last executing test programs: 11.105075318s ago: executing program 0 (id=2520): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000002240)={0x6, {{0x2, 0x4e22, @multicast2}}}, 0x84) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x1ff, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) write$binfmt_script(r3, &(0x7f0000000040)={'#! ', '', [{0x20, '\t\xbb\x9b\x81\xa61\xdd\xd6\xe6\xb3R\xb9\xdb?\xbe\xd3&n\xe2\xb6\xf5%\xb2\xdf\xf5\x83\xba\xeb\x93~\x88\xdc\xec[6=\x01p\xcd\x8ay\x0ez\\U\xae\x9fj@5q\xb2\x89\x00\x17\xe3\x82\x81\xbeS\xd8\x00\x1c\x10\xf8\xf3\xd4\xddI<%\xbb\xa6\xab\x9a\xe5\xec\x19\xfa\xcb\x94\x90u\x9b\x13W\xbd\x9f\xfa\x032-{\x96{\x12\xddy\xb8\x0e%\xabx/\x9cb\xfe\xccO\x00\xf0\xf2\x9dZ\x19_\xc7\xf2\vI'}]}, 0x7d) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet6(0xa, 0x3, 0x3) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, 0x0, 0x40) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x5000, 0x3, @mcast2, 0x3}, 0x1c) writev(r5, &(0x7f00000192c0)=[{&(0x7f0000019380)="8492956181f597fb0ffb48658363a2a01c96049e2e9fd2a3e2e7be731a73ddea38e7ac4a3086bb42d7d8a3a640886432488ab2f34452de7280f9588015069553e24c9763fea9281e607f90155ec28699d4ef97e057f34607536543735c4962f95e6bd27486ff53e9ba7adc7f8631cdfb6d48cabde8f13ec182e08fca6f232e1008af46a9d3b53b22d819deaa5cf6f97a8d50a58ef8efab2b188030b082c0084ba17ddfa97c2fcc41de17db855ba3e7431343c9ad296952ddba0b08d6ed111d5f389ed743e990d25f88f2e305de633716dee9303e188ec4fd69d31893f61d2d259af7418c31d9b6e9ea12b6cc0eb3ab4ab1b3be887c25f5a537a8c030f7b0b841cbfef61db5f34da24d3e4115d9e82fdcaa3e26df08a58682700180aec0de731382b0580c75abe9d0dec6b7610a6f4a5039cf2413f8acd013f15a0118a1640d94113167b77dc0a38d014fa637d057c3d283b68d6d2dbed065a2ca23e7a87469396f21651029aa79cfd98650189bff70ede2571ff7280195cfe32a932e955618d8dbfc904a989f7da4b81a05efdef30440a0f05153ea81fd0cf742ab5520a7220c3986bee179f5e06408173e166f35212b493966e6224c7e5d29030643c86b27808b2be56d439a3ab1a59424c95972fa25c6fa6e57bb6aa7a5892515a35a75e814db9c5caa93f67e49229ffe3b05f1f76c59ba63166b4df5c98c1036f8a284cbaa6b62976bbb0dd39352473406376fe3aa33b6ea6a7376f6704490331eb2a013131aa15d4d0fa6b637fa9bf84ae1ff322dbadfc94478d7f1895a2d0b0d7cee96169877cde72792f01ee551a8a1cec1e54c8656d245d0747c001f0cd439cd31d9b9697ec588b59242340743e6b9eb46a2090b13044dce9cc5ecacc3bf38c5e52f2fb5d834eb7de3436ca787d1d3b7f98860628df0d59d7611fe9d109a1bf67447e68c37534ffd13a05e8b87570a18a640f6fbd16716d4c0fc34c94c8a9b5fd12f7f961cadede6763539d805828d75966795c956e8cd5e815bbd92345f93ed888203d50ca3420cf78d80be67d0719a53ef7665812b54993f2197c9534f80fc0e3c98ea3863df45388ed3e16895919c8ac8deed340fc1d50eea8e9e5b1d221854ce1c480afad4fa46d57e6327951182eab7f2fc4bdf75dbd4a31f0a132fee680f25cd25fc6cfa1d2ec1dc9c10fa1ac0273847ca56004a0c1d3727c7a5829f518602b04b7c7488391e16c93f6122ad22fc0e84f88f5ecd2e3c15b23588f2a7985f5a25b9632079f9b86da3b36424c9a80f3668fedaeb2c974ef735c7a89f7238c48e9991ca446d954003134e44476b73ba46cb9d1aa4810ecd784229af6f007e81e0b01761e190c04e8fd5ba1a64259ad0bf11d7b614d6ee7b4618636b3418e38e6e", 0x3df}, {&(0x7f00000191c0)="91a734f9ec34f417d2fd4ceebf91d450feaee433e903ae37504e59f7fd28526a05fb42f5316b21c39b07f6f4002375b40b6871f65f7d8dc988437ffab21315c6f4ce5673a7ae29fc2886d176d71b6f861210af114a3d8c8579363cf7a7e0a10759d14f7dd30a7cf6d116ff1ae9d014da95838138469eb6c724abf520758dc0bf0e0d061631b399be0ec39bcb592701428df40874a1811bf684c7f075a6e9dc484aa153c5b92c552a75cfd69e2d7a3bfcc117a5", 0xb3}, {&(0x7f000001a500)="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", 0x124}, {&(0x7f000001a440)="373f0c6e77dc2a0f40cabfb07fa976c4f3af8c5d4aafdc85b7ec98c79b29b092417f368fd2b04f282d176554b5fabd5996ba17dcf3d1e878b50dddaaf6dad740d3b88bbe3d1c5b939e609ca0e6c984a1c226780f8dd92309d34842e027b5503701b3104f4633e138c3af0f8aab5de142acc623ee6a60eb00c6b37eba777419bb227ba5507191c7b5d18b9992e1068156dac8258affc0c16197fccc58", 0x9c}], 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000190c0)={0x0}}, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000100)={0x2, 0x63d}, 0x8) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) sendmmsg$inet_sctp(r4, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 9.952984586s ago: executing program 0 (id=2524): openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x2e288501978821b, 0x80) socket(0x1e, 0x4, 0x0) r4 = dup3(r3, r2, 0x0) recvmmsg$unix(r4, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000005140)=""/4111, 0x100f}], 0x1}}], 0x1, 0x58ca2280, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r5, 0xffffffffffffffff, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000012c0)=ANY=[@ANYRES32=r6, @ANYRES32, @ANYBLOB="2d000000380000000000bc3b30dfb4c7f91c7ace41f7584bea23732d53a28547850836d9bfc86d0f4caa35adb34e1b4dbdd415150bb3", @ANYRES32, @ANYRES64=0x0], 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r6}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r8, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0xfffffffc, 0xffffffff) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) 9.699885683s ago: executing program 0 (id=2528): syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xfffffffffffffddf, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) r2 = openat$cuse(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r2, &(0x7f0000000040)={0x20, 0x0, r3, {0x7, 0x0, 0x5, 0x6}}, 0x20) syz_usb_control_io$printer(r1, 0x0, 0x0) dup(r0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000001440)={'macsec0\x00', &(0x7f0000000440)=@ethtool_ringparam={0x10, 0x1ffffff, 0x0, 0xfffffffe, 0x0, 0x1002, 0x80000000, 0x3}}) 6.348728158s ago: executing program 0 (id=2550): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040040) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000010000e1850000008600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0xfe, 0x0, 0x0) read$FUSE(r3, &(0x7f0000004940)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000002200)={0x50, 0x0, r4, {0x7, 0x8, 0x2000800, 0x2ded8c0befca9abf, 0x401, 0x6, 0x7fff, 0x5, 0x0, 0x0, 0x1, 0x28}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', 0x735100, 0x0) r5 = eventfd(0x2641d82c) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) syz_usb_connect(0x0, 0x498, &(0x7f00000006c0)={{0x12, 0x1, 0x200, 0x48, 0x8b, 0x2b, 0x10, 0x4f1, 0x3011, 0xd686, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x486, 0x1, 0xf1, 0x4, 0x0, 0x6, [{{0x9, 0x4, 0x4a, 0x4, 0xb, 0x70, 0x76, 0x57, 0x8, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, '^}'}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x8001, 0x8001, 0x7}, {0x6, 0x24, 0x1a, 0x6, 0x8}, [@country_functional={0x8, 0x24, 0x7, 0x9, 0x5, [0x4]}, @mbim={0xc, 0x24, 0x1b, 0x7, 0x3, 0x6, 0x9, 0x0, 0x8}, @dmm={0x7, 0x24, 0x14, 0xe8a, 0x6}, @mbim={0xc, 0x24, 0x1b, 0xf, 0x1, 0x2, 0x7, 0xfffc, 0xb}, @obex={0x5, 0x24, 0x15, 0x1}]}, @uac_control={{0xa, 0x24, 0x1, 0x1, 0xdf}, [@selector_unit={0xb, 0x24, 0x5, 0x5, 0x81, "b583de54a97c"}, @processing_unit={0xb, 0x24, 0x7, 0x6, 0x2, 0xf, "b73d8cc4"}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x1ff, 0x3, 0x1, 0x3, 0x1, 0xd6}]}], [{{0x9, 0x5, 0x2, 0xc, 0x8, 0xe1, 0xfe, 0x1, [@generic={0x88, 0x31, "b67bd7f9b1bc6d6858c6e4c3bc7427909a4b9909a1c95f9e2d6e196ce8dde929bb5fd942c4b4b85245c662befc1e1881edbad2b6f13c5c1dfc9790e82787393cabcd2258730946e7f08c75a2a27157f8d4d6b48b6726aa2bdaf04dbd1d368c4f7e8e890e8a32a57ddb45d2d468448d8e439ddc9b8b508529dd24a637520cb1ae807b7397f567"}]}}, {{0x9, 0x5, 0x81, 0x0, 0x20, 0x2, 0x8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x8}]}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0xc, 0x2, 0xb4}}, {{0x9, 0x5, 0xe, 0x10, 0x40, 0x4, 0x7, 0x7, [@generic={0x94, 0xc, "18f11acc4cbf1cecd31548fe5f810db802dd04c90e051f9ad1e0620251b3763a2ece263b8e4501aefa1b9d80ebcff3e3fa0a4d0710fc3729939b4ff406fbb5db7b30338263e616d5e8e1efbbc0afb202f18749508982e69b4153f4b7f622103495df489e124b3cf257fdebdbe3d12e393a5050747d6282bf6bd6008f3d377a032adeefa506493f12de85ab2df422a6b94232"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xca, 0x1}]}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x2, 0xff, 0xfb}}, {{0x9, 0x5, 0x80, 0x10, 0x8, 0x5, 0xf7, 0x5}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0x7, 0x8, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xa, 0x8}, @generic={0x59, 0x24, "8c0ac08345e9b7c2a318aea914a779a8f2a6065ec1b14d50766386caa790ae0bdff3fc247845232a04009ed9a1e65546428e0cc4534ac88c4f4e168d36c6a5772b89fba343b7b9e249ca5ffdc71c48906eaa3d37a8a83c"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x40, 0xfe, 0xfd, 0x20, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xe, 0x5}, @generic={0x5a, 0x23, "8fc12bbe813b87c882304e808ca9c56e215545a44a36d6e86c755464686036bdfe4367ad51e6f01c6387ac43c63970e39633edbd9f81a4170050a19009c0b045de3fe6d89168ca7214e9de088218007a8a2862417fc333b1"}]}}, {{0x9, 0x5, 0xb, 0x3, 0x200, 0x40, 0x8, 0x40, [@generic={0xed, 0xb, "427aa1b0ffcef3845b82d10129df9fb22c14538ccb483c46bac86714777f0968c1fa0baf74a3ba5bc6327e69a982f89fbb5a8026909f09e57922635e8c9648b2302d67006c52bcd87c1aabc10018d0bfcb9d78647237ed3eeeb571fcbfc6a4f8822c12c8061505feecbd7fcd5cfa14c7066d7ded9e7f32d9d9c9b1eac1cd941ca2e1505b07c466c53459f44d29f241a96b25a1745c9387c4bbd92d395b707bf4a75ca59619c89958a8d84b55f3a597b1c029225753582f2f2f410c5871ba5c179dd8658bb5460cd0ced0db68316c7abce5359a77347ff9ac02763ffb7d71accbb1a440f4998dead531561d"}]}}, {{0x9, 0x5, 0xf, 0x2, 0x3ff, 0x6, 0x9, 0x2}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0x1, 0x8, 0x14, [@generic={0xc3, 0x22, "2cbb536e56fbec794a9feec2cc58d5e951be9bc37e8e5c0bcd76343fa97e52d4bdf0b0ace924155ff12ac3c06879c1c365d2fb3915c08864a1747f188d6ed184ec7f508b0e2a4009fe8a9620b3b14057561231d038670b8127ef56e7b16644c0a59e859413c0a7af909356bc6a7282b054a95c4a1c99d3411a1a18080f610facfc235aaa9edf8bc23c26403f6e05cf89fe7a443da3165b10ff2a47183ddc5a4ce0b08fa06f94df24712741d786caa40a7e10f41cb3bb477bdc50f6cca443e0ce21"}]}}]}}]}}]}}, &(0x7f0000000c00)={0xa, &(0x7f0000000600)={0xa, 0x6, 0x110, 0x9, 0x9, 0xff, 0xff, 0x7}, 0x26, &(0x7f0000000640)={0x5, 0xf, 0x26, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x6, 0x0, 0xda}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x6, 0x0, 0x79}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x0, 0x5}, @ssp_cap={0xc, 0x10, 0xa, 0x9, 0x0, 0x4, 0xf, 0x70c}]}, 0x2, [{0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x480a}}, {0x1c, &(0x7f0000000bc0)=@string={0x1c, 0x3, "70414c84a48b4de27ef91975ee0d9ff2e7cf9824ca3b5556d43b"}}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x39383ddd, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x100, 0x0) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000180)=""/178, 0xb2}, {&(0x7f0000000240)=""/229, 0xe5}], 0x2, 0x2cb5c851, 0x9) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c0000000b0a010100000000000000000a0000050900010073797a31000000000c0010400000000000000002140000001100010000000000000000010700000aa0b7dd4c858a950a179926bb7c1b8126b65689db7ae934d119e98329a8d5c3"], 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4081, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 6.348228906s ago: executing program 4 (id=2551): r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x1, 0x7ffd, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x23635de98487b93e) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000052000100ffffffff00000000020000000c00", @ANYRES16=r4], 0x20}}, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000040)=0xc) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001d00)=[{{&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000006c0)=[{0x0}, {&(0x7f00000004c0)}, {0x0}, {&(0x7f0000000900)="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", 0x6ff}, {&(0x7f0000001b00)="fbaa5ccdf7e888b102b5dbc3e588f400066fc19c24cd43a481d8bd7dd15943edfe8ef6138c0656d6bda9e4d4544600c117970e65f2313c26a23e10ce210f605cde6560a61421b0a7e352175f62c72bd820440ecca59fc79c839b2b08885a9d953e2514d671affd1f8aa8eaec65e5a5b17130664dc53ff9114032cc8e243bda7eceed1440192dc93e182068249765abbfedebbfaa9b341942ca0155d1f88ab8957eae696cfd08a9f81ca0c058b997bf08faed20af6de55d7eaa08523a0c628e72fff7e652b80dcd777dadf0418e7aae215e094ec382bd4842e51ef55d", 0xdc}], 0x5, &(0x7f0000000740)}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1c00000000000000010000", @ANYRES8=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB, @ANYBLOB="88678844dcbc99de9492651a24dc428c944d5b6edc2ebbf77f25782c69efb72a4fd89602ffde497fa547cf033f7281c8b4a280fa3874b614632e9426c8dc8b6e1e337cc72b17b4b099eabe772bf13e5039c7209a51778f1323f9dd2dd88234193e25062db032e82cfb39757c8fdf01e5862e9770945e1828618b034932702d961f6c729121a437fca8f83bd2c350e6ea30488023630b72aa7b30b79f89f725b1833db35c7b585e5ff9c0bd", @ANYRESHEX=r4, @ANYRES32=0x0, @ANYBLOB="00000000100000000000000001000000010000001c00000000000000010000000200", @ANYRES32=r0, @ANYRES8=r3, @ANYRES32=0x0], 0x70, 0x404}}], 0x2, 0x663308baefe35938) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="110000005200010004000000000000001c"], 0x28}}, 0x0) r7 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) ioctl$IOCTL_STATUS_ACCEL_DEV(r7, 0x40046103, &(0x7f0000000300)={0x0, 0x4, 0xfffffff8, 0x9, 0x5, 0x1, 0xf7, 0x7f, 0x3, 0x1, 0x5, "f7d9d17d2756a832754d2db7a81004bd6b122e1a46766bc2f771d8be1f6c41e1"}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x48, 0x2000, @fd_index=0x3, 0x22, 0x0, 0x0, 0x16, 0x1}) r8 = openat$vicodec0(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r8, 0xc0cc5640, &(0x7f00000006c0)={0xa, @pix={0x6, 0x9, 0x47425247, 0x5, 0xfff, 0x2, 0x8, 0x55, 0x0, 0x3, 0x2, 0x5}}) socket$nl_netfilter(0x10, 0x3, 0xc) 6.262174755s ago: executing program 2 (id=2552): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000"], 0xe8}}, 0x0) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x20, 0xa, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40004840}, 0x20004810) 6.086901961s ago: executing program 2 (id=2553): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140), 0x20a140, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async, rerun: 32) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40182, 0x0) (rerun: 32) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3}) (async) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r4 = socket(0x1e, 0x2, 0x0) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) (async) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f00000002c0), &(0x7f0000000180)=0x60) (async) recvmmsg(r5, &(0x7f00000000c0), 0x0, 0x10122, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x0, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000480)=[@mss={0x2, 0x3}, @mss={0x2, 0xaf0}, @timestamp, @mss={0x2, 0x8}, @window={0x3, 0x8000, 0x81}, @sack_perm, @timestamp], 0x7) (async) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r7, &(0x7f0000001fc0)=""/184, 0xb8) (async, rerun: 32) mknodat$loop(r7, &(0x7f0000000000)='./file0\x00', 0x4, 0x0) (rerun: 32) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000002e00090027bd54edcc24b24e785fa691aa700000000000040000002900118031f9e15e2f82dc2af824704f63dac994ce05dc7224e5479795b50d9015"], 0x40}, 0x1, 0x0, 0x0, 0x42804}, 0x0) (async) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r3, 0x0) (async, rerun: 32) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (rerun: 32) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) r9 = syz_open_procfs(0x0, &(0x7f0000001080)='net/ip_mr_vif\x00') read$char_usb(r9, &(0x7f0000000040)=""/4109, 0x100d) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000010c0)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001700000008000a00", @ANYRES32, @ANYBLOB="8426a1bb8c67a6c4ec8189eb11e246dbf9d5adbd4d74"], 0x24}}, 0x0) 5.628114384s ago: executing program 2 (id=2555): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509", @ANYRESDEC=0x0], 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x3, 0x40) syz_usb_disconnect(r0) r3 = syz_usb_connect(0x3, 0x24, &(0x7f0000000100)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) 4.252717951s ago: executing program 4 (id=2561): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="3800000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000010001a800c002d80080001"], 0x38}}, 0x0) inotify_init() r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) socket(0x6, 0x4, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000240)={0x44, &(0x7f0000000a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r4, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000100)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'veth0_to_team\x00', @remote}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00') pread64(r5, &(0x7f0000000280)=""/70, 0x46, 0xbbf9) r6 = openat$vimc1(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r6, 0x4020565b, &(0x7f00000000c0)={0x4, 0x5}) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r8, 0x402, 0x40000029) fcntl$notify(r7, 0x402, 0x1c) open(&(0x7f0000000140)='./bus\x00', 0x141bc2, 0x1c0) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="000008000000c700040c8e76d0966f9a2b01090900000000000000"], 0xffffffffffffff91) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000006c0)={0x0, 0x2c, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x2, @local, 0x9}, @in={0x2, 0x4e23, @loopback}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r9, @in6={{0xa, 0x4e23, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40}}, 0xfffffffc, 0x3, 0x40000002, 0x0, 0x0, 0x3, 0x7d}, 0x9c) 3.796408198s ago: executing program 1 (id=2562): socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x5, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xc, 0x4}, {0x0, 0x9}, {0xfff2, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x5, 0x2, 0xff}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040005}, 0x20040054) 3.640362639s ago: executing program 1 (id=2564): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000100)=0x15) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x80000b, 0x11, r0, 0xffffc000) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYRES16=r1], 0xf4}, 0x1, 0x0, 0x0, 0x4004000}, 0x4840) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x800) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg(r6, &(0x7f0000000f40)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0xf275, @private2, 0x4000a, 0x23}, 0x80, &(0x7f0000000080)}}], 0x1, 0x44055) r7 = syz_io_uring_setup(0xef1, &(0x7f0000000400)={0x0, 0x8000bb3d, 0x10100, 0x0, 0x2b0}, &(0x7f00000001c0)=0x0, &(0x7f0000000140)=0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000080)='attr\x00') getdents64(r10, &(0x7f0000000fc0)=""/224, 0xe0) syz_io_uring_submit(r8, r9, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x40, 0x0, @fd=r5, 0x73b, &(0x7f0000000500)=[{0x0}], 0x1, 0x0, 0x1}) io_uring_enter(r7, 0x567, 0xa9ea, 0x5, 0x0, 0x0) r11 = socket(0x23, 0x6, 0x2007a30) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, 0x0) 3.22082968s ago: executing program 0 (id=2566): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009"], 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0xfffffffd, 0x0}, 0x6400c810) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4d, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000040)={@multicast2, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a"}, 0x3c) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r3 = syz_clone(0x4038000, &(0x7f00000001c0)="ce6c21ee23995e760cf0ea262d7a25d4bf336e15dd8906a93c2aacad74a32323c3b52bd251a39ddd44219b2111783adf475deaa4ff9ae8ad0f8d55b7230cb36fb26503fa7f7b91f9f023f3844c337fd18cdc2bbba71a8225228e6af7909981e888a9942e4334d16bfb17f7f9146826fb38194fd78df46d96a6cec667d30ab0e30b53ea260bb2d3b6939a66c53afb7b2666", 0x91, &(0x7f0000000280), &(0x7f0000000480), &(0x7f00000004c0)="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") prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x4010, 