 534.919030][T19528] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4765'. [ 535.094359][T19508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 535.124380][T19535] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 535.131451][T19508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 535.154048][T19535] team0: Port device batadv4 added [ 535.183459][T19539] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4769'. [ 535.217519][T19539] bond1: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 535.217591][ T6912] gspca_vc032x: reg_w err -71 [ 535.236726][T19539] bond1 (unregistering): Released all slaves [ 535.272883][ T6912] vc032x 3-1:0.0: probe with driver vc032x failed with error -71 [ 535.321320][ T6912] usb 3-1: USB disconnect, device number 15 [ 535.364482][ T6911] hid_parser_main: 425 callbacks suppressed [ 535.364526][ T6911] apple 0003:05AC:0320.0031: unknown main item tag 0x0 [ 535.421088][ T6911] apple 0003:05AC:0320.0031: unknown main item tag 0x0 [ 535.429289][ T6911] apple 0003:05AC:0320.0031: unknown main item tag 0x0 [ 535.457459][ T6911] apple 0003:05AC:0320.0031: unknown main item tag 0x0 [ 535.502369][ T6911] apple 0003:05AC:0320.0031: unknown main item tag 0x0 [ 535.535121][ T6911] apple 0003:05AC:0320.0031: unknown main item tag 0x0 [ 535.549095][ T6911] apple 0003:05AC:0320.0031: unknown main item tag 0x0 [ 535.564524][ T6895] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 535.576463][ T6911] apple 0003:05AC:0320.0031: unknown main item tag 0x0 [ 535.595073][ T6911] apple 0003:05AC:0320.0031: unknown main item tag 0x0 [ 535.602304][ T6895] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 535.618319][ T6911] apple 0003:05AC:0320.0031: unknown main item tag 0x0 [ 535.632029][ T6895] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 535.669118][ T6895] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 535.689958][ T6895] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 535.707133][ T6911] apple 0003:05AC:0320.0031: hidraw0: USB HID v7f.fd Device [HID 05ac:0320] on usb-dummy_hcd.4-1/input0 [ 535.769529][ T6895] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 535.793283][ T6895] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 535.862323][ T6895] usb 4-1: USB disconnect, device number 2 [ 536.010780][T19557] vlan2: entered promiscuous mode [ 536.164660][T19567] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 536.194759][T19567] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 536.210077][ T6912] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 536.340165][ T6912] usb 3-1: device descriptor read/64, error -71 [ 536.370933][ T5710] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 536.400833][T19569] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4779'. [ 536.532070][ T5710] usb 6-1: unable to get BOS descriptor or descriptor too short [ 536.542500][ T5710] usb 6-1: config 13 has an invalid interface number: 177 but max is 0 [ 536.551020][ T5710] usb 6-1: config 13 has no interface number 0 [ 536.557224][ T5710] usb 6-1: config 13 interface 177 altsetting 4 has an endpoint descriptor with address 0x99, changing to 0x89 [ 536.569139][ T5710] usb 6-1: config 13 interface 177 altsetting 4 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 536.582387][ T5710] usb 6-1: config 13 interface 177 altsetting 4 endpoint 0x89 has invalid wMaxPacketSize 0 [ 536.590427][ T6912] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 536.593957][ T5710] usb 6-1: config 13 interface 177 has no altsetting 0 [ 536.608993][ T5710] usb 6-1: New USB device found, idVendor=15c2, idProduct=f142, bcdDevice=ef.b7 [ 536.619732][ T5710] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.628245][ T5710] usb 6-1: Product: syz [ 536.632560][ T5710] usb 6-1: Manufacturer: syz [ 536.639316][ T5710] usb 6-1: SerialNumber: syz [ 536.749980][ T6912] usb 3-1: device descriptor read/64, error -71 [ 536.805191][T19579] sg_write: data in/out 166110/24 bytes for SCSI command 0x0-- guessing data in; [ 536.805191][T19579] program syz.3.4782 not setting count and/or reply_len properly [ 536.880434][ T6912] usb usb3-port1: attempt power cycle [ 537.215653][T18661] usb 5-1: USB disconnect, device number 28 [ 537.229940][ T6912] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 537.278415][ T6912] usb 3-1: device descriptor read/8, error -71 [ 537.540029][ T6912] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 537.560818][ T6912] usb 3-1: device descriptor read/8, error -71 [ 537.671514][ T6912] usb usb3-port1: unable to enumerate USB device [ 537.709938][T18661] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 537.875002][T18661] usb 5-1: unable to get BOS descriptor or descriptor too short [ 537.895220][T18661] usb 5-1: not running at top speed; connect to a high speed hub [ 537.923339][T18661] usb 5-1: config 1 interface 0 altsetting 130 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 537.944073][T18661] usb 5-1: config 1 interface 0 altsetting 130 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 537.968849][T18661] usb 5-1: config 1 interface 0 has no altsetting 0 [ 537.984569][T18661] usb 5-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.40 [ 538.006641][T18661] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.027710][T18661] usb 5-1: Product: syz [ 538.039337][T18661] usb 5-1: Manufacturer: syz [ 538.051336][T18661] usb 5-1: SerialNumber: syz [ 538.074635][T19594] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 539.161640][ T5710] usb 6-1: USB disconnect, device number 14 [ 539.203486][T19603] team0: Device xfrm0 is of different type [ 539.274795][T19604] tipc: Enabling of bearer rejected, already enabled [ 539.337610][T19610] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4791'. [ 539.379434][T19610] hsr_slave_0 (unregistering): left promiscuous mode [ 539.704070][T19617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.747508][T19617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 540.384376][T19628] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4797'. [ 540.403554][T19628] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4797'. [ 541.314383][T18661] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input76 [ 541.363773][ T4971] bcm5974 5-1:1.0: could not read from device [ 541.383294][T18661] usb 5-1: USB disconnect, device number 29 [ 541.563847][T19667] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4805'. [ 541.859871][ T0] NOHZ tick-stop error: local softirq work is pending, handler #06!!! [ 542.372244][T18106] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 542.561214][T18106] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 542.598678][T18106] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 542.649052][T18106] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 542.687541][T18106] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.705651][T19680] fuse: Unknown parameter 'u’0000}Z\ƒE‹_id' [ 542.727612][T18106] usb 4-1: Product: syz [ 542.740353][T18106] usb 4-1: Manufacturer: syz [ 542.755892][T18106] usb 4-1: SerialNumber: syz [ 542.786318][T18106] cdc_mbim 