last executing test programs: 8.229828127s ago: executing program 0 (id=7971): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) write$tun(r3, &(0x7f0000000200)={@void, @val={0x1, 0x3, 0x8, 0x6ed, 0x19, 0xc}, @ipv4=@gre={{0x5, 0x4, 0x1, 0x14, 0x5a, 0x66, 0x0, 0xd, 0x2f, 0x0, @loopback, @multicast2}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x0]}, {0x8, 0x88be, 0x2, {{0x4, 0x1, 0x28, 0x1, 0x1, 0x0, 0x2, 0x8}, 0x1, {0x2}}}, {0x8, 0x22eb, 0x1, {{0x7, 0x2, 0x5, 0x1, 0x0, 0x1, 0x3, 0x1}, 0x2, {0x2, 0x2, 0x1, 0x6, 0x1, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x3}}}}, 0x64) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffff4, &(0x7f0000000000)={&(0x7f0000000180)={0x4c, 0x0, 0x100, 0x70bd28, 0xfffffffc, {0x4f}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x11, 0x2}}]}, 0x29}}, 0x20000011) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'wg1\x00', 0x800}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 7.580574037s ago: executing program 0 (id=7976): syz_emit_ethernet(0xfdef, &(0x7f0000000140)={@random="5b1a033f2511", @remote, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x4578, 0x0, 0x4000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x10, 0x0, 0x0, "fdcdae25a7a296872a8a5290e48e30acf8afc7e67d70a62c979cefa10a0028bd", "ae0000000000000000e400", {"35f3c07eeca4a20a9858ac1500", "63081fe8fe001a08ed082ad7121d696f"}}}}}}}, 0x0) (fail_nth: 3) 7.437870376s ago: executing program 0 (id=7977): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x101640, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x1, &(0x7f0000000280), 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000001340)) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200400d0}, 0x0) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e7cc6120c4108a81ad7d0102030109021b00010000c005090423000103"], 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000dc0)={0x44, &(0x7f0000000bc0)=ANY=[@ANYBLOB="000300000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$inet(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x4e20, @empty}, 0x10) r9 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r8, &(0x7f0000000380)={0x2, 0xe24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000140)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000180)={0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r11, 0xc00c642d, &(0x7f0000000340)={r12}) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) r15 = ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r15, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x6e0, 0x0, 0x6}]}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x0, 0x637878ef3c49d253}, {}, {0x8, 0xa}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_gact={0x54, 0x18, 0x0, 0x0, {{0x9}, {0x28}, {0x4}, {0x70, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x24000010}, 0x20000000) socket$kcm(0x11, 0x3, 0x0) 5.716660461s ago: executing program 0 (id=7997): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) r1 = openat$vim2m(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f0000000180)={0x2, @vbi={0x7fff, 0x5, 0x3, 0x32314247, [0x8, 0x587], [0x2, 0x4], 0x1}}) (async) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x880) (async) r3 = socket$packet(0x11, 0x2, 0x300) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x5, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3569], &(0x7f0000000140)='GPL\x00', 0x0, 0x63}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040)=r4, 0x4) r5 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) (async) sendto$inet6(r5, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0) (async) write$P9_RAUTH(r2, &(0x7f0000000180)={0x14, 0x67, 0x2, {0x10, 0x4}}, 0x14) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x2, 0x5, 0x0, 0x9, 0xb, 0x0, 0x70bd27, 0x0, [@sadb_address={0x5, 0x6, 0x6c, 0x0, 0x0, @in6={0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00', 0xd}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x43, 0xb}, @sadb_x_sa2={0x2, 0x13, 0x8, 0x0, 0x0, 0x70bd25}]}, 0x58}, 0x1, 0x7}, 0x4) (async) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) (async) write$sndseq(r8, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8) (async) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r8, 0x4040534e, &(0x7f0000000180)={0x92, @time={0xffffff3f, 0x1000000}}) (async) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x80) r12 = socket(0x400000000010, 0x3, 0x0) r13 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd24, 0x25dfdc00, {0x0, 0x0, 0x0, r14, {0x4, 0xa}, {}, {0x8, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_POLICE={0x4}, @TCA_BPF_FD={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x80) syz_usb_connect(0x1, 0x904, &(0x7f0000000080)=ANY=[@ANYRESOCT=r0, @ANYRES8=r0, @ANYRES8=r2], 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) 5.329765171s ago: executing program 1 (id=7991): syz_open_dev$tty1(0xc, 0x4, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndpcmc(0x0, 0x3, 0x8800) r2 = add_key$fscrypt_v1(&(0x7f0000000040), 0x0, &(0x7f00000000c0)={0xfffffe00, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) r3 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000440)={'fscrypt:', @desc3}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd79601c103a4c6a7ef54e6763fd7264c39ea00c508ba606269613800", 0x4}, 0x68, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, 0x0, r2, r3, 0x1) r4 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r4, &(0x7f0000000100)={0x2, 0x4e22, @broadcast}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x23, 0x3, 0xffffffff) modify_ldt$write2(0x11, &(0x7f0000000000)={0x6, 0x20001000, 0xffffffffffffbfff, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10) r5 = openat$sysctl(0xffffff9c, 0x0, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81e8943c, &(0x7f0000000780)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000080)={{r6, 0x8, 0x1, 0x10000, 0xfffffffffffffff8, 0xc0000000, 0x7, 0xd268, 0x5, 0x9, 0x3, 0xffffffff, 0x1, 0x2, 0x3}, 0x8, [0x0]}) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500000004000000040000000400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000010000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ffffc}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0xb0ff}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x4, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x5, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}, {0x85, 0x0, 0x17, 0xcb}}}, &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.265496202s ago: executing program 1 (id=7994): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@ack={0x1e, 0x4, 0x4a}]}}}}}}}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x80) ioctl$BLKZEROOUT(r2, 0x127f, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = socket$kcm(0x10, 0x3, 0x10) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x3}, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000800)=@delchain={0x468, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x8}, {0x0, 0x1}, {0x0, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x42c, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x9c, 0x1, [@m_simple={0x38, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0x60, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x2d, 0x6, "726786f30e509174574dc37f3b098ea66afe225634df06865f963558e69516e656d1b4d3ec4c23aaed"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_ACT={0x35c, 0x1, [@m_ctinfo={0xd4, 0x4, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x53}, @TCA_CTINFO_ACT={0x18, 0x3, {0x2, 0x7f, 0x10000000, 0x830}}]}, {0x86, 0x6, "c14309d56e11f3e88ad36b866a06cff47631fe31f29c2d83a2e6f0bf13045227d5cfc3c4f57b9a903cf86c567461f60a0fb69f562613042765a016443f0181bfeba7e917511c20f8585f40c15cc948ecdd08e5acfddde4c4d1eeb8e4156045960e71ed491970a569097578137069861cf0a28baddf976ebf5e96eca138cadcea7bfb"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4, 0x2}}}}, @m_skbmod={0x90, 0x4, 0x0, 0x0, {{0xb}, {0x60, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="7d04a5219f97"}]}, {0x5, 0x6, "cc"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_nat={0x178, 0x1b, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xff, 0x1, 0xffffffffffffffff, 0x0, 0xefb}, @loopback, @empty, 0xffffff00, 0x800}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x4, 0x6, 0x8, 0x9}, @local, @dev={0xac, 0x14, 0x14, 0x1c}, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x357a, 0x9, 0x7, 0x101, 0x5}, @broadcast, @remote}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5f2, 0x40, 0x5, 0x1, 0x1}, @broadcast, @remote, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x7, 0x20000000, 0x7, 0x59c3}, @loopback, @loopback, 0xff}}]}, {0x85, 0x6, "eef24a41a52f4314740d880a9749ccbff0e34c74cfcac1e63977a597552daff459d49bffeac63ea994857207934fd2d00f52f25f0f3d8c80b3a218a170d8b1961a361663d049269537cb537e3789e52bb3db1eec99b6cdd8dd022491e57495f8bd3687340df10a1e43f1a2790d3910c094f2c7203385622c8498933c3e883b83b3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_sample={0x7c, 0xc, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x7ff}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x9}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0x5, 0x5, 0x5, 0x8}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x6}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x6}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xc00}]}, {0x8, 0x6, "2ff4fb63"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x468}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90324fc60180c02400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 4.133459491s ago: executing program 1 (id=7996): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x524, 0x3b0, 0x30c, 0xfeffffff, 0x30c, 0x228, 0x490, 0x490, 0xffffffff, 0x490, 0x490, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0xff, 0x0, 'wg2\x00', 'caif0\x00', {0xff}, {}, 0x6, 0x3}, 0x0, 0x1f4, 0x228, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'pim6reg0\x00', {0x8000000000000001, 0x7fffffff, 0x4b, 0x8, 0x22453, 0x40, 0x2, 0x7fffffff, 0x20}, {0x100}}}, @common=@addrtype={{0x2c}, {0x60, 0x200, 0x0, 0x1}}]}, @SNAT0={0x34, 'SNAT\x00', 0x0, {0x1, {0x4, @private=0xa010101, @empty, @icmp_id=0x67, @icmp_id=0x66}}}}, {{@uncond, 0x100000, 0xb0, 0xe4, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x88, 0x20, 0x5, 0xb601, 0x7], 0x1}}}]}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1, {0xc, @private=0xa010101, @private=0xa010100, @port=0x4e22, @gre_key=0x8001}}}}, {{@ip={@local, @rand_addr, 0x0, 0xff000000, 'lo\x00', 'ip6tnl0\x00', {0xff}, {}, 0x5e}, 0x0, 0x70, 0xa4}, @NETMAP={0x34, 'NETMAP\x00', 0x0, {0x1, {0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e21, @port=0x1}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x1f}, 0xffffffff, 0x0, 'gretap0\x00', 'wlan0\x00', {}, {}, 0x5c, 0x0, 0x8}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x7ff}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@empty, @ipv6=@dev={0xfe, 0x80, '\x00', 0x2d}, @port, @port=0x4e32}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x580) 4.012987359s ago: executing program 1 (id=7999): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000280)={0x7, @pix={0xfffffffe, 0xa, 0x32525942, 0x4, 0x6, 0x50, 0x8, 0xffff, 0x1, 0x7, 0x2, 0x5}}) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x7, "a4"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)={0x0, 0x14, 0xd, "5e6424818327b2369deca65eb2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000240), 0xa000, 0x0) readv(r2, &(0x7f0000002540)=[{&(0x7f0000000280)=""/34, 0x22}, {0x0, 0x18}], 0x2) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000009, 0x11, r2, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac1(0x2, 0x0, 0x0, 0x0) r3 = socket(0x22, 0xa, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r5, 0x0, r4, 0x0, 0x6, 0x0) sendmsg$IPSET_CMD_LIST(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000000706030000003c5d06440000070000df04000100070000000900020073797a3100000000"], 0x28}, 0x1, 0x0, 0x0, 0x8081}, 0x8000) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xb, 0x7}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_route={{0xa}, {0x38, 0x2, [@TCA_ROUTE4_ACT={0x34, 0x6, [@m_csum={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4, 0x3f0f}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x4000010) recvmsg(r3, &(0x7f0000000380)={&(0x7f0000000180)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000200), 0x2}, 0x10040) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000600)=ANY=[@ANYBLOB="200e06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9f, 0x18, 0x76, 0x20, 0x17ef, 0x7203, 0x2e36, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xbc, 0x0, 0x2, 0x9e, 0x88, 0x33, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x20, 0x0, 0x0, 0x3}}]}}]}}]}}, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) r9 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0x44, 0x24, 0xd0f, 0x72bd2d, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0xb}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x44}}, 0x24044092) syz_usb_control_io$rtl8150(r8, &(0x7f0000000500)={0xc, &(0x7f0000000400)={0x20, 0x1, 0x51, {0x51, 0x24, "0a65af53ee437aad8cc67b1429e3460ec5200aa44794b9c9f317b012dab551231b3337702bc4796bfb878c0037ceb19e54f72cb9cee625a7dd975620c9a315f59454a454c355646fb758ffdd59ff70"}}, &(0x7f0000000480)={0x0, 0x3, 0x8, @string={0x8, 0x3, "96a39c5135fc"}}}, &(0x7f0000000780)={0x18, &(0x7f0000000640)={0x6ede35a7ac9006ff, 0x1f, 0x7d, "5a3a355edfd47ccf1f50768a0ddf70fcb95f7ee1c99b3d3af96db86ff74d1049c3c6ce33ae1d28e32d7efb4ed48b582643c1fb96f81feb5888ca7adfb5b06fc4f74d6daceebb0cc672e87870473c8bef517e949a861769af51c1f6960f53e499104b42748a6f63f6ceed2dc7566b22c93b9e9424b8e0e8cab4f0b89664"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000700)={0xc0, 0x5, 0x4, "a6f60f51"}, &(0x7f0000000740)={0x40, 0x5, 0x3, "683710"}}) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) 3.417405393s ago: executing program 4 (id=8008): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@ack={0x1e, 0x4, 0x4a}]}}}}}}}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x80) ioctl$BLKZEROOUT(r2, 0x127f, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = socket$kcm(0x10, 0x3, 0x10) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x3}, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000800)=@delchain={0x468, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x8}, {0x0, 0x1}, {0x0, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x42c, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x9c, 0x1, [@m_simple={0x38, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0x60, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x2d, 0x6, "726786f30e509174574dc37f3b098ea66afe225634df06865f963558e69516e656d1b4d3ec4c23aaed"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_ACT={0x35c, 0x1, [@m_ctinfo={0xd4, 0x4, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x53}, @TCA_CTINFO_ACT={0x18, 0x3, {0x2, 0x7f, 0x10000000, 0x830}}]}, {0x86, 0x6, "c14309d56e11f3e88ad36b866a06cff47631fe31f29c2d83a2e6f0bf13045227d5cfc3c4f57b9a903cf86c567461f60a0fb69f562613042765a016443f0181bfeba7e917511c20f8585f40c15cc948ecdd08e5acfddde4c4d1eeb8e4156045960e71ed491970a569097578137069861cf0a28baddf976ebf5e96eca138cadcea7bfb"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4, 0x2}}}}, @m_skbmod={0x90, 0x4, 0x0, 0x0, {{0xb}, {0x60, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="7d04a5219f97"}]}, {0x5, 0x6, "cc"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_nat={0x178, 0x1b, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xff, 0x1, 0xffffffffffffffff, 0x0, 0xefb}, @loopback, @empty, 0xffffff00, 0x800}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x4, 0x6, 0x8, 0x9}, @local, @dev={0xac, 0x14, 0x14, 0x1c}, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x357a, 0x9, 0x7, 0x101, 0x5}, @broadcast, @remote}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5f2, 0x40, 0x5, 0x1, 0x1}, @broadcast, @remote, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x7, 0x20000000, 0x7, 0x59c3}, @loopback, @loopback, 0xff}}]}, {0x85, 0x6, "eef24a41a52f4314740d880a9749ccbff0e34c74cfcac1e63977a597552daff459d49bffeac63ea994857207934fd2d00f52f25f0f3d8c80b3a218a170d8b1961a361663d049269537cb537e3789e52bb3db1eec99b6cdd8dd022491e57495f8bd3687340df10a1e43f1a2790d3910c094f2c7203385622c8498933c3e883b83b3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_sample={0x7c, 0xc, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x7ff}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x9}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0x5, 0x5, 0x5, 0x8}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x6}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x6}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xc00}]}, {0x8, 0x6, "2ff4fb63"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x468}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90324fc60180c02400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 3.232878629s ago: executing program 3 (id=8010): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x80, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x54, 0x3, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x44, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x10}]}}}, {0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x104}}, 0xffffffef) 3.206681681s ago: executing program 4 (id=8011): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x9c, 0x0, 0x5d, 0xfffffffc, 0xffffffff, 0x2000400000, 0x0, 0xfffffdffffffffff, 0xfa0e, 0x7fffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) setitimer(0x0, &(0x7f0000000040)={{}, {0x0, 0x1}}, 0x0) r3 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, 0xffffffffffffffff, 0x0) ptrace(0x10, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, 0x0, 0x0) writev(r5, 0x0, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, 0x0, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r7, &(0x7f00000000c0)={0x1d, r8}, 0x10) sendmsg$can_bcm(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="0100000040fc51c64400000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x80}}, 0x0) sendmsg$can_bcm(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}, 0x1, 0x0, 0x0, 0x400}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00000020000000001b0000000000000041ab0b66e79f12de2cf3c0bb1592d406bfd24dc614ac8917a1f853eef21c3e2f981c0aff5faf6c35d1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) 3.152866068s ago: executing program 3 (id=8012): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x80000001, @empty, 0x5}, @in6={0xa, 0x4e20, 0x8, @empty, 0x4}], 0x38) timer_create(0xfffffffffffffffc, &(0x7f0000000140)={0x0, 0x7}, &(0x7f0000001400)) timer_settime(0x0, 0x1, &(0x7f0000000500)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1, 0xa}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000000c0)=""/47, &(0x7f0000000040)=0x2f) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000200)="66b80e0165dfb0f5ff0000b0060f21a20f01c40f009b270000000f01cb8ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f72328fe858b660002fb90d090000b8000000ba000000000f30", 0x67}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newlink={0x30, 0x10, 0x1, 0x70bd2c, 0x20, {0x0, 0x0, 0x0, 0x0, 0xdf15003157970113, 0x8084}, [@IFLA_GROUP={0x8, 0x1b, 0x2}, @IFLA_GROUP={0x8, 0x1b, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000084}, 0x800) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x18, 0x3f9, 0x100, 0x70bd26, 0x25dfdbfc, {0x1, 0x1}, ["", "", "", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0xd0) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x4008, r4}, 0x14) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, r6, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) 2.747436563s ago: executing program 2 (id=8013): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9, 0x0, 0x102}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x29, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 2.741821062s ago: executing program 3 (id=8014): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000009440)=[{{&(0x7f0000000540)={0xa, 0x4e24, 0x200, @loopback}, 0x1c, &(0x7f00000006c0), 0x0, &(0x7f0000000700)=[@hoplimit={{0x10, 0x29, 0x34, 0x2}}, @dstopts={{0x14, 0x29, 0x37, {0x87}}}, @dstopts_2292={{0x2c, 0x29, 0x4, {0x29, 0x2, '\x00', [@hao={0xc9, 0x10, @loopback}]}}}], 0x50}}, {{&(0x7f0000000900)={0xa, 0x4e24, 0x7, @loopback, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1400000029000000360000e41500000000000000"], 0x48}}], 0x2, 0x2004000) 2.554396174s ago: executing program 2 (id=8015): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x20000, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fcntl$setpipe(r2, 0x407, 0xffffffff) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000a0000004200000040"], 0x50) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r3 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r3) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000001c0)=0x0) sched_setattr(r6, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) syz_io_uring_setup(0x15c0, &(0x7f0000000300)={0x0, 0xe3d6, 0x2, 0x3, 0x145}, &(0x7f0000000100), &(0x7f0000000380)) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc0fc4110, &(0x7f00000003c0)={0x9, [0x6, 0x9, 0xffff], [{0xffffff7f, 0x200, 0x1, 0x0, 0x1}, {0x81, 0x7, 0x0, 0x1, 0x0, 0x1}, {0x7b, 0x8, 0x0, 0x0, 0x1, 0x1}, {0x2, 0x5}, {0x5, 0xa89}, {0x80000000, 0x8}, {0x100, 0x8, 0x1, 0x1, 0x1}, {0x1cee, 0xe, 0x0, 0x0, 0x1, 0x1}, {0x192a, 0x6, 0x0, 0x0, 0x1}, {0xc, 0x9, 0x1, 0x1, 0x1, 0x1}, {0x8, 0x9, 0x1}, {0x9281, 0x706b, 0x1, 0x1, 0x1, 0x1}], 0x8}) rename(&(0x7f0000000580)='./file0\x00', &(0x7f0000000780)='./file2\x00') r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) r9 = landlock_create_ruleset(&(0x7f0000000040)={0xa, 0x3}, 0x18, 0x0) landlock_restrict_self(r9, 0x0) fsopen(&(0x7f0000000080)='jffs2\x00', 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 2.554200797s ago: executing program 3 (id=8016): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000200)={0x49a00000, 0x9, 0x3, "1b0710000000000000fff4dd40073407b95d1faec8f20000000014efff000002", 0x32435750}) (fail_nth: 3) 2.402635477s ago: executing program 0 (id=8017): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x4, 0x0, 0x3}, 0x0) fsopen(&(0x7f0000000000)='overlay\x00', 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$kcm(0x2, 0x1, 0x84) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_spirange={0x2, 0x10, 0x0, 0xffffffff}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @rand_addr=0x64010101}}]}, 0x50}}, 0x0) sendmsg$inet(r4, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r4, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) 1.901058388s ago: executing program 3 (id=8018): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d0000000080211000301080211000000505050505050"], 0x3c}}, 0x10) 1.736002667s ago: executing program 3 (id=8019): sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="f21443c7871a12058fec31d2ca8e1b6f64ab0e87febb408ab9a71be779799afc02874c53af226df1546d2e3ad4e1617c1f8e898cae426148afa4fd035c637b29309b2ba1d5e8047629845d59ba81e8e5f59291999d13e94fb2f4b6ede5f0ab30ffebcd6f9bfeeb6faa56073c5532fe46c46dd3", 0x73, 0x4000, &(0x7f0000000080)={0xa, 0x4e22, 0x7fffffff, @local}, 