0xffffffffffffffff, 0x0) unshare(0x22020600) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000080)=@ethtool_coalesce={0xf, 0x6, 0x16d20415, 0x8, 0xfffffffb, 0x1000, 0xb2e2, 0x6, 0xffff, 0x0, 0x9, 0x5b7d, 0xd8, 0x6, 0x3ff, 0x7, 0x0, 0x4ad, 0x101, 0x55e2, 0xffff, 0x3ff, 0x5}}) syz_io_uring_setup(0x7b1d, &(0x7f0000000280)={0x0, 0x0, 0x8000, 0x0, 0x3}, &(0x7f0000000100), &(0x7f0000000240)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="0200000002000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000"], 0x18c) syz_open_procfs(0x0, &(0x7f0000000100)='gid_map\x00') r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="d800000018008105e00212ba0d8105040a020200020f100b067c55a1bc000900b80006990200000015000500fc038178a80015000338004002000c0901ac040000d67f6f947a7100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000000000000000000000000000000000008dc5fb510162", 0xd8}], 0x1}, 0x0) 2.690845465s ago: executing program 1 (id=2567): r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x2b9, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x400000, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.486489266s ago: executing program 2 (id=2568): syz_emit_ethernet(0x32, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1f, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400010000000900020073797a3000000000050005000000000005000100060000001c0007800600044000000000060005400000000008000640"], 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002440)=ANY=[@ANYBLOB="34000000090605000a00000000000000000000000900020073797a300000000005000100060000000c00078006000440"], 0x34}}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r3, 0x8010661b, &(0x7f0000000280)) r4 = dup3(r3, r0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000540)={0x2, @sliced={0x5, [0x8000, 0x1, 0x8, 0x8000, 0xe35, 0x0, 0x5, 0x3ff, 0xad91, 0x1, 0x7, 0x2, 0x1, 0x3, 0x9, 0x6, 0x10, 0x200, 0x1, 0xfffc, 0x3ff, 0x5, 0x40, 0x380, 0x10, 0x1, 0x6, 0xfff, 0x5, 0x6, 0x9, 0x8, 0xb, 0x3, 0x4, 0x7, 0x0, 0x0, 0x8, 0x0, 0x1, 0xc991, 0x6, 0x0, 0xf328, 0xf2a, 0xff, 0x1b8], 0x8}}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xfffff7ff}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x80820}, 0xc0) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x170, 0x0, 0x2, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_NAT={0x90, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @CTA_EXPECT_NAT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_MASTER={0x6c, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_MASK={0x48, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x7}]}, 0x170}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) 2.484191418s ago: executing program 1 (id=2578): r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0x3000426) open(&(0x7f0000000180)='./bus\x00', 0x14507e, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = syz_io_uring_setup(0x82e, &(0x7f0000000240)={0x0, 0x2860, 0x8, 0x3, 0x20000}, &(0x7f0000000040), &(0x7f0000000080)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0xc1842, 0x0) syz_usb_disconnect(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4, 0x2}, 0x1) r3 = openat$sndtimer(0xffffff9c, &(0x7f0000000140), 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r4, 0x0) syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x1800}, 0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000020900010073797a30000000002c000000030a010200000000000000000100fffe0900010073797a30000000000900030073797a300000000068000000060a010400000000000000000100000008000b4000000000400004803c0001800e000100696d6d6564696174650000002800028008000140000000001c0002801800028008000180fffffffe490002007b797a30000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0xdc}}, 0x0) r7 = openat$hwrng(0xffffff9c, &(0x7f0000000080), 0x2402, 0x0) ioctl$TIOCMBIC(r7, 0x5417, &(0x7f0000000200)=0x2) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/icmp\x00') pread64(r8, &(0x7f0000000400)=""/255, 0xff, 0x8) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') openat$dir(0xffffff9c, &(0x7f0000000100)='./file0\x00', 0x102, 0x10) inotify_add_watch(r0, &(0x7f0000000080)='./bus\x00', 0x4000210) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) 2.395982013s ago: executing program 2 (id=2569): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x1b}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc4}}, 0x0) 2.34920714s ago: executing program 4 (id=2570): syz_open_dev$tty1(0xc, 0x4, 0x1) lsm_get_self_attr(0x64, 0x0, &(0x7f0000001280), 0x0) mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x13, 0x0, 0x0, 0x401}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000080)=0xd, 0x4) sendto$inet6(r3, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x406f413, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=@newsa={0xec, 0x10, 0x713, 0x70bd26, 0x0, {{@in=@rand_addr=0x64010101, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e24, 0x0, 0x4e20, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x4d4, 0x32}, @in6=@local, {0x0, 0x0, 0x8, 0xa, 0x2, 0x0, 0x0, 0x3}, {0xfffffffffffffffe, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}}, 0xec}}, 0x20000000) r6 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f00000000c0)=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x1}}, 0x20) ioctl$SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, 0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x1c, 0x52, 0x1, 0x70bd04, 0x24dfdbfc, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}, 0x1c}}, 0x8800) execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) 2.343071686s ago: executing program 2 (id=2571): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_GET_TSC(0x19, &(0x7f0000000480)) syz_usb_connect$uac1(0x2, 0x0, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x6a8, 0x0, 0x9}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x20, 0xffffffff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f00000000c0)="010000000600275eaea4ca5826d8f50ee7f9ff0000006bb57ae0fffc5aadff07000088d18ee9cb1a75d14ff5cf5ad0ca816f40a8333c3532a19673b6dab6301fd45f", 0x42, 0xffffffffffffffff) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd2c, 0x25dfdbbb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x30}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x5}]}}}]}, 0x48}}, 0x8000) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffff21ffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd7000053500000200010020000000480003006465666c61746500"/236], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$getownex(r0, 0x10, &(0x7f0000000300)={0x0, 0x0}) ptrace$cont(0x1f, r8, 0x100, 0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}]}, 0x4c}}, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x17, &(0x7f0000000480)=0x1d, 0x4) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) 1.681942312s ago: executing program 3 (id=2573): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\n\x00'}, 0x28) sendmsg$inet(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000240)="97", 0x1}], 0x1}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) recvmmsg(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000840)=""/258, 0x102}], 0x1}, 0x2}], 0x2, 0x161, 0x0) 1.433850429s ago: executing program 3 (id=2574): socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x5, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xc, 0x4}, {0x0, 0x9}, {0xfff2, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TTL={0x5, 0x2, 0xff}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040005}, 0x20040054) 1.334575965s ago: executing program 4 (id=2575): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000"], 0xe8}}, 0x0) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x20, 0xa, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40004840}, 0x20004810) 1.323329469s ago: executing program 3 (id=2576): r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f00000000c0)=@hci={0x1f, 0x0, 0x41}, 0x80}, 0x20044001) 1.207035411s ago: executing program 4 (id=2577): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x24, 0x3e, 0x107, 0x70bd2b, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x24}}, 0x8000) (fail_nth: 7) 1.127999716s ago: executing program 4 (id=2579): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509", @ANYRESDEC=0x0], 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x3, 0x40) syz_usb_disconnect(r0) r2 = syz_usb_connect(0x3, 0x24, &(0x7f0000000100)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) 1.127279767s ago: executing program 3 (id=2580): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x2c, 0x2, 0x3, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x3f}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2b}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x6000048}, 0x58091) 960.023345ms ago: executing program 3 (id=2581): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x7, 0xe7, 0x7e8, 0x5, 0x8, 0x3b8, 0xd9, 0x91}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x100, 0x0) socket(0x10, 0x3, 0x0) socket$inet(0x2b, 0x801, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x1e) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x80800, 0x0) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) r11 = syz_open_procfs(0x0, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x67, 0x0, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x6, 0x7, 0xd1}, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r11, 0x89f1, 0x0) shutdown(r8, 0x1) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Dd', 0x0) 921.943594ms ago: executing program 1 (id=2582): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x1b}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xa0}}, 0x0) 831.56111ms ago: executing program 1 (id=2583): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000040)={0x0, 0xfdd0, 0x0, 0x0, 0xffffffffffffffff}) write$sequencer(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="0000009300a0"], 0x24) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x80) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000001340)={0x6, {{0xa, 0x4e23, 0x8000000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20}}}, 0x84) syz_usb_connect(0x0, 0x2d, &(0x7f0000001040)=ANY=[@ANYBLOB="12010000109737107d071004c1ec0102030109021b00010040b00009040000013624340009050803"], 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f0000001300)=0x2) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=""/4073, 0xfe9}], 0x1}, 0x9}], 0x1, 0x40012100, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={r0}) r8 = openat$vnet(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) write$vhost_msg_v2(r8, &(0x7f0000001440)={0x2, 0x0, {&(0x7f0000001540)=""/171, 0xab, 0x0, 0x3, 0x3}}, 0x48) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r9, &(0x7f0000001140), 0x1, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x84, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x58, 0x3, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x48, 0xb, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}]}}}, {0x10, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x108}}, 0x0) shutdown(r9, 0x1) 129.064064ms ago: executing program 0 (id=2584): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000040)={0x0, 0xfdd0, 0x0, 0x0, 0xffffffffffffffff}) write$sequencer(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="0000009300a0"], 0x24) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x80) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000001340)={0x6, {{0xa, 0x4e23, 0x8000000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20}}}, 0x84) syz_usb_connect(0x0, 0x2d, &(0x7f0000001040)=ANY=[@ANYBLOB="12010000109737107d071004c1ec0102030109021b00010040b00009040000013624340009050803"], 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f0000001300)=0x2) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=""/4073, 0xfe9}], 0x1}, 0x9}], 0x1, 0x40012100, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={r0}) r8 = openat$vnet(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) write$vhost_msg_v2(r8, &(0x7f0000001440)={0x2, 0x0, {&(0x7f0000001540)=""/171, 0xab, 0x0, 0x3, 0x3}}, 0x48) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r9, &(0x7f0000001140), 0x1, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x84, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x58, 0x3, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x48, 0xb, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}]}}}, {0x10, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x108}}, 0x0) shutdown(r9, 0x1) 0s ago: executing program 3 (id=2585): openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) socket(0x80000000000000a, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x2e288501978821b, 0x80) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r4 = dup3(r3, r2, 0x0) recvmmsg$unix(r4, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000005140)=""/4111, 0x100f}], 0x1}}], 0x1, 0x58ca2280, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r5, 0xffffffffffffffff, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000012c0)=ANY=[@ANYRES32=r6, @ANYRES32, @ANYBLOB="2d000000380000000000bc3b30dfb4c7f91c7ace41f7584bea23732d53a28547850836d9bfc86d0f4caa35adb34e1b4dbdd415150bb3", @ANYRES32, @ANYRES64=0x0], 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r6}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r8, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x8, 0x0, 0x0}}, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0xfffffffc, 0xffffffff) ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) kernel console output (not intermixed with test programs): ind an available UDC or it's busy [ 606.014395][T12764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 606.026798][T12764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.038376][T12764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 606.057061][ T5846] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 606.079963][T12765] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1903'. [ 606.166898][ T43] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 606.187204][ T43] usb 5-1: device descriptor read/8, error -71 [ 606.196587][ T5846] usb 3-1: device descriptor read/64, error -71 [ 606.221104][T12765] usb usb8: usbfs: process 12765 (syz.0.1903) did not claim interface 0 before use [ 606.436712][ T43] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 606.447637][ T5846] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 606.467483][ T43] usb 5-1: device descriptor read/8, error -71 [ 606.586851][ T43] usb usb5-port1: unable to enumerate USB device [ 606.596630][ T5846] usb 3-1: device descriptor read/64, error -71 [ 606.717180][ T5846] usb usb3-port1: attempt power cycle [ 607.070402][ T5846] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 607.097554][ T5846] usb 3-1: device descriptor read/8, error -71 [ 607.182616][T12771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.194872][T12771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.203783][T12776] RDS: rds_bind could not find a transport for ::c0fe:0:0:0:1, load rds_tcp or rds_rdma? [ 607.218240][T12776] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1907'. [ 607.336614][ T5846] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 607.378231][ T5846] usb 3-1: device descriptor read/8, error -71 [ 607.486859][ T5846] usb usb3-port1: unable to enumerate USB device [ 607.748879][ T5846] usb 4-1: USB disconnect, device number 75 [ 607.791148][T12782] PKCS7: Unknown OID: [4] 0.38.35.36.951720.33.17 [ 607.804436][T12782] PKCS7: Only support pkcs7_signedData type [ 608.120348][T12791] netlink: 'syz.4.1913': attribute type 10 has an invalid length. [ 608.171266][T12791] team0 (unregistering): Port device team_slave_0 removed [ 608.198026][T12791] team0 (unregistering): Port device team_slave_1 removed [ 608.738714][T12814] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1917'. [ 609.119788][T12821] RDS: rds_bind could not find a transport for ::c0fe:0:0:0:1, load rds_tcp or rds_rdma? [ 609.171728][T12822] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1918'. [ 609.942444][T12833] syzkaller0: entered promiscuous mode [ 609.948993][T12833] syzkaller0: entered allmulticast mode [ 610.457474][ T1210] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 610.596599][ T1210] usb 3-1: device descriptor read/64, error -71 [ 610.846291][ T1210] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 610.990911][ T1210] usb 3-1: device descriptor read/64, error -71 [ 611.112454][ T1210] usb usb3-port1: attempt power cycle [ 611.456594][ T1210] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 611.531224][ T1210] usb 3-1: device descriptor read/8, error -71 [ 611.781569][ T1210] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 611.810385][ T1210] usb 3-1: device descriptor read/8, error -71 [ 611.926875][ T1210] usb usb3-port1: unable to enumerate USB device [ 612.039860][T12839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 612.049629][T12839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 612.281045][T12840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 612.295450][T12840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 612.653632][T12846] PKCS7: Unknown OID: [4] 0.38.35.36.951720.33.17 [ 612.660335][T12846] PKCS7: Only support pkcs7_signedData type [ 612.711187][T12848] netlink: del zone limit has 4 unknown bytes [ 613.016579][ T5916] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 613.115667][T12854] ip6gre1: entered allmulticast mode [ 613.176557][ T5916] usb 4-1: Using ep0 maxpacket: 16 [ 613.185629][ T5916] usb 4-1: config 0 has an invalid interface number: 123 but max is 0 [ 613.195482][ T5916] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 613.225293][ T5916] usb 4-1: config 0 has no interface number 0 [ 613.240099][ T5916] usb 4-1: config 0 interface 123 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1024 [ 613.250589][ T5916] usb 4-1: config 0 interface 123 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 613.270952][ T5916] usb 4-1: config 0 interface 123 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 613.294576][ T5916] usb 4-1: New USB device found, idVendor=04b8, idProduct=0521, bcdDevice=68.25 [ 613.318547][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.380900][ T5916] usb 4-1: Product: syz [ 613.392499][ T5916] usb 4-1: Manufacturer: syz [ 613.412716][ T5916] usb 4-1: SerialNumber: syz [ 613.441744][ T5916] usb 4-1: config 0 descriptor?? [ 613.467212][ T13] tipc: Subscription rejected, illegal request [ 613.476026][T12848] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 613.568672][ T5916] pl2303 4-1:0.123: required interrupt-in endpoint missing [ 613.845629][T12848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 613.889401][T12848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 613.910180][ T24] usb 4-1: USB disconnect, device number 76 [ 614.109745][T12870] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1933'. [ 614.221062][ T30] audit: type=1326 audit(1769687839.369:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12869 comm="syz.0.1933" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d539 code=0x7ffc0000 [ 614.271229][ T30] audit: type=1326 audit(1769687839.399:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12869 comm="syz.0.1933" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d539 code=0x7ffc0000 [ 614.308265][T12872] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.1933'. [ 614.364215][ T30] audit: type=1326 audit(1769687839.439:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12869 comm="syz.0.1933" exe="/root/syz-executor" sig=0 