4-1:1.0: skipping garbage [ 542.989354][T19672] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 543.628726][T19672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.677537][T19672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 544.132171][T19700] 8021q: VLANs not supported on ip6gre0 [ 544.194480][T18106] cdc_mbim 4-1:1.0: bind() failure [ 544.242215][T18106] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 544.267636][T18106] cdc_ncm 4-1:1.1: bind() failure [ 544.291093][T18106] usb 4-1: USB disconnect, device number 3 [ 544.543712][T19709] vlan2: entered promiscuous mode [ 544.785426][T19712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 544.836257][T19712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.130259][ T6895] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 545.210845][T19727] vlan0: entered promiscuous mode [ 545.216642][T19727] bridge0: entered promiscuous mode [ 545.304852][ T6895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 545.339526][ T6895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 545.353217][ T6895] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 545.362478][ T6895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.375922][T19732] fuse: Bad value for 'fd' [ 545.383596][ T6895] usb 4-1: config 0 descriptor?? [ 545.397199][T19737] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4826'. [ 545.441237][T19739] kvm: kvm [19738]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010004) = 0x10000000001780 [ 545.464986][T19739] netlink: 'syz.5.4827': attribute type 1 has an invalid length. [ 545.473347][T19739] netlink: 'syz.5.4827': attribute type 2 has an invalid length. [ 545.818375][T19751] vlan2: entered promiscuous mode [ 545.866082][ T6895] usbhid 4-1:0.0: can't add hid device: -71 [ 545.872797][ T6895] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 545.883940][ T6895] usb 4-1: USB disconnect, device number 4 [ 546.050824][ T6911] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 546.051782][T19759] loop3: detected capacity change from 0 to 7 [ 546.065813][T19759] Dev loop3: unable to read RDB block 7 [ 546.073035][T19759] loop3: unable to read partition table [ 546.078818][T19759] loop3: partition table beyond EOD, truncated [ 546.085443][T19759] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 546.145735][T19761] syzkaller0: entered promiscuous mode [ 546.151566][T19761] syzkaller0: entered allmulticast mode [ 546.212187][ T6911] usb 6-1: config 0 has an invalid interface number: 175 but max is 0 [ 546.235852][ T6911] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 546.270247][ T6911] usb 6-1: config 0 has no interface number 0 [ 546.277260][ T6911] usb 6-1: config 0 interface 175 altsetting 0 has an endpoint descriptor with address 0xBC, changing to 0x8C [ 546.289761][ T6911] usb 6-1: config 0 interface 175 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10 [ 546.303747][ T6911] usb 6-1: config 0 interface 175 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 546.314630][ T6911] usb 6-1: config 0 interface 175 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 16 [ 546.335271][ T6911] usb 6-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice=f9.9b [ 546.346107][ T6911] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.348978][T19765] team0: Device xfrm0 is of different type [ 546.354929][ T6911] usb 6-1: Product: syz [ 546.377267][T19765] tipc: Enabling of bearer rejected, already enabled [ 546.387905][ T6911] usb 6-1: Manufacturer: syz [ 546.393821][ T6911] usb 6-1: SerialNumber: syz [ 546.406803][ T6911] usb 6-1: config 0 descriptor?? [ 546.425447][ T6911] symbolserial 6-1:0.175: symbol converter detected [ 546.448026][ T6911] usb 6-1: symbol converter now attached to ttyUSB0 [ 546.500121][T19772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.522087][T19772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 546.550067][T18106] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 546.603725][T19776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.613419][T19776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 546.652778][ T6911] usb 6-1: USB disconnect, device number 15 [ 546.679706][ T6911] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 546.699018][ T6911] symbolserial 6-1:0.175: device disconnected [ 546.715532][T18106] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 546.732087][T18106] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 546.745279][T19781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.747848][T18106] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 546.761892][T19781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 546.766246][T18106] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 546.787537][T18106] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 546.797234][T18106] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.806899][ T5710] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 546.817114][T18106] usb 5-1: config 0 descriptor?? [ 546.959926][ T5710] usb 4-1: Using ep0 maxpacket: 16 [ 546.968405][ T5710] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 546.977757][ T5710] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.986552][ T5710] usb 4-1: Product: syz [ 546.990795][ T5710] usb 4-1: Manufacturer: syz [ 546.995613][ T5710] usb 4-1: SerialNumber: syz [ 547.002111][ T5710] usb 4-1: config 0 descriptor?? [ 547.008988][ T5710] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 547.024653][T18106] hdpvr 5-1:0.0: firmware version 0x1e dated Š [ 547.232011][T19767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.255328][T19767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.269416][T19786] loop3: detected capacity change from 0 to 7 [ 547.292860][T19789] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4844'. [ 547.300969][T19786] Dev loop3: unable to read RDB block 7 [ 547.318570][T19786] loop3: unable to read partition table [ 547.340777][T19786] loop3: partition table beyond EOD, truncated [ 547.358185][T19786] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 547.409269][T19794] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4846'. [ 547.477399][T19798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.486787][T19798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.609738][T19803] ======================================================= [ 547.609738][T19803] WARNING: The mand mount option has been deprecated and [ 547.609738][T19803] and is ignored by this kernel. Remove the mand [ 547.609738][T19803] option from the mount to silence this warning. [ 547.609738][T19803] ======================================================= [ 547.980040][ T9] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 547.989924][T18661] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 548.129923][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 548.136665][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 548.148785][ T9] usb 6-1: New USB device found, idVendor=056a, idProduct=0026, bcdDevice= 0.00 [ 548.158141][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.167160][T18661] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 