last executing test programs: 9.065982422s ago: executing program 4 (id=336): syz_emit_ethernet(0x66, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6012000800303a00fe8000000000000000000000000000bb"], 0x0) syz_open_dev$I2C(&(0x7f0000000200), 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = fsopen(&(0x7f0000000480)='ntfs3\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000400)='source', &(0x7f0000000240)='//\xf2/\x06\b\xa30\\\\\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas\x9d\x14\xe3\v\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7Gl\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r6, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r6, 0x5b) read$watch_queue(r5, &(0x7f0000000000)=""/1, 0x1) keyctl$revoke(0x3, r4) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0x1, 0x283}, 0x0, 0x0, &(0x7f0000000000)) r8 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) syz_usb_control_io$printer(r8, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x3f00000000000000) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bond0\x00'}) 8.36935968s ago: executing program 2 (id=337): syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x400) r0 = syz_io_uring_setup(0xf04, &(0x7f0000000080)={0x0, 0xd634, 0x1, 0xff, 0x39d}, &(0x7f0000000480)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000000)=0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x2000000) prctl$PR_MCE_KILL_GET(0x22) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x22, 0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2003, 0x1, {0x2}}) io_uring_enter(r0, 0x1, 0x20, 0x1, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x81c0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x25, 0x0, 0x3, 0x3}, {0x20}, {0x28, 0x0, 0x81, 0x3}, {0xb1, 0x0, 0x28, 0x7}, {0x16, 0x1, 0x5, 0xffffffff}]}) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000004c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}, {@blksize={'blksize', 0x3d, 0x1000}}]}}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) ioctl$FS_IOC_FSGETXATTR(r7, 0x801c581f, 0x0) r8 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @ioapic={0x8080000, 0x3, 0x8f, 0x0, 0x0, [{0x8, 0x0, 0x5, '\x00', 0x8}, {0x2, 0x4c, 0x9, '\x00', 0x9}, {0x9, 0xc, 0x1, '\x00', 0x4}, {0x81, 0xe, 0x4, '\x00', 0x4}, {0x5, 0x7, 0x5, '\x00', 0x9}, {0x8d, 0x10, 0x9, '\x00', 0x5}, {0x1, 0x8, 0x3, '\x00', 0x5}, {0xdb, 0x9, 0xb, '\x00', 0x9}, {0x3, 0x4, 0xb, '\x00', 0x2}, {0x0, 0x5, 0x4, '\x00', 0x9}, {0xf7, 0xa2, 0xf0, '\x00', 0x8}, {0x7f, 0x3, 0x1, '\x00', 0x2}, {0x4, 0x4, 0x4, '\x00', 0x9}, {0x8, 0x5, 0x1}, {0x79, 0xf, 0xf, '\x00', 0xe}, {0x4, 0xc6, 0xd, '\x00', 0x9}, {0x5, 0x9, 0x2, '\x00', 0xc8}, {0x5, 0x9, 0x7e, '\x00', 0xf}, {0x9, 0x6, 0x5, '\x00', 0xc}, {0x8, 0x4, 0x5, '\x00', 0x8}, {0x2, 0x81, 0x8, '\x00', 0x8}, {0x5, 0x4a, 0x1, '\x00', 0x4}, {0x5, 0x7, 0x8, '\x00', 0xfe}, {0xe, 0x5b, 0x8, '\x00', 0x33}]}}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e0000006700000008000000ad00000008680100", @ANYBLOB="8100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000003000000040000000500"/24, @ANYBLOB="09307d6a0e148981ad707c8109465f716c65be6e8570487e585dcd7d60c83a6c4c8361062446f4f5bc5c58"], 0x50) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) getsockname$inet(r8, &(0x7f0000000580)={0x2, 0x0, @loopback}, &(0x7f00000005c0)=0x10) openat$panthor(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000440)={&(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0], 0x3, 0x3, 0x7, 0x1}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r6, 0xc02064a4, &(0x7f0000000300)={r10, 0xfffffffffffffed6, 0x0, 0x0, 0x0}) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000000), 0x0, 0xfffffffffffffffe) 8.185829289s ago: executing program 2 (id=338): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_usb_connect(0x5, 0xf4, &(0x7f0000000700)=ANY=[@ANYBLOB="120110014c306f10da0b38011230010203010902e20002a60000000904b10403d7b5d25b09210400020122c705090500100004f40804072501832f08000905000040008103ff0905091b08000c078009042201040e010003090509000000030004090502020002f7810671300c458e9532438d4aae3ef0c9bf5c520b1aaab11a8cae9a60c3160adc1dfedebf5a6ead8834c7780c2eb777ef0caf96cd8b3b77f357f4aa1b662ab40651e6ae8cc63dd9f6e2d24afaed81a927ca2e0354281cfeffffffffffffffbf09aac591308e5c0c3c419bb288a21890e1af4af409050303ff030840040705a6c6415a9f09058503"], 0x0) syz_usb_control_io(r2, &(0x7f00000009c0)={0x2c, 0x0, &(0x7f0000000800)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000540)={0x14, 0x0, &(0x7f0000000500)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001e000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000000000a000200aaaaaaaaaaaa000008000900011000"], 0x30}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELTABLE={0x1c, 0x2, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x480c0}, 0x0) 8.039235086s ago: executing program 0 (id=340): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000002000000210d0000aaa8fa017242ba9380d424000000000000002900000002000000", 0xfe60) 7.857140189s ago: executing program 0 (id=341): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) (async) landlock_restrict_self(r1, 0x0) (async) r2 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0xc0) fcntl$setlease(r2, 0x400, 0x1) (async) setresuid(0x0, 0x0, 0xffffffffffffffff) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000050) (async) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005400e50100000000fdffffff07000000", @ANYRES32=r5, @ANYBLOB="20000100", @ANYRES32=r7, @ANYBLOB="010000007f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) r8 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) (async) setpriority(0x0, 0x0, 0x2a14b58) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) (async) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'syz1\x00'}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x2}}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [0x0, 0x0, 0xffffff00], [], 'erspan0\x00', 'netdevsim0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'vcan0\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0xf9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) (async) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000240)={0x4, 0x800, 0x5}) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) (async) syz_usb_connect(0x2, 0x24, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x801, 0x0, 0x200000, {0x0, 0x0, 0x0, 0x0, 0x90, 0x800}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4000880) 7.772064611s ago: executing program 0 (id=342): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x28011, r1, 0x2c93a000) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a0001000000ff7f0000000080"], 0x24}}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r3}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f00000007c0)={0x28, 0x5, r3, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1004000}) pwritev2(r1, 0x0, 0x0, 0x5, 0x8, 0x1c) 6.781389064s ago: executing program 3 (id=348): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010000304fcffffff3f", @ANYRES32=0x0, @ANYBLOB], 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x8142, 0x0) r3 = dup(r2) ioctl$SG_BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000240)={'\x00', 0xedd, 0x75, 0x2, 0x4010009, 0x7}) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f00007d2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x64) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000140)="580000001400ad", 0x7}], 0x1) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r6, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0x4e26, @local}, 0x10, &(0x7f0000000140)=[{0x0}, {&(0x7f00000002c0)="21d8f7", 0x3}], 0x2}, 0x10) write$binfmt_elf64(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB="080641663151c9e0ad01"], 0x1c) r7 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r5, &(0x7f0000000100), 0xfef0) splice(r4, 0x0, r7, 0x0, 0x80000001, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r7, 0x40786e88, &(0x7f0000000580)={{&(0x7f0000000300)=[{0x8001, 0x7, 0x0, {0xffff, 0x5}, 0x4f4, 0xbc, 0xc945}, {0x1, 0x6, 0xffffffff, {0x81, 0xffffffffffffffff}, 0x741, 0x2, 0x5}, {0x9, 0x7, 0x4, {0x7fffffff, 0x1}, 0xffffffffffffffff, 0x200, 0x9758}, {0x0, 0xff, 0x40, {0x9, 0x7}, 0x3, 0x9f, 0x6}, {0x5, 0x1, 0xff, {0x0, 0x200}, 0x9, 0x3, 0x600000}], 0x5, 0x40, 0x1, 0x3}, {&(0x7f0000000440)=[{0x81, 0x7fffffff}, {0xffffffff8a80f12d, 0xfb08}, {0xa, 0x9}, {0x1}], 0x4, 0x10, 0x3}, {&(0x7f0000000480)=[0x7, 0x0], 0x2, 0x8, 0xf001, 0x9a}, {&(0x7f00000004c0)=[{0x7fff, 0x9, 0x3, 0x0, 0x4}, {0x4, 0xd267, 0x8, 0xd, 0x612}], 0x2, 0x28, 0x48}, {&(0x7f0000000540)=[0x101, 0x7fffffffffffffff, 0x7fff], 0x3, 0x8, 0x1, 0x7}}) 6.780130859s ago: executing program 0 (id=349): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed00000001090224"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x28c81, 0xf00) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmmsg(r1, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="72ba1c96ecca601af163fa3dbf4f8c1675187bf4629a5eeafaa7c73fa259686b17d4422044d3b92bde0123cfce5cce2587cab0cfb3799246387ebd1ac4ebdfbafab9172e9030f02b1703db577657de2ddab5dec5889be8a240d8724bb2076434026c1f58979d2420f69eec29ae920909e32785d7aef33fcab23f8011b0250880f6c6efe1c4490dba939915682f9817be8062b9f3d1168c1d253213cab86f375dc5", 0xa1}, {&(0x7f00000001c0)="ddce0677d61f36f5da6139c84222d98550aae52e448c8a7720e87394e64cd60964875db12bb04ff2de00f07c", 0x2c}], 0x2, &(0x7f0000000240)=[{0x50, 0x3a, 0x7f, "7ca03ad4a26ee3e94f2fe7fd62749a20ab8c546b8a51ff0fa7e0aab91c34b3a2af8c512343be9a9540914da4edb992e1bc7bee230f4e66ad4f8bdf5f74"}, {0x78, 0x117, 0x5f1b, "38148e47ff2e318bdcb9d7e0513d55c2072b67a1d4a904de4f42006b48da9803f669bed3fb298fd6527b0d315fcc22972d94830a6bdc8d0799c7e7bc2ce682c5f9e927457773da23d2dbb76f5c619c0c9817669571b308d1e7627f131c9962d5618e"}, {0x68, 0x10c, 0xfffffff9, "d391d88ecd7659f80ae8ed3c23874017dbfc91782e7d0ab4349e6ac1ddc16ea99daa25158f8433d91c0b5728c5909c4e4f35e5fbd65df00bf0f08bde803e425f6449ea0bfdfa11261138778477aa2772c123e7f88d"}, {0x48, 0x10e, 0x8, "d09e2b4a6906cd55f64d113a8f01985dd402c57c76721fee201eccbe349cb8bc08caf6e1a4682e1380e78f8b956f51a718104b"}, {0x110, 0x11, 0x42dd, "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"}, {0xf8, 0x3a, 0xfffffffd, "9c37546dbc185b254b96644f19085674ffb7adbaef5c07bbbba5f3bcd72f8e91ef6dc411f51fc6868ce8c7471189c75d94e442bee21924d61bf700aef1fd6aec440849debfd7cefba10624edf2570f89aef974d515c1fb5005ffe56153e1442ad284a9eed436c68551880c9930b93733850881309ef62e9586794f594ddbc5d2079dfcc8faa34b0bde0227b52919193d5a86ca2bdd2ac623473726bd20b0b28c207bc7aaa87ccfc34e7a19422b1d3eec80384c17e8c823913eb106f98e38842dfad375872441e7680b74ae1e80a98fcd0f8fd441685723b24c437d116cfb4d30dc3f4d6653c7"}], 0x380}}, {{&(0x7f00000005c0)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e22}}, 0x80, &(0x7f0000001c40)=[{&(0x7f0000000640)="c1928cb3c1124d9c1b001880b51a5ef392e6bd9f624b2bc476e1ce56e65e4cc111f13cbb87b9dbbd80226a2ff61eaeb0bb2bf9adaddcce5183c96baf409d4744236fd72d33c13de66769a0d1bc64ee9e01390f16a164cacab08edf9f789e3355ac6de2b9c12e3a96724b369170b6320ee2a589e3dd33c2e7972e33287abed47614b90f79bb3b4545f7158abc0eb82d463c58f547b344e6e6f05b7ccd4a0a3fb6060b", 0xa2}, {&(0x7f0000000700)="2295a9dd6870d4b6002cca32c2f5d665e69ba300280d80757b00f63dfc1f74a2972c843662d52648d88cb80ec647ebcca1d574273bf1d62f3849a74caf35c935fa56a5f6a836c011e8afa20f0825f2d24cf5434b2191fbb393bf03084019ec0508d1fd293498ea78fa8814edc14c3204f18a6a436d2c9d98900ac8721c7d72a911e383c05357e9aca69142ff9f28284aa6527c8f742f90abe720eb0c048b681e0807ba05c9daf716d026624c5e86c1080f", 0xb1}, {&(0x7f00000007c0)="5abbeaaea20025f36ef62771c6af612f00a8e8f5ed9dea02665c3fc17ceae08a2f22661f02a59fd2f49aa9a963c0abafde40bdefd853b8b8d39c299e92563d45a6078727fafc368f1b17cc15afe6ed0ade4ed4dcd3b8382bdb2178ce0127958f3fbb5218e1d2b17320962c9ceb3824b09959c6b8a90108786d9b16a3381da6d390b0b1ec1ae02ab4d7c0ea36d77fd79cdc650bef6d92d072778c5f9059428eccb4c9e7729d082b69bab0a2c2959b6f5d8d4cae399f13f74f2029e10f9647820323c3d06fa6f45b8a74e68d196dfdff1862edd62c669f9a9cb385d5965b5e2701d1bf5236dd82d19066f3f0af29141f025c3e9aa733c712b347cd2919eec77b91c40de694a273e7f4d91148d456abd6561fda71040c96920cb10e59739d8a2542fe568e4642aeafdb3f21e4f89c3a6b02f45e1984ceb361cbcca2488677b543751b8e805a361d76279000d0eadb79bea6e677c3ec1599fe6f9f31b931e07a977cea7dc772102965a50e95e2a709989ae0c5d02c094af0b556fd03745f5fd3d052e4c2d4858c1f16c288e65751e87d15bb5e4cbe6919611c83aa1e742f1dbe703318aaaf152f2398dc294b3e82260220f63c897fe79e683aed5f9016895e399c986a0dc22a3a9650f46f94cb783c1b7de5d9490ca9fc5f0322d160b22eefe1243b0a381c0e760deb49d27dbbd0ed0154cf3791d13ae67f92d9b658c53da56c60419357f12d6636d053cd34d231ebebf1b029af86e01cb760a9400c163a5ec0ee4383bc73010fd408af8924b76b57214b799ae70335d884ae4e03676c8b4a19c9df31850a00a4b9bf655634c0518e32ba0d5012a45181996ad5ae5209dfa431801862d02566ed3a8d6c66c6a380e042a99724d272b410fa2bcc024d565e91e922ca032bef2eafeac3a9f1a7acd81f0a82af93a2b1add845d8e95eb184e9a826c3bbc3e674b9664ff0389a773324150ac94e82ed8783ce674f74fda11a40a9bb915fb28fa161ba4fdb5a848c2d01c182ea35f231c56b2b420ebe8f85370395e3ef0d958a3527892614dbe3bc978aaec77e01a015288aa0468063d5320e14127bcd09991e046e4311e94c89581b5bd815caed8e429191415e86f07cae4369786eef1474fa1f2cd47841d58fce2583385ed8513059e8d9a0a971bc355eba13c97e221c38ed1de1b8a9151441f31795a06a1b261dcb2d3dc8b76d07327f4eaf180ac37f1a36a647c4688e43e7f7265f8a7a889ff2d4d532fc80463e7bbf3a410b0684a7eeb218b563bfd56bede746f399fcec17281cafbee110b58f4c3a2e248d637f9d3d13fce8ca4f6c69e92e9b606266cda93286d3895364bf8f6a54a8149eac86b3cc496097ac330d5d09df4823d8449c5730de98ec516fa6d95ef8ec8cd491d5cef8c6b6518b410596a5e6d62081aa9f4d5a54f44f88a6a9bef957ebb4491ffb97ab502b57ad3922aaae13b4341733720a921806a3d67dff49dd9fe1799474ae34fa506ccb279152f58548268084f653c85e80a41b8bd89a133642fd15655c99e2894d675ee78cf2443af02ea7151e4e5aae092804614a82cb6d0730bd0200acaf7e0ff99474980b3a3b05b1399a0abaed2fa116c3fe2512cf4ffd31851f79be0b5b66d5e407042fcf62322a9163567f1f8ef2e7f03a110ed9d25a72910c63dc1e9d331d5478a1750cc30d8bbc564871d0afe2657e8135251bbbf30d4092e27e2f7a58ecc0c3e0d125560dd488564744aa863ffd7091d8ff0fab603eda0dfb0ea082200c47d7141998810ad10c9757406870a9738f97632a63472ad07f4645656234ce0d5b9e79de44352d7b01be126e7d8432d4f9bffdae1f4bc9535ef0a892249a3479c0f2b2d884d60aa1a3fb7faaa065bfbb970e3550e27abd4cbc647304e95393a72d419fb37dd0cdcdabdce35e39f8b2d708a568efc77648044123e327e779b2786b164b970b23886309d2cded3af10fa03af2fa8888e97f6e2aa88a1f2fe74eceeb3b40faa29d758069e3f8caee64433f768d78c1642e1c45f40f8572b70cacd3a09a4f254fcdeaf012fc2889f9e9ca71e50be5a9a88b11bca4c619c78c06562a29e710790c12e25298bb1a8171034f8ae8400a1e4ce4904fdf8edbef335d9ef4612f6644edf7f153d7d6f91237bc32deee588ca366d3af2e5e6f17f47e7c6d913edf04cd1491e38a33e513ee98e8075761bf5e094998dd411aae45c63ac6e4ca812dcc5bb8ff94ec2ca28d00c3023321cb30998c367dc2977635d04da2661c1146d913ccf5c951decd6703c15e3d48e32fd4eb5eadd5bc8216cbd77a098a24098542c7129edb2a7d1b7495edbaff7f554fe8169475ab0501f77d8101e78a5edbc7cc45ef0ed01000f320fb527daf8b6959c4d65430e49b8be6c67cdb543ccca227037fbdfb555dc45b125de021c134b034eb1c1a9357fea7f312a8d70808e35ee57d1620e4ad3d4b57af8106f62d1d1a294ef9dfc909436772127925ddd8d93391ed70d9817e0f22b2350dfa7e25458f2e723d40164869835f3bb317b06ad9865690ce9967735e6b85a6e0e7a461e1ec1373041f88079f241c16644369f1d5c71b4190835f566c669761f2ef4c79c4555b5a2ddc06183d6efa27b02d82e30f7bf8df49320d414ece2fcd7639be4bdaaca8aa0376141f99d02412cd65f52c4ba382a8b33094da51bd41283954ff3c5e1dc883f0e75e672e886dc407ba88ef793f4802c19a6b804da9fd77272167a745f6e9fd1d286acb1dcc646625e5a61156b9abf9775325feb14767c924b6d40614d4488ff24733445a9ee83e3a4559d33a9fc67f82283e1bba077ac0ffe2c918a81d51e0069e0a641c67f3e1ceb0ee44fb08556a499b7d3e8aad4b6bdc688a201750c00aafd5089dc4033238a8c5072af9e5297d988d0d00397c7f87c5ac017adcbf923c397624782f03329e6e6deefb8b0bd323ec11316b5a37df3698d647b87bbd082560dd68f0a64bf57251254ceb6d2585c29e1bd3f86b1545f43ae8eab5c1fed38583af05bd6fac3e47c2f4b52cdd188cac771708f8aacdb63801664efc84ac62e0b1fcc8711b6b6b86ef731be406df4a95dea9e7f2545b2bfbc4cabdbb11456fe28ef7172e18c3decec5ca8884b88ccffdca12f1bba9ea3468288322eef4868e96582428e181c8123f442e40f8109a1610a291225ec275137e2cf444d9298988dc14f8d3441db284fbc1e76c28f370ea97d0146f1a640f88ef344b5f7aae55cc2bbf7a8018ca7174c74631a456c33f5340c7ab2a656220159018c9873bdb2ed046982be50ba82c8e275fcdb5e5d9c13ca85d1e2462c486b2b3a5649a0b15b559cc02b61b75d3cd49585c75ae21ec0dab78ffe15c77135881036dcf4b917b9b98c302b5633d7ccb50f80bea53c43c188ea11eea236428f5531f2f66569618f08b91cc001fa81cc6e31b7c6a5723c49fedf363115335d8b3cd5e763bede03962397871e4c125604e82db2847aecc360a24b9149c3866fc47915407831562306137d374de328b8ccefd01cd1db06d91762f41c7ecff7a9ec3f14c94436b9f15d91d07f700f851e6303a1b38b4e4be19728b4977807821ed1a29ac1c298eb21edd6d07bf3ae08ce7c976add4da5db634594f447fe4783260313a987e1b38b92a0bcf4688fbef84034a5e50d5729dc1dba2ad536ed647a01222ec8e0a29e65e032aa24347678240c9b768806494a995136a1fa36880f5a6231e3826c0e696c671ad185a4d077f217b459129c974f94476a419315110b59cb9fb5315a50d652f83ce54c718436352675b93c18c1d61e2a1ec1378a2fd6c79e0fbfd7cf1c423d3e1ccc54ed0cb02f981cd261e84c2275a06be25d79344dd2d3aa542bdc412fd70cb0a8fa8691a5aa8133b8f5349bcb0f27abd0eafea7dd6dc584307ff671c1a3519f456e13d8f5e1be50a49e0bfb028727e606efbb0def24cac112bffe6f56ff50388541a418fae90e5cbe8ee76a4ad473fedda371ab0f689771b319e31f6c9513cc2f0a769a7c5fafa72717fc7be134853411b71d7ab59b2fa17c98a45194bc64b647fc24b421a6452971dae767751daceedc17257b781e75052a69cccc40e57ebe096de1de998bf1797e67f58653c5905c4ede005776ce14191d5aaf250b0d47346eab15c361b5dc84823b3e35af23ef0c077b1e53ca527d9190e392627287797fbb8162fbe733f472a535af19fe50fe18d45c42f2c43155202d093edcf53a2f69e81288cf68259f98b9e4ea717d6398859abae928c7e839d665bbeba9f53c9e3064edaaf0a25f2a33c5e846abe40dfd407e8baf291c536ceb268bf1cac9061d4b8d9dfe07204529b2fed534794c2a6ff284269b77af5abd87720ef728c07dea876c04f164c3c8258751dffbce1645ac86b03b793682164bdecbe05c3325e292270491371d0fd40e23432013f29d86439d6aef642c363077e7c4439d7042a6fb73cf480ac374369b0c6007b762a7a43b13a2515c2961bf9f15230649a901e6765d40b76dbf5fc702c9fe1aa1c8f118b7720995887a4d62e80b5d72edcc9b8f5699303bf19687d6fdf419a73cdcfbd3ce1b79e21962464965d7f501440886556bdf9e792cbae4ebe5ae32b9907e614ca470fcfd23842933b554ca1435b0d465a08dd21c4f2f6dfe5de3128e8db1c82f4b5f77ff0d81b8305eea1b84f488e9221ac9a55b986f58a4604f4d0ed8243079620fa906c24bd9f3ef8ddecb26645058db08fd0ab83112308e667ca6aac237f819bb725abcced2995c55f74841bd7177e4f1f4d4147f183076e07cc7eb5eba4dd8a906bfaf2631caa520e3418f7af1fdced8ef1ef85f05448d3676bbade854c695d92740f31a3c1ba84e2653171407cb705a2e18ebd8890166b62d1f723aed871a88145e22135a7f687f62a26c468565df0f6e3e59ba20829c59d644da52ea386e32a055a769b4fcdc285dd6737dc27a81d7895bc0a2fe37b2e43ffa8797de16b1baad9ed0a37908f50308e1deab7bb871132c02c0953a05c847800859d4e4b371a808f0701971db8ffed6a4f0f049319f06e0daeaf4c5bcb2f42fbaaef2d9d73aef15e85e6c90add48d587bdbcd6e6fd35a2221d63a61799ca962c94c93d7f8de75c3d63380194c06f4225850affec6288e991d5b5f1e0cdd124e3de435bb7eb8537d93fd20c2752b9d7c7e92b464d799563704c6cf6b6b8d940627cacba551e0430f7a96a7b9b2cc0f456dd47e563f4e01ee18a5b6d25192fa1e12213d59a4423095a74f7dfec4d022a68942a81d7fae1f294b7b21e758a2bb9f769509dcd8f339eec26a9feaa87a509d73c52cf9d5bc2d7abb292ba040094c2005491b21fd9e2428e58522628d4cd5ea79a3898e4473f2721b5e206a8bd2e31daaaadfc4332a8ab8b48d0df8120125ba7dc4e5544b4ca1d3fa96f7e07fdfa9960381fcc4075d08e8fa4d213e3b84a80563c3255845a6c96832933348865c1736e8fa4d1a02d0d04755a60f6e26ce66cda88a20f97876b09212f5917e773f2972a00a28cf4a15907da6af139f7ce6e8a732b6cd57d6386dbf05f355d522c468ac5492c33dc6d7426cf950a0c35af96c6f2c8c1b14806aed5db7bbb8d8382938a5f0300c667feac06c9ad788502eb79a426fdfa2a54ea64704ba1667be65b55cfa91e7fce5e628b4dec871bcfc8c7985fd2ef186f79bb1d258e7217fd477eee10c4b5c19e39fbed36e7dd55537588e2faf472940d69257bc4d14be0e33c94369e55ca4811098dc8850942ea8afc2fb359589e13045933298c9026ead90847be76a84c0af2dc", 0x1000}, {&(0x7f00000017c0)="78b644bf4cc982d700981446755eee664b9ad4b68f11fb4a29cfb914c1a00546838e61c4c3d9954f9159466058b15fce317eae015366e5e6f177d6ed46b107fb1022c777d0e6605de7390435a6e41067b589b64c0427106a3563590a492c54e460d7293f3b9b01ce47811f133111109644323c21a50046c25bbb05403f3062ec39147c4f4ef2c4b9106902ed29efe83ddc7f9f5853d40f5c836a59b116d9223eb01eae8dcda0331cb8d564cd48f4c5fb99587dd188a208fbdc7faa6e8e7eeb15cff8edb329077245ee0b9b25931919cf", 0xd0}, {&(0x7f00000018c0)="7b6da52ac41c07482f528c2ed639c92acd313fbf9f337f4c200ceb7f5d3cbc60601528e9abc2a93be0938dd116b239249560ae5095b2fb1ca84d9fff8b820b7048bfe18b832c924a3420", 0x4a}, {&(0x7f0000001940)="be9ec0fd8a5c6fa3e462679e5c00c727fb66940981f20a6ffa3f558a92015cea17025e2f2265c28cc340cd1aa211ce47a480a1ce74ca7fc095060645ab76739f0c889d99054fa767a768b9dd65b5c2d80d940bb2a5fc0f705dec52c0403e1685f0a4291e8e8b6c204afdcb9cc8ab39831c922b63c2408aeeb9b2f5f7", 0x7c}, {&(0x7f00000019c0)="c3a7cdb89627c25f8388f040d7149cb5139de57b01ba142af865e508413bbc1a9591a365b3811e68fac39d31f2743d53c7908a857135bd92d248efd102233f20e27d39c84d66e64951c217329c1ab7fd7a789f441128860f68bdb34eaa8297396be4588c2928ae88bc9bdb19b59cb1b35f88c9366c134ebe144a739955a33bd6e668d85fe5d1a2db7ff6c0a0b35a9c1c72c79f81fd91c1fbc56e2c73712b2486d169e6f09139354b630e0d43aebdbc8ded1001db6776e0db6bd9ce32aa4181e147fde83fed98f7a18059aa4c7ba399ddbe3ae03e2caa0199d136607c7a7e6bfc46666f59ce8b3b4ba1c9a44cab72a00d48039ea57c85", 0xf6}, {&(0x7f0000001ac0)="9821eb114dd0a74aa6e40afb49239d7128bee89cdb9feaac4c5e1abdbd382c94e6e1fa8903688016eac725b69cbbe2727a85f839534b535ec8cdc50ab3c7e1c4b6c9de7123d7298cdb0cd9d364fa76a33b4bdcfaf10c7dfc621c921b2176", 0x5e}, {&(0x7f0000001b40)="1cc849763cf5ad98262d11b25ba2c73d2180979f4893d3c4612914cb30a9643b454aa83387c78258767c60748694ad20e5982d6fbc0a9829b253cc8afb67f8873ef0f3408872553bf26cb23c50602f45ba4d805daa81c38dca4606b922e00e0d4aeed73c8fd23f2635973c15c7758d66f5767f49400d63526d30ffcf237bce13a3de6dd344159b5cfadec9891aa47d339efed87b4592f8acfb78dac096ab45e01e2edfaccf8a244a62cec7e24701359e653b8e231c184bca47b27fc5", 0xbc}, {&(0x7f0000001c00)="772e0493124f3ff734e9f71f0c659fd3fc9fbf603fc6418eabf579cab3ab2b405ecd4639786ad04303f2eb549620e72bc281", 0x32}], 0xa, &(0x7f0000001d00)=[{0x68, 0x6, 0x9, "31426b7de8cf25ca1bb3badd80f9cbbcfcf3dce62b4f92921327e725dc5408ad4663bb54bade24762914aa33342b6c026c38bfe5864f570cdde8b21e0758dc9cf1e8bc6c8f9f88d2f1ffbab3d34d2a0fbadb0aaa3d"}], 0x68}}, {{&(0x7f0000001d80)=@isdn={0x22, 0x4, 0x6, 0x3, 0xff}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001e00)="89efee5b095da2aa8bd4dcc001004b1aba2026753cb15302a1aaa3718fb3563809f0b6dd3adef86f8b84e013aaa7102afd0117fcde9d8cb1100bf9b95324cdec9b39bc9b2626c945a8bdb2da03d0107d100463153409354b77674a3ddcc4a9a72df00d79d87316a220a636d63479193ecc3b0ca7fd04c30405ff4cf4e5aa78b8d986b2d4e2a96e71c808", 0x8a}], 0x1}}, {{&(0x7f0000001f00)=@l2tp={0x2, 0x0, @local, 0x3}, 0x80, &(0x7f0000002300)=[{&(0x7f0000001f80)="6111ef3ecd1e0b68941c83e5d871f20a15e0adb785f7456742395ab8cac4a2084fce8ea67fb606a719a6f13c34c87214f8e136e0dd5b960e132a64e6b14cad94aa932878ecd9c9ea8c01a4640d2130f6a00946d70351469feb9b112291b6f0da13f73f632b0519ab69dbc7452fbe9f5da61ac134ce3212507146d286be16301f81fca69a2dbad7c5b84f278f7dddfe09a32bb07fa797c17b45f2cfa79035c0ebb425cef7276dd57fc5a5c625a346d4f01a06", 0xb2}, {&(0x7f0000002040)="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", 