arch=40000003 syscall=297 compat=1 ip=0xf745d539 code=0x7ffc0000 [ 614.420442][ T30] audit: type=1326 audit(1769687839.439:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12869 comm="syz.0.1933" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d539 code=0x7ffc0000 [ 614.500684][ T30] audit: type=1326 audit(1769687839.439:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12869 comm="syz.0.1933" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d539 code=0x7ffc0000 [ 614.532849][ T30] audit: type=1326 audit(1769687839.449:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12869 comm="syz.0.1933" exe="/root/syz-executor" sig=0 arch=40000003 syscall=92 compat=1 ip=0xf745d539 code=0x7ffc0000 [ 614.555568][ T30] audit: type=1326 audit(1769687839.449:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12869 comm="syz.0.1933" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d539 code=0x7ffc0000 [ 614.579412][ T30] audit: type=1326 audit(1769687839.449:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12869 comm="syz.0.1933" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d539 code=0x7ffc0000 [ 614.602181][ T30] audit: type=1326 audit(1769687839.459:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12869 comm="syz.0.1933" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf745d539 code=0x7ffc0000 [ 614.625300][ T30] audit: type=1326 audit(1769687839.459:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12869 comm="syz.0.1933" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf745d539 code=0x7ffc0000 [ 614.817068][T12882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.828025][T12882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 614.869884][T12882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.887237][ T5846] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 614.915878][T12882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 615.049774][ T5846] usb 5-1: Using ep0 maxpacket: 16 [ 615.090933][ T5846] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 615.110484][ T5846] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 615.130390][ T5846] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 615.140731][ T5846] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 615.151018][ T5846] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 615.174051][ T5846] usb 5-1: config 1 interface 0 has no altsetting 0 [ 615.188092][ T5846] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 615.202030][ T5846] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.244115][ T5846] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 615.812412][T12896] vlan2: entered promiscuous mode [ 615.837396][T12896] bridge0: entered promiscuous mode [ 616.134033][T12905] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1943'. [ 616.161291][ T5916] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 616.190842][ T5916] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 616.574405][T12905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 616.587031][T12905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 617.380200][T12917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 617.391646][T12917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 617.582146][T12920] syzkaller0: entered promiscuous mode [ 617.589067][T12920] syzkaller0: entered allmulticast mode [ 617.761478][ T5846] ums-sddr09 5-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 617.781325][ T5846] usb 5-1: USB disconnect, device number 80 [ 618.203942][T12928] xt_policy: output policy not valid in PREROUTING and INPUT [ 620.175706][T12935] FAULT_INJECTION: forcing a failure. [ 620.175706][T12935] name failslab, interval 1, probability 0, space 0, times 0 [ 620.205723][T12935] CPU: 1 UID: 0 PID: 12935 Comm: syz.3.1952 Tainted: G L syzkaller #0 PREEMPT(full) [ 620.205758][T12935] Tainted: [L]=SOFTLOCKUP [ 620.205766][T12935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 620.205779][T12935] Call Trace: [ 620.205788][T12935] [ 620.205797][T12935] dump_stack_lvl+0xe8/0x150 [ 620.205830][T12935] should_fail_ex+0x412/0x560 [ 620.205859][T12935] should_failslab+0xa8/0x100 [ 620.205885][T12935] __kmalloc_noprof+0xde/0x7e0 [ 620.205906][T12935] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 620.205942][T12935] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 620.205977][T12935] genl_family_rcv_msg_doit+0xd9/0x330 [ 620.206009][T12935] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 620.206042][T12935] ? apparmor_capable+0x137/0x1a0 [ 620.206073][T12935] ? bpf_lsm_capable+0x9/0x20 [ 620.206097][T12935] ? security_capable+0x7e/0x2c0 [ 620.206126][T12935] genl_rcv_msg+0x61c/0x7a0 [ 620.206158][T12935] ? __pfx_genl_rcv_msg+0x10/0x10 [ 620.206182][T12935] ? __pfx_ovs_flow_cmd_del+0x10/0x10 [ 620.206206][T12935] ? __pfx_ref_tracker_free+0x10/0x10 [ 620.206228][T12935] ? __skb_clone+0x63/0x7a0 [ 620.206262][T12935] netlink_rcv_skb+0x232/0x4b0 [ 620.206284][T12935] ? __pfx_genl_rcv_msg+0x10/0x10 [ 620.206311][T12935] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 620.206329][T12935] ? genl_rcv+0x19/0x40 [ 620.206369][T12935] ? down_read+0x272/0x2e0 [ 620.206401][T12935] ? genl_rcv+0xd/0x40 [ 620.206427][T12935] genl_rcv+0x28/0x40 [ 620.206454][T12935] netlink_unicast+0x80f/0x9b0 [ 620.206493][T12935] ? __pfx_netlink_unicast+0x10/0x10 [ 620.206528][T12935] ? netlink_sendmsg+0x650/0xb40 [ 620.206548][T12935] ? skb_put+0x11b/0x210 [ 620.206577][T12935] netlink_sendmsg+0x813/0xb40 [ 620.206609][T12935] ? __pfx_netlink_sendmsg+0x10/0x10 [ 620.206636][T12935] ? aa_sock_msg_perm+0xf1/0x1b0 [ 620.206664][T12935] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 620.206689][T12935] ? __pfx_netlink_sendmsg+0x10/0x10 [ 620.206710][T12935] ____sys_sendmsg+0xa68/0xad0 [ 620.206747][T12935] ? __pfx_____sys_sendmsg+0x10/0x10 [ 620.206779][T12935] ? kstrtoull+0x12f/0x1d0 [ 620.206812][T12935] ___sys_sendmsg+0x2a5/0x360 [ 620.206839][T12935] ? __lock_acquire+0x6b5/0x2cf0 [ 620.206873][T12935] ? __pfx____sys_sendmsg+0x10/0x10 [ 620.206904][T12935] ? get_pid_task+0x20/0x1f0 [ 620.206926][T12935] ? get_pid_task+0x20/0x1f0 [ 620.206945][T12935] ? get_pid_task+0x20/0x1f0 [ 620.206995][T12935] ? __fget_files+0x2a/0x420 [ 620.207019][T12935] ? __fget_files+0x3a0/0x420 [ 620.207055][T12935] __sys_sendmsg+0x183/0x260 [ 620.207085][T12935] ? __pfx___sys_sendmsg+0x10/0x10 [ 620.207126][T12935] ? __pfx_ksys_write+0x10/0x10 [ 620.207165][T12935] __do_fast_syscall_32+0x1d2/0x540 [ 620.207189][T12935] ? lockdep_hardirqs_on+0x7a/0x110 [ 620.207209][T12935] ? do_fast_syscall_32+0x33/0x70 [ 620.207230][T12935] ? asm_int80_emulation+0x1a/0x20 [ 620.207250][T12935] ? do_int80_emulation+0x20e/0x400 [ 620.207278][T12935] do_fast_syscall_32+0x33/0x70 [ 620.207301][T12935] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 620.207327][T12935] RIP: 0023:0xf73cd539 [ 620.207346][T12935] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 620.207364][T12935] RSP: 002b:00000000f53f650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 620.207396][T12935] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000 [ 620.207411][T12935] RDX: 000000000000c000 RSI: 0000000000000000 RDI: 0000000000000000 [ 620.207423][T12935] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 620.207435][T12935] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 620.207448][T12935] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 620.207480][T12935] [ 620.886629][T12943] syzkaller0: left promiscuous mode [ 620.911991][T12943] syzkaller0: left allmulticast mode [ 620.958496][T12952] usb usb8: usbfs: process 12952 (syz.3.1957) did not claim interface 0 before use [ 621.006912][T12954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.015872][T12954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 621.223366][T12962] syzkaller0: entered promiscuous mode [ 621.233517][T12962] syzkaller0: entered allmulticast mode [ 621.337001][T12966] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1964'. [ 621.351058][T12964] binder: 12963:12964 ioctl c0306201 0 returned -14 [ 621.366806][ T5846] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 621.410341][T12967] binder: 12963:12967 ioctl c01cf509 80000080 returned -22 [ 621.496969][ T5846] usb 5-1: device descriptor read/64, error -71 [ 621.601219][T12973] netlink: 7060 bytes leftover after parsing attributes in process `syz.2.1965'. [ 621.717897][T12977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.737667][T12977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 621.750624][ T5846] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 621.896646][ T5846] usb 5-1: device descriptor read/64, error -71 [ 622.009205][ T5846] usb usb5-port1: attempt power cycle [ 622.141704][T12988] FAULT_INJECTION: forcing a failure. [ 622.141704][T12988] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 622.155848][T12988] CPU: 1 UID: 0 PID: 12988 Comm: syz.0.1971 Tainted: G L syzkaller #0 PREEMPT(full) [ 622.155880][T12988] Tainted: [L]=SOFTLOCKUP [ 622.155889][T12988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 622.155902][T12988] Call Trace: [ 622.155912][T12988] [ 622.155921][T12988] dump_stack_lvl+0xe8/0x150 [ 622.155953][T12988] should_fail_ex+0x412/0x560 [ 622.155984][T12988] _copy_from_iter+0x1d3/0x1670 [ 622.156018][T12988] ? trace_kmem_cache_alloc+0x1f/0xb0 [ 622.156053][T12988] ? __pfx__copy_from_iter+0x10/0x10 [ 622.156082][T12988] ? __build_skb_around+0x22d/0x3c0 [ 622.156109][T12988] ? __alloc_skb+0x193/0x390 [ 622.156133][T12988] ? netlink_sendmsg+0x650/0xb40 [ 622.156154][T12988] ? skb_put+0x11b/0x210 [ 622.156183][T12988] netlink_sendmsg+0x6c0/0xb40 [ 622.156214][T12988] ? __pfx_netlink_sendmsg+0x10/0x10 [ 622.156239][T12988] ? aa_sock_msg_perm+0xf1/0x1b0 [ 622.156267][T12988] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 622.156293][T12988] ? __pfx_netlink_sendmsg+0x10/0x10 [ 622.156314][T12988] ____sys_sendmsg+0xa68/0xad0 [ 622.156351][T12988] ? __pfx_____sys_sendmsg+0x10/0x10 [ 622.156398][T12988] ? kstrtoull+0x12f/0x1d0 [ 622.156442][T12988] ___sys_sendmsg+0x2a5/0x360 [ 622.156468][T12988] ? __lock_acquire+0x6b5/0x2cf0 [ 622.156511][T12988] ? __pfx____sys_sendmsg+0x10/0x10 [ 622.156541][T12988] ? get_pid_task+0x20/0x1f0 [ 622.156564][T12988] ? get_pid_task+0x20/0x1f0 [ 622.156585][T12988] ? get_pid_task+0x20/0x1f0 [ 622.156635][T12988] ? __fget_files+0x2a/0x420 [ 622.156657][T12988] ? __fget_files+0x3a0/0x420 [ 622.156691][T12988] __sys_sendmsg+0x183/0x260 [ 622.156722][T12988] ? __pfx___sys_sendmsg+0x10/0x10 [ 622.156761][T12988] ? __pfx_ksys_write+0x10/0x10 [ 622.156809][T12988] __do_fast_syscall_32+0x1d2/0x540 [ 622.156833][T12988] ? lockdep_hardirqs_on+0x7a/0x110 [ 622.156853][T12988] ? do_fast_syscall_32+0x33/0x70 [ 622.156875][T12988] ? asm_int80_emulation+0x1a/0x20 [ 622.156894][T12988] ? do_int80_emulation+0x20e/0x400 [ 622.156922][T12988] do_fast_syscall_32+0x33/0x70 [ 622.156947][T12988] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 622.156971][T12988] RIP: 0023:0xf745d539 [ 622.156990][T12988] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 622.157008][T12988] RSP: 002b:00000000f548650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 622.157030][T12988] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 622.157044][T12988] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 622.157057][T12988] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 622.157069][T12988] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 622.157082][T12988] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 622.157113][T12988] [ 622.475442][T12990] program syz.3.1972 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 622.516740][ T5846] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 622.546603][ T5846] usb 5-1: device descriptor read/8, error -71 [ 622.727036][ T5916] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 622.786837][ T5846] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 622.807900][ T5846] usb 5-1: device descriptor read/8, error -71 [ 622.889024][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 622.900407][ T5916] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 622.911208][ T5916] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 622.920878][ T5846] usb usb5-port1: unable to enumerate USB device [ 622.927459][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.942740][ T5916] usb 3-1: config 0 descriptor?? [ 623.366371][ T5916] steelseries 0003:1038:12B6.0013: unknown main item tag 0x0 [ 623.384695][ T5916] steelseries 0003:1038:12B6.0013: unknown main item tag 0x0 [ 623.406785][ T5916] steelseries 0003:1038:12B6.0013: unknown main item tag 0x6 [ 623.425929][ T5916] steelseries 0003:1038:12B6.0013: item fetching failed at offset 4/7 [ 623.441895][ T5916] steelseries 0003:1038:12B6.0013: probe with driver steelseries failed with error -22 [ 623.568180][T12991] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1970'. [ 623.629372][T12984] fuse: root generation should be zero [ 623.714250][ T5916] usb 3-1: USB disconnect, device number 80 [ 624.629507][T13024] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1982'. [ 624.676624][ T43] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 624.759036][T13024] ip6gre1: entered promiscuous mode [ 624.765626][T13024] ip6gre1: entered allmulticast mode [ 624.817686][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 624.839149][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 624.847810][ T798] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 624.869578][ T43] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 624.880023][ T43] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 12336, setting to 64 [ 624.899081][ T43] usb 5-1: config 0 interface 0 has no altsetting 0 [ 624.933560][ T43] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 624.943351][ T43] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 624.973074][ T43] usb 5-1: Product: syz [ 624.984534][ T43] usb 5-1: Manufacturer: syz [ 624.994612][ T43] usb 5-1: SerialNumber: syz [ 625.008444][ T43] usb 5-1: config 0 descriptor?? [ 625.018750][ T43] hub 5-1:0.0: bad descriptor, ignoring hub [ 625.024896][ T43] hub 5-1:0.0: probe with driver hub failed with error -5 [ 625.039205][ T43] usb 5-1: selecting invalid altsetting 0 [ 625.046747][ T798] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 625.177398][T13032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1983'. [ 625.491378][ T5846] usb 5-1: USB disconnect, device number 85 [ 625.848362][ T798] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 626.009198][T13024] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1982'. [ 626.018578][T13024] openvswitch: netlink: Flow key attr not present in new flow. [ 626.081739][T13024] fuse: Unknown parameter 'w1 [ 626.081739][T13024] Éó•‚' [ 626.306653][ T5846] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 626.463037][ T5846] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 626.475133][ T5846] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 12336, setting to 64 [ 626.500497][ T5846] usb 5-1: config 0 interface 0 has no altsetting 0 [ 626.522234][ T5846] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 626.544154][ T5846] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 626.564884][ T5846] usb 5-1: Product: syz [ 626.571731][ T5846] usb 5-1: Manufacturer: syz [ 626.579622][ T5846] usb 5-1: SerialNumber: syz [ 626.591045][ T5846] usb 5-1: config 0 descriptor?? [ 626.608371][ T5846] hub 5-1:0.0: bad descriptor, ignoring hub [ 626.617257][ T5846] hub 5-1:0.0: probe with driver hub failed with error -5 [ 626.632853][ T5846] usb 5-1: selecting invalid altsetting 0 [ 626.833871][T13043] syzkaller0: entered promiscuous mode [ 626.839884][T13043] syzkaller0: entered allmulticast mode [ 626.976978][ T5846] usb 5-1: USB disconnect, device number 86 [ 627.545063][T13046] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1986'. [ 627.759952][T13053] fuse: Bad value for 'user_id' [ 627.764974][T13053] fuse: Bad value for 'user_id' [ 628.726692][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 628.996888][ T798] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 629.127710][T13067] kAFS: unparsable volume name [ 629.147656][ T798] usb 5-1: device descriptor read/64, error -71 [ 629.198049][T13066] syzkaller0: left promiscuous mode [ 629.207061][T13066] syzkaller0: left allmulticast mode [ 629.262997][ T5846] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 629.292708][ T5846] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 629.390027][ T798] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 629.546775][ T798] usb 5-1: device descriptor read/64, error -71 [ 629.611722][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.619009][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.667621][ T798] usb usb5-port1: attempt power cycle [ 630.016664][ T798] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 630.048404][ T798] usb 5-1: device descriptor read/8, error -71 [ 630.296668][ T798] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 630.317409][ T798] usb 5-1: device descriptor read/8, error -71 [ 630.324898][T13097] futex_wake_op: syz.2.2000 tries to shift op by -1; fix this program [ 630.344206][T13097] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 64993 [ 630.427037][ T798] usb usb5-port1: unable to enumerate USB device [ 630.586564][ T5846] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 631.057348][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 631.057367][ T30] audit: type=1326 audit(1769687856.209:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13102 comm="syz.1.2004" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd539 code=0x7ffc0000 [ 631.111163][ T30] audit: type=1326 audit(1769687856.209:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13102 comm="syz.1.2004" exe="/root/syz-executor" sig=0 arch=40000003 syscall=428 compat=1 ip=0xf73bd539 code=0x7ffc0000 [ 631.144788][ T30] audit: type=1326 audit(1769687856.209:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13102 comm="syz.1.2004" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd539 code=0x7ffc0000 [ 631.181736][ T30] audit: type=1326 audit(1769687856.219:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13102 comm="syz.1.2004" exe="/root/syz-executor" sig=0 arch=40000003 syscall=442 compat=1 ip=0xf73bd539 code=0x7ffc0000 [ 631.209872][ T30] audit: type=1326 audit(1769687856.219:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13102 comm="syz.1.2004" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd539 code=0x7ffc0000 [ 631.232567][ T30] audit: type=1326 audit(1769687856.219:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13102 comm="syz.1.2004" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd539 code=0x7ffc0000 [ 631.255377][ T30] audit: type=1326 audit(1769687856.219:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13102 comm="syz.1.2004" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf73bd539 code=0x7ffc0000 [ 631.281821][ T30] audit: type=1326 audit(1769687856.219:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13102 comm="syz.1.2004" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd539 code=0x7ffc0000 [ 631.309843][ T30] audit: type=1326 audit(1769687856.219:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13102 comm="syz.1.2004" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf73bd539 code=0x7ffc0000 [ 631.340481][ T30] audit: type=1326 audit(1769687856.229:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13102 comm="syz.1.2004" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd539 