548.176291][T18661] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.185464][ T9] usb 6-1: config 0 descriptor?? [ 548.193433][T18661] usb 3-1: config 0 descriptor?? [ 548.201964][T18661] cp210x 3-1:0.0: cp210x converter detected [ 548.266126][ T5710] usb 4-1: Quatech SSU-100 USB to Serial Driver converter now attached to ttyUSB0 [ 548.543986][ T5710] usb 4-1: USB disconnect, device number 5 [ 548.553587][ T5710] ssu100 ttyUSB0: Quatech SSU-100 USB to Serial Driver converter now disconnected from ttyUSB0 [ 548.570259][ T5710] ssu100 4-1:0.0: device disconnected [ 548.630092][T19807] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4850'. [ 548.787640][T19819] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4850'. [ 548.809380][ T9] usbhid 6-1:0.0: can't add hid device: -71 [ 548.827655][ T9] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 548.840196][ T9] usb 6-1: USB disconnect, device number 16 [ 548.923477][T18661] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 548.942893][T18661] cp210x 3-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 548.961568][T18661] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 548.972109][T18661] usb 3-1: cp210x converter now attached to ttyUSB0 [ 548.981275][T18661] usb 3-1: USB disconnect, device number 20 [ 548.990686][T18661] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 549.011566][T18661] cp210x 3-1:0.0: device disconnected [ 549.377136][T18106] hdpvr 5-1:0.0: Could not setup controls [ 549.398824][T18106] hdpvr 5-1:0.0: registering videodev failed [ 549.446733][T18106] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -71 [ 549.459112][T18106] usb 5-1: USB disconnect, device number 30 [ 549.466110][T19844] syzkaller0: entered promiscuous mode [ 549.497288][T19844] syzkaller0: entered allmulticast mode [ 549.511312][T19846] loop3: detected capacity change from 0 to 7 [ 549.563508][T19844] tipc: Enabled bearer , priority 0 [ 549.579402][T19843] tipc: Resetting bearer [ 549.587182][T19846] Dev loop3: unable to read RDB block 7 [ 549.596775][T19846] loop3: unable to read partition table [ 549.602726][T19846] loop3: partition table beyond EOD, truncated [ 549.610292][T19846] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 549.634447][T19843] tipc: Disabling bearer [ 549.726470][T19851] syzkaller0: entered promiscuous mode [ 549.758672][T19851] syzkaller0: entered allmulticast mode [ 550.003380][T19860] team0: Device xfrm0 is of different type [ 550.027736][T19860] tipc: Started in network mode [ 550.040194][T19860] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 550.057205][T19860] tipc: Enabled bearer , priority 10 [ 550.083072][T19860] ªªªªªª: renamed from lo [ 550.100866][T18106] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 550.235090][T19868] 8021q: adding VLAN 0 to HW filter on device batadv8 [ 550.252881][T18106] usb 6-1: device descriptor read/64, error -71 [ 550.274885][T19868] team0: Port device batadv8 added [ 550.426630][T19877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4877'. [ 550.484126][T19880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 550.508173][T19880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.519905][T18106] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 550.680056][T18106] usb 6-1: device descriptor read/64, error -71 [ 550.722756][T19889] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4882'. [ 550.800290][T18106] usb usb6-port1: attempt power cycle [ 551.140369][T18106] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 551.173272][T19895] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4884'. [ 551.187255][T18661] tipc: Node number set to 11578026 [ 551.195973][T18106] usb 6-1: device descriptor read/8, error -71 [ 551.450036][T18106] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 551.490836][T18106] usb 6-1: device descriptor read/8, error -71 [ 551.610410][T18106] usb usb6-port1: unable to enumerate USB device [ 552.699914][T19883] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 552.699990][T17212] Bluetooth: hci5: command 0x0406 tx timeout [ 552.712610][T19883] Bluetooth: hci5: Opcode 0x0406 failed: -110 [ 553.257225][T19906] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 553.266074][T19906] team0: Port device batadv1 added [ 553.338035][T19910] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4890'. [ 553.364745][T19910] bond1: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 553.375946][T19910] bond1 (unregistering): Released all slaves [ 553.483954][T19913] FAULT_INJECTION: forcing a failure. [ 553.483954][T19913] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 553.498221][T19913] CPU: 1 UID: 0 PID: 19913 Comm: syz.5.4891 Tainted: G L syzkaller #0 PREEMPT(full) [ 553.498242][T19913] Tainted: [L]=SOFTLOCKUP [ 553.498246][T19913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 553.498252][T19913] Call Trace: [ 553.498257][T19913] [ 553.498261][T19913] dump_stack_lvl+0xe8/0x150 [ 553.498278][T19913] should_fail_ex+0x40c/0x560 [ 553.498295][T19913] _copy_to_user+0x31/0xb0 [ 553.498309][T19913] copy_siginfo_to_user+0x22/0xc0 [ 553.498327][T19913] x64_setup_rt_frame+0x764/0xc50 [ 553.498342][T19913] ? rcu_is_watching+0x15/0xb0 [ 553.498357][T19913] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 553.498373][T19913] arch_do_signal_or_restart+0x456/0x860 [ 553.498389][T19913] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 553.498405][T19913] ? do_readv+0x2b1/0x2e0 [ 553.498415][T19913] ? rcu_is_watching+0x15/0xb0 [ 553.498425][T19913] exit_to_user_mode_loop+0x104/0x730 [ 553.498441][T19913] ? rcu_is_watching+0x15/0xb0 [ 553.498451][T19913] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.498461][T19913] do_syscall_64+0x353/0x580 [ 553.498475][T19913] ? clear_bhb_loop+0x40/0x90 [ 553.498486][T19913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.498496][T19913] RIP: 0033:0x7f6e6639ce57 [ 553.498506][T19913] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 553.498515][T19913] RSP: 002b:00007f6e67324028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 553.498527][T19913] RAX: 0000000000000013 RBX: 00007f6e66615fa0 RCX: 00007f6e6639ce59 [ 553.498534][T19913] RDX: 0000000000000001 RSI: 0000200000000200 RDI: 0000000000000003 [ 553.498540][T19913] RBP: 00007f6e67324090 R08: 0000000000000000 R09: 0000000000000000 [ 553.498547][T19913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 553.498553][T19913] R13: 00007f6e66616038 R14: 00007f6e66615fa0 R15: 00007f6e6673fa48 [ 553.498563][T19913] [ 553.706511][T19883] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 553.716745][T19883] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 553.726857][T19883] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 553.732902][T19883] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 553.759057][T19883] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 553.774698][T19883] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 553.782501][T19883] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 