0xfb}, {&(0x7f0000002140)="34c83f04ece4e1bfb9945788b36c032d03cc85f96ac882417368edb3e9dd4d191b940a7ae592a466d767aaaf1265c51137f43b6da220c6486c26c7249cd9ce10855d50969b5b11562f28ef90946a9851e100255f44ffd023fff6190f6ba540ecf6074bba33a5447a7e272230cee1c29de99affd07bc4373c1b1c258b0c67128c99abe400cb2ef3f2f3d8887dbcc22e58148db97ed3abcdc6074f59d366d98d68f64fffbe5ff47e5d358f43789ca7b43e9289efd256b4923cf5", 0xb9}, {&(0x7f0000002200)="b7096f148b31fa50bfd08c367afdacbee1147167bc582526d99ec21d39a46276ebac008964558ac2cc8c0c63d606e671c71c2496da682084d678f2ef4e4979265155798aeadcd0f0c060775d028a2ca4947149f9e539e1eb6dc7ac26ee7834b52fcd2e37fb36ded56ab09b09ff89980d35e583e847d56bd03235b933e4b465b3533e1544b8cfb5b6b394f06dd9a2e7b3d8c2a7c538f333cf5c402137f975fcdfaa9b6eda4ceb7b93d828d08e86de03365a8576ba3c50c56822e929a982839615662cc27dcf6686435ce538ee79bbd9ebaf76dc46de2e2f433384d06ad1777339c2e9d642e23a151d29d0e27f375908241182bf16a4", 0xf5}], 0x4, &(0x7f0000002340)=[{0x88, 0x0, 0x401, "e7a71073f63a321fba0c40da9fa2d3c989dc2d50f08146adff60b9f86d7a078fb04647b579fc12f6379fad048dbcb6a60e9c115e0e7c17febee1e69c427c36c7e28f7b442ab8932d954b0d39eba3e8ae5bb33fd45a67223e0fb067b91d718756aeeb1864f9d8bb4ecc8817506bfe80d854282baeef"}, {0x20, 0x10d, 0x6, "53d3123fe11fe21ebc"}, {0x20, 0x103, 0xfff, "a47a1ded06c4a9a223"}, {0xc0, 0x10e, 0x469f984f, "4caec872a6d2e5e55c5b6943f67492ec14a89e914f46caabfac65000102d33a97a2b3ef9710ad32863222ea51441df76c47d8761a42fc5ca9f44daff92c00708a45b3ab84308995a1cf9f4e275506873c9526fb51def665334124abc83292ee2c91f13d042104372fe695bd6296666ac09e65623881150bbaf3aa0f2394175293d36e8c5d400334ca8e0bc3fee07d8f395440e04ec111d6d71955bf3712915df24eb0574186a16816d25698a141e2fa2"}], 0x188}}, {{0x0, 0x0, &(0x7f0000002540)=[{&(0x7f0000002500)="251a37af7489ad1478fe85f9bd6b443d8bd2777e6b052d79c756aa8161b87db571bccc8a4bac5c284d6f3e2deaad7b5f65f65b10abc52af63c", 0x39}], 0x1, &(0x7f0000002580)=[{0xe8, 0x112, 0x400, "47b8d2066860156f6465e66064ee54ff072d7e7ae5c4a985a74f96f76569cc8f81c8d29890e567ba17fde0b4fa35b475e086e89070f6c827c186bd54900847fbf4b7396b43bf54d7fe220bc07cd4758fa0b1a4133587a4be9b7282ec887ac07986c3f93f0dab06e358893d5dbbcd401a3e950f8b9de237c8539f573758d59103511522e62c3452b855833f80a4716aac7b38131478cbffe91e5c1c8a5ff398f62cea76555ab2b10ba0eb3daff063f1851172550b9216e70fa548a02732aa65b3c1036c3635f137d5bb6bc8370f2d821a8e808e363f05"}, {0x98, 0x18d, 0xa89f, "bb8b6b32499ea5843621bc65f1a517f923f05bb9ff159925666014d0e3d8071da3ea45b2c26c48ce0e81f280c50f4720b3b2e97b3fbffe8706d2a2117398c525376c4ca74574b18a1ba6aacfc7879c35b95795774a1a26c78c0d313e006da2de74c3183aab6a5db226b547d0384bf6b25f0a9c4726733fed5f6d85dc5989a4f7cdec2f7eef53669b"}, {0xa0, 0x6, 0x4, "5eccfa73c4b9c14d850fed0bf0b6c286dc6c16707a1692a947d0631882f4c81a7f363271b51f934dcdbbd398443a56116dd543006af63ce50b78a2185fd5fd886b748c2068da9268dcd4262b81a3b2fcfd5b11cb60caeac25abd0288916aa6682a486ff844ccb676fb1306540ae37d84ed0c21e3aecbc10bbe0a8434f9a31e167edc5c5e7dc96f3c95d5d00826"}], 0x220}}, {{&(0x7f00000027c0)=@pptp={0x18, 0x2, {0x3, @multicast1}}, 0x80, &(0x7f0000002880)=[{&(0x7f0000002840)="f23ecc1874f3c63b", 0x8}], 0x1, &(0x7f00000028c0)=[{0xc8, 0x10e, 0x7, "17f40616a909688b20c6e45492af8318a8d093e3f0b80653262f2d7df746651dc06d86d22c271d1cafdefbd27d73c0cd6711f22330b98e165d409cb1dc13c3f9f1472da1bd6745312e6101d93bef3255fc0e711b3833fc7e381609cd6e0849c21341dbfaac4931444d37af92ae0b538f24680b28b381d5699ca8623a8db545eff5c5d3235933c9d5717a6f0bc627de8c2d4ec9c364364991115bfba19c33b955ac8ecbb578652f4b149d79cad9da0ad18f5f62e082b016f7"}, {0x40, 0x10a, 0xf, "57e02f41fafd24b1276edd7786034dcd25201cbe7016252037520f7a70626dd1d2d402537de47550c7ac5037e0249932"}, {0x88, 0x110, 0x0, "dc46f60d55bcf90407d10df5f8eeaa6dbc38c2d12a84146327dba2acf86d0f1d1bb6624775181911746b45cb4726a1e8a11f1cd507ab398d3ced0088e5187668b87390d359c031b1ab0fdb6c87bc648ffd3e38b146b5a78f0a56a4c7272710a83bda9b70bffc37dfdecc45c0b33f87c69dc10d2d68a2"}, {0xa0, 0x10f, 0x4, "3a8fc5bd4e68c9a6a1e89e159998528d156805c083c7b8a52ffa1f66d8b2575d7b81b5652ffc07a584e1ea4ef12a91855020528477c5ea3e391f8d308d60b777e700d979732bf8e75bc4f84dd5eb6a820d05ab0bc4a5aeeb1593415f0838dbb2bb866e43090b2b95618875fa1dbfbe830690ca47633bb1d779a9661903c3aaac48ac84641ce8d76f1e07612f1a23"}], 0x230}}], 0x6, 0x440d0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x25a}) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0xbe, 0x0, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x33, 0x0, 0x0) syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYRES16=0x0], 0x0) 5.841834547s ago: executing program 4 (id=352): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@ipv4_newrule={0x2c, 0x20, 0x1, 0xfffffffc, 0x0, {0x2, 0x0, 0x14}, [@FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}, @FRA_SRC={0x8, 0x2, @empty}]}, 0x2c}}, 0x0) 5.837133349s ago: executing program 1 (id=353): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x84, @loopback, 0x4e60, 0x3, 'lc\x00', 0x20, 0x670f537f, 0x80000070}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast2, 0x4f28, 0x3, 'nq\x00', 0x25, 0xc, 0x6c}, {@loopback, 0x4e23, 0x3, 0x0, 0x1}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x14}, 0x0) 5.789002963s ago: executing program 3 (id=354): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/225, 0xe1}], 0x1, 0x3, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000080)='hybla', 0x5) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = syz_usb_connect(0x0, 0x4a, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000000580)=[{{&(0x7f0000000180)={0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x38}, 0x1}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000001c0)="17", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r4, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) munmap(&(0x7f0000003000/0x4000)=nil, 0x4000) r7 = io_uring_setup(0x6c9a, 0x0) io_uring_register$IORING_UNREGISTER_PBUF_RING(r7, 0x17, 0xffffffffffffffff, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x8, 'syz0\x00'}, 0x3, 0x0, 0x8, 0x0, 0x3, 0x0, 'syz1\x00', &(0x7f0000000180)=['\x00', '-[\'\x00', 'r\x0e\x81|\x0f\xa3\x8a\xb9\x8c\x94\x04\x17\v\rh\x10'], 0xc15c}) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a03000000000000000000070000090900010073797a30000000006c000000090a010400000000000000000700000608000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d2800128024000180090001006d6574610000000014000280080003400000000e0800024000000011080003400020011014000000100001000000000000010000008400"], 0xb4}, 0x1, 0x0, 0x0, 0x20004010}, 0x20050800) r8 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r8, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x9, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x9b090d, 0x2, '\x00', @p_u32=0x0}}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000040)={0x0, 0x3, 0x1}, 0x8) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000240)={'sit0\x00', 0x0}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) setsockopt$MRT_TABLE(0xffffffffffffffff, 0x0, 0xd1, &(0x7f0000000300)=0xffffffff, 0x4) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280), 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40801) 5.716463838s ago: executing program 1 (id=355): setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = socket$netlink(0x10, 0x3, 0x0) socket(0x200000000000011, 0x3, 0x7) (async) r3 = socket(0x200000000000011, 0x3, 0x7) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r3, &(0x7f0000000d00)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) (async) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x145701) ioctl$USBDEVFS_CLEAR_HALT(r6, 0x80045515, 0x0) (async) ioctl$USBDEVFS_CLEAR_HALT(r6, 0x80045515, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000700)=@filter={'filter\x00', 0x42, 0x4, 0x330, 0xffffffff, 0x98, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x298, 0x298, 0x298, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'vlan0\x00', {0xff}, {0xff}, 0x8, 0x0, 0x17}, 0x0, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@icmp={{0x28}, {0x10, "b630"}}, @common=@osf={{0x50}, {'syz1\x00', 0x0, 0xb, 0x0, 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0x0, {0x2}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @empty, 0x0, 0x8, [0xa, 0x25, 0x2a, 0xa, 0x13, 0xe, 0x29, 0x21, 0x38, 0x21, 0x40, 0x20, 0x28, 0x18, 0x22, 0x1e], 0x1, 0x0, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffd}}}}, 0x390) (async) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000700)=@filter={'filter\x00', 0x42, 0x4, 0x330, 0xffffffff, 0x98, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x298, 0x298, 0x298, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'vlan0\x00', {0xff}, {0xff}, 0x8, 0x0, 0x17}, 0x0, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@icmp={{0x28}, {0x10, "b630"}}, @common=@osf={{0x50}, {'syz1\x00', 0x0, 0xb, 0x0, 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0x0, {0x2}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @empty, 0x0, 0x8, [0xa, 0x25, 0x2a, 0xa, 0x13, 0xe, 0x29, 0x21, 0x38, 0x21, 0x40, 0x20, 0x28, 0x18, 0x22, 0x1e], 0x1, 0x0, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffd}}}}, 0x390) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x3) fsopen(&(0x7f00000000c0)='msdos\x00', 0x0) (async) r8 = fsopen(&(0x7f00000000c0)='msdos\x00', 0x0) r9 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r9, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r9, 0x0, 0x0, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) connect$inet6(r9, &(0x7f0000000240)={0xa, 0x4e22, 0x4000001, @local, 0x9}, 0x1c) sendto$inet6(r9, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) recvmmsg(r9, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) (async) recvmmsg(r9, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000b00)='\xbf%#\x00', 0x0) 5.655022659s ago: executing program 4 (id=356): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x98, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) poll(&(0x7f0000000240)=[{r1, 0x421a}], 0x1, 0x7) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (fail_nth: 2) 5.560878247s ago: executing program 1 (id=357): r0 = socket(0x10, 0x803, 0x0) pipe2(&(0x7f0000000100), 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x20000, {0xa, 0x40, 0x22, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@ipv6_newaddr={0x48, 0x14, 0x9535393fea6295b5, 0xfffffffe, 0x0, {0xa, 0x0, 0x46, 0xfe, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x2}]}, 0x48}}, 0x0) (fail_nth: 2) 5.350505849s ago: executing program 2 (id=358): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x98, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) poll(&(0x7f0000000240)=[{r1, 0x421a}], 0x1, 0x7) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 5.350122275s ago: executing program 4 (id=359): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r1 = socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0xe, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaabbffffffffdfff0011"], 0x0) read$alg(0xffffffffffffffff, &(0x7f0000000600)=""/4096, 0x1000) r2 = syz_clone(0xa00011, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000000)=0x4011, 0x4) connect$can_bcm(r3, &(0x7f00000005c0), 0x10) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f00000001c0)=0x7f, 0x4) recvmmsg(r3, &(0x7f0000003880)=[{{0x0, 0x0, 0x0}, 0x4251}, {{&(0x7f0000003a00)=@hci, 0x80, &(0x7f0000001980)=[{&(0x7f0000001700)=""/16, 0x10}, {&(0x7f0000001740)=""/14, 0xe}, {&(0x7f0000001780)=""/193, 0xc1}, {&(0x7f0000001880)=""/139, 0x8b}, {&(0x7f0000001940)}], 0x5, &(0x7f0000001a00)=""/222, 0xde}, 0x6}, {{&(0x7f0000001b00)=@caif=@dgm, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001b80)=""/118, 0x76}, {&(0x7f0000001c00)=""/159, 0x9f}, {&(0x7f0000001cc0)=""/119, 0x77}, {&(0x7f0000001d40)=""/58, 0x3a}, {&(0x7f0000001d80)=""/114, 0x72}], 0x5}, 0x10000}, {{&(0x7f0000001e80)=@xdp, 0x80, &(0x7f00000020c0)=[{&(0x7f0000001f00)=""/9, 0x9}, {&(0x7f0000001f40)=""/119, 0x77}, {&(0x7f0000001fc0)=""/247, 0xf7}], 0x3, &(0x7f0000002100)=""/240, 0xf0}, 0x3}, {{&(0x7f0000002200)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f00000035c0)=[{&(0x7f0000002280)=""/4096, 0x1000}, {&(0x7f0000003280)=""/206, 0xce}, {&(0x7f0000003380)=""/114, 0x72}, {&(0x7f0000003400)=""/78, 0x4e}, {&(0x7f0000003480)=""/111, 0x6f}, {&(0x7f0000003500)=""/68, 0x44}, {&(0x7f0000003580)}], 0x7, &(0x7f0000003640)=""/56, 0x38}, 0xfffffff9}, {{&(0x7f0000003680)=@generic, 0x80, &(0x7f0000003800)=[{&(0x7f0000003700)=""/24, 0x18}, {&(0x7f0000003740)=""/8, 0x8}, {&(0x7f0000003780)=""/103, 0x67}], 0x3, &(0x7f0000000080)=""/1, 0x1}, 0x6}], 0x6, 0x40012101, 0x0) r4 = syz_open_procfs(r2, &(0x7f0000001380)='net/ip_vs\x00') write$P9_RSYMLINK(r4, 0x0, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x20008050) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001600)=ANY=[@ANYRESHEX=r5, @ANYRES32=r6, @ANYRESHEX=r2, @ANYRES32=r5, @ANYBLOB="0000000000000000000000000a0000000015000000000014200001"], 0x58}}, 0x0) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000180)=0x2, 0x4) ptrace$setregs(0xd, r2, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x20, r2, 0x80000001, 0x4) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x40, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa8100010008004520002800680000200690780a010101ac1414aa4e204e21", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="90938000"], &(0x7f0000000340)={0x1, 0x3, [0x626, 0xf50, 0x8b7, 0x3f3]}) r7 = accept4(r0, 0x0, 0x0, 0x100800) ioctl$OCFS2_IOC_GROUP_EXTEND(r1, 0x40046f01, &(0x7f0000000300)=0x8d) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000380), 0x0, 0x24044040}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="120100005520f010c4ae38b142010400d359aa653d5cecf40001090238000700000000090400000371055900090582eb100000e6c24484410403b679287be65f557b48318dde4bb2"], 0x0) 4.985207742s ago: executing program 1 (id=360): r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './file0', [{0x20, '\t\xbb\x9b\x81\xa61\xdd\xd6\xe6\xb3R\xb9\xdb?\xbe\xd3&n\xe2\xb6\xf5%\xb2\xdf\xf5\x83\xba\xeb\x93~\x88\xdc\xec[6=\x01p\xcd\x8ay\x0ez\\U\xae\x9fj@5q\xb2\x89\x00\x17\xe3\x82\x81\xbeS\xd8\x00\x1c\x10\xf8\xf3\xd4\xddI<%\xbb\xa6\xab\x9a\xe5\xec\x19\xfa\xcb\x94\x90u\x9b\x13W\xbd\x9f\xfa\x032-{\x96{\x12\xddy\xb8\x0e%\xabx/\x9cb\xfe\xccO\x00\xf0\xf2\x9dZ\x19_\xc7\xf2\vI\x18\x9d\a\xae{\xd7e\r[\x04\xa2\xebi\xcd+\f\xbc\x92\xccfnG;\x94YX\x10W\xa4e\x95\x11\x06\x19\xc1\xdb\xae\x81\xf0d\x8ab\xf5\x89\xf3\xd0s\xf2\xc9l\x10\x80\x9fzf\xc9l\x1eq\a\xb8'}]}, 0xc1) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000980)=ANY=[@ANYRES16, @ANYRESDEC, @ANYRES8=r1, @ANYBLOB="4454a864844b1223306eb9b2750947c2360485d0f8c7f12fa84e7d6ca64850d77a24d1badd4eb0dbcdb79c76bec7bee61886206be9a382b1aae019698b7d81c73714ea3633512802335d741b84aa764976094cf2216d4457aa2b5288d1da3e8dd1d23e5ab80ee54674656d796ad218fdbb30fa855665669f467f192187837306e440b034cc45b1cf9f8104cb3d39703d53b05f3422b0cff76ef044017bdf9504169a58b8cde0"], 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000d0003002e332564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) syz_usb_control_io$hid(r2, &(0x7f0000000200)={0x24, &(0x7f00000000c0)={0x0, 0xb, 0x9, {0x9, 0x2, "5e48ff387e8816"}}, 0x0, 0x0, 0x0}, 0x0) r4 = creat(&(0x7f0000000940)='./file1\x00', 0x130) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=@ipv4_newnexthop={0x24, 0x68, 0x5, 0x70bd2b, 0x25dfdbfb, {0x2, 0x0, 0x2, 0x0, 0x4}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}]}, 0x24}}, 0x0) syz_usb_connect$cdc_ecm(0x1, 0x53, &(0x7f0000000340)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x41, 0x1, 0x1, 0x1, 0x90, 0x7, "", [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x20, {{0xb, 0x24, 0x6, 0x0, 0x0, '\x00\x00\x00\x00\x00\x00'}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x9, 0x2}}}}]}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) read$FUSE(r4, &(0x7f0000000bc0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) fsetxattr$system_posix_acl(r4, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f0000002c00)=ANY=[@ANYBLOB="020000000100040000000000040004000000", @ANYBLOB="db2af256059596cf8163181c7cfb41db83e768183f5154faf3a52e7da5e1ede0b4c65808309cff50d443222a214f1c73edf0fd39b02cfec624d9a64cae84a6c801b5384a372148a1a903edce7597738376301c810dced926d58f17c52feaa83d98eb27da527098", @ANYBLOB='\b\x00\a\x00', @ANYRES32=r7, @ANYBLOB="0900fcb9837d8e4256014a5ade759b623c626c68fd7fd2a9fa8dace024ff06d2059a9042580297f7d228dda78ed997d830bd2094ab2d218a0fa761ca0997f892adab220618a757e6661c0f3a8907e6e5f6ba038b261347bbdb495696c1df36d57916da4a9d7d1db27aa90a405d563587006e305f91f3000000000000", @ANYRES32=r6, @ANYBLOB, @ANYRES32, @ANYBLOB="10000100000000002000030000000000", @ANYBLOB="84678790500d74ce8adf85e130a855c9a055ca08cc8dca0fc21ce83071f7aecf64df45bd518f74e7ec9358e30000000000000007c2d74191ef5aa7f782a99b79673fce1fd6a9dead30b9cfb68ea82f1ba83586a2f842c857cda40418b0eb4607273f498bb743fdc988761f09b4a5cdf65bae0f76bbe61547cb175ee597c883cc138eed631abc15247df07430b12fb01525125246fc6ad8ff06528fe19e137df7003ab1684f2a9ec960b66be0ef5b", @ANYRES64=r0, @ANYBLOB="4a6ff66c0b245f2f6291ea7930ff70d1741b6a82a7ae3d30e00f233d6665d4b3872d99deec6de85a1a568cc7525ca41baa8e4fc1a0fc717deb22462f76f7a7d67be53a370d32b0502a853b1e698b121a5ca2f11b47a7c71d35e7fb1e86939637b1b61df8f47da91b383d69fdfd1daba383c4663962d23018c1df9261fc902379c8679f2409cac7f8b69e3062da1eae33c70f71f13da6ab0339308addb954f28ae557e6cb389822a2edc1dbf46b729d9c"], 0x44, 0x0) fgetxattr(r4, &(0x7f0000000000)=@known='trusted.overlay.metacopy\x00', 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x8}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000001140)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x8020) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r8, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000700)={0xd0, 0x1, 0x8, 0x401, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffeff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x10001}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xf57f}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2b}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xfffffffd}]}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffffa061}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xc}]}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0xe}, @CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_TCP_CLOSE={0x8}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x48005}, 0x8040004) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000000)=ANY=[@ANYBLOB="0301010007"], 0xa) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000080)=0x101, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r11 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000000c0)=r11, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000008c0)=r10, 0x4) connect$pppl2tp(r10, &(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x2, 0x0, 0x3, 0x3, {0xa, 0x4e22, 0x10, @ipv4={'\x00', '\xff\xff', @local}, 0xffffffff}}}, 0x3a) 4.8038045s ago: executing program 2 (id=361): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de3832", 0x9d}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a49", 0xc4}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968f", 0x5f}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e", 0x73}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6e", 0x71}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f3", 0x1b}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x78}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a", 0x18}], 0x1}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa46461", 0xe}], 0x1}}], 0x4, 0x20000044) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000680)={0x0, 'caif0\x00', {0x3}, 0x4}) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 4.576652541s ago: executing program 2 (id=362): syz_emit_ethernet(0x66, &(0x7f0000000340)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6012000800303a00fe8000000000000000000000000000bb"], 0x0) syz_open_dev$I2C(&(0x7f0000000200), 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x4, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = fsopen(&(0x7f0000000480)='ntfs3\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000400)='source', &(0x7f0000000240)='//\xf2/\x06\b\xa30\\\\\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas\x9d\x14\xe3\v\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7Gl\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r6, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r6, 0x5b) read$watch_queue(r5, &(0x7f0000000000)=""/1, 0x1) keyctl$revoke(0x3, r4) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0x1, 0x283}, 0x0, 0x0, &(0x7f0000000000)) r8 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) syz_usb_control_io$printer(r8, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x3f00000000000000) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bond0\x00'}) 3.121625408s ago: executing program 0 (id=363): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000000200)={&(0x7f0000000040)=[{0x8a, 0x1000, 0x0, 0x0}], 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2002) readv(r2, &(0x7f00000000c0)=[{&(0x7f0000001000)=""/4096, 0x18}], 0x1) write$evdev(r2, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) (async) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000006a000105fefdfbffffdbdf250000000000000004080005"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x8004) (async) readv(r3, &(0x7f0000000600)=[{&(0x7f0000000280)=""/34, 0x22}], 0x1) pwritev(r1, &(0x7f00000029c0)=[{&(0x7f0000000080)="c6282f764345f2ce7ae01b0efef498bb7e297f97e91ef5d84885209ddf6fa750c3f71c36ab9e5c86673c03bec77240c51e9bf7dc8f10342e99235971a3e33a6216ba16385c6f7d21612204bf444ef5c50a8a69e418082351de8f92140101010ae8f726c637de90de82f831b1cc5d630811e6ae363565c5da0fb6fefb0dbba600da70c412245b0fe9dbc9025532e8ae47fc61401ac3cda5e62f5104a7dd37026032eae6e6f02b3eca46fce39b2915d35b73cf8b05", 0xb4}, {&(0x7f0000000140)="1792d02d9e767efeba3e01e185f66654661edd6af7c74bfc04480fa75ceb3b210255bcacd08400c7cd6b1192d5afff65a18c65256e30c9c56bf7493ae4baf96aee4b7bc4171530369a153a6c32cf273d0b5562714496ed79310b3cb410f9f5134026dfbb6596afbe58e0fc92fc808941a626f2a5b60c7d23a20ec75894b5dcd94d02a37031dc93428c25080ed971e2eaf022a17f803c491acf93b0243624b3eb22dc48657a31a3c18290c57ca4a14b07727b481250a55a", 0xb7}, {&(0x7f0000000240)="842ed7f8e2ce9f4d2a13f187fe38c646e8e704c46eb0dee794ca4f4bbae9e6c1c76e15606fc196190a9c8fc7bd96be65075f7c2ab6a34a4c1506c2a32bda346f40039c4a0649ff439ff1a3539f", 0x4d}, {&(0x7f00000003c0)="e1722238b84be67b4e975902bd698ce78a369c51512913908defb72d602985e461e9a24828ef9441e7f6ec18efec59b83dd1f8640cbc84c525abba3cee7d21d385e2fdc79d600464a84adaecb60b0e0fd810823c8efb4a8cbdac5324610b4abdeb32174593b4c53d1ddf978db6d6cada39477842008e92a43df090516a37d3c98ebc2d4de4e49c226e2b9facf837493fcdcaba5399a42e296032258aa5fde1f7c226677b16826502f856646fc95e40ac105c66c296244ff79ce6f1c04cab1d196abbd976556836", 0xc7}, {&(0x7f00000006c0)="da63c7c357623ec47615f89c490141056d32851c00a1d8ffca85dd9122b81dcae0ddbd82a148cfec78844d0882dadf2908c4a536c22c96073a7adbe4cbf77550be00b6a8493a7518a888fe935a9c7949a415a9bd44fdac9c5bf7613b04dd92e222a0dba726e6247cad70ed0e1ee5458ed4241a4f1e439e23c224a3d60381a9c0d4d00f49f1f05e8ad49f7fb5f3d49146c159ea704910f15e06e991f41a27f7b4749e2166535965471e5366960a82e9ed6398548342dc6c0ef677a7a21bf8c9ac215916d62e1d03737727b8d33018e68640d0e2924c83ac009ae290a5f9909ba5c91204d7081dabd3", 0xe8}, {&(0x7f00000007c0)="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", 0x1000}, {&(0x7f00000017c0)="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", 0x1000}, {&(0x7f00000027c0)="649d759aeec3dcae0b3610eeb6781e87582ef76cc7b419c7b905b929ed8524cb13a01f60075bcd68e080128edc35f78f14e36e77e0613e4e03974a0040308f4a8ccc6fdbff957b09226cf69e81f3825d502886990a497c978c9d83f7f70494c93742f7fe3d67750371fd9e42157696c0d449be58005f39c23f2ab8d20e26158e164c1e0423cb0a2c50ef465f9b1dd1401b3a8ce78d5fe9503683c36e20456a4c1cf27dbb8d9bdca43632feef29ababae334a8cb86b22c14ba3639c068701df2df617c2fd9cefe4719f15474351", 0xcd}, {&(0x7f00000028c0)="df9ee9fc922c96146ca5fda47e7314a9468037a9f40e2a0e10801631c9ea5f8040eebf61c98a4384db19d761dcb0139808de243a0d8e3a516f4707e8437a51b68be84ec9361ba9707fc769d73f802cee392bc7a79a070c7b55c99c9bbf921d1db81eac008365f0e375af6815340a0657a297eef1318929cd1048ff10228992ba9bc894c2d14d630eba7b28409305290210716c72ccb8ae86876f48549b9f48db24dddd5350786f4f812caf128c1edfc952d538fd1e85388af8fabfed05bf64b7785d4a9541dde2a6546c59b1b8d70aefd8949abe6f886d6d51b16701784efef520348c051b322de6e5b473d4250599aafccd3c91", 0xf4}], 0x9, 0x7, 0x7f) (async) syz_usb_control_io(r0, 0x0, 0x0) 2.66097484s ago: executing program 3 (id=364): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647608000000000005009842bf000400028008000a0062aae473e5aed90ca290291c56a4e43ddbf6e238d522ca78523d75", @ANYRES32=r1, @ANYBLOB="0a0001000180c20000010000"], 0x48}}, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r3, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sendmsg$inet_sctp(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002640)=[{&(0x7f00000000c0)="f6", 0x1}], 0x1, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x4, 0x41, 0x0, 0x2}}], 0x20, 0x4048800}, 0x0) 2.200460865s ago: executing program 4 (id=365): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'gre0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) sendto$packet(r0, &(0x7f0000000340)="05030006e8fe091c6202a0ffffffff006003000000007f141434e3177f43055762cb80948864113b022543424aa608", 0xfef2, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000000)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB='\x00!