0x1c) r0 = openat$sw_sync_info(0xffffff9c, &(0x7f00000000c0), 0x101080, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000100)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r1, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000240)={0xc, &(0x7f00000001c0)={0x0, 0x22, 0x19, {0x19, 0x22, "a1c377326e6a1bca975670f6ad68677177a79a7235d2ed"}}, &(0x7f0000000200)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000340)={0x10, &(0x7f0000000280)={0x0, 0x16, 0x2, "172f"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0xaa}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x1}}) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000380)=0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000003c0)={@multicast1, @rand_addr=0x64010102, 0x0, 0x5, [@broadcast, @rand_addr=0x64010100, @remote, @broadcast, @remote]}, 0x24) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, &(0x7f0000000440)={0x20, r2, &(0x7f0000000400)=[{0x0, 0x3}, {0x0, 0x1}], 0xdeadbeef, 0x8, 0x2}) socket$nl_route(0x10, 0x3, 0x0) fsetxattr$trusted_overlay_opaque(r3, &(0x7f0000000480), &(0x7f00000004c0), 0x2, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000500)=0x4, 0x4) r4 = syz_usb_connect$uac1(0x0, 0xf1, &(0x7f0000000540)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdf, 0x3, 0x1, 0xf8, 0x70, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x3}, [@processing_unit={0x9, 0x24, 0x7, 0x5, 0x1, 0xcb, '*+'}, @mixer_unit={0x7, 0x24, 0x4, 0x5, 0xf, '$Y'}, @feature_unit={0x13, 0x24, 0x6, 0x1, 0x3, 0x6, [0x1, 0xa, 0x9, 0x499b35acf81cbbe0, 0x4, 0xa], 0x3}, @mixer_unit={0xb, 0x24, 0x4, 0x6, 0x2, "efd9e12e0817"}, @extension_unit={0x9, 0x24, 0x8, 0x4, 0x3, 0x7, "34d3"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0xff, 0x5, 0xca, "ff"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x5, 0x8, 0xe, {0x7, 0x25, 0x1, 0x81, 0x4, 0x3150}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x7, 0x3, 0x7f, 0x0, "af2d2fd6"}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x0, 0x3, 0x5, 0x5, "814d68", "c077d3"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x1, 0x4, 0x0, 0x5}, @as_header={0x7, 0x24, 0x1, 0x1, 0x40, 0x1001}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x2d, 0x1, 0x2, 0x0, "e4", '\b'}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0xfa, 0x1, 0x3, 0x40, "d71daf46"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x2, 0x9, 0x7, {0x7, 0x25, 0x1, 0x0, 0x2, 0x8}}}}}}}]}}, &(0x7f0000000a80)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x300, 0x3, 0x8, 0xfe, 0x20, 0x8}, 0x3a, &(0x7f0000000680)={0x5, 0xf, 0x3a, 0x4, [@wireless={0xb, 0x10, 0x1, 0x8, 0x80, 0x5, 0xe, 0xf, 0x1}, @wireless={0xb, 0x10, 0x1, 0x8, 0xa56e2ce25cae5b11, 0x81, 0x3, 0xffec, 0xfe}, @ss_container_id={0x14, 0x10, 0x4, 0x41, "742f2daef0d91022477560f512d76f6a"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x9, 0xa, 0x10, 0x5, 0x40}]}, 0x8, [{0x9c, &(0x7f00000006c0)=@string={0x9c, 0x3, "b3a7155608c6e5bf8add07fa0e3886ed4e9897a6659d65daa96daa1ae964950fa91257fabb5b89aec54e7a4b7f623d073742dd96c3e737c7b49464ea02c1b749a84e99b4c622fb2103a32c423d939bca42b3848ea7330aa65da6e1c2dcc002e6a15a06998b1d4adc3026f64cc665c2b68ca21b663f22ea70d8944a237c27e0f7dd3c3bd93fc41d84a2635371994629bfba57ea1752730cd41bf0"}}, {0x27, &(0x7f0000000780)=@string={0x27, 0x3, "840c5d98631cad0cc894cb2c620ac86e6838eabad2e761e7460645f471a36cd6d09de4cf5f"}}, {0xbb, &(0x7f00000007c0)=@string={0xbb, 0x3, "aa98e7da93d582f79585c4a645ffa9e2ea45662dea045e7c07636a94ceb9b46c565e541685399b6b2d0287ca2c9206c990f2ff77290be7fd77ed828ea8f89dca7e726148190e66e2c3c8d6b32bedf46db62f6a8e0fb363e94e345c68f228b205360d142e22ed1c6e77bc1f72f5954d72df58c0a68b00feb03409be056ea249932885d60922e5e417bf1c2698286c003767cd5472313a95300ebfda8dca9f0486d9c3b1f61c2c03cae67f63230e0c722ad16cf612d79a45efe0"}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x412}}, {0x16, &(0x7f00000008c0)=@string={0x16, 0x3, "30fcaa918cf81afd87145888861ea439e374901c"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x440a}}, {0xda, &(0x7f0000000940)=@string={0xda, 0x3, "f596eadfc01f292b090cb8eda5e657a21175df9e61342d8f21282448e29c06191b21be1191c590d45e09024a5f73e8a5940990c28360954eee394065706ca519156e7085e9ad8168968521dd5770114d85b8876c545b1e527d3352dc51deb563b5f7ac22686ba24cf89bbe4b503aafce4ea18cbb470b7d33fb8a82f1a03787fc689ce3de5b6820d6aa5eaf296e406292cd4f673b3a7f52fa443c0560d6d69fb56724cce64d531bc11d9881f846e71b708dc499edd04d594516cb66317da1ee52c0c144d44e8169c0837fa75681f26704de30476dcbe081c2"}}, {0x23, &(0x7f0000000a40)=@string={0x23, 0x3, "5dde6a9520ef20e6419139d74d262318ec707098eb5452701bfe6c49d6a068973c"}}]}) syz_usb_control_io(r4, &(0x7f0000000d40)={0x18, &(0x7f0000000b00)={0x20, 0x30, 0x75, {0x75, 0x16, "04a27e419cd5eb2799ef46adca3faf21bff18af3b508350eed70cc3b463d239f38052a376de3341ca7bf0ea8902a7cc3dfb2ed315e0efa71660574f41e85f9057dd9e150e5e9771dc9878a67ed24c3b2c5fc6afbeb1ec5d54272eadc6b1d87a5002579e689664f1d8e75c9814e28379fe16ae7"}}, &(0x7f0000000b80)={0x0, 0x3, 0xd6, @string={0xd6, 0x3, "c69cde0dc943f827f4cfe92ba37dc0741abd2847c3cf8c69dd69455a244310593b18380a1b10a03e84e5ef0026e207dfb33b09dfa11a5d6a955c09ef2cd3e401e4530fb7db1049a9a56d3aeb45768fb9fcef39d0926acbf32bdc7579b0c7724290e90c56e529868eb903c1702b5c9301e38308f2c700bfa9dbb3ec7576ba97604755c70ef82de096a4fad6090433e8cfa1aa12900e89ce93a32e74eb38aeac856d88d0810377c810445faf9623b2b2c69be68bc9c35a96ac2556a9631be17450a183aca0118a6b6f63d548d7101f2d239c6f112d"}}, &(0x7f0000000c80)={0x0, 0xf, 0xc, {0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x5, 0x7, 0xb}]}}, &(0x7f0000000cc0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x80, 0x2, 0xd0, "94ddb8f6", "edbe4ac7"}}, &(0x7f0000000d00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x700f8b098cc9687e, 0x0, 0xfd, 0xa, 0x8, 0x101}}}, &(0x7f00000011c0)={0x44, &(0x7f0000000d80)={0x0, 0x13, 0x6d, "8412aec58bd04152e467fdf9ecce873b04d88eb1bee14950ac3c72bca1267ff5e2b3412c3e3069416aa89301415ffd1b8d03ad828e4e2c11a2ff47c75b5efba9ec47fa4e6e2444a1aefc9b75304ac43b0121cbd46e657920489a822b1e77d0136a91b41d0b676c683829c41e94"}, &(0x7f0000000e00)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000e40)={0x0, 0x8, 0x1, 0xe9}, &(0x7f0000000e80)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000ec0)={0x20, 0x0, 0x8, {0x100, 0x4, [0xf00]}}, &(0x7f0000000f00)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000f40)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000f80)={0x40, 0xb, 0x2, "428b"}, &(0x7f0000000fc0)={0x40, 0xf, 0x2, 0x3ff}, &(0x7f0000001000)={0x40, 0x13, 0x6, @local}, &(0x7f0000001040)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000001080)={0x40, 0x19, 0x2, "a47a"}, &(0x7f00000010c0)={0x40, 0x1a, 0x2, 0x65d}, &(0x7f0000001100)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000001140)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000001180)={0x40, 0x21, 0x1, 0x9}}) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000001240)={0x0, 0x80000001}, &(0x7f0000001280)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f00000012c0)={r5, 0x4a9b80}, 0x8) getsockopt$inet6_int(r3, 0x29, 0x35, &(0x7f0000001300), &(0x7f0000001340)=0x4) syz_usb_connect$uac1(0x5, 0xd5, &(0x7f0000001380)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc3, 0x3, 0x1, 0x0, 0x50, 0xbb, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfffd, 0xe}, [@feature_unit={0xd, 0x24, 0x6, 0x4, 0x3, 0x3, [0x7, 0x9, 0x9], 0x80}, @feature_unit={0x13, 0x24, 0x6, 0x6, 0x3, 0x6, [0x2, 0x5, 0x1, 0x3, 0x4, 0x7], 0x3}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x305, 0x6, 0x4}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x200, 0x5, 0xd, 0x7, 0x7, 0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0x3, 0x1801}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x54, 0x1, 0xf, 0x21, "2ceaed0beddca9"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x9, 0x1, 0x8, 0x10, "e9", "0ab5"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x58, 0x9, 0x3, {0x7, 0x25, 0x1, 0x0, 0x1c, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0xfffa, 0xaa, 0x0, "a6976af226"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x9, 0x9, 0xff, {0x7, 0x25, 0x1, 0x0, 0x2, 0x7ff}}}}}}}]}}, &(0x7f00000016c0)={0xa, &(0x7f0000001480)={0xa, 0x6, 0x201, 0xb0, 0xae, 0xf, 0xff, 0x3}, 0x82, &(0x7f00000014c0)={0x5, 0xf, 0x82, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "eb283090dc55c75e816e64a681556ec1"}, @ss_container_id={0x14, 0x10, 0x4, 0xdd, "e7197955bd753f525e0d0d48e032eab1"}, @ssp_cap={0x14, 0x10, 0xa, 0x1, 0x2, 0x568c, 0xff00, 0x3ff, [0xff3f00, 0xa000]}, @generic={0x41, 0x10, 0x1, "19db761872ecd572f7153b660d23ce79fd34ef964f2cc44c6d31f10364b665add867e1100942ced8aa36dd51bd7a07b8f32a71be133661950ec175f53187"}]}, 0x5, [{0x4, &(0x7f0000001580)=@lang_id={0x4, 0x3, 0x82c}}, {0x4, &(0x7f00000015c0)=@lang_id={0x4, 0x3, 0x401}}, {0x4, &(0x7f0000001600)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000001640)=@lang_id={0x4, 0x3, 0x2809}}, {0x4, &(0x7f0000001680)=@lang_id={0x4, 0x3, 0x40b}}]}) r6 = openat$cgroup_ro(r0, &(0x7f0000001700)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, &(0x7f00000017c0)={0xc, &(0x7f0000001740)={0x20, 0x21, 0x5, {0x5, 0x22, "72ab2a"}}, &(0x7f0000001780)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x427}}}, &(0x7f0000001a00)={0x1c, &(0x7f0000001800)={0x0, 0xe, 0x7f, "79e58edfac95bde16e120ae68c56b1b84b3a074dbc8bb3a15e43739454e40a2ba38faaf954462669f83227420c571c554760849b37d84ae74420bae808d166ed37791459918540f500dca28bae52d4da97ac3adc0dbfeaacd4be9f980bd31ea8214fd5db1b0b2c8e429f421b6f897ad5728c86a6d880ed9c2f2058d43041f9"}, &(0x7f00000018c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000001900)={0x0, 0x8, 0x1, 0xe}, &(0x7f0000001940)={0xc0, 0xa1, 0x4, 0xa}, &(0x7f0000001980)={0x40, 0xa0, 0x4, 0x40000}, &(0x7f00000019c0)={0xc0, 0xa2, 0x2f, "8e698d6f9699088557657f1bc530d7eb4b9e9a77ff261ca63859cffb0126491d0647a2f388652d4a0450d614fe5a96"}}) r7 = ioctl$KVM_GET_STATS_FD_vm(r0, 0xaece) ioctl$SNDRV_TIMER_IOCTL_START(r7, 0x54a0) syz_usb_control_io$uac1(r4, &(0x7f0000001b40)={0xc, &(0x7f0000001a40)={0x40, 0x2, 0x94, {0x94, 0x8, "98385646cc58ee76fe14bef660acd13aa14326ef50c0cfdba5cd9d855d96a73789c879acde78c642ffec236faa81048bcc823b1802db499b40e84cd2fb65bb36b54badccc8b59faea3a2294daf53bb5bf84cc19911c5870d964dc273c7cb29980ceb8c3a1acc328c07a9509d463fe092e78c624d0c509b296fabe98a651e4705b064c427ca2d01c476acf250772c15b343a4"}}, &(0x7f0000001b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x810}}}, &(0x7f0000001dc0)={0x24, &(0x7f0000001b80)={0x40, 0x10, 0x6e, "0241d4ccd3a3471c6fdb1bd34919a5df0c4e03be8a70e9f73c570d457c9d75fe5b39b45573663ff6961f4e68073bc2d7c177c88d639f679742b2e4ecb6aa2183bf1b06307717dd26dbd1d69e24c3f76618b35369674509858a49e5115d3c12d53be8786956d8be1c3ecb135acfba"}, &(0x7f0000001c00)={0x0, 0xa, 0x1, 0xf2}, &(0x7f0000001c40)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000001c80)={0x20, 0x81, 0x3, "ae86ca"}, &(0x7f0000001cc0)={0x20, 0x82, 0x2, "8f09"}, &(0x7f0000001d00)={0x20, 0x83, 0x2, "e836"}, &(0x7f0000001d40)={0x20, 0x84, 0x1, 'K'}, &(0x7f0000001d80)={0x20, 0x85, 0x3, "5e87d5"}}) getsockname$packet(r7, &(0x7f0000001e00)={0x11, 0x0, 0x0}, &(0x7f0000001e40)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000001e80)={@empty, 0x27, r8}) ioctl$IOMMU_DESTROY$ioas(r6, 0x3b80, &(0x7f0000001ec0)={0x8, r1}) socket$nl_netfilter(0x10, 0x3, 0xc) getsockname$packet(r0, &(0x7f0000001f00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001f40)=0x14) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000002000)={0x0, 0x1c5}, &(0x7f0000002040)=0x8) 1.359072229s ago: executing program 4 (id=8020): setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="700000001000010028bd700000000000000000c3", @ANYRES32=0x0, @ANYBLOB="6cf2040000000000140003006e657464657673696d3000000000000034001680300001802c000c"], 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x40) 1.229564801s ago: executing program 4 (id=8021): syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6087fb8900180000fe880000000000000000000000000001fc026d0a0020000000000000000006000001fd6c"], 0x0) 1.137346496s ago: executing program 2 (id=8022): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000050000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974"], 0xdc}}, 0x0) 1.097292016s ago: executing program 4 (id=8023): syz_open_procfs(0x0, &(0x7f0000000000)='smaps_rollup\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44804}, 0x0) syz_open_dev$video4linux(&(0x7f0000000600), 0x2, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000280), 0xa4f, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) write$FUSE_BMAP(r2, &(0x7f00000000c0)={0x18, 0xfffffffffffffff5, 0x0, {0x8000000000000001}}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2, 0x0, 0xfffffffffffffffb}, 0x18) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0005e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc0007008019000000000000000000000000af1e4ccfb7b3cad80004010400", [0x1, 0x2000000000001]}}) 823.757778ms ago: executing program 1 (id=8024): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x70bd2c, 0x0, {{@in=@empty, @in=@initdev={0xac, 0x1e, 0xff, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000003}}, [@tmpl={0x44, 0x5, [{{@in=@private=0xa010100, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x1, 0x3}]}]}, 0xfc}}, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff02000000000000fdff000000000001"], 0xfdef) 687.064797ms ago: executing program 2 (id=8025): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000009440)=[{{&(0x7f0000000540)={0xa, 0x4e24, 0x200, @loopback}, 0x1c, &(0x7f00000006c0), 0x0, &(0x7f0000000700)=[@hoplimit={{0x10, 0x29, 0x34, 0x2}}, @dstopts={{0x14, 0x29, 0x37, {0x87}}}, @dstopts_2292={{0x2c, 0x29, 0x4, {0x29, 0x2, '\x00', [@hao={0xc9, 0x10, @loopback}]}}}], 0x50}}, {{&(0x7f0000000900)={0xa, 0x4e24, 0x7, @loopback, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1400000029000000360000e41500000000000000"], 0x48}}], 0x2, 0x2004000) 300.778979ms ago: executing program 4 (id=8026): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x4, 0x0, 0x0, 0x10, 0x0}) r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000500)=ANY=[@ANYRES16=r0], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000002c0)={0x84, &(0x7f0000004000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x98f, 0x2) r3 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x1e1b01) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc0f8565c, &(0x7f0000000080)={0x3, 0x7, 0x3, {0x1, @raw_data="6afc2a9eabb1203d99173a82da0d396e8b003c0892045f7ff622c69c4c8de156d94e95bc314a2012e4ed144fbf7f2a62e19ba197a2f329ddb4f318d223da4b55aba8e617de25907a85418f21811482c8313a5e86143754593caf8ac832080240dde0a45d4c8e6b06cd08983020e484aa6ff153f8c3958a75621fa89cccc758f0e5b4c7892a679fb0329ea5312414a79aaa033977421713083e146acf4d6b093489ac8cf5fc9c0d5535c28c3f8df83042e56ea07af1c9af4004ce38dad6f91e29b422e2be6ed1cce5"}, 0x1}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c0}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010102}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x4000004}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f0000000180)={0x13, 0x10, 0xfa00, {&(0x7f0000000540), 0xffffffffffffffff, 0x1}}, 0x18) syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) (async) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x4, 0x0, 0x0, 0x10, 0x0}) (async) syz_usb_connect(0x5, 0x24, &(0x7f0000000500)=ANY=[@ANYRES16=r0], 0x0) (async) syz_usb_control_io(r1, 0x0, &(0x7f00000002c0)={0x84, &(0x7f0000004000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_open_dev$vim2m(&(0x7f0000000040), 0x98f, 0x2) (async) syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x1e1b01) (async) dup(r3) (async) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc0f8565c, &(0x7f0000000080)={0x3, 0x7, 0x3, {0x1, @raw_data="6afc2a9eabb1203d99173a82da0d396e8b003c0892045f7ff622c69c4c8de156d94e95bc314a2012e4ed144fbf7f2a62e19ba197a2f329ddb4f318d223da4b55aba8e617de25907a85418f21811482c8313a5e86143754593caf8ac832080240dde0a45d4c8e6b06cd08983020e484aa6ff153f8c3958a75621fa89cccc758f0e5b4c7892a679fb0329ea5312414a79aaa033977421713083e146acf4d6b093489ac8cf5fc9c0d5535c28c3f8df83042e56ea07af1c9af4004ce38dad6f91e29b422e2be6ed1cce5"}, 0x1}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c0}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x4}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010102}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x4000004}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) (async) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f0000000180)={0x13, 0x10, 0xfa00, {&(0x7f0000000540), 0xffffffffffffffff, 0x1}}, 0x18) (async) 215.721542ms ago: executing program 2 (id=8027): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002580)=@newtfilter={0xd7c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x7}, {}, {0x8, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0xd4c, 0x2, [@TCA_CGROUP_EMATCHES={0x38, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x28, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x1f}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}]}}]}]}, @TCA_CGROUP_EMATCHES={0x34, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xf417}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0x6f7, 0x9, 0x1}, [@TCA_EM_IPT_HOOK={0x8}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}, @TCA_CGROUP_POLICE={0xcdc, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x7fffffff}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x5, 0x400, 0x5, 0x7, {0x3, 0x2, 0x8, 0x4, 0x0, 0x3fe8}, {0x0, 0x1, 0xc53, 0x3c6, 0x5, 0x8}, 0x0, 0x0, 0x8}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x4, 0x0, 0x8, 0x1, {0x7, 0x0, 0x9, 0xf8e8, 0x8001, 0x5}, {0x9, 0x2, 0x4, 0x9, 0x6, 0x100}, 0x8, 0x81d, 0x1feb}}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x8a8, 0x3, 0x6, 0x7ff, 0x1, 0x1, 0x3, 0x7, 0x0, 0x9, 0x9, 0xf8, 0x8, 0x6, 0xc63, 0x3, 0x10, 0x5, 0x8, 0x2, 0x80000000, 0x7, 0x10000, 0xfffffff8, 0x3, 0x2d64, 0xfffffff8, 0x4, 0x9, 0x40, 0x4, 0xfffffffb, 0x2, 0x3, 0xfffeffff, 0xb00a, 0x0, 0x6, 0x7fffffff, 0x4, 0x80000001, 0xfd, 0x8, 0xffff, 0x109, 0x5, 0xfffffff6, 0x7, 0xfff, 0x89, 0x2, 0x3, 0x5bc, 0x0, 0x80000000, 0x6, 0x8800, 0xd, 0xdd5, 0x1, 0x4, 0xffff, 0x4, 0x81, 0x7, 0x7, 0x4, 0x3ff, 0x6, 0x2, 0x7, 0xfffffffe, 0x7f, 0x1, 0x3ff, 0x24cf, 0x10000, 0x6, 0x101, 0x7f, 0xd4, 0x200001, 0x0, 0xdff, 0x2, 0x626, 0x6, 0x0, 0x7, 0x928b, 0x6f6, 0xfffffffa, 0x7, 0x9, 0xa, 0x4, 0xf, 0x3, 0x3, 0x7, 0x9, 0x5, 0x1, 0xa, 0x969, 0x3, 0x4, 0xff, 0x461, 0xe, 0x5, 0x0, 0x2, 0x1, 0x7, 0x3, 0x7, 0x4, 0x457, 0x90000, 0xe, 0xbba, 0x240000, 0x1ff, 0x7f, 0x1, 0x5, 0x3, 0x1, 0xfd6, 0x7, 0x8, 0x3, 0x8, 0x4, 0x9, 0x40, 0x9, 0x6, 0x2, 0x2, 0x8, 0xb9d, 0x7fff, 0x6, 0x27, 0xb1, 0x9, 0x3, 0x7fffffff, 0x50, 0x1, 0x8, 0x80000001, 0x1, 0x1, 0x6, 0x1, 0xffffff81, 0xff, 0xd6c, 0x6, 0x8, 0x2, 0x9, 0x7, 0x7, 0x7ff, 0x1, 0x2, 0x3, 0xa09, 0x8, 0x1, 0xaea, 0x8d1e, 0x6, 0x2, 0x4, 0x9, 0xffffff5e, 0x0, 0x8, 0x2f3, 0x9, 0x1, 0x8, 0x40, 0x4, 0x100, 0x8, 0x40, 0x6, 0x1e5, 0x1000, 0x7ff, 0x0, 0x9, 0x5, 0x10001, 0x3ff, 0x100, 0x7, 0x8, 0x101, 0x10000, 0x8b, 0xfffeffff, 0x8, 0xffff, 0x841, 0x3, 0x3, 0x3, 0x6, 0xffff, 0x4, 0xfffffa53, 0x80000001, 0x9, 0xe34e, 0xe, 0x0, 0x41544e55, 0x3, 0x1, 0x7, 0x421e, 0x10000, 0xffffffbc, 0x992, 0x6e, 0x8, 0xfffffff8, 0x1, 0x2, 0xf, 0x3ff, 0x95, 0x80000001, 0x7b, 0xfff, 0x5, 0x2, 0x6, 0x3, 0x800, 0x2, 0x8, 0x54ce, 0x2c, 0xfffffffa, 0x8, 0x9, 0x7]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x9b70, 0x3, 0x7, 0x5, 0x6, 0x7, 0x81, 0x5, 0x9, 0x6, 0xf, 0xfffffffc, 0x5fa, 0x1, 0x8000, 0x5, 0x10, 0x9, 0x4, 0xdb8a, 0xfffffffb, 0x6, 0x401, 0xc0, 0x1, 0x1000, 0x3, 0x4, 0x8, 0x6be9e33a, 0x9, 0x7, 0x7, 0x2, 0xe, 0x9, 0xce9, 0x7fff, 0x5, 0xffffff6f, 0x40, 0x5, 0x8000, 0x8000, 0x5, 0x1d, 0xfffffbd9, 0x2, 0x3, 0x35, 0x100, 0xff, 0xff, 0x8, 0x7, 0xd, 0xeb, 0x2, 0x1000, 0x9, 0xb2, 0x0, 0x80000001, 0x4, 0x5, 0x200, 0x700000, 0xf, 0x5, 0x1, 0x9, 0x5, 0x0, 0xcd3, 0x100, 0x7, 0x9, 0x8, 0x0, 0x9, 0x0, 0x3, 0x3, 0x4, 0x8, 0xf28, 0x6, 0x3, 0x9, 0x4, 0xfffffffc, 0xffff212b, 0x6, 0x805, 0x7fffffff, 0x2, 0x5, 0x4, 0x2, 0x6, 0x1, 0xa, 0x7, 0x8, 0x9, 0x10001, 0x3, 0x3, 0x81, 0xd5d, 0xfe, 0x8, 0x8000, 0x4, 0x43b, 0xea, 0x7, 0xffffffff, 0x1ff, 0xfffffffa, 0xfffff67b, 0xfb, 0x398, 0x9, 0x2, 0x4, 0x5, 0x9, 0xffffffff, 0xffffffff, 0x9, 0x10000, 0x7, 0x9, 0xc1, 0x6, 0x2, 0x6, 0xfffffff7, 0xb, 0x2, 0x7, 0x6, 0x9, 0x1, 0xd, 0x8, 0x80, 0xffffffff, 0x7, 0x1, 0xfffffffd, 0x401, 0x1, 0x0, 0x2, 0x1, 0x401, 0x4, 0x5, 0x800, 0xa, 0x9, 0x86, 0x9, 0x4, 0x7, 0x9, 0x3, 0x3, 0x0, 0x9, 0x9, 0xfe96, 0x2, 0x10, 0x12, 0x9, 0x9, 0x3ff, 0x4, 0x2, 0xffffffff, 0xff, 0x8001, 0xdd0, 0x1, 0x9, 0xb, 0x0, 0x4, 0x5, 0x3, 0xd, 0x0, 0xa44c, 0x6, 0x6, 0x8, 0x9, 0x1, 0xffff, 0x6, 0x4, 0x5, 0x8115, 0xffffffff, 0x5, 0x0, 0x305b, 0x1, 0x4, 0x200, 0x9, 0x80, 0xa, 0x4, 0x138, 0x4, 0x7a8ffa8f, 0x9, 0x3, 0x7c2, 0xe035, 0xa778, 0x1, 0x2, 0x1, 0xfffffff9, 0x2, 0x4, 0x4, 0x81, 0x6, 0xffffff01, 0x3, 0x2, 0x9, 0x3, 0x3, 0x401, 0x8, 0x4, 0x4, 0x8, 0x4, 0x7, 0x3, 0xf, 0x9, 0x5, 0x36, 0x0, 0x400, 0x9]}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x8, 0x3, 0x2, 0x3, {0x6, 0x0, 0x4e, 0x6, 0x401, 0x7}, {0x7, 0x2, 0x2, 0x27c, 0x3}, 0xff, 0x7, 0x6}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0xe53, 0x800, 0x78b, 0x5, 0x3, 0x7fffffff, 0x7, 0x0, 0x3, 0x6, 0xfffffffa, 0x89, 0x4, 0x4, 0xa, 0x5, 0x0, 0x3, 0x28bf, 0x1, 0xfff, 0xf1, 0x0, 0x1, 0x8, 0x0, 0x7fffffff, 0x1000, 0x6, 0x10000, 0x80000001, 0x6, 0x0, 0xc, 0x5, 0x5, 0x1, 0x6, 0x7f, 0x6eeac0b0, 0x4, 0x8, 0x4, 0x4, 0x0, 0x7fffffff, 0x4, 0x9, 0x1ff, 0x528, 0x8000, 0x4, 0x3, 0x7f, 0x6, 0x5, 0x7f, 0x2af, 0x7fffffff, 0x2, 0x4, 0x4, 0xfffffffc, 0x80000000, 0x1ff, 0x5, 0x0, 0x1, 0x4, 0x0, 0xb, 0x10000, 0x8, 0x6, 0x7, 0xec3, 0x45f5, 0x101, 0x100, 0x2, 0x0, 0xbdf0, 0xe7a1dd84, 0x8, 0xea, 0xfffff801, 0xfffffc00, 0x40, 0x1, 0xd2b, 0x4, 0x1, 0x1, 0xf4, 0x625, 0x3, 0x2, 0xc, 0x10000, 0x9, 0xffff0000, 0x0, 0xf7b8, 0x4, 0x7, 0x7, 0x0, 0x4, 0xfffffffb, 0x6, 0x6, 0x4, 0x5, 0x5, 0x5, 0x4, 0x1, 0x70, 0x23, 0x7b, 0xfffffffe, 0x800, 0x7cca683d, 0x1000, 0x7, 0x6, 0x8, 0x3, 0x413, 0x3, 0x80, 0x1, 0x764d, 0x2, 0x3, 0x4, 0x4, 0xfffffff3, 0x0, 0x8, 0x1, 0x8, 0xa9, 0x5, 0x8, 0x9, 0x9, 0x90, 0x52, 0x5, 0x2, 0xf, 0x80000001, 0x8000, 0x2, 0x17c, 0xffffffff, 0x0, 0x400, 0x0, 0x101, 0x3, 0x7, 0x2, 0x84, 0xc, 0xbf, 0x4, 0xe, 0x1, 0x0, 0x5, 0x5, 0x0, 0xb, 0x7f, 0x2, 0x3, 0x800, 0x2, 0x800, 0x8, 0x3, 0x1, 0xf92, 0x1, 0xd, 0x8001, 0xff, 0x8, 0x8, 0x4, 0x6, 0xfff, 0x0, 0x3, 0x101, 0x5, 0x5, 0x4, 0x4, 0x7, 0x0, 0xc, 0x5, 0x7, 0x9, 0x0, 0x8, 0x1, 0x7f, 0x4, 0x8, 0xfffffffb, 0x54d, 0x10, 0x3, 0x0, 0x7, 0x9, 0x5, 0x2, 0x31622167, 0x5, 0x7, 0x400, 0x5, 0x400, 0x10000, 0x2c5, 0x7, 0xcf, 0xc, 0x0, 0xc, 0x8, 0xff, 0xffffffff, 0x6, 0x3ff8000, 0xe, 0x5552, 0x3, 0x3, 0x8001, 0x6, 0x80, 0x2, 0x2, 0x1, 0x9d, 0xd, 0x10000, 0x3, 0x8]}]}]}}]}, 0xd7c}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 163.049464ms ago: executing program 1 (id=8028): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000340)=ANY=[], 0x0) sendmsg(r1, 0x0, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011"], 0x0, 0x1, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="33fe0000240013"], 0xfe33) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42800) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x28, 0x80000, 0x0) connect$vsock_stream(r3, &(0x7f0000000180)={0x28, 