553.789060][T19883] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 553.795337][T19883] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 553.813453][T19883] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 553.831926][T19893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.844183][T19917] IPVS: sed: FWM 3 0x00000003 - no destination available [ 553.852056][T19893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.867658][ T24] IPVS: starting estimator thread 0... [ 553.982640][T19919] IPVS: using max 46 ests per chain, 110400 per kthread [ 554.026804][T18661] hid_parser_main: 435 callbacks suppressed [ 554.029598][T18661] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 554.077867][T18661] hid-generic 0000:0000:0000.0032: hidraw0: HID v0.00 Device [syz1] on syz0 [ 554.099922][ T9] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 554.259986][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 554.271741][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 554.288123][ T9] usb 5-1: config 0 has an invalid interface number: 88 but max is 0 [ 554.301308][ T9] usb 5-1: config 0 has no interface number 0 [ 554.312316][ T9] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 554.328664][T19924] netlink: 'syz.3.4896': attribute type 13 has an invalid length. [ 554.336675][ T9] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 554.348438][T19924] netlink: 'syz.3.4896': attribute type 17 has an invalid length. [ 554.357401][ T9] usb 5-1: config 0 interface 88 has no altsetting 0 [ 554.360069][ T24] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 554.385090][ T9] usb 5-1: string descriptor 0 read error: -71 [ 554.404316][ T9] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 554.426925][ T9] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 554.447431][ T9] usb 5-1: config 0 descriptor?? [ 554.458440][ T9] usb 5-1: can't set config #0, error -71 [ 554.477792][ T9] usb 5-1: USB disconnect, device number 31 [ 554.520320][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 554.530037][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 554.542487][ T24] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 554.559674][ T24] usb 6-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 554.569668][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.578650][ T24] usb 6-1: Product: syz [ 554.583824][ T24] usb 6-1: Manufacturer: syz [ 554.588840][ T24] usb 6-1: SerialNumber: syz [ 554.719412][T19932] 8021q: adding VLAN 0 to HW filter on device bond3 [ 554.728001][T19932] bond0: (slave bond3): Enslaving as an active interface with an up link [ 554.780362][T17212] Bluetooth: hci0: command 0x0406 tx timeout [ 554.780457][ T5626] Bluetooth: hci5: command 0x0406 tx timeout [ 554.977645][ T24] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 554.986732][ T24] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 555.030085][T19948] netlink: 'syz.3.4901': attribute type 2 has an invalid length. [ 555.071380][T19949] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4899'. [ 555.081159][T19949] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4899'. [ 555.200010][ T6895] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 555.211133][T19953] FAULT_INJECTION: forcing a failure. [ 555.211133][T19953] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 555.225821][T19953] CPU: 0 UID: 0 PID: 19953 Comm: syz.0.4903 Tainted: G L syzkaller #0 PREEMPT(full) [ 555.225850][T19953] Tainted: [L]=SOFTLOCKUP [ 555.225856][T19953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 555.225866][T19953] Call Trace: [ 555.225873][T19953] [ 555.225881][T19953] dump_stack_lvl+0xe8/0x150 [ 555.225902][T19953] should_fail_ex+0x40c/0x560 [ 555.225929][T19953] _copy_from_user+0x2d/0xb0 [ 555.225952][T19953] restore_altstack+0xae/0x4f0 [ 555.225970][T19953] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 555.225993][T19953] ? __pfx_restore_altstack+0x10/0x10 [ 555.226011][T19953] ? rcu_is_watching+0x15/0xb0 [ 555.226030][T19953] ? trace_irq_enable+0x3b/0x140 [ 555.226054][T19953] __ia32_sys_rt_sigreturn+0x2bd/0x8c0 [ 555.226082][T19953] ? trace_irq_enable+0x3b/0x140 [ 555.226104][T19953] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 555.226129][T19953] ? _raw_spin_unlock_irq+0x2e/0x50 [ 555.226148][T19953] ? signal_setup_done+0x22f/0x310 [ 555.226170][T19953] ? arch_do_signal_or_restart+0x4f4/0x860 [ 555.226195][T19953] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 555.226221][T19953] ? __task_pid_nr_ns+0x28/0x470 [ 555.226236][T19953] ? rcu_is_watching+0x15/0xb0 [ 555.226255][T19953] ? rcu_is_watching+0x15/0xb0 [ 555.226274][T19953] ? lock_release+0x4b/0x3c0 [ 555.226299][T19953] ? rcu_is_watching+0x15/0xb0 [ 555.226319][T19953] ? rcu_is_watching+0x15/0xb0 [ 555.226337][T19953] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.226355][T19953] do_syscall_64+0x174/0x580 [ 555.226376][T19953] ? trace_irq_disable+0x3b/0x140 [ 555.226399][T19953] ? clear_bhb_loop+0x40/0x90 [ 555.226419][T19953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.226438][T19953] RIP: 0033:0x7f226df3e1d9 [ 555.226454][T19953] Code: 11 06 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 0c 25 [ 555.226471][T19953] RSP: 002b:00007f226ee32a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 555.226491][T19953] RAX: ffffffffffffffda RBX: 00007f226e215fa0 RCX: 00007f226df3e1d9 [ 555.226505][T19953] RDX: 00007f226ee32a80 RSI: 00007f226ee32bb0 RDI: 0000000000000021 [ 555.226517][T19953] RBP: 00007f226ee33090 R08: 0000000000000000 R09: 0000000000000000 [ 555.226529][T19953] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 555.226540][T19953] R13: 00007f226e216038 R14: 00007f226e215fa0 R15: 00007f226e33fa48 [ 555.226561][T19953] [ 555.374081][ T6895] usb 3-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=a4.46 [ 555.436409][T19959] loop3: detected capacity change from 0 to 7 [ 555.491943][T19959] Dev loop3: unable to read RDB block 7 [ 555.497540][T19959] loop3: unable to read partition table [ 555.503683][T19959] loop3: partition table beyond EOD, truncated [ 555.509893][T19959] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 555.604922][ T6895] usb 3-1: New USB device strings: Mfr=133, Product=2, SerialNumber=0 [ 555.628336][ T6895] usb 3-1: Product: syz [ 555.637976][ T6895] usb 3-1: Manufacturer: syz [ 555.665751][ T6895] usb 3-1: config 0 descriptor?? [ 555.677187][ T6895] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 555.687812][T19965] 8021q: VLANs not supported on ip6gre0 [ 555.694850][ T6895] ftdi_sio ttyUSB0: unknown device type: 0xa446 [ 555.741651][ T5626] Bluetooth: hci1: command 0x0406 tx timeout [ 555.820890][ T5626] Bluetooth: hci4: command 0x0c1a tx timeout [ 555.821071][T17212] Bluetooth: hci3: command 0x0c1a tx timeout [ 555.892652][T18661] usb 3-1: USB disconnect, device number 21 [ 555.900771][T18661] ftdi_sio 3-1:0.0: device disconnected [ 556.036515][T19974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.055865][T19974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.173392][T19979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.201884][T19979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.476783][T19985] loop3: detected capacity change from 0 to 7 [ 556.486248][T19985] Dev loop3: unable to read RDB block 7 [ 556.494172][T19985] loop3: unable to read partition table [ 556.502785][T19985] loop3: partition table beyond EOD, truncated [ 556.517094][T19985] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 556.689911][T18661] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 556.810905][T19990] fuse: Bad value for 'user_id' [ 556.825419][T19990] fuse: Bad value for 'user_id' [ 556.860079][T17212] Bluetooth: hci0: command 0x0406 tx timeout [ 556.861740][T18661] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 556.894950][T18661] usb 4-1: config 0 interface 0 has no altsetting 0 [ 556.912096][T18661] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 556.924239][T18661] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.945206][T18661] usb 4-1: Product: syz [ 556.953529][T18661] usb 4-1: Manufacturer: syz [ 556.964783][T18661] usb 4-1: SerialNumber: syz [ 556.993373][T18661] usb 4-1: config 0 descriptor?? [ 557.014282][T18661] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 557.042983][T18661] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 557.064968][T18661] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 557.084688][T18661] usb 4-1: media controller created [ 557.111802][T19993] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4917'. [ 557.151587][T18661] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 557.329148][T18661] DVB: Unable to find symbol tda10046_attach() [ 557.354626][T18661] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 557.367084][ T24] usb 6-1: USB disconnect, device number 21 [ 557.402569][T18661] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 557.668379][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 557.678910][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 557.734196][T20012] kAFS: unable to lookup cell 'ÿ' [ 557.765742][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 557.765759][ T29] audit: type=1326 audit(1781766012.703:11223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19982 comm="syz.3.4913" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f13d0b9ce59 code=0x0 [ 557.822352][T17212] Bluetooth: hci1: command 0x0406 tx timeout [ 557.867614][T20015] tipc: Enabling of bearer rejected, already enabled [ 557.900063][T17212] Bluetooth: hci4: command 0x0c1a tx timeout [ 557.900714][ T5626] Bluetooth: hci3: command 0x0c1a tx timeout [ 557.932126][T20008] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 557.938672][T20008] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 558.054959][T18661] dvb_usb_m920x 4-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 558.080864][T20008] vhci_hcd vhci_hcd.0: Device attached [ 558.135910][T18661] usb 4-1: USB disconnect, device number 6 [ 558.205340][T20008] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 558.330066][ T24] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 558.350059][ T6895] usb 34-1: SetAddress Request (2) to port 0 [ 558.363888][ T6895] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd [ 558.431977][T20019] vhci_hcd: connection reset by peer [ 558.453677][T14459] vhci_hcd vhci_hcd.0: stop threads [ 558.467984][T14459] vhci_hcd vhci_hcd.0: release socket [ 558.479947][ T24] usb 5-1: device descriptor read/64, error -71 [ 558.493707][T14459] vhci_hcd vhci_hcd.0: disconnect device [ 558.719948][ T24] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 558.860800][ T24] usb 5-1: device descriptor read/64, error -71 [ 558.990567][ T24] usb usb5-port1: attempt power cycle [ 559.339965][ T24] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 559.401121][ T24] usb 5-1: device descriptor read/8, error -71 [ 559.591844][T20030] loop3: detected capacity change from 0 to 7 [ 559.610510][T20030] Dev loop3: unable to read RDB block 7 [ 559.637885][T20030] loop3: unable to read partition table [ 559.650371][ T24] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 559.670857][T20030] loop3: partition table beyond EOD, truncated [ 559.691017][ T24] usb 5-1: device descriptor read/8, error -71 [ 559.707022][T20030] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 559.804102][T20035] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4929'. [ 559.818509][ T24] usb usb5-port1: unable to enumerate USB device [ 559.933790][T20039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4931'. [ 559.980040][ T5626] Bluetooth: hci3: command 0x0c1a tx timeout [ 559.980058][T17212] Bluetooth: hci4: command 0x0c1a tx timeout [ 559.989801][T20039] bond2: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 560.005647][T20039] bond2 (unregistering): Released all slaves [ 560.214541][T20046] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 560.233722][T20046] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 560.243128][T20046] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 560.251737][T20046] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 560.258293][T20046] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 560.297120][ T29] audit: type=1326 audit(1781766015.233:11224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20045 comm="syz.2.4933" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f404f79ce59 code=0x7ffc0000 [ 560.354666][ T29] audit: type=1326 audit(1781766015.263:11225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20045 comm="syz.2.4933" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f404f79ce59 code=0x7ffc0000 [ 560.366230][T20057] 8021q: VLANs not supported on ip6gre0 [ 560.381912][ T29] audit: type=1326 audit(1781766015.263:11226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20045 comm="syz.2.4933" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f404f79ce59 code=0x7ffc0000 [ 560.411049][ T29] audit: type=1326 audit(1781766015.263:11227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20045 comm="syz.2.4933" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f404f79ce59 code=0x7ffc0000 [ 560.441459][ T29] audit: type=1326 audit(1781766015.263:11228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20045 comm="syz.2.4933" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f404f79ce59 code=0x7ffc0000 [ 560.468971][ T29] audit: type=1326 audit(1781766015.263:11229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20045 comm="syz.2.4933" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f404f79ce59 code=0x7ffc0000 [ 560.499597][ T29] audit: type=1326 audit(1781766015.263:11230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20045 comm="syz.2.4933" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f404f79ce59 code=0x7ffc0000 [ 560.527430][ T29] audit: type=1326 audit(1781766015.263:11231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20045 comm="syz.2.4933" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f404f79ce59 code=0x7ffc0000 [ 560.556026][ T29] audit: type=1326 audit(1781766015.263:11232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20045 comm="syz.2.4933" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f404f79ce59 