code=0x7ffc0000 [ 634.744756][T13164] fuse: Bad value for 'user_id' [ 634.749961][T13164] fuse: Bad value for 'user_id' [ 634.986794][ T5846] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 635.159294][ T5846] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 635.170820][ T5846] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 12336, setting to 64 [ 635.185051][ T5846] usb 5-1: config 0 interface 0 has no altsetting 0 [ 635.199606][ T5846] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 635.209009][ T1210] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 635.216889][ T5846] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 635.229168][ T5846] usb 5-1: Product: syz [ 635.235940][ T5846] usb 5-1: Manufacturer: syz [ 635.241100][ T5846] usb 5-1: SerialNumber: syz [ 635.251928][ T5846] usb 5-1: config 0 descriptor?? [ 635.269371][ T5846] hub 5-1:0.0: bad descriptor, ignoring hub [ 635.275463][ T5846] hub 5-1:0.0: probe with driver hub failed with error -5 [ 635.287081][ T5846] usb 5-1: selecting invalid altsetting 0 [ 635.396523][ T1210] usb 4-1: Using ep0 maxpacket: 16 [ 635.432327][ T1210] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 635.446754][ T1210] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 635.500108][ T1210] usb 4-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 635.509869][ T1210] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.518350][ T1210] usb 4-1: Product: syz [ 635.522674][ T1210] usb 4-1: Manufacturer: syz [ 635.527852][ T1210] usb 4-1: SerialNumber: syz [ 635.537128][ T1210] usb 4-1: config 0 descriptor?? [ 636.216583][T13162] usb 5-1: reset high-speed USB device number 91 using dummy_hcd [ 636.646660][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 636.867402][ T798] usb 5-1: USB disconnect, device number 91 [ 637.118935][T13189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2029'. [ 637.756214][T13197] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2032'. [ 637.778670][T13195] syzkaller0: entered promiscuous mode [ 637.788623][T13195] syzkaller0: entered allmulticast mode [ 637.850085][T13198] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2032'. [ 639.486327][ T1210] powermate 4-1:0.0: probe with driver powermate failed with error -5 [ 639.517870][ T1210] usb 4-1: USB disconnect, device number 77 [ 639.609365][T13218] gre0: entered promiscuous mode [ 640.035310][T13230] bond0: (slave batadv0): Releasing backup interface [ 640.046681][ T798] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 640.061550][T13230] bridge_slave_0: left allmulticast mode [ 640.069790][T13230] bridge_slave_0: left promiscuous mode [ 640.082265][T13230] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.104248][T13230] bond0: (slave bond_slave_0): Releasing backup interface [ 640.115653][T13230] bond0: (slave bond_slave_1): Releasing backup interface [ 640.132565][T13230] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 640.140694][T13230] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 640.151163][T13230] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 640.159341][T13230] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 640.169153][T13230] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 640.197131][ T798] usb 3-1: device descriptor read/64, error -71 [ 640.437539][ T798] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 640.676654][ T798] usb 3-1: device descriptor read/64, error -71 [ 640.746866][T13235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2040'. [ 640.790308][ T798] usb usb3-port1: attempt power cycle [ 640.900385][T13237] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 641.146564][ T798] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 641.167256][ T798] usb 3-1: device descriptor read/8, error -71 [ 641.406962][ T798] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 641.439526][ T798] usb 3-1: device descriptor read/8, error -71 [ 641.560190][ T798] usb usb3-port1: unable to enumerate USB device [ 642.698573][ T5916] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 642.870340][ T5916] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 642.904362][ T5916] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 642.930382][ T5916] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 642.962890][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.994697][T13265] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 643.032472][ T5916] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 643.166853][ T1210] usb 5-1: new full-speed USB device number 92 using dummy_hcd [ 643.330640][ T1210] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 643.364220][ T1210] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 643.393035][ T1210] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.422083][ T1210] usb 5-1: config 0 descriptor?? [ 643.451710][T13274] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 643.776951][T12229] usb 4-1: USB disconnect, device number 78 [ 643.910087][ T1210] elan 0003:04F3:0755.0015: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 644.100951][T12229] usb 5-1: USB disconnect, device number 92 [ 645.076554][ T798] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 645.257760][ T798] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 645.266994][ T798] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 12336, setting to 64 [ 645.282570][ T798] usb 4-1: config 0 interface 0 has no altsetting 0 [ 645.295741][ T798] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 645.305213][ T798] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 645.314298][ T798] usb 4-1: Product: syz [ 645.319851][ T798] usb 4-1: Manufacturer: syz [ 645.324628][ T798] usb 4-1: SerialNumber: syz [ 645.334796][ T798] usb 4-1: config 0 descriptor?? [ 645.352572][ T798] hub 4-1:0.0: bad descriptor, ignoring hub [ 645.360137][ T798] hub 4-1:0.0: probe with driver hub failed with error -5 [ 645.372471][ T798] usb 4-1: selecting invalid altsetting 0 [ 645.543900][T13301] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2062'. [ 645.934255][T13309] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2063'. [ 646.329218][T13292] usb 4-1: reset high-speed USB device number 79 using dummy_hcd [ 646.895230][T13316] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2065'. [ 647.037117][T12229] usb 4-1: USB disconnect, device number 79 [ 647.454581][T13320] gre0: left promiscuous mode [ 647.589007][T13320] xfrm0: left promiscuous mode [ 647.600935][T13320] xfrm0: left allmulticast mode [ 647.752661][T13320] geneve2: left promiscuous mode [ 647.775322][T13320] vxlan0: left promiscuous mode [ 647.798245][T13320] vlan2: left allmulticast mode [ 647.806105][T13320] vlan1: left allmulticast mode [ 647.814919][T13320] veth0_vlan: left allmulticast mode [ 647.823637][T13320] ip6gre1: left allmulticast mode [ 647.833636][ T12] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 647.881628][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.911118][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 57307 - 0 [ 647.925969][ T12] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 647.938136][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.952153][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 57307 - 0 [ 647.969993][ T12] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 647.979299][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.990814][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 57307 - 0 [ 648.002516][ T12] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 648.014906][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.032276][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 57307 - 0 [ 648.135461][T13330] program syz.1.2070 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 648.275069][T13332] macsec1: entered allmulticast mode [ 648.282646][T13332] syz_tun: entered allmulticast mode [ 648.304725][T13332] syz_tun: left allmulticast mode [ 650.638281][T13381] fuse: Unknown parameter '0x0000000000000009' [ 652.006797][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 652.636515][ T24] usb 4-1: new full-speed USB device number 80 using dummy_hcd [ 652.816471][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 652.839679][ T24] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 652.856677][ T24] usb 4-1: can't read configurations, error -71 [ 653.537727][T13428] program syz.2.2102 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 655.333200][T13466] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2111'. [ 655.345876][T13456] netlink: 'syz.4.2111': attribute type 2 has an invalid length. [ 655.603366][T13475] usb usb1: usbfs: process 13475 (syz.1.2114) did not claim interface 0 before use [ 656.401492][T13489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 656.413914][T13489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 656.556562][ T1210] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 656.686720][ T1210] usb 4-1: device descriptor read/64, error -71 [ 656.771991][T13499] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2123'. [ 656.936580][ T1210] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 657.086892][ T1210] usb 4-1: device descriptor read/64, error -71 [ 657.206995][ T1210] usb usb4-port1: attempt power cycle [ 657.566559][ T1210] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 657.587300][ T1210] usb 4-1: device descriptor read/8, error -71 [ 657.826605][ T1210] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 657.848187][ T1210] usb 4-1: device descriptor read/8, error -71 [ 657.957103][ T1210] usb usb4-port1: unable to enumerate USB device [ 658.222080][T13531] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2135'. [ 658.248301][T13531] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 658.626187][T13550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 658.640696][T13550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 659.760621][T13569] fuse: Unknown parameter '' [ 660.531770][T13581] FAULT_INJECTION: forcing a failure. [ 660.531770][T13581] name failslab, interval 1, probability 0, space 0, times 0 [ 660.544818][T13581] CPU: 1 UID: 0 PID: 13581 Comm: syz.4.2153 Tainted: G L syzkaller #0 PREEMPT(full) [ 660.544869][T13581] Tainted: [L]=SOFTLOCKUP [ 660.544877][T13581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 660.544890][T13581] Call Trace: [ 660.544898][T13581] [ 660.544906][T13581] dump_stack_lvl+0xe8/0x150 [ 660.544937][T13581] should_fail_ex+0x412/0x560 [ 660.544966][T13581] should_failslab+0xa8/0x100 [ 660.544991][T13581] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 660.545025][T13581] ? __alloc_skb+0x1d7/0x390 [ 660.545048][T13581] ? __local_bh_enable_ip+0xd0/0x130 [ 660.545068][T13581] ? __alloc_skb+0x193/0x390 [ 660.545092][T13581] __alloc_skb+0x1d7/0x390 [ 660.545121][T13581] tipc_nl_compat_doit+0x1f9/0x650 [ 660.545164][T13581] ? __lock_acquire+0x6b5/0x2cf0 [ 660.545197][T13581] ? __pfx_tipc_nl_compat_doit+0x10/0x10 [ 660.545242][T13581] ? bpf_lsm_capable+0x9/0x20 [ 660.545268][T13581] ? security_capable+0x7e/0x2c0 [ 660.545301][T13581] tipc_nl_compat_recv+0x8d3/0xcf0 [ 660.545336][T13581] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 660.545366][T13581] ? __mutex_trylock_common+0x158/0x260 [ 660.545391][T13581] ? __pfx___mutex_trylock_common+0x10/0x10 [ 660.545413][T13581] ? __pfx___tipc_nl_bearer_enable+0x10/0x10 [ 660.545437][T13581] ? __pfx_tipc_nl_compat_bearer_enable+0x10/0x10 [ 660.545476][T13581] ? trace_contention_end+0x39/0x100 [ 660.545509][T13581] genl_family_rcv_msg_doit+0x22a/0x330 [ 660.545547][T13581] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 660.545588][T13581] ? __lock_acquire+0x6b5/0x2cf0 [ 660.545627][T13581] genl_rcv_msg+0x61c/0x7a0 [ 660.545662][T13581] ? __pfx_genl_rcv_msg+0x10/0x10 [ 660.545689][T13581] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 660.545735][T13581] netlink_rcv_skb+0x232/0x4b0 [ 660.545758][T13581] ? __pfx_genl_rcv_msg+0x10/0x10 [ 660.545799][T13581] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 660.545817][T13581] ? genl_rcv+0x19/0x40 [ 660.545860][T13581] ? down_read+0x272/0x2e0 [ 660.545883][T13581] ? genl_rcv+0xd/0x40 [ 660.545910][T13581] genl_rcv+0x28/0x40 [ 660.545935][T13581] netlink_unicast+0x80f/0x9b0 [ 660.545976][T13581] ? __pfx_netlink_unicast+0x10/0x10 [ 660.546005][T13581] ? __alloc_skb+0x193/0x390 [ 660.546029][T13581] ? netlink_sendmsg+0x650/0xb40 [ 660.546048][T13581] ? skb_put+0x11b/0x210 [ 660.546077][T13581] netlink_sendmsg+0x813/0xb40 [ 660.546108][T13581] ? __pfx_netlink_sendmsg+0x10/0x10 [ 660.546134][T13581] ? aa_sock_msg_perm+0xf1/0x1b0 [ 660.546168][T13581] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 660.546190][T13581] ? __pfx_netlink_sendmsg+0x10/0x10 [ 660.546211][T13581] ____sys_sendmsg+0xa68/0xad0 [ 660.546247][T13581] ? __pfx_____sys_sendmsg+0x10/0x10 [ 660.546280][T13581] ? kstrtoull+0x12f/0x1d0 [ 660.546313][T13581] ___sys_sendmsg+0x2a5/0x360 [ 660.546339][T13581] ? __lock_acquire+0x6b5/0x2cf0 [ 660.546371][T13581] ? __pfx____sys_sendmsg+0x10/0x10 [ 660.546401][T13581] ? get_pid_task+0x20/0x1f0 [ 660.546426][T13581] ? get_pid_task+0x20/0x1f0 [ 660.546445][T13581] ? get_pid_task+0x20/0x1f0 [ 660.546492][T13581] ? __fget_files+0x2a/0x420 [ 660.546513][T13581] ? __fget_files+0x3a0/0x420 [ 660.546547][T13581] __sys_sendmsg+0x183/0x260 [ 660.546579][T13581] ? __pfx___sys_sendmsg+0x10/0x10 [ 660.546621][T13581] ? __pfx_ksys_write+0x10/0x10 [ 660.546662][T13581] __do_fast_syscall_32+0x1d2/0x540 [ 660.546687][T13581] ? lockdep_hardirqs_on+0x7a/0x110 [ 660.546707][T13581] ? do_fast_syscall_32+0x33/0x70 [ 660.546729][T13581] ? asm_int80_emulation+0x1a/0x20 [ 660.546748][T13581] ? do_int80_emulation+0x20e/0x400 [ 660.546776][T13581] do_fast_syscall_32+0x33/0x70 [ 660.546801][T13581] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 660.546827][T13581] RIP: 0023:0xf73fd539 [ 660.546846][T13581] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 660.546864][T13581] RSP: 002b:00000000f542650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 660.546888][T13581] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 660.546903][T13581] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 660.546917][T13581] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 660.546929][T13581] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 660.546942][T13581] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 660.546974][T13581] [ 661.466573][T12229] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 661.606703][T12229] usb 5-1: device descriptor read/64, error -71 [ 661.823220][T13609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2163'. [ 661.853123][T12229] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 661.997208][T12229] usb 5-1: device descriptor read/64, error -71 [ 662.069796][T13615] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2165'. [ 662.116996][T12229] usb usb5-port1: attempt power cycle [ 662.466541][T12229] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 662.497162][T12229] usb 5-1: device descriptor read/8, error -71 [ 662.746599][T12229] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 662.797491][T12229] usb 5-1: device descriptor read/8, error -71 [ 662.927912][T12229] usb usb5-port1: unable to enumerate USB device [ 666.704859][T13709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 666.717256][T13709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 666.756555][ T24] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 666.936974][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 666.963177][ T24] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 666.987711][ T24] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 667.002904][ T24] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 667.020926][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 667.037693][ T24] usb 3-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 667.056499][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.089259][ T24] usb 3-1: config 0 descriptor?? [ 667.615071][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 667.629574][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 667.645695][ T24] usb 3-1: USB disconnect, device number 86 [ 668.240114][T13719] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 668.323661][T13727] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2196'. [ 668.637625][T13732] KVM: debugfs: duplicate directory 13732-7 [ 670.106792][T12229] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 670.288730][T12229] usb 4-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=db.e9 [ 670.311498][T12229] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.336314][T12229] usb 4-1: config 0 descriptor?? [ 670.366861][T12229] pcwd_usb: The device isn't a Human Interface Device [ 670.615053][T12229] usb 4-1: USB disconnect, device number 86 [ 671.076646][T12229] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 671.123924][T13792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 671.149966][T13792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 671.258943][T12229] usb 5-1: Using ep0 maxpacket: 16 [ 671.269628][T12229] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 671.298031][T12229] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 671.321714][T12229] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 671.349816][T12229] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 671.361913][T12229] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.374655][T12229] usb 5-1: config 0 descriptor?? [ 671.601018][T13809] loop7: detected capacity change from 0 to 16384 [ 671.610158][T13810] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2229'. [ 671.776616][ T5916] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 671.801064][ C1] I/O error, dev loop7, sector 2304 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2 [ 671.811242][T12229] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 671.820052][ C1] I/O error, dev loop7, sector 2304 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 671.830236][ C1] Buffer I/O error on dev loop7, logical block 288, async page read [ 671.838521][T12229] microsoft 0003:045E:07DA.0016: ignoring exceeding usage max [ 671.848211][T13812] loop7: detected capacity change from 16384 to 0 [ 671.867900][T12229] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 671.875157][T12229] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 671.886389][T12229] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 671.893763][T12229] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 671.903625][T12229] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 671.912093][T12229] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 671.919892][T12229] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 671.927935][T12229] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 671.935532][T12229] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 671.948543][ T5916] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 671.959640][ T5916] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 671.974464][T12229] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0016/input/input32 [ 671.986996][ T5916] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 672.006693][ T24] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 672.031606][T12229] microsoft 0003:045E:07DA.0016: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 672.069084][ T5916] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice=20.41 [ 672.083997][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 672.103492][ T5916] usb 4-1: Product: syz [ 672.117243][ T5916] usb 4-1: Manufacturer: syz [ 672.123863][ T5916] usb 4-1: SerialNumber: syz [ 672.193317][ T24] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 672.209867][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.225230][ T24] usb 3-1: Product: syz [ 672.231969][ T24] usb 3-1: Manufacturer: syz [ 672.237489][ T24] usb 3-1: SerialNumber: syz [ 672.260667][ T24] r8152-cfgselector 3-1: Unknown version 0x0000 [ 672.274567][ T24] r8152-cfgselector 3-1: config 0 descriptor?? [ 672.357235][ T5916] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 87 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 672.427479][T13824] FAULT_INJECTION: forcing a failure. [ 672.427479][T13824] name failslab, interval 1, probability 0, space 0, times 0 [ 672.457112][T13824] CPU: 1 UID: 0 PID: 13824 Comm: syz.1.2234 Tainted: G L syzkaller #0 PREEMPT(full) [ 672.457145][T13824] Tainted: [L]=SOFTLOCKUP [ 672.457156][T13824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 672.457169][T13824] Call Trace: [ 672.457178][T13824] [ 672.457187][T13824] dump_stack_lvl+0xe8/0x150 [ 672.457218][T13824] should_fail_ex+0x412/0x560 [ 672.457248][T13824] should_failslab+0xa8/0x100 [ 672.457274][T13824] __kmalloc_noprof+0xde/0x7e0 [ 672.457294][T13824] ? kfree+0x4d/0x650 [ 672.457319][T13824] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 672.457353][T13824] tomoyo_realpath_from_path+0xe3/0x5d0 [ 672.457382][T13824] ? tomoyo_domain+0xd7/0x130 [ 672.457419][T13824] tomoyo_path_perm+0x283/0x560 [ 672.457442][T13824] ? tomoyo_path_perm+0x251/0x560 [ 672.457464][T13824] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 672.457523][T13824] ? __fget_files+0x2a/0x420 [ 672.457550][T13824] ? __fget_files+0x3a0/0x420 [ 672.457579][T13824] security_inode_getattr+0x12b/0x310 [ 672.457610][T13824] do_statx_fd+0x14e/0x3b0 [ 672.457638][T13824] ? __pfx_do_statx_fd+0x10/0x10 [ 672.457687][T13824] ? ksys_write+0x1e6/0x270 [ 672.457720][T13824] __se_sys_statx+0x146/0x2a0 [ 672.457751][T13824] ? __pfx___se_sys_statx+0x10/0x10 [ 672.457779][T13824] ? __fget_files+0x3a0/0x420 [ 672.457808][T13824] ? fput+0xa0/0xd0 [ 672.457833][T13824] ? ksys_write+0x242/0x270 [ 672.457863][T13824] ? __pfx_ksys_write+0x10/0x10 [ 672.457897][T13824] ? __ia32_sys_statx+0x20/0xc0 [ 672.457924][T13824] __do_fast_syscall_32+0x1d2/0x540 [ 672.457947][T13824] ? lockdep_hardirqs_on+0x7a/0x110 [ 672.457966][T13824] ? do_fast_syscall_32+0x33/0x70 [ 672.457988][T13824] ? asm_int80_emulation+0x1a/0x20 [ 672.458007][T13824] ? do_int80_emulation+0x20e/0x400 [ 672.458034][T13824] do_fast_syscall_32+0x33/0x70 [ 672.458057][T13824] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 672.458080][T13824] RIP: 0023:0xf73bd539 [ 672.458099][T13824] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 672.458116][T13824] RSP: 002b:00000000f53e650c EFLAGS: 00000206 ORIG_RAX: 000000000000017f [ 672.458138][T13824] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000 [ 672.458151][T13824] RDX: 0000000000001000 RSI: 0000000000006000 RDI: 0000000000000000 [ 672.458164][T13824] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 672.458176][T13824] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 672.458188][T13824] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 672.458219][T13824] [ 672.458251][T13824] ERROR: Out of memory at tomoyo_realpath_from_path. [ 672.708944][ T5916] usb 5-1: USB disconnect, device number 97 [ 672.752700][T12229] usb 4-1: USB disconnect, device number 87 [ 672.772002][T12229] usblp0: removed [ 673.064611][T13840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 673.073505][T13840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 673.176693][ T5916] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 673.339271][ T5916] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 673.347510][ T5916] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 12336, setting to 64 [ 673.358716][ T5916] usb 5-1: config 0 interface 0 has no altsetting 0 [ 673.367560][ T5916] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 673.376733][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 673.384903][ T5916] usb 5-1: Product: syz [ 673.389183][ T5916] usb 5-1: Manufacturer: syz [ 673.393836][ T5916] usb 5-1: SerialNumber: syz [ 673.400785][ T5916] usb 5-1: config 0 descriptor?? [ 673.410889][ T5916] hub 5-1:0.0: bad descriptor, ignoring hub [ 673.416930][ T5916] hub 5-1:0.0: probe with driver hub failed with error -5 [ 673.426368][ T5916] usb 5-1: selecting invalid altsetting 0 [ 674.145129][T13828] usb 5-1: reset high-speed USB device number 98 using dummy_hcd [ 674.323582][T13852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 674.338094][T13852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 674.647207][ T24] r8152-cfgselector 3-1: USB disconnect, device number 87 [ 674.887684][T12229] usb 5-1: USB disconnect, device number 98 [ 675.847429][T12229] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 676.026590][T12229] usb 5-1: Using ep0 maxpacket: 8 [ 676.052286][T12229] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 676.086171][T12229] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 676.103804][T12229] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.150042][T12229] usb 5-1: config 0 descriptor?? [ 676.194659][T13877] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 676.377444][T12229] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 676.682082][T12229] usb 5-1: USB disconnect, device number 99 [ 676.902025][T13883] overlayfs: missing 'lowerdir' [ 676.948636][T13883] program syz.4.2255 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 677.516959][ T24] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 677.547162][T13896] netlink: 'syz.3.2258': attribute type 4 has an invalid length. [ 677.565882][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 677.566279][ T30] audit: type=1400 audit(1769687902.709:385): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=265B5EB82B2525 pid=13893 comm="syz.3.2258" [ 677.656544][ T24] usb 3-1: device descriptor read/64, error -71 [ 677.841475][T13907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 677.856131][T13907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 677.906543][ T24] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 678.036509][ T24] usb 3-1: device descriptor read/64, error -71 [ 678.089987][T13907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 678.100720][T13907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 678.147561][ T24] usb usb3-port1: attempt power cycle [ 678.497223][ T24] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 678.517141][ T24] usb 3-1: device descriptor read/8, error -71 [ 678.766576][ T24] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 678.797590][ T24] usb 3-1: device descriptor read/8, error -71 [ 678.917379][ T24] usb usb3-port1: unable to enumerate USB device [ 679.268693][T13927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2268'. [ 679.279867][T13927] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2268'. [ 679.293817][T13927] netlink: 'syz.0.2268': attribute type 18 has an invalid length. [ 679.494949][T13930] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 680.116782][T12229] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 680.147320][T13954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 680.156148][T13954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 680.285670][T12229] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 680.294266][T12229] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 12336, setting to 64 [ 680.310865][T12229] usb 5-1: config 0 interface 0 has no altsetting 0 [ 680.334516][T12229] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 680.354935][T12229] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 680.366708][T12229] usb 5-1: Product: syz [ 680.370929][T12229] usb 5-1: Manufacturer: syz [ 680.380321][T12229] usb 5-1: SerialNumber: syz [ 680.399561][T12229] usb 5-1: config 0 descriptor?? [ 680.412081][T12229] hub 5-1:0.0: bad descriptor, ignoring hub [ 680.420871][T12229] hub 5-1:0.0: probe with driver hub failed with error -5 [ 680.432228][T12229] usb 5-1: selecting invalid altsetting 0 [ 680.468928][T13959] overlayfs: missing 'lowerdir' [ 680.480244][T13959] program syz.0.2279 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 680.643397][T13962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2281'. [ 680.660772][T13962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2281'. [ 680.846300][ T30] audit: type=1326 audit(1769687905.989:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13968 comm="syz.1.2282" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf73bd539 code=0x0 [ 681.016587][ T1210] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 681.176548][ T1210] usb 3-1: Using ep0 maxpacket: 32 [ 681.190693][ T1210] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 681.206560][ T1210] usb 3-1: config 0 has no interface number 0 [ 681.218222][ T1210] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 681.246721][ T1210] usb 3-1: config 0 interface 196 has no altsetting 0 [ 681.261472][ T1210] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 681.272321][ T1210] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.281488][ T1210] usb 3-1: Product: syz [ 681.286096][ T1210] usb 3-1: Manufacturer: syz [ 681.291567][ T1210] usb 3-1: SerialNumber: syz [ 681.307606][ T1210] usb 3-1: config 0 descriptor?? [ 681.313619][T13970] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 681.356894][T13944] usb 5-1: reset high-speed USB device number 100 using dummy_hcd [ 681.618674][T13988] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 681.724763][T13991] overlayfs: missing 'lowerdir' [ 681.735458][T13991] program syz.1.2292 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 681.835747][T13993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 681.855077][T13993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 681.964046][ T1210] ipheth 3-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 682.014635][ T1210] ipheth 3-1:0.196: Apple iPhone USB Ethernet device attached [ 682.137656][ T43] usb 5-1: USB disconnect, device number 100 [ 682.184616][ T43] usb 3-1: USB disconnect, device number 92 [ 682.259947][ T43] ipheth 3-1:0.196: Apple iPhone USB Ethernet now disconnected [ 682.494636][T14002] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2294'. [ 682.506635][T14002] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2294'. [ 682.726643][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 682.829117][T14019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2298'. [ 683.261034][T14038] netlink: 'syz.2.2300': attribute type 4 has an invalid length. [ 683.340130][T14042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 683.361484][ T30] audit: type=1400 audit(1769687908.509:387): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=265B5EB82B2525 pid=14028 comm="syz.2.2300" [ 683.367901][T14042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 683.866520][ T43] usb 4-1: new full-speed USB device number 88 using dummy_hcd [ 683.896534][ T24] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 684.021419][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 684.042195][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 684.059814][ T43] usb 4-1: New USB device found, idVendor=1a34, idProduct=6f05, bcdDevice=8e.7b [ 684.074487][ T43] usb 4-1: New USB device strings: Mfr=176, Product=0, SerialNumber=0 [ 684.084007][ T24] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 684.098927][ T24] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 12336, setting to 64 [ 684.110199][ T43] usb 4-1: Manufacturer: syz [ 684.121758][ T43] usb 4-1: config 0 descriptor?? [ 684.127539][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 684.140083][ T24] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 684.149961][ T24] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 684.164057][ T24] usb 5-1: Product: syz [ 684.177143][ T24] usb 5-1: Manufacturer: syz [ 684.181844][ T24] usb 5-1: SerialNumber: syz [ 684.197349][ T24] usb 5-1: config 0 descriptor?? [ 684.209110][ T24] hub 5-1:0.0: bad descriptor, ignoring hub [ 684.215896][ T24] hub 5-1:0.0: probe with driver hub failed with error -5 [ 684.232289][ T24] usb 5-1: selecting invalid altsetting 0 [ 684.537960][ T43] usbhid 4-1:0.0: can't add hid device: -71 [ 684.558047][ T43] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 684.561512][ T43] usb 4-1: USB disconnect, device number 88 [ 685.015700][ T30] audit: type=1326 audit(1769687910.159:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14069 comm="syz.2.2310" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d539 code=0x7ffc0000 [ 685.042538][ T30] audit: type=1326 audit(1769687910.189:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14069 comm="syz.2.2310" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d539 code=0x7ffc0000 [ 685.069104][ T30] audit: type=1326 audit(1769687910.189:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14069 comm="syz.2.2310" exe="/root/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf740d539 code=0x7ffc0000 [ 685.092371][ T30] audit: type=1326 audit(1769687910.189:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14069 comm="syz.2.2310" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d539 code=0x7ffc0000 [ 685.129419][ T30] audit: type=1326 audit(1769687910.189:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14069 comm="syz.2.2310" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d539 code=0x7ffc0000 [ 685.153119][ T30] audit: type=1326 audit(1769687910.189:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14069 comm="syz.2.2310" exe="/root/syz-executor" sig=0 arch=40000003 syscall=100 compat=1 ip=0xf740d539 code=0x7ffc0000 [ 685.180681][ T30] audit: type=1326 audit(1769687910.189:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14069 comm="syz.2.2310" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d539 code=0x7ffc0000 [ 685.204768][T14056] usb 5-1: reset high-speed USB device number 101 using dummy_hcd [ 685.216033][ T30] audit: type=1326 audit(1769687910.189:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14069 comm="syz.2.2310" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf740d539 code=0x7ffc0000 [ 685.239558][ T30] audit: type=1326 audit(1769687910.189:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14069 comm="syz.2.2310" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf717572b code=0x7ffc0000 [ 685.280355][T14075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 685.306919][T14075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 685.318425][T14075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 685.336869][T14075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 685.866545][ T1210] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 685.966912][T12229] usb 5-1: USB disconnect, device number 101 [ 686.028840][T14082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 686.045056][ T1210] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 686.045774][T14082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 686.060935][ T1210] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 686.082521][ T1210] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.101904][ T1210] usb 4-1: config 0 descriptor?? [ 686.522318][ T1210] lg-g15 0003:046D:C222.0017: unbalanced delimiter at end of report description [ 686.536080][T12229] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 686.550197][ T1210] lg-g15 0003:046D:C222.0017: probe with driver lg-g15 failed with error -22 [ 686.676550][T12229] usb 3-1: device descriptor read/64, error -71 [ 686.686544][ T5916] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 686.816873][T14095] netlink: 'syz.3.2314': attribute type 4 has an invalid length. [ 686.828235][T14095] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2314'. [ 686.839650][ T5916] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 686.849914][ T5916] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 686.860587][ T5916] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 686.870579][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.882100][ T5916] usb 5-1: config 0 descriptor?? [ 686.936559][T12229] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 687.066525][T12229] usb 3-1: device descriptor read/64, error -71 [ 687.176860][T12229] usb usb3-port1: attempt power cycle [ 687.527687][T12229] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 687.569205][T12229] usb 3-1: device descriptor read/8, error -71 [ 687.806532][T12229] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 687.850298][T12229] usb 3-1: device descriptor read/8, error -71 [ 687.977164][T12229] usb usb3-port1: unable to enumerate USB device [ 688.650620][T14114] loop5: detected capacity change from 0 to 7 [ 688.688899][T12229] usb 4-1: USB disconnect, device number 89 [ 688.854363][T14114] Dev loop5: unable to read RDB block 7 [ 688.891307][T14114] loop5: unable to read partition table [ 688.902926][T14122] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2326'. [ 688.921172][T14114] loop5: partition table beyond EOD, truncated [ 688.951403][T14114] loop_reread_partitions: partition scan of loop5 (úù) failed (rc=-5) [ 689.070914][ T5194] Dev loop5: unable to read RDB block 7 [ 689.079019][ T5194] loop5: unable to read partition table [ 689.086901][ T5194] loop5: partition table beyond EOD, truncated [ 689.800618][T14135] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2330'. [ 689.916575][T12229] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 690.091313][T12229] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 690.126552][T12229] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 12336, setting to 64 [ 690.148204][T12229] usb 3-1: config 0 interface 0 has no altsetting 0 [ 690.158950][T12229] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 690.168470][T12229] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 690.177028][T12229] usb 3-1: Product: syz [ 690.181314][T12229] usb 3-1: Manufacturer: syz [ 690.185924][T12229] usb 3-1: SerialNumber: syz [ 690.196787][T12229] usb 3-1: config 0 descriptor?? [ 690.203990][T12229] hub 3-1:0.0: bad descriptor, ignoring hub [ 690.211333][T12229] hub 3-1:0.0: probe with driver hub failed with error -5 [ 690.222069][T12229] usb 3-1: selecting invalid altsetting 0 [ 690.678307][T14156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 690.707134][T14156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 691.057015][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.063662][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.084450][ T24] usb 5-1: USB disconnect, device number 102 [ 691.206573][T14133] usb 3-1: reset high-speed USB device number 97 using dummy_hcd [ 691.341604][T14168] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2341'. [ 691.456595][ T24] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 691.606551][ T24] usb 4-1: device descriptor read/64, error -71 [ 691.856685][ T24] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 691.937369][T12229] usb 3-1: USB disconnect, device number 97 [ 691.998098][ T24] usb 4-1: device descriptor read/64, error -71 [ 692.107030][ T24] usb usb4-port1: attempt power cycle [ 692.446605][ T24] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 692.492341][ T24] usb 4-1: device descriptor read/8, error -71 [ 692.751329][ T24] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 692.777620][ T24] usb 4-1: device descriptor read/8, error -71 [ 692.888388][ T24] usb usb4-port1: unable to enumerate USB device [ 693.085428][T14198] sctp: [Deprecated]: syz.2.2351 (pid 14198) Use of struct sctp_assoc_value in delayed_ack socket option. [ 693.085428][T14198] Use struct sctp_sack_info instead [ 693.508405][T14201] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 693.866613][ T24] usb 5-1: new full-speed USB device number 103 using dummy_hcd [ 693.876545][ T43] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 694.006800][ T24] usb 5-1: device descriptor read/64, error -71 [ 694.027583][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 694.040976][ T43] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 694.055278][ T43] usb 3-1: config 0 interface 0 has no altsetting 0 [ 694.062178][ T43] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 694.071616][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.097422][ T43] usb 3-1: config 0 descriptor?? [ 694.278446][ T24] usb 5-1: new full-speed USB device number 104 using dummy_hcd [ 694.436536][ T24] usb 5-1: device descriptor read/64, error -71 [ 694.566401][ T24] usb usb5-port1: attempt power cycle [ 694.710408][ T5916] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 694.901582][ T5916] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 694.911150][ T5916] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 12336, setting to 64 [ 694.922807][ T5916] usb 4-1: config 0 interface 0 has no altsetting 0 [ 694.933179][ T5916] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 694.936826][ T24] usb 5-1: new full-speed USB device number 105 using dummy_hcd [ 694.942802][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 694.963121][ T5916] usb 4-1: Product: syz [ 694.968588][ T43] corsair-psu 0003:1B1C:1C09.0018: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.2-1/input0 [ 694.977764][ T5916] usb 4-1: Manufacturer: syz [ 694.984959][ T5916] usb 4-1: SerialNumber: syz [ 695.003560][ T5916] usb 4-1: config 0 descriptor?? [ 695.008934][ T24] usb 5-1: device descriptor read/8, error -71 [ 695.021263][ T5916] hub 4-1:0.0: bad descriptor, ignoring hub [ 695.028436][ T5916] hub 4-1:0.0: probe with driver hub failed with error -5 [ 695.040396][ T5916] usb 4-1: selecting invalid altsetting 0 [ 695.137386][ T43] corsair-psu 0003:1B1C:1C09.0018: unable to initialize device (-95) [ 695.170072][ T43] corsair-psu 0003:1B1C:1C09.0018: probe with driver corsair-psu failed with error -95 [ 695.246547][ T24] usb 5-1: new full-speed USB device number 106 using dummy_hcd [ 695.287311][ T24] usb 5-1: device descriptor read/8, error -71 [ 695.344758][T14201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 695.359046][T14201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 695.373035][T12229] usb 3-1: USB disconnect, device number 98 [ 695.406826][ T24] usb usb5-port1: unable to enumerate USB device [ 695.970199][T14216] usb 4-1: reset high-speed USB device number 94 using dummy_hcd [ 695.979450][T14241] netlink: 'syz.2.2363': attribute type 4 has an invalid length. [ 696.746912][ T24] usb 4-1: USB disconnect, device number 94 [ 697.104723][T14255] syzkaller0: entered promiscuous mode [ 697.110535][T14255] syzkaller0: entered allmulticast mode [ 697.219450][T14258] netlink: 208240 bytes leftover after parsing attributes in process `syz.1.2368'. [ 697.577513][ T5916] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 697.736569][ T5916] usb 3-1: Using ep0 maxpacket: 16 [ 697.744469][ T5916] usb 3-1: config 0 interface 0 altsetting 65 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 697.758725][ T5916] usb 3-1: config 0 interface 0 altsetting 65 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 697.778876][ T5916] usb 3-1: config 0 interface 0 has no altsetting 0 [ 697.788474][ T5916] usb 3-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 697.800431][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.812293][ T5916] usb 3-1: config 0 descriptor?? [ 698.255667][T14264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 698.267617][T14264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 698.317306][ T5916] hid_parser_main: 4 callbacks suppressed [ 698.317331][ T5916] aquacomputer_d5next 0003:0C70:F0B6.0019: unknown main item tag 0x0 [ 698.338368][ T5916] aquacomputer_d5next 0003:0C70:F0B6.0019: unknown main item tag 0x0 [ 698.349269][ T5916] aquacomputer_d5next 0003:0C70:F0B6.0019: unknown main item tag 0x0 [ 698.357987][ T5916] aquacomputer_d5next 0003:0C70:F0B6.0019: unknown main item tag 0x0 [ 698.370913][ T5916] aquacomputer_d5next 0003:0C70:F0B6.0019: unknown main item tag 0x0 [ 698.390176][ T5916] aquacomputer_d5next 0003:0C70:F0B6.0019: hidraw0: USB HID v0.05 Device [HID 0c70:f0b6] on usb-dummy_hcd.2-1/input0 [ 698.393144][T14279] batadv0: entered promiscuous mode [ 698.428074][T14279] dummy0: entered promiscuous mode [ 698.435211][T14279] hsr1: Slave A (batadv0) is not up; please bring it up to get a fully working HSR network [ 698.447951][T14279] hsr1: Slave B (dummy0) is not up; please bring it up to get a fully working HSR network [ 698.465322][T14279] hsr1: entered promiscuous mode [ 698.480874][T14279] hsr1: entered allmulticast mode [ 698.486110][T14279] batadv0: entered allmulticast mode [ 698.494125][T14279] dummy0: entered allmulticast mode [ 698.703693][T14288] 0: reclassify loop, rule prio 0, protocol 800 [ 698.866722][ T24] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 699.050381][ T24] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 699.061976][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.070911][ T24] usb 5-1: Product: syz [ 699.075197][ T24] usb 5-1: Manufacturer: syz [ 699.080266][ T24] usb 5-1: SerialNumber: syz [ 699.472722][ T24] rtl8150 5-1:1.0: couldn't reset the device [ 699.493398][ T24] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 699.532183][ T24] usb 5-1: USB disconnect, device number 107 [ 699.749744][T14302] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2382'. [ 699.969547][T14305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 699.986962][T14305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 700.088409][ T5916] usb 3-1: USB disconnect, device number 99 [ 700.241968][T14305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 700.259629][T14305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 700.516541][ T24] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 700.678733][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 700.690325][ T24] usb 4-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 700.699555][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.710915][ T24] usb 4-1: config 0 descriptor?? [ 700.935451][T14310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 701.021262][T14310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 701.306468][ T24] pantherlord 0003:0810:0001.001A: hidraw0: USB HID v0.00 Device [HID 0810:0001] on usb-dummy_hcd.3-1/input0 [ 701.336489][ T24] pantherlord 0003:0810:0001.001A: no output reports found [ 701.447060][ T5916] usb 5-1: new full-speed USB device number 108 using dummy_hcd [ 701.574707][ T24] usb 4-1: USB disconnect, device number 95 [ 701.680678][T14339] fuse: Unknown parameter 'euid<00000000000000000000' [ 701.810458][ T5916] usb 5-1: unable to get BOS descriptor or descriptor too short [ 701.845639][ T5916] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 701.864485][ T5916] usb 5-1: can't read configurations, error -71 [ 702.345719][T14359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 702.359687][T14358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2399'. [ 702.360243][T14359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 702.385836][T14358] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2399'. [ 702.392028][T14359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 702.419868][T14359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 703.527200][ T5916] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 703.695168][ T5916] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 703.711319][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.725159][ T5916] usb 5-1: config 0 descriptor?? [ 703.745281][ T5916] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 703.768837][T14368] netlink: 208240 bytes leftover after parsing attributes in process `syz.3.2403'. [ 704.166696][ T5846] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 704.246517][ T24] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 704.306558][ T5846] usb 3-1: device descriptor read/64, error -71 [ 704.396477][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 704.405310][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 704.417852][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 704.431547][ T24] usb 4-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 704.441290][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.450830][ T24] usb 4-1: Product: syz [ 704.455261][ T24] usb 4-1: Manufacturer: syz [ 704.460018][ T24] usb 4-1: SerialNumber: syz [ 704.468007][ T24] usb 4-1: config 0 descriptor?? [ 704.546540][ T5846] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 704.677380][ T5846] usb 3-1: device descriptor read/64, error -71 [ 704.797175][ T5846] usb usb3-port1: attempt power cycle [ 704.900504][T14387] FAULT_INJECTION: forcing a failure. [ 704.900504][T14387] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 704.913913][T14387] CPU: 1 UID: 0 PID: 14387 Comm: syz.1.2408 Tainted: G L syzkaller #0 PREEMPT(full) [ 704.913946][T14387] Tainted: [L]=SOFTLOCKUP [ 704.913954][T14387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 704.913968][T14387] Call Trace: [ 704.913976][T14387] [ 704.913985][T14387] dump_stack_lvl+0xe8/0x150 [ 704.914020][T14387] should_fail_ex+0x412/0x560 [ 704.914051][T14387] _copy_to_user+0x31/0xb0 [ 704.914084][T14387] simple_read_from_buffer+0xe1/0x170 [ 704.914110][T14387] proc_fail_nth_read+0x1bb/0x230 [ 704.914143][T14387] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 704.914175][T14387] ? rw_verify_area+0x2a6/0x4d0 [ 704.914204][T14387] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 704.914235][T14387] vfs_read+0x20c/0xa70 [ 704.914261][T14387] ? fdget_pos+0x246/0x320 [ 704.914287][T14387] ? __pfx___mutex_lock+0x10/0x10 [ 704.914309][T14387] ? __pfx_vfs_read+0x10/0x10 [ 704.914339][T14387] ? __fget_files+0x2a/0x420 [ 704.914365][T14387] ? __fget_files+0x3a0/0x420 [ 704.914387][T14387] ? __fget_files+0x2a/0x420 [ 704.914415][T14387] ksys_read+0x150/0x270 [ 704.914446][T14387] ? __pfx_ksys_read+0x10/0x10 [ 704.914479][T14387] ? asm_int80_emulation+0x1a/0x20 [ 704.914502][T14387] ? asm_int80_emulation+0x1a/0x20 [ 704.914522][T14387] do_int80_emulation+0x111/0x400 [ 704.914545][T14387] ? clear_bhb_loop+0x60/0xb0 [ 704.914563][T14387] ? clear_bhb_loop+0x60/0xb0 [ 704.914586][T14387] asm_int80_emulation+0x1a/0x20 [ 704.914604][T14387] RIP: 0023:0xf712572b [ 704.914622][T14387] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 704.914639][T14387] RSP: 002b:00000000f53e64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 704.914672][T14387] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f53e65d0 [ 704.914686][T14387] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 704.914698][T14387] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 704.914710][T14387] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 704.914723][T14387] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 704.914752][T14387] [ 705.141467][ T5916] gspca_cpia1: usb_control_msg 03, error -110 [ 705.148504][ T5916] gspca_cpia1: usb_control_msg 01, error -32 [ 705.154996][ T5916] gspca_cpia1: usb_control_msg 01, error -32 [ 705.161704][ T5916] gspca_cpia1: usb_control_msg 01, error -32 [ 705.168212][ T5916] gspca_cpia1: usb_control_msg 01, error -32 [ 705.174483][ T5916] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 705.200769][ T5846] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 705.257563][ T5846] usb 3-1: device descriptor read/8, error -71 [ 705.480265][T14398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 705.496952][ T5846] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 705.502521][T14398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 705.538502][ T5846] usb 3-1: device descriptor read/8, error -71 [ 705.658214][ T5846] usb usb3-port1: unable to enumerate USB device [ 706.350355][ T5846] usb 5-1: USB disconnect, device number 110 [ 706.627355][T14413] openvswitch: netlink: IP tunnel dst address not specified [ 707.210850][T14422] sctp: [Deprecated]: syz.0.2418 (pid 14422) Use of int in max_burst socket option. [ 707.210850][T14422] Use struct sctp_assoc_value instead [ 707.380652][ T43] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 707.538652][ T43] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 707.554726][ T43] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 707.567448][T14428] netlink: 'syz.1.2421': attribute type 10 has an invalid length. [ 707.575867][ T43] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 707.589897][T14428] bond0: (slave wlan1): Opening slave failed [ 707.600666][ T43] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice=20.41 [ 707.610497][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 707.629238][T14430] fuse: Unknown parameter 'rootmodc' [ 707.637957][ T43] usb 5-1: Product: syz [ 707.646597][ T43] usb 5-1: Manufacturer: syz [ 707.651314][ T43] usb 5-1: SerialNumber: syz [ 707.757881][ T24] powermate 4-1:0.0: probe with driver powermate failed with error -5 [ 707.779799][ T24] usb 4-1: USB disconnect, device number 96 [ 707.838162][T14435] fuse: Unknown parameter '' [ 707.884568][ T43] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 111 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 707.907273][ T43] usb 5-1: USB disconnect, device number 111 [ 707.924098][ T43] usblp0: removed [ 708.266541][ T24] usb 4-1: new full-speed USB device number 97 using dummy_hcd [ 708.418525][ T24] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 708.429794][ T24] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 708.442513][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 708.450227][ T24] usb 4-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 708.460500][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.471432][ T24] usb 4-1: config 0 descriptor?? [ 708.852690][T14453] netlink: 63 bytes leftover after parsing attributes in process `syz.2.2426'. [ 708.893344][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 708.901401][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 708.909155][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 708.916566][ T24] usbhid 4-1:0.0: can't add hid device: -32 [ 708.922598][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 708.974589][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 708.974608][ T30] audit: type=1800 audit(1769687934.119:403): pid=14455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2429" name="file1" dev="tmpfs" ino=2761 res=0 errno=0 [ 709.030844][ T24] usb 4-1: USB disconnect, device number 97 [ 709.892707][T14469] tipc: Cannot configure node identity twice [ 709.910684][T14472] FAULT_INJECTION: forcing a failure. [ 709.910684][T14472] name failslab, interval 1, probability 0, space 0, times 0 [ 709.924413][T14472] CPU: 0 UID: 0 PID: 14472 Comm: syz.4.2434 Tainted: G L syzkaller #0 PREEMPT(full) [ 709.924445][T14472] Tainted: [L]=SOFTLOCKUP [ 709.924454][T14472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 709.924467][T14472] Call Trace: [ 709.924476][T14472] [ 709.924485][T14472] dump_stack_lvl+0xe8/0x150 [ 709.924517][T14472] should_fail_ex+0x412/0x560 [ 709.924557][T14472] should_failslab+0xa8/0x100 [ 709.924583][T14472] __kmalloc_noprof+0xde/0x7e0 [ 709.924603][T14472] ? mpi_powm+0x1393/0x2410 [ 709.924629][T14472] ? mpi_resize+0x176/0x220 [ 709.924660][T14472] mpi_powm+0x1393/0x2410 [ 709.924707][T14472] ? __pfx_mpi_powm+0x10/0x10 [ 709.924736][T14472] ? __kmalloc_cache_noprof+0x3d1/0x6e0 [ 709.924762][T14472] ? __asan_memset+0x22/0x50 [ 709.924795][T14472] dh_compute_value+0x1d5/0x390 [ 709.924830][T14472] ? __pfx_dh_compute_value+0x10/0x10 [ 709.924857][T14472] ? trace_kmalloc+0x1f/0xb0 [ 709.924873][T14472] ? __kmalloc_noprof+0x42d/0x7e0 [ 709.924890][T14472] ? __phys_addr+0xd3/0x180 [ 709.924915][T14472] ? __keyctl_dh_compute+0x6b4/0xd10 [ 709.924949][T14472] __keyctl_dh_compute+0x81b/0xd10 [ 709.924989][T14472] ? __pfx___keyctl_dh_compute+0x10/0x10 [ 709.925031][T14472] ? __might_fault+0xaf/0x130 [ 709.925075][T14472] ? compat_keyctl_dh_compute+0x186/0x220 [ 709.925108][T14472] compat_keyctl_dh_compute+0x19d/0x220 [ 709.925139][T14472] ? __pfx_compat_keyctl_dh_compute+0x10/0x10 [ 709.925174][T14472] ? fput+0xa0/0xd0 [ 709.925204][T14472] ? __pfx_ksys_write+0x10/0x10 [ 709.925236][T14472] ? __ia32_compat_sys_keyctl+0x3f6/0x630 [ 709.925267][T14472] __do_fast_syscall_32+0x1d2/0x540 [ 709.925290][T14472] ? lockdep_hardirqs_on+0x7a/0x110 [ 709.925309][T14472] ? do_fast_syscall_32+0x33/0x70 [ 709.925331][T14472] ? asm_int80_emulation+0x1a/0x20 [ 709.925350][T14472] ? do_int80_emulation+0x20e/0x400 [ 709.925377][T14472] do_fast_syscall_32+0x33/0x70 [ 709.925399][T14472] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 709.925423][T14472] RIP: 0023:0xf73fd539 [ 709.925442][T14472] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 709.925459][T14472] RSP: 002b:00000000f542650c EFLAGS: 00000206 ORIG_RAX: 0000000000000120 [ 709.925481][T14472] RAX: ffffffffffffffda RBX: 0000000000000017 RCX: 0000000080000100 [ 709.925496][T14472] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000080000000 [ 709.925509][T14472] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 709.925521][T14472] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 709.925534][T14472] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 709.925571][T14472] [ 710.155798][T14476] xt_l2tp: missing protocol rule (udp|l2tpip) [ 710.338749][T14482] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2436'. [ 710.401930][T14483] libceph: resolve '0..' (ret=-3): failed [ 710.630666][T14497] blktrace: Concurrent blktraces are not allowed on nullb0 [ 711.630237][ T30] audit: type=1804 audit(1769687936.779:404): pid=14508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2444" name="/newroot/210/file1" dev="fuse" ino=1 res=1 errno=0 [ 712.016935][ T5916] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 712.144179][T14521] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2448'. [ 712.176498][ T5916] usb 5-1: Using ep0 maxpacket: 32 [ 712.191381][ T5916] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 712.206561][ T5916] usb 5-1: config 0 has no interface number 0 [ 712.220511][ T5916] usb 5-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 712.262316][ T5916] usb 5-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 33573, setting to 1024 [ 712.287911][T14526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 712.298224][ T5916] usb 5-1: config 0 interface 2 has no altsetting 0 [ 712.322337][T14526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 712.333236][T14528] fuse: Bad value for 'user_id' [ 712.340128][ T5916] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 712.350165][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.350793][T14528] fuse: Bad value for 'user_id' [ 712.361589][ T5916] usb 5-1: Product: syz [ 712.384608][ T5916] usb 5-1: Manufacturer: syz [ 712.391152][ T5916] usb 5-1: SerialNumber: syz [ 712.408712][ T5916] usb 5-1: config 0 descriptor?? [ 712.571983][T14526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 