0x0, 0x2710, @my=0x1}, 0x10) connect$vsock_stream(r3, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) unshare(0x6e000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) time(0x0) r5 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'veth0_vlan\x00', 0x0}) r7 = gettid() syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008010bd408205140099bb0000000109022400011b0000100904000002"], 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001000010000000000000000", @ANYRES32=r6, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r7], 0x28}}, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) 108.081064ms ago: executing program 0 (id=8029): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = msgget$private(0x0, 0x19b) msgsnd(r1, &(0x7f0000000640)=ANY=[@ANYBLOB="02"], 0x401, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x3, 0x84}}}, 0xd4}, 0x1, 0x0, 0x0, 0xc800}, 0x0) sendmsg$kcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4) r7 = socket$kcm(0x29, 0x2, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0) sendfile(r7, 0xffffffffffffffff, 0x0, 0x8000fb00) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) sendmsg$NL80211_CMD_GET_WIPHY(r0, 0x0, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x94, r8, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2710}]}, 0x94}}, 0x0) msgsnd(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="70569473c77224b7c0ef987f36647ec6a4f88e02d952893e5d5b5a85b10ead0cc7db3294da4bf6e2bb64ded22ba6d989dfdc36ef67fcd58b29bd9b2556fe9a87c4e2cb22200526815d1b6f28a8084684f769551fbd8b132710a17a35eb6574543c9c12fe6b4f14dadce6aa823ed655c82275f7b65ec10fcd"], 0x8, 0x0) msgrcv(r1, &(0x7f00000002c0), 0x8, 0x0, 0x800) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000040)=0x8, 0x4) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, 0x0, &(0x7f0000000000)) r9 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r9, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0xfffd, 0x0, 0x6, 0xa, 0x0, 0x7d337195f426250e, 0x21}, {0x0, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0xa65}, {0x0, 0x4}, 0xfffffffe, 0x6e6bbe, 0x1}, {{@in=@private=0xfffffffe, 0xfffffffe, 0x33}, 0x0, @in=@private=0xa010101, 0x0, 0x3, 0x3, 0x7}}, 0xe4) get_mempolicy(&(0x7f0000000080), &(0x7f0000000100), 0xfc, &(0x7f0000ffc000/0x4000)=nil, 0x3) 0s ago: executing program 2 (id=8030): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2710, &(0x7f0000000600)=""/102389, &(0x7f0000000000)=0x18ff5) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x3}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x9af33139c2c4eaae}, 0x20) unshare(0x62040200) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_BSS(r3, &(0x7f0000019600)={0x0, 0x0, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x1, 0x10000000000009, &(0x7f0000000100), 0x0) r6 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) ioctl$EVIOCGLED(r6, 0x5452, &(0x7f0000000240)=""/77) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0xa, 0x2002) write$evdev(r7, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) kernel console output (not intermixed with test programs): ice=6f.a4 [ 1939.664727][ T107] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1939.732126][ T107] usb 1-1: config 0 descriptor?? [ 1939.792973][ T107] rndis_host 1-1:0.0: probe with driver rndis_host failed with error -22 [ 1939.881956][ T5926] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1939.895287][ T5926] em28xx 4-1:0.0: board has no eeprom [ 1940.353600][T21756] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1940.523552][T21756] usb 5-1: Using ep0 maxpacket: 8 [ 1940.528753][ T5926] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1940.543287][T21756] usb 5-1: config 2 has an invalid interface number: 31 but max is 0 [ 1940.556272][ T5926] em28xx 4-1:0.0: dvb set to bulk mode. [ 1940.580639][T21756] usb 5-1: config 2 has no interface number 0 [ 1940.603593][ T5894] em28xx 4-1:0.0: Binding DVB extension [ 1940.635370][T21756] usb 5-1: config 2 interface 31 has no altsetting 0 [ 1940.653189][T21756] usb 5-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1940.681786][T21756] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1940.722420][T21756] usb 5-1: Product: syz [ 1940.750536][T21756] usb 5-1: Manufacturer: syz [ 1940.774768][ T5926] usb 4-1: USB disconnect, device number 11 [ 1940.796245][ T5926] em28xx 4-1:0.0: Disconnecting em28xx [ 1940.831147][T21756] usb 5-1: SerialNumber: syz [ 1940.947778][ T5894] em28xx 4-1:0.0: Registering input extension [ 1940.955661][ T5926] em28xx 4-1:0.0: Closing input extension [ 1941.078556][ T5926] em28xx 4-1:0.0: Freeing device [ 1941.124712][T21756] ch9200 5-1:2.31: probe with driver ch9200 failed with error -22 [ 1941.482865][ T107] usb 2-1: USB disconnect, device number 15 [ 1941.926651][T32647] netlink: 'syz.3.7433': attribute type 2 has an invalid length. [ 1941.934630][T32647] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7433'. [ 1941.976581][ T30] audit: type=1326 audit(1765502153.832:5602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32632 comm="syz.2.7430" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7fc00000 [ 1942.002140][T32649] netlink: 'syz.1.7432': attribute type 2 has an invalid length. [ 1942.010277][T32649] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7432'. [ 1942.229687][T32651] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1942.682273][ T5926] usb 1-1: USB disconnect, device number 56 [ 1942.773268][T32653] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1942.915025][T32653] netlink: 'syz.2.7435': attribute type 11 has an invalid length. [ 1942.944184][T32653] netlink: 137316 bytes leftover after parsing attributes in process `syz.2.7435'. [ 1943.169802][T32662] Cannot find del_set index 3 as target [ 1943.498728][T32668] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7439'. [ 1943.743150][ T5926] usb 5-1: USB disconnect, device number 27 [ 1943.857161][T32679] loop2: detected capacity change from 0 to 7 [ 1943.882154][T32679] Dev loop2: unable to read RDB block 7 [ 1943.911918][T32679] loop2: unable to read partition table [ 1943.938714][T32679] loop2: partition table beyond EOD, truncated [ 1943.971270][T32679] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1944.144900][ T5926] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1944.193614][T30166] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1944.215907][T32689] --map-set only usable from mangle table [ 1944.316721][ T5926] usb 3-1: config 0 has no interfaces? [ 1944.336891][ T5926] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1944.353683][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1944.361950][ T5926] usb 3-1: Product: syz [ 1944.367830][T30166] usb 2-1: config 4 has 1 interface, different from the descriptor's value: 2 [ 1944.372199][ T5926] usb 3-1: Manufacturer: syz [ 1944.387711][T30166] usb 2-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 1944.392609][ T5926] usb 3-1: SerialNumber: syz [ 1944.427076][ T5926] usb 3-1: config 0 descriptor?? [ 1944.471695][T30166] usb 2-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 1944.503611][T30166] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 1944.527579][T30166] usb 2-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 1944.555093][T30166] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1944.567263][T30166] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1944.671223][ T107] usb 3-1: USB disconnect, device number 23 [ 1944.740702][T32712] netlink: 'syz.3.7452': attribute type 2 has an invalid length. [ 1944.751740][T32714] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7456'. [ 1944.766606][T32712] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7452'. [ 1944.792745][T30166] ath6kl: Failed to submit usb control message: -71 [ 1944.808436][T30166] ath6kl: unable to send the bmi data to the device: -71 [ 1944.829721][T30166] ath6kl: Unable to send get target info: -71 [ 1944.839309][T30166] ath6kl: Failed to init ath6kl core: -71 [ 1944.949016][T30166] ath6kl_usb 2-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 1944.964762][T30166] usb 2-1: USB disconnect, device number 16 [ 1945.027367][T32719] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7458'. [ 1945.040021][T32719] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7458'. [ 1945.058041][T32719] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7458'. [ 1945.071058][T32719] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7458'. [ 1945.638152][T32733] Context (ID=0x0) not attached to queue pair (handle=0x4d5:0x0) [ 1945.884340][T32738] libceph: resolve '. [ 1945.884340][T32738] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 1945.884340][T32738] ' (ret=-3): failed [ 1945.922613][T32740] loop2: detected capacity change from 0 to 3 [ 1945.929451][T32740] ldm_validate_privheads(): Disk read failed. [ 1945.944176][T32740] Dev loop2: unable to read RDB block 3 [ 1945.949785][T32740] loop2: unable to read partition table [ 1946.021658][T32740] loop2: partition table beyond EOD, truncated [ 1946.063607][T32740] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1946.836594][T32736] binder: 32731:32736 ioctl c0306201 80000180 returned -14 [ 1947.019724][T32761] pim6reg: entered allmulticast mode [ 1947.051494][T32763] pim6reg: left allmulticast mode [ 1947.139939][ T300] C: renamed from team_slave_0 [ 1947.151027][ T300] netlink: 'syz.0.7474': attribute type 4 has an invalid length. [ 1947.161404][ T300] netlink: 120 bytes leftover after parsing attributes in process `syz.0.7474'. [ 1947.211056][ T300] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1947.390298][ T309] geneve2: entered allmulticast mode [ 1947.403138][T28751] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0 [ 1947.418239][T28751] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0 [ 1947.446668][T28751] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0 [ 1947.593757][T28751] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0 [ 1947.602855][ T314] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.7475'. [ 1948.080915][ T318] FAULT_INJECTION: forcing a failure. [ 1948.080915][ T318] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1948.124732][ T5894] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1948.375450][ T5894] usb 2-1: config 0 has no interfaces? [ 1948.448427][ T5894] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1948.455663][ T318] CPU: 1 UID: 0 PID: 318 Comm: syz.0.7478 Tainted: G L syzkaller #0 PREEMPT(full) [ 1948.455696][ T318] Tainted: [L]=SOFTLOCKUP [ 1948.455703][ T318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1948.455715][ T318] Call Trace: [ 1948.455723][ T318] [ 1948.455731][ T318] dump_stack_lvl+0x189/0x250 [ 1948.455762][ T318] ? __pfx____ratelimit+0x10/0x10 [ 1948.455789][ T318] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1948.455812][ T318] ? __pfx__printk+0x10/0x10 [ 1948.455838][ T318] ? __might_fault+0xb0/0x130 [ 1948.455877][ T318] should_fail_ex+0x414/0x560 [ 1948.455907][ T318] _copy_from_iter+0x1cd/0x1630 [ 1948.455947][ T318] ? __pfx__copy_from_iter+0x10/0x10 [ 1948.455971][ T318] ? sock_alloc_send_pskb+0x86b/0x980 [ 1948.456000][ T318] ? __pfx__copy_from_iter+0x10/0x10 [ 1948.456030][ T318] ? page_copy_sane+0x16a/0x280 [ 1948.456058][ T318] copy_page_from_iter+0xdd/0x170 [ 1948.456090][ T318] skb_copy_datagram_from_iter+0x306/0x720 [ 1948.456124][ T318] tun_get_user+0x1683/0x3dc0 [ 1948.456163][ T318] ? aa_file_perm+0x44c/0x1530 [ 1948.456193][ T318] ? __pfx_tun_get_user+0x10/0x10 [ 1948.456215][ T318] ? __lock_acquire+0x6b6/0x2cf0 [ 1948.456237][ T318] ? kstrtoull+0x12f/0x1d0 [ 1948.456269][ T318] ? ref_tracker_alloc+0x318/0x460 [ 1948.456304][ T318] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1948.456336][ T318] ? tun_get+0x1c/0x2f0 [ 1948.456360][ T318] ? tun_get+0x1c/0x2f0 [ 1948.456378][ T318] ? tun_get+0x1c/0x2f0 [ 1948.456402][ T318] tun_chr_write_iter+0x113/0x200 [ 1948.456424][ T318] vfs_write+0x5c9/0xb30 [ 1948.456448][ T318] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1948.456469][ T318] ? __pfx_vfs_write+0x10/0x10 [ 1948.456505][ T318] ? __fget_files+0x2a/0x420 [ 1948.456537][ T318] ksys_write+0x145/0x250 [ 1948.456555][ T318] ? exc_page_fault+0x82/0x100 [ 1948.456582][ T318] ? __pfx_ksys_write+0x10/0x10 [ 1948.456604][ T318] ? __do_fast_syscall_32+0xbe/0x570 [ 1948.456627][ T318] __do_fast_syscall_32+0x1f7/0x570 [ 1948.456645][ T318] ? rcu_is_watching+0x15/0xb0 [ 1948.456666][ T318] ? do_fast_syscall_32+0x34/0x80 [ 1948.456689][ T318] do_fast_syscall_32+0x34/0x80 [ 1948.456706][ T318] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1948.456728][ T318] RIP: 0023:0xf7f12539 [ 1948.456745][ T318] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1948.456762][ T318] RSP: 002b:00000000f5406520 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 1948.456817][ T318] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000140 [ 1948.456831][ T318] RDX: 000000000000fdef RSI: 00000000f73a6ff4 RDI: 0000000000000000 [ 1948.456844][ T318] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1948.456856][ T318] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1948.456868][ T318] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1948.456903][ T318] [ 1948.853482][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1948.994361][ T325] futex_wake_op: syz.4.7479 tries to shift op by -1; fix this program [ 1949.082936][ T327] loop9: detected capacity change from 0 to 7 [ 1949.093580][ T327] Dev loop9: unable to read RDB block 7 [ 1949.121953][ T5894] usb 2-1: Product: syz [ 1949.148393][ T327] loop9: unable to read partition table [ 1949.154579][ T5894] usb 2-1: Manufacturer: syz [ 1949.159729][ T327] loop9: partition table beyond EOD, truncated [ 1949.179906][ T327] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 1949.189867][ T5894] usb 2-1: SerialNumber: syz [ 1949.266513][ T5894] usb 2-1: config 0 descriptor?? [ 1949.407877][ T332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7483'. [ 1949.455118][ T332] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 1949.470311][ T332] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1950.026956][ T312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1950.081017][ T312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1950.140850][ T312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7475'. [ 1950.850534][ T363] tap0: tun_chr_ioctl cmd 35108 [ 1951.063572][T21756] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1951.295184][T21756] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1951.318336][T21756] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1951.419131][ T5926] usb 2-1: USB disconnect, device number 17 [ 1951.425447][T21756] usb 4-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 1951.470327][T21756] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1951.611306][T21756] usb 4-1: config 0 descriptor?? [ 1951.622924][ T367] xt_hashlimit: invalid rate [ 1951.719064][ T368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7493'. [ 1951.856645][ T368] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 1952.113571][T30166] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1952.279266][T30166] usb 2-1: config 0 has no interfaces? [ 1952.290180][T30166] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 1952.323535][T30166] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1952.352703][T30166] usb 2-1: config 0 descriptor?? [ 1952.599717][ T368] fuse: Unknown parameter 'mask' [ 1952.612648][ T368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1952.641653][ T382] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.7496'. [ 1952.880967][ T368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1952.962453][T30166] usb 2-1: USB disconnect, device number 18 [ 1953.487140][ T5894] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1953.525116][T21756] usbhid 4-1:0.0: can't add hid device: -71 [ 1953.540506][T21756] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1953.563551][T17899] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1953.646442][T21756] usb 4-1: USB disconnect, device number 12 [ 1953.730119][ T5894] usb 1-1: config 0 has no interfaces? [ 1953.739530][ T5894] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1953.752946][T17899] usb 5-1: Using ep0 maxpacket: 32 [ 1953.771159][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1953.790990][T17899] usb 5-1: config 0 has an invalid interface number: 126 but max is 0 [ 1953.803588][T17899] usb 5-1: config 0 has no interface number 0 [ 1953.810556][T17899] usb 5-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1953.813519][ T5894] usb 1-1: Product: syz [ 1953.905888][ T5894] usb 1-1: Manufacturer: syz [ 1953.910584][ T5894] usb 1-1: SerialNumber: syz [ 1953.931658][T17899] usb 5-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 1953.950695][T17899] usb 5-1: config 0 interface 126 has no altsetting 0 [ 1953.963051][T17899] usb 5-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 1953.964815][ T5894] usb 1-1: config 0 descriptor?? [ 1954.092560][T17899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1954.163567][T17899] usb 5-1: Product: syz [ 1954.193529][T17899] usb 5-1: Manufacturer: syz [ 1954.198467][T17899] usb 5-1: SerialNumber: syz [ 1954.222325][T17899] usb 5-1: config 0 descriptor?? [ 1954.234362][ T392] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1954.241797][ T392] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1954.293031][ T382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1954.302101][ T382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1954.312986][ T382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7496'. [ 1954.323523][ T5894] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1954.528494][ T5894] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1954.549009][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1954.570874][ T5894] usb 4-1: Product: syz [ 1954.578630][ T5894] usb 4-1: Manufacturer: syz [ 1954.593800][ T5894] usb 4-1: SerialNumber: syz [ 1954.621041][T17899] ir_usb 5-1:0.126: IR Dongle converter detected [ 1954.641292][T17899] usb 5-1: IRDA class descriptor not found, device not bound [ 1954.663686][T17899] usb 5-1: USB disconnect, device number 28 [ 1954.851135][ T5894] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 1954.892492][ T5894] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 1954.932169][ T5894] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1954.977172][ T5894] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1955.004225][ T5894] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1955.225727][ T5894] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 1955.247449][ T5894] usb 4-1: USB disconnect, device number 13 [ 1955.313752][T17899] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1955.340921][ T415] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7508'. [ 1955.464004][T17899] usb 2-1: Using ep0 maxpacket: 8 [ 1955.477728][T17899] usb 2-1: config 2 has an invalid interface number: 31 but max is 0 [ 1955.530245][T17899] usb 2-1: config 2 has no interface number 0 [ 1955.561159][ T421] netlink: 'syz.2.7507': attribute type 2 has an invalid length. [ 1955.569301][ T421] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7507'. [ 1955.594078][ T5909] usb 1-1: USB disconnect, device number 57 [ 1955.778835][ T425] Cannot find del_set index 3 as target [ 1955.803228][T17899] usb 2-1: config 2 interface 31 has no altsetting 0 [ 1955.926125][T17899] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1955.935687][T17899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1955.944395][T17899] usb 2-1: Product: syz [ 1955.951936][T17899] usb 2-1: Manufacturer: syz [ 1955.962026][T17899] usb 2-1: SerialNumber: syz [ 1955.990677][T17899] ch9200 2-1:2.31: probe with driver ch9200 failed with error -22 [ 1956.812784][ T431] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7512'. [ 1956.883621][T17899] usb 1-1: new full-speed USB device number 58 using dummy_hcd [ 1957.018953][ T433] netlink: 'syz.4.7514': attribute type 14 has an invalid length. [ 1957.025556][T17899] usb 1-1: device descriptor read/64, error -71 [ 1957.273567][T17899] usb 1-1: new full-speed USB device number 59 using dummy_hcd [ 1957.533520][T17899] usb 1-1: device descriptor read/64, error -71 [ 1957.655114][T17899] usb usb1-port1: attempt power cycle [ 1957.773503][ T5926] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1957.884598][ T5894] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1957.996851][ T5926] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1958.008053][ T5926] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1958.030729][ T5926] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1958.033541][T17899] usb 1-1: new full-speed USB device number 60 using dummy_hcd [ 1958.066081][ T5926] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1958.084357][T17899] usb 1-1: device descriptor read/8, error -71 [ 1958.124351][ T5926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1958.149954][ T5909] usb 2-1: USB disconnect, device number 19 [ 1958.217335][ T5926] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1958.226225][ T5926] usb 5-1: invalid MIDI out EP 0 [ 1958.314360][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1958.323930][T17899] usb 1-1: new full-speed USB device number 61 using dummy_hcd [ 1958.333552][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1958.351322][ T5926] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1958.355321][T17899] usb 1-1: device descriptor read/8, error -71 [ 1958.372263][ T5894] usb 3-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 1958.390505][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1958.406915][ T5894] usb 3-1: config 0 descriptor?? [ 1958.493935][T17899] usb usb1-port1: unable to enumerate USB device [ 1959.039518][ T464] netlink: 'syz.1.7519': attribute type 2 has an invalid length. [ 1959.053335][ T464] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7519'. [ 1959.183764][T15417] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 1959.194432][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1959.203707][T15417] Bluetooth: hci3: Injecting HCI hardware error event [ 1959.214503][ T467] Bluetooth: hci3: hardware error 0x00 [ 1959.383037][ T470] netlink: 'syz.3.7520': attribute type 2 has an invalid length. [ 1959.391074][ T470] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7520'. [ 1960.374707][ T5894] usbhid 3-1:0.0: can't add hid device: -71 [ 1960.403596][ T5894] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1960.446280][T17899] usb 5-1: USB disconnect, device number 29 [ 1960.469461][ T474] netlink: 'syz.0.7522': attribute type 11 has an invalid length. [ 1960.507326][ T5894] usb 3-1: USB disconnect, device number 24 [ 1960.571635][ T474] netlink: 137316 bytes leftover after parsing attributes in process `syz.0.7522'. [ 1960.808517][ T484] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.7525'. [ 1960.836951][ T484] trusted_key: encrypted_key: insufficient parameters specified [ 1960.894709][ T488] pim6reg: entered allmulticast mode [ 1960.911009][ T488] pim6reg: left allmulticast mode [ 1961.273577][ T467] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1961.293502][ T493] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7527'. [ 1961.373729][ T30] audit: type=1326 audit(1765502173.232:5603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=475 comm="syz.2.7523" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7fc00000 [ 1961.708591][ T501] netlink: 80 bytes leftover after parsing attributes in process `syz.2.7530'. [ 1961.752332][ T501] netlink: 80 bytes leftover after parsing attributes in process `syz.2.7530'. [ 1961.984853][ T507] geneve3: entered promiscuous mode [ 1961.990247][ T507] geneve3: entered allmulticast mode [ 1962.032338][ T509] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7533'. [ 1962.075978][ T5828] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 1962.243631][ T5828] usb 2-1: device descriptor read/64, error -71 [ 1962.422957][ T514] netlink: 'syz.3.7535': attribute type 1 has an invalid length. [ 1962.473590][T17899] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1962.533908][ T5828] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 1962.600432][ T520] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7536'. [ 1962.633704][T17899] usb 1-1: Using ep0 maxpacket: 32 [ 1962.675528][T17899] usb 1-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1962.692216][ T520] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7536'. [ 1962.693500][ T5828] usb 2-1: device descriptor read/64, error -71 [ 1962.705127][T17899] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1962.717169][T17899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1962.727180][T17899] usb 1-1: Product: syz [ 1962.735345][T17899] usb 1-1: Manufacturer: syz [ 1962.753913][T17899] usb 1-1: SerialNumber: syz [ 1962.767279][T17899] usb 1-1: config 0 descriptor?? [ 1962.787288][T17899] cdc_ether 1-1:0.0: skipping garbage [ 1962.797393][T17899] usb 1-1: bad CDC descriptors [ 1962.806389][T17899] usb 1-1: unsupported MDLM descriptors [ 1962.843990][ T5828] usb usb2-port1: attempt power cycle [ 1963.213571][ T5828] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 1963.245221][ T5828] usb 2-1: device descriptor read/8, error -71 [ 1963.351377][ T533] netlink: 'syz.2.7540': attribute type 1 has an invalid length. [ 1963.493547][ T5828] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 1963.514212][ T5828] usb 2-1: device descriptor read/8, error -71 [ 1963.533519][T17899] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1963.623784][ T5828] usb usb2-port1: unable to enumerate USB device [ 1963.693522][T17899] usb 5-1: Using ep0 maxpacket: 32 [ 1963.700319][T17899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1963.711726][T17899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1963.721583][T17899] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1963.730892][T17899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1963.742572][T17899] usb 5-1: config 0 descriptor?? [ 1963.754181][T17899] hub 5-1:0.0: USB hub found [ 1963.951884][T17899] hub 5-1:0.0: 1 port detected [ 1964.408095][ T30] audit: type=1326 audit(1765502176.262:5604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=536 comm="syz.2.7541" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7fc00000 [ 1964.603938][ T543] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1964.611461][ T543] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 1964.620771][ T543] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1964.677816][ T545] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7542'. [ 1964.697297][ T545] netlink: 'syz.2.7542': attribute type 2 has an invalid length. [ 1964.705881][ T545] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7542'. [ 1964.863259][T30159] usb 1-1: USB disconnect, device number 62 [ 1965.236714][T17899] hub 5-1:0.0: hub_hub_status failed (err = -32) [ 1965.254168][T17899] hub 5-1:0.0: config failed, can't get hub status (err -32) [ 1965.317145][T17899] usbhid 5-1:0.0: can't add hid device: -32 [ 1965.532466][T17899] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 1965.625228][T17899] usb 5-1: USB disconnect, device number 30 [ 1965.880499][ T556] tap0: tun_chr_ioctl cmd 35108 [ 1966.093646][T17119] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1966.313506][T17119] usb 4-1: Using ep0 maxpacket: 32 [ 1966.340111][T17119] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1966.938151][T17119] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1966.957201][T17119] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1966.966310][T17119] usb 4-1: Product: syz [ 1966.970594][T17119] usb 4-1: Manufacturer: syz [ 1966.982718][T17119] usb 4-1: SerialNumber: syz [ 1966.998497][T17119] usb 4-1: config 0 descriptor?? [ 1967.009835][ T567] loop2: detected capacity change from 0 to 7 [ 1967.149077][T17119] cdc_ether 4-1:0.0: skipping garbage [ 1967.161730][T17119] usb 4-1: bad CDC descriptors [ 1967.164555][ T567] Dev loop2: unable to read RDB block 7 [ 1967.169475][T17119] usb 4-1: unsupported MDLM descriptors [ 1967.180962][ T567] loop2: unable to read partition table [ 1967.194804][ T567] loop2: partition table beyond EOD, truncated [ 1967.214275][ T567] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1967.328004][ T572] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7551'. [ 1967.417137][ T572] vlan0: entered promiscuous mode [ 1967.447172][ T572] gretap0: entered promiscuous mode [ 1968.176830][ T30] audit: type=1326 audit(1765502179.962:5605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=570 comm="syz.4.7552" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7fc00000 [ 1968.571443][ T589] geneve2: entered promiscuous mode [ 1968.590296][ T589] geneve2: entered allmulticast mode [ 1968.767593][T17899] usb 4-1: USB disconnect, device number 14 [ 1968.885238][ T592] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7557'. [ 1969.101667][ T595] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1969.193315][ T595] netlink: 'syz.2.7558': attribute type 11 has an invalid length. [ 1969.220308][ T595] netlink: 137316 bytes leftover after parsing attributes in process `syz.2.7558'. [ 1969.260095][ T5926] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1969.350396][ T599] loop2: detected capacity change from 0 to 3 [ 1969.361968][ T599] ldm_validate_privheads(): Disk read failed. [ 1969.368254][ T599] Dev loop2: unable to read RDB block 3 [ 1969.374572][ T599] loop2: unable to read partition table [ 1969.415549][ T601] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.7559'. [ 1969.524846][ T599] loop2: partition table beyond EOD, truncated [ 1969.533958][ T5926] usb 5-1: Using ep0 maxpacket: 32 [ 1969.542058][ T5926] usb 5-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1969.565238][ T5926] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1969.623269][ T599] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1969.705755][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1969.786620][ T5926] usb 5-1: Product: syz [ 1969.813777][ T5926] usb 5-1: Manufacturer: syz [ 1969.914061][T21756] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1969.925049][ T5926] usb 5-1: SerialNumber: syz [ 1970.024215][ T5926] usb 5-1: config 0 descriptor?? [ 1970.068647][ T5926] cdc_ether 5-1:0.0: skipping garbage [ 1970.093150][ T5926] usb 5-1: bad CDC descriptors [ 1970.185121][T21756] usb 1-1: config 0 has no interfaces? [ 1970.192492][ T5926] usb 5-1: unsupported MDLM descriptors [ 1970.208638][ T612] bridge0: port 4(syz_tun) entered blocking state [ 1970.220669][ T612] bridge0: port 4(syz_tun) entered disabled state [ 1970.233712][ T5909] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1970.253260][T21756] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1970.269737][ T612] syz_tun: entered allmulticast mode [ 1970.279373][T21756] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1970.288613][ T612] syz_tun: entered promiscuous mode [ 1970.295089][ T612] bridge0: port 4(syz_tun) entered blocking state [ 1970.301675][ T612] bridge0: port 4(syz_tun) entered forwarding state [ 1970.312132][T21756] usb 1-1: Product: syz [ 1970.318782][T21756] usb 1-1: Manufacturer: syz [ 1970.330045][T21756] usb 1-1: SerialNumber: syz [ 1970.362106][T21756] usb 1-1: config 0 descriptor?? [ 1970.491601][ T5909] usb 3-1: device descriptor read/64, error -71 [ 1970.679323][ T615] syzkaller0: entered promiscuous mode [ 1970.691860][ T615] syzkaller0: entered allmulticast mode [ 1970.834950][ T5909] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1970.963553][ T5909] usb 3-1: device descriptor read/64, error -71 [ 1971.017893][ T601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1971.038511][ T601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1971.079921][ T601] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7559'. [ 1971.105279][ T5909] usb usb3-port1: attempt power cycle [ 1971.213500][ T627] libceph: resolve '. [ 1971.213500][ T627] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 1971.213500][ T627] ' (ret=-3): failed [ 1971.493741][ T5909] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1971.514114][ T5909] usb 3-1: device descriptor read/8, error -71 [ 1971.575825][T17899] usb 5-1: USB disconnect, device number 31 [ 1971.691835][ T30] audit: type=1326 audit(1765502183.542:5606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=620 comm="syz.1.7566" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7fc00000 [ 1971.733583][ T30] audit: type=1326 audit(1765502183.562:5607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=620 comm="syz.1.7566" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf70ad539 code=0x7fc00000 [ 1971.755905][ T5909] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1971.771680][ T30] audit: type=1326 audit(1765502183.562:5608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=620 comm="syz.1.7566" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7fc00000 [ 1971.774444][ T5909] usb 3-1: device descriptor read/8, error -71 [ 1971.917289][ T30] audit: type=1326 audit(1765502183.562:5609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=620 comm="syz.1.7566" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7fc00000 [ 1971.958981][ T30] audit: type=1326 audit(1765502183.562:5610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=620 comm="syz.1.7566" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7fc00000 [ 1972.003600][ T30] audit: type=1326 audit(1765502183.562:5611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=620 comm="syz.1.7566" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7fc00000 [ 1972.059777][ T30] audit: type=1326 audit(1765502183.562:5612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=620 comm="syz.1.7566" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7fc00000 [ 1972.073935][ T5909] usb usb3-port1: unable to enumerate USB device [ 1972.123256][ T636] loop9: detected capacity change from 0 to 7 [ 1972.131440][ T636] Dev loop9: unable to read RDB block 7 [ 1972.137273][ T636] loop9: unable to read partition table [ 1972.146641][ T30] audit: type=1326 audit(1765502183.562:5613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=620 comm="syz.1.7566" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7fc00000 [ 1972.179949][ T636] loop9: partition table beyond EOD, truncated [ 1972.186349][ T636] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 1972.267932][ T637] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7568'. [ 1972.315517][ T30] audit: type=1326 audit(1765502183.562:5614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=620 comm="syz.1.7566" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7fc00000 [ 1972.447834][ T5909] usb 1-1: USB disconnect, device number 63 [ 1972.564244][ T643] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7572'. [ 1972.596807][ T643] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 1972.604794][ T643] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1973.031345][ T648] binder: 644:648 unknown command 0 [ 1973.046422][ T648] binder: 644:648 ioctl c0306201 80000080 returned -22 [ 1973.109800][ T648] binder: 644:648 ioctl c0306201 800003c0 returned -14 [ 1973.290061][ T657] binder: 654:657 ioctl c0306201 80000080 returned -14 [ 1973.373536][ T5909] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1973.491995][ T667] netlink: 'syz.1.7579': attribute type 2 has an invalid length. [ 1973.499990][ T667] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7579'. [ 1973.564814][ T670] input: syz0 as /devices/virtual/input/input89 [ 1973.639740][ T5909] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1973.648459][ T5909] usb 3-1: config 0 has no interface number 0 [ 1973.688115][ T5909] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1973.724534][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1973.826934][ T5909] usb 3-1: Product: syz [ 1973.837029][ T5909] usb 3-1: Manufacturer: syz [ 1973.841733][ T5909] usb 3-1: SerialNumber: syz [ 1973.966841][ T5909] usb 3-1: config 0 descriptor?? [ 1974.354839][ T650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1974.389752][ T650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1974.617989][ T650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1974.635364][ T682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1974.635813][ T650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1974.663282][ T682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1974.805414][ T5894] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1974.880890][ T5909] dvb_usb_ec168 3-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 1974.947535][ T5909] usb 3-1: USB disconnect, device number 29 [ 1974.973484][ T5894] usb 4-1: Using ep0 maxpacket: 8 [ 1974.987962][ T5894] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 1975.047102][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1975.073493][ T5894] usb 4-1: Product: syz [ 1975.084051][ T5894] usb 4-1: Manufacturer: syz [ 1975.087298][ T689] sctp: [Deprecated]: syz.1.7585 (pid 689) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1975.087298][ T689] Use struct sctp_sack_info instead [ 1975.105050][ T5894] usb 4-1: SerialNumber: syz [ 1975.157714][ T5894] usb 4-1: config 0 descriptor?? [ 1975.222612][ T5894] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 1975.271795][ T694] input: syz0 as /devices/virtual/input/input90 [ 1975.373488][ T5926] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1975.429953][ T698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7588'. [ 1975.493459][ T698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7588'. [ 1975.533493][ T5926] usb 2-1: Using ep0 maxpacket: 32 [ 1975.541451][ T5926] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1975.561177][ T5926] usb 2-1: config 0 has no interface number 0 [ 1975.572006][ T5926] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1975.585725][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1975.594388][ T5926] usb 2-1: Product: syz [ 1975.598660][ T5926] usb 2-1: Manufacturer: syz [ 1975.605843][ T5926] usb 2-1: SerialNumber: syz [ 1975.630551][ T5926] usb 2-1: config 0 descriptor?? [ 1975.646057][ T5926] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1975.812533][ T707] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7591'. [ 1975.827651][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1975.834391][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1975.865050][ T5926] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1975.897136][ T5926] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1976.106685][ T5894] gspca_sonixj: reg_w1 err -71 [ 1976.112701][ T5894] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 1976.174836][ T5894] usb 4-1: USB disconnect, device number 15 [ 1976.559451][ T726] netlink: 'syz.2.7595': attribute type 2 has an invalid length. [ 1976.574427][ T726] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7595'. [ 1977.902333][ T745] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1977.916001][ T745] netlink: 'syz.2.7600': attribute type 11 has an invalid length. [ 1977.925153][ T745] netlink: 137316 bytes leftover after parsing attributes in process `syz.2.7600'. [ 1977.977121][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1977.984935][ T5828] usb 2-1: USB disconnect, device number 24 [ 1977.993146][ T5828] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1978.015254][ T5828] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1978.027612][ T5828] quatech2 2-1:0.51: device disconnected [ 1978.385442][ T30] audit: type=1326 audit(1765502190.242:5615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=751 comm="syz.3.7603" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf707d539 code=0x0 [ 1978.613531][ T5909] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1978.693552][T30159] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1978.776291][ T5909] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1978.788334][ T5909] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1978.798533][ T5909] usb 1-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 1978.814859][ T5909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1978.826798][ T5909] usb 1-1: config 0 descriptor?? [ 1978.853661][T30159] usb 3-1: Using ep0 maxpacket: 8 [ 1978.864959][T30159] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1978.875731][T30159] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1978.886527][T30159] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1978.905320][T30159] usb 3-1: config 0 descriptor?? [ 1978.929569][T30159] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1979.054224][ T5909] usbhid 1-1:0.0: can't add hid device: -71 [ 1979.060744][ T5909] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1979.075231][ T5909] usb 1-1: USB disconnect, device number 64 [ 1979.177975][ T780] netlink: 'syz.1.7610': attribute type 2 has an invalid length. [ 1979.186294][ T780] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7610'. [ 1979.316983][ T784] FAULT_INJECTION: forcing a failure. [ 1979.316983][ T784] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1979.353050][ T784] CPU: 1 UID: 0 PID: 784 Comm: syz.3.7614 Tainted: G L syzkaller #0 PREEMPT(full) [ 1979.353083][ T784] Tainted: [L]=SOFTLOCKUP [ 1979.353091][ T784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1979.353102][ T784] Call Trace: [ 1979.353111][ T784] [ 1979.353120][ T784] dump_stack_lvl+0x189/0x250 [ 1979.353154][ T784] ? __pfx____ratelimit+0x10/0x10 [ 1979.353183][ T784] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1979.353206][ T784] ? __pfx__printk+0x10/0x10 [ 1979.353234][ T784] ? __might_fault+0xb0/0x130 [ 1979.353275][ T784] should_fail_ex+0x414/0x560 [ 1979.353307][ T784] _copy_from_iter+0x1cd/0x1630 [ 1979.353351][ T784] ? __pfx__copy_from_iter+0x10/0x10 [ 1979.353376][ T784] ? sock_alloc_send_pskb+0x86b/0x980 [ 1979.353405][ T784] ? __pfx__copy_from_iter+0x10/0x10 [ 1979.353437][ T784] ? page_copy_sane+0x16a/0x280 [ 1979.353468][ T784] copy_page_from_iter+0xdd/0x170 [ 1979.353503][ T784] skb_copy_datagram_from_iter+0x306/0x720 [ 1979.353540][ T784] tun_get_user+0x1683/0x3dc0 [ 1979.353584][ T784] ? aa_file_perm+0x44c/0x1530 [ 1979.353607][ T784] ? __pfx_tun_get_user+0x10/0x10 [ 1979.353630][ T784] ? __lock_acquire+0x6b6/0x2cf0 [ 1979.353653][ T784] ? kstrtoull+0x12f/0x1d0 [ 1979.353687][ T784] ? ref_tracker_alloc+0x318/0x460 [ 1979.353717][ T784] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1979.353750][ T784] ? tun_get+0x1c/0x2f0 [ 1979.353776][ T784] ? tun_get+0x1c/0x2f0 [ 1979.353795][ T784] ? tun_get+0x1c/0x2f0 [ 1979.353819][ T784] tun_chr_write_iter+0x113/0x200 [ 1979.353842][ T784] vfs_write+0x5c9/0xb30 [ 1979.353866][ T784] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1979.353888][ T784] ? __pfx_vfs_write+0x10/0x10 [ 1979.353921][ T784] ? __fget_files+0x2a/0x420 [ 1979.353956][ T784] ksys_write+0x145/0x250 [ 1979.353974][ T784] ? exc_page_fault+0x82/0x100 [ 1979.354010][ T784] ? __pfx_ksys_write+0x10/0x10 [ 1979.354034][ T784] ? __do_fast_syscall_32+0xbe/0x570 [ 1979.354057][ T784] __do_fast_syscall_32+0x1f7/0x570 [ 1979.354076][ T784] ? rcu_is_watching+0x15/0xb0 [ 1979.354098][ T784] ? do_fast_syscall_32+0x34/0x80 [ 1979.354121][ T784] do_fast_syscall_32+0x34/0x80 [ 1979.354140][ T784] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1979.354162][ T784] RIP: 0023:0xf707d539 [ 1979.354179][ T784] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1979.354198][ T784] RSP: 002b:00000000f546d520 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 1979.354219][ T784] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000140 [ 1979.354234][ T784] RDX: 000000000000fdef RSI: 00000000f7416ff4 RDI: 0000000000000000 [ 1979.354248][ T784] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1979.354260][ T784] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1979.354272][ T784] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1979.354303][ T784] [ 1979.863596][T30159] gspca_vc032x: reg_w err -110 [ 1979.984197][T30159] vc032x 3-1:0.0: probe with driver vc032x failed with error -110 [ 1980.036608][ T792] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1980.047577][ T792] fuse: Bad value for 'group_id' [ 1980.052563][ T792] fuse: Bad value for 'group_id' [ 1980.267717][ T798] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.7616'. [ 1980.315021][T30159] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1980.422489][T30156] usb 3-1: USB disconnect, device number 30 [ 1980.603504][T30159] usb 5-1: Using ep0 maxpacket: 16 [ 1980.610867][T30159] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1980.669042][T30159] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1980.703105][ T806] syzkaller0: entered promiscuous mode [ 1980.709799][T30159] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1980.709853][ T806] syzkaller0: entered allmulticast mode [ 1980.790819][T30159] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1980.800190][T30166] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1980.876493][T30159] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1980.903561][ T806] tipc: Enabled bearer , priority 0 [ 1980.919020][T30159] usb 5-1: config 0 descriptor?? [ 1980.968362][T30166] usb 4-1: config 0 has no interfaces? [ 1980.970381][ T805] tipc: Resetting bearer [ 1981.000271][T30166] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1981.084120][T30166] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1981.125996][ T805] tipc: Disabling bearer [ 1981.147308][T30166] usb 4-1: Product: syz [ 1981.151621][T30166] usb 4-1: Manufacturer: syz [ 1981.170976][ T814] loop2: detected capacity change from 0 to 7 [ 1981.185976][T30166] usb 4-1: SerialNumber: syz [ 1981.194681][ T814] Dev loop2: unable to read RDB block 7 [ 1981.214960][ T814] loop2: unable to read partition table [ 1981.239451][ T814] loop2: partition table beyond EOD, truncated [ 1981.247492][T30166] usb 4-1: config 0 descriptor?? [ 1981.273828][ T814] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1981.373968][ T5197] Dev loop2: unable to read RDB block 7 [ 1981.379657][ T5197] loop2: unable to read partition table [ 1981.430956][ T5197] loop2: partition table beyond EOD, truncated [ 1981.465713][ T819] netlink: 'syz.1.7624': attribute type 11 has an invalid length. [ 1981.505440][ T819] netlink: 137316 bytes leftover after parsing attributes in process `syz.1.7624'. [ 1981.595465][T30159] usbhid 5-1:0.0: can't add hid device: -71 [ 1981.601571][T30159] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1981.653772][T30159] usb 5-1: USB disconnect, device number 32 [ 1982.041012][ T834] fuse: Bad value for 'max_read' [ 1982.321939][ T798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1982.332640][ T798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1982.382725][ T798] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7616'. [ 1982.513624][T30166] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1982.913700][T30166] usb 1-1: Using ep0 maxpacket: 8 [ 1982.943145][T30166] usb 1-1: config 2 has an invalid interface number: 31 but max is 0 [ 1982.961474][T30166] usb 1-1: config 2 has no interface number 0 [ 1982.986671][T30166] usb 1-1: config 2 interface 31 has no altsetting 0 [ 1983.067424][T30166] usb 1-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1983.087196][T30166] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1983.134108][T30166] usb 1-1: Product: syz [ 1983.164107][T30166] usb 1-1: Manufacturer: syz [ 1983.173212][T30166] usb 1-1: SerialNumber: syz [ 1983.307527][T30166] ch9200 1-1:2.31: probe with driver ch9200 failed with error -22 [ 1983.550918][ T842] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7629'. [ 1983.578157][ T843] netlink: 'syz.2.7630': attribute type 2 has an invalid length. [ 1983.599596][ T843] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7630'. [ 1983.905587][T30166] usb 4-1: USB disconnect, device number 16 [ 1983.973484][T30156] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1984.051321][ T849] netlink: 80 bytes leftover after parsing attributes in process `syz.1.7632'. [ 1984.073030][ T849] netlink: 80 bytes leftover after parsing attributes in process `syz.1.7632'. [ 1984.211208][T30156] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1984.220379][T30156] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1984.249802][T30156] usb 5-1: Product: syz [ 1984.271669][T30156] usb 5-1: Manufacturer: syz [ 1984.353542][T30156] usb 5-1: SerialNumber: syz [ 1984.392510][T30156] usb 5-1: config 0 descriptor?? [ 1984.631533][T30156] hso 5-1:0.0: Failed to find BULK IN ep [ 1984.667896][T30156] usb-storage 5-1:0.0: USB Mass Storage device detected [ 1984.827612][T30159] usb 5-1: USB disconnect, device number 33 [ 1984.868023][ T864] loop2: detected capacity change from 0 to 7 [ 1984.880404][ T864] Dev loop2: unable to read RDB block 7 [ 1984.898945][ T864] loop2: unable to read partition table [ 1984.916894][ T864] loop2: partition table beyond EOD, truncated [ 1984.947134][ T864] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1985.159302][T30159] usb 1-1: USB disconnect, device number 65 [ 1985.607318][ T881] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7645'. [ 1985.665967][ T881] vlan0: entered promiscuous mode [ 1986.034830][ T892] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7650'. [ 1986.523271][ T915] netlink: 'syz.2.7653': attribute type 2 has an invalid length. [ 1986.585567][ T917] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7655'. [ 1986.641713][ T917] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7655'. [ 1986.706896][ T915] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7653'. [ 1988.048795][ T939] loop2: detected capacity change from 0 to 3 [ 1988.061242][ T944] fuse: Bad value for 'fd' [ 1988.068568][T20326] ldm_validate_privheads(): Disk read failed. [ 1988.093689][T20326] Dev loop2: unable to read RDB block 3 [ 1988.099340][T20326] loop2: unable to read partition table [ 1988.124278][T20326] loop2: partition table beyond EOD, truncated [ 1988.131704][ T939] ldm_validate_privheads(): Disk read failed. [ 1988.164378][ T939] Dev loop2: unable to read RDB block 3 [ 1988.170174][ T939] loop2: unable to read partition table [ 1988.176837][ T939] loop2: partition table beyond EOD, truncated [ 1988.196460][ T939] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1988.581532][ T970] FAULT_INJECTION: forcing a failure. [ 1988.581532][ T970] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1988.606754][ T5894] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1988.623779][ T970] CPU: 0 UID: 0 PID: 970 Comm: syz.2.7671 Tainted: G L syzkaller #0 PREEMPT(full) [ 1988.623819][ T970] Tainted: [L]=SOFTLOCKUP [ 1988.623827][ T970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1988.623839][ T970] Call Trace: [ 1988.623848][ T970] [ 1988.623856][ T970] dump_stack_lvl+0x189/0x250 [ 1988.623886][ T970] ? __pfx____ratelimit+0x10/0x10 [ 1988.623915][ T970] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1988.623939][ T970] ? __pfx__printk+0x10/0x10 [ 1988.623967][ T970] ? __might_fault+0xb0/0x130 [ 1988.624008][ T970] should_fail_ex+0x414/0x560 [ 1988.624039][ T970] _copy_from_iter+0x1cd/0x1630 [ 1988.624081][ T970] ? __pfx__copy_from_iter+0x10/0x10 [ 1988.624106][ T970] ? sock_alloc_send_pskb+0x86b/0x980 [ 1988.624135][ T970] ? __pfx__copy_from_iter+0x10/0x10 [ 1988.624167][ T970] ? page_copy_sane+0x16a/0x280 [ 1988.624198][ T970] copy_page_from_iter+0xdd/0x170 [ 1988.624233][ T970] skb_copy_datagram_from_iter+0x306/0x720 [ 1988.624270][ T970] tun_get_user+0x1683/0x3dc0 [ 1988.624312][ T970] ? aa_file_perm+0x44c/0x1530 [ 1988.624337][ T970] ? __pfx_tun_get_user+0x10/0x10 [ 1988.624361][ T970] ? __lock_acquire+0x6b6/0x2cf0 [ 1988.624385][ T970] ? kstrtoull+0x12f/0x1d0 [ 1988.624420][ T970] ? ref_tracker_alloc+0x318/0x460 [ 1988.624451][ T970] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1988.624486][ T970] ? tun_get+0x1c/0x2f0 [ 1988.624513][ T970] ? tun_get+0x1c/0x2f0 [ 1988.624532][ T970] ? tun_get+0x1c/0x2f0 [ 1988.624558][ T970] tun_chr_write_iter+0x113/0x200 [ 1988.624584][ T970] vfs_write+0x5c9/0xb30 [ 1988.624608][ T970] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1988.624637][ T970] ? __pfx_vfs_write+0x10/0x10 [ 1988.624678][ T970] ? __fget_files+0x2a/0x420 [ 1988.624711][ T970] ksys_write+0x145/0x250 [ 1988.624730][ T970] ? exc_page_fault+0x82/0x100 [ 1988.624760][ T970] ? __pfx_ksys_write+0x10/0x10 [ 1988.624783][ T970] ? __do_fast_syscall_32+0xbe/0x570 [ 1988.624807][ T970] __do_fast_syscall_32+0x1f7/0x570 [ 1988.624828][ T970] ? rcu_is_watching+0x15/0xb0 [ 1988.624850][ T970] ? do_fast_syscall_32+0x34/0x80 [ 1988.624876][ T970] do_fast_syscall_32+0x34/0x80 [ 1988.624895][ T970] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1988.624927][ T970] RIP: 0023:0xf705d539 [ 1988.624946][ T970] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1988.624964][ T970] RSP: 002b:00000000f544d520 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 1988.624987][ T970] RAX: ffffffffffffffda RBX: 00000000000000c8 RCX: 0000000080000140 [ 1988.625002][ T970] RDX: 000000000000fdef RSI: 00000000f73f6ff4 RDI: 0000000000000000 [ 1988.625016][ T970] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1988.625028][ T970] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1988.625041][ T970] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1988.625074][ T970] [ 1989.584085][ T5894] usb 2-1: Using ep0 maxpacket: 8 [ 1989.586453][ T5894] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1989.587904][ T5894] usb 2-1: config 7 has an invalid interface number: 142 but max is 0 [ 1989.587934][ T5894] usb 2-1: config 7 has no interface number 0 [ 1989.590542][ T5894] usb 2-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=dd.6d [ 1989.590564][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1989.590577][ T5894] usb 2-1: Product: syz [ 1989.590588][ T5894] usb 2-1: Manufacturer: syz [ 1989.590598][ T5894] usb 2-1: SerialNumber: syz [ 1989.619386][ T984] netlink: 'syz.3.7672': attribute type 2 has an invalid length. [ 1989.619415][ T984] __nla_validate_parse: 2 callbacks suppressed [ 1989.619427][ T984] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7672'. [ 1989.821997][ T957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1989.822321][ T957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1989.842797][ T5894] usb 2-1: USB disconnect, device number 25 [ 1990.053521][T30159] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1990.104957][ T989] sctp: [Deprecated]: syz.0.7675 (pid 989) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1990.104957][ T989] Use struct sctp_sack_info instead [ 1990.206517][T30159] usb 3-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 1990.206554][T30159] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1990.206583][T30159] usb 3-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice=e9.00 [ 1990.206599][T30159] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1990.208831][T30159] usb 3-1: config 0 descriptor?? [ 1990.213871][T30159] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1990.393622][T30159] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1990.525702][ T993] syzkaller0: entered promiscuous mode [ 1990.525719][ T993] syzkaller0: entered allmulticast mode [ 1990.543847][T30159] usb 1-1: Using ep0 maxpacket: 32 [ 1990.550376][T30159] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 1990.550394][T30159] usb 1-1: config 0 has no interface number 0 [ 1990.585549][T30159] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1990.585586][T30159] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1990.585609][T30159] usb 1-1: Product: syz [ 1990.585627][T30159] usb 1-1: Manufacturer: syz [ 1990.585645][T30159] usb 1-1: SerialNumber: syz [ 1990.590798][T30159] usb 1-1: config 0 descriptor?? [ 1990.596067][T30159] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1990.602526][ T993] tipc: Enabled bearer , priority 0 [ 1990.604856][ T992] tipc: Resetting bearer [ 1990.680384][ T992] tipc: Disabling bearer [ 1990.710822][ T30] audit: type=1326 audit(1765502202.562:5616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=997 comm="syz.1.7679" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70ad539 code=0x0 [ 1990.808407][T30159] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1990.835793][T30159] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1991.380160][T30159] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1991.654398][T30159] usb 4-1: Using ep0 maxpacket: 32 [ 1991.674501][T30159] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1991.679908][T30159] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1991.679967][T30159] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1991.679982][T30159] usb 4-1: Product: syz [ 1991.679993][T30159] usb 4-1: Manufacturer: syz [ 1991.680003][T30159] usb 4-1: SerialNumber: syz [ 1991.682302][T30159] usb 4-1: config 0 descriptor?? [ 1991.686166][T30159] cdc_ether 4-1:0.0: skipping garbage [ 1991.686180][T30159] usb 4-1: bad CDC descriptors [ 1991.686700][T30159] usb 4-1: unsupported MDLM descriptors [ 1992.748279][T30159] usb 3-1: USB disconnect, device number 31 [ 1993.013844][ T5894] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1993.209761][ T1023] libceph: resolve '. [ 1993.209761][ T1023] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 1993.209761][ T1023] ' (ret=-3): failed [ 1993.310241][ T5894] usb 5-1: config 0 has no interfaces? [ 1993.319164][ T5894] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1993.329028][ T5894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1993.422874][ T5894] usb 5-1: Product: syz [ 1993.436002][ T5894] usb 5-1: Manufacturer: syz [ 1993.447400][ T5894] usb 5-1: SerialNumber: syz [ 1993.464735][ T5894] usb 5-1: config 0 descriptor?? [ 1993.699042][ T5894] usb 5-1: USB disconnect, device number 34 [ 1994.009226][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1994.033988][T30166] usb 1-1: USB disconnect, device number 66 [ 1994.093615][T30166] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1994.109803][T30166] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1994.147240][T30166] quatech2 1-1:0.51: device disconnected [ 1994.320662][ T1031] netlink: 'syz.0.7683': attribute type 2 has an invalid length. [ 1994.328937][ T1031] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7683'. [ 1994.622238][T30166] usb 4-1: USB disconnect, device number 17 [ 1995.331137][ T1055] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1995.377367][ T1055] netlink: 'syz.2.7689': attribute type 11 has an invalid length. [ 1995.424037][ T1055] netlink: 137316 bytes leftover after parsing attributes in process `syz.2.7689'. [ 1996.013588][ T1068] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7693'. [ 1998.175164][ T1106] netlink: 'syz.3.7705': attribute type 1 has an invalid length. [ 1998.245405][ T1109] netlink: 'syz.2.7701': attribute type 2 has an invalid length. [ 1998.259908][ T1109] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7701'. [ 1998.312211][ T1106] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7705'. [ 1998.394516][ T1106] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7705'. [ 1998.759861][ T1122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7708'. [ 1999.544269][ T1137] netlink: 'syz.0.7715': attribute type 11 has an invalid length. [ 1999.552539][ T1137] netlink: 199796 bytes leftover after parsing attributes in process `syz.0.7715'. [ 1999.693652][ T5894] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1999.756817][ T1144] xt_hashlimit: invalid rate [ 1999.797556][ T1143] bond1: entered allmulticast mode [ 1999.803329][ T1143] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1999.847305][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1999.876096][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1999.897776][ T5894] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1999.915605][ T5894] usb 3-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 1999.926238][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1999.937430][ T5894] usb 3-1: config 0 descriptor?? [ 2000.033885][ T1154] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.7720'. [ 2000.529912][T30159] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 2000.610681][ T5894] hid-udraw 0003:20D6:CB17.006A: unknown main item tag 0x3 [ 2000.622740][ T5894] hid-udraw 0003:20D6:CB17.006A: item fetching failed at offset 3/7 [ 2000.675073][ T5894] hid-udraw 0003:20D6:CB17.006A: parse failed [ 2000.681814][ T5894] hid-udraw 0003:20D6:CB17.006A: probe with driver hid-udraw failed with error -22 [ 2000.764391][T30159] usb 5-1: config 0 has no interfaces? [ 2000.792444][T30159] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2000.860382][T30159] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2000.870406][ T1163] --map-set only usable from mangle table [ 2000.926551][T30159] usb 5-1: Product: syz [ 2000.938463][T30159] usb 5-1: Manufacturer: syz [ 2000.943193][T30159] usb 5-1: SerialNumber: syz [ 2000.965845][ T5894] usb 3-1: USB disconnect, device number 32 [ 2001.046429][T30159] usb 5-1: config 0 descriptor?? [ 2001.314335][ T1154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2001.368616][ T1154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2001.415587][ T1154] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7720'. [ 2001.518475][ T1167] loop2: detected capacity change from 0 to 7 [ 2001.528209][ T1173] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2001.538271][ T1167] Dev loop2: unable to read RDB block 7 [ 2001.544294][ T1167] loop2: unable to read partition table [ 2001.550554][ T1174] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2001.563277][ T1167] loop2: partition table beyond EOD, truncated [ 2001.587346][ T1167] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 2002.333488][T30159] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 2002.506575][T30159] usb 1-1: Using ep0 maxpacket: 16 [ 2002.512185][ T30] audit: type=1326 audit(1765502214.362:5617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1175 comm="syz.2.7729" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7fc00000 [ 2002.552854][T30159] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2002.575290][T30159] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2002.613499][T30159] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2002.638817][ T30] audit: type=1326 audit(1765502214.392:5618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1175 comm="syz.2.7729" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf705d539 code=0x7fc00000 [ 2002.688078][T30159] usb 1-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00 [ 2002.699718][T30159] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2002.708831][ T30] audit: type=1326 audit(1765502214.392:5619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1175 comm="syz.2.7729" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7fc00000 [ 2002.730979][T30166] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 2002.744314][ T30] audit: type=1326 audit(1765502214.392:5620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1175 comm="syz.2.7729" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7fc00000 [ 2002.767485][T30159] usb 1-1: config 0 descriptor?? [ 2002.776342][ T30] audit: type=1326 audit(1765502214.392:5621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1175 comm="syz.2.7729" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7fc00000 [ 2002.874080][ T30] audit: type=1326 audit(1765502214.392:5622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1175 comm="syz.2.7729" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7fc00000 [ 2002.913723][T30166] usb 4-1: Using ep0 maxpacket: 32 [ 2002.923622][T30166] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 2002.995461][T30166] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 2003.009688][T30166] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2003.018676][ T30] audit: type=1326 audit(1765502214.392:5623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1175 comm="syz.2.7729" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7fc00000 [ 2003.040911][T30166] usb 4-1: Product: syz [ 2003.045147][T30166] usb 4-1: Manufacturer: syz [ 2003.049743][T30166] usb 4-1: SerialNumber: syz [ 2003.055728][ T30] audit: type=1326 audit(1765502214.392:5624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1175 comm="syz.2.7729" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7fc00000 [ 2003.080420][T30166] usb 4-1: config 0 descriptor?? [ 2003.096410][T30166] cdc_ether 4-1:0.0: skipping garbage [ 2003.102774][T30166] usb 4-1: bad CDC descriptors [ 2003.108940][T30166] usb 4-1: unsupported MDLM descriptors [ 2003.135041][ T30] audit: type=1326 audit(1765502214.392:5625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1175 comm="syz.2.7729" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7fc00000 [ 2003.157663][ T30] audit: type=1326 audit(1765502214.392:5626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1175 comm="syz.2.7729" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7fc00000 [ 2003.190327][T30159] aquacomputer_d5next 0003:0C70:F014.006B: hidraw0: USB HID v0.00 Device [HID 0c70:f014] on usb-dummy_hcd.0-1/input0 [ 2003.389057][T30166] usb 1-1: USB disconnect, device number 67 [ 2003.694275][ T5909] usb 5-1: USB disconnect, device number 35 [ 2003.727574][ T1211] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 2003.748667][ T1211] netlink: 'syz.4.7739': attribute type 11 has an invalid length. [ 2003.775093][ T1211] netlink: 199796 bytes leftover after parsing attributes in process `syz.4.7739'. [ 2004.802292][ T5894] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 2004.953614][ T5894] usb 5-1: device descriptor read/64, error -71 [ 2005.043565][ T5909] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 2005.193523][ T5909] usb 2-1: Using ep0 maxpacket: 8 [ 2005.213644][ T5894] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 2005.225302][ T5909] usb 2-1: config 2 has an invalid interface number: 31 but max is 0 [ 2005.233568][ T5909] usb 2-1: config 2 has no interface number 0 [ 2005.239819][ T5909] usb 2-1: config 2 interface 31 has no altsetting 0 [ 2005.255083][ T5909] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 2005.265599][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2005.288987][ T5909] usb 2-1: Product: syz [ 2005.302208][ T5909] usb 2-1: Manufacturer: syz [ 2005.319364][ T5909] usb 2-1: SerialNumber: syz [ 2005.354285][ T5894] usb 5-1: device descriptor read/64, error -71 [ 2005.361618][ T5909] ch9200 2-1:2.31: probe with driver ch9200 failed with error -22 [ 2005.473865][ T5894] usb usb5-port1: attempt power cycle [ 2005.865496][ T5894] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 2005.979355][ T5894] usb 5-1: device descriptor read/8, error -71 [ 2006.118236][ T1250] netlink: 'syz.0.7750': attribute type 2 has an invalid length. [ 2006.126217][ T1250] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7750'. [ 2006.260440][T30159] usb 4-1: USB disconnect, device number 18 [ 2006.338385][ T5894] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 2006.374907][ T5894] usb 5-1: device descriptor read/8, error -71 [ 2006.489990][ T5894] usb usb5-port1: unable to enumerate USB device [ 2007.403518][ T5909] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 2007.563532][ T5909] usb 4-1: Using ep0 maxpacket: 8 [ 2007.575781][ T5909] usb 4-1: config 150 has an invalid interface number: 204 but max is 0 [ 2007.586901][ T5909] usb 4-1: config 150 has no interface number 0 [ 2007.606322][ T5909] usb 4-1: config 150 interface 204 has no altsetting 0 [ 2007.656901][ T5909] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 2007.666350][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2007.675536][ T5909] usb 4-1: Product: syz [ 2007.679773][ T5909] usb 4-1: Manufacturer: syz [ 2007.684519][ T5909] usb 4-1: SerialNumber: syz [ 2008.024438][ T5894] usb 2-1: USB disconnect, device number 26 [ 2008.214462][ T1254] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 2008.246305][ T5909] usb 4-1: USB disconnect, device number 19 [ 2008.303150][ T1272] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7759'. [ 2008.633085][ T1287] Cannot find del_set index 3 as target [ 2009.030557][ T1289] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7762'. [ 2009.140066][ T1289] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7762'. [ 2009.281324][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 2009.281344][ T30] audit: type=1326 audit(1765502221.132:5667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1280 comm="syz.1.7758" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ad539 code=0x7fc00000 [ 2009.318785][ T1291] loop2: detected capacity change from 0 to 7 [ 2009.327285][ T1291] Dev loop2: unable to read RDB block 7 [ 2009.333217][ T1291] loop2: unable to read partition table [ 2009.413760][ T1291] loop2: partition table beyond EOD, truncated [ 2009.469326][ T1291] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 2010.007936][ T1317] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7773'. [ 2010.017622][ T1317] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7773'. [ 2010.027824][ T1317] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7773'. [ 2010.037711][ T1317] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7773'. [ 