\a'], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 2.090963778s ago: executing program 0 (id=366): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r3, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SEND(r2, 0x40489426, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000000580)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x38}, 0x1}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000001c0)="17", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r5, 0x1) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x4000004, 0x80000041, 0x1000}, &(0x7f0000000640)=0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd70000000001f29000000180001801400020064756d6d7930"], 0x2c}}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000005000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_freezer_state(r8, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r9 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r9, 0x7ffffffe, 0x0, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="05000000e6ff52f7a1b45fb4cecb"], 0x14}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 1.920321161s ago: executing program 1 (id=367): syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a3b370086d04ae08581101020301090212000d0000000009"], 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc73}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001540)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="80000000c300010014002b80080003000400170008000100", @ANYRES32, @ANYBLOB="08001b"], 0x3c}, 0x1, 0x0, 0x0, 0x200080c0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r3, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000300)={[0x1, 0x1000000000000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x18, 0x0, 0x0, 0x0, 0x5, 0x2], 0xeeee8000, 0x8340}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.649193367s ago: executing program 3 (id=368): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000100)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="5c00000012006bab9a1fe3d86e17aa0a076b876c1d0048007ea60864160afb650400bd1d38001d009580472760bc06000000a705251e6182949a36510a84c9fa896e0a374841e1028b8f0b79c139977394e70e4509c5bb000011d600", 0x5c}, {&(0x7f0000000140)="a7263600bd7f062b3950184f6b9bacd309f84d64abe01eb702a237ad8bd04a682d3a170a4ae8532f5645cd74d718e65b5253cafef0b99a2f1fa9ccfb2b571351cb5502d8f8", 0x45}, {&(0x7f0000000280)="3cd36760a799b1578433144f4fc02fb31997c7e6045ba9255ca90d967c98d9a7144c03f69dabeb302fe98ddfe4e96fec87233e51850332e2df490f9bb78a49c1864a3c49c24f4625973067137435453c531c2a20a669b7d5f1185ca49583575938701a00d1eadd6ed957f0f5cb6129a38d993824761971d9f7e2dba1d800207286a60aa6573df842", 0x88}, {&(0x7f0000000400)="fa257da5c1353624af12cbdce933c57dc76137216b5360c06b9cfd0c2240", 0x1e}, {&(0x7f0000000440)="fe63d8007073e4c905b175557287a80ff901764d019e63928c52f915a5be0c5ef8429de3817adc50c40450db8d905aa63a41c849ad4df90596e239eedf7c85e303dea8cef09b42615e4ec529f127d6b675f7f2dc4f26fc32009b0e2d7bc17fffaab7", 0x62}, {&(0x7f0000000540)="7438f85a3204aa8e8eef020ec3fe0c9e6f41b696aef57601302fdd6cdb49b5b917322f7afa4fd2b17be371f9efcc2bd9d8f536c661b13bc502165a350f13e6d86366f936130e93ec5edc2adbe1", 0x4d}], 0x6, 0x0, 0x0, 0x1f00c00e}, 0x840) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(0x0, 0x800) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000380)}) r7 = shmget$private(0x0, 0x3000, 0x1, &(0x7f0000ffc000/0x3000)=nil) shmctl$SHM_LOCK(r7, 0xb) recvmsg$kcm(r5, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40000120) ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, 0x0) r8 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r8, 0x4112, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r4, 0x8010500c, &(0x7f0000000080)) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0) r10 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r10, 0x9586730c31f01255) ioctl$VHOST_SET_VRING_BASE(r9, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r9, 0x4008af04, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r2, 0x0, 0x10001, 0x0, 0x1ff, 0x2ebad4, 0xa0f97}) 1.596274265s ago: executing program 4 (id=369): syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x100000000000, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x0, 0x2, 0x7}, {0x0, 0x0, 0x2, 0x3}, 0x0, 0x6e6bbb, 0x1, 0x0, 0x0, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3f}, 0x8, 0x32}, 0x0, @in=@multicast2, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) syz_usb_connect$cdc_ncm(0x2, 0x6f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5d, 0x2, 0x1, 0x80, 0x10, 0x7, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, 'h'}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x1000, 0x7, 0xfd}, {0x6, 0x24, 0x1a, 0xfb, 0x11}}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x2, 0x7, 0xe0}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x1f7, 0x5, 0x89, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x6, 0x1, 0xfe}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0x3, 0x0, 0x1f, 0x20, 0x8}, 0x11, &(0x7f0000000200)={0x5, 0xf, 0x11, 0x2, [@ptm_cap={0x3}, @generic={0x9, 0x10, 0x1, "2cbe0f4d2f14"}]}, 0x2, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x440a}}, {0x8b, &(0x7f0000000580)=ANY=[@ANYBLOB="8b0315d4d9775ebda8db44f7619c15583702164a03440adbfdf8ec911c14740d86b70d8528e48652ec691d8a1f8602fb58ba24991b25153639d10180b7968e4a6ac992f13ef13f1355605e52e940c0ba12879363b99b08489aacd71d43b47b14ccd425b1511bb1aff41a70cf0e4423ac3b22f29732ec5f15eee42c16cf4499fd9b3e896eeb2ea8b781f098"]}]}) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@gettaction={0x14, 0x5a, 0xc6b747b6bf1c6b95, 0x0, 0x25dfdbfe}, 0x14}}, 0x10000000) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000080), 0x1, 0x48c02) read(r3, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000017dcb4401e040c4098af000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000640)={0x0, 0xe, 0x1, "06"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x1) 1.346038958s ago: executing program 3 (id=370): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x106, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "f4"}], 0x18, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="18"], 0x18, 0x500}}], 0x2, 0x40058) 1.084753974s ago: executing program 3 (id=371): getrusage(0xffffffffffffffff, &(0x7f00000000c0)) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) r1 = socket(0x10, 0x803, 0x2) unshare(0x24000400) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0xb, 0xbf21, 0x100}, 0x50) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000180)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r5, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="240003"], 0x10e0}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r2, 0x0, '\x00', r6, 0xffffffffffffffff, 0x1ffffff}, 0x50) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240001000000000904000002214c6a0009050702000000da00090589"], 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) time(&(0x7f0000000000)) 954.099444ms ago: executing program 2 (id=372): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x24c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0x20, 0x7, "", [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x1, 0x1, 0x9, {0x9, 0x21, 0x0, 0x1, 0x1, {0x22, 0x491}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x1, 0x3, 0xff}}, [{{0x9, 0x5, 0x2, 0x3, 0x238, 0x6, 0x1}}]}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0x3, 0x9, 0xfc, 0xbf, 0xfe}, 0x92, &(0x7f0000000180)={0x5, 0xf, 0x92, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x6, 0x6, 0x6ed}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x1, 0x10, 0x7}, @generic={0x7c, 0x10, 0x1, "f125a681f8d5409785febabfd839bac68ffb16a4b6bf9ffd151d0fea2eb038bc9accb83e8557b8543d27b5695941beb6c57542c9c68a473aceb2b3c02d44d99212b00b473bfe0a5f3056f549846325086a9198387ef7ef43b22bf27e40b916d927d09bcf5087ec608d7506f3cbf7a3f060d78d89c7de76d7d9"}]}, 0x4, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x1809}}, {0x69, &(0x7f0000000280)=@string={0x69, 0x3, "0ae070284b9f150f7f93904f280bdb49cb7fd4d59cf403c9c6fa4a0ba85f6b83afd8f3f8e9ce1b020fbea35a522e09650d92341ac59f0513dc80c5e28a0dcc7cf2629c4d1275cd39db9c379dda0eaf2dcd446c5339df40253fe80eba5a241cf61b3f7ac39e1846"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x415}}, {0x9f, &(0x7f0000000340)=@string={0x9f, 0x3, "a3dc75a8a3e206beca94f7609f82803ae6484520cc0e69a81b76a3d4f067647831767bbc2a6669162bf1f8ade71935829401e7ce224e43acbd4ffa12f3c00356f1acbdda1b94508112d8ef060465621eec83f16e895837d09ece3a7efd8258972f9e5e599c1d2bcb260b5288924620353422c4e62c3297877d3d2d0fa602e3f0f87b41b06f4c60c2211256f93d6b36aa94c208931fe1d08ce877a6a037"}}]}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000100)={0x20, 0xb863f1de44954ad5, 0x2, 'rd'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 1 (id=373): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {0x0, 0x4107}}}, 0x1c}}, 0x4044890) (fail_nth: 4) kernel console output (not intermixed with test programs): ock not bind to device [ 82.524800][ T5939] loop2: detected capacity change from 0 to 7 [ 82.550494][ T5984] netlink: 'syz.2.14': attribute type 10 has an invalid length. [ 82.602549][ T5939] loop2: [ 82.610013][ T5939] loop2: partition table partially beyond EOD, truncated [ 82.658709][ T5978] : renamed from bond_slave_0 (while UP) [ 82.897637][ T5840] usb 2-1: Firmware version (0.0) predates our first public release. [ 82.924213][ T5840] usb 2-1: Please update to version 0.2 or newer [ 83.399952][ T5840] usb 2-1: USB disconnect, device number 2 [ 83.643793][ T5995] FAULT_INJECTION: forcing a failure. [ 83.643793][ T5995] name failslab, interval 1, probability 0, space 0, times 1 [ 83.705570][ T5995] CPU: 1 UID: 0 PID: 5995 Comm: syz.2.17 Not tainted syzkaller #0 PREEMPT(full) [ 83.705594][ T5995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 83.705612][ T5995] Call Trace: [ 83.705618][ T5995] [ 83.705624][ T5995] dump_stack_lvl+0xe8/0x150 [ 83.705660][ T5995] should_fail_ex+0x412/0x560 [ 83.705691][ T5995] should_failslab+0xa8/0x100 [ 83.705716][ T5995] __kmalloc_noprof+0xe8/0x760 [ 83.705735][ T5995] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 83.705758][ T5995] tomoyo_realpath_from_path+0xe3/0x5d0 [ 83.705775][ T5995] ? tomoyo_domain+0xd7/0x130 [ 83.705797][ T5995] ? tomoyo_path_number_perm+0x219/0x630 [ 83.705821][ T5995] tomoyo_path_number_perm+0x246/0x630 [ 83.705847][ T5995] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 83.705866][ T5995] ? __lock_acquire+0x6b5/0x2cf0 [ 83.705901][ T5995] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 83.705940][ T5995] ? __fget_files+0x2a/0x420 [ 83.705958][ T5995] ? __fget_files+0x2a/0x420 [ 83.705973][ T5995] ? __fget_files+0x3a0/0x420 [ 83.705989][ T5995] ? __fget_files+0x2a/0x420 [ 83.706008][ T5995] security_file_ioctl+0xc3/0x2a0 [ 83.706030][ T5995] __se_sys_ioctl+0x47/0x170 [ 83.706051][ T5995] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.706069][ T5995] do_syscall_64+0x15f/0xf80 [ 83.706095][ T5995] ? trace_irq_disable+0x3b/0x140 [ 83.706116][ T5995] ? clear_bhb_loop+0x40/0x90 [ 83.706136][ T5995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.706154][ T5995] RIP: 0033:0x7f1aaed9c819 [ 83.706174][ T5995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.706187][ T5995] RSP: 002b:00007f1aafcf2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 83.706202][ T5995] RAX: ffffffffffffffda RBX: 00007f1aaf015fa0 RCX: 00007f1aaed9c819 [ 83.706212][ T5995] RDX: 0000200000000500 RSI: 00000000c2604111 RDI: 0000000000000003 [ 83.706220][ T5995] RBP: 00007f1aafcf2090 R08: 0000000000000000 R09: 0000000000000000 [ 83.706228][ T5995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.706236][ T5995] R13: 00007f1aaf016038 R14: 00007f1aaf015fa0 R15: 00007f1aaf13fa48 [ 83.706257][ T5995] [ 83.706274][ T5995] ERROR: Out of memory at tomoyo_realpath_from_path. [ 83.817313][ T5993] af_packet: tpacket_rcv: packet too big, clamped from 65049 to 3966. macoff=82 [ 84.133083][ T5917] uvcvideo 5-1:6.220: Found multiple Units with ID 4 [ 84.158444][ T5917] uvcvideo 5-1:6.220: Found Unit with invalid ID 0 [ 84.177701][ T5917] uvcvideo 5-1:6.220: Found UVC 7.ff device syz (174f:5212) [ 84.219042][ T5917] uvcvideo 5-1:6.220: Entity type for entity Output 4 was not initialized! [ 84.250489][ T5917] uvcvideo 5-1:6.220: Failed to create links for entity 4 [ 84.264120][ T5917] uvcvideo 5-1:6.220: Failed to register entities (-22). [ 84.295531][ T5917] usb 5-1: USB disconnect, device number 2 [ 84.367660][ T5840] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 84.537387][ T5840] usb 2-1: Using ep0 maxpacket: 16 [ 84.548808][ T5840] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.570245][ T5840] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.608645][ T5840] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 84.633115][ T5840] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 84.664354][ T5840] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.678489][ T5840] usb 2-1: config 0 descriptor?? [ 84.686528][ T5917] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 84.698167][ T6014] netlink: 75 bytes leftover after parsing attributes in process `syz.0.25'. [ 84.831150][ T6020] netlink: 'syz.0.27': attribute type 21 has an invalid length. [ 84.856467][ T5917] usb 5-1: Using ep0 maxpacket: 32 [ 84.873048][ T5917] usb 5-1: config 0 has an invalid interface number: 35 but max is 0 [ 84.894890][ T5917] usb 5-1: config 0 has no interface number 0 [ 84.910604][ T5917] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 84.924031][ T6022] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 84.925886][ T5917] usb 5-1: config 0 interface 35 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 84.948865][ T5917] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 84.961176][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.970091][ T5917] usb 5-1: Product: syz [ 84.975044][ T5917] usb 5-1: Manufacturer: syz [ 84.980923][ T5917] usb 5-1: SerialNumber: syz [ 85.002468][ T5917] usb 5-1: config 0 descriptor?? [ 85.018101][ T6023] binder: 6021:6023 ioctl c0306201 200000004a40 returned -22 [ 85.130568][ T5840] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 85.153254][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 85.173727][ T5840] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 85.174072][ T6025] Zero length message leads to an empty skb [ 85.253317][ T5840] microsoft 0003:045E:07DA.0001: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 85.267821][ T5840] microsoft 0003:045E:07DA.0001: no inputs found [ 85.286758][ T5840] microsoft 0003:045E:07DA.0001: could not initialize ff, continuing anyway [ 85.331888][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 85.348078][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 85.353667][ T5840] usb 2-1: USB disconnect, device number 3 [ 85.372633][ T10] usb 1-1: config 243 has an invalid interface number: 64 but max is 0 [ 85.392965][ T10] usb 1-1: config 243 has no interface number 0 [ 85.400590][ T10] usb 1-1: config 243 interface 64 has no altsetting 0 [ 85.438852][ T5917] radio-si470x 5-1:0.35: DeviceID=0x8249 ChipID=0x5d00 [ 85.444138][ T6028] fido_id[6028]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 85.469383][ T5944] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 85.471496][ T10] usb 1-1: New USB device found, idVendor=0856, idProduct=ac44, bcdDevice=4f.80 [ 85.494174][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.515120][ T10] usb 1-1: Product: syz [ 85.536189][ T10] usb 1-1: Manufacturer: syz [ 85.546096][ T10] usb 1-1: SerialNumber: syz [ 85.632061][ T5917] radio-si470x 5-1:0.35: software version 130, hardware version 73 [ 85.632710][ T5944] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 85.678994][ T5944] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.697632][ T5944] usb 3-1: Product: syz [ 85.702872][ T5944] usb 3-1: Manufacturer: syz [ 85.710749][ T5944] usb 3-1: SerialNumber: syz [ 85.724306][ T5944] usb 3-1: config 0 descriptor?? [ 85.741428][ T5944] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 85.774302][ T10] mos7840 1-1:243.64: required endpoints missing [ 85.807121][ T10] usb 1-1: USB disconnect, device number 2 [ 86.148872][ T5917] radio-si470x 5-1:0.35: si470x_set_report: usb_control_msg returned -110 [ 86.163952][ T5917] radio-si470x 5-1:0.35: submitting int urb failed (-90) [ 86.175404][ T5917] radio-si470x 5-1:0.35: si470x_set_report: usb_control_msg returned -32 [ 86.199626][ T5917] radio-si470x 5-1:0.35: probe with driver radio-si470x failed with error -22 [ 86.247471][ T5917] radio-raremono 5-1:0.35: this is not Thanko's Raremono. [ 86.376257][ T5840] usb 5-1: USB disconnect, device number 3 [ 86.736912][ T5917] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 86.921466][ T5917] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 86.942677][ T807] cfg80211: failed to load regulatory.db [ 86.952679][ T5917] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 86.984433][ T5917] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 87.000746][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.014823][ T5917] usb 1-1: Product: syz [ 87.022883][ T5917] usb 1-1: Manufacturer: syz [ 87.032947][ T5917] usb 1-1: SerialNumber: syz [ 87.072421][ T5917] rtl8150 1-1:1.0: couldn't find required endpoints [ 87.084424][ T5917] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 87.223288][ T6057] kvm: user requested TSC rate below hardware speed [ 87.285676][ T5917] usb 1-1: USB disconnect, device number 3 [ 87.582425][ T6027] netlink: 32 bytes leftover after parsing attributes in process `syz.2.31'. [ 87.597075][ T1225] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 87.621684][ T6027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.646174][ T6027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.666307][ T6027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.679573][ T6027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.697472][ T5944] gspca_stk1135: reg_w 0x200 err -71 [ 87.717496][ T5944] gspca_stk1135: serial bus timeout: status=0x00 [ 87.738191][ T5944] gspca_stk1135: Sensor write failed [ 87.756515][ T5944] gspca_stk1135: serial bus timeout: status=0x00 [ 87.775951][ T5944] gspca_stk1135: Sensor write failed [ 87.816683][ T5944] gspca_stk1135: serial bus timeout: status=0x00 [ 87.838965][ T5944] gspca_stk1135: Sensor read failed [ 87.845570][ T1225] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 128, changing to 7 [ 87.860906][ T5944] gspca_stk1135: serial bus timeout: status=0x00 [ 87.876467][ T5944] gspca_stk1135: Sensor read failed [ 87.884181][ T1225] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 87.900032][ T5944] gspca_stk1135: Detected sensor type unknown (0x0) [ 87.924005][ T1225] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.937975][ T5944] gspca_stk1135: serial bus timeout: status=0x00 [ 87.950499][ T1225] usb 2-1: Product: syz [ 87.954916][ T5944] gspca_stk1135: Sensor read failed [ 87.961622][ T1225] usb 2-1: Manufacturer: syz [ 87.966851][ T5944] gspca_stk1135: serial bus timeout: status=0x00 [ 87.973436][ T1225] usb 2-1: SerialNumber: syz [ 87.978298][ T5944] gspca_stk1135: Sensor read failed [ 87.991823][ T5944] gspca_stk1135: serial bus timeout: status=0x00 [ 88.006386][ T5944] gspca_stk1135: Sensor write failed [ 88.017642][ T5944] gspca_stk1135: serial bus timeout: status=0x00 [ 88.030201][ T5944] gspca_stk1135: Sensor write failed [ 88.041991][ T5944] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 88.080988][ T5944] usb 3-1: USB disconnect, device number 2 [ 88.265300][ T6057] netlink: 4 bytes leftover after parsing attributes in process `syz.1.41'. [ 88.286778][ T6057] netlink: 4 bytes leftover after parsing attributes in process `syz.1.41'. [ 88.383752][ T1225] usb 2-1: found format II with max.bitrate = 9, frame size=2 [ 88.411299][ T1225] usb 2-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 88.447304][ T1225] usb 2-1: found format II with max.bitrate = 9, frame size=2 [ 88.473660][ T1225] usb 2-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 88.510387][ T1225] usb 2-1: unit 4 not found! [ 88.535880][ T6088] netlink: 'syz.2.50': attribute type 5 has an invalid length. [ 88.863986][ T1225] usb 2-1: USB disconnect, device number 4 [ 88.921749][ T6104] netlink: 'syz.4.55': attribute type 12 has an invalid length. [ 89.016263][ T6103] sch_tbf: peakrate 5 is lower than or equals to rate 1005582297638359173 ! [ 89.099301][ T5988] udevd[5988]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 89.441834][ T6117] syzkaller0: entered promiscuous mode [ 89.449004][ T6117] syzkaller0: entered allmulticast mode [ 89.826499][ T807] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 89.916451][ T10] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 90.006496][ T807] usb 5-1: Using ep0 maxpacket: 32 [ 90.022689][ T807] usb 5-1: config 0 has no interfaces? [ 90.032307][ T807] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 90.057435][ T807] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.083007][ T807] usb 5-1: config 0 descriptor?? [ 90.101629][ T10] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 90.120420][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.132082][ T10] usb 1-1: Product: syz [ 90.143748][ T10] usb 1-1: Manufacturer: syz [ 90.151218][ T10] usb 1-1: SerialNumber: syz [ 90.169807][ T10] usb 1-1: config 0 descriptor?? [ 90.186035][ T10] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 90.523635][ T6120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.560091][ T6120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.876585][ T6146] syz_tun: entered allmulticast mode [ 90.914346][ T6146] syz_tun: left allmulticast mode [ 91.074543][ T6152] netlink: 16 bytes leftover after parsing attributes in process `syz.3.72'. [ 91.311457][ T5965] usb 5-1: USB disconnect, device number 4 [ 91.402428][ T6157] fuse: blksize only supported for fuseblk [ 91.409074][ T1225] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 91.419286][ T6157] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.74'. [ 91.576444][ T1225] usb 2-1: Using ep0 maxpacket: 16 [ 91.576910][ T6159] fuse: blksize only supported for fuseblk [ 91.590048][ T1225] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 91.604461][ T1225] usb 2-1: config 0 has no interface number 0 [ 91.612218][ T1225] usb 2-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.626187][ T1225] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 91.636632][ T1225] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.650094][ T6159] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.75'. [ 91.677563][ T1225] usb 2-1: config 0 descriptor?? [ 91.942310][ T6163] netlink: 24 bytes leftover after parsing attributes in process `syz.4.77'. [ 92.130680][ T1225] mcp2221 0003:04D8:00DD.0002: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input2 [ 92.327994][ T5917] usb 2-1: USB disconnect, device number 5 [ 92.446709][ T5944] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 92.586489][ T5944] usb 3-1: device descriptor read/64, error -71 [ 92.837162][ T5944] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 92.986404][ T5944] usb 3-1: device descriptor read/64, error -71 [ 93.009734][ T6124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.047294][ T6124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.058381][ T6184] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 93.069605][ T6124] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1b [ 93.100308][ T10] gspca_stk1135: reg_w 0x351 err -71 [ 93.121716][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 93.138703][ T5944] usb usb3-port1: attempt power cycle [ 93.159429][ T10] gspca_stk1135: Sensor write failed [ 93.181759][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 93.202477][ T10] gspca_stk1135: Sensor write failed [ 93.231652][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 93.248667][ T10] gspca_stk1135: Sensor read failed [ 93.248712][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 93.248724][ T10] gspca_stk1135: Sensor read failed [ 93.248732][ T10] gspca_stk1135: Detected sensor type unknown (0x0) [ 93.248760][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 93.248770][ T10] gspca_stk1135: Sensor read failed [ 93.248793][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 93.248849][ T10] gspca_stk1135: Sensor read failed [ 93.248877][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 93.248887][ T10] gspca_stk1135: Sensor write failed [ 93.248912][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 93.248922][ T10] gspca_stk1135: Sensor write failed [ 93.248999][ T10] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71 [ 93.275248][ T10] usb 1-1: USB disconnect, device number 4 [ 93.400751][ T6190] fuse: blksize only supported for fuseblk [ 93.414202][ T6190] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.85'. [ 93.500143][ T5944] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 93.521482][ T5944] usb 3-1: device descriptor read/8, error -71 [ 93.758198][ T5944] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 93.789479][ T5944] usb 3-1: device descriptor read/8, error -71 [ 93.828752][ T6195] netem: change failed [ 93.907260][ T5944] usb usb3-port1: unable to enumerate USB device [ 94.867355][ T29] audit: type=1326 audit(1776919519.032:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6203 comm="syz.4.89" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f67d979c819 code=0x0 [ 95.292628][ T6217] netlink: 1 bytes leftover after parsing attributes in process `syz.3.92'. [ 95.347464][ T5944] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 95.422826][ T6215] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 95.553528][ T5944] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 95.605977][ T5944] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 95.650692][ T5944] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 95.701899][ T5944] usb 2-1: Product: syz [ 95.725831][ T5944] usb 2-1: Manufacturer: syz [ 95.755377][ T5944] usb 2-1: SerialNumber: syz [ 96.014975][ T6226] fuse: blksize only supported for fuseblk [ 96.042699][ T6226] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.96'. [ 96.075271][ T5944] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 96.141053][ T5840] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 96.215968][ T6229] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 3, id = 0 [ 96.310076][ T5840] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 96.319963][ T5840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.329461][ T5840] usb 5-1: Product: syz [ 96.334789][ T5840] usb 5-1: Manufacturer: syz [ 96.341712][ T5840] usb 5-1: SerialNumber: syz [ 96.362584][ T5840] usb 5-1: config 0 descriptor?? [ 96.381486][ T5944] usb 2-1: USB disconnect, device number 6 [ 96.413737][ T5944] usblp0: removed [ 96.476599][ T1225] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 96.499294][ T807] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 96.648321][ T1225] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.656768][ T807] usb 4-1: Using ep0 maxpacket: 8 [ 96.668408][ T1225] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 96.686555][ T807] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 96.694690][ T1225] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 96.714118][ T807] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 96.724493][ T1225] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 96.724984][ T807] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 96.746767][ T807] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 96.759698][ T807] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 96.759730][ T1225] usb 3-1: SerialNumber: syz [ 96.808245][ T807] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 96.830230][ T807] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.069882][ T6228] netlink: 830 bytes leftover after parsing attributes in process `syz.2.97'. [ 97.090465][ T6231] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 97.471633][ T6224] xt_time: unknown flags 0x4 [ 97.487769][ T5840] usb 5-1: Firmware version (0.0) predates our first public release. [ 97.507551][ T5840] usb 5-1: Please update to version 0.2 or newer [ 97.586909][ T5840] usb 5-1: USB disconnect, device number 5 [ 97.711876][ T6245] usbtmc 4-1:16.0: simple usb_control_msg returned 0 [ 97.832040][ T6247] netlink: 32 bytes leftover after parsing attributes in process `syz.0.101'. [ 97.938222][ T807] usb 4-1: USB disconnect, device number 2 [ 98.216637][ T5840] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 98.428981][ T5840] usb 1-1: config 0 has an invalid interface number: 52 but max is 0 [ 98.440791][ T5840] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.484423][ T5840] usb 1-1: config 0 has no interface number 0 [ 98.507059][ T5840] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 98.546428][ T5840] usb 1-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 98.568158][ T5840] usb 1-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 98.606402][ T5840] usb 1-1: config 0 interface 52 has no altsetting 0 [ 98.619778][ T5840] usb 1-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 98.638944][ T5840] usb 1-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 98.663045][ T5840] usb 1-1: Manufacturer: syz [ 98.666797][ T6267] fuse: blksize only supported for fuseblk [ 98.686245][ T6267] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.108'. [ 98.699367][ T5840] usb 1-1: config 0 descriptor?? [ 98.737566][ T5840] hub 1-1:0.52: bad descriptor, ignoring hub [ 98.752053][ T5840] hub 1-1:0.52: probe with driver hub failed with error -5 [ 98.799744][ T6269] netlink: 16 bytes leftover after parsing attributes in process `syz.4.109'. [ 98.900429][ T5991] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 98.929452][ T6271] CUSE: info not properly terminated [ 98.938505][ T5840] synaptics_usb 1-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 98.967586][ T5840] synaptics_usb 1-1:0.52: probe with driver synaptics_usb failed with error -5 [ 99.048762][ T807] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 99.066657][ T5991] usb 2-1: Using ep0 maxpacket: 16 [ 99.073948][ T5991] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 99.096400][ T29] audit: type=1326 audit(1776919523.252:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6272 comm="syz.3.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f081bf9c819 code=0x7ffc0000 [ 99.120117][ T5991] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 99.149899][ T5991] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 99.166442][ T29] audit: type=1326 audit(1776919523.252:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6272 comm="syz.3.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f081bf9c819 code=0x7ffc0000 [ 99.190502][ T5991] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.219924][ T5991] usb 2-1: Product: syz [ 99.230016][ T5991] usb 2-1: Manufacturer: syz [ 99.255859][ T5991] usb 2-1: SerialNumber: syz [ 99.256479][ T807] usb 5-1: Using ep0 maxpacket: 32 [ 99.262500][ T29] audit: type=1326 audit(1776919523.252:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6272 comm="syz.3.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f081bf9c819 code=0x7ffc0000 [ 99.312484][ T807] usb 5-1: unable to get BOS descriptor or descriptor too short [ 99.327308][ T5991] usb 2-1: 0:2 : does not exist [ 99.331831][ T807] usb 5-1: config 128 has an invalid interface number: 127 but max is 3 [ 99.358849][ T29] audit: type=1326 audit(1776919523.252:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6272 comm="syz.3.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f081bf9c819 code=0x7ffc0000 [ 99.364592][ T807] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 99.418343][ T29] audit: type=1326 audit(1776919523.262:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6272 comm="syz.3.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f081bf9c819 code=0x7ffc0000 [ 99.446658][ T807] usb 5-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 99.479924][ T807] usb 5-1: config 128 has no interface number 0 [ 99.496525][ T807] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 99.520447][ T807] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 99.556808][ T5840] usb 1-1: USB disconnect, device number 5 [ 99.576695][ T807] usb 5-1: config 128 interface 127 has no altsetting 0 [ 99.588527][ T5991] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 99.602558][ T807] usb 5-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 99.627261][ T807] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.645887][ T807] usb 5-1: Product: syz [ 99.652473][ T807] usb 5-1: Manufacturer: syz [ 99.665604][ T807] usb 5-1: SerialNumber: syz [ 99.729193][ T5991] usb 2-1: USB disconnect, device number 7 [ 99.746054][ T29] audit: type=1326 audit(1776919523.912:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6272 comm="syz.3.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f081bf9c819 code=0x7ffc0000 [ 99.834595][ T6113] udevd[6113]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 99.873959][ T29] audit: type=1326 audit(1776919523.912:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6272 comm="syz.3.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f081bf9c819 code=0x7ffc0000 [ 99.924388][ T6269] netlink: 12 bytes leftover after parsing attributes in process `syz.4.109'. [ 99.950679][ T29] audit: type=1326 audit(1776919523.912:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6272 comm="syz.3.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f081bf9c819 code=0x7ffc0000 [ 100.024096][ T29] audit: type=1326 audit(1776919524.112:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6272 comm="syz.3.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f081bf9c819 code=0x7ffc0000 [ 100.087189][ T29] audit: type=1326 audit(1776919524.112:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6272 comm="syz.3.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f081bf9c819 code=0x7ffc0000 [ 100.181114][ T29] audit: type=1326 audit(1776919524.112:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6272 comm="syz.3.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f081bf9c819 code=0x7ffc0000 [ 100.831122][ T807] usb 5-1: USB disconnect, device number 6 [ 100.902818][ T6113] udevd[6113]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 100.943754][ T5904] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 101.130676][ T1225] usb 3-1: 0:2 : does not exist [ 101.155305][ T1225] usb 3-1: unit 48 not found! [ 101.156409][ T5904] usb 2-1: Using ep0 maxpacket: 16 [ 101.194806][ T5904] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 101.244105][ T5904] usb 2-1: config 0 has no interfaces? [ 101.262473][ T5904] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 101.299228][ T1225] usb 3-1: USB disconnect, device number 7 [ 101.306444][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.342592][ T5904] usb 2-1: config 0 descriptor?? [ 101.421410][ T6113] udevd[6113]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 101.486187][ T6307] kvm: pic: non byte write [ 101.996548][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 102.162558][ T10] usb 4-1: config 0 has no interfaces? [ 102.174795][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 102.190386][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.233769][ T10] usb 4-1: config 0 descriptor?? [ 102.273270][ T6326] random: crng reseeded on system resumption [ 102.306048][ T6327] netlink: 'syz.2.126': attribute type 1 has an invalid length. [ 102.563083][ T5991] usb 4-1: USB disconnect, device number 3 [ 102.810946][ T6326] Unrecognized hibernate image header format! [ 102.827419][ T6326] PM: hibernation: Image mismatch: architecture specific data [ 102.852824][ T6326] Unrecognized hibernate image header format! [ 102.868337][ T6339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.877743][ T6326] PM: hibernation: Image mismatch: architecture specific data [ 102.887510][ T6326] Unrecognized hibernate image header format! [ 102.888226][ T6343] netlink: 12 bytes leftover after parsing attributes in process `syz.2.132'. [ 102.908332][ T6339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.917376][ T6326] PM: hibernation: Image mismatch: architecture specific data [ 103.362328][ T6356] syzkaller1: entered promiscuous mode [ 103.368248][ T6356] syzkaller1: entered allmulticast mode [ 103.380123][ T6357] netlink: 25 bytes leftover after parsing attributes in process `syz.3.136'. [ 103.439099][ T6360] netlink: 104 bytes leftover after parsing attributes in process `syz.0.135'. [ 103.706501][ T5991] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 103.838197][ T5991] usb 1-1: device descriptor read/64, error -71 [ 103.866090][ T29] audit: type=1326 audit(1776919528.032:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6362 comm="syz.2.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aaed9c819 code=0x7ffc0000 [ 103.891868][ T29] audit: type=1326 audit(1776919528.032:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6362 comm="syz.2.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aaed9c819 code=0x7ffc0000 [ 103.918642][ T29] audit: type=1326 audit(1776919528.042:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6362 comm="syz.2.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f1aaed9c819 code=0x7ffc0000 [ 103.943294][ T29] audit: type=1326 audit(1776919528.042:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6362 comm="syz.2.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aaed9c819 code=0x7ffc0000 [ 103.995714][ T5904] usb 2-1: USB disconnect, device number 8 [ 104.005575][ T29] audit: type=1326 audit(1776919528.042:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6362 comm="syz.2.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1aaed9c819 code=0x7ffc0000 [ 104.032054][ T29] audit: type=1326 audit(1776919528.042:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6362 comm="syz.2.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1aaed9c819 code=0x7ffc0000 [ 104.106691][ T5991] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 104.126416][ T5840] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 104.203373][ T6365] F2FS-fs: Conflicting test_dummy_encryption options [ 104.238797][ T5991] usb 1-1: device descriptor read/64, error -71 [ 104.297164][ T5840] usb 3-1: Using ep0 maxpacket: 8 [ 104.297875][ T6367] fuse: blksize only supported for fuseblk [ 104.337829][ T5840] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 104.361996][ T5991] usb usb1-port1: attempt power cycle [ 104.363358][ T6367] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.139'. [ 104.368832][ T5840] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 104.392788][ T5840] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 104.404065][ T5840] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 104.418044][ T5840] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 104.435242][ T5840] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.685170][ T5840] usb 3-1: usb_control_msg returned -32 [ 104.699456][ T5840] usbtmc 3-1:16.0: can't read capabilities [ 104.726425][ T5991] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 104.772138][ T5991] usb 1-1: device descriptor read/8, error -71 [ 104.920081][ T6380] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 105.047016][ T5991] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 105.087036][ T5991] usb 1-1: device descriptor read/8, error -71 [ 105.186925][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 105.198347][ T5991] usb usb1-port1: unable to enumerate USB device [ 105.276473][ T5904] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 105.326437][ T10] usb 5-1: device descriptor read/64, error -71 [ 105.386476][ T5840] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 105.452761][ T5904] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 105.468751][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.477945][ T5904] usb 2-1: Product: syz [ 105.482560][ T5904] usb 2-1: Manufacturer: syz [ 105.489185][ T5904] usb 2-1: SerialNumber: syz [ 105.496559][ T5904] usb 2-1: config 0 descriptor?? [ 105.537556][ T5840] usb 4-1: Using ep0 maxpacket: 16 [ 105.544580][ T5840] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.556069][ T5840] usb 4-1: config 0 has no interfaces? [ 105.561724][ T5840] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 105.571464][ T5840] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.582271][ T5840] usb 4-1: config 0 descriptor?? [ 105.599309][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 105.706540][ T5904] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 105.737075][ T10] usb 5-1: device descriptor read/64, error -71 [ 105.849235][ T10] usb usb5-port1: attempt power cycle [ 106.187016][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 106.218141][ T10] usb 5-1: device descriptor read/8, error -71 [ 106.458063][ T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 106.487353][ T10] usb 5-1: device descriptor read/8, error -71 [ 106.505472][ T6399] random: crng reseeded on system resumption [ 106.597925][ T10] usb usb5-port1: unable to enumerate USB device [ 106.639867][ T6401] syzkaller1: entered promiscuous mode [ 106.656562][ T6401] syzkaller1: entered allmulticast mode [ 106.762068][ T6402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.771542][ T6402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.875983][ T5991] usb 3-1: USB disconnect, device number 8 [ 106.953557][ T6405] process 'syz.2.151' launched '/dev/fd/8' with NULL argv: empty string added [ 107.340011][ T5904] usb 2-1: dvb_usb_v2: will use the device's hardware PID filter (table count: 32) [ 107.352013][ T5904] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 107.361347][ T5904] usb 2-1: media controller created [ 107.373686][ T5904] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 107.400146][ T5904] dvb_usb_rtl28xxu 2-1:0.0: unknown tuner TDA18272 [ 107.571223][ T6399] Unrecognized hibernate image header format! [ 107.579283][ T6399] PM: hibernation: Image mismatch: architecture specific data [ 107.592939][ T5904] usb 2-1: USB disconnect, device number 9 [ 107.601035][ T6399] Unrecognized hibernate image header format! [ 107.613213][ T6399] PM: hibernation: Image mismatch: architecture specific data [ 107.627914][ T6399] Unrecognized hibernate image header format! [ 107.634701][ T6399] PM: hibernation: Image mismatch: architecture specific data [ 107.661176][ T6414] netlink: 'syz.0.155': attribute type 10 has an invalid length. [ 107.669981][ T6414] netlink: 4 bytes leftover after parsing attributes in process `syz.0.155'. [ 108.006466][ T5840] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 108.036714][ T5991] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 108.167435][ T5840] usb 3-1: Using ep0 maxpacket: 8 [ 108.174710][ T6427] FAULT_INJECTION: forcing a failure. [ 108.174710][ T6427] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 108.175401][ T5840] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 108.191167][ T6427] CPU: 0 UID: 0 PID: 6427 Comm: syz.1.160 Tainted: G L syzkaller #0 PREEMPT(full) [ 108.191195][ T6427] Tainted: [L]=SOFTLOCKUP [ 108.191201][ T6427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 108.191210][ T6427] Call Trace: [ 108.191217][ T6427] [ 108.191225][ T6427] dump_stack_lvl+0xe8/0x150 [ 108.191255][ T6427] should_fail_ex+0x412/0x560 [ 108.191285][ T6427] _copy_from_user+0x2d/0xb0 [ 108.191305][ T6427] kstrtouint_from_user+0xd6/0x180 [ 108.191332][ T6427] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 108.191371][ T6427] proc_fail_nth_write+0x8e/0x210 [ 108.191390][ T6427] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 108.191413][ T6427] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 108.191440][ T6427] vfs_write+0x29a/0xb90 [ 108.191469][ T6427] ? __pfx_vfs_write+0x10/0x10 [ 108.191490][ T6427] ? __fget_files+0x2a/0x420 [ 108.191510][ T6427] ? __fget_files+0x3a0/0x420 [ 108.191525][ T6427] ? __fget_files+0x2a/0x420 [ 108.191549][ T6427] ksys_write+0x150/0x270 [ 108.191572][ T6427] ? __pfx_ksys_write+0x10/0x10 [ 108.191598][ T6427] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.191616][ T6427] do_syscall_64+0x15f/0xf80 [ 108.191637][ T6427] ? trace_irq_disable+0x3b/0x140 [ 108.191659][ T6427] ? clear_bhb_loop+0x40/0x90 [ 108.191679][ T6427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.191695][ T6427] RIP: 0033:0x7f0a5835d04e [ 108.191711][ T6427] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 108.191724][ T6427] RSP: 002b:00007f0a59275fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 108.191741][ T6427] RAX: ffffffffffffffda RBX: 00007f0a592766c0 RCX: 00007f0a5835d04e [ 108.191756][ T6427] RDX: 0000000000000001 RSI: 00007f0a592760a0 RDI: 0000000000000006 [ 108.191766][ T6427] RBP: 00007f0a59276090 R08: 0000000000000000 R09: 0000000000000000 [ 108.191776][ T6427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.191785][ T6427] R13: 00007f0a58616038 R14: 00007f0a58615fa0 R15: 00007f0a5873fa48 [ 108.191822][ T6427] [ 108.280812][ T6430] netlink: 64 bytes leftover after parsing attributes in process `syz.4.158'. [ 108.284411][ T5840] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 108.456894][ T5991] usb 1-1: Using ep0 maxpacket: 32 [ 108.465457][ T5840] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 17184, setting to 1024 [ 108.482385][ T5840] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 108.494803][ T5991] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 108.504552][ T5991] usb 1-1: config 0 has no interface number 0 [ 108.512997][ T5840] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 108.527079][ T5840] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 108.537921][ T5840] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.550832][ T5991] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 108.560928][ T5991] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.570001][ T5991] usb 1-1: Product: syz [ 108.575398][ T6432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.161'. [ 108.585588][ T5991] usb 1-1: Manufacturer: syz [ 108.591554][ T5991] usb 1-1: SerialNumber: syz [ 108.600105][ T6432] netlink: 12 bytes leftover after parsing attributes in process `syz.1.161'. [ 108.612949][ T5991] usb 1-1: config 0 descriptor?? [ 108.622782][ T5991] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 108.632142][ T5991] usb 1-1: selecting invalid altsetting 1 [ 108.637984][ T5991] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 108.651159][ T5991] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 108.664522][ T5991] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 108.674713][ T5991] usb 1-1: media controller created [ 108.729863][ T1225] usb 4-1: USB disconnect, device number 4 [ 108.772406][ T5991] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 108.806456][ T5840] usb 3-1: GET_CAPABILITIES returned 0 [ 108.817477][ T5840] usbtmc 3-1:16.0: can't read capabilities [ 108.860558][ T5991] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 108.882733][ T5991] zl10353_read_register: readreg error (reg=127, ret==-71) [ 108.895731][ T5991] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 108.990474][ T5991] usb 1-1: USB disconnect, device number 10 [ 109.040875][ T1225] usb 3-1: USB disconnect, device number 9 [ 109.208714][ T5904] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 109.281329][ T6451] syzkaller0: entered promiscuous mode [ 109.289163][ T6451] syzkaller0: entered allmulticast mode [ 109.358882][ T5904] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 109.371505][ T5904] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 109.383695][ T5904] usb 2-1: config 220 interface 0 has no altsetting 0 [ 109.416600][ T5904] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 109.437667][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.454412][ T5904] usb 2-1: Product: syz [ 109.463264][ T5904] usb 2-1: Manufacturer: syz [ 109.474948][ T5904] usb 2-1: SerialNumber: syz [ 109.744943][ T5904] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 109.755701][ T6469] xt_CT: You must specify a L4 protocol and not use inversions on it [ 109.764507][ T5904] uvcvideo 2-1:220.0: No valid video chain found. [ 109.770036][ T5904] usb 2-1: USB disconnect, device number 10 [ 110.067774][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 110.067787][ T29] audit: type=1326 audit(1776919534.242:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6478 comm="syz.0.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ce819c819 code=0x7ffc0000 [ 110.128912][ T29] audit: type=1326 audit(1776919534.272:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6478 comm="syz.0.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ce819c819 code=0x7ffc0000 [ 110.179501][ T5991] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 110.193935][ T29] audit: type=1326 audit(1776919534.302:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6478 comm="syz.0.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f4ce819c819 code=0x7ffc0000 [ 110.220144][ T29] audit: type=1326 audit(1776919534.302:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6478 comm="syz.0.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ce819c819 code=0x7ffc0000 [ 110.248230][ T29] audit: type=1326 audit(1776919534.302:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6478 comm="syz.0.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f4ce819c819 code=0x7ffc0000 [ 110.278256][ T29] audit: type=1326 audit(1776919534.302:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6478 comm="syz.0.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ce819c819 code=0x7ffc0000 [ 110.310997][ T29] audit: type=1326 audit(1776919534.302:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6478 comm="syz.0.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f4ce819c819 code=0x7ffc0000 [ 110.381059][ T29] audit: type=1326 audit(1776919534.302:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6478 comm="syz.0.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ce819c819 code=0x7ffc0000 [ 110.407602][ T29] audit: type=1326 audit(1776919534.322:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6478 comm="syz.0.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4ce819c819 code=0x7ffc0000 [ 110.441813][ T5991] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.455084][ T5991] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 110.491989][ T5991] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 110.515554][ T29] audit: type=1326 audit(1776919534.322:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6478 comm="syz.0.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ce819c819 code=0x7ffc0000 [ 110.529778][ T5991] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 110.572985][ T5991] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.600825][ T5991] usb 4-1: Product: syz [ 110.605539][ T5991] usb 4-1: Manufacturer: syz [ 110.612858][ T5991] usb 4-1: SerialNumber: syz [ 110.617846][ T1225] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 110.627163][ T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 110.683055][ T5991] cdc_ncm 4-1:1.0: skipping garbage [ 110.689585][ T5991] cdc_ncm 4-1:1.0: skipping garbage [ 110.695459][ T5991] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 110.715184][ T5991] cdc_ncm 4-1:1.0: bind() failure [ 110.780246][ T1225] usb 1-1: device descriptor read/64, error -71 [ 110.790274][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 110.808803][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 110.839819][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 110.852141][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.892460][ T5917] usb 4-1: USB disconnect, device number 5 [ 110.919118][ T10] usb 2-1: Product: syz [ 110.935573][ T10] usb 2-1: Manufacturer: syz [ 110.964201][ T10] usb 2-1: SerialNumber: syz [ 110.983415][ T6496] xt_CT: You must specify a L4 protocol and not use inversions on it [ 111.004321][ T10] usb 2-1: config 0 descriptor?? [ 111.021743][ T10] usb 2-1: 0:0 : invalid sync pipe. is_playback 1, ep 0a, bSynchAddress 07 [ 111.038012][ T1225] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 111.063920][ T6498] fuse: blksize only supported for fuseblk [ 111.079491][ T6498] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.181'. [ 111.196460][ T1225] usb 1-1: device descriptor read/64, error -71 [ 111.307570][ T1225] usb usb1-port1: attempt power cycle [ 111.390464][ T10] usb 2-1: USB disconnect, device number 11 [ 111.621904][ T6510] netlink: 'syz.4.185': attribute type 13 has an invalid length. [ 111.643704][ T6510] netlink: 'syz.4.185': attribute type 17 has an invalid length. [ 111.674665][ T1225] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 111.687193][ T6512] netlink: 4 bytes leftover after parsing attributes in process `syz.3.186'. [ 111.731746][ T1225] usb 1-1: device descriptor read/8, error -71 [ 111.804873][ T6510] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 111.986441][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 111.999085][ T1225] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 112.037322][ T1225] usb 1-1: device descriptor read/8, error -71 [ 112.110043][ T6521] fuse: blksize only supported for fuseblk [ 112.121278][ T6521] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.190'. [ 112.146443][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 112.158312][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 112.168319][ T1225] usb usb1-port1: unable to enumerate USB device [ 112.169808][ T10] usb 4-1: config 117 has an invalid interface number: 163 but max is 0 [ 112.194646][ T10] usb 4-1: config 117 has no interface number 0 [ 112.203305][ T10] usb 4-1: config 117 interface 163 has no altsetting 0 [ 112.216478][ T5917] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 112.233116][ T10] usb 4-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=5d.24 [ 112.252712][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.264969][ T10] usb 4-1: Product: syz [ 112.270533][ T10] usb 4-1: Manufacturer: syz [ 112.305387][ T10] usb 4-1: SerialNumber: syz [ 112.399488][ T5917] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.420436][ T5917] usb 5-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 112.431837][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.444534][ T5917] usb 5-1: Product: syz [ 112.450846][ T5917] usb 5-1: Manufacturer: syz [ 112.459157][ T5917] usb 5-1: SerialNumber: syz [ 112.474264][ T5917] usb 5-1: config 0 descriptor?? [ 112.492627][ T5917] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 112.739713][ T6531] FAULT_INJECTION: forcing a failure. [ 112.739713][ T6531] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 112.756039][ T6531] CPU: 1 UID: 0 PID: 6531 Comm: syz.1.194 Tainted: G L syzkaller #0 PREEMPT(full) [ 112.756057][ T6531] Tainted: [L]=SOFTLOCKUP [ 112.756060][ T6531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 112.756066][ T6531] Call Trace: [ 112.756070][ T6531] [ 112.756075][ T6531] dump_stack_lvl+0xe8/0x150 [ 112.756104][ T6531] should_fail_ex+0x412/0x560 [ 112.756135][ T6531] _copy_from_iter+0x1d3/0x1670 [ 112.756160][ T6531] ? rcu_is_watching+0x15/0xb0 [ 112.756178][ T6531] ? trace_kmem_cache_alloc+0x29/0xe0 [ 112.756190][ T6531] ? __build_skb+0x62/0x440 [ 112.756206][ T6531] ? __build_skb+0x62/0x440 [ 112.756220][ T6531] ? __pfx__copy_from_iter+0x10/0x10 [ 112.756230][ T6531] ? __build_skb+0x2a2/0x440 [ 112.756253][ T6531] ? netlink_sendmsg+0x650/0xb40 [ 112.756269][ T6531] ? skb_put+0x11b/0x210 [ 112.756289][ T6531] netlink_sendmsg+0x6c0/0xb40 [ 112.756315][ T6531] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.756332][ T6531] ? __fget_files+0x2a/0x420 [ 112.756347][ T6531] ? aa_sock_msg_perm+0xf1/0x1b0 [ 112.756365][ T6531] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 112.756383][ T6531] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.756399][ T6531] __sys_sendto+0x672/0x710 [ 112.756417][ T6531] ? __pfx___sys_sendto+0x10/0x10 [ 112.756429][ T6531] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 112.756460][ T6531] ? __fget_files+0x3a0/0x420 [ 112.756483][ T6531] ? ksys_write+0x242/0x270 [ 112.756505][ T6531] ? __pfx_ksys_write+0x10/0x10 [ 112.756529][ T6531] __x64_sys_sendto+0xde/0x100 [ 112.756546][ T6531] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.756564][ T6531] do_syscall_64+0x15f/0xf80 [ 112.756584][ T6531] ? trace_irq_disable+0x3b/0x140 [ 112.756606][ T6531] ? clear_bhb_loop+0x40/0x90 [ 112.756624][ T6531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.756639][ T6531] RIP: 0033:0x7f0a5839c819 [ 112.756654][ T6531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.756666][ T6531] RSP: 002b:00007f0a59276028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 112.756683][ T6531] RAX: ffffffffffffffda RBX: 00007f0a58615fa0 RCX: 00007f0a5839c819 [ 112.756694][ T6531] RDX: 0000000000010a73 RSI: 0000200000000000 RDI: 0000000000000003 [ 112.756704][ T6531] RBP: 00007f0a59276090 R08: 0000000000000000 R09: 4b6ae4f95a5de35b [ 112.756714][ T6531] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 112.756724][ T6531] R13: 00007f0a58616038 R14: 00007f0a58615fa0 R15: 00007f0a5873fa48 [ 112.756751][ T6531] [ 113.188980][ T6537] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 113.310232][ T6541] usb usb8: usbfs: process 6541 (syz.0.197) did not claim interface 0 before use [ 113.463418][ T6545] netlink: 64 bytes leftover after parsing attributes in process `syz.1.198'. [ 113.485167][ T10] f81534a_ctrl 4-1:117.163: probe with driver f81534a_ctrl failed with error -121 [ 113.527543][ T5917] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 113.535449][ T5917] gspca_pac7302 5-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 113.536227][ T6545] syzkaller1: entered promiscuous mode [ 113.552924][ T6545] syzkaller1: entered allmulticast mode [ 113.636435][ T807] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 113.797560][ T807] usb 1-1: Using ep0 maxpacket: 16 [ 113.811187][ T807] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 113.842142][ T807] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.856714][ T10] usb 4-1: USB disconnect, device number 6 [ 113.876457][ T807] usb 1-1: Product: syz [ 113.881598][ T6552] netlink: 20 bytes leftover after parsing attributes in process `syz.2.199'. [ 113.904067][ T807] usb 1-1: Manufacturer: syz [ 113.921633][ T807] usb 1-1: SerialNumber: syz [ 113.951128][ T807] r8152-cfgselector 1-1: Unknown version 0x0000 [ 113.973410][ T807] r8152-cfgselector 1-1: config 0 descriptor?? [ 114.114886][ T6559] fuse: blksize only supported for fuseblk [ 114.147186][ T6559] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.201'. [ 114.413431][ T807] r8152-cfgselector 1-1: USB disconnect, device number 15 [ 114.542074][ T6572] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 114.684308][ T6580] netlink: 27 bytes leftover after parsing attributes in process `syz.1.209'. [ 114.758526][ T6582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.800184][ T6582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.156570][ T5991] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 115.326451][ T6593] netlink: 'syz.3.213': attribute type 29 has an invalid length. [ 115.342851][ T5991] usb 2-1: Using ep0 maxpacket: 16 [ 115.357676][ T5991] usb 2-1: too many configurations: 17, using maximum allowed: 8 [ 115.399364][ T6596] fuse: blksize only supported for fuseblk [ 115.450734][ T6596] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.214'. [ 115.552635][ T5991] usb 2-1: string descriptor 0 read error: -71 [ 115.568070][ T5991] usb 2-1: New USB device found, idVendor=04e8, idProduct=a101, bcdDevice= 4.48 [ 115.605994][ T5991] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.646999][ T5991] r8152-cfgselector 2-1: Unknown version 0x0000 [ 115.670899][ T5991] r8152-cfgselector 2-1: rejected 8 configurations due to insufficient available bus power [ 115.706233][ T5991] r8152-cfgselector 2-1: no configuration chosen from 8 choices [ 115.757188][ T5991] r8152-cfgselector 2-1: USB disconnect, device number 12 [ 115.798608][ T6603] FAULT_INJECTION: forcing a failure. [ 115.798608][ T6603] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 115.835400][ T6604] team_slave_0: entered promiscuous mode [ 115.842918][ T6604] team_slave_1: entered promiscuous mode [ 115.856459][ T6603] CPU: 0 UID: 0 PID: 6603 Comm: syz.2.217 Tainted: G L syzkaller #0 PREEMPT(full) [ 115.856487][ T6603] Tainted: [L]=SOFTLOCKUP [ 115.856492][ T6603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 115.856512][ T6603] Call Trace: [ 115.856518][ T6603] [ 115.856525][ T6603] dump_stack_lvl+0xe8/0x150 [ 115.856558][ T6603] should_fail_ex+0x412/0x560 [ 115.856587][ T6603] _copy_to_user+0x31/0xb0 [ 115.856607][ T6603] simple_read_from_buffer+0xe1/0x170 [ 115.856629][ T6603] proc_fail_nth_read+0x1bb/0x230 [ 115.856650][ T6603] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 115.856670][ T6603] ? rw_verify_area+0x2a6/0x4d0 [ 115.856690][ T6603] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 115.856708][ T6603] vfs_read+0x20c/0xa70 [ 115.856731][ T6603] ? __pfx___mutex_lock+0x10/0x10 [ 115.856754][ T6603] ? __pfx_vfs_read+0x10/0x10 [ 115.856775][ T6603] ? __fget_files+0x2a/0x420 [ 115.856804][ T6603] ? __fget_files+0x3a0/0x420 [ 115.856820][ T6603] ? __fget_files+0x2a/0x420 [ 115.856845][ T6603] ksys_read+0x150/0x270 [ 115.856868][ T6603] ? __pfx_ksys_read+0x10/0x10 [ 115.856901][ T6603] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.856920][ T6603] do_syscall_64+0x15f/0xf80 [ 115.856947][ T6603] ? trace_irq_disable+0x3b/0x140 [ 115.856969][ T6603] ? clear_bhb_loop+0x40/0x90 [ 115.856989][ T6603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.857005][ T6603] RIP: 0033:0x7f1aaed5d04e [ 115.857028][ T6603] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 115.857042][ T6603] RSP: 002b:00007f1aafcf1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 115.857060][ T6603] RAX: ffffffffffffffda RBX: 00007f1aafcf26c0 RCX: 00007f1aaed5d04e [ 115.857072][ T6603] RDX: 000000000000000f RSI: 00007f1aafcf20a0 RDI: 0000000000000005 [ 115.857082][ T6603] RBP: 00007f1aafcf2090 R08: 0000000000000000 R09: 0000000000000000 [ 115.857092][ T6603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.857102][ T6603] R13: 00007f1aaf016038 R14: 00007f1aaf015fa0 R15: 00007f1aaf13fa48 [ 115.857130][ T6603] [ 115.927961][ T6604] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 116.124201][ T6604] team0: Device macvlan2 is already an upper device of the team interface [ 116.146858][ T6604] team_slave_0: left promiscuous mode [ 116.153132][ T6604] team_slave_1: left promiscuous mode [ 116.389038][ T807] hid (null): unknown global tag 0xe [ 116.433046][ T807] hid (null): unknown global tag 0xc [ 116.462490][ T807] hid (null): invalid report_count 58217 [ 116.509464][ T807] hid-generic 0010:0007:0002.0003: unknown global tag 0xe [ 116.545075][ T807] hid-generic 0010:0007:0002.0003: item 0 2 1 14 parsing failed [ 116.575397][ T807] hid-generic 0010:0007:0002.0003: probe with driver hid-generic failed with error -22 [ 116.786488][ T5991] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 116.966424][ T5991] usb 1-1: Using ep0 maxpacket: 16 [ 117.000665][ T5991] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.044401][ T5991] usb 1-1: config 0 has no interfaces? [ 117.062678][ T5991] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 117.091327][ T5991] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.145745][ T5991] usb 1-1: config 0 descriptor?? [ 117.216587][ T807] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 117.234306][ T6627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.226'. [ 117.396430][ T807] usb 3-1: Using ep0 maxpacket: 8 [ 117.406894][ T6627] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.416584][ T6627] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.446932][ T807] usb 3-1: unable to get BOS descriptor or descriptor too short [ 117.465243][ T807] usb 3-1: too many configurations: 214, using maximum allowed: 8 [ 117.482102][ T5917] usb 5-1: USB disconnect, device number 11 [ 117.495857][ T807] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 117.514465][ T807] usb 3-1: can't read configurations, error -61 [ 117.643945][ T6627] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.658782][ T807] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 117.679342][ T6627] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.816472][ T807] usb 3-1: Using ep0 maxpacket: 8 [ 117.824894][ T807] usb 3-1: unable to get BOS descriptor or descriptor too short [ 117.839644][ T807] usb 3-1: too many configurations: 214, using maximum allowed: 8 [ 117.860002][ T807] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 117.868864][ T807] usb 3-1: can't read configurations, error -61 [ 117.877470][ T807] usb usb3-port1: attempt power cycle [ 118.048324][ T6632] netlink: 12 bytes leftover after parsing attributes in process `syz.1.228'. [ 118.078124][ T6635] random: crng reseeded on system resumption [ 118.085506][ T6632] netlink: 48 bytes leftover after parsing attributes in process `syz.1.228'. [ 118.109390][ T1011] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.123629][ T1011] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.225389][ T1011] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.226676][ T807] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 118.247407][ T6637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.271242][ T1011] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.296617][ T6637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.337491][ T807] usb 3-1: Using ep0 maxpacket: 8 [ 118.366108][ T807] usb 3-1: unable to get BOS descriptor or descriptor too short [ 118.379651][ T807] usb 3-1: too many configurations: 214, using maximum allowed: 8 [ 118.396398][ T5991] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 118.396804][ T807] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 118.432303][ T807] usb 3-1: can't read configurations, error -61 [ 118.587805][ T807] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 118.588744][ T5991] usb 5-1: unable to get BOS descriptor or descriptor too short [ 118.622792][ T5991] usb 5-1: config 255 has an invalid interface number: 100 but max is 1 [ 118.636054][ T5991] usb 5-1: config 255 has an invalid interface number: 100 but max is 1 [ 118.649503][ T807] usb 3-1: Using ep0 maxpacket: 8 [ 118.651822][ T5991] usb 5-1: config 255 has 1 interface, different from the descriptor's value: 2 [ 118.678152][ T807] usb 3-1: unable to get BOS descriptor or descriptor too short [ 118.689268][ T807] usb 3-1: too many configurations: 214, using maximum allowed: 8 [ 118.704296][ T5991] usb 5-1: config 255 has no interface number 0 [ 118.704701][ T807] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 118.723015][ T807] usb 3-1: can't read configurations, error -61 [ 118.730037][ T5991] usb 5-1: config 255 interface 100 has no altsetting 0 [ 118.730296][ T807] usb usb3-port1: unable to enumerate USB device [ 118.751731][ T5991] usb 5-1: config 255 interface 100 has no altsetting 1 [ 118.770234][ T5991] usb 5-1: string descriptor 0 read error: -22 [ 118.779114][ T5991] usb 5-1: New USB device found, idVendor=eb1a, idProduct=e357, bcdDevice=7b.81 [ 118.788911][ T5991] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.026076][ T5991] usb 5-1: USB disconnect, device number 12 [ 119.065457][ T6643] fuse: Bad value for 'fd' [ 119.506194][ T6652] netlink: 'syz.3.234': attribute type 62 has an invalid length. [ 119.586433][ T1225] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 119.722254][ T5991] usb 1-1: USB disconnect, device number 16 [ 119.736790][ T1225] usb 2-1: device descriptor read/64, error -71 [ 119.742475][ T6662] team0: Device wireguard0 is of different type [ 119.956875][ T807] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 119.979238][ T1225] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 120.075986][ T10] IPVS: starting estimator thread 0... [ 120.117291][ T807] usb 4-1: Using ep0 maxpacket: 16 [ 120.135962][ T807] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.137239][ T1225] usb 2-1: device descriptor read/64, error -71 [ 120.173610][ T807] usb 4-1: config 0 interface 0 has no altsetting 0 [ 120.187961][ T6678] IPVS: using max 35 ests per chain, 84000 per kthread [ 120.199880][ T807] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 120.240332][ T807] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.268903][ T807] usb 4-1: config 0 descriptor?? [ 120.306691][ T1225] usb usb2-port1: attempt power cycle [ 120.456424][ T5991] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 120.626395][ T5991] usb 5-1: Using ep0 maxpacket: 16 [ 120.636394][ T5991] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 120.646134][ T5991] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.655752][ T5991] usb 5-1: Product: syz [ 120.660516][ T5991] usb 5-1: Manufacturer: syz [ 120.665681][ T5991] usb 5-1: SerialNumber: syz [ 120.670825][ T1225] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 120.706740][ T5917] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 120.707225][ T1225] usb 2-1: device descriptor read/8, error -71 [ 120.794841][ T807] mcp2221 0003:04D8:00DD.0004: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 120.856740][ T5917] usb 1-1: Using ep0 maxpacket: 16 [ 120.867455][ T5917] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.884517][ T5917] usb 1-1: config 0 has no interfaces? [ 120.906417][ T5917] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 120.906445][ T5991] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 120.917526][ T5917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.938288][ T5991] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 120.951996][ T5991] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 120.962057][ T5991] usb 5-1: media controller created [ 120.973270][ T5917] usb 1-1: config 0 descriptor?? [ 120.987151][ T1225] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 121.012362][ T5991] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 121.023046][ T1225] usb 2-1: device descriptor read/8, error -71 [ 121.107178][ T6684] FAULT_INJECTION: forcing a failure. [ 121.107178][ T6684] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.121108][ T6684] CPU: 1 UID: 0 PID: 6684 Comm: syz.4.245 Tainted: G L syzkaller #0 PREEMPT(full) [ 121.121135][ T6684] Tainted: [L]=SOFTLOCKUP [ 121.121141][ T6684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 121.121150][ T6684] Call Trace: [ 121.121157][ T6684] [ 121.121164][ T6684] dump_stack_lvl+0xe8/0x150 [ 121.121196][ T6684] should_fail_ex+0x412/0x560 [ 121.121226][ T6684] _copy_from_user+0x2d/0xb0 [ 121.121246][ T6684] kstrtouint_from_user+0xd6/0x180 [ 121.121274][ T6684] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 121.121322][ T6684] proc_fail_nth_write+0x8e/0x210 [ 121.121341][ T6684] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 121.121365][ T6684] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 121.121385][ T6684] vfs_write+0x29a/0xb90 [ 121.121415][ T6684] ? __pfx_vfs_write+0x10/0x10 [ 121.121436][ T6684] ? __fget_files+0x2a/0x420 [ 121.121465][ T6684] ? __fget_files+0x3a0/0x420 [ 121.121482][ T6684] ? __fget_files+0x2a/0x420 [ 121.121660][ T6684] ksys_write+0x150/0x270 [ 121.121685][ T6684] ? __pfx_ksys_write+0x10/0x10 [ 121.121712][ T6684] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.121730][ T6684] do_syscall_64+0x15f/0xf80 [ 121.121752][ T6684] ? trace_irq_disable+0x3b/0x140 [ 121.121770][ T6684] ? clear_bhb_loop+0x40/0x90 [ 121.121794][ T6684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.121808][ T6684] RIP: 0033:0x7f67d975d04e [ 121.121823][ T6684] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 121.121836][ T6684] RSP: 002b:00007f67da667fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 121.121853][ T6684] RAX: ffffffffffffffda RBX: 00007f67da6686c0 RCX: 00007f67d975d04e [ 121.121865][ T6684] RDX: 0000000000000001 RSI: 00007f67da6680a0 RDI: 0000000000000005 [ 121.121875][ T6684] RBP: 00007f67da668090 R08: 0000000000000000 R09: 0000000000000000 [ 121.121891][ T6684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.121900][ T6684] R13: 00007f67d9a16038 R14: 00007f67d9a15fa0 R15: 00007f67d9b3fa48 [ 121.121929][ T6684] [ 121.356379][ T1225] usb usb2-port1: unable to enumerate USB device [ 121.408954][ T5991] zl10353_read_register: readreg error (reg=127, ret==-110) [ 121.451571][ T5991] dvb_usb_gl861 5-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 121.498496][ T10] usb 5-1: USB disconnect, device number 13 [ 121.722062][ T5917] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 121.876479][ T5917] usb 3-1: device descriptor read/64, error -71 [ 122.069673][ T6708] random: crng reseeded on system resumption [ 122.116787][ T5917] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 122.283368][ T5917] usb 3-1: device descriptor read/64, error -71 [ 122.423962][ T5917] usb usb3-port1: attempt power cycle [ 122.466087][ T6708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.484192][ T6708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.796610][ T5917] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 122.837936][ T5917] usb 3-1: device descriptor read/8, error -71 [ 122.962598][ T10] usb 4-1: USB disconnect, device number 7 [ 123.097385][ T5917] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 123.127165][ T5917] usb 3-1: device descriptor read/8, error -71 [ 123.172722][ T6715] netlink: 12 bytes leftover after parsing attributes in process `syz.3.256'. [ 123.243385][ T5917] usb usb3-port1: unable to enumerate USB device [ 123.612958][ T1225] usb 1-1: USB disconnect, device number 17 [ 124.286492][ T5917] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 124.449135][ T5917] usb 1-1: Using ep0 maxpacket: 8 [ 124.461914][ T5917] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.474733][ T5917] usb 1-1: config 1 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 124.501718][ T5917] usb 1-1: config 1 interface 0 has no altsetting 0 [ 124.527978][ T5917] usb 1-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice= 0.40 [ 124.546642][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.570822][ T5917] usb 1-1: Product: syz [ 124.575160][ T5917] usb 1-1: Manufacturer: syz [ 124.591721][ T5917] usb 1-1: SerialNumber: syz [ 124.864597][ T5917] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input8 [ 124.968068][ T5197] bcm5974 1-1:1.0: could not read from device [ 124.999717][ T5197] bcm5974 1-1:1.0: could not read from device [ 125.032438][ T5197] bcm5974 1-1:1.0: could not read from device [ 125.065302][ T5917] usb 1-1: USB disconnect, device number 18 [ 125.077515][ T5197] bcm5974 1-1:1.0: could not read from device [ 125.215189][ T5837] udevd[5837]: Error opening device "/dev/input/event4": No such file or directory [ 125.235201][ T5837] udevd[5837]: Unable to EVIOCGABS device "/dev/input/event4" [ 125.244116][ T5837] udevd[5837]: Unable to EVIOCGABS device "/dev/input/event4" [ 125.253393][ T5837] udevd[5837]: Unable to EVIOCGABS device "/dev/input/event4" [ 125.264721][ T5837] udevd[5837]: Unable to EVIOCGABS device "/dev/input/event4" [ 125.290549][ T5944] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 125.475219][ T5944] usb 3-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 125.488657][ T5944] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.524940][ T5944] usb 3-1: config 0 descriptor?? [ 125.552887][ T5944] pwc: Creative Labs Webcam 5 detected. [ 125.768734][ T6730] sctp: [Deprecated]: syz.0.261 (pid 6730) Use of int in max_burst socket option. [ 125.768734][ T6730] Use struct sctp_assoc_value instead [ 125.803290][ T6730] sctp: [Deprecated]: syz.0.261 (pid 6730) Use of struct sctp_assoc_value in delayed_ack socket option. [ 125.803290][ T6730] Use struct sctp_sack_info instead [ 125.881692][ T5944] pwc: Failed to set LED on/off time (-71) [ 125.899527][ T5944] pwc: send_video_command error -71 [ 125.909397][ T5944] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 125.921354][ T5944] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 125.962427][ T5944] usb 3-1: USB disconnect, device number 18 [ 126.152262][ T6741] vivid-007: ================= START STATUS ================= [ 126.197667][ T6741] vivid-007: Enable Output Cropping: true [ 126.222284][ T6741] vivid-007: Enable Output Composing: true [ 126.237465][ T6742] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 126.262408][ T6741] vivid-007: Enable Output Scaler: true [ 126.272298][ T6741] vivid-007: Tx RGB Quantization Range: Automatic [ 126.283337][ T6741] vivid-007: Transmit Mode: HDMI [ 126.293600][ T6741] vivid-007: Hotplug Present: 0x00000000 [ 126.301791][ T6741] vivid-007: RxSense Present: 0x00000000 [ 126.312624][ T6741] vivid-007: EDID Present: 0x00000000 [ 126.320480][ T6741] vivid-007: ================== END STATUS ================== [ 126.436902][ T10] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 126.649231][ T10] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 126.668943][ T10] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 126.684919][ T10] usb 2-1: Product: syz [ 126.691381][ T10] usb 2-1: SerialNumber: syz [ 126.706500][ T10] usb 2-1: config 0 descriptor?? [ 126.806580][ T807] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 126.936662][ T5917] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 126.965117][ T807] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 126.989974][ T807] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.013629][ T807] usb 3-1: Product: syz [ 127.021387][ T807] usb 3-1: Manufacturer: syz [ 127.040267][ T807] usb 3-1: SerialNumber: syz [ 127.078960][ T807] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 127.106905][ T5917] usb 4-1: device descriptor read/64, error -71 [ 127.146705][ T6747] AppArmor: change_hat: Invalid input '9' [ 127.159865][ T5904] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 127.180216][ T6747] netlink: 'syz.1.267': attribute type 34 has an invalid length. [ 127.198984][ T807] usb 2-1: USB disconnect, device number 17 [ 127.366567][ T5917] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 127.546508][ T5917] usb 4-1: device descriptor read/64, error -71 [ 127.666777][ T5917] usb usb4-port1: attempt power cycle [ 128.022030][ T6772] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 128.026663][ T5917] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 128.067446][ T5917] usb 4-1: device descriptor read/8, error -71 [ 128.084433][ T6769] netlink: 72 bytes leftover after parsing attributes in process `syz.1.273'. [ 128.261071][ T5904] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 128.279719][ T5904] ath9k_htc: Failed to initialize the device [ 128.340136][ T5917] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 128.380916][ T5904] usb 3-1: ath9k_htc: USB layer deinitialized [ 128.390290][ T5917] usb 4-1: device descriptor read/8, error -71 [ 128.401688][ T6783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.436248][ T6783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.462109][ T5944] usb 3-1: USB disconnect, device number 19 [ 128.476791][ T5991] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 128.517320][ T5917] usb usb4-port1: unable to enumerate USB device [ 128.656723][ T5991] usb 5-1: Using ep0 maxpacket: 16 [ 128.670342][ T5991] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.691838][ T5991] usb 5-1: config 0 interface 0 has no altsetting 0 [ 128.708783][ T5991] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 128.731794][ T5991] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.760860][ T5991] usb 5-1: config 0 descriptor?? [ 129.197803][ T5991] usbhid 5-1:0.0: can't add hid device: -71 [ 129.206553][ T5991] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 129.227618][ T5991] usb 5-1: USB disconnect, device number 14 [ 129.712066][ T6786] ALSA: seq fatal error: cannot create timer (-22) [ 129.720510][ T5991] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 129.895485][ T5991] usb 5-1: unable to get BOS descriptor or descriptor too short [ 129.905973][ T1225] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 129.928689][ T5991] usb 5-1: not running at top speed; connect to a high speed hub [ 129.947447][ T5991] usb 5-1: config 2 has an invalid interface number: 222 but max is 0 [ 129.957757][ T5991] usb 5-1: config 2 has no interface number 0 [ 129.964684][ T5991] usb 5-1: config 2 interface 222 has no altsetting 0 [ 129.977572][ T5991] usb 5-1: New USB device found, idVendor=04e6, idProduct=0007, bcdDevice= 1.d9 [ 129.982757][ T6794] bond1: peer notification delay (315) is not a multiple of miimon (100), value rounded to 300 ms [ 129.987844][ T5991] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.987871][ T5991] usb 5-1: Product: syz [ 129.987885][ T5991] usb 5-1: Manufacturer: syz [ 129.987899][ T5991] usb 5-1: SerialNumber: syz [ 130.086514][ T1225] usb 4-1: Using ep0 maxpacket: 16 [ 130.099845][ T1225] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 130.113172][ T1225] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 130.131824][ T1225] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 130.141318][ T1225] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.150048][ T1225] usb 4-1: Product: syz [ 130.154252][ T1225] usb 4-1: Manufacturer: syz [ 130.159324][ T1225] usb 4-1: SerialNumber: syz [ 130.167527][ T1225] usb 4-1: config 0 descriptor?? [ 130.181557][ T1225] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 130.191290][ T1225] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 130.243004][ T5991] usb-storage 5-1:2.222: USB Mass Storage device detected [ 130.274978][ T5991] usb-storage 5-1:2.222: Quirks match for vid 04e6 pid 0007: 1 [ 130.288979][ T5991] usb-storage 5-1:2.222: This device (04e6,0007,01d9 S 87 P 01) has an unneeded Protocol entry in unusual_devs.h (kernel syzkaller) [ 130.288979][ T5991] Please send a copy of this message to and [ 130.357869][ T5991] usb 5-1: USB disconnect, device number 15 [ 130.798726][ T1225] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 130.806638][ T1225] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 131.231147][ T6813] fuse: blksize only supported for fuseblk [ 131.235730][ T6818] [U] [ 131.242214][ T6818] [U] PΞ4Y8 vS蒖,XCƭ}*/Kvk!PVukfOFπڋ@p3 [ 131.251669][ T6818] [U] 6q.X%!:ZZ(/=ѝ>f??FEm{H$G4>gLE⠅sF^M#`\ٻ%Lk [ 131.256506][ T6813] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.285'. [ 131.262722][ T6818] [U] ;Qd=kXIWr'`O] `=ui-f[qy 't;!'LbR<+B7~ $%w.6Oi\5<I Qb%+)ލ [ 131.264633][ T6818] [U] [ 131.291185][ T6818] [U] oB@YgY5:L'F|bBOS“,U*_c2{+ [ 131.319731][ T6818] [U] 1jխLq5~5BXcQ{Oe`J:l[]1?Ŭ [ 131.330168][ T6818] [U] [ 131.333316][ T6818] [U] ZQ/0n [ 131.337208][ T6818] [U] [ 131.340119][ T6818] [U] [ 131.347634][ T6818] [U] [ 131.350468][ T6818] [U] [ 131.353623][ T6818] [U] [ 131.414157][ T6817] [U] [ 131.419213][ T1225] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 131.607569][ T5917] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 131.768496][ T5917] usb 2-1: Using ep0 maxpacket: 32 [ 131.779510][ T5991] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 131.800743][ T5917] usb 2-1: config 0 has an invalid interface number: 48 but max is 0 [ 131.817263][ T5917] usb 2-1: config 0 has no interface number 0 [ 131.823626][ T5917] usb 2-1: config 0 interface 48 has no altsetting 0 [ 131.842957][ T5917] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 131.858570][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.881056][ T5917] usb 2-1: Product: syz [ 131.892089][ T5917] usb 2-1: Manufacturer: syz [ 131.904354][ T5917] usb 2-1: SerialNumber: syz [ 131.924650][ T5917] usb 2-1: config 0 descriptor?? [ 131.939305][ T5991] usb 5-1: unable to get BOS descriptor or descriptor too short [ 131.953852][ T5991] usb 5-1: not running at top speed; connect to a high speed hub [ 131.974394][ T5991] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.985805][ T5991] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 132.010349][ T5991] usb 5-1: string descriptor 0 read error: -22 [ 132.017954][ T5991] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 132.035976][ T5991] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.068732][ T5991] usb 5-1: 0:2 : does not exist [ 132.248645][ T1225] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 132.263828][ T5917] RobotFuzz Open Source InterFace, OSIF 2-1:0.48: version d4.15 found at bus 002 address 018 [ 132.273287][ T1225] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 132.306536][ T1225] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 132.324793][ T1225] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 132.363235][ T1225] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 132.416268][ T1225] usb 4-1: USB disconnect, device number 12 [ 132.767511][ T1225] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 132.879719][ T5991] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 132.898463][ T6854] fuse: blksize only supported for fuseblk [ 132.898633][ T5991] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 132.919194][ T6854] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.298'. [ 132.935706][ T5991] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 132.950850][ T1225] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 132.961029][ T1225] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.969903][ T1225] usb 4-1: Product: syz [ 132.974899][ T1225] usb 4-1: Manufacturer: syz [ 132.983716][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.983784][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.997960][ T1225] usb 4-1: SerialNumber: syz [ 133.011830][ T1225] usb 4-1: config 0 descriptor?? [ 133.037076][ T5991] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 133.072408][ T5991] usb 5-1: USB disconnect, device number 16 [ 133.089187][ T5917] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 133.268255][ T5917] usb 1-1: config 0 has no interfaces? [ 133.274406][ T5917] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 133.286075][ T6859] netlink: 164 bytes leftover after parsing attributes in process `syz.2.300'. [ 133.296026][ T5917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.309630][ T5917] usb 1-1: config 0 descriptor?? [ 133.540952][ T5917] usb 1-1: USB disconnect, device number 20 [ 133.906493][ T807] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 134.035813][ T1225] usb 4-1: non-Atmel transceiver xxxxe200 [ 134.078034][ T807] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 134.098910][ T807] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 134.121683][ T807] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 134.156964][ T807] usb 5-1: config 0 interface 0 has no altsetting 0 [ 134.182895][ T807] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 134.218014][ T807] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 134.251232][ T807] usb 5-1: config 0 interface 0 has no altsetting 0 [ 134.262210][ T5904] usb 2-1: USB disconnect, device number 18 [ 134.280660][ T807] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 134.303906][ T807] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 134.306858][ T6874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.339223][ T6874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.367448][ T807] usb 5-1: config 0 interface 0 has no altsetting 0 [ 134.396271][ T807] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 134.412313][ T807] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 134.429821][ T807] usb 5-1: config 0 interface 0 has no altsetting 0 [ 134.431330][ T1225] usb 4-1: Firmware version (0.0) predates our first public release. [ 134.438248][ T807] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 134.489014][ T1225] usb 4-1: Please update to version 0.2 or newer [ 134.499349][ T807] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 134.513325][ T1225] usb 4-1: atusb_probe: initialization failed, error = -19 [ 134.529143][ T1225] usb 4-1: USB disconnect, device number 13 [ 134.540020][ T807] usb 5-1: config 0 interface 0 has no altsetting 0 [ 134.553543][ T6877] FAULT_INJECTION: forcing a failure. [ 134.553543][ T6877] name failslab, interval 1, probability 0, space 0, times 0 [ 134.585592][ T807] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 134.604906][ T6877] CPU: 0 UID: 0 PID: 6877 Comm: syz.1.307 Tainted: G L syzkaller #0 PREEMPT(full) [ 134.604934][ T6877] Tainted: [L]=SOFTLOCKUP [ 134.604940][ T6877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 134.604950][ T6877] Call Trace: [ 134.604956][ T6877] [ 134.604964][ T6877] dump_stack_lvl+0xe8/0x150 [ 134.604993][ T6877] should_fail_ex+0x412/0x560 [ 134.605024][ T6877] should_failslab+0xa8/0x100 [ 134.605049][ T6877] __kvmalloc_node_noprof+0x178/0x8a0 [ 134.605072][ T6877] ? alloc_netdev_mqs+0xa6/0x11b0 [ 134.605100][ T6877] alloc_netdev_mqs+0xa6/0x11b0 [ 134.605118][ T6877] ? __pfx_macvlan_setup+0x10/0x10 [ 134.605139][ T6877] rtnl_create_link+0x31f/0xd70 [ 134.605166][ T6877] rtnl_newlink_create+0x277/0xb70 [ 134.605184][ T6877] ? __pfx___nla_validate_parse+0x10/0x10 [ 134.605213][ T6877] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 134.605234][ T6877] ? __pfx___mutex_lock+0x10/0x10 [ 134.605267][ T6877] ? ns_capable+0x89/0xe0 [ 134.605292][ T6877] rtnl_newlink+0x166a/0x1bb0 [ 134.605318][ T6877] ? __lock_acquire+0x6b5/0x2cf0 [ 134.605353][ T6877] ? __pfx_rtnl_newlink+0x10/0x10 [ 134.605379][ T6877] ? __lock_acquire+0x6b5/0x2cf0 [ 134.605404][ T6877] ? __lock_acquire+0x6b5/0x2cf0 [ 134.605436][ T6877] ? unwind_next_frame+0xa6/0x2550 [ 134.605460][ T6877] ? unwind_next_frame+0xa6/0x2550 [ 134.605480][ T6877] ? is_bpf_text_address+0x26/0x2b0 [ 134.605514][ T6877] ? is_bpf_text_address+0x26/0x2b0 [ 134.605543][ T6877] ? __lock_acquire+0x6b5/0x2cf0 [ 134.605567][ T6877] ? kernel_text_address+0xa5/0xe0 [ 134.605587][ T6877] ? __kernel_text_address+0xd/0x30 [ 134.605613][ T6877] ? unwind_get_return_address+0x4d/0x90 [ 134.605640][ T6877] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 134.605662][ T6877] ? arch_stack_walk+0xfb/0x150 [ 134.605692][ T6877] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 134.605729][ T6877] ? __pfx_rtnl_newlink+0x10/0x10 [ 134.605752][ T6877] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 134.605775][ T6877] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 134.605794][ T6877] ? netlink_sendmsg+0x5d4/0xb40 [ 134.605813][ T6877] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 134.605836][ T6877] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 134.605859][ T6877] ? __lock_acquire+0x6b5/0x2cf0 [ 134.605894][ T6877] netlink_rcv_skb+0x232/0x4b0 [ 134.605919][ T6877] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 134.605943][ T6877] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 134.605977][ T6877] ? netlink_deliver_tap+0x2e/0x1b0 [ 134.605992][ T6877] ? netlink_deliver_tap+0x2e/0x1b0 [ 134.606011][ T6877] netlink_unicast+0x75c/0x8e0 [ 134.606043][ T6877] netlink_sendmsg+0x813/0xb40 [ 134.606067][ T6877] ? __pfx_netlink_sendmsg+0x10/0x10 [ 134.606086][ T6877] ? aa_sock_msg_perm+0xf1/0x1b0 [ 134.606105][ T6877] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 134.606128][ T6877] ____sys_sendmsg+0x972/0x9f0 [ 134.606147][ T6877] ? __might_fault+0xaf/0x130 [ 134.606172][ T6877] ? __pfx_____sys_sendmsg+0x10/0x10 [ 134.606200][ T6877] ? import_iovec+0x73/0xa0 [ 134.606223][ T6877] ___sys_sendmsg+0x2a5/0x360 [ 134.606240][ T6877] ? __lock_acquire+0x6b5/0x2cf0 [ 134.606268][ T6877] ? __pfx____sys_sendmsg+0x10/0x10 [ 134.606291][ T6877] ? kstrtouint+0x6e/0xe0 [ 134.606334][ T6877] ? __fget_files+0x2a/0x420 [ 134.606350][ T6877] ? __fget_files+0x3a0/0x420 [ 134.606374][ T6877] __sys_sendmmsg+0x27c/0x4e0 [ 134.606399][ T6877] ? __pfx___sys_sendmmsg+0x10/0x10 [ 134.606415][ T6877] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 134.606460][ T6877] ? ksys_write+0x242/0x270 [ 134.606482][ T6877] ? __pfx_ksys_write+0x10/0x10 [ 134.606508][ T6877] __x64_sys_sendmmsg+0xa0/0xc0 [ 134.606527][ T6877] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.606545][ T6877] do_syscall_64+0x15f/0xf80 [ 134.606566][ T6877] ? trace_irq_disable+0x3b/0x140 [ 134.606588][ T6877] ? clear_bhb_loop+0x40/0x90 [ 134.606617][ T6877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.606633][ T6877] RIP: 0033:0x7f0a5839c819 [ 134.606650][ T6877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.606663][ T6877] RSP: 002b:00007f0a59276028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 134.606682][ T6877] RAX: ffffffffffffffda RBX: 00007f0a58615fa0 RCX: 00007f0a5839c819 [ 134.606693][ T6877] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000015 [ 134.606705][ T6877] RBP: 00007f0a59276090 R08: 0000000000000000 R09: 0000000000000000 [ 134.606715][ T6877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.606725][ T6877] R13: 00007f0a58616038 R14: 00007f0a58615fa0 R15: 00007f0a5873fa48 [ 134.606754][ T6877] [ 135.095062][ T807] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 135.106670][ T807] usb 5-1: config 0 interface 0 has no altsetting 0 [ 135.130966][ T807] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 135.140952][ T807] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 135.152635][ T807] usb 5-1: config 0 interface 0 has no altsetting 0 [ 135.162212][ T807] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 135.172030][ T807] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 135.183936][ T807] usb 5-1: config 0 interface 0 has no altsetting 0 [ 135.192188][ T807] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 135.202852][ T807] usb 5-1: New USB device strings: Mfr=3, Product=0, SerialNumber=168 [ 135.211839][ T807] usb 5-1: Manufacturer: syz [ 135.216888][ T807] usb 5-1: SerialNumber: syz [ 135.224838][ T807] usb 5-1: config 0 descriptor?? [ 135.240930][ T807] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 135.301287][ T6885] sch_tbf: peakrate 5 is lower than or equals to rate 1005582297638359173 ! [ 135.338574][ T6882] FAULT_INJECTION: forcing a failure. [ 135.338574][ T6882] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.357430][ T6882] CPU: 1 UID: 0 PID: 6882 Comm: syz.2.310 Tainted: G L syzkaller #0 PREEMPT(full) [ 135.357460][ T6882] Tainted: [L]=SOFTLOCKUP [ 135.357466][ T6882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 135.357477][ T6882] Call Trace: [ 135.357484][ T6882] [ 135.357492][ T6882] dump_stack_lvl+0xe8/0x150 [ 135.357522][ T6882] should_fail_ex+0x412/0x560 [ 135.357553][ T6882] _copy_from_user+0x2d/0xb0 [ 135.357572][ T6882] ___sys_recvmsg+0x175/0x590 [ 135.357594][ T6882] ? __pfx____sys_recvmsg+0x10/0x10 [ 135.357613][ T6882] ? __fget_files+0x2a/0x420 [ 135.357648][ T6882] do_recvmmsg+0x334/0x800 [ 135.357669][ T6882] ? __pfx_do_recvmmsg+0x10/0x10 [ 135.357696][ T6882] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 135.357734][ T6882] __x64_sys_recvmmsg+0x198/0x250 [ 135.357756][ T6882] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 135.357780][ T6882] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.357798][ T6882] do_syscall_64+0x15f/0xf80 [ 135.357827][ T6882] ? clear_bhb_loop+0x40/0x90 [ 135.357848][ T6882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.357864][ T6882] RIP: 0033:0x7f1aaed9c819 [ 135.357881][ T6882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.357895][ T6882] RSP: 002b:00007f1aafcf2028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 135.357913][ T6882] RAX: ffffffffffffffda RBX: 00007f1aaf015fa0 RCX: 00007f1aaed9c819 [ 135.357925][ T6882] RDX: 000000000000036f RSI: 0000200000000d80 RDI: 0000000000000005 [ 135.357937][ T6882] RBP: 00007f1aafcf2090 R08: 0000000000000000 R09: 0000000000000000 [ 135.357948][ T6882] R10: 0000000000020102 R11: 0000000000000246 R12: 0000000000000002 [ 135.357958][ T6882] R13: 00007f1aaf016038 R14: 00007f1aaf015fa0 R15: 00007f1aaf13fa48 [ 135.357979][ T6882] [ 135.367940][ T6884] fuse: blksize only supported for fuseblk [ 135.419684][ T6887] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.309'. [ 135.785325][ T6897] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 135.924446][ T6901] syzkaller0: entered promiscuous mode [ 135.933848][ T6901] syzkaller0: entered allmulticast mode [ 135.945748][ T6901] tipc: Started in network mode [ 135.953255][ T6901] tipc: Node identity 52fdf31e21e9, cluster identity 4711 [ 135.963075][ T6901] tipc: Enabled bearer , priority 0 [ 135.974336][ T6901] tipc: Resetting bearer [ 136.020947][ T6901] tipc: Disabling bearer [ 136.055978][ T6902] netlink: 12 bytes leftover after parsing attributes in process `syz.2.314'. [ 136.077315][ T6902] netem: incorrect ge model size [ 136.085017][ T6902] netem: change failed [ 136.672625][ T6915] vlan2: entered promiscuous mode [ 136.680926][ T6915] batadv0: entered promiscuous mode [ 136.763675][ T6922] sch_tbf: peakrate 5 is lower than or equals to rate 1005582297638359173 ! [ 137.050156][ T6934] fuse: blksize only supported for fuseblk [ 137.061278][ T6934] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.325'. [ 137.290404][ T5944] usb 5-1: USB disconnect, device number 17 [ 137.358462][ T5944] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 137.395877][ T6947] ip6gre1: entered promiscuous mode [ 137.402465][ T6947] ip6gre1: entered allmulticast mode [ 137.454176][ T6950] FAULT_INJECTION: forcing a failure. [ 137.454176][ T6950] name failslab, interval 1, probability 0, space 0, times 0 [ 137.490001][ T6950] CPU: 0 UID: 0 PID: 6950 Comm: syz.4.328 Tainted: G L syzkaller #0 PREEMPT(full) [ 137.490025][ T6950] Tainted: [L]=SOFTLOCKUP [ 137.490031][ T6950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 137.490040][ T6950] Call Trace: [ 137.490047][ T6950] [ 137.490054][ T6950] dump_stack_lvl+0xe8/0x150 [ 137.490081][ T6950] should_fail_ex+0x412/0x560 [ 137.490109][ T6950] should_failslab+0xa8/0x100 [ 137.490130][ T6950] __kmalloc_cache_noprof+0x88/0x660 [ 137.490148][ T6950] ? snd_seq_prioq_new+0x47/0xa0 [ 137.490166][ T6950] snd_seq_prioq_new+0x47/0xa0 [ 137.490180][ T6950] snd_seq_queue_alloc+0x15a/0x790 [ 137.490204][ T6950] ? __pfx_snd_seq_ioctl_create_port+0x10/0x10 [ 137.490224][ T6950] snd_seq_ioctl_create_queue+0x7f/0x3d0 [ 137.490246][ T6950] snd_seq_oss_open+0x674/0xfc0 [ 137.490271][ T6950] ? __pfx_snd_seq_oss_open+0x10/0x10 [ 137.490313][ T6950] ? trace_contention_end+0x3d/0x140 [ 137.490332][ T6950] ? __mutex_lock+0x319/0x1550 [ 137.490365][ T6950] ? __pfx___mutex_lock+0x10/0x10 [ 137.490386][ T6950] ? __pfx_snd_seq_oss_event_input+0x10/0x10 [ 137.490404][ T6950] ? __pfx_free_devinfo+0x10/0x10 [ 137.490421][ T6950] ? do_raw_spin_unlock+0xf5/0x210 [ 137.490443][ T6950] ? soundcore_open+0x2da/0x490 [ 137.490479][ T6950] odev_open+0x67/0xa0 [ 137.490494][ T6950] chrdev_open+0x4cd/0x5e0 [ 137.490515][ T6950] ? __pfx_chrdev_open+0x10/0x10 [ 137.490534][ T6950] ? fsnotify_open_perm_and_set_mode+0x135/0x6d0 [ 137.490556][ T6950] ? __pfx_chrdev_open+0x10/0x10 [ 137.490573][ T6950] do_dentry_open+0x785/0x14e0 [ 137.490606][ T6950] vfs_open+0x3b/0x340 [ 137.490618][ T6950] ? path_openat+0x2df0/0x3860 [ 137.490638][ T6950] path_openat+0x2e08/0x3860 [ 137.490666][ T6950] ? __pfx_stack_trace_save+0x10/0x10 [ 137.490688][ T6950] ? stack_depot_save_flags+0x33/0x810 [ 137.490711][ T6950] ? __pfx_path_openat+0x10/0x10 [ 137.490726][ T6950] ? __x64_sys_openat+0x138/0x170 [ 137.490744][ T6950] ? __lock_acquire+0x6b5/0x2cf0 [ 137.490775][ T6950] do_file_open+0x23e/0x4a0 [ 137.490796][ T6950] ? __pfx_do_file_open+0x10/0x10 [ 137.490825][ T6950] ? _raw_spin_unlock+0x28/0x50 [ 137.490840][ T6950] ? alloc_fd+0x64b/0x6c0 [ 137.490860][ T6950] do_sys_openat2+0x113/0x200 [ 137.490875][ T6950] ? __pfx_do_sys_openat2+0x10/0x10 [ 137.490888][ T6950] ? ksys_write+0x242/0x270 [ 137.490906][ T6950] ? __pfx_ksys_write+0x10/0x10 [ 137.490924][ T6950] __x64_sys_openat+0x138/0x170 [ 137.490939][ T6950] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.490953][ T6950] do_syscall_64+0x15f/0xf80 [ 137.490972][ T6950] ? trace_irq_disable+0x3b/0x140 [ 137.490991][ T6950] ? clear_bhb_loop+0x40/0x90 [ 137.491007][ T6950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.491021][ T6950] RIP: 0033:0x7f67d979c819 [ 137.491037][ T6950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.491049][ T6950] RSP: 002b:00007f67da647028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 137.491065][ T6950] RAX: ffffffffffffffda RBX: 00007f67d9a16090 RCX: 00007f67d979c819 [ 137.491075][ T6950] RDX: 0000000000080383 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 137.491084][ T6950] RBP: 00007f67da647090 R08: 0000000000000000 R09: 0000000000000000 [ 137.491093][ T6950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 137.491100][ T6950] R13: 00007f67d9a16128 R14: 00007f67d9a16090 R15: 00007f67d9b3fa48 [ 137.491122][ T6950] [ 138.136695][ T5917] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 138.258097][ T10] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 138.287588][ T5944] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 138.307012][ T5917] usb 3-1: Using ep0 maxpacket: 16 [ 138.319696][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.323361][ T6962] syzkaller0: entered promiscuous mode [ 138.331329][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.339013][ T6962] syzkaller0: entered allmulticast mode [ 138.348295][ T5917] usb 3-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 138.364295][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.387913][ T5917] usb 3-1: config 0 descriptor?? [ 138.436450][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 138.444507][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.458854][ T10] usb 2-1: config 0 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 138.461923][ T5944] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 138.476917][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 138.496458][ T5944] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.505010][ T5944] usb 1-1: Product: syz [ 138.507125][ T10] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 138.509844][ T5944] usb 1-1: Manufacturer: syz [ 138.522258][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.532641][ T5944] usb 1-1: SerialNumber: syz [ 138.539470][ T10] usb 2-1: Product: syz [ 138.546216][ T10] usb 2-1: Manufacturer: syz [ 138.555098][ T5944] usb 1-1: config 0 descriptor?? [ 138.565847][ T10] usb 2-1: SerialNumber: syz [ 138.573451][ T5944] hub 1-1:0.0: bad descriptor, ignoring hub [ 138.580080][ T10] usb 2-1: config 0 descriptor?? [ 138.585787][ T5944] hub 1-1:0.0: probe with driver hub failed with error -5 [ 138.600690][ T6964] sch_tbf: peakrate 5 is lower than or equals to rate 1005582297638359173 ! [ 138.777878][ T5944] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 138.798837][ T5944] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 138.800963][ T5917] usbhid 3-1:0.0: can't add hid device: -71 [ 138.818078][ T5917] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 138.828142][ T5944] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 138.832303][ T5917] usb 3-1: USB disconnect, device number 20 [ 138.849147][ T5944] usb 1-1: media controller created [ 138.892789][ T5944] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 138.954673][ T5944] DVB: Unable to find symbol dib7000p_attach() [ 138.964951][ T5944] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 138.988688][ T6958] dib0700: tx buffer length is larger than 4. Not supported. [ 139.058041][ T5944] rc_core: IR keymap rc-dib0700-rc5 not found [ 139.065650][ T6956] bond1: entered allmulticast mode [ 139.071713][ T6956] 8021q: adding VLAN 0 to HW filter on device bond1 [ 139.072591][ T5944] Registered IR keymap rc-empty [ 139.085212][ T5917] usb 2-1: USB disconnect, device number 19 [ 139.113833][ T5944] dvb-usb: could not initialize remote control. [ 139.122621][ T5944] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 139.152027][ T5944] usb 1-1: USB disconnect, device number 21 [ 139.229208][ T5944] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 139.240226][ T5991] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 139.413949][ T6977] fuse: blksize only supported for fuseblk [ 139.430473][ T6977] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.337'. [ 139.441519][ T5991] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 139.473263][ T5991] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 139.492983][ T5991] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 139.511138][ T5991] usb 5-1: Product: syz [ 139.516830][ T5991] usb 5-1: Manufacturer: syz [ 139.522457][ T5991] usb 5-1: SerialNumber: syz [ 139.785071][ T5991] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 18 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 139.887186][ T5944] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 140.041916][ T24] usb 5-1: USB disconnect, device number 18 [ 140.066386][ T5944] usb 3-1: Using ep0 maxpacket: 16 [ 140.082438][ T5944] usb 3-1: config 166 has an invalid interface number: 177 but max is 1 [ 140.098400][ T5944] usb 3-1: config 166 has an invalid interface number: 34 but max is 1 [ 140.111846][ T5944] usb 3-1: config 166 has no interface number 0 [ 140.120401][ T24] usblp0: removed [ 140.145175][ T5944] usb 3-1: config 166 has no interface number 1 [ 140.149727][ T6993] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 140.182067][ T5944] usb 3-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 140.212831][ T5944] usb 3-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 140.253147][ T5944] usb 3-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 140.291114][ T5944] usb 3-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 140.359639][ T5944] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 140.428444][ T5944] usb 3-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 140.495625][ T5944] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 140.554144][ T5944] usb 3-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 140.594594][ T5944] usb 3-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 140.624883][ T5944] usb 3-1: config 166 interface 177 has no altsetting 0 [ 140.641558][ T5944] usb 3-1: config 166 interface 34 has no altsetting 0 [ 140.659066][ T5944] usb 3-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 140.700549][ T5944] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.752102][ T5944] usb 3-1: Product: syz [ 140.773430][ T5944] usb 3-1: Manufacturer: syz [ 140.792800][ T5944] usb 3-1: SerialNumber: syz [ 141.062080][ T5944] ums-realtek 3-1:166.177: USB Mass Storage device detected [ 141.092375][ T7009] netlink: 36 bytes leftover after parsing attributes in process `syz.3.348'. [ 141.144356][ T7015] netlink: 'syz.1.350': attribute type 1 has an invalid length. [ 141.157941][ T7015] netlink: 20 bytes leftover after parsing attributes in process `syz.1.350'. [ 141.259797][ T5944] ums-realtek 3-1:166.34: USB Mass Storage device detected [ 141.346411][ T24] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 141.507503][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 141.525369][ T5944] ums-realtek 3-1:166.34: probe with driver ums-realtek failed with error -5 [ 141.537539][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.556655][ T24] usb 1-1: config 0 has no interfaces? [ 141.572132][ T24] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 141.596087][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.635573][ T24] usb 1-1: config 0 descriptor?? [ 141.675893][ T5944] uvcvideo 3-1:166.34: Found UVC 0.00 device syz (0bda:0138) [ 141.711074][ T5944] uvcvideo 3-1:166.34: No valid video chain found. [ 141.741618][ T5944] usb 3-1: USB disconnect, device number 21 [ 141.938822][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 141.978660][ T10] IPVS: starting estimator thread 0... [ 141.990284][ T7024] IPVS: lc: FWM 3 0x00000003 - no destination available [ 142.086476][ T7025] IPVS: using max 29 ests per chain, 69600 per kthread [ 142.143171][ T7036] FAULT_INJECTION: forcing a failure. [ 142.143171][ T7036] name failslab, interval 1, probability 0, space 0, times 0 [ 142.159938][ T7036] CPU: 0 UID: 0 PID: 7036 Comm: syz.4.356 Tainted: G L syzkaller #0 PREEMPT(full) [ 142.159967][ T7036] Tainted: [L]=SOFTLOCKUP [ 142.159973][ T7036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 142.159984][ T7036] Call Trace: [ 142.159991][ T7036] [ 142.159999][ T7036] dump_stack_lvl+0xe8/0x150 [ 142.160031][ T7036] should_fail_ex+0x412/0x560 [ 142.160061][ T7036] should_failslab+0xa8/0x100 [ 142.160086][ T7036] __kmalloc_noprof+0xe8/0x760 [ 142.160106][ T7036] ? tomoyo_encode+0x28b/0x550 [ 142.160130][ T7036] tomoyo_encode+0x28b/0x550 [ 142.160151][ T7036] tomoyo_realpath_from_path+0x58d/0x5d0 [ 142.160180][ T7036] ? tomoyo_path_number_perm+0x219/0x630 [ 142.160204][ T7036] tomoyo_path_number_perm+0x246/0x630 [ 142.160230][ T7036] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 142.160253][ T7036] ? __lock_acquire+0x6b5/0x2cf0 [ 142.160292][ T7036] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 142.160334][ T7036] ? __fget_files+0x2a/0x420 [ 142.160355][ T7036] ? __fget_files+0x2a/0x420 [ 142.160371][ T7036] ? __fget_files+0x3a0/0x420 [ 142.160387][ T7036] ? __fget_files+0x2a/0x420 [ 142.160473][ T7036] security_file_ioctl+0xc3/0x2a0 [ 142.160499][ T7036] __se_sys_ioctl+0x47/0x170 [ 142.160521][ T7036] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.160541][ T7036] do_syscall_64+0x15f/0xf80 [ 142.160561][ T7036] ? trace_irq_disable+0x3b/0x140 [ 142.160583][ T7036] ? clear_bhb_loop+0x40/0x90 [ 142.160604][ T7036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.160621][ T7036] RIP: 0033:0x7f67d979c819 [ 142.160638][ T7036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.160652][ T7036] RSP: 002b:00007f67da668028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 142.160671][ T7036] RAX: ffffffffffffffda RBX: 00007f67d9a15fa0 RCX: 00007f67d979c819 [ 142.160684][ T7036] RDX: 0000200000004a40 RSI: 00000000c0306201 RDI: 0000000000000005 [ 142.160695][ T7036] RBP: 00007f67da668090 R08: 0000000000000000 R09: 0000000000000000 [ 142.160705][ T7036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.160716][ T7036] R13: 00007f67d9a16038 R14: 00007f67d9a15fa0 R15: 00007f67d9b3fa48 [ 142.160744][ T7036] [ 142.160763][ T7036] ERROR: Out of memory at tomoyo_realpath_from_path. [ 142.244645][ T7040] FAULT_INJECTION: forcing a failure. [ 142.244645][ T7040] name failslab, interval 1, probability 0, space 0, times 0 [ 142.489516][ T7040] CPU: 1 UID: 0 PID: 7040 Comm: syz.1.357 Tainted: G L syzkaller #0 PREEMPT(full) [ 142.489546][ T7040] Tainted: [L]=SOFTLOCKUP [ 142.489553][ T7040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 142.489563][ T7040] Call Trace: [ 142.489570][ T7040] [ 142.489577][ T7040] dump_stack_lvl+0xe8/0x150 [ 142.489609][ T7040] should_fail_ex+0x412/0x560 [ 142.489640][ T7040] should_failslab+0xa8/0x100 [ 142.489664][ T7040] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 142.489686][ T7040] ? __alloc_skb+0x186/0x7d0 [ 142.489700][ T7040] ? __alloc_skb+0x1d0/0x7d0 [ 142.489714][ T7040] ? __local_bh_enable_ip+0xd0/0x130 [ 142.489743][ T7040] __alloc_skb+0x1d0/0x7d0 [ 142.489762][ T7040] netlink_sendmsg+0x5d4/0xb40 [ 142.489787][ T7040] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.489807][ T7040] ? aa_sock_msg_perm+0xf1/0x1b0 [ 142.489826][ T7040] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 142.489850][ T7040] ____sys_sendmsg+0x972/0x9f0 [ 142.489869][ T7040] ? __might_fault+0xaf/0x130 [ 142.489893][ T7040] ? __pfx_____sys_sendmsg+0x10/0x10 [ 142.489919][ T7040] ? import_iovec+0x73/0xa0 [ 142.489942][ T7040] ___sys_sendmsg+0x2a5/0x360 [ 142.489959][ T7040] ? __lock_acquire+0x6b5/0x2cf0 [ 142.489988][ T7040] ? __pfx____sys_sendmsg+0x10/0x10 [ 142.490037][ T7040] ? __fget_files+0x2a/0x420 [ 142.490052][ T7040] ? __fget_files+0x3a0/0x420 [ 142.490077][ T7040] __x64_sys_sendmsg+0x1bd/0x2a0 [ 142.490099][ T7040] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 142.490125][ T7040] ? __pfx_ksys_write+0x10/0x10 [ 142.490154][ T7040] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.490173][ T7040] do_syscall_64+0x15f/0xf80 [ 142.490195][ T7040] ? trace_irq_disable+0x3b/0x140 [ 142.490218][ T7040] ? clear_bhb_loop+0x40/0x90 [ 142.490238][ T7040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.490255][ T7040] RIP: 0033:0x7f0a5839c819 [ 142.490271][ T7040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.490286][ T7040] RSP: 002b:00007f0a59276028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.490311][ T7040] RAX: ffffffffffffffda RBX: 00007f0a58615fa0 RCX: 00007f0a5839c819 [ 142.490323][ T7040] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007 [ 142.490333][ T7040] RBP: 00007f0a59276090 R08: 0000000000000000 R09: 