code=0x7ffc0000 [ 560.738488][T20071] loop3: detected capacity change from 0 to 7 [ 560.748353][T20071] Dev loop3: unable to read RDB block 7 [ 560.758310][T20071] loop3: unable to read partition table [ 560.768697][T20071] loop3: partition table beyond EOD, truncated [ 560.790848][T20071] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 560.925954][T20077] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4944'. [ 560.997124][T20077] bond1: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 561.091597][T20077] bond1 (unregistering): Released all slaves [ 561.306627][T20090] fuse: Bad value for 'fd' [ 561.539953][T18661] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 561.680310][ T6911] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 561.693281][T18661] usb 6-1: Using ep0 maxpacket: 16 [ 561.711667][T18661] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 561.730693][T18661] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.754436][T18661] usb 6-1: config 0 descriptor?? [ 561.771560][T18661] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 561.869964][ T6911] usb 5-1: Using ep0 maxpacket: 16 [ 561.903404][ T6911] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 561.930400][ T6911] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 561.968479][ T6911] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 561.996365][ T6911] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 562.027856][T18661] gspca_sonixj: reg_w1 err -71 [ 562.043382][T18661] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 562.078049][ T6911] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 562.097100][T18661] usb 6-1: USB disconnect, device number 22 [ 562.141342][T20110] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4954'. [ 562.192621][ T6911] usb 5-1: config 1 interface 0 has no altsetting 0 [ 562.220463][T17212] Bluetooth: hci5: command 0x0406 tx timeout [ 562.267224][ T6911] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 562.288361][ T6911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.300384][T17212] Bluetooth: hci4: command 0x0c1a tx timeout [ 562.302065][ T5626] Bluetooth: hci3: command 0x0c1a tx timeout [ 562.306811][T17212] Bluetooth: hci1: command 0x0406 tx timeout [ 562.312478][ T5626] Bluetooth: hci0: command 0x0406 tx timeout [ 562.347909][ T6911] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 562.499631][ T5724] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.552393][ T6911] scsi host1: usb-storage 5-1:1.0 [ 562.608914][ T5724] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.665063][ T5724] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.749770][T18106] usb 5-1: USB disconnect, device number 36 [ 562.777032][ T5724] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.986388][T20121] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4961'. [ 562.996349][T20123] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4960'. [ 563.017250][T20121] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4961'. [ 563.075503][ T4936] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 563.082815][ T4936] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 563.091421][ T4936] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 563.099156][ T4936] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 563.107329][ T4936] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 563.245787][ T5724] bond0 (unregistering): Released all slaves [ 563.325540][T20123] bond2: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 563.384316][T20123] bond2 (unregistering): Released all slaves [ 563.423558][ T6895] usb 34-1: device descriptor read/8, error -110 [ 563.447735][ T5724] tipc: Disabling bearer [ 563.476232][ T5724] tipc: Left network mode [ 563.489800][T20133] syzkaller0: entered promiscuous mode [ 563.515519][T20133] syzkaller0: entered allmulticast mode [ 563.822781][ T6895] usb usb34-port1: attempt power cycle [ 563.881300][ T5724] hsr_slave_0: left promiscuous mode [ 563.911967][ T5724] hsr_slave_1: left promiscuous mode [ 563.955913][ T5724] veth1_macvtap: left promiscuous mode [ 563.977096][ T5724] veth0_macvtap: left promiscuous mode [ 563.989949][ T5724] veth1_vlan: left promiscuous mode [ 564.056251][T20160] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 564.153154][ T5724] team0 (unregistering): Port device batadv8 removed [ 564.175267][ T5724] team0 (unregistering): Port device batadv7 removed [ 564.198745][ T5724] team0 (unregistering): Port device batadv6 removed [ 564.215624][ T5724] team0 (unregistering): Port device batadv5 removed [ 564.225945][ T5724] team0 (unregistering): Port device batadv4 removed [ 564.240430][ T5724] team0 (unregistering): Port device batadv3 removed [ 564.250274][ T5724] team0 (unregistering): Port device batadv2 removed [ 564.412226][ T6895] usb usb34-port1: unable to enumerate USB device [ 564.434460][T20158] tipc: Enabling of bearer rejected, already enabled [ 564.458819][ T5281] 8021q: adding VLAN 0 to HW filter on device eth5 [ 564.946604][T20125] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.956010][T20125] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.974080][T20125] bridge_slave_0: entered allmulticast mode [ 565.001626][T20125] bridge_slave_0: entered promiscuous mode [ 565.021491][T20125] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.029206][T20125] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.040396][T20125] bridge_slave_1: entered allmulticast mode [ 565.060517][T20125] bridge_slave_1: entered promiscuous mode [ 565.144465][T20201] syzkaller0: entered promiscuous mode [ 565.167071][T20201] syzkaller0: entered allmulticast mode [ 565.179974][T20111] Bluetooth: hci1: command tx timeout [ 565.213227][T20125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 565.229881][T20125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 565.245759][T20204] tipc: Enabled bearer , priority 0 [ 565.295637][T20200] tipc: Resetting bearer [ 565.328695][T20200] tipc: Disabling bearer [ 565.423304][T20125] team0: Port device team_slave_0 added [ 565.464997][T20125] team0: Port device team_slave_1 added [ 565.562875][T20125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 565.603927][T20125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 565.640775][T20125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 565.688405][T20125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 565.765780][T20125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 565.892763][T20125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 566.022010][ T5281] 8021q: adding VLAN 0 to HW filter on device eth6 [ 566.045846][T20125] hsr_slave_0: entered promiscuous mode [ 566.062820][T20125] hsr_slave_1: entered promiscuous mode [ 566.084491][T20125] debugfs: 'hsr0' already exists in 'hsr' [ 566.108026][T20125] Cannot create hsr debugfs directory [ 566.134405][T20224] tipc: Enabling of bearer rejected, already enabled [ 566.291697][T20227] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 566.309034][T20227] team0: Port device batadv2 added [ 566.547801][T20237] xt_hashlimit: size too large, truncated to 1048576 [ 566.690037][T18661] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 566.881672][T20240] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.911655][T18661] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 566.995662][T18661] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 567.027559][T20240] bridge_slave_0 (unregistering): left allmulticast mode [ 567.068373][T20240] bridge_slave_0 (unregistering): left promiscuous mode [ 567.096329][T18661] usb 5-1: config 0 interface 0 has no altsetting 0 [ 567.145738][T20240] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.170193][T18661] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 567.231108][T18661] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 567.261615][T20111] Bluetooth: hci1: command tx timeout [ 567.341087][T18661] usb 5-1: Product: syz [ 567.371268][T18661] usb 5-1: Manufacturer: syz [ 567.392697][T18661] usb 5-1: SerialNumber: syz [ 567.537551][T18661] usb 5-1: config 0 descriptor?? [ 567.553084][T18661] usb 5-1: selecting invalid altsetting 0 [ 567.727888][T20258] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4984'. [ 568.042738][T20125] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 568.074922][T20125] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 568.083489][T20125] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 568.161715][T20125] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 568.218709][T20125] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 568.503995][T20125] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 568.634682][T20262] bridge: RTM_NEWNEIGH with unconfigured vlan 6 on bridge0 [ 568.765517][T20125] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 568.845910][T20125] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 568.982777][ T5281] 8021q: adding VLAN 0 to HW filter on device eth7 [ 569.163655][ T24] usb 5-1: USB disconnect, device number 37 [ 569.180236][ T30] INFO: task kworker/0:3:5673 blocked for more than 143 seconds. [ 569.201886][ T30] Tainted: G L syzkaller #0 [ 569.240940][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 569.289933][ T30] task:kworker/0:3 state:D stack:16696 pid:5673 tgid:5673 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 569.322253][T20125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 569.339997][T20111] Bluetooth: hci1: command tx timeout [ 569.347860][ T30] Workqueue: usb_hub_wq hub_event [ 569.373026][ T30] Call Trace: [ 569.394701][ T30] [ 569.406901][ T30] __schedule+0x17d9/0x56c0 [ 569.434392][T20125] 8021q: adding VLAN 0 to HW filter on device team0 [ 569.445396][ T30] ? __pfx___schedule+0x10/0x10 [ 569.474253][T14458] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.481391][T14458] bridge0: port 1(bridge_slave_0) entered forwarding state [ 569.492592][ T30] ? schedule+0x90/0x360 [ 569.512954][ T30] ? rcu_is_watching+0x15/0xb0 [ 569.525026][ T30] ? lock_release+0x4b/0x3c0 [ 569.534620][ T30] ? schedule+0x90/0x360 [ 569.551592][ T30] ? wq_worker_sleeping+0x66/0x250 [ 569.564741][ T5888] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.572048][ T5888] bridge0: port 2(bridge_slave_1) entered forwarding state [ 569.607479][ T30] schedule+0x164/0x360 [ 569.622058][ T30] schedule_timeout+0xc0/0x2c0 [ 569.659098][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 569.684633][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 569.705915][ T30] ? rcu_is_watching+0x15/0xb0 [ 569.724770][ T30] ? rcu_is_watching+0x15/0xb0 [ 569.739254][T20125] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 569.773964][ T30] ? trace_irq_enable+0x3b/0x140 [ 569.799322][ T30] ? wait_for_completion+0x272/0x5e0 [ 569.827559][ T30] wait_for_completion+0x2ca/0x5e0 [ 569.832443][T20125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 569.850299][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 569.868279][ T30] ? kobject_put+0x50f/0x550 [ 569.884530][ T30] i2c_del_adapter+0x281/0x430 [ 569.901256][ T30] ? __pfx_i2c_del_adapter+0x10/0x10 [ 569.914491][T20125] veth0_vlan: entered promiscuous mode [ 569.922805][ T30] ? dvb_usbv2_exit+0x94d/0xb80 [ 569.938824][ T30] dvb_usbv2_probe+0x4bb/0x3950 [ 569.946477][T20125] veth1_vlan: entered promiscuous mode [ 569.957871][ T30] ? __pfx_dvb_usbv2_probe+0x10/0x10 [ 569.963276][T18661] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 569.979785][ T30] ? __pm_runtime_set_status+0x994/0xc80 [ 569.996211][ T30] usb_probe_interface+0x653/0xc60 [ 570.014873][ T30] ? __pfx_usb_probe_interface+0x10/0x10 [ 570.027157][ T30] really_probe+0x254/0xae0 [ 570.029020][T20125] veth0_macvtap: entered promiscuous mode [ 570.046101][ T30] __driver_probe_device+0x1e8/0x360 [ 570.056208][ T30] driver_probe_device+0x4f/0x240 [ 570.065955][ T30] __device_attach_driver+0x270/0x410 [ 570.073860][ T30] bus_for_each_drv+0x258/0x2f0 [ 570.081433][T20125] veth1_macvtap: entered promiscuous mode [ 570.088936][ T30] ? __pfx___device_attach_driver+0x10/0x10 [ 570.101688][T18661] usb 4-1: device descriptor read/64, error -71 [ 570.121137][ T30] ? __pfx_bus_for_each_drv+0x10/0x10 [ 570.142211][T20125] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 570.159285][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 570.174329][T20125] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 570.187038][ T30] __device_attach+0x2c4/0x450 [ 570.202602][ T30] ? __pfx___device_attach+0x10/0x10 [ 570.215525][T14458] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.227825][ T30] ? do_raw_spin_unlock+0xf5/0x210 [ 570.235074][T14458] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.245635][ T30] ? _raw_spin_unlock+0x28/0x50 [ 570.253873][ T30] device_initial_probe+0xa1/0xd0 [ 570.268084][T14458] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.279641][ T30] bus_probe_device+0x12a/0x220 [ 570.286885][ T5281] 8021q: adding VLAN 0 to HW filter on device eth8 [ 570.295922][T14458] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.308449][ T30] device_add+0x7d7/0xb80 [ 570.316448][ T30] usb_set_configuration+0x1ad8/0x2180 [ 570.329263][ T30] usb_generic_driver_probe+0x8d/0x150 [ 570.339152][ T30] usb_probe_device+0x1c3/0x3b0 [ 570.348771][ T30] ? __pfx_usb_probe_device+0x10/0x10 [ 570.357295][ T30] really_probe+0x254/0xae0 [ 570.369412][ T30] __driver_probe_device+0x1e8/0x360 [ 570.378620][ T30] driver_probe_device+0x4f/0x240 [ 570.387573][ T30] __device_attach_driver+0x270/0x410 [ 570.395450][ T30] bus_for_each_drv+0x258/0x2f0 [ 570.402803][ T30] ? __pfx___device_attach_driver+0x10/0x10 [ 570.411696][ T30] ? __pfx_bus_for_each_drv+0x10/0x10 [ 570.419791][ T30] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 570.429089][ T30] __device_attach+0x2c4/0x450 [ 570.434084][ T30] ? rcu_is_watching+0x15/0xb0 [ 570.439971][T18661] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 570.452338][ T30] ? __pfx___device_attach+0x10/0x10 [ 570.462562][ T30] ? do_raw_spin_unlock+0xf5/0x210 [ 570.471664][ T30] ? _raw_spin_unlock+0x28/0x50 [ 570.479077][ T30] device_initial_probe+0xa1/0xd0 [ 570.484187][ T30] bus_probe_device+0x12a/0x220 [ 570.489820][ T30] device_add+0x7d7/0xb80 [ 570.498124][ T30] usb_new_device+0x99d/0x1620 [ 570.505774][ T30] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 570.515675][ T30] ? __pfx_usb_new_device+0x10/0x10 [ 570.524368][ T30] ? rcu_is_watching+0x15/0xb0 [ 570.533280][ T30] ? trace_irq_enable+0x3b/0x140 [ 570.544711][ T30] hub_event+0x28e8/0x4d30 [ 570.552568][ T30] ? __pfx_hub_event+0x10/0x10 [ 570.560827][ T30] ? rcu_is_watching+0x15/0xb0 [ 570.568949][ T30] ? lock_acquire+0x5f/0x350 [ 570.573650][ T30] ? rcu_is_watching+0x15/0xb0 [ 570.579678][ T30] ? process_scheduled_works+0xa20/0x14e0 [ 570.589457][ T30] process_scheduled_works+0xa8e/0x14e0 [ 570.599200][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 570.605552][T18661] usb 4-1: device descriptor read/64, error -71 [ 570.616710][ T30] ? do_raw_spin_lock+0x12b/0x2f0 [ 570.627997][ T30] ? assign_work+0x3cf/0x5d0 [ 570.637520][ T30] worker_thread+0xa47/0xfb0 [ 570.645962][ T30] ? __kthread_parkme+0x71/0x1f0 [ 570.657304][ T30] kthread+0x388/0x470 [ 570.664519][ T30] ? __pfx_worker_thread+0x10/0x10 [ 570.673781][ T30] ? __pfx_kthread+0x10/0x10 [ 570.682063][ T30] ret_from_fork+0x514/0xb70 [ 570.690332][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 570.699469][ T30] ? __switch_to+0xc89/0x1420 [ 570.704577][ T30] ? __pfx_kthread+0x10/0x10 [ 570.709796][ T30] ret_from_fork_asm+0x1a/0x30 [ 570.717930][ T30] [ 570.722125][T18661] usb usb4-port1: attempt power cycle [ 570.729096][ T30] INFO: lockdep is turned off. [ 570.759518][ T30] NMI backtrace for cpu 0 [ 570.759539][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 570.759565][ T30] Tainted: [L]=SOFTLOCKUP [ 570.759573][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 570.759584][ T30] Call Trace: [ 570.759591][ T30] [ 570.759598][ T30] dump_stack_lvl+0xe8/0x150 [ 570.759624][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 570.759643][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 570.759672][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 570.759701][ T30] sys_info+0x135/0x170 [ 570.759726][ T30] watchdog+0xfd7/0x1030 [ 570.759753][ T30] ? watchdog+0x1c7/0x1030 [ 570.759779][ T30] kthread+0x388/0x470 [ 570.759796][ T30] ? __pfx_watchdog+0x10/0x10 [ 570.759819][ T30] ? __pfx_kthread+0x10/0x10 [ 570.759838][ T30] ret_from_fork+0x514/0xb70 [ 570.759855][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 570.759871][ T30] ? __switch_to+0xc89/0x1420 [ 570.759895][ T30] ? __pfx_kthread+0x10/0x10 [ 570.759911][ T30] ret_from_fork_asm+0x1a/0x30 [ 570.759935][ T30] [ 570.870657][ T30] Sending NMI from CPU 0 to CPUs 1: [ 570.876263][ C1] NMI backtrace for cpu 1 [ 570.876281][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 570.876304][ C1] Tainted: [L]=SOFTLOCKUP [ 570.876310][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 570.876320][ C1] RIP: 0010:its_return_thunk+0x0/0x10 [ 570.876350][ C1] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 e9 db 4a 85 f5 cc [ 570.876365][ C1] RSP: 0018:ffffc90000a08cb8 EFLAGS: 00000002 [ 570.876380][ C1] RAX: 0000000000000001 RBX: 0000000000000002 RCX: 0000000080010001 [ 570.876392][ C1] RDX: 0000000000000000 RSI: ffffffff8bcb2100 RDI: ffffffff8c292120 [ 570.876404][ C1] RBP: 0000000000000001 R08: ffffffff903142f7 R09: 1ffffffff206285e [ 570.876416][ C1] R10: dffffc0000000000 R11: fffffbfff206285f R12: ffff8880b873cbb8 [ 570.876429][ C1] R13: dffffc0000000000 R14: ffff8880b873cbc0 R15: ffff88807b01f0d8 [ 570.876442][ C1] FS: 0000000000000000(0000) GS:ffff88812536a000(0000) knlGS:0000000000000000 [ 570.876456][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 570.876468][ C1] CR2: 00002000003ca030 CR3: 000000007ef72000 CR4: 00000000003526f0 [ 570.876483][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 570.876493][ C1] DR3: 000000000000d508 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 570.876504][ C1] Call Trace: [ 570.876512][ C1] [ 570.876518][ C1] raise_softirq_irqoff+0x5a/0xf0 [ 570.876543][ C1] __netif_schedule+0x176/0x200 [ 570.876564][ C1] ? advance_sched+0x9e8/0xc80 [ 570.876590][ C1] advance_sched+0xa8a/0xc80 [ 570.876616][ C1] ? __pfx_advance_sched+0x10/0x10 [ 570.876640][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 570.876662][ C1] ? __pfx_advance_sched+0x10/0x10 [ 570.876685][ C1] __hrtimer_run_queues+0x3bc/0xa10 [ 570.876711][ C1] hrtimer_interrupt+0x448/0x910 [ 570.876747][ C1] __sysvec_apic_timer_interrupt+0x102/0x430 [ 570.876768][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 570.876787][ C1] [ 570.876793][ C1] [ 570.876800][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 570.876818][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 570.876837][ C1] Code: 7c 7d 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 03 a8 1e 00 fb f4 7c 03 03 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 570.876851][ C1] RSP: 0018:ffffc90000197e40 EFLAGS: 00000246 [ 570.876864][ C1] RAX: ffff88812536a000 RBX: ffffffff819a6240 RCX: 0000000080000001 [ 570.876876][ C1] RDX: 0000000000000001 RSI: ffffffff8c292100 RDI: ffffffff819a6240 [ 570.876888][ C1] RBP: ffffc90000197f10 R08: ffff8880b87338db R09: 1ffff110170e671b [ 570.876901][ C1] R10: dffffc0000000000 R11: ffffed10170e671c R12: 0000000000000000 [ 570.876912][ C1] R13: 1ffff11003b5f000 R14: 1ffff92000032fd0 R15: dffffc0000000000 [ 570.876926][ C1] ? do_idle+0x2e0/0x540 [ 570.876950][ C1] ? do_idle+0x2e0/0x540 [ 570.876973][ C1] default_idle+0x9/0x20 [ 570.876994][ C1] default_idle_call+0x72/0xb0 [ 570.877016][ C1] do_idle+0x2e0/0x540 [ 570.877039][ C1] ? __pfx_do_idle+0x10/0x10 [ 570.877065][ C1] cpu_startup_entry+0x43/0x60 [ 570.877088][ C1] start_secondary+0x101/0x110 [ 570.877112][ C1] common_startup_64+0x13e/0x157 [ 570.877139][ C1] [ 571.218725][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 571.225621][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 571.236309][ T30] Tainted: [L]=SOFTLOCKUP [ 571.240636][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 571.250706][ T30] Call Trace: [ 571.253994][ T30] [ 571.256931][ T30] vpanic+0x56c/0xa60 [ 571.260928][ T30] ? __pfx___schedule+0x10/0x10 [ 571.265788][ T30] ? __pfx_vpanic+0x10/0x10 [ 571.270303][ T30] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 571.276480][ T30] panic+0xc5/0xd0 [ 571.280218][ T30] ? __pfx_panic+0x10/0x10 [ 571.284651][ T30] ? preempt_schedule_common+0x82/0xd0 [ 571.290123][ T30] ? preempt_schedule_thunk+0x16/0x40 [ 571.295511][ T30] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 571.301681][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 571.307859][ T30] watchdog+0x1030/0x1030 [ 571.312212][ T30] ? watchdog+0x1c7/0x1030 [ 571.316644][ T30] kthread+0x388/0x470 [ 571.320719][ T30] ? __pfx_watchdog+0x10/0x10 [ 571.325406][ T30] ? __pfx_kthread+0x10/0x10 [ 571.330005][ T30] ret_from_fork+0x514/0xb70 [ 571.334606][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 571.339725][ T30] ? __switch_to+0xc89/0x1420 [ 571.344418][ T30] ? __pfx_kthread+0x10/0x10 [ 571.349015][ T30] ret_from_fork_asm+0x1a/0x30 [ 571.353794][ T30] [ 571.357100][ T30] Kernel Offset: disabled [ 571.361411][ T30] Rebooting in 86400 seconds..