2010.049101][ T5894] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 2010.099036][ T1322] loop2: detected capacity change from 0 to 3 [ 2010.108453][T20326] ldm_validate_privheads(): Disk read failed. [ 2010.116043][T20326] Dev loop2: unable to read RDB block 3 [ 2010.121870][T20326] loop2: unable to read partition table [ 2010.133756][T20326] loop2: partition table beyond EOD, truncated [ 2010.154519][ T1322] ldm_validate_privheads(): Disk read failed. [ 2010.162263][ T1323] netlink: 'syz.3.7772': attribute type 2 has an invalid length. [ 2010.170376][ T1322] Dev loop2: unable to read RDB block 3 [ 2010.176317][ T1322] loop2: unable to read partition table [ 2010.182393][ T1323] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7772'. [ 2010.192606][ T1322] loop2: partition table beyond EOD, truncated [ 2010.203459][ T5894] usb 2-1: Using ep0 maxpacket: 16 [ 2010.211907][ T5894] usb 2-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=98.5e [ 2010.224055][ T1322] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 2010.234639][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2010.243096][ T5894] usb 2-1: Product: syz [ 2010.257321][ T5894] usb 2-1: Manufacturer: syz [ 2010.276191][ T5894] usb 2-1: SerialNumber: syz [ 2010.304516][ T5894] usb 2-1: config 0 descriptor?? [ 2010.527434][ T5909] usb 2-1: USB disconnect, device number 27 [ 2010.643533][ T5894] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 2010.805856][ T5894] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2010.846161][ T5894] usb 1-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 2010.866298][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2010.875943][ T5894] usb 1-1: config 0 descriptor?? [ 2010.886661][ T5894] rndis_host 1-1:0.0: probe with driver rndis_host failed with error -22 [ 2011.558100][ T1351] libceph: resolve '. [ 2011.558100][ T1351] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 2011.558100][ T1351] ' (ret=-3): failed [ 2012.841161][ T1373] syzkaller0: entered promiscuous mode [ 2012.846935][ T1373] syzkaller0: entered allmulticast mode [ 2012.906843][ T1373] tipc: Enabled bearer , priority 0 [ 2012.931916][ T1372] tipc: Resetting bearer [ 2012.965949][ T1372] tipc: Disabling bearer [ 2013.003504][ T5828] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 2013.170354][ T5828] usb 4-1: Using ep0 maxpacket: 32 [ 2013.178712][ T5828] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 2013.287380][ T1381] netlink: 'syz.1.7791': attribute type 2 has an invalid length. [ 2013.296155][ T1381] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7791'. [ 2013.372109][ T5828] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 2013.449530][ T5828] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2013.498480][ T5828] usb 4-1: Product: syz [ 2013.507971][ T5828] usb 4-1: Manufacturer: syz [ 2013.512635][ T5828] usb 4-1: SerialNumber: syz [ 2013.524529][ T5828] usb 4-1: config 0 descriptor?? [ 2013.543758][ T5828] cdc_ether 4-1:0.0: skipping garbage [ 2013.549294][ T5828] usb 4-1: bad CDC descriptors [ 2013.555612][ T5828] usb 4-1: unsupported MDLM descriptors [ 2014.191891][ T5909] usb 1-1: USB disconnect, device number 68 [ 2014.401714][ T1394] netlink: 80 bytes leftover after parsing attributes in process `syz.4.7799'. [ 2014.411969][ T1394] netlink: 80 bytes leftover after parsing attributes in process `syz.4.7799'. [ 2015.007203][ T1402] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7800'. [ 2015.602377][ T5909] usb 4-1: USB disconnect, device number 20 [ 2015.982274][ T1423] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7806'. [ 2016.067271][ T1423] hsr_slave_0: left promiscuous mode [ 2016.075713][ T1423] hsr_slave_1: left promiscuous mode [ 2016.135773][ T1427] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2016.297462][ T1430] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7810'. [ 2016.325553][ T1430] vlan0: entered promiscuous mode [ 2016.433224][ T1435] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7812'. [ 2016.453312][ T1435] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7812'. [ 2016.463311][ T1435] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7812'. [ 2016.472980][ T1435] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7812'. [ 2016.515578][ T1436] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7811'. [ 2016.644395][ T30] audit: type=1326 audit(1765502228.502:5668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1416 comm="syz.3.7805" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7fc00000 [ 2016.963111][ T1441] delete_channel: no stack [ 2017.140107][ T1452] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 2017.148926][ T1452] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 2017.158364][ T1452] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 2017.281755][ T1456] pim6reg: entered allmulticast mode [ 2017.294977][ T1456] pim6reg: left allmulticast mode [ 2017.373657][T30156] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 2017.526954][T30156] usb 3-1: device descriptor read/64, error -71 [ 2017.774573][T30156] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 2017.913817][T30156] usb 3-1: device descriptor read/64, error -71 [ 2018.033916][T30156] usb usb3-port1: attempt power cycle [ 2018.362785][ T1504] xt_hashlimit: invalid rate [ 2018.393686][T30156] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 2018.424450][T30156] usb 3-1: device descriptor read/8, error -71 [ 2018.498117][ T5894] hid-generic 0003:0003:0000.006C: unknown main item tag 0x0 [ 2018.507795][ T5894] hid-generic 0003:0003:0000.006C: unknown main item tag 0x0 [ 2018.515704][ T5894] hid-generic 0003:0003:0000.006C: unknown main item tag 0x0 [ 2018.523258][ T5894] hid-generic 0003:0003:0000.006C: unknown main item tag 0x0 [ 2018.532361][ T5894] hid-generic 0003:0003:0000.006C: unknown main item tag 0x0 [ 2018.543165][ T5894] hid-generic 0003:0003:0000.006C: unknown main item tag 0x0 [ 2018.560854][ T5894] hid-generic 0003:0003:0000.006C: unknown main item tag 0x0 [ 2018.580670][ T5894] hid-generic 0003:0003:0000.006C: unknown main item tag 0x0 [ 2018.595016][ T5894] hid-generic 0003:0003:0000.006C: unknown main item tag 0x0 [ 2018.611697][ T5894] hid-generic 0003:0003:0000.006C: unknown main item tag 0x0 [ 2018.636975][ T5894] hid-generic 0003:0003:0000.006C: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 2018.665390][T30156] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 2018.705417][T30156] usb 3-1: device descriptor read/8, error -71 [ 2018.731820][ T1516] fido_id[1516]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 2018.804709][ T1518] syzkaller0: entered promiscuous mode [ 2018.810350][ T1518] syzkaller0: entered allmulticast mode [ 2018.829914][T30156] usb usb3-port1: unable to enumerate USB device [ 2018.842401][ T1518] tipc: Enabled bearer , priority 0 [ 2018.851201][ T1517] tipc: Resetting bearer [ 2018.874264][ T1517] tipc: Disabling bearer [ 2019.119346][ T1526] FAULT_INJECTION: forcing a failure. [ 2019.119346][ T1526] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2019.132613][ T1526] CPU: 0 UID: 0 PID: 1526 Comm: syz.1.7844 Tainted: G L syzkaller #0 PREEMPT(full) [ 2019.132631][ T1526] Tainted: [L]=SOFTLOCKUP [ 2019.132635][ T1526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2019.132641][ T1526] Call Trace: [ 2019.132646][ T1526] [ 2019.132650][ T1526] dump_stack_lvl+0x189/0x250 [ 2019.132674][ T1526] ? __pfx____ratelimit+0x10/0x10 [ 2019.132688][ T1526] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2019.132700][ T1526] ? __pfx__printk+0x10/0x10 [ 2019.132714][ T1526] ? __might_fault+0xb0/0x130 [ 2019.132734][ T1526] should_fail_ex+0x414/0x560 [ 2019.132749][ T1526] _copy_from_user+0x2d/0xb0 [ 2019.132760][ T1526] kstrtouint_from_user+0xc4/0x170 [ 2019.132780][ T1526] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 2019.132802][ T1526] proc_fail_nth_write+0x88/0x200 [ 2019.132813][ T1526] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2019.132826][ T1526] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2019.132837][ T1526] vfs_write+0x27e/0xb30 [ 2019.132851][ T1526] ? __pfx_vfs_write+0x10/0x10 [ 2019.132862][ T1526] ? __fget_files+0x2a/0x420 [ 2019.132883][ T1526] ? __fget_files+0x3a0/0x420 [ 2019.132902][ T1526] ? __fget_files+0x2a/0x420 [ 2019.132929][ T1526] ksys_write+0x145/0x250 [ 2019.132944][ T1526] ? exc_page_fault+0x82/0x100 [ 2019.132960][ T1526] ? __pfx_ksys_write+0x10/0x10 [ 2019.132971][ T1526] ? __do_fast_syscall_32+0xbe/0x570 [ 2019.132982][ T1526] __do_fast_syscall_32+0x1f7/0x570 [ 2019.132991][ T1526] ? rcu_is_watching+0x15/0xb0 [ 2019.133003][ T1526] ? do_fast_syscall_32+0x34/0x80 [ 2019.133015][ T1526] do_fast_syscall_32+0x34/0x80 [ 2019.133024][ T1526] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2019.133036][ T1526] RIP: 0023:0xf70ad539 [ 2019.133045][ T1526] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2019.133054][ T1526] RSP: 002b:00000000f549d590 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 2019.133066][ T1526] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f549d620 [ 2019.133073][ T1526] RDX: 0000000000000001 RSI: 00000000f7446ff4 RDI: 0000000000000000 [ 2019.133079][ T1526] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 2019.133088][ T1526] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2019.133097][ T1526] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2019.133123][ T1526] [ 2020.627492][ T1553] netlink: 'syz.1.7853': attribute type 11 has an invalid length. [ 2020.654506][ T1553] __nla_validate_parse: 3 callbacks suppressed [ 2020.654527][ T1553] netlink: 199828 bytes leftover after parsing attributes in process `syz.1.7853'. [ 2020.767818][ T1558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7857'. [ 2020.795172][T30156] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 2021.093779][ T1563] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.7856'. [ 2021.116400][T30156] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2021.127070][T30156] usb 3-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 2021.153802][T30156] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2021.163545][ T1569] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.7859'. [ 2021.202516][T30156] usb 3-1: config 0 descriptor?? [ 2021.283907][T30156] rndis_host 3-1:0.0: probe with driver rndis_host failed with error -22 [ 2021.536400][T30156] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 2021.716896][T30156] usb 5-1: config 0 has no interfaces? [ 2021.728063][T30156] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2021.737254][ T5894] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 2021.745259][T30156] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2021.753360][T30156] usb 5-1: Product: syz [ 2021.757911][T30156] usb 5-1: Manufacturer: syz [ 2021.762550][T30156] usb 5-1: SerialNumber: syz [ 2021.842497][T30156] usb 5-1: config 0 descriptor?? [ 2021.903919][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 2021.923920][T30159] usb 1-1: new full-speed USB device number 69 using dummy_hcd [ 2021.962431][ T5894] usb 2-1: config 0 has no interfaces? [ 2021.984696][ T5894] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2021.994234][ T5894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2022.002281][ T5894] usb 2-1: Product: syz [ 2022.033758][ T5894] usb 2-1: Manufacturer: syz [ 2022.038484][ T5894] usb 2-1: SerialNumber: syz [ 2022.094905][ T5894] usb 2-1: config 0 descriptor?? [ 2022.210494][ T1563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2022.226588][T30159] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 2022.228320][ T1563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2022.310129][T30159] usb 1-1: can't read configurations, error -71 [ 2022.437698][ T1569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2022.446928][ T1569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2022.994907][T30156] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 2023.127230][ T1593] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7864'. [ 2023.152618][ T1593] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7864'. [ 2023.161655][T30156] usb 4-1: Using ep0 maxpacket: 32 [ 2023.200819][T30156] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 2023.311113][T30156] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 2023.329188][T30156] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2023.374814][T30156] usb 4-1: Product: syz [ 2023.385673][T30156] usb 4-1: Manufacturer: syz [ 2023.403254][T30156] usb 4-1: SerialNumber: syz [ 2023.456632][T30156] usb 4-1: config 0 descriptor?? [ 2023.478079][T30156] cdc_ether 4-1:0.0: skipping garbage [ 2023.483722][T30156] usb 4-1: bad CDC descriptors [ 2023.491805][T30156] usb 4-1: unsupported MDLM descriptors [ 2023.911503][ T5909] usb 2-1: USB disconnect, device number 28 [ 2024.031401][T30156] usb 3-1: USB disconnect, device number 37 [ 2024.517401][ T1609] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7870'. [ 2024.540209][ T5894] usb 5-1: USB disconnect, device number 40 [ 2025.703477][T30156] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 2025.785278][T30166] usb 4-1: USB disconnect, device number 21 [ 2025.874641][T30156] usb 1-1: Using ep0 maxpacket: 32 [ 2025.884049][T30156] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2025.892636][T30156] usb 1-1: config 7 has an invalid interface number: 128 but max is 0 [ 2025.943132][T30156] usb 1-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 2025.972507][T30156] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 2025.992940][T30156] usb 1-1: config 7 has no interface number 0 [ 2026.017965][T30156] usb 1-1: config 7 interface 128 altsetting 2 has an endpoint descriptor with address 0x17, changing to 0x7 [ 2026.053762][T30156] usb 1-1: config 7 interface 128 altsetting 2 bulk endpoint 0x7 has invalid maxpacket 32 [ 2026.084718][T30156] usb 1-1: config 7 interface 128 altsetting 2 endpoint 0x87 has an invalid bInterval 209, changing to 11 [ 2026.105222][T30156] usb 1-1: config 7 interface 128 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 2026.132654][T30156] usb 1-1: config 7 interface 128 has no altsetting 0 [ 2026.185479][T30156] usb 1-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13 [ 2026.206962][T30156] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2026.233166][T30156] usb 1-1: Product: syz [ 2026.265854][T30156] usb 1-1: Manufacturer: syz [ 2026.270529][T30156] usb 1-1: SerialNumber: syz [ 2026.298390][ T1633] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7874'. [ 2026.401334][ T1623] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2026.637685][ T1644] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.7878'. [ 2026.672956][ T1645] ptrace attach of "./syz-executor exec"[27072] was attempted by "./syz-executor exec"[1645] [ 2026.777643][ T5828] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 2026.795939][T30156] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 2026.810502][T30156] usb 1-1: MIDIStreaming interface descriptor not found [ 2026.909161][ T5909] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 2027.103625][ T5828] usb 2-1: Using ep0 maxpacket: 8 [ 2027.110396][ T5828] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 2027.119958][ T5828] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2027.130266][ T5828] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2027.352557][ T5909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2027.354708][ T5894] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 2027.455409][T30156] usb 1-1: USB disconnect, device number 71 [ 2027.462937][ T5828] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2027.477913][ T5909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2027.482851][ T5828] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2027.508583][ T5828] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2027.518877][ T5828] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2027.543008][ T5909] usb 4-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 2027.586250][T21722] udevd[21722]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:7.128/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2027.631749][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2027.670946][ T5894] usb 3-1: config 0 has no interfaces? [ 2027.674854][ T5909] usb 4-1: config 0 descriptor?? [ 2027.693651][ T5894] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2027.705645][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2027.722011][ T5894] usb 3-1: Product: syz [ 2027.743862][ T5894] usb 3-1: Manufacturer: syz [ 2027.758843][ T5828] usb 2-1: usb_control_msg returned -71 [ 2027.773445][ T5894] usb 3-1: SerialNumber: syz [ 2027.778793][ T5828] usbtmc 2-1:16.0: can't read capabilities [ 2027.802614][ T5894] usb 3-1: config 0 descriptor?? [ 2027.827115][ T5828] usb 2-1: USB disconnect, device number 29 [ 2028.328147][ T1644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2028.345208][ T1653] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7881'. [ 2028.427582][ T1653] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7881'. [ 2028.952868][ T1644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2029.293813][T30166] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 2029.472210][ T5909] usb 4-1: string descriptor 0 read error: -71 [ 2029.478699][T30166] usb 2-1: Using ep0 maxpacket: 8 [ 2029.559319][ T5909] usbhid 4-1:0.0: can't add hid device: -71 [ 2029.569919][ T5909] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2029.593223][T30166] usb 2-1: config 2 has an invalid interface number: 31 but max is 0 [ 2029.608383][ T5909] usb 4-1: USB disconnect, device number 22 [ 2029.631115][T30166] usb 2-1: config 2 has no interface number 0 [ 2029.710575][T30166] usb 2-1: config 2 interface 31 has no altsetting 0 [ 2029.779337][ T1664] xt_TCPMSS: Only works on TCP SYN packets [ 2029.792138][T30166] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 2029.819926][T30166] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2029.842446][T30166] usb 2-1: Product: syz [ 2029.846971][T30166] usb 2-1: Manufacturer: syz [ 2029.851811][T30166] usb 2-1: SerialNumber: syz [ 2030.018767][T30166] ch9200 2-1:2.31: probe with driver ch9200 failed with error -22 [ 2030.374169][ T1669] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7885'. [ 2030.652826][ T1675] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7886'. [ 2030.688041][ T1666] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7885'. [ 2030.873980][ T5894] usb 3-1: USB disconnect, device number 38 [ 2030.950346][ T1666] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7885'. [ 2031.019091][ T30] audit: type=1326 audit(1765502242.872:5669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1663 comm="syz.4.7885" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x0 [ 2031.081544][ T1683] loop2: detected capacity change from 0 to 3 [ 2031.150390][T20326] ldm_validate_privheads(): Disk read failed. [ 2031.161011][T20326] Dev loop2: unable to read RDB block 3 [ 2031.178548][T20326] loop2: unable to read partition table [ 2031.203950][T20326] loop2: partition table beyond EOD, truncated [ 2031.219864][ T1683] ldm_validate_privheads(): Disk read failed. [ 2031.226693][ T1683] Dev loop2: unable to read RDB block 3 [ 2031.232740][ T1683] loop2: unable to read partition table [ 2031.238899][ T1683] loop2: partition table beyond EOD, truncated [ 2031.248598][ T1683] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 2031.293482][ T5894] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 2031.489567][ T5894] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2031.511677][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2031.588485][ T5894] usb 3-1: config 0 descriptor?? [ 2031.618806][ T5894] cp210x 3-1:0.0: cp210x converter detected [ 2031.828275][ T5894] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 2031.838705][ T5894] cp210x 3-1:0.0: querying part number failed [ 2031.983603][ T5894] usb 3-1: cp210x converter now attached to ttyUSB0 [ 2032.003784][ T1697] fuse: Bad value for 'max_read' [ 2032.047291][T30156] usb 2-1: USB disconnect, device number 30 [ 2032.384013][ T1708] xt_TCPMSS: Only works on TCP SYN packets [ 2032.933214][ T1717] input: syz1 as /devices/virtual/input/input92 [ 2033.374018][ T1726] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 2033.417656][ T1726] netlink: 'syz.3.7903': attribute type 11 has an invalid length. [ 2033.457016][ T1726] netlink: 199828 bytes leftover after parsing attributes in process `syz.3.7903'. [ 2033.710787][ T1733] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2033.719077][ T1733] IPv6: NLM_F_CREATE should be set when creating new route [ 2033.854555][ T1739] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7904'. [ 2033.873651][ T1739] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7904'. [ 2034.085448][ T5894] usb 3-1: USB disconnect, device number 39 [ 2034.110993][ T5894] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2034.172059][ T5894] cp210x 3-1:0.0: device disconnected [ 2035.096457][ T1753] netlink: 'syz.3.7909': attribute type 2 has an invalid length. [ 2035.104969][ T1753] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7909'. [ 2035.151754][ T30] audit: type=1400 audit(1765502247.002:5670): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=":(%#{//(@\)//&@},['%%&\#*" pid=1752 comm="syz.0.7911" [ 2036.100211][ T1769] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 2036.125475][ T1769] netlink: 'syz.2.7916': attribute type 11 has an invalid length. [ 2036.134895][ T1769] netlink: 199828 bytes leftover after parsing attributes in process `syz.2.7916'. [ 2036.294226][ T30] audit: type=1326 audit(1765502248.152:5671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1759 comm="syz.0.7912" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f12539 code=0x7fc00000 [ 2036.984868][T30159] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 2037.199503][T30159] usb 4-1: Using ep0 maxpacket: 32 [ 2037.222527][T30159] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 2037.270088][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.277038][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 2037.277211][T30159] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 2037.325208][T30159] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2037.355690][T30159] usb 4-1: Product: syz [ 2037.392747][T30159] usb 4-1: Manufacturer: syz [ 2037.404826][T30159] usb 4-1: SerialNumber: syz [ 2037.463559][T30159] usb 4-1: config 0 descriptor?? [ 2037.519953][T30159] cdc_ether 4-1:0.0: skipping garbage [ 2037.540174][T30159] usb 4-1: bad CDC descriptors [ 2037.690237][T30159] usb 4-1: unsupported MDLM descriptors [ 2037.813249][ T1796] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7922'. [ 2038.343493][T17119] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 2038.528125][T17119] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2038.548257][T17119] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2038.571091][ T1801] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7926'. [ 2038.599084][T17119] usb 3-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 