712.581560][T14526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 712.619383][ T5916] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 712.681843][ T5916] usb 5-1: USB disconnect, device number 112 [ 712.751005][T12166] udevd[12166]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 713.158868][T14547] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2454'. [ 713.236582][ T24] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 713.459747][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 713.547615][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 713.568953][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 713.635010][ T24] usb 3-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 713.657638][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.682289][ T24] usb 3-1: Product: syz [ 713.710915][ T24] usb 3-1: Manufacturer: syz [ 713.719030][T14554] openvswitch: netlink: IP tunnel dst address not specified [ 713.734383][ T24] usb 3-1: SerialNumber: syz [ 713.762803][ T24] usb 3-1: config 0 descriptor?? [ 714.016580][ T5889] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 714.195592][ T5889] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 714.220673][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.241077][ T5889] usb 5-1: Product: syz [ 714.254072][ T5889] usb 5-1: Manufacturer: syz [ 714.265573][ T5889] usb 5-1: SerialNumber: syz [ 714.514292][T14554] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2458'. [ 714.534949][T14559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2460'. [ 714.565147][T14559] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2460'. [ 714.756239][ T5889] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 714.757440][T14559] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 714.815791][ T5889] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 714.836041][ T5889] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 714.859842][ T5889] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 714.875381][ T5889] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 714.893129][ T5889] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 714.916948][ T5889] usb 5-1: USB disconnect, device number 113 [ 715.255089][T14572] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2463'. [ 715.596218][T14578] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2466'. [ 715.643039][T14581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 715.684958][T14581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 715.907377][ T5916] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 715.924522][T14586] FAULT_INJECTION: forcing a failure. [ 715.924522][T14586] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 715.946825][T14586] CPU: 1 UID: 0 PID: 14586 Comm: syz.0.2469 Tainted: G L syzkaller #0 PREEMPT(full) [ 715.946864][T14586] Tainted: [L]=SOFTLOCKUP [ 715.946872][T14586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 715.946886][T14586] Call Trace: [ 715.946895][T14586] [ 715.946904][T14586] dump_stack_lvl+0xe8/0x150 [ 715.946938][T14586] should_fail_ex+0x412/0x560 [ 715.946969][T14586] _copy_to_user+0x31/0xb0 [ 715.947003][T14586] simple_read_from_buffer+0xe1/0x170 [ 715.947031][T14586] proc_fail_nth_read+0x1bb/0x230 [ 715.947065][T14586] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 715.947097][T14586] ? rw_verify_area+0x2a6/0x4d0 [ 715.947133][T14586] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 715.947163][T14586] vfs_read+0x20c/0xa70 [ 715.947191][T14586] ? fdget_pos+0x246/0x320 [ 715.947218][T14586] ? __pfx___mutex_lock+0x10/0x10 [ 715.947242][T14586] ? __pfx_vfs_read+0x10/0x10 [ 715.947270][T14586] ? __fget_files+0x2a/0x420 [ 715.947296][T14586] ? __fget_files+0x3a0/0x420 [ 715.947317][T14586] ? __fget_files+0x2a/0x420 [ 715.947349][T14586] ksys_read+0x150/0x270 [ 715.947385][T14586] ? __pfx_ksys_read+0x10/0x10 [ 715.947419][T14586] ? asm_int80_emulation+0x1a/0x20 [ 715.947442][T14586] ? asm_int80_emulation+0x1a/0x20 [ 715.947462][T14586] do_int80_emulation+0x111/0x400 [ 715.947486][T14586] ? clear_bhb_loop+0x60/0xb0 [ 715.947506][T14586] ? clear_bhb_loop+0x60/0xb0 [ 715.947530][T14586] asm_int80_emulation+0x1a/0x20 [ 715.947550][T14586] RIP: 0023:0xf71c572b [ 715.947569][T14586] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 715.947587][T14586] RSP: 002b:00000000f54864bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 715.947610][T14586] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54865d0 [ 715.947625][T14586] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 715.947637][T14586] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 715.947650][T14586] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 715.947663][T14586] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 715.947695][T14586] [ 715.948349][T14581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 716.204965][T14581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 716.276652][ T5916] usb 5-1: Using ep0 maxpacket: 16 [ 716.285231][ T5916] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 716.298554][ T5916] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 716.328844][ T5916] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 716.352281][ T5916] usb 5-1: config 0 interface 0 has no altsetting 0 [ 716.359335][ T5916] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 716.368848][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.409406][ T5916] usb 5-1: config 0 descriptor?? [ 716.614889][ T24] powermate 3-1:0.0: probe with driver powermate failed with error -5 [ 716.648251][ T24] usb 3-1: USB disconnect, device number 104 [ 716.802227][ T30] audit: type=1326 audit(1769687941.949:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14594 comm="syz.1.2473" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd539 code=0x7ffc0000 [ 716.825596][ T30] audit: type=1326 audit(1769687941.949:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14594 comm="syz.1.2473" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd539 code=0x7ffc0000 [ 716.852660][ T30] audit: type=1326 audit(1769687941.979:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14594 comm="syz.1.2473" exe="/root/syz-executor" sig=0 arch=40000003 syscall=277 compat=1 ip=0xf73bd539 code=0x7ffc0000 [ 716.877512][ T30] audit: type=1326 audit(1769687941.979:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14594 comm="syz.1.2473" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd539 code=0x7ffc0000 [ 716.908828][ T5889] usb 5-1: USB disconnect, device number 114 [ 716.927905][ T30] audit: type=1326 audit(1769687941.979:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14594 comm="syz.1.2473" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd539 code=0x7ffc0000 [ 716.958528][T14595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 716.960922][ T30] audit: type=1326 audit(1769687941.999:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14594 comm="syz.1.2473" exe="/root/syz-executor" sig=0 arch=40000003 syscall=279 compat=1 ip=0xf73bd539 code=0x7ffc0000 [ 716.989391][T14595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 716.999334][ T30] audit: type=1326 audit(1769687941.999:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14594 comm="syz.1.2473" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd539 code=0x7ffc0000 [ 717.030338][ T30] audit: type=1326 audit(1769687941.999:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14594 comm="syz.1.2473" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd539 code=0x7ffc0000 [ 717.058697][ T30] audit: type=1326 audit(1769687942.029:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14594 comm="syz.1.2473" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf73bd539 code=0x7ffc0000 [ 717.089818][ T30] audit: type=1326 audit(1769687942.029:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14594 comm="syz.1.2473" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd539 code=0x7ffc0000 [ 717.206526][ T24] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 717.356693][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 717.363777][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 717.375914][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 717.386139][ T24] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 717.395360][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.407839][ T24] usb 3-1: config 0 descriptor?? [ 717.473571][T14609] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2476'. [ 717.496492][T14609] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2476'. [ 717.959144][ T24] greenasia 0003:0E8F:0012.001C: item fetching failed at offset 0/3 [ 717.967987][ T24] greenasia 0003:0E8F:0012.001C: parse failed [ 717.976577][ T24] greenasia 0003:0E8F:0012.001C: probe with driver greenasia failed with error -22 [ 718.198026][T14621] FAULT_INJECTION: forcing a failure. [ 718.198026][T14621] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 718.212522][ T5916] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 718.233696][T14621] CPU: 0 UID: 0 PID: 14621 Comm: syz.1.2481 Tainted: G L syzkaller #0 PREEMPT(full) [ 718.233731][T14621] Tainted: [L]=SOFTLOCKUP [ 718.233740][T14621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 718.233754][T14621] Call Trace: [ 718.233764][T14621] [ 718.233774][T14621] dump_stack_lvl+0xe8/0x150 [ 718.233818][T14621] should_fail_ex+0x412/0x560 [ 718.233851][T14621] prepare_alloc_pages+0x22a/0x650 [ 718.233885][T14621] __alloc_frozen_pages_noprof+0x12f/0x380 [ 718.233922][T14621] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 718.233950][T14621] ? __pfx_policy_nodemask+0x10/0x10 [ 718.233974][T14621] ? __lock_acquire+0x6b5/0x2cf0 [ 718.234012][T14621] alloc_pages_mpol+0x232/0x4a0 [ 718.234042][T14621] vma_alloc_folio_noprof+0xea/0x210 [ 718.234071][T14621] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 718.234097][T14621] ? ___pte_offset_map+0x29/0x240 [ 718.234129][T14621] ? ___pte_offset_map+0x29/0x240 [ 718.234163][T14621] do_pte_missing+0x15a4/0x37a0 [ 718.234198][T14621] ? handle_mm_fault+0xee/0x32a0 [ 718.234234][T14621] handle_mm_fault+0x1b8c/0x32a0 [ 718.234280][T14621] ? handle_mm_fault+0xee/0x32a0 [ 718.234319][T14621] ? __pfx_handle_mm_fault+0x10/0x10 [ 718.234363][T14621] ? __pfx___up_read+0x10/0x10 [ 718.234391][T14621] ? lock_mm_and_find_vma+0xa7/0x340 [ 718.234416][T14621] do_user_addr_fault+0x75b/0x1360 [ 718.234467][T14621] exc_page_fault+0x6a/0xc0 [ 718.234491][T14621] asm_exc_page_fault+0x26/0x30 [ 718.234512][T14621] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 718.234541][T14621] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 3f 45 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 718.234559][T14621] RSP: 0018:ffffc9000e2ff878 EFLAGS: 00050202 [ 718.234579][T14621] RAX: ffffffff849e4601 RBX: ffff88807b7f2000 RCX: 000000000000026b [ 718.234595][T14621] RDX: 0000000000000000 RSI: ffff88807b7f2d80 RDI: 0000000080002000 [ 718.234611][T14621] RBP: ffffc9000e2ff9f0 R08: ffff88807b7f2fea R09: 1ffff1100f6fe5fd [ 718.234627][T14621] R10: dffffc0000000000 R11: ffffed100f6fe5fe R12: dffffc0000000000 [ 718.234643][T14621] R13: 0000000000000000 R14: 00007ffffffff000 R15: 0000000000000feb [ 718.234667][T14621] ? _copy_to_iter+0x3c1/0x17d0 [ 718.234703][T14621] _copy_to_iter+0x493/0x17d0 [ 718.234749][T14621] ? __pfx__copy_to_iter+0x10/0x10 [ 718.234794][T14621] seq_read_iter+0xbf5/0xe10 [ 718.234846][T14621] seq_read+0x367/0x480 [ 718.234886][T14621] ? __pfx_seq_read+0x10/0x10 [ 718.234923][T14621] ? __pfx___mutex_trylock_common+0x10/0x10 [ 718.234953][T14621] ? apparmor_file_permission+0x17f/0x1f0 [ 718.234982][T14621] ? __pfx_seq_read+0x10/0x10 [ 718.235008][T14621] proc_reg_read+0x1e9/0x2e0 [ 718.235029][T14621] ? __pfx_proc_reg_read+0x10/0x10 [ 718.235051][T14621] vfs_read+0x20c/0xa70 [ 718.235079][T14621] ? fdget_pos+0x246/0x320 [ 718.235108][T14621] ? __pfx___mutex_lock+0x10/0x10 [ 718.235131][T14621] ? __pfx_vfs_read+0x10/0x10 [ 718.235163][T14621] ? __fget_files+0x2a/0x420 [ 718.235191][T14621] ? __fget_files+0x3a0/0x420 [ 718.235212][T14621] ? __fget_files+0x2a/0x420 [ 718.235246][T14621] ksys_read+0x150/0x270 [ 718.235277][T14621] ? __pfx_ksys_read+0x10/0x10 [ 718.235306][T14621] ? __pfx_ksys_write+0x10/0x10 [ 718.235346][T14621] __do_fast_syscall_32+0x1d2/0x540 [ 718.235369][T14621] ? lockdep_hardirqs_on+0x7a/0x110 [ 718.235388][T14621] ? do_fast_syscall_32+0x33/0x70 [ 718.235411][T14621] ? asm_int80_emulation+0x1a/0x20 [ 718.235430][T14621] ? do_int80_emulation+0x20e/0x400 [ 718.235457][T14621] do_fast_syscall_32+0x33/0x70 [ 718.235493][T14621] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 718.235516][T14621] RIP: 0023:0xf73bd539 [ 718.235534][T14621] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 718.235550][T14621] RSP: 002b:00000000f53e650c EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 718.235570][T14621] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001280 [ 718.235584][T14621] RDX: 0000000000002020 RSI: 0000000000000000 RDI: 0000000000000000 [ 718.235596][T14621] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 718.235608][T14621] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 718.235620][T14621] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 718.235650][T14621] [ 718.816498][ T5916] usb 5-1: Using ep0 maxpacket: 16 [ 718.824044][ T5916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 718.834917][ T5916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 718.847980][ T5916] usb 5-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 718.857187][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.865178][ T5916] usb 5-1: Product: syz [ 718.869387][ T5916] usb 5-1: Manufacturer: syz [ 718.874032][ T5916] usb 5-1: SerialNumber: syz [ 718.881426][ T5916] usb 5-1: config 0 descriptor?? [ 718.916537][ T24] usb 3-1: USB disconnect, device number 105 [ 718.928324][T14630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 718.982176][T14630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 719.094942][T14628] bridge_slave_0: left allmulticast mode [ 719.204670][T14628] bridge_slave_0: left promiscuous mode [ 719.256039][T14630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 719.287042][T14630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 719.299974][T14628] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.413117][T14628] bridge_slave_1: left allmulticast mode [ 719.455172][T14628] bridge_slave_1: left promiscuous mode [ 719.465572][T14628] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.509549][T14628] : (slave bond_slave_0): Releasing backup interface [ 719.553903][T14628] : (slave bond_slave_1): Releasing backup interface [ 719.700989][T14628] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 719.727068][T14628] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 719.741548][T14628] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 719.760335][T14628] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 719.788234][T14628] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 720.066833][ T5889] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 720.457311][ T5889] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 720.483147][ T5889] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 720.520468][ T5889] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 720.560957][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.598073][ T5889] usb 3-1: config 0 descriptor?? [ 720.641930][ T5889] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 721.066097][T14645] netlink: 'syz.1.2489': attribute type 10 has an invalid length. [ 721.074581][T14645] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2489'. [ 721.086909][T14645] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 721.118059][ T5916] powermate 5-1:0.0: probe with driver powermate failed with error -5 [ 721.145802][ T5916] usb 5-1: USB disconnect, device number 115 [ 721.233528][T14649] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2488'. [ 721.244821][T14649] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2488'. [ 721.806524][ T5889] usb 4-1: new full-speed USB device number 98 using dummy_hcd [ 721.971903][ T5889] usb 4-1: config 0 has an invalid interface number: 90 but max is 0 [ 721.986973][ T5889] usb 4-1: config 0 has no interface number 0 [ 722.018409][ T5889] usb 4-1: config 0 interface 90 altsetting 0 endpoint 0x85 has invalid maxpacket 512, setting to 64 [ 722.054829][ T5889] usb 4-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=3a.fa [ 722.066517][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.074928][ T5889] usb 4-1: Product: syz [ 722.083306][ T5889] usb 4-1: Manufacturer: syz [ 722.090391][ T5889] usb 4-1: SerialNumber: syz [ 722.142837][ T5889] usb 4-1: config 0 descriptor?? [ 722.157487][T14661] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 722.414046][ T5889] powermate: Expected payload of 3--6 bytes, found 64 bytes! [ 722.441440][ T5889] input: Griffin PowerMate as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.90/input/input33 [ 722.465794][ C1] powermate: config urb returned -71 [ 722.471612][ C1] powermate: config urb returned -71 [ 722.477111][ C1] powermate: config urb returned -71 [ 722.482513][ C1] powermate: config urb returned -71 [ 722.547726][ T5889] usb 4-1: USB disconnect, device number 98 [ 722.553791][ C1] powermate 4-1:0.90: powermate_irq - usb_submit_urb failed with result: -19 [ 722.788967][T14677] netlink: 146816 bytes leftover after parsing attributes in process `syz.4.2499'. [ 722.806974][T14677] openvswitch: netlink: Key type 16129 is out of range max 32 [ 723.209151][T14688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 723.228938][T14690] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2502'. [ 723.247264][T14690] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2502'. [ 723.283567][T14688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 723.453935][ T5916] usb 3-1: USB disconnect, device number 106 [ 724.163571][T14707] FAULT_INJECTION: forcing a failure. [ 724.163571][T14707] name failslab, interval 1, probability 0, space 0, times 0 [ 724.197379][T14707] CPU: 0 UID: 0 PID: 14707 Comm: syz.4.2509 Tainted: G L syzkaller #0 PREEMPT(full) [ 724.197411][T14707] Tainted: [L]=SOFTLOCKUP [ 724.197419][T14707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 724.197431][T14707] Call Trace: [ 724.197439][T14707] [ 724.197449][T14707] dump_stack_lvl+0xe8/0x150 [ 724.197488][T14707] should_fail_ex+0x412/0x560 [ 724.197519][T14707] should_failslab+0xa8/0x100 [ 724.197563][T14707] __kmalloc_noprof+0xde/0x7e0 [ 724.197583][T14707] ? kfree+0x4d/0x650 [ 724.197610][T14707] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 724.197645][T14707] tomoyo_realpath_from_path+0xe3/0x5d0 [ 724.197676][T14707] ? tomoyo_domain+0xd7/0x130 [ 724.197709][T14707] ? tomoyo_path_number_perm+0x219/0x630 [ 724.197732][T14707] tomoyo_path_number_perm+0x246/0x630 [ 724.197764][T14707] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 724.197781][T14707] ? __lock_acquire+0x6b5/0x2cf0 [ 724.197830][T14707] ? __fget_files+0x2a/0x420 [ 724.197851][T14707] ? __fget_files+0x3a0/0x420 [ 724.197884][T14707] ? __fget_files+0x2a/0x420 [ 724.197912][T14707] security_file_ioctl_compat+0xc3/0x2a0 [ 724.197937][T14707] __ia32_compat_sys_ioctl+0x139/0x950 [ 724.197972][T14707] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 724.198006][T14707] ? __fget_files+0x3a0/0x420 [ 724.198038][T14707] ? fput+0xa0/0xd0 [ 724.198056][T14707] ? ksys_write+0x242/0x270 [ 724.198080][T14707] ? __pfx_ksys_write+0x10/0x10 [ 724.198107][T14707] __do_fast_syscall_32+0x1d2/0x540 [ 724.198125][T14707] ? lockdep_hardirqs_on+0x7a/0x110 [ 724.198140][T14707] ? do_fast_syscall_32+0x33/0x70 [ 724.198156][T14707] ? asm_int80_emulation+0x1a/0x20 [ 724.198170][T14707] ? do_int80_emulation+0x20e/0x400 [ 724.198190][T14707] do_fast_syscall_32+0x33/0x70 [ 724.198207][T14707] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 724.198227][T14707] RIP: 0023:0xf73fd539 [ 724.198241][T14707] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 724.198253][T14707] RSP: 002b:00000000f542650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 724.198269][T14707] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000089f0 [ 724.198279][T14707] RDX: 0000000080001440 RSI: 0000000000000000 RDI: 0000000000000000 [ 724.198289][T14707] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 724.198297][T14707] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 724.198306][T14707] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 724.198327][T14707] [ 724.198335][T14707] ERROR: Out of memory at tomoyo_realpath_from_path. [ 725.439895][T14728] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2514'. [ 725.465992][T14728] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2514'. [ 725.587240][T14728] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3612718034 (7225436068 ns) > initial count (2011245246 ns). Using initial count to start timer. [ 725.653880][T14728] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3612718034 (7225436068 ns) > initial count (2011245246 ns). Using initial count to start timer. [ 725.695912][T14734] xt_CT: You must specify a L4 protocol and not use inversions on it [ 727.217169][ T5916] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 727.368286][ T5916] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 727.377128][ T5916] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 12336, setting to 64 [ 727.402430][ T5916] usb 3-1: config 0 interface 0 has no altsetting 0 [ 727.418902][ T5916] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 727.428546][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 727.438684][ T5916] usb 3-1: Product: syz [ 727.442918][ T5916] usb 3-1: Manufacturer: syz [ 727.466323][ T5916] usb 3-1: SerialNumber: syz [ 727.488332][ T5916] usb 3-1: config 0 descriptor?? [ 727.510376][ T5916] hub 3-1:0.0: bad descriptor, ignoring hub [ 727.516595][ T5916] hub 3-1:0.0: probe with driver hub failed with error -5 [ 727.616722][T14774] netlink: 'syz.4.2530': attribute type 1 has an invalid length. [ 727.632950][ T5916] usb 3-1: selecting invalid altsetting 0 [ 728.020015][T14781] openvswitch: netlink: Message has 8 unknown bytes. [ 728.095995][T14781] input: syz0 as /devices/virtual/input/input34 [ 728.142543][T14786] vivid-007: disconnect [ 728.470103][T14756] usb 3-1: reset high-speed USB device number 107 using dummy_hcd [ 728.618806][T14797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 728.636904][T14797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 728.693171][T14797] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2540'. [ 728.702813][T14797] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2540'. [ 728.713125][T14797] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2540'. [ 728.915066][T14784] vivid-007: reconnect [ 729.036547][ T5916] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 729.210298][ T5916] usb 4-1: Using ep0 maxpacket: 16 [ 729.318573][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 729.338478][ T24] usb 3-1: USB disconnect, device number 107 [ 729.361507][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 729.483998][T14803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 729.499838][T14803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 729.518855][ T5916] usb 4-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 729.548483][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.568813][ T5916] usb 4-1: Product: syz [ 729.576606][ T5916] usb 4-1: Manufacturer: syz [ 729.586756][ T5916] usb 4-1: SerialNumber: syz [ 729.599610][ T5916] usb 4-1: config 0 descriptor?? [ 729.623231][T14805] binder: 14804:14805 ioctl 8010661b 80000280 returned -22 [ 729.632988][T14805] binder: 14804:14805 ioctl c0d05605 80000540 returned -22 [ 730.548090][T14825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 730.567288][T14825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 730.888876][T14838] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2552'. [ 731.444275][T14844] binder: 14842:14844 ioctl 8010661b 80000280 returned -22 [ 731.536791][T14849] binder: 14842:14849 ioctl c0d05605 80000540 returned -22 [ 732.086521][ T24] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 732.287539][ T24] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 732.313501][ T24] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 12336, setting to 64 [ 732.351442][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 732.392047][ T24] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 732.416966][ T24] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 732.450382][ T24] usb 3-1: Product: syz [ 732.454619][ T24] usb 3-1: Manufacturer: syz [ 732.479742][ T24] usb 3-1: SerialNumber: syz [ 732.515308][ T24] usb 3-1: config 0 descriptor?? [ 732.538044][ T24] hub 3-1:0.0: bad descriptor, ignoring hub [ 732.544028][ T24] hub 3-1:0.0: probe with driver hub failed with error -5 [ 732.588868][ T24] usb 3-1: selecting invalid altsetting 0 [ 732.741287][T14862] netlink: 'syz.1.2560': attribute type 23 has an invalid length. [ 733.196889][T12229] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 733.330362][ T5916] powermate 4-1:0.0: probe with driver powermate failed with error -5 [ 733.361403][T14865] usb 3-1: reset high-speed USB device number 108 using dummy_hcd [ 733.388733][T12229] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 733.411088][ T5916] usb 4-1: USB disconnect, device number 99 [ 733.420569][T12229] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.443062][T12229] usb 5-1: config 0 descriptor?? [ 733.489617][T12229] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 733.609376][T14874] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2563'. [ 733.866322][T12229] cpia1 5-1:0.0: unexpected state after lo power cmd: 00 [ 733.986535][ T5846] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 734.067163][T12229] gspca_cpia1: usb_control_msg 01, error -32 [ 734.069896][T14866] veth0_to_team: entered allmulticast mode [ 734.112307][T12229] gspca_cpia1: usb_control_msg 01, error -71 [ 734.124479][T12229] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 734.142424][ T5846] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 734.155025][ T5846] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 124, setting to 64 [ 734.155862][T12229] usb 5-1: USB disconnect, device number 116 [ 734.174194][ T5846] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 734.185050][ T24] usb 3-1: USB disconnect, device number 108 [ 734.192724][ T5846] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.223814][ T5846] usb 4-1: config 0 descriptor?? [ 734.441285][ T5846] ath6kl: Failed to submit usb control message: -71 [ 734.452781][ T5846] ath6kl: unable to send the bmi data to the device: -71 [ 734.464565][ T5846] ath6kl: Unable to send get target info: -71 [ 734.482286][ T5846] ath6kl: Failed to init ath6kl core: -71 [ 734.501831][ T5846] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 734.521208][ T5846] usb 4-1: USB disconnect, device number 100 [ 734.660996][T14888] binder: 14887:14888 ioctl 8010661b 80000280 returned -22 [ 734.671961][T14888] binder: 14887:14888 ioctl c0d05605 80000540 returned -22 [ 735.056661][T14899] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2571'. [ 735.198032][T14900] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2578'. [ 735.837759][T14918] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2575'. [ 736.223785][T14928] tipc: Enabled bearer , priority 0 [ 736.233158][T14928] syzkaller0: entered promiscuous mode [ 736.239590][T14928] syzkaller0: entered allmulticast mode [ 736.267401][ T5846] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 736.430140][T14936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 736.457858][ T5846] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 736.472354][T14936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 736.480655][ T5846] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 12336, setting to 64 [ 736.532730][ T5846] usb 5-1: config 0 interface 0 has no altsetting 0 [ 736.594197][ T5846] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 736.608210][ T5846] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 736.666058][ T5846] usb 5-1: Product: syz [ 736.694509][ T5846] usb 5-1: Manufacturer: syz [ 736.703604][ T5846] usb 5-1: SerialNumber: syz [ 736.791784][ T5846] usb 5-1: config 0 descriptor?? [ 736.799136][ T5846] hub 5-1:0.0: bad descriptor, ignoring hub [ 736.805079][ T5846] hub 5-1:0.0: probe with driver hub failed with error -5 [ 736.820741][ T5846] usb 5-1: selecting invalid altsetting 0 [ 737.109612][ T5889] usb 5-1: USB disconnect, device number 117 [ 737.178148][T12136] udevd[12136]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 737.336599][ T24] tipc: Node number set to 15444650 [ 737.656890][ T5889] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 737.766808][ T31] INFO: task kworker/1:5:5896 blocked for more than 143 seconds. [ 737.776783][ T31] Tainted: G L syzkaller #0 [ 737.791797][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 737.838899][ T31] task:kworker/1:5 state:D stack:20992 pid:5896 tgid:5896 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 737.847078][ T5889] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 737.878830][ T5889] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 12336, setting to 64 [ 737.893279][ T31] Workqueue: usb_hub_wq hub_event [ 737.900250][ T31] Call Trace: [ 737.905397][ T31] [ 737.907270][ T5889] usb 5-1: config 0 interface 0 has no altsetting 0 [ 737.931399][ T5889] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 737.947557][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 737.960451][ T31] __schedule+0x14ea/0x5050 [ 737.969933][ T5889] usb 5-1: Product: syz [ 737.978479][ T31] ? wq_worker_sleeping+0xfe/0x250 [ 737.981726][ T5889] usb 5-1: Manufacturer: syz [ 737.995971][ T5889] usb 5-1: SerialNumber: syz [ 738.002033][ T31] ? __pfx___schedule+0x10/0x10 [ 738.017805][ T31] ? schedule+0x90/0x360 [ 738.028766][ T5889] usb 5-1: config 0 descriptor?? [ 738.045026][ T5889] hub 5-1:0.0: bad descriptor, ignoring hub [ 738.060712][ T5889] hub 5-1:0.0: probe with driver hub failed with error -5 [ 738.072240][ T31] schedule+0x164/0x360 [ 738.085639][ T5889] usb 5-1: selecting invalid altsetting 0 [ 738.105405][ T31] schedule_preempt_disabled+0x13/0x30 [ 738.153954][ T31] __mutex_lock+0x7fe/0x1300 [ 738.177745][ T31] ? __mutex_lock+0x5ac/0x1300 [ 738.213231][ T31] ? hub_event+0x21a2/0x4f30 [ 738.262411][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 738.299692][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 738.335112][ T31] hub_event+0x21a2/0x4f30 [ 738.376677][ T31] ? __pfx_hub_event+0x10/0x10 [ 738.394505][ T31] ? process_scheduled_works+0xa0f/0x17a0 [ 738.411358][ T31] ? process_scheduled_works+0xa0f/0x17a0 [ 738.438306][ T31] ? process_scheduled_works+0xa0f/0x17a0 [ 738.476080][ T31] process_scheduled_works+0xaec/0x17a0 [ 738.515613][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 738.534547][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 738.557622][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 738.583987][ T31] ? schedule+0x90/0x360 [ 738.606972][ T31] worker_thread+0xda6/0x1360 [ 738.633058][ T31] ? __kthread_parkme+0x19c/0x1f0 [ 738.641388][ T31] kthread+0x726/0x8b0 [ 738.656066][ T31] ? __pfx_worker_thread+0x10/0x10 [ 738.664267][ T31] ? __pfx_kthread+0x10/0x10 [ 738.672988][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 738.692117][ T31] ? __pfx_kthread+0x10/0x10 [ 738.702462][ T31] ret_from_fork+0x51b/0xa40 [ 738.712095][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 738.718739][ T31] ? __switch_to+0xc82/0x1410 [ 738.729531][ T31] ? __pfx_kthread+0x10/0x10 [ 738.735382][ T31] ret_from_fork_asm+0x1a/0x30 [ 738.746738][ T31] [ 738.750726][ T31] [ 738.750726][ T31] Showing all locks held in the system: [ 738.774158][ T31] 1 lock held by khungtaskd/31: [ 738.782447][ T31] #0: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 738.794593][ T31] 2 locks held by getty/5582: [ 738.800744][ T31] #0: ffff88803558b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 738.825453][ T31] #1: ffffc9000362c2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 738.856843][ T31] 5 locks held by kworker/1:5/5896: [ 738.903936][ T31] #0: ffff888020eb0d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 738.928867][ T31] #1: ffffc90004cbfbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 738.957928][ T31] #2: ffff888143bc0198 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 738.995661][ T31] #3: ffff88802972d518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x217a/0x4f30 [ 739.036376][ T31] #4: ffff88814334de68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21a2/0x4f30 [ 739.056628][ T31] 5 locks held by kworker/0:5/5917: [ 739.062143][ T31] #0: ffff888020eb0d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 739.074297][ T31] #1: ffffc90004e17bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 739.087069][ T31] #2: ffff888143b71198 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 739.096516][ T31] #3: ffff888143bc2518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x217a/0x4f30 [ 739.107180][ T31] #4: ffff8881437d3968 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21a2/0x4f30 [ 739.117645][ T31] 5 locks held by kworker/0:6/5956: [ 739.123317][ T31] #0: ffff888020eb0d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 739.136046][ T31] #1: ffffc90004ec7bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0 [ 739.148802][ T31] #2: ffff888143bb9198 (&dev->mutex){....}-{4:4}, at: hub_event+0x17f/0x4f30 [ 739.158284][ T31] #3: ffff888143bbd518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x217a/0x4f30 [ 739.168839][ T31] #4: ffff88814334de68 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21a2/0x4f30 [ 739.178990][ T31] 1 lock held by syz.2.2571/14894: [ 739.184450][ T31] #0: ffffffff8e560b40 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 739.195044][ T31] 1 lock held by syz.4.2579/14923: [ 739.200564][ T31] #0: ffffffff8e560b40 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 739.211506][ T31] 4 locks held by syz.1.2583/14935: [ 739.225281][ T31] [ 739.228024][ T31] ============================================= [ 739.228024][ T31] [ 739.237457][ T31] NMI backtrace for cpu 1 [ 739.237479][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 739.237511][ T31] Tainted: [L]=SOFTLOCKUP [ 739.237519][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 739.237531][ T31] Call Trace: [ 739.237557][ T31] [ 739.237566][ T31] dump_stack_lvl+0xe8/0x150 [ 739.237601][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 739.237632][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 739.237666][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 739.237706][ T31] sys_info+0x135/0x170 [ 739.237731][ T31] watchdog+0xf90/0xfe0 [ 739.237759][ T31] ? watchdog+0x209/0xfe0 [ 739.237786][ T31] kthread+0x726/0x8b0 [ 739.237814][ T31] ? __pfx_watchdog+0x10/0x10 [ 739.237835][ T31] ? __pfx_kthread+0x10/0x10 [ 739.237861][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 739.237891][ T31] ? __pfx_kthread+0x10/0x10 [ 739.237916][ T31] ret_from_fork+0x51b/0xa40 [ 739.237959][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 739.237982][ T31] ? __switch_to+0xc82/0x1410 [ 739.238005][ T31] ? __pfx_kthread+0x10/0x10 [ 739.238023][ T31] ret_from_fork_asm+0x1a/0x30 [ 739.238054][ T31] [ 739.238085][ T31] Sending NMI from CPU 1 to CPUs 0: [ 739.364461][ C0] NMI backtrace for cpu 0 [ 739.364481][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 739.364506][ C0] Tainted: [L]=SOFTLOCKUP [ 739.364513][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 739.364524][ C0] RIP: 0010:lock_acquire+0x67/0x330 [ 739.364554][ C0] Code: 00 65 8b 05 0f 63 52 11 83 f8 08 0f 83 83 01 00 00 89 c0 48 0f a3 05 38 cd 4e 0e 73 0d e8 61 5d 09 00 84 c0 0f 84 ca 01 00 00 <83> 3d 52 fd 4e 0e 00 0f 84 d3 00 00 00 48 8b b4 24 90 00 00 00 4c [ 739.364571][ C0] RSP: 0000:ffffffff8e207bb8 EFLAGS: 00000002 [ 739.364587][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000080000002 [ 739.364600][ C0] RDX: 0000000000000000 RSI: ffffffff8c073960 RDI: ffffffff8c073920 [ 739.364612][ C0] RBP: ffffffff81b5b457 R08: 0000000000000001 R09: 0000000000000000 [ 739.364624][ C0] R10: dffffc0000000000 R11: fffffbfff1fde34f R12: 0000000000000002 [ 739.364637][ C0] R13: ffffffff8e211348 R14: 0000000000000000 R15: 0000000000000001 [ 739.364650][ C0] FS: 0000000000000000(0000) GS:ffff8881256f5000(0000) knlGS:0000000000000000 [ 739.364665][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 739.364677][ C0] CR2: 00000000801c5018 CR3: 0000000029d4c000 CR4: 00000000003526f0 [ 739.364694][ C0] Call Trace: [ 739.364703][ C0] [ 739.364718][ C0] ? tick_nohz_next_event+0x47/0x3e0 [ 739.364742][ C0] seqcount_lockdep_reader_access+0x55/0x100 [ 739.364764][ C0] ? tick_nohz_next_event+0x47/0x3e0 [ 739.364786][ C0] tick_nohz_next_event+0x47/0x3e0 [ 739.364824][ C0] tick_nohz_idle_stop_tick+0x150/0xc70 [ 739.364849][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 739.364878][ C0] ? __pfx_tick_nohz_idle_stop_tick+0x10/0x10 [ 739.364901][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 739.364920][ C0] ? check_tsc_unstable+0x9/0x20 [ 739.364942][ C0] ? tsc_verify_tsc_adjust+0x234/0x300 [ 739.364969][ C0] ? arch_cpu_idle_enter+0x9/0x20 [ 739.364987][ C0] do_idle+0x1b8/0x500 [ 739.365002][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 739.365023][ C0] ? __pfx_do_idle+0x10/0x10 [ 739.365043][ C0] cpu_startup_entry+0x43/0x60 [ 739.365059][ C0] rest_init+0x2de/0x300 [ 739.365083][ C0] start_kernel+0x380/0x3d0 [ 739.365107][ C0] x86_64_start_reservations+0x24/0x30 [ 739.365127][ C0] x86_64_start_kernel+0x143/0x1c0 [ 739.365146][ C0] common_startup_64+0x13e/0x147 [ 739.365176][ C0] [ 739.607791][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 739.614696][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 739.625397][ T31] Tainted: [L]=SOFTLOCKUP [ 739.629746][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 739.639816][ T31] Call Trace: [ 739.643113][ T31] [ 739.646062][ T31] vpanic+0x1e0/0x670 [ 739.650191][ T31] panic+0xc5/0xd0 [ 739.653967][ T31] ? __pfx_panic+0x10/0x10 [ 739.658410][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 739.663872][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 739.670061][ T31] watchdog+0xfda/0xfe0 [ 739.674244][ T31] ? watchdog+0x209/0xfe0 [ 739.678603][ T31] kthread+0x726/0x8b0 [ 739.682728][ T31] ? __pfx_watchdog+0x10/0x10 [ 739.687437][ T31] ? __pfx_kthread+0x10/0x10 [ 739.692073][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 739.697317][ T31] ? __pfx_kthread+0x10/0x10 [ 739.701942][ T31] ret_from_fork+0x51b/0xa40 [ 739.706571][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 739.711711][ T31] ? __switch_to+0xc82/0x1410 [ 739.716423][ T31] ? __pfx_kthread+0x10/0x10 [ 739.721049][ T31] ret_from_fork_asm+0x1a/0x30 [ 739.725859][ T31] [ 739.729506][ T31] Kernel Offset: disabled [ 739.733842][ T31] Rebooting in 86400 seconds..