0000000000000000 [ 142.490343][ T7040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.490352][ T7040] R13: 00007f0a58616038 R14: 00007f0a58615fa0 R15: 00007f0a5873fa48 [ 142.490380][ T7040] [ 142.789588][ T7049] random: crng reseeded on system resumption [ 143.023532][ T7049] Unrecognized hibernate image header format! [ 143.033119][ T7049] PM: hibernation: Image mismatch: architecture specific data [ 143.033330][ T7054] 8021q: VLANs not supported on caif0 [ 143.041252][ T10] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 143.074408][ T7052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.084694][ T7052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.102134][ T7049] Unrecognized hibernate image header format! [ 143.123301][ T7049] PM: hibernation: Image mismatch: architecture specific data [ 143.135564][ T7049] Unrecognized hibernate image header format! [ 143.143170][ T7049] PM: hibernation: Image mismatch: architecture specific data [ 143.156690][ T5917] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 143.197034][ T10] usb 2-1: device descriptor read/64, error -71 [ 143.317289][ T5917] usb 5-1: Using ep0 maxpacket: 16 [ 143.342795][ T5917] usb 5-1: too many configurations: 89, using maximum allowed: 8 [ 143.360680][ T5917] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 143.383527][ T5917] usb 5-1: can't read configurations, error -61 [ 143.436437][ T10] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 143.566448][ T5917] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 143.617083][ T10] usb 2-1: device descriptor read/64, error -71 [ 143.696397][ T1225] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 143.726986][ T10] usb usb2-port1: attempt power cycle [ 143.733509][ T5917] usb 5-1: Using ep0 maxpacket: 16 [ 143.749801][ T5917] usb 5-1: too many configurations: 89, using maximum allowed: 8 [ 143.780676][ T5917] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 143.790414][ T5917] usb 5-1: can't read configurations, error -61 [ 143.804696][ T5917] usb usb5-port1: attempt power cycle [ 143.871061][ T1225] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 143.908888][ T1225] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 143.919440][ T1225] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 143.930457][ T1225] usb 3-1: Product: syz [ 143.936157][ T1225] usb 3-1: Manufacturer: syz [ 143.941999][ T1225] usb 3-1: SerialNumber: syz [ 144.097752][ T10] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 144.127161][ T10] usb 2-1: device descriptor read/8, error -71 [ 144.166429][ T5917] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 144.208058][ T5917] usb 5-1: Using ep0 maxpacket: 16 [ 144.208263][ T1225] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 22 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 144.244150][ T5904] usb 1-1: USB disconnect, device number 22 [ 144.257276][ T5917] usb 5-1: too many configurations: 89, using maximum allowed: 8 [ 144.282140][ T5917] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 144.317877][ T5917] usb 5-1: can't read configurations, error -61 [ 144.376507][ T10] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 144.419159][ T10] usb 2-1: device descriptor read/8, error -71 [ 144.440360][ T1225] usb 3-1: USB disconnect, device number 22 [ 144.459271][ T1225] usblp0: removed [ 144.486529][ T5917] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 144.537212][ T10] usb usb2-port1: unable to enumerate USB device [ 144.555205][ T5917] usb 5-1: Using ep0 maxpacket: 16 [ 144.563557][ T5917] usb 5-1: too many configurations: 89, using maximum allowed: 8 [ 144.578376][ T5917] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 144.588418][ T5917] usb 5-1: can't read configurations, error -61 [ 144.604716][ T5917] usb usb5-port1: unable to enumerate USB device [ 144.916486][ T5917] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 145.076389][ T5917] usb 1-1: Using ep0 maxpacket: 32 [ 145.093595][ T5917] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 145.115208][ T5917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.141616][ T5917] usb 1-1: config 0 descriptor?? [ 145.169556][ T7063] netlink: 12 bytes leftover after parsing attributes in process `syz.3.364'. [ 145.211392][ T7063] 8021q: adding VLAN 0 to HW filter on device bond1 [ 145.231544][ T7063] netlink: 12 bytes leftover after parsing attributes in process `syz.3.364'. [ 145.242433][ T7063] netlink: 4 bytes leftover after parsing attributes in process `syz.3.364'. [ 145.351085][ T5917] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 145.372974][ T5917] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 145.390786][ T5917] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 145.399205][ T5917] usb 1-1: media controller created [ 145.422167][ T5917] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 145.592051][ T5917] DVB: Unable to find symbol dib7000p_attach() [ 145.607917][ T5917] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 145.699395][ T5917] rc_core: IR keymap rc-dib0700-rc5 not found [ 145.714050][ T5917] Registered IR keymap rc-empty [ 145.721794][ T5917] dvb-usb: could not initialize remote control. [ 145.731359][ T5917] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 145.765929][ T5917] usb 1-1: USB disconnect, device number 23 [ 145.877388][ T5917] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 146.128029][ T7083] netlink: 'syz.3.368': attribute type 29 has an invalid length. [ 146.201457][ T7084] netlink: 'syz.3.368': attribute type 29 has an invalid length. [ 146.206790][ T1225] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 146.387991][ T1225] usb 2-1: Using ep0 maxpacket: 8 [ 146.409974][ T1225] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 13 [ 146.466065][ T1225] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 146.507143][ T1225] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.533839][ T1225] usb 2-1: Product: syz [ 146.544218][ T1225] usb 2-1: Manufacturer: syz [ 146.565881][ T1225] usb 2-1: SerialNumber: syz [ 146.593928][ T1225] usb 2-1: config 0 descriptor?? [ 146.606821][ T5944] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 146.782461][ T5944] usb 5-1: not running at top speed; connect to a high speed hub [ 146.811214][ T5944] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 503, setting to 64 [ 146.859425][ T5944] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 146.891444][ T5944] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.932035][ T5944] usb 5-1: Product: syz [ 146.937011][ T1225] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 146.953151][ T5944] usb 5-1: Manufacturer: 퐕矙뵞鱡堕ȷ䨖䐃釬ᐜ൴랆蔍劆槬訝蘟fl멘餤┛㘕턹老隷䪎쥪ጿ恕剞䃩뫀蜒掓鮹䠈겚ᷗ둃ᑻ퓌넥᭑꾱᫴콰䐎갣∻韲ᕟᘬ䓏ﶙ㺛溉⻫램 [ 146.958673][ T7079] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 147.006340][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 147.048692][ T5944] usb 5-1: SerialNumber: syz [ 147.118132][ T5917] usb 2-1: USB disconnect, device number 24 [ 147.158690][ T10] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 147.178531][ T1225] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 147.218358][ T1225] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 147.246198][ T1225] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 255, changing to 11 [ 147.277797][ T1225] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 147.314076][ T1225] usb 4-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 147.316427][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 147.335218][ T7089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.360736][ T7089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.378350][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 147.404177][ T7089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.415067][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 147.432105][ T7089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.454670][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 147.476450][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.507033][ T1225] usb 4-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 147.508851][ T10] usb 3-1: Product: syz [ 147.530355][ T10] usb 3-1: Manufacturer: syz [ 147.556060][ T1225] usb 4-1: Manufacturer: syz [ 147.557150][ T10] usb 3-1: SerialNumber: syz [ 147.595215][ T10] usb 3-1: config 0 descriptor?? [ 147.612421][ T1225] usb 4-1: config 0 descriptor?? [ 147.615258][ T10] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 147.634377][ T10] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 147.652337][ T7097] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 147.674029][ T1225] smsusb:smsusb_probe: board id=9, interface number 0 [ 147.722464][ T1225] smsusb:siano_media_device_register: media controller created [ 147.768254][ T1225] usb 4-1: BOGUS urb xfer, pipe 3 != type 1 [ 147.788293][ T1225] smsusb:smsusb_start_streaming: smsusb_submit_urb(...) failed [ 147.826672][ T1225] smsusb:smsusb_init_device: smsusb_start_streaming(...) failed [ 147.836179][ T7116] FAULT_INJECTION: forcing a failure. [ 147.836179][ T7116] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 147.855690][ T1225] ------------[ cut here ]------------ [ 147.861512][ T1225] !PageLargeKmalloc(page) [ 147.861562][ T1225] WARNING: mm/slub.c:6471 at free_large_kmalloc+0x9b/0x110, CPU#1: kworker/1:2/1225 [ 147.876468][ T1225] Modules linked in: [ 147.880594][ T1225] CPU: 1 UID: 0 PID: 1225 Comm: kworker/1:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 147.892975][ T1225] Tainted: [L]=SOFTLOCKUP [ 147.897764][ T1225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 147.908437][ T1225] Workqueue: usb_hub_wq hub_event [ 147.913919][ T1225] RIP: 0010:free_large_kmalloc+0x9b/0x110 [ 147.920181][ T1225] Code: 8b 43 30 83 f8 ff 74 13 25 00 00 00 ff 3d 00 00 00 f8 75 74 c7 43 30 ff ff ff ff 48 89 df 89 ee 5b 41 5e 5d e9 36 d8 fc ff 90 <0f> 0b 90 48 89 df 48 c7 c6 a7 2a ff 8d 5b 41 5e 5d e9 1f 56 02 ff [ 147.939592][ T7116] CPU: 0 UID: 0 PID: 7116 Comm: syz.1.373 Tainted: G L syzkaller #0 PREEMPT(full) [ 147.939623][ T7116] Tainted: [L]=SOFTLOCKUP [ 147.939629][ T7116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 147.939640][ T7116] Call Trace: [ 147.939647][ T7116] [ 147.939654][ T7116] dump_stack_lvl+0xe8/0x150 [ 147.939691][ T7116] should_fail_ex+0x412/0x560 [ 147.939722][ T7116] _copy_from_iter+0x1d3/0x1670 [ 147.939741][ T7116] ? rcu_is_watching+0x15/0xb0 [ 147.939764][ T7116] ? __pfx__copy_from_iter+0x10/0x10 [ 147.939787][ T7116] ? netlink_sendmsg+0x650/0xb40 [ 147.939803][ T7116] ? skb_put+0x11b/0x210 [ 147.939823][ T7116] netlink_sendmsg+0x6c0/0xb40 [ 147.939847][ T7116] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.939866][ T7116] ? aa_sock_msg_perm+0xf1/0x1b0 [ 147.939885][ T7116] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 147.939909][ T7116] ____sys_sendmsg+0x972/0x9f0 [ 147.939935][ T7116] ? __might_fault+0xaf/0x130 [ 147.939958][ T7116] ? __pfx_____sys_sendmsg+0x10/0x10 [ 147.939983][ T7116] ? import_iovec+0x73/0xa0 [ 147.940013][ T7116] ___sys_sendmsg+0x2a5/0x360 [ 147.940030][ T7116] ? __lock_acquire+0x6b5/0x2cf0 [ 147.940057][ T7116] ? __pfx____sys_sendmsg+0x10/0x10 [ 147.940103][ T7116] ? __fget_files+0x2a/0x420 [ 147.940120][ T7116] ? __fget_files+0x3a0/0x420 [ 147.940145][ T7116] __x64_sys_sendmsg+0x1bd/0x2a0 [ 147.940164][ T7116] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 147.940190][ T7116] ? __pfx_ksys_write+0x10/0x10 [ 147.940217][ T7116] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.940236][ T7116] do_syscall_64+0x15f/0xf80 [ 147.940257][ T7116] ? trace_irq_disable+0x3b/0x140 [ 147.940279][ T7116] ? clear_bhb_loop+0x40/0x90 [ 147.940299][ T7116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.940316][ T7116] RIP: 0033:0x7f0a5839c819 [ 147.940332][ T7116] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.940347][ T7116] RSP: 002b:00007f0a59276028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 147.940365][ T7116] RAX: ffffffffffffffda RBX: 00007f0a58615fa0 RCX: 00007f0a5839c819 [ 147.940376][ T7116] RDX: 0000000004044890 RSI: 0000200000000100 RDI: 0000000000000003 [ 147.940387][ T7116] RBP: 00007f0a59276090 R08: 0000000000000000 R09: 0000000000000000 [ 147.940397][ T7116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.940407][ T7116] R13: 00007f0a58616038 R14: 00007f0a58615fa0 R15: 00007f0a5873fa48 [ 147.940433][ T7116] [ 148.205362][ T1225] RSP: 0018:ffffc90005a1eb20 EFLAGS: 00010206 [ 148.211995][ T1225] RAX: 00000000ff000000 RBX: ffffea0001249880 RCX: 0000000000000001 [ 148.220574][ T1225] RDX: ffffc90019329000 RSI: ffff888049262000 RDI: ffffea0001249880 [ 148.227323][ T10] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 148.228707][ T1225] RBP: 0000000000000000 R08: ffff8880343bd603 R09: 1ffff11006877ac0 [ 148.243919][ T1225] R10: dffffc0000000000 R11: ffffed1006877ac1 R12: 1ffff110043d8282 [ 148.253288][ T1225] R13: 0000000000000000 R14: ffff8880343bd660 R15: dffffc0000000000 [ 148.261586][ T1225] FS: 0000000000000000(0000) GS:ffff888125314000(0000) knlGS:0000000000000000 [ 148.271219][ T1225] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 148.278162][ T1225] CR2: 00007fbcf4477f2d CR3: 0000000074520000 CR4: 00000000003526f0 [ 148.286942][ T1225] Call Trace: [ 148.290401][ T1225] [ 148.293820][ T1225] usb_free_urb+0xd0/0x120 [ 148.298452][ T1225] smsusb_term_device+0x1d7/0x3e0 [ 148.299582][ T10] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 148.303911][ T1225] smsusb_probe+0x1aba/0x2280 [ 148.303965][ T1225] ? __pfx_smsusb_probe+0x10/0x10 [ 148.303997][ T1225] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 148.304039][ T1225] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 148.304071][ T1225] ? __pm_runtime_set_status+0x9d4/0xcd0 [ 148.304114][ T1225] usb_probe_interface+0x659/0xc70 [ 148.304155][ T1225] ? __pfx_usb_probe_interface+0x10/0x10 [ 148.304179][ T1225] really_probe+0x267/0xaf0 [ 148.304208][ T1225] __driver_probe_device+0x1ef/0x380 [ 148.304243][ T1225] driver_probe_device+0x4f/0x240 [ 148.304268][ T1225] __device_attach_driver+0x279/0x430 [ 148.304293][ T1225] bus_for_each_drv+0x258/0x2f0 [ 148.304320][ T1225] ? __pfx___device_attach_driver+0x10/0x10 [ 148.304342][ T1225] ? __pfx_bus_for_each_drv+0x10/0x10 [ 148.304370][ T1225] ? lockdep_hardirqs_on+0x7a/0x110 [ 148.304398][ T1225] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 148.304428][ T1225] __device_attach+0x2c5/0x450 [ 148.304464][ T1225] ? __pfx___device_attach+0x10/0x10 [ 148.304502][ T1225] ? _raw_spin_unlock+0x28/0x50 [ 148.304530][ T1225] device_initial_probe+0xa1/0xd0 [ 148.304563][ T1225] bus_probe_device+0x12a/0x220 [ 148.304593][ T1225] device_add+0x7e9/0xbb0 [ 148.304628][ T1225] usb_set_configuration+0x1a87/0x2110 [ 148.304681][ T1225] usb_generic_driver_probe+0x8d/0x150 [ 148.304710][ T1225] usb_probe_device+0x1c4/0x3b0 [ 148.304741][ T1225] ? __pfx_usb_probe_device+0x10/0x10 [ 148.304766][ T1225] really_probe+0x267/0xaf0 [ 148.304793][ T1225] __driver_probe_device+0x1ef/0x380 [ 148.304829][ T1225] driver_probe_device+0x4f/0x240 [ 148.304853][ T1225] __device_attach_driver+0x279/0x430 [ 148.304879][ T1225] bus_for_each_drv+0x258/0x2f0 [ 148.304911][ T1225] ? __pfx___device_attach_driver+0x10/0x10 [ 148.304931][ T1225] ? __pfx_bus_for_each_drv+0x10/0x10 [ 148.319880][ T10] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 148.322932][ T1225] ? _raw_spin_unlock_irqrestore+0x74/0x80 [ 148.329369][ T10] em28xx 3-1:0.0: No AC97 audio processor [ 148.334624][ T1225] __device_attach+0x2c5/0x450 [ 148.395034][ T10] usb 3-1: USB disconnect, device number 23 [ 148.397893][ T1225] ? __pfx___device_attach+0x10/0x10 [ 148.397941][ T1225] ? _raw_spin_unlock+0x28/0x50 [ 148.397970][ T1225] device_initial_probe+0xa1/0xd0 [ 148.398029][ T1225] bus_probe_device+0x12a/0x220 [ 148.398056][ T1225] device_add+0x7e9/0xbb0 [ 148.449900][ T10] em28xx 3-1:0.0: Disconnecting em28xx [ 148.453390][ T1225] usb_new_device+0xa08/0x16f0 [ 148.453436][ T1225] ? __pfx_usb_new_device+0x10/0x10 [ 148.491390][ T10] em28xx 3-1:0.0: Freeing device [ 148.497912][ T1225] ? _raw_spin_unlock_irq+0x23/0x50 [ 148.497955][ T1225] hub_event+0x2a1c/0x4f30 [ 148.597050][ T1225] ? __pfx_hub_event+0x10/0x10 [ 148.602357][ T1225] ? process_scheduled_works+0xa70/0x1860 [ 148.608221][ T1225] ? process_scheduled_works+0xa70/0x1860 [ 148.614324][ T1225] ? process_scheduled_works+0xa70/0x1860 [ 148.621065][ T1225] process_scheduled_works+0xb5d/0x1860 [ 148.627352][ T1225] ? __pfx_process_scheduled_works+0x10/0x10 [ 148.633450][ T1225] ? assign_work+0x3d5/0x5e0 [ 148.638216][ T1225] worker_thread+0xa53/0xfc0 [ 148.643078][ T1225] kthread+0x388/0x470 [ 148.647998][ T1225] ? __pfx_worker_thread+0x10/0x10 [ 148.653629][ T1225] ? __pfx_kthread+0x10/0x10 [ 148.658905][ T1225] ret_from_fork+0x514/0xb70 [ 148.663676][ T1225] ? __pfx_ret_from_fork+0x10/0x10 [ 148.669323][ T1225] ? __switch_to+0xc79/0x1410 [ 148.674361][ T1225] ? __pfx_kthread+0x10/0x10 [ 148.679148][ T1225] ret_from_fork_asm+0x1a/0x30 [ 148.684234][ T1225] [ 148.687748][ T1225] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 148.695746][ T1225] CPU: 1 UID: 0 PID: 1225 Comm: kworker/1:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 148.707301][ T1225] Tainted: [L]=SOFTLOCKUP [ 148.711622][ T1225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 148.722343][ T1225] Workqueue: usb_hub_wq hub_event [ 148.727563][ T1225] Call Trace: [ 148.731211][ T1225] [ 148.734937][ T1225] vpanic+0x56c/0xa60 [ 148.740074][ T1225] ? __pfx__printk+0x10/0x10 [ 148.745366][ T1225] ? __pfx_vpanic+0x10/0x10 [ 148.750385][ T1225] ? is_bpf_text_address+0x292/0x2b0 [ 148.755945][ T1225] ? is_bpf_text_address+0x26/0x2b0 [ 148.761576][ T1225] panic+0xc5/0xd0 [ 148.765590][ T1225] ? __pfx_panic+0x10/0x10 [ 148.770239][ T1225] ? ret_from_fork_asm+0x1a/0x30 [ 148.775561][ T1225] __warn+0x315/0x4c0 [ 148.779703][ T1225] ? free_large_kmalloc+0x9b/0x110 [ 148.785382][ T1225] ? free_large_kmalloc+0x9b/0x110 [ 148.790791][ T1225] __report_bug+0x29a/0x540 [ 148.795612][ T1225] ? device_initial_probe+0xa1/0xd0 [ 148.801084][ T1225] ? bus_probe_device+0x12a/0x220 [ 148.806372][ T1225] ? device_add+0x7e9/0xbb0 [ 148.811058][ T1225] ? free_large_kmalloc+0x9b/0x110 [ 148.816204][ T1225] ? __pfx___report_bug+0x10/0x10 [ 148.821237][ T1225] ? usb_new_device+0xa08/0x16f0 [ 148.826433][ T1225] ? hub_event+0x2a1c/0x4f30 [ 148.831984][ T1225] ? process_scheduled_works+0xb5d/0x1860 [ 148.838125][ T1225] ? smscore_unregister_device+0x651/0x780 [ 148.844380][ T1225] ? free_large_kmalloc+0x9b/0x110 [ 148.849674][ T1225] report_bug+0x16a/0x220 [ 148.854097][ T1225] ? free_large_kmalloc+0x9b/0x110 [ 148.859734][ T1225] ? free_large_kmalloc+0x9d/0x110 [ 148.865118][ T1225] handle_bug+0x9c/0x200 [ 148.869628][ T1225] exc_invalid_op+0x1a/0x50 [ 148.874668][ T1225] asm_exc_invalid_op+0x1a/0x20 [ 148.879712][ T1225] RIP: 0010:free_large_kmalloc+0x9b/0x110 [ 148.886046][ T1225] Code: 8b 43 30 83 f8 ff 74 13 25 00 00 00 ff 3d 00 00 00 f8 75 74 c7 43 30 ff ff ff ff 48 89 df 89 ee 5b 41 5e 5d e9 36 d8 fc ff 90 <0f> 0b 90 48 89 df 48 c7 c6 a7 2a ff 8d 5b 41 5e 5d e9 1f 56 02 ff [ 148.910017][ T1225] RSP: 0018:ffffc90005a1eb20 EFLAGS: 00010206 [ 148.916904][ T1225] RAX: 00000000ff000000 RBX: ffffea0001249880 RCX: 0000000000000001 [ 148.925792][ T1225] RDX: ffffc90019329000 RSI: ffff888049262000 RDI: ffffea0001249880 [ 148.934747][ T1225] RBP: 0000000000000000 R08: ffff8880343bd603 R09: 1ffff11006877ac0 [ 148.943609][ T1225] R10: dffffc0000000000 R11: ffffed1006877ac1 R12: 1ffff110043d8282 [ 148.952387][ T1225] R13: 0000000000000000 R14: ffff8880343bd660 R15: dffffc0000000000 [ 148.960937][ T1225] usb_free_urb+0xd0/0x120 [ 148.965552][ T1225] smsusb_term_device+0x1d7/0x3e0 [ 148.971028][ T1225] smsusb_probe+0x1aba/0x2280 [ 148.976077][ T1225] ? __pfx_smsusb_probe+0x10/0x10 [ 148.981196][ T1225] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 148.987112][ T1225] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 148.993465][ T1225] ? __pm_runtime_set_status+0x9d4/0xcd0 [ 148.999546][ T1225] usb_probe_interface+0x659/0xc70 [ 149.004845][ T1225] ? __pfx_usb_probe_interface+0x10/0x10 [ 149.010602][ T1225] really_probe+0x267/0xaf0 [ 149.015192][ T1225] __driver_probe_device+0x1ef/0x380 [ 149.020575][ T1225] driver_probe_device+0x4f/0x240 [ 149.025607][ T1225] __device_attach_driver+0x279/0x430 [ 149.031413][ T1225] bus_for_each_drv+0x258/0x2f0 [ 149.036440][ T1225] ? __pfx___device_attach_driver+0x10/0x10 [ 149.042597][ T1225] ? __pfx_bus_for_each_drv+0x10/0x10 [ 149.048231][ T1225] ? lockdep_hardirqs_on+0x7a/0x110 [ 149.053517][ T1225] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 149.059416][ T1225] __device_attach+0x2c5/0x450 [ 149.064715][ T1225] ? __pfx___device_attach+0x10/0x10 [ 149.070266][ T1225] ? _raw_spin_unlock+0x28/0x50 [ 149.075293][ T1225] device_initial_probe+0xa1/0xd0 [ 149.080422][ T1225] bus_probe_device+0x12a/0x220 [ 149.085662][ T1225] device_add+0x7e9/0xbb0 [ 149.090205][ T1225] usb_set_configuration+0x1a87/0x2110 [ 149.095989][ T1225] usb_generic_driver_probe+0x8d/0x150 [ 149.102064][ T1225] usb_probe_device+0x1c4/0x3b0 [ 149.107261][ T1225] ? __pfx_usb_probe_device+0x10/0x10 [ 149.113104][ T1225] really_probe+0x267/0xaf0 [ 149.117817][ T1225] __driver_probe_device+0x1ef/0x380 [ 149.123409][ T1225] driver_probe_device+0x4f/0x240 [ 149.128725][ T1225] __device_attach_driver+0x279/0x430 [ 149.134377][ T1225] bus_for_each_drv+0x258/0x2f0 [ 149.139592][ T1225] ? __pfx___device_attach_driver+0x10/0x10 [ 149.147135][ T1225] ? __pfx_bus_for_each_drv+0x10/0x10 [ 149.153250][ T1225] ? _raw_spin_unlock_irqrestore+0x74/0x80 [ 149.159803][ T1225] __device_attach+0x2c5/0x450 [ 149.165328][ T1225] ? __pfx___device_attach+0x10/0x10 [ 149.171460][ T1225] ? _raw_spin_unlock+0x28/0x50 [ 149.177041][ T1225] device_initial_probe+0xa1/0xd0 [ 149.182533][ T1225] bus_probe_device+0x12a/0x220 [ 149.187801][ T1225] device_add+0x7e9/0xbb0 [ 149.192348][ T1225] usb_new_device+0xa08/0x16f0 [ 149.197771][ T1225] ? __pfx_usb_new_device+0x10/0x10 [ 149.203345][ T1225] ? _raw_spin_unlock_irq+0x23/0x50 [ 149.208646][ T1225] hub_event+0x2a1c/0x4f30 [ 149.213194][ T1225] ? __pfx_hub_event+0x10/0x10 [ 149.218268][ T1225] ? process_scheduled_works+0xa70/0x1860 [ 149.224549][ T1225] ? process_scheduled_works+0xa70/0x1860 [ 149.231261][ T1225] ? process_scheduled_works+0xa70/0x1860 [ 149.237717][ T1225] process_scheduled_works+0xb5d/0x1860 [ 149.244439][ T1225] ? __pfx_process_scheduled_works+0x10/0x10 [ 149.251364][ T1225] ? assign_work+0x3d5/0x5e0 [ 149.256685][ T1225] worker_thread+0xa53/0xfc0 [ 149.262122][ T1225] kthread+0x388/0x470 [ 149.266864][ T1225] ? __pfx_worker_thread+0x10/0x10 [ 149.273224][ T1225] ? __pfx_kthread+0x10/0x10 [ 149.278020][ T1225] ret_from_fork+0x514/0xb70 [ 149.283764][ T1225] ? __pfx_ret_from_fork+0x10/0x10 [ 149.290420][ T1225] ? __switch_to+0xc79/0x1410 [ 149.295828][ T1225] ? __pfx_kthread+0x10/0x10 [ 149.300890][ T1225] ret_from_fork_asm+0x1a/0x30 [ 149.306910][ T1225] [ 149.311152][ T1225] Kernel Offset: disabled [ 149.318995][ T1225] Rebooting in 86400 seconds..