2038.632901][T17119] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2038.689542][T17119] usb 3-1: config 0 descriptor?? [ 2038.879812][ T1809] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 2038.916255][ T1809] netlink: 'syz.4.7929': attribute type 11 has an invalid length. [ 2038.924877][ T1809] netlink: 199828 bytes leftover after parsing attributes in process `syz.4.7929'. [ 2039.040449][ T1814] netlink: 'syz.1.7928': attribute type 2 has an invalid length. [ 2039.049524][ T1814] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7928'. [ 2039.081954][ T1816] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.7930'. [ 2039.469214][ T5894] usb 4-1: USB disconnect, device number 23 [ 2039.731524][ T5909] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 2039.934548][ T5909] usb 1-1: config 0 has no interfaces? [ 2039.949743][ T5909] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 2039.959152][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2039.967751][ T5909] usb 1-1: Product: syz [ 2039.972099][ T30] audit: type=1326 audit(1765502251.782:5672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1822 comm="syz.3.7933" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf707d539 code=0x0 [ 2040.030548][ T5909] usb 1-1: Manufacturer: syz [ 2040.053923][ T5909] usb 1-1: SerialNumber: syz [ 2040.095443][ T5909] usb 1-1: config 0 descriptor?? [ 2040.622140][ T30] audit: type=1326 audit(1765502252.472:5673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1822 comm="syz.3.7933" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7fc00000 [ 2040.720034][T17119] usb 3-1: string descriptor 0 read error: -71 [ 2040.749885][T17119] usbhid 3-1:0.0: can't add hid device: -71 [ 2040.827638][ T1816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2040.839113][ T1816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2040.883587][T17119] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2040.915683][T17119] usb 3-1: USB disconnect, device number 40 [ 2040.952027][ T1834] xt_hashlimit: invalid rate [ 2041.274541][ T1846] loop2: detected capacity change from 0 to 3 [ 2041.282806][ T1846] ldm_validate_privheads(): Disk read failed. [ 2041.291865][ T1846] Dev loop2: unable to read RDB block 3 [ 2041.308882][ T1846] loop2: unable to read partition table [ 2041.325040][ T1846] loop2: partition table beyond EOD, truncated [ 2041.358498][ T1846] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 2041.388073][ T5197] ldm_validate_privheads(): Disk read failed. [ 2041.396576][ T5197] Dev loop2: unable to read RDB block 3 [ 2041.428301][ T5197] loop2: unable to read partition table [ 2041.447580][ T5197] loop2: partition table beyond EOD, truncated [ 2041.903499][ T30] audit: type=1326 audit(1765502253.752:5674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1851 comm="syz.3.7945" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 2041.991008][ T30] audit: type=1326 audit(1765502253.752:5675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1851 comm="syz.3.7945" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 2042.092131][ T30] audit: type=1326 audit(1765502253.752:5676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1851 comm="syz.3.7945" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 2042.153577][ T30] audit: type=1326 audit(1765502253.752:5677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1851 comm="syz.3.7945" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 2042.268121][ T30] audit: type=1326 audit(1765502253.752:5678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1851 comm="syz.3.7945" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 2042.742991][T30156] usb 1-1: USB disconnect, device number 72 [ 2042.862644][ T30] audit: type=1326 audit(1765502253.762:5679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1851 comm="syz.3.7945" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 2043.365421][ T30] audit: type=1326 audit(1765502253.762:5680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1851 comm="syz.3.7945" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 2043.398929][ T1885] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7952'. [ 2043.451050][ T30] audit: type=1326 audit(1765502253.762:5681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1851 comm="syz.3.7945" exe="/root/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 2043.560949][ T30] audit: type=1326 audit(1765502253.762:5682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1851 comm="syz.3.7945" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 2043.637764][ T30] audit: type=1326 audit(1765502253.762:5683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1851 comm="syz.3.7945" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf707d539 code=0x7ffc0000 [ 2044.223741][T30156] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 2044.317095][ T1905] fuse: Bad value for 'max_read' [ 2044.366900][ T1912] Cannot find del_set index 0 as target [ 2044.404907][T30156] usb 4-1: config 1 has an invalid descriptor of length 140, skipping remainder of the config [ 2044.428722][T30156] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2044.517946][T30156] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2044.630664][T30156] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2044.708931][T30156] usb 4-1: SerialNumber: syz [ 2044.899833][ T1917] loop2: detected capacity change from 0 to 7 [ 2044.907159][ T1917] Dev loop2: unable to read RDB block 7 [ 2044.913040][ T1917] loop2: unable to read partition table [ 2044.933644][ T1917] loop2: partition table beyond EOD, truncated [ 2044.949190][ T1917] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 2044.954977][ T1890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2044.990401][ T1888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2045.043630][ T1890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2045.065620][ T1888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2045.122737][T30156] usb 4-1: 0:2 : does not exist [ 2045.127772][T30156] usb 4-1: unit 195 not found! [ 2045.145455][ T5909] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 2045.204882][T30156] usb 4-1: USB disconnect, device number 24 [ 2045.303552][ T5909] usb 3-1: device descriptor read/64, error -71 [ 2045.553882][ T5909] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 2045.711225][ T5909] usb 3-1: device descriptor read/64, error -71 [ 2045.863806][ T5909] usb usb3-port1: attempt power cycle [ 2046.113511][T30156] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 2046.203587][ T5909] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 2046.235753][ T5909] usb 3-1: device descriptor read/8, error -71 [ 2046.266251][ T1942] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7970'. [ 2046.275496][T30156] usb 2-1: device descriptor read/64, error -71 [ 2046.596460][ T5909] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 2046.656526][T30156] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 2046.664524][ T5909] usb 3-1: device descriptor read/8, error -71 [ 2046.783726][ T5909] usb usb3-port1: unable to enumerate USB device [ 2046.809934][ T1946] netlink: 'syz.0.7971': attribute type 17 has an invalid length. [ 2046.819543][ T1946] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7971'. [ 2046.829485][ T1946] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7971'. [ 2046.839975][T30156] usb 2-1: device descriptor read/64, error -71 [ 2046.984269][T30156] usb usb2-port1: attempt power cycle [ 2047.333513][T30156] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 2047.364006][T30156] usb 2-1: device descriptor read/8, error -71 [ 2047.413631][ T5909] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 2047.484249][ T5894] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 2047.543518][ T5909] usb 4-1: device descriptor read/64, error -71 [ 2047.613516][T30156] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 2047.633469][ T5894] usb 1-1: Using ep0 maxpacket: 32 [ 2047.639572][T30156] usb 2-1: device descriptor read/8, error -71 [ 2047.646535][ T5894] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 2047.654811][ T5894] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2047.668317][ T5894] usb 1-1: config 0 has no interface number 0 [ 2047.674682][ T5894] usb 1-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2047.689892][ T5894] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 2047.699155][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2047.707214][ T5894] usb 1-1: Product: syz [ 2047.711403][ T5894] usb 1-1: Manufacturer: syz [ 2047.716111][ T5894] usb 1-1: SerialNumber: syz [ 2047.722962][ T5894] usb 1-1: config 0 descriptor?? [ 2047.731043][ T5894] radio-si470x 1-1:0.35: could not find interrupt in endpoint [ 2047.738713][ T5894] radio-si470x 1-1:0.35: probe with driver radio-si470x failed with error -5 [ 2047.763832][T30156] usb usb2-port1: unable to enumerate USB device [ 2047.801666][ T5909] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 2047.935436][ T5894] radio-raremono 1-1:0.35: this is not Thanko's Raremono. [ 2047.943261][ T5894] usbhid 1-1:0.35: couldn't find an input interrupt endpoint [ 2047.943496][ T5909] usb 4-1: device descriptor read/64, error -71 [ 2048.063714][ T5909] usb usb4-port1: attempt power cycle [ 2048.216532][T30156] usb 1-1: USB disconnect, device number 73 [ 2048.298672][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 2048.298690][ T30] audit: type=1326 audit(1765502260.152:5710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1964 comm="syz.4.7980" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700d539 code=0x7fc00000 [ 2048.400249][ T1973] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 2048.414122][ T5909] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 2048.425656][ T1973] netlink: 'syz.4.7983': attribute type 11 has an invalid length. [ 2048.436126][ T1973] netlink: 199828 bytes leftover after parsing attributes in process `syz.4.7983'. [ 2048.446030][ T5909] usb 4-1: device descriptor read/8, error -71 [ 2048.686249][ T5909] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 2048.718881][ T5909] usb 4-1: device descriptor read/8, error -71 [ 2048.820951][ T1981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7986'. [ 2048.834988][ T5909] usb usb4-port1: unable to enumerate USB device [ 2048.853717][T30156] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 2048.916642][ T1983] netlink: 'syz.1.7987': attribute type 17 has an invalid length. [ 2048.926031][ T1983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7987'. [ 2048.935262][ T1983] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7987'. [ 2049.035260][T30156] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2049.044141][T30156] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2049.054996][T30156] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2049.065060][T30156] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2049.076755][T30156] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2049.090243][T30156] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2049.099730][T30156] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2049.108196][T30156] usb 5-1: Product: syz [ 2049.112908][T30156] usb 5-1: Manufacturer: syz [ 2049.126833][T30156] cdc_wdm 5-1:1.0: skipping garbage [ 2049.133161][T30156] cdc_wdm 5-1:1.0: skipping garbage [ 2049.143980][T30156] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 2049.150030][T30156] cdc_wdm 5-1:1.0: Unknown control protocol [ 2049.183739][ T5909] usb 1-1: new low-speed USB device number 74 using dummy_hcd [ 2049.333513][ T5909] usb 1-1: device descriptor read/64, error -71 [ 2049.342969][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 2049.349815][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 2049.356064][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 2049.362639][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 2049.368905][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 2049.375498][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 2049.381760][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 2049.388433][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 2049.394704][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 2049.401406][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 2049.407785][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 2049.414389][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 2049.420677][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 2049.427255][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 2049.433574][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 2049.440146][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 2049.446394][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 2049.452962][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 2049.459174][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 2049.465747][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 2049.504066][T30159] usb 5-1: USB disconnect, device number 41 [ 2049.510003][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 2049.713523][ T5909] usb 1-1: new low-speed USB device number 75 using dummy_hcd [ 2049.843502][ T5909] usb 1-1: device descriptor read/64, error -71 [ 2049.955077][ T5909] usb usb1-port1: attempt power cycle [ 2050.048078][ T1955] delete_channel: no stack [ 2050.303497][ T5909] usb 1-1: new low-speed USB device number 76 using dummy_hcd [ 2050.344084][ T5909] usb 1-1: device descriptor read/8, error -71 [ 2050.367378][ T2004] netlink: 'syz.1.7994': attribute type 11 has an invalid length. [ 2050.393661][ T2004] netlink: 199828 bytes leftover after parsing attributes in process `syz.1.7994'. [ 2050.491909][ T30] audit: type=1326 audit(1765502262.342:5711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1998 comm="syz.2.7992" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7fc00000 [ 2050.501439][ T2008] xt_hashlimit: invalid rate [ 2050.587362][ T5909] usb 1-1: new low-speed USB device number 77 using dummy_hcd [ 2050.625376][ T5909] usb 1-1: device descriptor read/8, error -71 [ 2050.734542][ T5909] usb usb1-port1: unable to enumerate USB device [ 2050.822486][ T2016] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2050.923953][ T5909] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 2051.013223][ T2025] loop2: detected capacity change from 0 to 3 [ 2051.022466][ T2025] ldm_validate_privheads(): Disk read failed. [ 2051.030329][ T2025] Dev loop2: unable to read RDB block 3 [ 2051.037823][ T2025] loop2: unable to read partition table [ 2051.043904][ T2025] loop2: partition table beyond EOD, truncated [ 2051.063168][ T2025] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 2051.120452][ T5909] usb 2-1: Using ep0 maxpacket: 32 [ 2051.131638][ T5909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2051.153554][ T5909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2051.166685][ T5909] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 2051.221635][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2051.249711][ T5909] usb 2-1: config 0 descriptor?? [ 2051.295888][ T2037] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 2051.312168][ T2037] netlink: 'syz.4.8008': attribute type 11 has an invalid length. [ 2051.324916][ T2037] netlink: 199828 bytes leftover after parsing attributes in process `syz.4.8008'. [ 2051.676953][ T5909] hid_parser_main: 8 callbacks suppressed [ 2051.676967][ T5909] ft260 0003:0403:6030.006D: unknown main item tag 0x7 [ 2051.875380][ T5909] ft260 0003:0403:6030.006D: chip code: 6424 8183 [ 2052.149290][ T5909] ft260 0003:0403:6030.006D: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 2052.174455][ T2057] FAULT_INJECTION: forcing a failure. [ 2052.174455][ T2057] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2052.222773][ T2057] CPU: 1 UID: 0 PID: 2057 Comm: syz.3.8016 Tainted: G L syzkaller #0 PREEMPT(full) [ 2052.222802][ T2057] Tainted: [L]=SOFTLOCKUP [ 2052.222809][ T2057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2052.222820][ T2057] Call Trace: [ 2052.222827][ T2057] [ 2052.222835][ T2057] dump_stack_lvl+0x189/0x250 [ 2052.222874][ T2057] ? __pfx____ratelimit+0x10/0x10 [ 2052.222897][ T2057] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2052.222916][ T2057] ? __pfx__printk+0x10/0x10 [ 2052.222939][ T2057] ? __might_fault+0xb0/0x130 [ 2052.222973][ T2057] should_fail_ex+0x414/0x560 [ 2052.222999][ T2057] _copy_from_user+0x2d/0xb0 [ 2052.223018][ T2057] video_usercopy+0x349/0x13f0 [ 2052.223049][ T2057] ? __pfx___video_do_ioctl+0x10/0x10 [ 2052.223072][ T2057] ? __pfx_video_usercopy+0x10/0x10 [ 2052.223109][ T2057] ? __fget_files+0x2a/0x420 [ 2052.223136][ T2057] v4l2_ioctl+0x18d/0x1e0 [ 2052.223169][ T2057] v4l2_compat_ioctl32+0x1d7/0x290 [ 2052.223198][ T2057] __ia32_compat_sys_ioctl+0x543/0x840 [ 2052.223231][ T2057] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 2052.223254][ T2057] ? __fget_files+0x3a0/0x420 [ 2052.223409][ T2057] ? fput+0xa0/0xd0 [ 2052.223437][ T2057] ? ksys_write+0x22a/0x250 [ 2052.223456][ T2057] ? exc_page_fault+0x82/0x100 [ 2052.223485][ T2057] ? __pfx_ksys_write+0x10/0x10 [ 2052.223510][ T2057] ? __do_fast_syscall_32+0xbe/0x570 [ 2052.223535][ T2057] __do_fast_syscall_32+0x1f7/0x570 [ 2052.223556][ T2057] ? rcu_is_watching+0x15/0xb0 [ 2052.223578][ T2057] ? do_fast_syscall_32+0x34/0x80 [ 2052.223604][ T2057] do_fast_syscall_32+0x34/0x80 [ 2052.223624][ T2057] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2052.223648][ T2057] RIP: 0023:0xf707d539 [ 2052.223667][ T2057] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2052.223686][ T2057] RSP: 002b:00000000f546d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 2052.223711][ T2057] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0405602 [ 2052.223727][ T2057] RDX: 0000000080000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 2052.223740][ T2057] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2052.223754][ T2057] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2052.223767][ T2057] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2052.223801][ T2057] [ 2052.503777][ T2059] netlink: 'syz.1.7999': attribute type 1 has an invalid length. [ 2052.726837][ T5909] ft260 0003:0403:6030.006D: failed to retrieve status: -32, no wakeup [ 2052.986379][ T30] audit: type=1326 audit(1765502264.822:5712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2054 comm="syz.2.8015" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2053.010221][ T2011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2053.018913][ T5909] usb 2-1: reset high-speed USB device number 35 using dummy_hcd [ 2053.074181][ T2011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2053.097449][ T30] audit: type=1326 audit(1765502264.832:5713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2054 comm="syz.2.8015" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2053.138693][ T30] audit: type=1326 audit(1765502264.832:5714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2054 comm="syz.2.8015" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2053.171572][ T30] audit: type=1326 audit(1765502264.832:5715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2054 comm="syz.2.8015" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2053.261457][ T30] audit: type=1326 audit(1765502264.832:5716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2054 comm="syz.2.8015" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2053.340141][ T2072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8020'. [ 2053.373521][ T30] audit: type=1326 audit(1765502264.832:5717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2054 comm="syz.2.8015" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2053.417011][ T30] audit: type=1326 audit(1765502264.832:5718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2054 comm="syz.2.8015" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2053.447153][ T30] audit: type=1326 audit(1765502264.832:5719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2054 comm="syz.2.8015" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2053.505815][ T30] audit: type=1326 audit(1765502264.832:5720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2054 comm="syz.2.8015" exe="/root/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2053.571340][ T30] audit: type=1326 audit(1765502264.832:5721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2054 comm="syz.2.8015" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2053.622760][ T30] audit: type=1326 audit(1765502264.832:5722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2054 comm="syz.2.8015" exe="/root/syz-executor" sig=0 arch=40000003 syscall=425 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2053.653854][ T30] audit: type=1326 audit(1765502264.832:5723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2054 comm="syz.2.8015" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2053.683692][ T5894] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 2053.691397][ T30] audit: type=1326 audit(1765502264.832:5724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2054 comm="syz.2.8015" exe="/root/syz-executor" sig=0 arch=40000003 syscall=192 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2053.694284][ T2077] loop9: detected capacity change from 0 to 7 [ 2053.774719][ T2077] Dev loop9: unable to read RDB block 7 [ 2053.790947][ T2077] loop9: unable to read partition table [ 2053.798321][ T2079] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8024'. [ 2053.813711][ T2079] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8024'. [ 2053.822804][ T2077] loop9: partition table beyond EOD, truncated [ 2053.831306][ T2077] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 2053.847739][ T2080] netlink: 80 bytes leftover after parsing attributes in process `syz.2.8022'. [ 2053.857473][ T30] audit: type=1326 audit(1765502264.832:5725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2054 comm="syz.2.8015" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2053.914471][ T5894] usb 4-1: config 1 has an invalid descriptor of length 217, skipping remainder of the config [ 2053.926101][T30159] usb 2-1: USB disconnect, device number 35 [ 2054.129430][ T5894] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2054.172254][ T5894] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2054.194291][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2054.206389][ T30] audit: type=1326 audit(1765502264.832:5726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2054 comm="syz.2.8015" exe="/root/syz-executor" sig=0 arch=40000003 syscall=83 compat=1 ip=0xf705d539 code=0x7ffc0000 [ 2054.228852][ T5894] usb 4-1: Product: 颪햓薕ꛄｅ䗪ⵦӪ籞指鑪많沴幖ᙔ㦅殛ȭ쪇鈬줆矿଩﷧躂쪝牾䡡น죃돖淴⾶蹪댏㑎桜⣲ֲശ⸔渜뱷爟闵牍壟ꛀ‹냾ऴ־ꉮ鍉蔨৖៤Ჿ頦氨㜀쵧牔㨱ゕ뼎跚鿊蘄쏙Ⱌ쨃翦⍣ఎ⩲泑ዶ髗 [ 2054.313418][ T5894] usb 4-1: Manufacturer: ಄顝ᱣಭ铈ⳋ੢滈㡨뫪نꍱ홬鷐쿤 [ 2054.329271][ T5894] usb 4-1: SerialNumber: В [ 2054.365797][ T2084] usb usb1: usbfs: process 2084 (syz.4.8026) did not claim interface 0 before use [ 2054.663771][T30159] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 2054.793474][T30159] usb 5-1: device descriptor read/64, error -71 [ 2055.067250][ T2097] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.8028'. [ 2055.080696][ T2071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2055.203746][ T2071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2055.359562][T30159] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 2055.384102][ T2095] netlink: 'syz.0.8029': attribute type 2 has an invalid length. [ 2055.397197][ T2095] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8029'. [ 2055.516303][T30159] usb 5-1: device descriptor read/64, error -71 [ 2055.572737][ T2104] [ 2055.575124][ T2104] ===================================================== [ 2055.582058][ T2104] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 2055.589610][ T2104] syzkaller #0 Tainted: G L [ 2055.595682][ T2104] ----------------------------------------------------- [ 2055.602617][ T2104] syz.2.8030/2104 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 2055.610255][ T2104] ffff88803119fa98 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 2055.618986][ T2104] [ 2055.618986][ T2104] and this task is already holding: [ 2055.626356][ T2104] ffff888057462028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 2055.636130][ T2104] which would create a new lock dependency: [ 2055.642025][ T2104] (&client->buffer_lock){....}-{3:3} -> (&new->fa_lock){....}-{3:3} [ 2055.650136][ T2104] [ 2055.650136][ T2104] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 2055.659583][ T2104] (&dev->event_lock#2){..-.}-{3:3} [ 2055.659616][ T2104] [ 2055.659616][ T2104] ... which became SOFTIRQ-irq-safe at: [ 2055.672529][ T2104] lock_acquire+0x117/0x340 [ 2055.677134][ T2104] _raw_spin_lock_irqsave+0xa7/0xf0 [ 2055.682435][ T2104] input_event+0x76/0xe0 [ 2055.686769][ T2104] atp_complete_geyser_3_4+0x11f2/0x1e80 [ 2055.692488][ T2104] __usb_hcd_giveback_urb+0x376/0x540 [ 2055.697957][ T2104] dummy_timer+0x85f/0x45b0 [ 2055.702549][ T2104] __hrtimer_run_queues+0x51c/0xc30 [ 2055.707842][ T2104] hrtimer_run_softirq+0x187/0x2b0 [ 2055.713050][ T2104] handle_softirqs+0x27d/0x850 [ 2055.718079][ T2104] __irq_exit_rcu+0xca/0x1f0 [ 2055.722761][ T2104] irq_exit_rcu+0x9/0x30 [ 2055.727096][ T2104] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 2055.732910][ T2104] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2055.738979][ T2104] _raw_spin_unlock_irqrestore+0xa8/0x110 [ 2055.744875][ T2104] dummy_urb_enqueue+0x58a/0x780 [ 2055.749909][ T2104] usb_hcd_submit_urb+0x328/0x1b80 [ 2055.755125][ T2104] atp_open+0x63/0xc0 [ 2055.759216][ T2104] input_open_device+0x1d3/0x390 [ 2055.764251][ T2104] mousedev_open_device+0xcc/0x150 [ 2055.769467][ T2104] mousedev_open+0x2ef/0x4a0 [ 2055.774334][ T2104] chrdev_open+0x4cc/0x5e0 [ 2055.778849][ T2104] do_dentry_open+0x7ce/0x1420 [ 2055.783716][ T2104] vfs_open+0x3b/0x340 [ 2055.787874][ T2104] path_openat+0x340e/0x3dd0 [ 2055.792554][ T2104] do_filp_open+0x1fa/0x410 [ 2055.797147][ T2104] do_sys_openat2+0x121/0x200 [ 2055.802003][ T2104] __x64_sys_openat+0x138/0x170 [ 2055.806947][ T2104] do_syscall_64+0xfa/0xf80 [ 2055.811554][ T2104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2055.817544][ T2104] [ 2055.817544][ T2104] to a SOFTIRQ-irq-unsafe lock: [ 2055.824578][ T2104] (tasklist_lock){.+.+}-{3:3} [ 2055.824610][ T2104] [ 2055.824610][ T2104] ... which became SOFTIRQ-irq-unsafe at: [ 2055.837242][ T2104] ... [ 2055.837250][ T2104] lock_acquire+0x117/0x340 [ 2055.844421][ T2104] _raw_read_lock+0x36/0x50 [ 2055.849015][ T2104] __do_wait+0xde/0x740 [ 2055.853266][ T2104] do_wait+0x1e8/0x4f0 [ 2055.857432][ T2104] kernel_wait+0xab/0x170 [ 2055.861857][ T2104] call_usermodehelper_exec_work+0xbe/0x230 [ 2055.867838][ T2104] process_scheduled_works+0xad1/0x1770 [ 2055.873472][ T2104] worker_thread+0x8a0/0xda0 [ 2055.878156][ T2104] kthread+0x711/0x8a0 [ 2055.882331][ T2104] ret_from_fork+0x599/0xb30 [ 2055.887004][ T2104] ret_from_fork_asm+0x1a/0x30 [ 2055.891947][ T2104] [ 2055.891947][ T2104] other info that might help us debug this: [ 2055.891947][ T2104] [ 2055.902263][ T2104] Chain exists of: [ 2055.902263][ T2104] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 2055.902263][ T2104] [ 2055.915932][ T2104] Possible interrupt unsafe locking scenario: [ 2055.915932][ T2104] [ 2055.924423][ T2104] CPU0 CPU1 [ 2055.929791][ T2104] ---- ---- [ 2055.935160][ T2104] lock(tasklist_lock); [ 2055.939406][ T2104] local_irq_disable(); [ 2055.946170][ T2104] lock(&dev->event_lock#2); [ 2055.953412][ T2104] lock(&client->buffer_lock); [ 2055.960801][ T2104] [ 2055.964261][ T2104] lock(&dev->event_lock#2); [ 2055.969128][ T2104] [ 2055.969128][ T2104] *** DEADLOCK *** [ 2055.969128][ T2104] [ 2055.977297][ T2104] 7 locks held by syz.2.8030/2104: [ 2055.982410][ T2104] #0: ffff888146b54118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480 [ 2055.991668][ T2104] #1: ffff8881466ba230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xa5/0x340 [ 2056.001781][ T2104] #2: ffffffff8df419e0 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xb6/0x340 [ 2056.011469][ T2104] #3: ffffffff8df419e0 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890 [ 2056.021091][ T2104] #4: ffffffff8df419e0 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340 [ 2056.030274][ T2104] #5: ffff888057462028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0 [ 2056.040495][ T2104] #6: ffffffff8df419e0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 2056.049660][ T2104] [ 2056.049660][ T2104] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 2056.060077][ T2104] -> (&dev->event_lock#2){..-.}-{3:3} { [ 2056.065741][ T2104] IN-SOFTIRQ-W at: [ 2056.069809][ T2104] lock_acquire+0x117/0x340 [ 2056.076153][ T2104] _raw_spin_lock_irqsave+0xa7/0xf0 [ 2056.083627][ T2104] input_event+0x76/0xe0 [ 2056.089700][ T2104] atp_complete_geyser_3_4+0x11f2/0x1e80 [ 2056.097218][ T2104] __usb_hcd_giveback_urb+0x376/0x540 [ 2056.104423][ T2104] dummy_timer+0x85f/0x45b0 [ 2056.110759][ T2104] __hrtimer_run_queues+0x51c/0xc30 [ 2056.117785][ T2104] hrtimer_run_softirq+0x187/0x2b0 [ 2056.124728][ T2104] handle_softirqs+0x27d/0x850 [ 2056.131342][ T2104] __irq_exit_rcu+0xca/0x1f0 [ 2056.137755][ T2104] irq_exit_rcu+0x9/0x30 [ 2056.143819][ T2104] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 2056.151282][ T2104] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2056.159097][ T2104] _raw_spin_unlock_irqrestore+0xa8/0x110 [ 2056.166736][ T2104] dummy_urb_enqueue+0x58a/0x780 [ 2056.173503][ T2104] usb_hcd_submit_urb+0x328/0x1b80 [ 2056.180441][ T2104] atp_open+0x63/0xc0 [ 2056.186246][ T2104] input_open_device+0x1d3/0x390 [ 2056.193015][ T2104] mousedev_open_device+0xcc/0x150 [ 2056.199961][ T2104] mousedev_open+0x2ef/0x4a0 [ 2056.206378][ T2104] chrdev_open+0x4cc/0x5e0 [ 2056.212623][ T2104] do_dentry_open+0x7ce/0x1420 [ 2056.219394][ T2104] vfs_open+0x3b/0x340 [ 2056.225298][ T2104] path_openat+0x340e/0x3dd0 [ 2056.231714][ T2104] do_filp_open+0x1fa/0x410 [ 2056.238040][ T2104] do_sys_openat2+0x121/0x200 [ 2056.244545][ T2104] __x64_sys_openat+0x138/0x170 [ 2056.251230][ T2104] do_syscall_64+0xfa/0xf80 [ 2056.257567][ T2104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2056.265313][ T2104] INITIAL USE at: [ 2056.269307][ T2104] lock_acquire+0x117/0x340 [ 2056.275559][ T2104] _raw_spin_lock_irqsave+0xa7/0xf0 [ 2056.282500][ T2104] input_inject_event+0xa5/0x340 [ 2056.289178][ T2104] kbd_led_trigger_activate+0xbc/0x100 [ 2056.296381][ T2104] led_trigger_set+0x52d/0x950 [ 2056.302889][ T2104] led_trigger_set_default+0x260/0x2a0 [ 2056.310083][ T2104] led_classdev_register_ext+0x73d/0x960 [ 2056.317459][ T2104] input_leds_connect+0x517/0x790 [ 2056.324227][ T2104] input_register_device+0xd00/0x1170 [ 2056.331348][ T2104] atkbd_connect+0x73b/0xa50 [ 2056.337674][ T2104] serio_driver_probe+0x82/0xd0 [ 2056.344270][ T2104] really_probe+0x26d/0xad0 [ 2056.350518][ T2104] __driver_probe_device+0x18c/0x320 [ 2056.357549][ T2104] driver_probe_device+0x4f/0x240 [ 2056.364344][ T2104] __driver_attach+0x349/0x650 [ 2056.370854][ T2104] bus_for_each_dev+0x233/0x2b0 [ 2056.377447][ T2104] serio_handle_event+0x1f9/0x8d0 [ 2056.384218][ T2104] process_scheduled_works+0xad1/0x1770 [ 2056.391499][ T2104] worker_thread+0x8a0/0xda0 [ 2056.397830][ T2104] kthread+0x711/0x8a0 [ 2056.403647][ T2104] ret_from_fork+0x599/0xb30 [ 2056.409973][ T2104] ret_from_fork_asm+0x1a/0x30 [ 2056.416484][ T2104] } [ 2056.419079][ T2104] ... key at: [] input_allocate_device.__key.6+0x0/0x20 [ 2056.428350][ T2104] -> (&client->buffer_lock){....}-{3:3} { [ 2056.434176][ T2104] INITIAL USE at: [ 2056.438071][ T2104] lock_acquire+0x117/0x340 [ 2056.444145][ T2104] _raw_spin_lock+0x2e/0x40 [ 2056.450222][ T2104] evdev_pass_values+0xb9/0xbd0 [ 2056.456656][ T2104] evdev_events+0x1e6/0x340 [ 2056.462727][ T2104] input_pass_values+0x288/0x890 [ 2056.469234][ T2104] input_event_dispose+0x3e5/0x6b0 [ 2056.475917][ T2104] input_inject_event+0x1dd/0x340 [ 2056.482509][ T2104] evdev_ioctl_handler+0x1598/0x1f10 [ 2056.489360][ T2104] __ia32_compat_sys_ioctl+0x543/0x840 [ 2056.496387][ T2104] __do_fast_syscall_32+0x1f7/0x570 [ 2056.503146][ T2104] do_fast_syscall_32+0x34/0x80 [ 2056.509566][ T2104] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2056.517463][ T2104] } [ 2056.520039][ T2104] ... key at: [] evdev_open.__key.26+0x0/0x20 [ 2056.528198][ T2104] ... acquired at: [ 2056.531996][ T2104] _raw_spin_lock+0x2e/0x40 [ 2056.536682][ T2104] evdev_pass_values+0xb9/0xbd0 [ 2056.541716][ T2104] evdev_events+0x1e6/0x340 [ 2056.546401][ T2104] input_pass_values+0x288/0x890 [ 2056.551518][ T2104] input_event_dispose+0x3e5/0x6b0 [ 2056.556806][ T2104] input_inject_event+0x1dd/0x340 [ 2056.562013][ T2104] evdev_ioctl_handler+0x1598/0x1f10 [ 2056.567473][ T2104] __ia32_compat_sys_ioctl+0x543/0x840 [ 2056.573103][ T2104] __do_fast_syscall_32+0x1f7/0x570 [ 2056.578482][ T2104] do_fast_syscall_32+0x34/0x80 [ 2056.583508][ T2104] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2056.590018][ T2104] [ 2056.592347][ T2104] [ 2056.592347][ T2104] the dependencies between the lock to be acquired [ 2056.592357][ T2104] and SOFTIRQ-irq-unsafe lock: [ 2056.606042][ T2104] -> (tasklist_lock){.+.+}-{3:3} { [ 2056.611361][ T2104] HARDIRQ-ON-R at: [ 2056.615555][ T2104] lock_acquire+0x117/0x340 [ 2056.622114][ T2104] _raw_read_lock+0x36/0x50 [ 2056.628626][ T2104] __do_wait+0xde/0x740 [ 2056.634789][ T2104] do_wait+0x1e8/0x4f0 [ 2056.640867][ T2104] kernel_wait+0xab/0x170 [ 2056.647205][ T2104] call_usermodehelper_exec_work+0xbe/0x230 [ 2056.655098][ T2104] process_scheduled_works+0xad1/0x1770 [ 2056.662640][ T2104] worker_thread+0x8a0/0xda0 [ 2056.669233][ T2104] kthread+0x711/0x8a0 [ 2056.675322][ T2104] ret_from_fork+0x599/0xb30 [ 2056.681920][ T2104] ret_from_fork_asm+0x1a/0x30 [ 2056.688689][ T2104] SOFTIRQ-ON-R at: [ 2056.692849][ T2104] lock_acquire+0x117/0x340 [ 2056.699438][ T2104] _raw_read_lock+0x36/0x50 [ 2056.705955][ T2104] __do_wait+0xde/0x740 [ 2056.712118][ T2104] do_wait+0x1e8/0x4f0 [ 2056.718201][ T2104] kernel_wait+0xab/0x170 [ 2056.724557][ T2104] call_usermodehelper_exec_work+0xbe/0x230 [ 2056.732477][ T2104] process_scheduled_works+0xad1/0x1770 [ 2056.740034][ T2104] worker_thread+0x8a0/0xda0 [ 2056.746629][ T2104] kthread+0x711/0x8a0 [ 2056.752702][ T2104] ret_from_fork+0x599/0xb30 [ 2056.759295][ T2104] ret_from_fork_asm+0x1a/0x30 [ 2056.766066][ T2104] INITIAL USE at: [ 2056.770144][ T2104] lock_acquire+0x117/0x340 [ 2056.776568][ T2104] _raw_write_lock_irq+0xa2/0xf0 [ 2056.783448][ T2104] copy_process+0x2185/0x3950 [ 2056.790051][ T2104] kernel_clone+0x21e/0x820 [ 2056.796495][ T2104] user_mode_thread+0xdd/0x140 [ 2056.803180][ T2104] rest_init+0x23/0x300 [ 2056.809255][ T2104] start_kernel+0x3a7/0x400 [ 2056.815681][ T2104] x86_64_start_reservations+0x24/0x30 [ 2056.823061][ T2104] x86_64_start_kernel+0x143/0x1c0 [ 2056.830095][ T2104] common_startup_64+0x13e/0x147 [ 2056.836953][ T2104] INITIAL READ USE at: [ 2056.841467][ T2104] lock_acquire+0x117/0x340 [ 2056.848322][ T2104] _raw_read_lock+0x36/0x50 [ 2056.855177][ T2104] __do_wait+0xde/0x740 [ 2056.861686][ T2104] do_wait+0x1e8/0x4f0 [ 2056.868109][ T2104] kernel_wait+0xab/0x170 [ 2056.874795][ T2104] call_usermodehelper_exec_work+0xbe/0x230 [ 2056.883036][ T2104] process_scheduled_works+0xad1/0x1770 [ 2056.890924][ T2104] worker_thread+0x8a0/0xda0 [ 2056.897858][ T2104] kthread+0x711/0x8a0 [ 2056.904278][ T2104] ret_from_fork+0x599/0xb30 [ 2056.911217][ T2104] ret_from_fork_asm+0x1a/0x30 [ 2056.918508][ T2104] } [ 2056.921193][ T2104] ... key at: [] tasklist_lock+0x18/0x40 [ 2056.929097][ T2104] ... acquired at: [ 2056.933075][ T2104] _raw_read_lock+0x36/0x50 [ 2056.937761][ T2104] send_sigio+0x101/0x370 [ 2056.942359][ T2104] kill_fasync+0x24d/0x4d0 [ 2056.946979][ T2104] lease_break_callback+0x26/0x30 [ 2056.952194][ T2104] __break_lease+0x730/0x1620 [ 2056.957049][ T2104] vfs_truncate+0x428/0x520 [ 2056.961729][ T2104] do_sys_truncate+0xdb/0x190 [ 2056.966589][ T2104] __ia32_compat_sys_truncate+0x5b/0x70 [ 2056.972330][ T2104] __do_fast_syscall_32+0x1f7/0x570 [ 2056.977718][ T2104] do_fast_syscall_32+0x34/0x80 [ 2056.982756][ T2104] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2056.989273][ T2104] [ 2056.991618][ T2104] -> (&f_owner->lock){...-}-{3:3} { [ 2056.996929][ T2104] IN-SOFTIRQ-R at: [ 2057.001092][ T2104] lock_acquire+0x117/0x340 [ 2057.007425][ T2104] _raw_read_lock_irqsave+0xaf/0x100 [ 2057.014545][ T2104] send_sigurg+0x55/0x420 [ 2057.021148][ T2104] sk_send_sigurg+0x6c/0x2e0 [ 2057.027570][ T2104] tcp_check_urg+0x200/0x760 [ 2057.034019][ T2104] tcp_urg+0x164/0x3f0 [ 2057.039926][ T2104] tcp_rcv_established+0xf4c/0x2580 [ 2057.046948][ T2104] tcp_v4_do_rcv+0xa90/0x1430 [ 2057.053452][ T2104] tcp_v4_rcv+0x2675/0x2f20 [ 2057.059789][ T2104] ip_protocol_deliver_rcu+0x221/0x440 [ 2057.067079][ T2104] ip_local_deliver_finish+0x3bb/0x6f0 [ 2057.074365][ T2104] NF_HOOK+0x30c/0x3a0 [ 2057.080264][ T2104] NF_HOOK+0x30c/0x3a0 [ 2057.086168][ T2104] __netif_receive_skb+0x143/0x380 [ 2057.093112][ T2104] process_backlog+0x622/0x1500 [ 2057.099796][ T2104] __napi_poll+0xae/0x320 [ 2057.105970][ T2104] net_rx_action+0x672/0xe50 [ 2057.112687][ T2104] handle_softirqs+0x27d/0x850 [ 2057.119323][ T2104] __irq_exit_rcu+0xca/0x1f0 [ 2057.125851][ T2104] irq_exit_rcu+0x9/0x30 [ 2057.131942][ T2104] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 2057.139414][ T2104] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2057.147230][ T2104] __sanitizer_cov_trace_pc+0x46/0x70 [ 2057.154439][ T2104] do_recvmmsg+0x382/0x770 [ 2057.160778][ T2104] __sys_recvmmsg+0x19d/0x280 [ 2057.167285][ T2104] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 2057.175790][ T2104] __do_fast_syscall_32+0x1f7/0x570 [ 2057.182816][ T2104] do_fast_syscall_32+0x34/0x80 [ 2057.189489][ T2104] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2057.197652][ T2104] INITIAL USE at: [ 2057.201647][ T2104] lock_acquire+0x117/0x340 [ 2057.207975][ T2104] _raw_write_lock_irq+0xa2/0xf0 [ 2057.214658][ T2104] __f_setown+0x67/0x370 [ 2057.220643][ T2104] generic_setlease+0xe1e/0x1280 [ 2057.227329][ T2104] do_fcntl_add_lease+0x34d/0x460 [ 2057.234104][ T2104] fcntl_setlease+0x123/0x180 [ 2057.240524][ T2104] do_fcntl+0x867/0x1a50 [ 2057.246527][ T2104] do_compat_fcntl64+0x477/0x720 [ 2057.253228][ T2104] __do_fast_syscall_32+0x1f7/0x570 [ 2057.260170][ T2104] do_fast_syscall_32+0x34/0x80 [ 2057.266760][ T2104] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2057.274922][ T2104] INITIAL READ USE at: [ 2057.279335][ T2104] lock_acquire+0x117/0x340 [ 2057.286012][ T2104] _raw_read_lock_irqsave+0xaf/0x100 [ 2057.293573][ T2104] send_sigio+0x38/0x370 [ 2057.299999][ T2104] kill_fasync+0x24d/0x4d0 [ 2057.306594][ T2104] lease_break_callback+0x26/0x30 [ 2057.313887][ T2104] __break_lease+0x730/0x1620 [ 2057.320737][ T2104] do_dentry_open+0x73a/0x1420 [ 2057.327679][ T2104] vfs_open+0x3b/0x340 [ 2057.333929][ T2104] path_openat+0x340e/0x3dd0 [ 2057.340780][ T2104] do_filp_open+0x1fa/0x410 [ 2057.347456][ T2104] do_sys_openat2+0x121/0x200 [ 2057.354313][ T2104] __ia32_compat_sys_openat+0x131/0x160 [ 2057.362038][ T2104] __do_fast_syscall_32+0x1f7/0x570 [ 2057.369406][ T2104] do_fast_syscall_32+0x34/0x80 [ 2057.376429][ T2104] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2057.384936][ T2104] } [ 2057.387523][ T2104] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 2057.396469][ T2104] ... acquired at: [ 2057.400358][ T2104] _raw_read_lock_irqsave+0xaf/0x100 [ 2057.405827][ T2104] send_sigio+0x38/0x370 [ 2057.410254][ T2104] kill_fasync+0x24d/0x4d0 [ 2057.414862][ T2104] lease_break_callback+0x26/0x30 [ 2057.420076][ T2104] __break_lease+0x730/0x1620 [ 2057.424934][ T2104] do_dentry_open+0x73a/0x1420 [ 2057.429880][ T2104] vfs_open+0x3b/0x340 [ 2057.434127][ T2104] path_openat+0x340e/0x3dd0 [ 2057.438899][ T2104] do_filp_open+0x1fa/0x410 [ 2057.443574][ T2104] do_sys_openat2+0x121/0x200 [ 2057.448522][ T2104] __ia32_compat_sys_openat+0x131/0x160 [ 2057.454258][ T2104] __do_fast_syscall_32+0x1f7/0x570 [ 2057.459633][ T2104] do_fast_syscall_32+0x34/0x80 [ 2057.464657][ T2104] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2057.471165][ T2104] [ 2057.473493][ T2104] -> (&new->fa_lock){....}-{3:3} { [ 2057.478660][ T2104] INITIAL USE at: [ 2057.482561][ T2104] lock_acquire+0x117/0x340 [ 2057.488628][ T2104] _raw_write_lock_irq+0xa2/0xf0 [ 2057.495142][ T2104] fasync_remove_entry+0xf1/0x1c0 [ 2057.501737][ T2104] lease_modify+0x1ca/0x3c0 [ 2057.507814][ T2104] locks_remove_file+0x4bf/0xea0 [ 2057.514323][ T2104] __fput+0x3ab/0xa70 [ 2057.519873][ T2104] task_work_run+0x1d4/0x260 [ 2057.526046][ T2104] do_exit+0x6c5/0x2310 [ 2057.531770][ T2104] do_group_exit+0x21c/0x2d0 [ 2057.537934][ T2104] get_signal+0x1285/0x1340 [ 2057.544007][ T2104] arch_do_signal_or_restart+0x9a/0x7a0 [ 2057.551232][ T2104] exit_to_user_mode_loop+0x87/0x4f0 [ 2057.558094][ T2104] __do_fast_syscall_32+0x3cb/0x570 [ 2057.564862][ T2104] do_fast_syscall_32+0x34/0x80 [ 2057.571282][ T2104] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2057.579182][ T2104] INITIAL READ USE at: [ 2057.583514][ T2104] lock_acquire+0x117/0x340 [ 2057.590111][ T2104] _raw_read_lock_irqsave+0xaf/0x100 [ 2057.597409][ T2104] kill_fasync+0x199/0x4d0 [ 2057.603830][ T2104] lease_break_callback+0x26/0x30 [ 2057.611041][ T2104] __break_lease+0x730/0x1620 [ 2057.617719][ T2104] do_dentry_open+0x73a/0x1420 [ 2057.624485][ T2104] vfs_open+0x3b/0x340 [ 2057.630577][ T2104] path_openat+0x340e/0x3dd0 [ 2057.637167][ T2104] do_filp_open+0x1fa/0x410 [ 2057.643667][ T2104] do_sys_openat2+0x121/0x200 [ 2057.650346][ T2104] __ia32_compat_sys_openat+0x131/0x160 [ 2057.657901][ T2104] __do_fast_syscall_32+0x1f7/0x570 [ 2057.665092][ T2104] do_fast_syscall_32+0x34/0x80 [ 2057.671938][ T2104] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2057.680269][ T2104] } [ 2057.682857][ T2104] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 2057.691533][ T2104] ... acquired at: [ 2057.695431][ T2104] _raw_read_lock_irqsave+0xaf/0x100 [ 2057.701006][ T2104] kill_fasync+0x199/0x4d0 [ 2057.705609][ T2104] evdev_pass_values+0x627/0xbd0 [ 2057.710738][ T2104] evdev_events+0x1e6/0x340 [ 2057.715424][ T2104] input_pass_values+0x288/0x890 [ 2057.720542][ T2104] input_event_dispose+0x330/0x6b0 [ 2057.725839][ T2104] input_inject_event+0x1dd/0x340 [ 2057.731041][ T2104] evdev_write+0x2fc/0x480 [ 2057.735647][ T2104] vfs_write+0x27e/0xb30 [ 2057.740076][ T2104] ksys_write+0x145/0x250 [ 2057.744599][ T2104] __do_fast_syscall_32+0x1f7/0x570 [ 2057.749990][ T2104] do_fast_syscall_32+0x34/0x80 [ 2057.755121][ T2104] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2057.761637][ T2104] [ 2057.764485][ T2104] [ 2057.764485][ T2104] stack backtrace: [ 2057.770383][ T2104] CPU: 1 UID: 0 PID: 2104 Comm: syz.2.8030 Tainted: G L syzkaller #0 PREEMPT(full) [ 2057.770409][ T2104] Tainted: [L]=SOFTLOCKUP [ 2057.770416][ T2104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 2057.770427][ T2104] Call Trace: [ 2057.770446][ T2104] [ 2057.770454][ T2104] dump_stack_lvl+0x189/0x250 [ 2057.770478][ T2104] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2057.770498][ T2104] ? __pfx__printk+0x10/0x10 [ 2057.770525][ T2104] __lock_acquire+0x2a95/0x2cf0 [ 2057.770549][ T2104] ? kill_fasync+0x199/0x4d0 [ 2057.770574][ T2104] lock_acquire+0x117/0x340 [ 2057.770592][ T2104] ? kill_fasync+0x199/0x4d0 [ 2057.770619][ T2104] _raw_read_lock_irqsave+0xaf/0x100 [ 2057.770643][ T2104] ? kill_fasync+0x199/0x4d0 [ 2057.770666][ T2104] ? __pfx__raw_read_lock_irqsave+0x10/0x10 [ 2057.770687][ T2104] ? do_raw_spin_lock+0x121/0x290 [ 2057.770713][ T2104] kill_fasync+0x199/0x4d0 [ 2057.770739][ T2104] ? kill_fasync+0x53/0x4d0 [ 2057.770763][ T2104] evdev_pass_values+0x627/0xbd0 [ 2057.770789][ T2104] ? evdev_pass_values+0x5a1/0xbd0 [ 2057.770814][ T2104] evdev_events+0x1e6/0x340 [ 2057.770838][ T2104] ? evdev_events+0x79/0x340 [ 2057.770864][ T2104] ? input_pass_values+0x8d/0x890 [ 2057.770886][ T2104] input_pass_values+0x288/0x890 [ 2057.770910][ T2104] ? input_handle_event+0x70c/0xf30 [ 2057.770929][ T2104] input_event_dispose+0x330/0x6b0 [ 2057.770950][ T2104] input_inject_event+0x1dd/0x340 [ 2057.770969][ T2104] ? input_inject_event+0xb6/0x340 [ 2057.770989][ T2104] evdev_write+0x2fc/0x480 [ 2057.771017][ T2104] ? __pfx_evdev_write+0x10/0x10 [ 2057.771041][ T2104] ? bpf_lsm_file_permission+0x9/0x20 [ 2057.771060][ T2104] ? security_file_permission+0x75/0x290 [ 2057.771084][ T2104] ? rw_verify_area+0x255/0x4d0 [ 2057.771099][ T2104] ? __pfx_evdev_write+0x10/0x10 [ 2057.771123][ T2104] vfs_write+0x27e/0xb30 [ 2057.771143][ T2104] ? __pfx_vfs_write+0x10/0x10 [ 2057.771167][ T2104] ? __fget_files+0x2a/0x420 [ 2057.771188][ T2104] ? __fget_files+0x2a/0x420 [ 2057.771208][ T2104] ? __fget_files+0x3a0/0x420 [ 2057.771227][ T2104] ? __fget_files+0x2a/0x420 [ 2057.771257][ T2104] ksys_write+0x145/0x250 [ 2057.771275][ T2104] ? __pfx_ksys_write+0x10/0x10 [ 2057.771294][ T2104] ? __do_fast_syscall_32+0xbe/0x570 [ 2057.771310][ T2104] __do_fast_syscall_32+0x1f7/0x570 [ 2057.771326][ T2104] ? rcu_is_watching+0x15/0xb0 [ 2057.771346][ T2104] ? do_fast_syscall_32+0x34/0x80 [ 2057.771362][ T2104] do_fast_syscall_32+0x34/0x80 [ 2057.771377][ T2104] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 2057.771398][ T2104] RIP: 0023:0xf705d539 [ 2057.771416][ T2104] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 2057.771432][ T2104] RSP: 002b:00000000f4bc555c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 2057.771451][ T2104] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000080000040 [ 2057.771464][ T2104] RDX: 0000000000000037 RSI: 0000000000000000 RDI: 0000000000000000 [ 2057.771475][ T2104] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 2057.771493][ T2104] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2057.771504][ T2104] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2057.771520][ T2104] [ 2058.123775][T30159] usb usb5-port1: attempt power cycle [ 2058.287303][ T5894] usb 4-1: 0:2 : does not exist [ 2058.303773][ T5909] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 2058.340442][ T5894] usb 4-1: USB disconnect, device number 29 [ 2058.388056][T20326] udevd[20326]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory