last executing test programs: 35m42.045774079s ago: executing program 0 (id=204): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000900)={0x0, @bt={0x10, 0x2, 0x1, 0x2, 0xdd9f83, 0x4, 0xfffffff5, 0x1, 0x2, 0x5, 0x722, 0x13, 0x1000007, 0x5, 0x6, 0xb763599953cb0936, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000240)={{0x0, 0x5, 0x30, 0x1, 0x2, 0x74, 0x8, 0x3fb, 0x5, 0x4, 0x8, 0x6, 0x7, 0x6, 0x7}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r2, 0x40405514, &(0x7f0000000200)={0x9, 0x1, 0x0, 0x0, 'syz1\x00', 0xffffff7d}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r2, 0xc1105511, &(0x7f0000000040)={0x9}) r3 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x20) symlinkat(&(0x7f0000000000)='.\x00', r4, &(0x7f0000000140)='./file0\x00') r5 = open_tree(r4, &(0x7f0000000040)='./file0\x00', 0x80001) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x58a7b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x34}}]}}}]}, 0x48}}, 0x4008000) ioctl$FIONCLEX(r5, 0x5450) 35m41.904008988s ago: executing program 0 (id=205): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, &(0x7f00000000c0)={0x6, 0x202, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x8, 0x7, 0x0, 0x9, 0x0, 0xfffffe0000000005, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_dev$video4linux(0x0, 0x3, 0x3cf281) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r5 = socket(0x17, 0x805, 0x3) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e21, 0xef6, @remote, 0x498b}]}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000240)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x19) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000000080), &(0x7f0000000300)=0x8) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close(r6) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x48000, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES8=r7], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r1], 0xcc}, 0x1, 0x0, 0x0, 0x2400d054}, 0x4000840) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000300)={0xffffffffffffff5e, 0x0, 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r8 = getpid() sched_setattr(r8, &(0x7f0000000340)={0x38, 0x0, 0x1000002d, 0x12000, 0x299c0, 0x7, 0x395400000000000, 0xfc5, 0x3, 0x5507}, 0x0) syz_80211_join_ibss(&(0x7f0000000200)='wlan1\x00', &(0x7f00000002c0)=@default_ibss_ssid, 0x6, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008000640000000000500010006000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000000906010200a22652e000000000000000000020ea6371f8569ff4d1ff00001c8007801800018014000240000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x24040090) 35m39.836105448s ago: executing program 0 (id=212): ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000000)={0x1}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{0x0}, {&(0x7f0000003940)=""/4044, 0xfcc}, {&(0x7f0000001880)=""/4105, 0x1009}, {&(0x7f0000000200)=""/180, 0xb4}, {&(0x7f0000000500)=""/114, 0x72}, {&(0x7f0000000c40)=""/55, 0x37}], 0x6}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/128, 0xaa}], 0x1) signalfd4(r1, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x8, 0x0) 35m38.779946453s ago: executing program 0 (id=215): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000a00)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e20, 0x3ff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xd51}}, 0x80, 0x9, 0x78, 0x28, 0x0, 0x9bb, 0xd}, &(0x7f0000000140)=0x9c) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)={@fallback, 0xffffffffffffffff, 0x22, 0x38}, 0x20) 35m38.634424638s ago: executing program 0 (id=217): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = dup(r0) r2 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r1, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r2, 0x47f5, 0x0, 0x0, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b83", 0x9e}, {0x0}], 0x2}}], 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000001040)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8d0}, 0x4040800) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x340}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x400, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000500)='q', 0x1}, {&(0x7f0000000540)="a22caaffe37d4620d1a9427c00787b63b26c5b83ef8ce8f8fe823d77c642dd73361c1f115fdce55de92bede6e812191b9780a257fa4fb3bba896dc1a01fcc30adb201f2ee3a5c8676d6b812ec2342bd0723b7db488a027513df1870c31ffba527c5dfb132cb48cbc2e0ffcfbc12ef2db3c", 0x71}, {&(0x7f0000000600)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19c3898aca95be3176d26e449b7ad2d1c9471c13851aba1592ac", 0x9e}, {&(0x7f00000006c0)="138b9f129daf1d79da8ee1c8c74f2040f7892fe98bc2db9799488aa4bd58432fb72dee377296c6", 0x27}, {&(0x7f0000000700)="e59c889c8be9e17c21882a76c6907239d44f6a0efb65359c6a8e5ede789aa995461e91d2", 0x24}], 0x5}}], 0x2, 0x810) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xeeef0000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0x8000000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0x2000, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"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"}) r8 = socket$isdn(0x22, 0x2, 0x26) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x80044943, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r9 = socket$can_raw(0x1d, 0x3, 0x1) r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x143042, 0x80) read$FUSE(r10, 0x0, 0xeffd) ioctl$USBDEVFS_DROP_PRIVILEGES(r10, 0x4004551e, &(0x7f0000000e80)=0xe5a8) recvmsg$can_raw(r9, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000002840)=""/4096, 0x1000}, {&(0x7f0000000e80)}, {&(0x7f0000001000)=""/107, 0x6b}, {&(0x7f0000001080)=""/236, 0xec}, {&(0x7f0000000ec0)}, {&(0x7f0000001180)=""/174, 0xae}, {&(0x7f0000001240)=""/251, 0xfb}, {&(0x7f0000001340)=""/49, 0x31}], 0x8, &(0x7f0000001400)=""/10, 0xa}, 0x2) r11 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r11, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r12 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r12, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) 35m38.152000669s ago: executing program 0 (id=220): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x2, 0x261, 0x2}, 0x50) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x202400, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x10000, 0x8, 0x6, 0xffffffff, 0x73}, 0x0) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000000)="100c0681000000ba8b0ad775b31b", 0xe, 0xfffffffffffffffc) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) r4 = syz_open_pts(r3, 0x141601) fcntl$setstatus(r4, 0x4, 0x102800) write(r4, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x582}) ioctl$TIOCSETD(r4, 0x5423, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r5, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r0, 0xffffffffffffffff}, &(0x7f0000000d00), &(0x7f0000000d40)='%pK \x00'}, 0xffffffffffffff8d) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r6, &(0x7f0000000300), 0x0}, 0x20) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r7, 0x4058534c, &(0x7f00000000c0)={0x80, 0x0, {0xffffffffffffffff, 0x0, 0x101, 0x0, 0xffffffff}, 0x40000000}) 35m37.047441084s ago: executing program 32 (id=220): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x2, 0x261, 0x2}, 0x50) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x202400, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x10000, 0x8, 0x6, 0xffffffff, 0x73}, 0x0) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000000)="100c0681000000ba8b0ad775b31b", 0xe, 0xfffffffffffffffc) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) r4 = syz_open_pts(r3, 0x141601) fcntl$setstatus(r4, 0x4, 0x102800) write(r4, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x582}) ioctl$TIOCSETD(r4, 0x5423, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r5, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r0, 0xffffffffffffffff}, &(0x7f0000000d00), &(0x7f0000000d40)='%pK \x00'}, 0xffffffffffffff8d) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r6, &(0x7f0000000300), 0x0}, 0x20) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r7, 0x4058534c, &(0x7f00000000c0)={0x80, 0x0, {0xffffffffffffffff, 0x0, 0x101, 0x0, 0xffffffff}, 0x40000000}) 8.621365009s ago: executing program 5 (id=8908): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000200)={0x10, 0xfffffffffffffffe}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="18000019279519fa9b0000000400000095"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0xff4, &(0x7f0000001840)=""/4084, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) 8.454544073s ago: executing program 5 (id=8911): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0x21, 0x2, 0x2) r3 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x14, &(0x7f0000000000), 0x4) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpeername$qrtr(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1000000000, 0x7, 0xfa11, 0xffffffff}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)=@bridge_newneigh={0x1c, 0x1d, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r8, 0x80, 0x7e, 0xa}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c400000019000100fcffffff00000000ac14142c000000000000000000000000fe8000000000000000000000000000aa4e2200004e2400000a000060000000006ad85c5eb0d459af252f4c763dd639a87c18ccabc252069a64ea01edd2643f7ce2302c4d", @ANYRES32=0x0, @ANYRES32=0x0], 0xc4}}, 0x8044) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) sendmsg$kcm(r3, &(0x7f0000000300)={&(0x7f00000000c0)=@phonet={0x23, 0x0, 0x0, 0x45}, 0x80, 0x0}, 0x20000080) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e22, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x10b8}, 0x20000000) sendmsg$kcm(r2, 0x0, 0x0) r9 = syz_io_uring_setup(0xca6, &(0x7f00000003c0)={0x0, 0x6529, 0x2, 0x3, 0x219}, &(0x7f0000000580), &(0x7f00000005c0)) io_uring_register$IORING_REGISTER_RING_FDS(r9, 0x14, &(0x7f0000001300)=[{0x5, 0x1, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000600)=""/205, 0xcd}, {&(0x7f0000000700)=""/21, 0x15}, {&(0x7f0000000740)=""/204, 0xcc}, {&(0x7f0000000840)}, {&(0x7f00000009c0)=""/156, 0x9c}], &(0x7f0000000880)=[0x8, 0x6, 0x6, 0x4, 0x79ba, 0x4, 0xc]}, {0x3, 0x1, 0x0, &(0x7f0000000900)=[{&(0x7f0000000b00)=""/185, 0xb9}, {&(0x7f0000000bc0)=""/207, 0xcf}, {&(0x7f0000000cc0)=""/143, 0x8f}], &(0x7f0000000d80)=[0x5, 0x100000000]}, {0x2, 0x1, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000dc0)=""/246, 0xf6}, {&(0x7f0000000ec0)=""/94, 0x5e}], &(0x7f0000000f80)=[0x3, 0xd1c, 0x5, 0x10000, 0x6, 0xaa, 0x8000, 0x3, 0x8, 0x3]}, {0x1, 0x1, 0x0, &(0x7f0000001040)=[{&(0x7f0000001000)=""/49, 0x31}], &(0x7f0000001080)=[0x80000000, 0xc, 0xa, 0x9]}, {0x2, 0x1, 0x0, &(0x7f0000001280)=[{&(0x7f00000010c0)=""/179, 0xb3}, {&(0x7f0000001180)=""/222, 0xde}], &(0x7f00000012c0)=[0x4, 0x10000, 0x4, 0x3]}], 0x5) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="58000000020601080000000000000000030000000900020073797a3100000000050001000700000005000500020000000c000780080006400000040111000300686173683a6e65742c6e657400000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f00000013c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010026bd7000fddbdf250800000005002d000000000005002d000100000005002e0001000000de2cfc2fdebf3e575d050030000100000004c394c395453dbcfc3ed298d132ddf59c08915cc92b45565311e00c1124064bf7a43f"], 0x34}}, 0x4004001) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c0003801400010067656e657665300000000000000000001400010076657468315f"], 0x104}}, 0x0) 7.514332494s ago: executing program 3 (id=8922): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b83", 0x9e}, {0x0}], 0x2}}], 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000001040)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8d0}, 0x4040800) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="14000000000000002900000034000000040000000000000014000000000000002900000034000000fdffffff0000000000010000000000002900000004000000041c000000000000fe72f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc00f3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5801409e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad0738000000010c7a0180050000000000000009000000000000000400000000000000060000000000000000040000000000000b0000000000000005020a7e00010005020bf4c910fc0200000000000000000000780e000000000000000000140000000000000029000000340000000000000000000000700100000000000029000000360000005e2a000000000000ff4150d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f70000100000100010800000000000000000708000000030000ff0f07100000000002070600ff7f00000000000008c6c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab3030700008000000000000001082bdb86d1ce6a20c2000000000020000000000000002900000037000000730000000000000000010000000000001400000000000000290000000b000000000000020000000018000000000000002900000039000000000000000000000038"], 0x340}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x400, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000500)='q', 0x1}, {0x0}, {&(0x7f0000000600)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19c3898aca95be3176d26e449b7ad2d1c9471c13851aba1592ac", 0x9e}, {&(0x7f00000006c0)="138b9f129daf1d79da8ee1c8c74f2040f7892fe9", 0x14}, {&(0x7f0000000700)="e59c889c8be9e17c21882a76c6907239d44f6a0efb65359c6a8e5ede789aa995461e91d2", 0x24}], 0x5}}], 0x2, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xeeef0000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0x8000000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0x2000, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"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"}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={@empty, @mcast1, @mcast1, 0x800000, 0xa, 0xfffe, 0x100, 0x9, 0x6a20213}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f00000000c0)=0x8, 0x4) bind$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x2001, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7.176051135s ago: executing program 3 (id=8924): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000340)="8224aca5f41b9e0ec5e7a706c919e7c0e343f0cd0a779c17e7f992396b09252009d2d12e9475a57ec39f71417044cf4151af34ac1dfd5d87cdd80bc4c24478821f64d4d971bbc1fc7bdd181a839344917165bb9cd0fa568aac55d8e38ee30fd3a9bc63e2656b6941c812e6ea0692ec276deb2b7b817906cf8c5429a42164e8bb521e216e554d509a0fd0d86729b5f4b9a01fb336bef1be8a68a628452b83", 0x9e}, {0x0}], 0x2}}], 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x8d0}, 0x4040800) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="14000000000000002900000034000000040000000000000014000000000000002900000034000000fdffffff0000000000010000000000002900000004000000041c000000000000fe72f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc00f3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5801409e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad0738000000010c7a0180050000000000000009000000000000000400000000000000060000000000000000040000000000000b0000000000000005020a7e00010005020bf4c910fc0200000000000000000000780e000000000000000000140000000000000029000000340000000000000000000000700100000000000029000000360000005e2a000000000000ff4150d650847249ad288702ebd0d654b985e8908defb7ec6c5ff115c58e128b9e3a21c34b45ef9de99984e143ca7c3509a971b2ec429ee1edc0bb903fe94b32c28f70000100000100010800000000000000000708000000030000ff0f07100000000002070600ff7f00000000000008c6c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e358ea0808807873fd7290c6d4f033de64c7e86ab3030700008000000000000001082bdb86d1ce6a20c2000000000020000000000000002900000037000000730000000000000000010000000000001400000000000000290000000b000000000000020000000018000000000000002900000039000000000000000000000038"], 0x340}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x400, @empty, 0x7}, 0x1c, &(0x7f0000000f00)}}], 0x2, 0x810) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r2) execveat(r2, 0x0, 0x0, 0x0, 0x800) r3 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400000101292000090509"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) shutdown(r0, 0x1) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) fsopen(&(0x7f0000000580)='overlay\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x20068081) r5 = socket$inet(0x10, 0x80000, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) unshare(0x7a020400) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xa, 0x40, 0xf, 0x5, 0x2a09, r6, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r7}, &(0x7f00000002c0), &(0x7f0000000300)=r6}, 0x20) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/pid\x00') 6.89023059s ago: executing program 5 (id=8926): mremap(&(0x7f0000fff000/0x1000)=nil, 0x40000000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x0) (async) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x50d, 0x3201, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x8, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc, 0x0, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) (async) splice(r2, 0x0, r2, 0x0, 0x4, 0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) syz_usb_connect$cdc_ncm(0x0, 0xe1, &(0x7f0000000240)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xcf, 0x2, 0x1, 0xc1, 0x50, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x200}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x400, 0xa9a, 0x1a}, {0x6, 0x24, 0x1a, 0xa, 0x4}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x40}, @country_functional={0x12, 0x24, 0x7, 0x9, 0x8, [0xffff, 0x4b, 0x9, 0x2, 0xff, 0x6]}, @mdlm_detail={0x3e, 0x24, 0x13, 0x3, "ae25cef6abacf0aacdf0da338bdb7c577ec709085d068ab15d4b4ca46f2adc042be3c6663ba49499f3d1ec5dcca484e15e11d6e887f16ef91e7c"}, @acm={0x4, 0x24, 0x2, 0x9}, @mdlm={0x15, 0x24, 0x12, 0xe0}, @obex={0x5, 0x24, 0x15, 0x4}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0xff, 0x48}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x1, 0x2, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x80, 0x81, 0x2}}}}}}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x4, 0x5, 0x3, 0x20, 0x28}, 0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="050f2c000224100a02261f0000000f3308000000641f330500cf80fe0000c000100b00"/44], 0x3, [{0xc1, &(0x7f0000000480)=@string={0xc1, 0x3, "11d60003facb95f65b2bba5366fae9ce5a3db97ab12bf2b62e86ee81b3fa90fef6fd021b5233f88fdf3939d3c54f39908055a84d21bbc95d49daa90afb35477c4b6c58d019264b4521eea5aa70937534dfc88d9ee2ac36c386901a2e25de35e3e1f539591d95a0c78fbfd65024f0079fe04e5f18295acb960a3644a39197d3aa534ec00c665a0fb1e4b79f3fd8e286ee4b948bee73f3484827b8d9552f63cc84ad4074d167e1ac8982fb57ab078ebd903a9f36aaa371c8cfbe0d85cf5143f6"}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x42d}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x1409}}]}) (async, rerun: 32) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="00002cbd7000fcdbdf2509000000"], 0x14}, 0x1, 0x0, 0x0, 0x24044800}, 0x40) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f020000"], 0x0, 0x0, 0x0, 0x0}, 0x0) 4.8601984s ago: executing program 2 (id=8930): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x5c, r0, 0x801, 0x4, 0x3, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY={0x40, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_SEQ={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "0ad6742676df36422898037efb"}, @NL80211_KEY_DEFAULT={0x4}]}]}, 0x5c}}, 0x40000) 4.859643053s ago: executing program 2 (id=8931): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) lseek(0xffffffffffffffff, 0xfffffffffffffffa, 0x3) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, 0x0, 0x808) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r2, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18, 0xffff0000}, 0x0) 4.857225469s ago: executing program 4 (id=8932): r0 = syz_open_dev$vim2m(&(0x7f00000003c0), 0x4, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x13, 0x1, 0x0, "61060005000000000000006c4a0000080000000000000000000000000000e700", 0x494e4f4b}) 4.805658283s ago: executing program 4 (id=8933): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4401}) writev(r2, &(0x7f0000000580)=[{&(0x7f00000000c0)="41f3d6f790694f00a3e8ccc5", 0xc}, {&(0x7f0000000480)="044796807eb4aa921f6fa93092d7fe4d32b133003fea37b44c9e1c5c768f542c14cd621100973580de8b0cd97c1c1bc83bbc7a17e59ec035b90d75729759d86f750cc0b93f39fc776e3b7902c326810ab7", 0x51}], 0x2) getpriority(0x1, 0xffffffffffffffff) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r3, 0x3b70, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r6 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x1, 0x12, r6, 0x82000000) syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') r7 = socket(0x1, 0x803, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="500000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000002000128009000100766c616e000000001000028004000480060001000100000008000500", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9, @ANYBLOB="9c8a487d0bb8084d27a8c89bc18c7bfd20b29cbdfdf1a7d0910fa52ffca8ac4cf648f1f68817726b23acdc7fb81fd2683235b18f3410ac099ad01b12890d8bc38a8cede2f9175e87850e78549218be7276761eaa3112dfe95773e4f10a8a6883e14c7d4a33fcc00ed945027fbd673c"], 0x50}, 0x1, 0x0, 0x0, 0x600}, 0x0) 4.340131705s ago: executing program 1 (id=8939): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x101, 0x6, 0x0, 0xfffffffffffffffe}, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x34402, 0x0) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000308010100000046686209e1c69c00000000000000000105000300110000000500030006000000"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x100}) (async, rerun: 64) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r3 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) (async) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) (async) syz_memcpy_off$KVM_EXIT_HYPERCALL(r3, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) r5 = epoll_create1(0x80000) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x168}}, 0x4010) (async) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'macvtap0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x28008001}, 0x20004000) (async, rerun: 64) r7 = socket(0x10, 0x3, 0x0) (rerun: 64) sendmmsg(r7, &(0x7f0000000000), 0x400000000000235, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)={0x140000010}) (async) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd"], 0xfdef) (async, rerun: 64) syz_io_uring_setup(0x1f97, 0x0, 0x0, 0x0) (async, rerun: 64) socket$inet(0x2, 0x3, 0x4) 4.339530318s ago: executing program 4 (id=8940): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x3, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'pimreg0\x00', 0x1}) ioctl$SIOCGIFHWADDR(r3, 0x8927, &(0x7f0000000100)={'gre0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000010c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000010000004c00088048000080200009801c000080060001000200007f0f000200ac1414aa050003000200000024000100000000000000000000000000000000004100000000000000000000000000000008000500010000001400020077673100"], 0x7c}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x45, 0x0, 0x1, 0xfffffffc}, {}, {0x6, 0x0, 0x0, 0x7fff0000}]}) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020a00000200000000000000000000014f97ea9f5230d74aad47ca7c48c0a404dc9437932977390fb8549daa1cbcb72001ae19e5ce204ad2fa4d"], 0x10}}, 0x0) recvmmsg(r7, &(0x7f0000000740)=[{{&(0x7f00000005c0)=@tipc, 0x80, 0x0}}], 0x1, 0x2, 0x0) sched_getattr(r6, &(0x7f0000000000)={0x38}, 0x38, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000040)={0x0, 'veth0_vlan\x00', {0x2}, 0xf7fe}) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x3a, 0xfe, 0x6, 0x20, 0x4e6, 0xb, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x14, 0x0, 0x2, 0xa0, 0x24, 0x26, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x8}}]}}]}}]}}, 0x0) 4.298484623s ago: executing program 2 (id=8941): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000040)=0xb49a, 0x4) r1 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020800000000000800000524050000082407000000009ef6230700000000a3a82f07070d240701060000fd800000001a4824030000000001"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020ac"], 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x2}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x17) syz_usb_control_io(r1, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1401}}}, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000580)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="208302"], 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000600)={0x40, 0x0, 0x2, "b01a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.0437664s ago: executing program 3 (id=8942): socket$kcm(0xa, 0x3, 0x3a) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000400)=0x2, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @empty}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x20000000076, 0x101301) lseek(r1, 0x3ff, 0x0) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)='\x00\x00\x00\x00', 0x4}, {&(0x7f0000000680)="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", 0xfe}, {&(0x7f0000000140)="13f3deed3d", 0x5}], 0x3}, 0x0) close(0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x5, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="120100000246cf10dd040280b6fc010203010902120001000000000904000000ff0201"], 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="100100002e00090027bd70000000000004000000fa"], 0x110}, 0x1, 0x0, 0x0, 0x40080}, 0x84) sendmsg$nl_generic(r2, 0x0, 0xc000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3, 0x0, 0x9}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r7, 0x7ff) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005a03ffffffff02000000050000003d0100005cc8fbd1ef1a56a7f93c564234327fa99b5637b6fa17a19322e0635cc3fe7ac53b5c91290951e1c1b7be23d682"], 0x118) 3.768024115s ago: executing program 5 (id=8943): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x36}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xaf62}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x10000, @loopback, 0x1}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000180)=0x100000001, 0x4) 3.738116718s ago: executing program 5 (id=8944): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000180)={'team0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x4b}}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x100}, 0x0) chdir(&(0x7f0000001000)='./file1\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00"], 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000a40)={&(0x7f0000000380)=[{0x3, 0x6000, 0x1, &(0x7f00000003c0)='t'}, {0x1, 0x2a19, 0x0, 0x0}], 0x2}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_exec(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="65786563203aa009f5"], 0x9d) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r8 = openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x42082, 0x0) write$binfmt_elf64(r8, 0x0, 0x78) close(r8) execveat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID(r7, 0x4008ae8a, &(0x7f0000000740)={0x1, 0x0, [{0xa, 0x2, 0x5, 0x7f, 0x6}]}) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x7, 0x49, 0xfff, 0x3}) getsockopt$bt_hci(r0, 0x84, 0x25, &(0x7f0000000000)=""/4087, &(0x7f0000001040)=0xff7) 2.573525962s ago: executing program 1 (id=8945): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001640)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x173b2a7e, @mcast2, 0x19}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="8857c5fc68d9", 0x6}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="a027", 0x2}, {&(0x7f00000006c0)="b6ac09f46d825748", 0x8}], 0x2}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000002680)="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", 0x44a}], 0x1}}], 0x4, 0x28048005) 2.104133259s ago: executing program 1 (id=8946): connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x50, &(0x7f0000000040)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "30b00afe4e79"}}}}}}}, 0x0) 1.916856118s ago: executing program 1 (id=8947): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x20}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) sendto$inet6(r0, &(0x7f0000000080)="b1", 0x1, 0x4000050, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0xfffffe01}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x6}, 0x8) 1.874898913s ago: executing program 3 (id=8948): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) fcntl$notify(0xffffffffffffffff, 0x402, 0x5) inotify_init() close(0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x68, r0, 0x801, 0x4, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x40, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_SEQ={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "0ad6742676df36422898037efb"}, @NL80211_KEY_DEFAULT={0x4}]}]}, 0x68}}, 0x40000) (fail_nth: 2) 1.792103903s ago: executing program 2 (id=8949): sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40811}, 0x20) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x19) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x28e, @mcast1, 0x9}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000140)="f4000900062b2c25fe80000000000000dc8b850f238466ccfe8000000000e82ff6ed88672eb00944", 0x58}, {0x0}], 0x2}, 0x20000884) 1.35386247s ago: executing program 3 (id=8950): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r1, 0x0, 0x20, &(0x7f00000001c0)="440910bc0000000000000000be4649b4a627f7d30a9edb45a14f00", 0x1b) r2 = socket$caif_seqpacket(0x25, 0x5, 0x4) setsockopt$CAIFSO_LINK_SELECT(r2, 0x116, 0x7f, &(0x7f0000000140)=0x81, 0x4) sendto$inet(r1, 0x0, 0x0, 0x20000454, &(0x7f00000000c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x297f, 0x4) sendmmsg$inet6(r0, &(0x7f0000000100)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x1c, 0x0}}], 0x1, 0x0) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/181, 0xb5}, 0x40000040) 1.321531504s ago: executing program 1 (id=8951): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="000086dd0001e1fd04000000a60c6eec00be00442cfffe8000000000000000000000d178000000aaff020000000000000000000000000001"], 0xfdef) 1.255305846s ago: executing program 2 (id=8952): syz_usb_connect$cdc_ecm(0x0, 0x0, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1, [{0xb, &(0x7f0000000100)=@string={0xb, 0x3, "f3cd4a02fcfb8501a0"}}]}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ed5696c5820fae0000000000000080beef911d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$unix(r1, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00'], 0x28, 0x2000c000}}], 0x2, 0x88) 975.000107ms ago: executing program 3 (id=8953): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$kcm(0x10, 0x2, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x4, @local, 'erspan0\x00'}}, 0x1e) socket$pppoe(0x18, 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x35, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) syz_emit_ethernet(0x5d, &(0x7f0000000e80)=ANY=[@ANYBLOB="aaaaaaaaaaaa1553ff41cf1186dd604df34200270600fc010000000000000000000000000002fe8000000000000000000000000000aafffd4001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="60020400907800001302040252f3c26fc47eeb0055aca258d293e5"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x55) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001400)={r4, 0xffffffffffffffff, 0x24, 0x0, @val=@kprobe_multi=@syms={0x1, 0x5, &(0x7f00000013c0)=[&(0x7f00000002c0)=')^-\x00', &(0x7f0000000300)='nl80211\x00', &(0x7f0000000740)='batadv0\x00', &(0x7f0000001440)='q\xa4&\x86\xa9\xc7\xba\xb7\xaf\x81\xd7\xadg\xa9\x1b\xc2\xb6-lR\x00\xc8\x17\xbf75\xc5&\x18o\xc8\xdf\xd0#\x91\xdb\t\xa3t\x1dc\xd8p\xa8\n\xbc\xf1\xe8\xd9\xffL|\xff\xb31C -\x9e\x9a\xde\xb2\xec\xda\xf9\x12\xf9x\xbc\xaa\x01\xaf8\xbdwP\xde\x143\x82o\x11\x06\xa5\x85\xd39\xb2\xdb\xb7\xe8\x02\xc3\xe0\xba\x1e\x17\xb4\xeb\xcaf\xbbo\xb3\xd0o\xacP\xca\x88\xea\v\xda\xfb\xe5\xc21L\xe7\x12s}u?\xd8\xcb\x89\xbf>\x11-+\x15\xb5\xa1\xb2\xe7\x1d\xb0\x80\x9f\xd5R-\x8f\xe0J\x00p\xca\x13\x8a', &(0x7f0000001300)='batadv\x00'], 0x0, 0x105}}, 0x30) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000001240)={0xb6, 0x37, 0x1, {0x0, 0x6, 0x100000ffff, 0x0, 0x98, 'q\xa4&\x86\xa9\xc7\xba\xb7\xaf\x81\xd7\xadg\xa9\x1b\xc2\xb6-lR\x00\xc8\x17\xbf75\xc5&\x18o\xc8\xdf\xd0#\x91\xdb\t\xa3t\x1dc\xd8p\xa8\n\xbc\xf1\xe8\xd9\xffL|\xff\xb31C -\x9e\x9a\xde\xb2\xec\xda\xf9\x12\xf9x\xbc\xaa\x01\xaf8\xbdwP\xde\x143\x82o\x11\x06\xa5\x85\xd39\xb2\xdb\xb7\xe8\x02\xc3\xe0\xba\x1e\x17\xb4\xeb\xcaf\xbbo\xb3\xd0o\xacP\xca\x88\xea\v\xda\xfb\xe5\xc21L\xe7\x12s}u?\xd8\xcb\x89\xbf>\x11-+\x15\xb5\xa1\xb2\xe7\x1d\xb0\x80\x9f\xd5R-\x8f\xe0J\x00p\xca\x13\x8a'}}, 0xb6) r6 = socket(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000040)) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000f00)="576332f56236be7cfa73a36e5e436485a425bc1b921f22ca2d78ddc5aa9131162a337eadf8319fe6a960f0f3b068e86c81441ebd2df73b1face80000a70caa41f5e55b8523aabbbcdf1da83f227ae1208115de48e2a3fb3d4e4fd419b77a9b8c34a78300e6faa7a8362f89116b85ec1441bd2a13b9cce2ccfc334aba8b9cf61e3061b4b6f93b6ee030ce3a7e5f386f60059793878ca0df7398efba666be33efb40dfcf4a30d81e4522988db23b8440047b2d849f7582e803", 0xb8}, {&(0x7f0000000480)="7540d8d901cb197301018595109be3b8ac14f3059416511cb78798420e7d084d41e734b66c98e3c9aa439b165519a6c55a3c86993e31ad1e667453deeed34482f1bf0d167c1d96209b7a374155a9f136133042ae77c8f58b6baa259d7fd86fe401723eae2826cd9111d7ccba45724c3ed6ef156a7200ef9dfe0399771f6ba6e21b3566efdd19d5d0923261f97c9c6798628817a9c585c1769ffe3f5e03180d30c1a12f3426fb06215cdad006b8d1b0259864de5e393e5032185430d8e114b0b9449ee7fc45158fce125bcce91e39be6adaefe096c433c5dc24f27cba1feb", 0xde}, {&(0x7f0000000680)="6125358b15cfd1b7424c9e026a766ce3b8a4d5bbf0f78ee9c3b094e0c9d272479e798bf977e94be9f42cef87292cbd0c9be18fc48fb0f00fd841aa51a584228890bba345d617e165c3fac9723e53765adc8c13fe93245e4a7e08c5645773b400c755e91dc0af29f46715267afb7947afc0addf510da112fa8b654757a5020f411ed2656909a86fdc6c9ea745882e029f4cefe31858b1facf0c08ea2c59f629dc17b7c3658802215a6f05a9f1", 0xac}, {&(0x7f00000003c0)="49f417814105a46aac87547e8a344dfb0996ec95076a3d12e699218ca98f4bffcfad38993d93bb646043", 0x2a}, {&(0x7f0000000780)="f318b45a3d8aed513e90235d54300a6373f775e36a58ca0f53e3ddcd8b8dccb6a2fc05b6d6f9ecba74e748a991ffbf264467e94b4622db20df0382c1ff1ca8dc6a9f6e05a36e6261f8b9e13e1b8753dd636e8f239d1de3b3f326ef84075a654a454e9f764f190397daee88879aafaa6b81a213802075e23b5dae233523677cbb255ff674afad254ed56fead3035b7bfc225c3d6b235d04d21e516562b0f5f513a7", 0xa1}, {&(0x7f0000000840)="4df37d3624c065eee5f80b7203eb165997617c9d9c98453a7b12458794916e34c2306f321a10e2a52e4651755b7c3b327ba4e778b3c2325b25a00c7909bb00c4c11383282420d9d19c646d545bc67f5d031389fc9fcdc529905ea64d202e493f2eb151a66d555d94946942bcc350f28561f55b9d77d7f402bc8d6f5a958c4ca6bc4c6d7bc99782c5c9d1a35c84b557d29ff533aa244ed6284055338502695a6605660d5763c464a8f68b3178ae21", 0xae}], 0x6, &(0x7f0000000fc0)=[{0x88, 0x10a, 0x9, "4a6c4c313fb87ee7b5253ac5691001d14e962f43cc66d6432f54e68969165e3f5b5b917b552b721a675ee63edfd8693e949c8a23f03e22eb79c4304c77e701ef9f5b6ddb463087b577861f18bb4ccdb5a43c9bd0acd5c7eff67ed38113ce3706ac84fe777ba0ef077eacdeb6189fe51beef770fe0cdc08b8"}, {0x78, 0x10e, 0x94, "441ca7fddda290dae91e8b290f9a642b066eb2b552ce05ee55be7847bcf07d1d8c31ae790e11969960a62268cb112e53fad6f0e76016d4d57bbf3c33ac20281251fa8c6a47e0bc92230f46f92c58c0d540bd3e8d721f33440919485bd7aa80bfeebf34fc9ee837"}, {0x50, 0x11, 0x24, "99030750f6ddb8744a9be51ac55291b7179d901b69d68583c345dcc2770692fa6ae1a83efb8145a8330b90c65fa083e333a66f67ff3adf520dea91"}, {0x28, 0x10d, 0x6, "b118faf3db121fc5d85fc9e5065a1bc379a2874f98"}, {0x10, 0x112, 0x40}, {0x28, 0x116, 0x24, "18b8c31bbf03e8598596534166b293f904e0"}, {0x58, 0x114, 0xb, "319c6bae61c5cfef1b1ff11a4066b9f04611f5705cb9113068ef7583e8dd15a12d6dee5ef5f6532579cf788e88ece806fe56d31bc8d122993a3d29a26d850ff8fdb605edc5d0709d"}, {0x50, 0x118, 0x0, "244ccf14d98ff4b881fba521c65277371d28c9c31131147b1dc261bef9bdd8b44150f3309419ef2b1b8db313ab5914f40678aa1e03c6b9bc9b"}], 0x258}, 0x40000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="3400000010000104000000000000f20000000000", @ANYRES32=0x0, @ANYBLOB="5d5b0000000000001400350077673100"/28], 0x34}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000861a1820830447370200010203010902120001000000000904d9"], 0x0) 971.726087ms ago: executing program 4 (id=8954): syz_emit_ethernet(0xf87, &(0x7f0000002440)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd606410a60f513300fe8000000000000000000880000000bbff020000000000000000"], 0x0) 923.291769ms ago: executing program 1 (id=8955): ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000a00)=@abs={0x1, 0x0, 0x4e20}, 0x6e) socket$inet6(0x10, 0x3, 0x0) userfaultfd(0x801) r0 = socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000003aaaaaaaaaaaa86dd6950f0ff002006fffe80000000000000000000000000003dfe8000000000000000000000000000aa4e224e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="81100005907800030009c08fcf0e000005000000"], 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x2000000000000009, 0x8, 0x10007, 0x81}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x0) brk(0x400000ffc000) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) syz_io_uring_setup(0x62ce, &(0x7f00000003c0)={0x0, 0xa6b1, 0x8000, 0x2, 0xffffffff}, &(0x7f00000000c0), &(0x7f0000000380)) writev(r4, &(0x7f0000001800)=[{&(0x7f00000001c0)='*', 0x1}], 0x1) io_uring_enter(0xffffffffffffffff, 0x1641, 0x3fffffff, 0x60, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@empty, 0x4, 0x0, 0x1, 0x1, 0x4}, 0x20) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000025, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x60a802, 0x0) r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000180)={0xa, @pix_mp={0x0, 0x7, 0x32314d4e, 0x7, 0x10000000, [{}, {0xffffffff, 0x3}, {0x4}, {}, {}, {}, {0x0, 0x140e}], 0x4e, 0x0, 0x4}}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) 867.786366ms ago: executing program 4 (id=8956): syz_emit_ethernet(0x46, &(0x7f0000000200)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x3, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, @loopback, @broadcast}, "00186371ae9b1c03"}}}}}, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r1) ioctl$BLKREPORTZONE(r1, 0xc0101282, 0x0) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x18, r2, 0x1, 0x70bd28, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x20000000) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r3, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x81, 0x3) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/config', 0x0, 0x0) getdents(r4, 0x0, 0x0) read$FUSE(r0, &(0x7f00000004c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') mount_setattr(r6, 0x0, 0x9000, &(0x7f00000001c0)={0x100005, 0x1, 0x100000, {r6}}, 0x20) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)={0x224, r2, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6f3b}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffff8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}]}, @TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xdc}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x40}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffff539}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xbdcd}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10001}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xa66}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa71}]}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x39}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xdc01}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}]}]}, 0x224}, 0x1, 0x0, 0x0, 0xc000000}, 0x4040004) timer_create(0x3, &(0x7f0000000100)={0x0, 0x3e, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000140)) sched_setattr(r5, &(0x7f0000002500)={0x38, 0x6, 0x10000008, 0xc234, 0x4, 0x1, 0xfffffffffffff4ed, 0x3, 0x5, 0x8}, 0x0) 700.617755ms ago: executing program 4 (id=8957): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2000d00, 0x3, 0x0, &(0x7f0000000140)="a06ad8", 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000900)=""/106, 0x6a}, {&(0x7f00000000c0)=""/26, 0xfe4b}], 0x4}, 0x2000000}], 0x2, 0x101, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)=ANY=[@ANYRES32=r5, @ANYRES64=r6, @ANYRESHEX=r4], 0x33fe0}}, 0x40010) r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r8, &(0x7f0000000100)=ANY=[@ANYRESOCT=r7], 0xa) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder1\x00', 0x1802, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0500000005000000008000005c00000000000000", @ANYRES32, @ANYBLOB="0000d0452e"], 0x50) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 473.666766ms ago: executing program 2 (id=8958): socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events.local\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x0, 0x3, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'pimreg0\x00', 0x1}) ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f0000000100)={'gre0\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000010c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000010000004c00088048000080200009801c000080060001000200007f0f000200ac1414aa050003000200000024000100000000000000000000000000000000004100000000000000000000000000000008000500010000001400020077673100"], 0x7c}, 0x1, 0x0, 0x0, 0x4084}, 0x20008040) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x3a, 0xfe, 0x6, 0x20, 0x4e6, 0xb, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x14, 0x0, 0x2, 0xa0, 0x24, 0x26, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x8}}]}}]}}]}}, 0x0) 0s ago: executing program 5 (id=8959): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x41624800ab11328b, 0x4}) sendmmsg$inet6(r0, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}], 0x1, 0x41) kernel console output (not intermixed with test programs): device number 37 [ 2202.759621][ T5310] netlink: 'syz.1.8568': attribute type 4 has an invalid length. [ 2202.778360][ T5310] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8568'. [ 2203.047104][ T5306] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2203.631865][ T5311] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2203.755607][T15376] usb 5-1: USB disconnect, device number 93 [ 2204.064818][T15376] ftdi_sio ttyUSB1: FTDI USB Serial Device converter now disconnected from ttyUSB1 [ 2204.124133][T15376] ftdi_sio 5-1:0.217: device disconnected [ 2204.676792][T15376] usb 5-1: new full-speed USB device number 94 using dummy_hcd [ 2204.838346][T15376] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2204.861446][T15376] usb 5-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 2204.922127][T15376] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2204.975229][T15376] usb 5-1: config 0 descriptor?? [ 2204.985971][ T5341] fuse: Bad value for 'user_id' [ 2204.991081][ T5341] fuse: Bad value for 'user_id' [ 2205.218479][ T5347] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2205.235704][ T5347] bond0: (slave lo): Error: Device can not be enslaved while up [ 2205.300369][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 2205.300387][ T30] audit: type=1326 audit(1762755855.313:4977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5344 comm="syz.3.8580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a9bb8f6c9 code=0x7ffc0000 [ 2205.347289][ T30] audit: type=1326 audit(1762755855.313:4978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5344 comm="syz.3.8580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f6a9bb8f6c9 code=0x7ffc0000 [ 2205.414323][ T5351] x_tables: ip_tables: osf match: only valid for protocol 6 [ 2205.701080][ T30] audit: type=1326 audit(1762755855.313:4979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5344 comm="syz.3.8580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a9bb8f6c9 code=0x7ffc0000 [ 2205.724339][T15376] nintendo 0003:057E:200E.003F: hidraw0: USB HID v80.00 Device [HID 057e:200e] on usb-dummy_hcd.4-1/input0 [ 2206.067713][T15376] nintendo 0003:057E:200E.003F: Failed charging grip handshake [ 2206.075721][T15376] nintendo 0003:057E:200E.003F: Failed to initialize controller; ret=-110 [ 2206.137081][ T30] audit: type=1326 audit(1762755855.353:4980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5344 comm="syz.3.8580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6a9bb8f6c9 code=0x7ffc0000 [ 2206.169868][ T30] audit: type=1326 audit(1762755855.353:4981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5344 comm="syz.3.8580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a9bb8f6c9 code=0x7ffc0000 [ 2206.209088][T15376] nintendo 0003:057E:200E.003F: probe - fail = -110 [ 2206.215885][T15376] nintendo 0003:057E:200E.003F: probe with driver nintendo failed with error -110 [ 2206.346870][T15376] usb 5-1: USB disconnect, device number 94 [ 2206.376819][ T30] audit: type=1326 audit(1762755855.353:4982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5344 comm="syz.3.8580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f6a9bb8f6c9 code=0x7ffc0000 [ 2206.487744][ T30] audit: type=1326 audit(1762755855.353:4983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5344 comm="syz.3.8580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a9bb8f6c9 code=0x7ffc0000 [ 2206.573514][ T30] audit: type=1326 audit(1762755855.353:4984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5344 comm="syz.3.8580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f6a9bb8f6c9 code=0x7ffc0000 [ 2206.666367][ T30] audit: type=1326 audit(1762755855.353:4985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5344 comm="syz.3.8580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a9bb8f6c9 code=0x7ffc0000 [ 2206.980588][ T30] audit: type=1326 audit(1762755855.353:4986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5344 comm="syz.3.8580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f6a9bb8f6c9 code=0x7ffc0000 [ 2207.271413][ T5377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2207.357153][ T5377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2207.375689][ T5380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2207.387348][ T5380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2207.401429][ T5377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2207.420069][ T5377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2207.442056][ T5383] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8590'. [ 2207.451391][T15376] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 2207.532131][ T5377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2207.550346][ T5388] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2207.581419][ T5380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2207.605206][ T5377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2207.611734][ T5388] bond0: (slave lo): Error: Device can not be enslaved while up [ 2207.620825][T15376] usb 6-1: device descriptor read/64, error -71 [ 2207.637526][ T5380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2207.873409][ T5403] netlink: 'syz.1.8598': attribute type 10 has an invalid length. [ 2207.881478][T15376] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 2207.963310][ T5409] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8600'. [ 2208.016701][T15376] usb 6-1: device descriptor read/64, error -71 [ 2208.126920][T15376] usb usb6-port1: attempt power cycle [ 2208.177654][T16963] usb 5-1: new full-speed USB device number 95 using dummy_hcd [ 2208.328923][T16963] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 2208.339983][T16963] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2208.347827][T16963] usb 5-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 2208.359152][T16963] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2208.377826][T16963] usb 5-1: config 0 descriptor?? [ 2208.392544][ T5405] raw-gadget.6 gadget.4: fail, usb_ep_enable returned -22 [ 2208.466999][T15376] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 2208.497261][T15376] usb 6-1: device descriptor read/8, error -71 [ 2208.613952][T16963] usbhid 5-1:0.0: can't add hid device: -71 [ 2208.620232][T16963] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2208.636748][T16963] usb 5-1: USB disconnect, device number 95 [ 2209.066629][T15376] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 2209.097260][T15376] usb 6-1: device descriptor read/8, error -71 [ 2209.206974][T15376] usb usb6-port1: unable to enumerate USB device [ 2209.843799][ T5452] FAULT_INJECTION: forcing a failure. [ 2209.843799][ T5452] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2209.859193][ T5452] CPU: 0 UID: 0 PID: 5452 Comm: syz.2.8615 Not tainted syzkaller #0 PREEMPT(full) [ 2209.859218][ T5452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2209.859229][ T5452] Call Trace: [ 2209.859238][ T5452] [ 2209.859247][ T5452] dump_stack_lvl+0x189/0x250 [ 2209.859275][ T5452] ? __pfx____ratelimit+0x10/0x10 [ 2209.859298][ T5452] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2209.859320][ T5452] ? __pfx__printk+0x10/0x10 [ 2209.859351][ T5452] should_fail_ex+0x414/0x560 [ 2209.859380][ T5452] _copy_to_user+0x31/0xb0 [ 2209.859405][ T5452] simple_read_from_buffer+0xe1/0x170 [ 2209.859441][ T5452] proc_fail_nth_read+0x1b3/0x220 [ 2209.859466][ T5452] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2209.859491][ T5452] ? rw_verify_area+0x2a6/0x4d0 [ 2209.859513][ T5452] ? __lock_acquire+0xab9/0xd20 [ 2209.859528][ T5452] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2209.859551][ T5452] vfs_read+0x200/0xa30 [ 2209.859573][ T5452] ? fdget_pos+0x247/0x320 [ 2209.859594][ T5452] ? __pfx___mutex_lock+0x10/0x10 [ 2209.859619][ T5452] ? __pfx_vfs_read+0x10/0x10 [ 2209.859642][ T5452] ? __fget_files+0x2a/0x420 [ 2209.859663][ T5452] ? __fget_files+0x3a0/0x420 [ 2209.859678][ T5452] ? __fget_files+0x2a/0x420 [ 2209.859702][ T5452] ksys_read+0x145/0x250 [ 2209.859727][ T5452] ? __pfx_ksys_read+0x10/0x10 [ 2209.859753][ T5452] ? do_syscall_64+0xbe/0xfa0 [ 2209.859777][ T5452] do_syscall_64+0xfa/0xfa0 [ 2209.859798][ T5452] ? lockdep_hardirqs_on+0x9c/0x150 [ 2209.859819][ T5452] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2209.859837][ T5452] ? clear_bhb_loop+0x60/0xb0 [ 2209.859859][ T5452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2209.859876][ T5452] RIP: 0033:0x7f8e2fb8e0dc [ 2209.859893][ T5452] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2209.859908][ T5452] RSP: 002b:00007f8e2ddf6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2209.859927][ T5452] RAX: ffffffffffffffda RBX: 00007f8e2fde6090 RCX: 00007f8e2fb8e0dc [ 2209.859940][ T5452] RDX: 000000000000000f RSI: 00007f8e2ddf60a0 RDI: 0000000000000007 [ 2209.859952][ T5452] RBP: 00007f8e2ddf6090 R08: 0000000000000000 R09: 0000000000000000 [ 2209.859963][ T5452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2209.859973][ T5452] R13: 00007f8e2fde6128 R14: 00007f8e2fde6090 R15: 00007f8e2ff0fa28 [ 2209.860004][ T5452] [ 2210.144040][T29443] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2210.160105][T29443] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2210.171587][T29443] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2210.182892][T29443] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2210.191801][T29443] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2210.224202][ T5152] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2210.244296][ T5152] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2210.253011][ T5152] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2210.276297][T15627] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2210.292737][ T5152] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2210.303221][ T5152] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2210.429321][T15627] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2210.703302][T15627] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2210.981796][T15627] bond0: (slave netdevsim0): Releasing backup interface [ 2211.014656][T15627] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2211.028225][T30571] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 2211.033596][ T5487] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8625'. [ 2211.107792][ T5489] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8625'. [ 2211.121426][T15376] usb 5-1: new full-speed USB device number 96 using dummy_hcd [ 2211.212345][T30571] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2211.224372][T30571] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 2211.254975][T30571] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2211.300744][T15376] usb 5-1: config 0 has an invalid interface number: 20 but max is 0 [ 2211.309817][T15376] usb 5-1: config 0 has no interface number 0 [ 2211.321508][T15376] usb 5-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 2211.446264][T30571] usb 2-1: config 0 descriptor?? [ 2211.552782][ T1093] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 2211.638590][T15376] usb 5-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 2211.656714][T15376] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2211.677047][T15376] usb 5-1: Product: syz [ 2211.681273][T15376] usb 5-1: Manufacturer: syz [ 2211.766788][ T1093] usb 3-1: Using ep0 maxpacket: 16 [ 2211.814758][T15376] usb 5-1: SerialNumber: syz [ 2211.823395][ T1093] usb 3-1: New USB device found, idVendor=04dd, idProduct=8002, bcdDevice=fc.b6 [ 2211.832784][ T1093] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2211.841957][T15376] usb 5-1: config 0 descriptor?? [ 2211.874086][ T5480] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 2211.889510][T15376] usb-storage 5-1:0.20: USB Mass Storage device detected [ 2211.891096][ T1093] usb 3-1: Product: syz [ 2211.905896][T15376] usb-storage 5-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 2211.913614][ T1093] usb 3-1: Manufacturer: syz [ 2211.913635][ T1093] usb 3-1: SerialNumber: syz [ 2211.948051][ T1093] usb 3-1: config 0 descriptor?? [ 2211.962325][ T1093] safe_serial 3-1:0.0: safe_serial converter detected [ 2211.997839][ T1093] usb 3-1: safe_serial converter now attached to ttyUSB0 [ 2212.040897][T30571] keytouch 0003:0926:3333.0040: fixing up Keytouch IEC report descriptor [ 2212.136023][T30571] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0040/input/input88 [ 2212.228024][T26260] usb 3-1: USB disconnect, device number 16 [ 2212.238985][T26260] safe_serial ttyUSB0: safe_serial converter now disconnected from ttyUSB0 [ 2212.252312][T26260] safe_serial 3-1:0.0: device disconnected [ 2212.371647][T30571] keytouch 0003:0926:3333.0040: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 2212.386802][ T5152] Bluetooth: hci2: command tx timeout [ 2212.671467][T15627] tipc: Disabling bearer [ 2213.074411][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 2213.074428][ T30] audit: type=1326 audit(1762755863.123:5003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5507 comm="syz.5.8628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f538978f6c9 code=0x7ffc0000 [ 2213.111078][ T30] audit: type=1326 audit(1762755863.153:5004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5507 comm="syz.5.8628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f538978f6c9 code=0x7ffc0000 [ 2213.143769][ T30] audit: type=1326 audit(1762755863.153:5005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5507 comm="syz.5.8628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f538978f6c9 code=0x7ffc0000 [ 2213.178027][ T30] audit: type=1326 audit(1762755863.153:5006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5507 comm="syz.5.8628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f538978f6c9 code=0x7ffc0000 [ 2213.204735][ T30] audit: type=1326 audit(1762755863.183:5007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5507 comm="syz.5.8628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f538978f6c9 code=0x7ffc0000 [ 2213.229316][ T30] audit: type=1326 audit(1762755863.183:5008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5507 comm="syz.5.8628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f538978f6c9 code=0x7ffc0000 [ 2213.257334][ T30] audit: type=1326 audit(1762755863.183:5009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5507 comm="syz.5.8628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f538978f6c9 code=0x7ffc0000 [ 2213.258148][T15627] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2213.281416][ T30] audit: type=1326 audit(1762755863.183:5010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5507 comm="syz.5.8628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f538978f6c9 code=0x7ffc0000 [ 2213.315103][ T30] audit: type=1326 audit(1762755863.183:5011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5507 comm="syz.5.8628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f538978f6c9 code=0x7ffc0000 [ 2213.338573][T15627] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2213.340547][ T30] audit: type=1326 audit(1762755863.183:5012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5507 comm="syz.5.8628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f538978f6c9 code=0x7ffc0000 [ 2213.370736][T15627] bond0 (unregistering): Released all slaves [ 2213.387713][T15627] bond1 (unregistering): Released all slaves [ 2213.405206][T15627] bond2 (unregistering): Released all slaves [ 2213.439955][ T5463] chnl_net:caif_netlink_parms(): no params data found [ 2213.578124][ T5510] netlink: 424 bytes leftover after parsing attributes in process `syz.5.8629'. [ 2213.586031][T15627] tipc: Left network mode [ 2213.741962][T30571] usb 2-1: USB disconnect, device number 38 [ 2213.795590][ T5463] bridge0: port 1(bridge_slave_0) entered blocking state [ 2213.829429][ T5463] bridge0: port 1(bridge_slave_0) entered disabled state [ 2213.856743][ T5463] bridge_slave_0: entered allmulticast mode [ 2213.932940][T15376] scsi host1: usb-storage 5-1:0.20 [ 2213.937338][ T5463] bridge_slave_0: entered promiscuous mode [ 2213.945021][T15376] usb 5-1: USB disconnect, device number 96 [ 2213.957000][T16963] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 2214.018637][ T5463] bridge0: port 2(bridge_slave_1) entered blocking state [ 2214.031374][ T5463] bridge0: port 2(bridge_slave_1) entered disabled state [ 2214.041847][ T5463] bridge_slave_1: entered allmulticast mode [ 2214.059416][ T5463] bridge_slave_1: entered promiscuous mode [ 2214.120434][T16963] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 2214.149887][T16963] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2214.172436][T16963] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2214.224629][ T5463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2214.253184][T16963] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2214.284814][T16963] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2214.322053][T16963] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2214.337986][ T5463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2214.350187][T16963] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2214.468917][ T5152] Bluetooth: hci2: command tx timeout [ 2214.476939][T16963] usb 6-1: config 0 descriptor?? [ 2214.484416][ T5516] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 2214.680555][ T5463] team0: Port device team_slave_0 added [ 2214.718581][ T5549] Set syz0 is full, maxelem 0 reached [ 2214.818578][ T5463] team0: Port device team_slave_1 added [ 2214.942561][T16963] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0 [ 2214.964749][T16963] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0 [ 2214.984616][T16963] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0 [ 2214.994728][T16963] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0 [ 2215.006563][T16963] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0 [ 2215.014029][T16963] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0 [ 2215.100241][T16963] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0 [ 2215.126601][T16963] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0 [ 2215.179997][T16963] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0 [ 2215.222061][T16963] plantronics 0003:047F:FFFF.0041: unknown main item tag 0x0 [ 2215.238980][ T5463] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2215.245957][ T5463] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2215.252746][T16963] plantronics 0003:047F:FFFF.0041: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 2215.329835][T16963] usb 6-1: USB disconnect, device number 114 [ 2215.406648][ T5463] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2215.445098][ T5463] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2215.463387][ T5463] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2215.491377][ T5463] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2215.663397][ T5564] fido_id[5564]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 2215.837204][T15627] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2215.890574][T15627] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2215.956851][T15376] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 2215.969618][ T5578] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8644'. [ 2216.134983][T15376] usb 2-1: config 0 has an invalid interface number: 20 but max is 0 [ 2216.150942][T15376] usb 2-1: config 0 has no interface number 0 [ 2216.157220][T30571] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 2216.197660][T15376] usb 2-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 2216.240840][T15376] usb 2-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 2216.314811][T15376] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2216.333699][T15376] usb 2-1: Product: syz [ 2216.338326][T30571] usb 5-1: Using ep0 maxpacket: 16 [ 2216.343541][T15376] usb 2-1: Manufacturer: syz [ 2216.356781][T15376] usb 2-1: SerialNumber: syz [ 2216.365483][T30571] usb 5-1: New USB device found, idVendor=04dd, idProduct=8002, bcdDevice=fc.b6 [ 2216.374817][T30571] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2216.396916][T15376] usb 2-1: config 0 descriptor?? [ 2216.406369][T30571] usb 5-1: Product: syz [ 2216.414250][ T5562] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2216.425297][T15376] usb-storage 2-1:0.20: USB Mass Storage device detected [ 2216.434828][T30571] usb 5-1: Manufacturer: syz [ 2216.472579][T30571] usb 5-1: SerialNumber: syz [ 2216.512277][T15376] usb-storage 2-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 2216.548817][ T5152] Bluetooth: hci2: command tx timeout [ 2216.567502][T30571] usb 5-1: config 0 descriptor?? [ 2216.600917][T30571] safe_serial 5-1:0.0: safe_serial converter detected [ 2216.628945][T30571] usb 5-1: safe_serial converter now attached to ttyUSB0 [ 2216.878194][T30571] usb 5-1: USB disconnect, device number 97 [ 2216.898968][T30571] safe_serial ttyUSB0: safe_serial converter now disconnected from ttyUSB0 [ 2216.922623][T30571] safe_serial 5-1:0.0: device disconnected [ 2217.070577][ T5609] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8649'. [ 2217.953475][T15627] team0 (unregistering): Port device team_slave_1 removed [ 2218.019577][T15627] team0 (unregistering): Port device team_slave_0 removed [ 2218.415710][T15627] team0 (unregistering): Port device dummy0 removed [ 2218.626650][ T5152] Bluetooth: hci2: command tx timeout [ 2218.780444][T15376] scsi host1: usb-storage 2-1:0.20 [ 2218.822236][T15376] usb 2-1: USB disconnect, device number 39 [ 2218.904572][ T5463] hsr_slave_0: entered promiscuous mode [ 2218.911859][ T5463] hsr_slave_1: entered promiscuous mode [ 2218.919225][ T5463] debugfs: 'hsr0' already exists in 'hsr' [ 2218.925173][ T5463] Cannot create hsr debugfs directory [ 2218.988125][ T5622] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8652'. [ 2219.061568][ T5622] futex_wake_op: syz.2.8652 tries to shift op by -1; fix this program [ 2219.531911][T15627] IPVS: stop unused estimator thread 0... [ 2219.794922][ T5659] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8658'. [ 2220.447775][T15376] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 2220.586680][T15376] usb 6-1: device descriptor read/64, error -71 [ 2220.843208][ T5463] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2220.891410][ T5463] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2220.904702][ T5463] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2220.916583][T15376] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 2220.929037][ T5463] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2221.286913][T15376] usb 6-1: device descriptor read/64, error -71 [ 2221.406005][ T5463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2221.416980][T15376] usb usb6-port1: attempt power cycle [ 2221.449965][ T5463] 8021q: adding VLAN 0 to HW filter on device team0 [ 2221.655626][T15627] bridge0: port 1(bridge_slave_0) entered blocking state [ 2221.662845][T15627] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2221.693534][T25867] bridge0: port 2(bridge_slave_1) entered blocking state [ 2221.700708][T25867] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2221.886584][T15376] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 2221.911813][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.918240][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2221.927273][T15376] usb 6-1: device descriptor read/8, error -71 [ 2222.097150][T30571] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 2222.101539][ T5463] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2222.177113][T15376] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 2222.207069][T15376] usb 6-1: device descriptor read/8, error -71 [ 2222.228865][T30571] usb 5-1: device descriptor read/64, error -71 [ 2222.255173][ T5463] veth0_vlan: entered promiscuous mode [ 2222.305891][ T5463] veth1_vlan: entered promiscuous mode [ 2222.317041][T15376] usb usb6-port1: unable to enumerate USB device [ 2222.410790][ T5463] veth0_macvtap: entered promiscuous mode [ 2222.448769][T15376] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 2222.460944][ T5463] veth1_macvtap: entered promiscuous mode [ 2222.489695][T30571] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 2222.533575][ T5463] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2222.573574][ T5463] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2222.590406][ T2949] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2222.599935][T15376] usb 6-1: device descriptor read/64, error -71 [ 2222.606356][ T2949] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2222.628004][T30571] usb 5-1: device descriptor read/64, error -71 [ 2222.647592][ T2949] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2222.674322][ T2949] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2222.755681][T30571] usb usb5-port1: attempt power cycle [ 2222.785770][ T2949] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2222.799427][ T2949] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2222.836612][T15376] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 2222.844846][T15627] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2222.856093][T15627] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2222.952168][ T5717] FAULT_INJECTION: forcing a failure. [ 2222.952168][ T5717] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2222.983895][ T5717] CPU: 0 UID: 0 PID: 5717 Comm: syz.3.8612 Not tainted syzkaller #0 PREEMPT(full) [ 2222.983919][ T5717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2222.983930][ T5717] Call Trace: [ 2222.983937][ T5717] [ 2222.983945][ T5717] dump_stack_lvl+0x189/0x250 [ 2222.983971][ T5717] ? __pfx____ratelimit+0x10/0x10 [ 2222.983991][ T5717] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2222.984011][ T5717] ? __pfx__printk+0x10/0x10 [ 2222.984027][ T5717] ? __might_fault+0xb0/0x130 [ 2222.984059][ T5717] should_fail_ex+0x414/0x560 [ 2222.984086][ T5717] _copy_from_iter+0x1de/0x1790 [ 2222.984110][ T5717] ? rcu_is_watching+0x15/0xb0 [ 2222.984131][ T5717] ? kmalloc_reserve+0xbd/0x290 [ 2222.984148][ T5717] ? __pfx__copy_from_iter+0x10/0x10 [ 2222.984169][ T5717] ? __build_skb_around+0x262/0x3f0 [ 2222.984193][ T5717] ? netlink_sendmsg+0x642/0xb30 [ 2222.984207][ T5717] ? skb_put+0x11b/0x210 [ 2222.984226][ T5717] netlink_sendmsg+0x6b2/0xb30 [ 2222.984252][ T5717] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2222.984271][ T5717] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2222.984295][ T5717] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2222.984312][ T5717] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2222.984328][ T5717] __sock_sendmsg+0x21c/0x270 [ 2222.984352][ T5717] ____sys_sendmsg+0x505/0x830 [ 2222.984376][ T5717] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2222.984402][ T5717] ? import_iovec+0x74/0xa0 [ 2222.984425][ T5717] ___sys_sendmsg+0x21f/0x2a0 [ 2222.984444][ T5717] ? __pfx____sys_sendmsg+0x10/0x10 [ 2222.984492][ T5717] ? __fget_files+0x2a/0x420 [ 2222.984507][ T5717] ? __fget_files+0x3a0/0x420 [ 2222.984532][ T5717] __x64_sys_sendmsg+0x19b/0x260 [ 2222.984551][ T5717] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2222.984577][ T5717] ? __pfx_ksys_write+0x10/0x10 [ 2222.984609][ T5717] ? do_syscall_64+0xbe/0xfa0 [ 2222.984633][ T5717] do_syscall_64+0xfa/0xfa0 [ 2222.984653][ T5717] ? lockdep_hardirqs_on+0x9c/0x150 [ 2222.984673][ T5717] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2222.984695][ T5717] ? clear_bhb_loop+0x60/0xb0 [ 2222.984715][ T5717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2222.984733][ T5717] RIP: 0033:0x7f2c59d8f6c9 [ 2222.984750][ T5717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2222.984764][ T5717] RSP: 002b:00007f2c5ace7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2222.984783][ T5717] RAX: ffffffffffffffda RBX: 00007f2c59fe5fa0 RCX: 00007f2c59d8f6c9 [ 2222.984799][ T5717] RDX: 0000000004008090 RSI: 0000200000001440 RDI: 0000000000000003 [ 2222.984811][ T5717] RBP: 00007f2c5ace7090 R08: 0000000000000000 R09: 0000000000000000 [ 2222.984822][ T5717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2222.984832][ T5717] R13: 00007f2c59fe6038 R14: 00007f2c59fe5fa0 R15: 00007f2c5a10fa28 [ 2222.984861][ T5717] [ 2222.986602][T15376] usb 6-1: device descriptor read/64, error -71 [ 2223.143463][ T5722] netlink: 424 bytes leftover after parsing attributes in process `syz.1.8667'. [ 2223.216655][T30571] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 2223.291185][T26260] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 2223.299498][T15376] usb usb6-port1: attempt power cycle [ 2223.381955][T30571] usb 5-1: device descriptor read/8, error -71 [ 2223.443121][ T5734] netlink: 'syz.1.8672': attribute type 29 has an invalid length. [ 2223.468049][ T5734] netlink: 'syz.1.8672': attribute type 29 has an invalid length. [ 2223.481932][T26260] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2223.490606][T26260] usb 3-1: not running at top speed; connect to a high speed hub [ 2223.505477][T26260] usb 3-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 655, setting to 64 [ 2223.527141][ T5734] netlink: 500 bytes leftover after parsing attributes in process `syz.1.8672'. [ 2223.537043][T26260] usb 3-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2223.571414][T26260] usb 3-1: config 1 interface 0 has no altsetting 0 [ 2223.590673][T26260] usb 3-1: New USB device found, idVendor=05ac, idProduct=025a, bcdDevice= 0.40 [ 2223.629019][T26260] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2223.657922][T30571] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 2223.676915][T26260] usb 3-1: Product: syz [ 2223.681293][T26260] usb 3-1: Manufacturer: syz [ 2223.685893][T26260] usb 3-1: SerialNumber: syz [ 2223.690670][ T5741] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2223.714040][ T5712] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 2223.721541][T30571] usb 5-1: device descriptor read/8, error -71 [ 2223.777411][ T5741] vim2m vim2m.0: vidioc_s_fmt queue busy [ 2223.838437][T30571] usb usb5-port1: unable to enumerate USB device [ 2223.946885][ T1095] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 2223.962917][T26260] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input89 [ 2224.002251][ T5187] bcm5974 3-1:1.0: could not read from device [ 2224.018053][ T5187] bcm5974 3-1:1.0: could not read from device [ 2224.032894][ T5187] bcm5974 3-1:1.0: could not read from device [ 2224.040257][ T5187] bcm5974 3-1:1.0: could not read from device [ 2224.052913][ T5754] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8675'. [ 2224.066606][T26260] usb 3-1: USB disconnect, device number 17 [ 2224.108095][ T1095] usb 2-1: config 0 has an invalid interface number: 20 but max is 0 [ 2224.118470][ T1095] usb 2-1: config 0 has no interface number 0 [ 2224.137939][ T1095] usb 2-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 2224.213127][ T1095] usb 2-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 2224.265539][ T1095] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2224.326162][ T1095] usb 2-1: Product: syz [ 2224.399332][ T1095] usb 2-1: Manufacturer: syz [ 2224.441404][ T1095] usb 2-1: SerialNumber: syz [ 2224.475359][ T1095] usb 2-1: config 0 descriptor?? [ 2224.677475][ T5744] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2224.697002][ T1095] usb-storage 2-1:0.20: USB Mass Storage device detected [ 2224.709362][ T5769] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8676'. [ 2224.764101][ T1095] usb-storage 2-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 2224.918922][ T1095] scsi host1: usb-storage 2-1:0.20 [ 2225.512784][ T1095] usb 2-1: USB disconnect, device number 40 [ 2225.566775][T16963] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 2225.717049][T16963] usb 3-1: device descriptor read/64, error -71 [ 2225.866154][ T5792] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2225.915271][ T5792] bond0: (slave lo): Error: Device can not be enslaved while up [ 2225.949519][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 2225.949539][ T30] audit: type=1326 audit(1762755875.993:5026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5789 comm="syz.4.8680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27acb8f6c9 code=0x7ffc0000 [ 2225.951005][ T5797] netlink: 'syz.1.8681': attribute type 10 has an invalid length. [ 2225.987080][T16963] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 2226.034046][ T30] audit: type=1326 audit(1762755876.003:5027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5789 comm="syz.4.8680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f27acb8f6c9 code=0x7ffc0000 [ 2226.101506][ T30] audit: type=1326 audit(1762755876.003:5028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5789 comm="syz.4.8680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27acb8f6c9 code=0x7ffc0000 [ 2226.136647][T16963] usb 3-1: device descriptor read/64, error -71 [ 2226.168436][ T30] audit: type=1326 audit(1762755876.003:5029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5789 comm="syz.4.8680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f27acb8f6c9 code=0x7ffc0000 [ 2226.194293][ T30] audit: type=1326 audit(1762755876.003:5030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5789 comm="syz.4.8680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27acb8f6c9 code=0x7ffc0000 [ 2226.217426][ T30] audit: type=1326 audit(1762755876.003:5031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5789 comm="syz.4.8680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f27acb8f6c9 code=0x7ffc0000 [ 2226.240565][ T30] audit: type=1326 audit(1762755876.003:5032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5789 comm="syz.4.8680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27acb8f6c9 code=0x7ffc0000 [ 2226.264831][ T30] audit: type=1326 audit(1762755876.003:5033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5789 comm="syz.4.8680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f27acb8f6c9 code=0x7ffc0000 [ 2226.288550][T16963] usb usb3-port1: attempt power cycle [ 2226.308172][ T30] audit: type=1326 audit(1762755876.003:5034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5789 comm="syz.4.8680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27acb8f6c9 code=0x7ffc0000 [ 2226.349810][ T30] audit: type=1326 audit(1762755876.003:5035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5789 comm="syz.4.8680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f27acb8f6c9 code=0x7ffc0000 [ 2226.426587][ T1095] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 2226.561713][ T1095] usb 2-1: device descriptor read/64, error -71 [ 2226.647531][T16963] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 2226.753199][T16963] usb 3-1: device descriptor read/8, error -71 [ 2226.868605][ T1095] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 2226.877677][ T2152] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 2227.057232][T16963] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 2227.065048][ T1095] usb 2-1: device descriptor read/64, error -71 [ 2227.076604][ T2152] usb 4-1: Using ep0 maxpacket: 16 [ 2227.084980][ T2152] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 2227.093750][ T2152] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2227.104309][ T2152] usb 4-1: config 0 has no interface number 0 [ 2227.110962][T16963] usb 3-1: device descriptor read/8, error -71 [ 2227.125230][ T2152] usb 4-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 2227.134531][ T2152] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2227.143540][ T2152] usb 4-1: Product: syz [ 2227.148049][ T2152] usb 4-1: Manufacturer: syz [ 2227.152837][ T2152] usb 4-1: SerialNumber: syz [ 2227.170914][ T2152] usb 4-1: config 0 descriptor?? [ 2227.187226][ T1095] usb usb2-port1: attempt power cycle [ 2227.227402][T16963] usb usb3-port1: unable to enumerate USB device [ 2227.321643][ T1098] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 2227.381164][ T2152] uvcvideo 4-1:0.105: Found UVC 0.00 device syz (046d:08d3) [ 2227.424389][ T2152] uvcvideo 4-1:0.105: No valid video chain found. [ 2227.488701][ T1098] usb 6-1: Using ep0 maxpacket: 32 [ 2227.500221][ T1098] usb 6-1: config 0 has an invalid interface number: 217 but max is 0 [ 2227.509947][ T1098] usb 6-1: config 0 has no interface number 0 [ 2227.525471][ T1098] usb 6-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 2227.527343][ T5834] team0: Port device dummy0 removed [ 2227.534700][ T1095] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 2227.543354][ T5834] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2227.547832][ T1098] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2227.583482][T26260] usb 4-1: USB disconnect, device number 83 [ 2227.636958][ T1095] usb 2-1: device descriptor read/8, error -71 [ 2227.692887][ T1098] usb 6-1: Product: syz [ 2227.703893][ T1098] usb 6-1: Manufacturer: syz [ 2227.761332][ T1098] usb 6-1: SerialNumber: syz [ 2227.776854][ T1098] usb 6-1: config 0 descriptor?? [ 2227.861033][ T1098] ftdi_sio 6-1:0.217: FTDI USB Serial Device converter detected [ 2227.870204][ T1098] usb 6-1: Detected SIO [ 2227.883967][ T1098] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2227.910518][ T1095] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 2227.947640][ T1095] usb 2-1: device descriptor read/8, error -71 [ 2228.114332][ T1095] usb usb2-port1: unable to enumerate USB device [ 2228.289619][ T5839] tipc: Enabling of bearer rejected, failed to enable media [ 2229.599390][ T1095] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 2229.805166][T26260] usb 6-1: USB disconnect, device number 122 [ 2229.836569][ T1095] usb 2-1: Using ep0 maxpacket: 16 [ 2229.838367][T26260] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2229.844189][ T1095] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2229.862489][T26260] ftdi_sio 6-1:0.217: device disconnected [ 2229.882800][ T1095] usb 2-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 2229.897552][ T1095] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2229.916082][ T1095] usb 2-1: Product: syz [ 2229.925974][ T1095] usb 2-1: Manufacturer: syz [ 2229.941741][ T1095] usb 2-1: SerialNumber: syz [ 2229.957701][ T1095] usb 2-1: config 0 descriptor?? [ 2229.969094][ T1095] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 2229.985534][ T1095] gspca_stv06xx: st6422 sensor detected [ 2230.164626][ T5878] fuse: Bad value for 'fd' [ 2231.011630][ T5894] FAULT_INJECTION: forcing a failure. [ 2231.011630][ T5894] name failslab, interval 1, probability 0, space 0, times 0 [ 2231.025503][ T5894] CPU: 1 UID: 0 PID: 5894 Comm: syz.3.8708 Not tainted syzkaller #0 PREEMPT(full) [ 2231.025529][ T5894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2231.025540][ T5894] Call Trace: [ 2231.025548][ T5894] [ 2231.025557][ T5894] dump_stack_lvl+0x189/0x250 [ 2231.025584][ T5894] ? __pfx____ratelimit+0x10/0x10 [ 2231.025606][ T5894] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2231.025627][ T5894] ? __pfx__printk+0x10/0x10 [ 2231.025650][ T5894] ? __lock_acquire+0xab9/0xd20 [ 2231.025675][ T5894] should_fail_ex+0x414/0x560 [ 2231.025705][ T5894] should_failslab+0xa8/0x100 [ 2231.025726][ T5894] kmem_cache_alloc_noprof+0x74/0x6e0 [ 2231.025749][ T5894] ? skb_clone+0x212/0x3a0 [ 2231.025773][ T5894] skb_clone+0x212/0x3a0 [ 2231.025797][ T5894] __netlink_deliver_tap+0x404/0x850 [ 2231.025827][ T5894] ? netlink_deliver_tap+0x2e/0x1b0 [ 2231.025857][ T5894] netlink_deliver_tap+0x19c/0x1b0 [ 2231.025875][ T5894] netlink_unicast+0x7fa/0x9e0 [ 2231.025908][ T5894] ? __pfx_netlink_unicast+0x10/0x10 [ 2231.025935][ T5894] ? netlink_sendmsg+0x642/0xb30 [ 2231.025950][ T5894] ? skb_put+0x11b/0x210 [ 2231.025970][ T5894] netlink_sendmsg+0x805/0xb30 [ 2231.025997][ T5894] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2231.026017][ T5894] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2231.026043][ T5894] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2231.026061][ T5894] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2231.026079][ T5894] __sock_sendmsg+0x21c/0x270 [ 2231.026105][ T5894] ____sys_sendmsg+0x505/0x830 [ 2231.026131][ T5894] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2231.026159][ T5894] ? import_iovec+0x74/0xa0 [ 2231.026184][ T5894] ___sys_sendmsg+0x21f/0x2a0 [ 2231.026205][ T5894] ? __pfx____sys_sendmsg+0x10/0x10 [ 2231.026262][ T5894] ? __fget_files+0x2a/0x420 [ 2231.026279][ T5894] ? __fget_files+0x3a0/0x420 [ 2231.026305][ T5894] __x64_sys_sendmsg+0x19b/0x260 [ 2231.026328][ T5894] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2231.026357][ T5894] ? __pfx_ksys_write+0x10/0x10 [ 2231.026383][ T5894] ? do_syscall_64+0xbe/0xfa0 [ 2231.026409][ T5894] do_syscall_64+0xfa/0xfa0 [ 2231.026429][ T5894] ? lockdep_hardirqs_on+0x9c/0x150 [ 2231.026451][ T5894] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2231.026467][ T5894] ? clear_bhb_loop+0x60/0xb0 [ 2231.026487][ T5894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2231.026503][ T5894] RIP: 0033:0x7f2c59d8f6c9 [ 2231.026519][ T5894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2231.026535][ T5894] RSP: 002b:00007f2c5ace7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2231.026555][ T5894] RAX: ffffffffffffffda RBX: 00007f2c59fe5fa0 RCX: 00007f2c59d8f6c9 [ 2231.026568][ T5894] RDX: 0000000004008090 RSI: 0000200000001440 RDI: 0000000000000003 [ 2231.026580][ T5894] RBP: 00007f2c5ace7090 R08: 0000000000000000 R09: 0000000000000000 [ 2231.026592][ T5894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2231.026602][ T5894] R13: 00007f2c59fe6038 R14: 00007f2c59fe5fa0 R15: 00007f2c5a10fa28 [ 2231.026634][ T5894] [ 2231.809168][ T5903] wg1: entered promiscuous mode [ 2231.814367][ T5903] wg1: entered allmulticast mode [ 2232.127735][ T2152] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 2232.296586][ T2152] usb 4-1: Using ep0 maxpacket: 32 [ 2232.328017][ T2152] usb 4-1: config 0 has an invalid interface number: 217 but max is 0 [ 2232.338380][ T2152] usb 4-1: config 0 has no interface number 0 [ 2232.360085][ T2152] usb 4-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 2232.369489][ T2152] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2232.378074][ T2152] usb 4-1: Product: syz [ 2232.382487][ T2152] usb 4-1: Manufacturer: syz [ 2232.388357][ T2152] usb 4-1: SerialNumber: syz [ 2232.399302][ T2152] usb 4-1: config 0 descriptor?? [ 2232.420502][ T2152] ftdi_sio 4-1:0.217: FTDI USB Serial Device converter detected [ 2232.429652][ T2152] usb 4-1: Detected SIO [ 2232.499864][ T2152] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2232.672714][ T1095] STV06xx 2-1:0.0: probe with driver STV06xx failed with error -71 [ 2232.814998][ T1095] usb 2-1: USB disconnect, device number 45 [ 2233.926637][T26260] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 2234.092696][T26260] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 2234.100900][T26260] usb 2-1: config 0 has no interface number 0 [ 2234.107121][T26260] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 2234.116215][T26260] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2234.218484][ T5939] fuse: Bad value for 'fd' [ 2234.231560][T15376] usb 5-1: new full-speed USB device number 102 using dummy_hcd [ 2234.439163][T26260] usb 2-1: config 0 descriptor?? [ 2234.451491][T26260] usb 2-1: selecting invalid altsetting 1 [ 2234.462378][T26260] dvb_ttusb_budget: ttusb_init_controller: error [ 2234.474100][T26260] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 2234.515192][T15376] usb 5-1: config 0 has an invalid interface number: 20 but max is 0 [ 2234.523804][T15376] usb 5-1: config 0 has no interface number 0 [ 2234.534673][T15376] usb 5-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 2234.561257][T15376] usb 5-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 2234.571350][T15376] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2234.582350][T15376] usb 5-1: Product: syz [ 2234.588474][T15376] usb 5-1: Manufacturer: syz [ 2234.594164][T15376] usb 5-1: SerialNumber: syz [ 2234.607983][T15376] usb 5-1: config 0 descriptor?? [ 2234.678355][ T5936] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 2234.694467][ T30] kauditd_printk_skb: 235 callbacks suppressed [ 2234.694485][ T30] audit: type=1400 audit(1762755884.713:5271): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AA009F5 pid=5926 comm="syz.1.8717" [ 2234.801276][T15376] usb-storage 5-1:0.20: USB Mass Storage device detected [ 2234.936374][T26260] DVB: Unable to find symbol cx22700_attach() [ 2235.098300][T15376] usb-storage 5-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 2235.271601][T26260] DVB: Unable to find symbol tda10046_attach() [ 2235.278502][T26260] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 2235.697954][T26260] usb 4-1: USB disconnect, device number 84 [ 2235.764241][T26260] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2235.785566][T26260] ftdi_sio 4-1:0.217: device disconnected [ 2235.881984][ T5952] netlink: 'syz.3.8720': attribute type 10 has an invalid length. [ 2235.924250][ T5952] team0: Port device dummy0 added [ 2236.324157][ T5957] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2236.477891][ T5960] binder_alloc: 5959: binder_alloc_buf, no vma [ 2236.913081][ T30] audit: type=1326 audit(1762755886.963:5272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5964 comm="syz.3.8725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c59d8f6c9 code=0x7ffc0000 [ 2236.964790][T15376] scsi host1: usb-storage 5-1:0.20 [ 2237.035315][T15376] usb 5-1: USB disconnect, device number 102 [ 2237.054749][ T30] audit: type=1326 audit(1762755886.983:5273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5964 comm="syz.3.8725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c59d8f6c9 code=0x7ffc0000 [ 2237.086063][ T30] audit: type=1326 audit(1762755886.983:5274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5964 comm="syz.3.8725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f2c59d8f6c9 code=0x7ffc0000 [ 2237.118697][T26260] usb 2-1: USB disconnect, device number 46 [ 2237.135163][ T30] audit: type=1326 audit(1762755886.983:5275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5964 comm="syz.3.8725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c59d8f6c9 code=0x7ffc0000 [ 2237.205052][ T30] audit: type=1326 audit(1762755886.983:5276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5964 comm="syz.3.8725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c59d8f6c9 code=0x7ffc0000 [ 2237.470552][ T30] audit: type=1326 audit(1762755886.993:5277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5964 comm="syz.3.8725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f2c59d8f6c9 code=0x7ffc0000 [ 2237.472942][ T5980] netlink: 'syz.5.8730': attribute type 10 has an invalid length. [ 2237.569491][ T30] audit: type=1326 audit(1762755886.993:5278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5964 comm="syz.3.8725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c59d8f6c9 code=0x7ffc0000 [ 2237.622674][ T30] audit: type=1326 audit(1762755886.993:5279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5964 comm="syz.3.8725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2c59d8f6c9 code=0x7ffc0000 [ 2237.665580][ T30] audit: type=1326 audit(1762755886.993:5280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5964 comm="syz.3.8725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c59d8f6c9 code=0x7ffc0000 [ 2237.666429][ T5988] netlink: 'syz.5.8730': attribute type 10 has an invalid length. [ 2238.607878][ T5988] team0: Port device dummy0 removed [ 2238.701477][ T5998] bridge0: port 1(bridge_slave_0) entered blocking state [ 2238.708754][ T5998] bridge0: port 1(bridge_slave_0) entered listening state [ 2238.731275][ T5998] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2239.036787][ T1095] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 2239.206633][ T1095] usb 6-1: Using ep0 maxpacket: 16 [ 2239.213256][ T1095] usb 6-1: config 4 has an invalid interface number: 51 but max is 0 [ 2239.221729][ T1095] usb 6-1: config 4 has no interface number 0 [ 2239.241832][ T1095] usb 6-1: config 4 interface 51 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 16 [ 2239.266520][ T1095] usb 6-1: config 4 interface 51 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 2239.296529][ T1095] usb 6-1: config 4 interface 51 has no altsetting 0 [ 2239.310557][ T1095] usb 6-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 2239.326651][ T1095] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2239.337277][ T1095] usb 6-1: Product: syz [ 2239.346779][ T1095] usb 6-1: Manufacturer: syz [ 2239.346823][ T5202] Dev loop6: unable to read RDB block 7 [ 2239.351377][ T1095] usb 6-1: SerialNumber: syz [ 2239.373522][ T6007] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2239.386819][ T6007] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2239.426661][ T5202] loop6: unable to read partition table [ 2239.467522][ T5202] loop6: partition table beyond EOD, truncated [ 2239.541871][ T6018] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8740'. [ 2239.635330][ T6007] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2239.659608][ T6007] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2239.723479][ T1095] cdc_eem 6-1:4.51 usb0: register 'cdc_eem' at usb-dummy_hcd.5-1, CDC EEM Device, da:6c:16:8f:f9:a8 [ 2239.844433][ T6024] FAULT_INJECTION: forcing a failure. [ 2239.844433][ T6024] name failslab, interval 1, probability 0, space 0, times 0 [ 2239.857642][ T6024] CPU: 0 UID: 0 PID: 6024 Comm: syz.4.8742 Not tainted syzkaller #0 PREEMPT(full) [ 2239.857665][ T6024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2239.857677][ T6024] Call Trace: [ 2239.857685][ T6024] [ 2239.857693][ T6024] dump_stack_lvl+0x189/0x250 [ 2239.857722][ T6024] ? __pfx____ratelimit+0x10/0x10 [ 2239.857745][ T6024] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2239.857767][ T6024] ? __pfx__printk+0x10/0x10 [ 2239.857789][ T6024] ? skb_network_protocol+0x508/0x760 [ 2239.857818][ T6024] should_fail_ex+0x414/0x560 [ 2239.857849][ T6024] should_failslab+0xa8/0x100 [ 2239.857870][ T6024] kmem_cache_alloc_noprof+0x74/0x6e0 [ 2239.857891][ T6024] ? dev_queue_xmit_nit+0x2d/0xcc0 [ 2239.857908][ T6024] ? skb_clone+0x212/0x3a0 [ 2239.857932][ T6024] skb_clone+0x212/0x3a0 [ 2239.857950][ T6024] ? dev_queue_xmit_nit+0x25a/0xcc0 [ 2239.857970][ T6024] dev_queue_xmit_nit+0x416/0xcc0 [ 2239.857987][ T6024] ? dev_queue_xmit_nit+0x2d/0xcc0 [ 2239.858016][ T6024] dev_hard_start_xmit+0x1be/0x830 [ 2239.858052][ T6024] __dev_queue_xmit+0x1b8d/0x3b50 [ 2239.858071][ T6024] ? kasan_save_track+0x3e/0x80 [ 2239.858093][ T6024] ? __kasan_slab_alloc+0x6c/0x80 [ 2239.858115][ T6024] ? kmem_cache_alloc_noprof+0x367/0x6e0 [ 2239.858145][ T6024] ? __dev_queue_xmit+0x27b/0x3b50 [ 2239.858181][ T6024] ? __pfx___dev_queue_xmit+0x10/0x10 [ 2239.858213][ T6024] ? __copy_skb_header+0xa7/0x550 [ 2239.858233][ T6024] ? __asan_memcpy+0x40/0x70 [ 2239.858274][ T6024] ? skb_clone+0x246/0x3a0 [ 2239.858296][ T6024] __netlink_deliver_tap+0x5ad/0x850 [ 2239.858327][ T6024] ? netlink_deliver_tap+0x2e/0x1b0 [ 2239.858346][ T6024] netlink_deliver_tap+0x19c/0x1b0 [ 2239.858365][ T6024] netlink_unicast+0x7fa/0x9e0 [ 2239.858397][ T6024] ? __pfx_netlink_unicast+0x10/0x10 [ 2239.858423][ T6024] ? netlink_sendmsg+0x642/0xb30 [ 2239.858446][ T6024] ? skb_put+0x11b/0x210 [ 2239.858467][ T6024] netlink_sendmsg+0x805/0xb30 [ 2239.858495][ T6024] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2239.858516][ T6024] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2239.858544][ T6024] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2239.858561][ T6024] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2239.858580][ T6024] __sock_sendmsg+0x21c/0x270 [ 2239.858607][ T6024] ____sys_sendmsg+0x505/0x830 [ 2239.858631][ T6024] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2239.858660][ T6024] ? import_iovec+0x74/0xa0 [ 2239.858685][ T6024] ___sys_sendmsg+0x21f/0x2a0 [ 2239.858707][ T6024] ? __pfx____sys_sendmsg+0x10/0x10 [ 2239.858763][ T6024] ? __fget_files+0x2a/0x420 [ 2239.858780][ T6024] ? __fget_files+0x3a0/0x420 [ 2239.858809][ T6024] __x64_sys_sendmsg+0x19b/0x260 [ 2239.858831][ T6024] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2239.858860][ T6024] ? __pfx_ksys_write+0x10/0x10 [ 2239.858888][ T6024] ? do_syscall_64+0xbe/0xfa0 [ 2239.858914][ T6024] do_syscall_64+0xfa/0xfa0 [ 2239.858936][ T6024] ? lockdep_hardirqs_on+0x9c/0x150 [ 2239.858959][ T6024] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2239.858976][ T6024] ? clear_bhb_loop+0x60/0xb0 [ 2239.858998][ T6024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2239.859016][ T6024] RIP: 0033:0x7f27acb8f6c9 [ 2239.859034][ T6024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2239.859050][ T6024] RSP: 002b:00007f27adad6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2239.859069][ T6024] RAX: ffffffffffffffda RBX: 00007f27acde5fa0 RCX: 00007f27acb8f6c9 [ 2239.859082][ T6024] RDX: 0000000004008090 RSI: 0000200000001440 RDI: 0000000000000003 [ 2239.859094][ T6024] RBP: 00007f27adad6090 R08: 0000000000000000 R09: 0000000000000000 [ 2239.859106][ T6024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2239.859117][ T6024] R13: 00007f27acde6038 R14: 00007f27acde5fa0 R15: 00007f27acf0fa28 [ 2239.859149][ T6024] [ 2240.236541][T26260] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 2240.319628][T30576] usb 6-1: USB disconnect, device number 123 [ 2240.328498][T30576] cdc_eem 6-1:4.51 usb0: unregister 'cdc_eem' usb-dummy_hcd.5-1, CDC EEM Device [ 2240.386608][T26260] usb 2-1: Using ep0 maxpacket: 8 [ 2240.395365][T26260] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2240.781909][T26260] usb 2-1: config 1 interface 0 has no altsetting 0 [ 2240.803906][T26260] usb 2-1: New USB device found, idVendor=0471, idProduct=0308, bcdDevice=6a.56 [ 2240.838033][T26260] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2240.880535][T26260] usb 2-1: Product: syz [ 2240.893242][T26260] usb 2-1: Manufacturer: syz [ 2240.942931][T26260] usb 2-1: SerialNumber: syz [ 2241.098141][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 2241.098158][ T30] audit: type=1326 audit(1762755891.143:5296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6046 comm="syz.3.8747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c59d8f6c9 code=0x7ffc0000 [ 2241.187539][ T6051] binder: 6044:6051 ioctl c018620c 2000000002c0 returned -1 [ 2241.287266][T16963] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 2241.293533][ T30] audit: type=1326 audit(1762755891.143:5297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6046 comm="syz.3.8747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c59d8f6c9 code=0x7ffc0000 [ 2241.848995][ T6055] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2241.873424][ T30] audit: type=1326 audit(1762755891.143:5298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6046 comm="syz.3.8747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f2c59d8f6c9 code=0x7ffc0000 [ 2241.895688][ C1] vkms_vblank_simulate: vblank timer overrun [ 2241.916615][ T6055] bond0: (slave lo): Error: Device can not be enslaved while up [ 2242.052137][ T30] audit: type=1326 audit(1762755891.143:5299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6046 comm="syz.3.8747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c59d8f6c9 code=0x7ffc0000 [ 2242.074543][ C1] vkms_vblank_simulate: vblank timer overrun [ 2242.084786][ T30] audit: type=1326 audit(1762755891.143:5300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6046 comm="syz.3.8747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f2c59d8f6c9 code=0x7ffc0000 [ 2242.092332][T16963] usb 5-1: Using ep0 maxpacket: 16 [ 2242.106996][ C1] vkms_vblank_simulate: vblank timer overrun [ 2242.107195][ T30] audit: type=1326 audit(1762755891.153:5301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6046 comm="syz.3.8747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c59d8f6c9 code=0x7ffc0000 [ 2242.140586][ C1] vkms_vblank_simulate: vblank timer overrun [ 2242.146852][ T30] audit: type=1326 audit(1762755891.153:5302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6046 comm="syz.3.8747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2c59d8f6c9 code=0x7ffc0000 [ 2242.203647][ T30] audit: type=1326 audit(1762755891.153:5303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6046 comm="syz.3.8747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c59d8f6c9 code=0x7ffc0000 [ 2242.226046][ C1] vkms_vblank_simulate: vblank timer overrun [ 2242.447463][T16963] usb 5-1: config 0 has no interfaces? [ 2242.576615][T16963] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2242.594128][ T30] audit: type=1326 audit(1762755891.153:5304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6046 comm="syz.3.8747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2c59d8f6c9 code=0x7ffc0000 [ 2242.598841][T16963] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2242.823757][T16963] usb 5-1: Manufacturer: syz [ 2242.865102][T16963] usb 5-1: config 0 descriptor?? [ 2243.010001][ T30] audit: type=1326 audit(1762755891.153:5305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6046 comm="syz.3.8747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c59d8f6c9 code=0x7ffc0000 [ 2243.483433][T26260] pwc: Philips PCVC680K (Vesta Pro) USB webcam detected. [ 2243.591522][T26260] pwc: send_video_command error -71 [ 2243.597373][T26260] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 2243.636018][T26260] Philips webcam 2-1:1.0: probe with driver Philips webcam failed with error -71 [ 2243.697411][T26260] usb 2-1: USB disconnect, device number 47 [ 2243.948567][ T6034] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2244.687209][ T1095] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 2244.747304][T26260] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 2244.860825][ T1095] usb 4-1: config 0 has no interfaces? [ 2244.881660][ T1095] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2244.918386][T26260] usb 3-1: Using ep0 maxpacket: 16 [ 2244.926895][T26260] usb 3-1: New USB device found, idVendor=04dd, idProduct=8002, bcdDevice=fc.b6 [ 2244.936605][T26260] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2244.957518][T15376] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 2244.973017][T26260] usb 3-1: Product: syz [ 2244.980178][ T1095] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2244.989119][T26260] usb 3-1: Manufacturer: syz [ 2245.005110][ T1095] usb 4-1: Product: syz [ 2245.018598][T26260] usb 3-1: SerialNumber: syz [ 2245.028700][ T1095] usb 4-1: Manufacturer: syz [ 2245.054318][T26260] usb 3-1: config 0 descriptor?? [ 2245.060762][ T1095] usb 4-1: SerialNumber: syz [ 2245.079588][T26260] safe_serial 3-1:0.0: safe_serial converter detected [ 2245.101095][ T1095] usb 4-1: config 0 descriptor?? [ 2245.112369][T26260] usb 3-1: safe_serial converter now attached to ttyUSB0 [ 2245.120552][T15376] usb 2-1: Using ep0 maxpacket: 16 [ 2245.133092][T15376] usb 2-1: New USB device found, idVendor=04dd, idProduct=8002, bcdDevice=fc.b6 [ 2245.148386][T15376] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2245.164376][T15376] usb 2-1: Product: syz [ 2245.175439][T15376] usb 2-1: Manufacturer: syz [ 2245.189168][T15376] usb 2-1: SerialNumber: syz [ 2245.211666][T15376] usb 2-1: config 0 descriptor?? [ 2245.240640][T15376] safe_serial 2-1:0.0: safe_serial converter detected [ 2245.263859][T15376] usb 2-1: safe_serial converter now attached to ttyUSB1 [ 2245.345706][T26260] usb 3-1: USB disconnect, device number 22 [ 2245.367104][T26260] safe_serial ttyUSB0: safe_serial converter now disconnected from ttyUSB0 [ 2245.432702][T26260] safe_serial 3-1:0.0: device disconnected [ 2245.502837][T15376] usb 2-1: USB disconnect, device number 48 [ 2245.541978][T15376] safe_serial ttyUSB1: safe_serial converter now disconnected from ttyUSB1 [ 2245.577901][T15376] safe_serial 2-1:0.0: device disconnected [ 2245.741299][ T1095] usb 5-1: USB disconnect, device number 103 [ 2246.338158][ T6132] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8763'. [ 2246.372416][ T6132] Set syz0 is full, maxelem 0 reached [ 2246.395487][ T6136] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2246.409501][ T6136] bond0: (slave lo): Error: Device can not be enslaved while up [ 2246.423146][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 2246.423160][ T30] audit: type=1326 audit(1762755896.473:5329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6130 comm="syz.2.8764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e2fb8f6c9 code=0x7ffc0000 [ 2246.459202][ T30] audit: type=1326 audit(1762755896.503:5330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6130 comm="syz.2.8764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f8e2fb8f6c9 code=0x7ffc0000 [ 2246.548371][ T30] audit: type=1326 audit(1762755896.503:5331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6130 comm="syz.2.8764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e2fb8f6c9 code=0x7ffc0000 [ 2246.613399][ T30] audit: type=1326 audit(1762755896.503:5332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6130 comm="syz.2.8764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8e2fb8f6c9 code=0x7ffc0000 [ 2246.777836][ T30] audit: type=1326 audit(1762755896.503:5333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6130 comm="syz.2.8764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e2fb8f6c9 code=0x7ffc0000 [ 2246.826909][ T30] audit: type=1326 audit(1762755896.503:5334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6130 comm="syz.2.8764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f8e2fb8f6c9 code=0x7ffc0000 [ 2246.849552][ T30] audit: type=1326 audit(1762755896.503:5335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6130 comm="syz.2.8764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e2fb8f6c9 code=0x7ffc0000 [ 2246.885368][ T30] audit: type=1326 audit(1762755896.503:5336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6130 comm="syz.2.8764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f8e2fb8f6c9 code=0x7ffc0000 [ 2246.907835][ C1] vkms_vblank_simulate: vblank timer overrun [ 2246.925911][ T30] audit: type=1326 audit(1762755896.533:5337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6130 comm="syz.2.8764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e2fb8f6c9 code=0x7ffc0000 [ 2246.951582][ T30] audit: type=1326 audit(1762755896.543:5338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6130 comm="syz.2.8764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f8e2fb8f6c9 code=0x7ffc0000 [ 2246.974003][ C1] vkms_vblank_simulate: vblank timer overrun [ 2247.112890][ T6149] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8769'. [ 2247.519627][ T1095] usb 4-1: USB disconnect, device number 85 [ 2247.726638][T15376] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 2247.946862][T15376] usb 6-1: Using ep0 maxpacket: 16 [ 2247.955243][T15376] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b [ 2247.964660][T15376] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 2247.974836][T15376] usb 6-1: Product: syz [ 2248.054055][T15376] usb 6-1: SerialNumber: syz [ 2248.107295][T26260] usb 5-1: new full-speed USB device number 104 using dummy_hcd [ 2248.506242][T15376] usb 6-1: config 0 descriptor?? [ 2248.523807][T26260] usb 5-1: config 0 has an invalid interface number: 20 but max is 0 [ 2248.543488][T26260] usb 5-1: config 0 has no interface number 0 [ 2248.567143][T15376] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 2248.581425][T26260] usb 5-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 2248.605097][T15376] dvb_usb_af9015 6-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 2248.674779][T15376] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 2248.688546][ T1095] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 2248.735496][T26260] usb 5-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 2248.746370][T15376] dvb_usb_af9035 6-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 2248.776887][T26260] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2248.784917][T26260] usb 5-1: Product: syz [ 2248.796318][T15376] usb 6-1: USB disconnect, device number 124 [ 2248.826563][T26260] usb 5-1: Manufacturer: syz [ 2248.865343][T26260] usb 5-1: SerialNumber: syz [ 2248.876919][ T1095] usb 4-1: Using ep0 maxpacket: 16 [ 2248.894944][T26260] usb 5-1: config 0 descriptor?? [ 2248.935303][ T1095] usb 4-1: config 0 has no interfaces? [ 2248.942568][ T1095] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2249.032959][ T1095] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2249.066317][ T1095] usb 4-1: Manufacturer: syz [ 2249.104275][ T1095] usb 4-1: config 0 descriptor?? [ 2249.253904][ T6189] netlink: 'syz.1.8781': attribute type 10 has an invalid length. [ 2249.317143][ T6167] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 2249.382936][T26260] usb-storage 5-1:0.20: USB Mass Storage device detected [ 2249.412574][ T6179] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2249.446309][ T6179] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 2249.516171][T26260] usb-storage 5-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 2249.726582][T16963] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 2249.866595][T16963] usb 6-1: device descriptor read/64, error -71 [ 2250.116856][T16963] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 2250.268988][T16963] usb 6-1: device descriptor read/64, error -71 [ 2250.326561][ T1095] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 2250.426368][T16963] usb usb6-port1: attempt power cycle [ 2250.754295][T26260] scsi host1: usb-storage 5-1:0.20 [ 2250.786595][T16963] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 2250.815781][T26260] usb 5-1: USB disconnect, device number 104 [ 2250.817330][T16963] usb 6-1: device descriptor read/8, error -71 [ 2250.853203][ T1095] usb 3-1: config 0 has an invalid interface number: 20 but max is 0 [ 2250.862703][ T1095] usb 3-1: config 0 has no interface number 0 [ 2250.878205][ T1095] usb 3-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 2250.911568][ T1095] usb 3-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 2250.922983][ T1095] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2251.055022][T30576] usb 4-1: USB disconnect, device number 86 [ 2251.061820][ T1095] usb 3-1: Product: syz [ 2251.066151][ T1095] usb 3-1: Manufacturer: syz [ 2251.077568][ T1095] usb 3-1: SerialNumber: syz [ 2251.199991][T16963] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 2251.458719][ T6218] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8786'. [ 2251.485101][T16963] usb 6-1: device descriptor read/8, error -71 [ 2251.506056][ T1095] usb 3-1: config 0 descriptor?? [ 2251.528035][ T6205] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 2251.539515][ T1095] usb-storage 3-1:0.20: USB Mass Storage device detected [ 2251.552646][ T1095] usb-storage 3-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 2251.682055][T16963] usb usb6-port1: unable to enumerate USB device [ 2251.757953][ T6222] vim2m vim2m.0: vidioc_s_fmt queue busy [ 2251.828967][T16963] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 2252.186642][T16963] usb 6-1: device descriptor read/64, error -71 [ 2252.477928][T16963] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 2252.626726][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2253.098399][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 2253.098411][ T30] audit: type=1326 audit(1762755903.143:5341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6228 comm="syz.1.8789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5a6f8f6c9 code=0x7ffc0000 [ 2253.194949][ T30] audit: type=1326 audit(1762755903.143:5342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6228 comm="syz.1.8789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5a6f8f6c9 code=0x7ffc0000 [ 2253.347408][T15376] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 2253.417704][ T30] audit: type=1326 audit(1762755903.153:5343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6228 comm="syz.1.8789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa5a6f8f6c9 code=0x7ffc0000 [ 2253.535516][ T30] audit: type=1326 audit(1762755903.153:5344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6228 comm="syz.1.8789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa5a6f8f6c9 code=0x7ffc0000 [ 2253.618199][ T30] audit: type=1326 audit(1762755903.153:5345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6228 comm="syz.1.8789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa5a6f8f6c9 code=0x7ffc0000 [ 2253.716550][ T30] audit: type=1326 audit(1762755903.153:5346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6228 comm="syz.1.8789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa5a6f8f6c9 code=0x7ffc0000 [ 2253.833151][ T1095] scsi host2: usb-storage 3-1:0.20 [ 2253.875603][ T30] audit: type=1326 audit(1762755903.153:5347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6228 comm="syz.1.8789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa5a6f8f6c9 code=0x7ffc0000 [ 2253.916565][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 2254.055568][ T30] audit: type=1326 audit(1762755903.153:5348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6228 comm="syz.1.8789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa5a6f8f6c9 code=0x7ffc0000 [ 2254.129385][ T6246] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 2254.168089][ T1095] usb 3-1: USB disconnect, device number 23 [ 2254.204767][ T30] audit: type=1326 audit(1762755903.183:5349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6228 comm="syz.1.8789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa5a6f8f6c9 code=0x7ffc0000 [ 2254.413381][ T30] audit: type=1326 audit(1762755903.183:5350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6228 comm="syz.1.8789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa5a6f8f6c9 code=0x7ffc0000 [ 2255.128452][ T6267] veth0_to_hsr: entered allmulticast mode [ 2255.162457][ T6268] binder: 6263:6268 ioctl c018620c 2000000002c0 returned -1 [ 2255.442254][T15376] usb 5-1: new full-speed USB device number 105 using dummy_hcd [ 2255.598572][T15376] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2255.607365][T15376] usb 5-1: not running at top speed; connect to a high speed hub [ 2255.623254][T15376] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2255.640085][T15376] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 22619, setting to 1023 [ 2255.864093][T15376] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2255.875815][T15376] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2255.890825][T15376] usb 5-1: Product: syz [ 2255.911152][T15376] usb 5-1: Manufacturer: syz [ 2255.919791][T15376] usb 5-1: SerialNumber: syz [ 2256.256963][ T6279] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8803'. [ 2256.273903][ T6279] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2256.510293][T15376] usb 5-1: 2:1: cannot set freq 4656509 to ep 0x82 [ 2256.594181][T15376] usb 5-1: USB disconnect, device number 105 [ 2256.643508][ T1935] udevd[1935]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2257.497243][ T1095] usb 4-1: new full-speed USB device number 87 using dummy_hcd [ 2257.659981][ T1095] usb 4-1: config 0 has an invalid interface number: 20 but max is 0 [ 2257.668330][ T1095] usb 4-1: config 0 has no interface number 0 [ 2257.674464][ T1095] usb 4-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 2257.700858][ T1095] usb 4-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 2257.710076][ T1095] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2257.718401][ T1095] usb 4-1: Product: syz [ 2257.722755][ T1095] usb 4-1: Manufacturer: syz [ 2257.729824][ T1095] usb 4-1: SerialNumber: syz [ 2257.757623][ T1095] usb 4-1: config 0 descriptor?? [ 2257.775612][ T6296] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2257.795794][ T1095] usb-storage 4-1:0.20: USB Mass Storage device detected [ 2257.836867][ T1095] usb-storage 4-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 2258.283454][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 2258.283472][ T30] audit: type=1326 audit(1762755908.333:5382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6312 comm="syz.2.8814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e2fb8f6c9 code=0x7ffc0000 [ 2258.314477][ T30] audit: type=1326 audit(1762755908.333:5383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6312 comm="syz.2.8814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f8e2fb8f6c9 code=0x7ffc0000 [ 2258.347348][ T30] audit: type=1326 audit(1762755908.333:5384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6312 comm="syz.2.8814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e2fb8f6c9 code=0x7ffc0000 [ 2258.372408][ T30] audit: type=1326 audit(1762755908.333:5385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6312 comm="syz.2.8814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f8e2fb8f6c9 code=0x7ffc0000 [ 2258.407391][ T30] audit: type=1326 audit(1762755908.333:5386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6312 comm="syz.2.8814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e2fb8f6c9 code=0x7ffc0000 [ 2258.430774][ T30] audit: type=1326 audit(1762755908.333:5387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6312 comm="syz.2.8814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8e2fb8f6c9 code=0x7ffc0000 [ 2258.671110][ T30] audit: type=1326 audit(1762755908.333:5388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6312 comm="syz.2.8814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e2fb8f6c9 code=0x7ffc0000 [ 2258.879634][ T30] audit: type=1326 audit(1762755908.333:5389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6312 comm="syz.2.8814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8e2fb8f6c9 code=0x7ffc0000 [ 2258.944069][ T6323] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 2258.959166][ T6323] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 2258.979596][ T6323] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 2259.450795][ T30] audit: type=1326 audit(1762755908.333:5390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6312 comm="syz.2.8814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e2fb8f6c9 code=0x7ffc0000 [ 2259.524637][ T30] audit: type=1326 audit(1762755908.333:5391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6312 comm="syz.2.8814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8e2fb8f6c9 code=0x7ffc0000 [ 2259.631519][ T6344] fuse: Bad value for 'fd' [ 2259.972917][ T1095] scsi host1: usb-storage 4-1:0.20 [ 2260.059099][ T1095] usb 4-1: USB disconnect, device number 87 [ 2260.170085][ T6355] FAULT_INJECTION: forcing a failure. [ 2260.170085][ T6355] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2260.185519][ T6355] CPU: 0 UID: 0 PID: 6355 Comm: syz.3.8823 Not tainted syzkaller #0 PREEMPT(full) [ 2260.185542][ T6355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2260.185552][ T6355] Call Trace: [ 2260.185559][ T6355] [ 2260.185566][ T6355] dump_stack_lvl+0x189/0x250 [ 2260.185591][ T6355] ? __pfx____ratelimit+0x10/0x10 [ 2260.185612][ T6355] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2260.185632][ T6355] ? __pfx__printk+0x10/0x10 [ 2260.185660][ T6355] should_fail_ex+0x414/0x560 [ 2260.185688][ T6355] _copy_to_user+0x31/0xb0 [ 2260.185710][ T6355] simple_read_from_buffer+0xe1/0x170 [ 2260.185747][ T6355] proc_fail_nth_read+0x1b3/0x220 [ 2260.185772][ T6355] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2260.185795][ T6355] ? rw_verify_area+0x2a6/0x4d0 [ 2260.185817][ T6355] ? __lock_acquire+0xab9/0xd20 [ 2260.185832][ T6355] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2260.185853][ T6355] vfs_read+0x200/0xa30 [ 2260.185873][ T6355] ? fdget_pos+0x247/0x320 [ 2260.185894][ T6355] ? __pfx___mutex_lock+0x10/0x10 [ 2260.185918][ T6355] ? __pfx_vfs_read+0x10/0x10 [ 2260.185939][ T6355] ? __fget_files+0x2a/0x420 [ 2260.185959][ T6355] ? __fget_files+0x3a0/0x420 [ 2260.185973][ T6355] ? __fget_files+0x2a/0x420 [ 2260.185995][ T6355] ksys_read+0x145/0x250 [ 2260.186020][ T6355] ? __pfx_ksys_read+0x10/0x10 [ 2260.186045][ T6355] ? do_syscall_64+0xbe/0xfa0 [ 2260.186069][ T6355] do_syscall_64+0xfa/0xfa0 [ 2260.186089][ T6355] ? lockdep_hardirqs_on+0x9c/0x150 [ 2260.186110][ T6355] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2260.186126][ T6355] ? clear_bhb_loop+0x60/0xb0 [ 2260.186146][ T6355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2260.186163][ T6355] RIP: 0033:0x7f2c59d8e0dc [ 2260.186179][ T6355] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2260.186193][ T6355] RSP: 002b:00007f2c5ace7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2260.186210][ T6355] RAX: ffffffffffffffda RBX: 00007f2c59fe5fa0 RCX: 00007f2c59d8e0dc [ 2260.186222][ T6355] RDX: 000000000000000f RSI: 00007f2c5ace70a0 RDI: 0000000000000004 [ 2260.186233][ T6355] RBP: 00007f2c5ace7090 R08: 0000000000000000 R09: 0000000000000000 [ 2260.186243][ T6355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2260.186252][ T6355] R13: 00007f2c59fe6038 R14: 00007f2c59fe5fa0 R15: 00007f2c5a10fa28 [ 2260.186283][ T6355] [ 2260.419922][ C0] vkms_vblank_simulate: vblank timer overrun [ 2260.447155][ T5152] Bluetooth: hci2: command 0x0c1a tx timeout [ 2260.489394][ T6356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8824'. [ 2260.700500][ T6360] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2260.771926][ T6356] FAULT_INJECTION: forcing a failure. [ 2260.771926][ T6356] name failslab, interval 1, probability 0, space 0, times 0 [ 2260.811463][ T6360] vim2m vim2m.0: vidioc_s_fmt queue busy [ 2260.826748][ T6356] CPU: 0 UID: 0 PID: 6356 Comm: syz.1.8824 Not tainted syzkaller #0 PREEMPT(full) [ 2260.826771][ T6356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2260.826782][ T6356] Call Trace: [ 2260.826790][ T6356] [ 2260.826797][ T6356] dump_stack_lvl+0x189/0x250 [ 2260.826824][ T6356] ? __pfx____ratelimit+0x10/0x10 [ 2260.826847][ T6356] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2260.826870][ T6356] ? __pfx__printk+0x10/0x10 [ 2260.826903][ T6356] ? __pfx___might_resched+0x10/0x10 [ 2260.826922][ T6356] ? fs_reclaim_acquire+0x7d/0x100 [ 2260.826952][ T6356] should_fail_ex+0x414/0x560 [ 2260.826981][ T6356] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 2260.827006][ T6356] should_failslab+0xa8/0x100 [ 2260.827025][ T6356] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 2260.827047][ T6356] kmem_cache_alloc_lru_noprof+0x79/0x6d0 [ 2260.827071][ T6356] ? alloc_inode+0x6a/0x1b0 [ 2260.827094][ T6356] ? __pfx_simple_start_creating+0x10/0x10 [ 2260.827115][ T6356] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 2260.827139][ T6356] alloc_inode+0x6a/0x1b0 [ 2260.827165][ T6356] new_inode+0x22/0x170 [ 2260.827186][ T6356] __debugfs_create_file+0x14d/0x4f0 [ 2260.827216][ T6356] debugfs_create_file_full+0x3f/0x60 [ 2260.827247][ T6356] ref_tracker_dir_debugfs+0x14e/0x270 [ 2260.827266][ T6356] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 2260.827312][ T6356] ? trace_kmalloc+0x1f/0xd0 [ 2260.827331][ T6356] ? __kvmalloc_node_noprof+0x5ed/0x910 [ 2260.827358][ T6356] ? __raw_spin_lock_init+0x45/0x100 [ 2260.827382][ T6356] alloc_netdev_mqs+0x272/0x11b0 [ 2260.827401][ T6356] ? __pfx_bond_setup+0x10/0x10 [ 2260.827421][ T6356] rtnl_create_link+0x31f/0xd10 [ 2260.827449][ T6356] rtnl_newlink_create+0x25c/0xb00 [ 2260.827473][ T6356] ? __mutex_lock+0x5bb/0x1350 [ 2260.827505][ T6356] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 2260.827528][ T6356] ? __pfx___mutex_lock+0x10/0x10 [ 2260.827563][ T6356] ? ns_capable+0x8a/0xf0 [ 2260.827586][ T6356] rtnl_newlink+0x16e4/0x1c80 [ 2260.827613][ T6356] ? netlink_deliver_tap+0x19c/0x1b0 [ 2260.827643][ T6356] ? __pfx_rtnl_newlink+0x10/0x10 [ 2260.827692][ T6356] ? kasan_quarantine_put+0xdd/0x220 [ 2260.827716][ T6356] ? lockdep_hardirqs_on+0x9c/0x150 [ 2260.827746][ T6356] ? nlmon_xmit+0xb0/0x100 [ 2260.827764][ T6356] ? kmem_cache_free+0x19b/0x690 [ 2260.827796][ T6356] ? __local_bh_enable_ip+0x12d/0x1c0 [ 2260.827816][ T6356] ? lockdep_hardirqs_on+0x9c/0x150 [ 2260.827841][ T6356] ? __local_bh_enable_ip+0x12d/0x1c0 [ 2260.827860][ T6356] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 2260.827884][ T6356] ? __dev_queue_xmit+0x27b/0x3b50 [ 2260.827912][ T6356] ? __dev_queue_xmit+0x27b/0x3b50 [ 2260.827931][ T6356] ? __dev_queue_xmit+0x27b/0x3b50 [ 2260.827953][ T6356] ? __dev_queue_xmit+0x1d79/0x3b50 [ 2260.827972][ T6356] ? kasan_save_track+0x3e/0x80 [ 2260.827993][ T6356] ? __kasan_slab_alloc+0x6c/0x80 [ 2260.828022][ T6356] ? __lock_acquire+0xab9/0xd20 [ 2260.828065][ T6356] ? __pfx_rtnl_newlink+0x10/0x10 [ 2260.828089][ T6356] rtnetlink_rcv_msg+0x7cf/0xb70 [ 2260.828119][ T6356] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 2260.828142][ T6356] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2260.828165][ T6356] ? ref_tracker_free+0x63a/0x7d0 [ 2260.828184][ T6356] ? __asan_memcpy+0x40/0x70 [ 2260.828205][ T6356] ? __pfx_ref_tracker_free+0x10/0x10 [ 2260.828235][ T6356] netlink_rcv_skb+0x208/0x470 [ 2260.828262][ T6356] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2260.828289][ T6356] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2260.828327][ T6356] ? netlink_deliver_tap+0x2e/0x1b0 [ 2260.828353][ T6356] netlink_unicast+0x82f/0x9e0 [ 2260.828386][ T6356] ? __pfx_netlink_unicast+0x10/0x10 [ 2260.828412][ T6356] ? netlink_sendmsg+0x642/0xb30 [ 2260.828428][ T6356] ? skb_put+0x11b/0x210 [ 2260.828450][ T6356] netlink_sendmsg+0x805/0xb30 [ 2260.828478][ T6356] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2260.828500][ T6356] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2260.828526][ T6356] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2260.828544][ T6356] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2260.828563][ T6356] __sock_sendmsg+0x21c/0x270 [ 2260.828589][ T6356] ____sys_sendmsg+0x505/0x830 [ 2260.828614][ T6356] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2260.828644][ T6356] ? import_iovec+0x74/0xa0 [ 2260.828668][ T6356] ___sys_sendmsg+0x21f/0x2a0 [ 2260.828692][ T6356] ? __pfx____sys_sendmsg+0x10/0x10 [ 2260.828751][ T6356] ? __fget_files+0x2a/0x420 [ 2260.828769][ T6356] ? __fget_files+0x3a0/0x420 [ 2260.828796][ T6356] __x64_sys_sendmsg+0x19b/0x260 [ 2260.828820][ T6356] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2260.828849][ T6356] ? __pfx_ksys_write+0x10/0x10 [ 2260.828882][ T6356] ? do_syscall_64+0xbe/0xfa0 [ 2260.828916][ T6356] do_syscall_64+0xfa/0xfa0 [ 2260.828938][ T6356] ? lockdep_hardirqs_on+0x9c/0x150 [ 2260.828961][ T6356] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2260.828979][ T6356] ? clear_bhb_loop+0x60/0xb0 [ 2260.829001][ T6356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2260.829019][ T6356] RIP: 0033:0x7fa5a6f8f6c9 [ 2260.829036][ T6356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2260.829052][ T6356] RSP: 002b:00007fa5a7da0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2260.829071][ T6356] RAX: ffffffffffffffda RBX: 00007fa5a71e5fa0 RCX: 00007fa5a6f8f6c9 [ 2260.829085][ T6356] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 2260.829097][ T6356] RBP: 00007fa5a7da0090 R08: 0000000000000000 R09: 0000000000000000 [ 2260.829110][ T6356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2260.829122][ T6356] R13: 00007fa5a71e6038 R14: 00007fa5a71e5fa0 R15: 00007fa5a730fa28 [ 2260.829153][ T6356] [ 2260.829242][ T6356] debugfs: out of free dentries, can not create file 'netdev@ffff88805ff04618' [ 2261.851314][ T6384] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8830'. [ 2261.977700][ T1095] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 2262.210387][ T1095] usb 5-1: config 0 has no interfaces? [ 2262.216051][ T1095] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 2262.225441][ T1095] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2262.251395][ T1095] usb 5-1: config 0 descriptor?? [ 2262.276587][T15376] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 2262.482341][ T5152] Bluetooth: hci2: command 0x0c1a tx timeout [ 2262.616697][T15376] usb 2-1: Using ep0 maxpacket: 16 [ 2262.624220][T15376] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 2262.638464][T15376] usb 2-1: config 1 has no interface number 0 [ 2262.667455][T15376] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 2262.721563][ T1095] usb 5-1: USB disconnect, device number 106 [ 2262.852522][T15376] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 2262.871937][T15376] usb 2-1: config 1 interface 105 has no altsetting 0 [ 2262.882416][T15376] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 2262.892163][T15376] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2262.912230][T15376] usb 2-1: Product: syz [ 2262.920733][T15376] usb 2-1: Manufacturer: syz [ 2262.951422][T15376] usb 2-1: SerialNumber: syz [ 2262.989372][ T6389] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2262.997883][ T6389] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2263.420803][ T6389] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2263.429925][ T6389] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2263.586542][ T1095] usb 4-1: new full-speed USB device number 88 using dummy_hcd [ 2263.743856][ T1095] usb 4-1: config 0 has an invalid interface number: 20 but max is 0 [ 2263.752317][ T1095] usb 4-1: config 0 has no interface number 0 [ 2263.798414][ T1095] usb 4-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 2263.832540][ T1095] usb 4-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 2263.842118][ T1095] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2263.850338][ T1095] usb 4-1: Product: syz [ 2263.854639][ T1095] usb 4-1: Manufacturer: syz [ 2263.859338][ T1095] usb 4-1: SerialNumber: syz [ 2263.909425][ T1095] usb 4-1: config 0 descriptor?? [ 2263.929987][ T6402] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2263.941248][ T1095] usb-storage 4-1:0.20: USB Mass Storage device detected [ 2263.962678][ T1095] usb-storage 4-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 2264.137074][ T1093] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 2264.296777][ T1093] usb 3-1: Using ep0 maxpacket: 16 [ 2264.308548][ T1093] usb 3-1: New USB device found, idVendor=04dd, idProduct=8002, bcdDevice=fc.b6 [ 2264.318110][ T1093] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2264.326235][ T1093] usb 3-1: Product: syz [ 2264.336721][ T1093] usb 3-1: Manufacturer: syz [ 2264.355739][ T1093] usb 3-1: SerialNumber: syz [ 2264.378093][ T1093] usb 3-1: config 0 descriptor?? [ 2264.482388][ T1093] safe_serial 3-1:0.0: safe_serial converter detected [ 2264.522450][ T1093] usb 3-1: safe_serial converter now attached to ttyUSB0 [ 2264.557346][ T5152] Bluetooth: hci2: command 0x0c1a tx timeout [ 2264.714493][ T6428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8842'. [ 2264.768281][ T1093] usb 3-1: USB disconnect, device number 24 [ 2264.805768][ T1093] safe_serial ttyUSB0: safe_serial converter now disconnected from ttyUSB0 [ 2264.839309][ T1093] safe_serial 3-1:0.0: device disconnected [ 2265.458785][ T6435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8844'. [ 2265.881776][ T6448] fuse: Bad value for 'rootmode' [ 2266.198003][ T6452] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8849'. [ 2266.238044][ T6454] netlink: 'syz.5.8850': attribute type 10 has an invalid length. [ 2266.313852][ T6454] team0: Port device dummy0 added [ 2266.767000][ T6459] netlink: 52 bytes leftover after parsing attributes in process `syz.5.8853'. [ 2267.099620][ T1095] scsi host1: usb-storage 4-1:0.20 [ 2267.139909][ T1095] usb 4-1: USB disconnect, device number 88 [ 2267.376619][T30576] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 2267.546756][T30576] usb 6-1: Using ep0 maxpacket: 16 [ 2267.577145][T30576] usb 6-1: New USB device found, idVendor=04dd, idProduct=8002, bcdDevice=fc.b6 [ 2267.596689][T30576] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2267.605202][T30576] usb 6-1: Product: syz [ 2267.628171][T30576] usb 6-1: Manufacturer: syz [ 2267.633874][T30576] usb 6-1: SerialNumber: syz [ 2267.647324][T30576] usb 6-1: config 0 descriptor?? [ 2267.660265][T30576] safe_serial 6-1:0.0: safe_serial converter detected [ 2267.673941][T30576] usb 6-1: safe_serial converter now attached to ttyUSB0 [ 2267.909340][T26260] usb 6-1: USB disconnect, device number 5 [ 2267.919187][T26260] safe_serial ttyUSB0: safe_serial converter now disconnected from ttyUSB0 [ 2267.935030][T26260] safe_serial 6-1:0.0: device disconnected [ 2268.708420][T15376] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -110 [ 2268.847844][ T6510] blkio.reset_stats is deprecated [ 2268.885938][T15376] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 2269.031375][ T6513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8871'. [ 2269.040705][ T6513] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8871'. [ 2269.061223][ T6513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8871'. [ 2269.198193][T15376] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 2269.209919][T26260] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 2269.216631][ T6513] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8871'. [ 2269.266626][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2269.273906][ C1] bridge0: topology change detected, propagating [ 2269.289888][ T3580] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2269.333258][T15376] aqc111 2-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 3a:d3:ad:e4:c0:e7 [ 2269.355404][ T3580] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2269.364322][T26260] usb 6-1: device descriptor read/64, error -71 [ 2269.388223][ T2949] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2269.419254][ T6520] netlink: 'syz.1.8873': attribute type 2 has an invalid length. [ 2269.506423][ T6521] netlink: 'syz.3.8872': attribute type 10 has an invalid length. [ 2269.606088][ T6521] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 2269.676806][ T2949] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2269.687500][T26260] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 2269.836633][T26260] usb 6-1: device descriptor read/64, error -71 [ 2269.956809][T15376] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 2269.968215][T26260] usb usb6-port1: attempt power cycle [ 2270.126716][T15376] usb 4-1: Using ep0 maxpacket: 32 [ 2270.135585][T15376] usb 4-1: config 0 has an invalid interface number: 217 but max is 0 [ 2270.144316][T15376] usb 4-1: config 0 has no interface number 0 [ 2270.155467][T15376] usb 4-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 2270.164711][T15376] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2270.173166][T15376] usb 4-1: Product: syz [ 2270.186668][T15376] usb 4-1: Manufacturer: syz [ 2270.223347][T15376] usb 4-1: SerialNumber: syz [ 2270.236730][T30576] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 2270.260958][T15376] usb 4-1: config 0 descriptor?? [ 2270.284408][T15376] ftdi_sio 4-1:0.217: FTDI USB Serial Device converter detected [ 2270.295087][T15376] usb 4-1: Detected SIO [ 2270.314647][T15376] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2270.322832][T26260] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 2270.357530][T26260] usb 6-1: device descriptor read/8, error -71 [ 2270.576561][T30576] usb 3-1: device descriptor read/64, error -71 [ 2270.607206][T26260] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 2270.627378][T26260] usb 6-1: device descriptor read/8, error -71 [ 2270.677024][T15376] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 2270.738106][T26260] usb usb6-port1: unable to enumerate USB device [ 2270.816524][T30576] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 2270.827017][T15376] usb 5-1: Using ep0 maxpacket: 32 [ 2270.834777][T15376] usb 5-1: config 0 has an invalid interface number: 10 but max is 3 [ 2270.845418][T15376] usb 5-1: config 0 has an invalid interface number: 21 but max is 3 [ 2270.853904][T15376] usb 5-1: config 0 has an invalid descriptor of length 202, skipping remainder of the config [ 2270.976320][T15376] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 4 [ 2270.986288][T15376] usb 5-1: config 0 has no interface number 0 [ 2270.992588][T15376] usb 5-1: config 0 has no interface number 1 [ 2270.999080][T15376] usb 5-1: config 0 interface 10 altsetting 0 endpoint 0x4 has invalid maxpacket 72, setting to 64 [ 2271.010250][T30576] usb 3-1: device descriptor read/64, error -71 [ 2271.023326][T15376] usb 5-1: config 0 interface 10 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 2271.075045][T15376] usb 5-1: config 0 interface 10 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 16 [ 2271.115356][T15376] usb 5-1: config 0 interface 10 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 2271.126771][T30576] usb usb3-port1: attempt power cycle [ 2271.190698][T15376] usb 5-1: config 0 interface 10 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 2271.272172][T15376] usb 5-1: config 0 interface 10 altsetting 0 endpoint 0xA has an invalid bInterval 129, changing to 7 [ 2271.308320][ T6536] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8876'. [ 2271.321509][ T6536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2271.330426][ T6536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2271.450937][T15376] usb 5-1: config 0 interface 10 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 2271.466558][T30576] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 2271.664743][T15376] usb 5-1: config 0 interface 10 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 2271.684536][T30576] usb 3-1: device descriptor read/8, error -71 [ 2271.744509][T15376] usb 5-1: config 0 interface 10 altsetting 0 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 2271.832966][T15376] usb 5-1: config 0 interface 10 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 2271.850663][T15376] usb 5-1: config 0 interface 10 altsetting 0 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 2271.916364][ T5497] aqc111 2-1:1.105 eth5: Failed to write(0x61) reg index 0x0000: -32 [ 2271.930494][ T5497] aqc111 2-1:1.105 eth5: Failed to write(0x1) reg index 0x0006: -32 [ 2271.945506][T15376] usb 5-1: config 0 interface 21 altsetting 5 has a duplicate endpoint with address 0x5, skipping [ 2271.957342][ T5497] aqc111 2-1:1.105 eth5: Failed to write(0x1) reg index 0x0001: -32 [ 2271.976787][T30576] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 2271.999383][T30576] usb 3-1: device descriptor read/8, error -71 [ 2272.006125][ T5497] aqc111 2-1:1.105 eth5: Failed to write(0x1) reg index 0x0001: -32 [ 2272.025897][T15376] usb 5-1: config 0 interface 21 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 2272.046945][ T5497] aqc111 2-1:1.105 eth5: Failed to read(0x1) reg index 0x0001: -32 [ 2272.055760][ T5497] aqc111 2-1:1.105 eth5: Failed to write(0x1) reg index 0x0001: -32 [ 2272.073857][T15376] usb 5-1: config 0 interface 21 has no altsetting 0 [ 2272.076640][ T5497] aqc111 2-1:1.105 eth5: Failed to write(0x61) reg index 0x0000: -32 [ 2272.126795][T30576] usb usb3-port1: unable to enumerate USB device [ 2272.163864][T15376] usb 5-1: New USB device found, idVendor=0403, idProduct=d491, bcdDevice=ca.e0 [ 2272.174429][T15376] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2272.224335][ T6555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2272.236334][T15376] usb 5-1: Product: syz [ 2272.264139][T15376] usb 5-1: Manufacturer: syz [ 2272.274578][ T6555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2272.289147][T15376] usb 5-1: SerialNumber: syz [ 2272.319589][T15376] usb 5-1: config 0 descriptor?? [ 2272.369701][ T6538] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 2272.615824][T15376] ftdi_sio 5-1:0.10: FTDI USB Serial Device converter detected [ 2272.645358][T15376] ftdi_sio ttyUSB1: unknown device type: 0xcae0 [ 2272.758158][T15376] ftdi_sio 5-1:0.21: FTDI USB Serial Device converter detected [ 2272.793901][T15376] ftdi_sio ttyUSB2: unknown device type: 0xcae0 [ 2272.933278][T15376] usb 5-1: USB disconnect, device number 107 [ 2273.326902][T15376] ftdi_sio 5-1:0.10: device disconnected [ 2273.348672][T15376] ftdi_sio 5-1:0.21: device disconnected [ 2273.467268][T26260] usb 4-1: USB disconnect, device number 89 [ 2273.496819][T26260] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2273.541732][T26260] ftdi_sio 4-1:0.217: device disconnected [ 2273.960374][ T6591] FAULT_INJECTION: forcing a failure. [ 2273.960374][ T6591] name failslab, interval 1, probability 0, space 0, times 0 [ 2274.051719][ T6593] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8887'. [ 2274.066592][ T6591] CPU: 1 UID: 0 PID: 6591 Comm: syz.3.8886 Not tainted syzkaller #0 PREEMPT(full) [ 2274.066615][ T6591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2274.066626][ T6591] Call Trace: [ 2274.066633][ T6591] [ 2274.066641][ T6591] dump_stack_lvl+0x189/0x250 [ 2274.066668][ T6591] ? __pfx____ratelimit+0x10/0x10 [ 2274.066690][ T6591] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2274.066711][ T6591] ? __pfx__printk+0x10/0x10 [ 2274.066734][ T6591] ? __pfx___might_resched+0x10/0x10 [ 2274.066758][ T6591] should_fail_ex+0x414/0x560 [ 2274.066787][ T6591] should_failslab+0xa8/0x100 [ 2274.066807][ T6591] __kmalloc_noprof+0xcb/0x7f0 [ 2274.066828][ T6591] ? kfree+0x4d/0x6d0 [ 2274.066846][ T6591] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 2274.066878][ T6591] tomoyo_realpath_from_path+0xe3/0x5d0 [ 2274.066905][ T6591] ? tomoyo_domain+0xd9/0x130 [ 2274.066927][ T6591] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 2274.066956][ T6591] tomoyo_path_number_perm+0x1e8/0x5a0 [ 2274.066981][ T6591] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2274.067041][ T6591] ? __fget_files+0x2a/0x420 [ 2274.067063][ T6591] ? __fget_files+0x3a0/0x420 [ 2274.067078][ T6591] ? __fget_files+0x2a/0x420 [ 2274.067099][ T6591] security_file_ioctl+0xcb/0x2d0 [ 2274.067124][ T6591] __se_sys_ioctl+0x47/0x170 [ 2274.067148][ T6591] do_syscall_64+0xfa/0xfa0 [ 2274.067170][ T6591] ? lockdep_hardirqs_on+0x9c/0x150 [ 2274.067192][ T6591] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2274.067210][ T6591] ? clear_bhb_loop+0x60/0xb0 [ 2274.067229][ T6591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2274.067245][ T6591] RIP: 0033:0x7f2c59d8f6c9 [ 2274.067259][ T6591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2274.067272][ T6591] RSP: 002b:00007f2c5ace7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2274.067290][ T6591] RAX: ffffffffffffffda RBX: 00007f2c59fe5fa0 RCX: 00007f2c59d8f6c9 [ 2274.067303][ T6591] RDX: 0000200000000200 RSI: 00000000c0845657 RDI: 0000000000000003 [ 2274.067314][ T6591] RBP: 00007f2c5ace7090 R08: 0000000000000000 R09: 0000000000000000 [ 2274.067326][ T6591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2274.067335][ T6591] R13: 00007f2c59fe6038 R14: 00007f2c59fe5fa0 R15: 00007f2c5a10fa28 [ 2274.067363][ T6591] [ 2274.067394][ T6591] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2274.886552][ T1093] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 2275.310797][ T1093] usb 3-1: config 0 has an invalid interface number: 20 but max is 0 [ 2275.336707][ T1093] usb 3-1: config 0 has no interface number 0 [ 2275.393749][ T1093] usb 3-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 2275.416551][ T1095] usb 4-1: new full-speed USB device number 90 using dummy_hcd [ 2275.497816][ T1093] usb 3-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 2275.507138][ T1093] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2275.515180][ T1093] usb 3-1: Product: syz [ 2275.519715][ T1093] usb 3-1: Manufacturer: syz [ 2275.524297][ T1093] usb 3-1: SerialNumber: syz [ 2275.541975][ T1093] usb 3-1: config 0 descriptor?? [ 2275.616586][ T1095] usb 4-1: device descriptor read/64, error -71 [ 2275.734837][ T6598] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2275.858123][ T1095] usb 4-1: new full-speed USB device number 91 using dummy_hcd [ 2275.901960][ T6639] binder: 6629:6639 ioctl c018620c 2000000002c0 returned -1 [ 2275.972436][ T1093] usb-storage 3-1:0.20: USB Mass Storage device detected [ 2276.071142][ T1093] usb-storage 3-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 2276.133305][ T1095] usb 4-1: device descriptor read/64, error -71 [ 2276.356917][ T1095] usb usb4-port1: attempt power cycle [ 2276.706675][ T1095] usb 4-1: new full-speed USB device number 92 using dummy_hcd [ 2276.915027][ T1095] usb 4-1: device descriptor read/8, error -71 [ 2277.326608][ T1095] usb 4-1: new full-speed USB device number 93 using dummy_hcd [ 2277.362720][ T1095] usb 4-1: device descriptor read/8, error -71 [ 2277.487361][ T1095] usb usb4-port1: unable to enumerate USB device [ 2277.774661][ T1093] scsi host1: usb-storage 3-1:0.20 [ 2277.791583][ T1093] usb 3-1: USB disconnect, device number 29 [ 2278.446229][ T6671] binder: 6663:6671 ioctl 400c620e 200000000380 returned -22 [ 2278.673907][ T6683] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8911'. [ 2278.703037][ T6683] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8911'. [ 2278.786969][ T6687] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 2279.071262][ T6691] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8917'. [ 2279.196140][ T6698] netlink: 424 bytes leftover after parsing attributes in process `syz.3.8920'. [ 2279.260969][ T6702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2279.277042][ T6702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2279.289771][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 2279.289786][ T30] audit: type=1400 audit(1762755929.343:5402): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=3AA009F5 pid=6693 comm="syz.1.8919" [ 2279.975922][ T30] audit: type=1326 audit(1762755930.023:5403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6715 comm="syz.4.8925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27acb8f6c9 code=0x7ffc0000 [ 2280.006317][ T30] audit: type=1326 audit(1762755930.023:5404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6715 comm="syz.4.8925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27acb8f6c9 code=0x7ffc0000 [ 2280.034781][ T30] audit: type=1326 audit(1762755930.053:5405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6715 comm="syz.4.8925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f27acb8f6c9 code=0x7ffc0000 [ 2280.115308][ T30] audit: type=1326 audit(1762755930.053:5406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6715 comm="syz.4.8925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27acb8f6c9 code=0x7ffc0000 [ 2280.143458][ T30] audit: type=1326 audit(1762755930.053:5407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6715 comm="syz.4.8925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27acb8f6c9 code=0x7ffc0000 [ 2280.167109][T26260] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 2280.188050][ T30] audit: type=1326 audit(1762755930.053:5408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6715 comm="syz.4.8925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f27acb8f6c9 code=0x7ffc0000 [ 2280.210945][ T30] audit: type=1326 audit(1762755930.053:5409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6715 comm="syz.4.8925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27acb8f6c9 code=0x7ffc0000 [ 2280.234343][ T30] audit: type=1326 audit(1762755930.053:5410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6715 comm="syz.4.8925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27acb8f6c9 code=0x7ffc0000 [ 2280.257855][ T30] audit: type=1326 audit(1762755930.053:5411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6715 comm="syz.4.8925" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f27acb8f6c9 code=0x7ffc0000 [ 2280.339011][T26260] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2280.351642][T26260] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 2280.361344][T26260] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2280.371504][T26260] usb 4-1: Product: syz [ 2280.375941][T26260] usb 4-1: Manufacturer: syz [ 2280.380810][T26260] usb 4-1: SerialNumber: syz [ 2280.397397][T26260] usb 4-1: config 0 descriptor?? [ 2280.426675][T15376] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 2280.530427][ T1093] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 2280.609962][T15376] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 2280.631135][T15376] usb 6-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 2280.659311][T15376] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2280.710121][T15376] usb 6-1: config 0 descriptor?? [ 2280.716549][ T1093] usb 5-1: Using ep0 maxpacket: 16 [ 2280.724283][ T6719] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 2280.745895][ T1093] usb 5-1: New USB device found, idVendor=04dd, idProduct=8002, bcdDevice=fc.b6 [ 2280.755846][ T1093] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2280.767843][ T1093] usb 5-1: Product: syz [ 2280.774273][ T1093] usb 5-1: Manufacturer: syz [ 2280.779181][ T1093] usb 5-1: SerialNumber: syz [ 2280.917512][ T1093] usb 5-1: config 0 descriptor?? [ 2280.969871][ T1093] safe_serial 5-1:0.0: safe_serial converter detected [ 2280.983377][ T1093] usb 5-1: safe_serial converter now attached to ttyUSB0 [ 2281.257766][T15376] belkin 0003:050D:3201.0042: item fetching failed at offset 2/3 [ 2281.273919][T15376] belkin 0003:050D:3201.0042: parse failed [ 2281.307124][T15376] belkin 0003:050D:3201.0042: probe with driver belkin failed with error -22 [ 2281.331509][T26260] usb 5-1: USB disconnect, device number 108 [ 2281.342953][T26260] safe_serial ttyUSB0: safe_serial converter now disconnected from ttyUSB0 [ 2281.403898][T26260] safe_serial 5-1:0.0: device disconnected [ 2282.113327][ T6739] netlink: 'syz.4.8933': attribute type 1 has an invalid length. [ 2282.142091][ T6739] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2282.477948][ T6753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8938'. [ 2282.838917][T26260] usb 4-1: USB disconnect, device number 94 [ 2283.022090][ T1093] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 2283.068184][T30576] usb 6-1: USB disconnect, device number 10 [ 2283.255156][ T1093] usb 3-1: Using ep0 maxpacket: 16 [ 2283.274409][ T1093] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2283.283160][T15376] usb 5-1: new full-speed USB device number 109 using dummy_hcd [ 2283.291283][ T1093] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2283.320993][ T1093] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2283.336760][ T1093] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2283.346167][ T1093] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2283.356576][ T1093] usb 3-1: Product: syz [ 2283.360762][ T1093] usb 3-1: Manufacturer: syz [ 2283.365395][ T1093] usb 3-1: SerialNumber: syz [ 2283.371162][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.377599][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2283.390533][T26260] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 2283.466578][T15376] usb 5-1: config 0 has an invalid interface number: 20 but max is 0 [ 2283.476271][T15376] usb 5-1: config 0 has no interface number 0 [ 2283.497315][T15376] usb 5-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 2283.626692][ T1095] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 2283.643642][ T6764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2283.653749][ T6764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2283.750040][T26260] usb 4-1: Using ep0 maxpacket: 16 [ 2283.817774][T15376] usb 5-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 2283.831624][T26260] usb 4-1: New USB device found, idVendor=04dd, idProduct=8002, bcdDevice=fc.b6 [ 2283.848441][T15376] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2283.866620][T26260] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2283.867597][ T1093] usb 3-1: 0:2 : does not exist [ 2283.874662][T26260] usb 4-1: Product: syz [ 2283.874682][T26260] usb 4-1: Manufacturer: syz [ 2283.874695][T26260] usb 4-1: SerialNumber: syz [ 2283.902212][T15376] usb 5-1: Product: syz [ 2283.918836][T15376] usb 5-1: Manufacturer: syz [ 2283.926324][T15376] usb 5-1: SerialNumber: syz [ 2283.940208][T15376] usb 5-1: config 0 descriptor?? [ 2283.967757][ T6765] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 2283.978903][T26260] usb 4-1: config 0 descriptor?? [ 2283.985771][T15376] usb-storage 5-1:0.20: USB Mass Storage device detected [ 2283.987816][ T1095] usb 6-1: no configurations [ 2283.998593][ T1095] usb 6-1: can't read configurations, error -22 [ 2284.012333][T26260] safe_serial 4-1:0.0: safe_serial converter detected [ 2284.033026][T26260] usb 4-1: safe_serial converter now attached to ttyUSB0 [ 2284.073678][T15376] usb-storage 5-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 2284.176923][ T1095] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 2284.354424][T26260] usb 4-1: USB disconnect, device number 95 [ 2284.380732][T26260] safe_serial ttyUSB0: safe_serial converter now disconnected from ttyUSB0 [ 2284.420348][T26260] safe_serial 4-1:0.0: device disconnected [ 2284.529401][ T1093] usb 3-1: 1:0: failed to get current value for ch 0 (-22) [ 2284.599745][ T1095] usb 6-1: no configurations [ 2284.606012][ T1095] usb 6-1: can't read configurations, error -22 [ 2284.649582][ T1095] usb usb6-port1: attempt power cycle [ 2284.691520][ T1093] usb 3-1: USB disconnect, device number 30 [ 2285.016584][ T1095] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 2285.098401][ T1095] usb 6-1: no configurations [ 2285.103032][ T1095] usb 6-1: can't read configurations, error -22 [ 2285.140320][ T6786] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8949'. [ 2285.211439][ T6789] FAULT_INJECTION: forcing a failure. [ 2285.211439][ T6789] name failslab, interval 1, probability 0, space 0, times 0 [ 2285.224731][ T6789] CPU: 1 UID: 0 PID: 6789 Comm: syz.3.8948 Not tainted syzkaller #0 PREEMPT(full) [ 2285.224747][ T6789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2285.224754][ T6789] Call Trace: [ 2285.224759][ T6789] [ 2285.224764][ T6789] dump_stack_lvl+0x189/0x250 [ 2285.224781][ T6789] ? __pfx____ratelimit+0x10/0x10 [ 2285.224795][ T6789] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2285.224807][ T6789] ? __pfx__printk+0x10/0x10 [ 2285.224820][ T6789] ? __pfx___might_resched+0x10/0x10 [ 2285.224831][ T6789] ? fs_reclaim_acquire+0x7d/0x100 [ 2285.224851][ T6789] should_fail_ex+0x414/0x560 [ 2285.224870][ T6789] should_failslab+0xa8/0x100 [ 2285.224882][ T6789] kmem_cache_alloc_node_noprof+0x77/0x710 [ 2285.224896][ T6789] ? __alloc_skb+0x112/0x2d0 [ 2285.224905][ T6789] ? netlink_autobind+0xdb/0x300 [ 2285.224917][ T6789] __alloc_skb+0x112/0x2d0 [ 2285.224929][ T6789] netlink_sendmsg+0x5c6/0xb30 [ 2285.224943][ T6789] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2285.224954][ T6789] ? aa_sock_msg_perm+0xf1/0x1d0 [ 2285.224969][ T6789] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 2285.224979][ T6789] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2285.224988][ T6789] __sock_sendmsg+0x21c/0x270 [ 2285.225003][ T6789] ____sys_sendmsg+0x505/0x830 [ 2285.225017][ T6789] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2285.225031][ T6789] ? import_iovec+0x74/0xa0 [ 2285.225045][ T6789] ___sys_sendmsg+0x21f/0x2a0 [ 2285.225057][ T6789] ? __pfx____sys_sendmsg+0x10/0x10 [ 2285.225084][ T6789] ? __fget_files+0x2a/0x420 [ 2285.225093][ T6789] ? __fget_files+0x3a0/0x420 [ 2285.225113][ T6789] __x64_sys_sendmsg+0x19b/0x260 [ 2285.225125][ T6789] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 2285.225140][ T6789] ? __pfx_ksys_write+0x10/0x10 [ 2285.225155][ T6789] ? do_syscall_64+0xbe/0xfa0 [ 2285.225170][ T6789] do_syscall_64+0xfa/0xfa0 [ 2285.225184][ T6789] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2285.225193][ T6789] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2285.225202][ T6789] ? clear_bhb_loop+0x60/0xb0 [ 2285.225214][ T6789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2285.225224][ T6789] RIP: 0033:0x7f2c59d8f6c9 [ 2285.225235][ T6789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2285.225243][ T6789] RSP: 002b:00007f2c5ace7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2285.225255][ T6789] RAX: ffffffffffffffda RBX: 00007f2c59fe5fa0 RCX: 00007f2c59d8f6c9 [ 2285.225262][ T6789] RDX: 0000000000040000 RSI: 00002000000006c0 RDI: 0000000000000004 [ 2285.225268][ T6789] RBP: 00007f2c5ace7090 R08: 0000000000000000 R09: 0000000000000000 [ 2285.225274][ T6789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2285.225280][ T6789] R13: 00007f2c59fe6038 R14: 00007f2c59fe5fa0 R15: 00007f2c5a10fa28 [ 2285.225296][ T6789] [ 2285.496527][ T1095] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 2285.527890][ T1095] usb 6-1: no configurations [ 2285.546876][ T1095] usb 6-1: can't read configurations, error -22 [ 2285.553759][ T1095] usb usb6-port1: unable to enumerate USB device [ 2285.654267][T15376] scsi host1: usb-storage 5-1:0.20 [ 2285.681802][T15376] usb 5-1: USB disconnect, device number 109 [ 2286.042508][ T6805] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8956'. [ 2286.400932][ T1095] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 2287.327372][ T1095] usb 4-1: Using ep0 maxpacket: 32 [ 2287.603239][ T1095] usb 4-1: config 0 has an invalid interface number: 217 but max is 0 [ 2287.624244][ T1095] usb 4-1: config 0 has no interface number 0 [ 2287.956753][ T1093] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 2288.089580][ T1095] usb 4-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 2288.306593][ T1095] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2288.322229][ T1093] usb 3-1: config 0 has an invalid interface number: 20 but max is 0 [ 2288.358151][ T1093] usb 3-1: config 0 has no interface number 0 [ 2288.370265][ T1095] usb 4-1: Product: syz [ 2288.521094][ T1095] usb 4-1: Manufacturer: syz [ 2288.525737][ T1095] usb 4-1: SerialNumber: syz [ 2288.530468][ T1093] usb 3-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 2288.624019][ T1095] usb 4-1: config 0 descriptor?? [ 2288.651249][ T1093] usb 3-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 2288.681107][ T1095] ftdi_sio 4-1:0.217: FTDI USB Serial Device converter detected [ 2288.701233][ T1093] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2288.732836][ T1095] usb 4-1: Detected SIO [ 2288.760452][ T1093] usb 3-1: Product: syz [ 2288.789136][ T1093] usb 3-1: Manufacturer: syz [ 2288.793764][ T1093] usb 3-1: SerialNumber: syz [ 2288.806695][ T1095] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 2288.878282][ T6846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8961'. [ 2288.909865][ T1093] usb 3-1: config 0 descriptor?? [ 2288.945960][ T6823] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 2288.962077][ T1093] usb-storage 3-1:0.20: USB Mass Storage device detected [ 2289.150173][ T6850] Set syz0 is full, maxelem 0 reached [ 2289.199103][ T1093] usb-storage 3-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 2289.405244][T15376] usb 4-1: USB disconnect, device number 96 [ 2289.428896][T15376] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 2289.485617][T15376] ftdi_sio 4-1:0.217: device disconnected [ 2289.864263][ T6869] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2289.894640][ T6870] vim2m vim2m.0: vidioc_s_fmt queue busy [ 2290.466592][ T1095] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 2290.530959][ T1093] scsi host1: usb-storage 3-1:0.20 [ 2290.546006][ T1093] usb 3-1: USB disconnect, device number 31 [ 2290.648282][ T1095] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 2290.657730][ T1095] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 2290.679263][ T1095] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 2290.691198][ T1095] usb 6-1: config 1 interface 0 has no altsetting 0 [ 2290.745811][ T1095] usb 6-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 2290.755241][ T1095] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2290.901959][ T1095] ums-sddr09 6-1:1.0: USB Mass Storage device detected [ 2291.099246][T26260] usb 4-1: new full-speed USB device number 97 using dummy_hcd [ 2291.175532][ T1095] scsi host1: usb-storage 6-1:1.0 [ 2291.317776][T26260] usb 4-1: no configurations [ 2291.323491][T26260] usb 4-1: can't read configurations, error -22 [ 2291.355256][ T1095] usb 6-1: USB disconnect, device number 15 [ 2291.459701][T26260] usb 4-1: new full-speed USB device number 98 using dummy_hcd [ 2291.637731][T26260] usb 4-1: no configurations [ 2291.642462][T26260] usb 4-1: can't read configurations, error -22 [ 2291.649548][T26260] usb usb4-port1: attempt power cycle [ 2291.996543][T26260] usb 4-1: new full-speed USB device number 99 using dummy_hcd [ 2292.018401][T26260] usb 4-1: no configurations [ 2292.023022][T26260] usb 4-1: can't read configurations, error -22 [ 2292.156716][T26260] usb 4-1: new full-speed USB device number 100 using dummy_hcd [ 2292.181330][T26260] usb 4-1: no configurations [ 2292.185989][T26260] usb 4-1: can't read configurations, error -22 [ 2292.192876][T26260] usb usb4-port1: unable to enumerate USB device [ 2344.792039][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.798535][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2390.866705][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 2406.229078][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 2406.235402][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 2443.996692][ T31] INFO: task kworker/1:5:26261 blocked for more than 143 seconds. [ 2444.004966][ T31] Not tainted syzkaller #0 [ 2444.010067][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2444.018827][ T31] task:kworker/1:5 state:D stack:22152 pid:26261 tgid:26261 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 2444.030897][ T31] Workqueue: usb_hub_wq hub_event [ 2444.035949][ T31] Call Trace: [ 2444.039356][ T31] [ 2444.042305][ T31] __schedule+0x1798/0x4cc0 [ 2444.046989][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2444.052373][ T31] ? __pfx___schedule+0x10/0x10 [ 2444.057480][ T31] ? schedule+0x91/0x360 [ 2444.061786][ T31] schedule+0x165/0x360 [ 2444.065934][ T31] usb_kill_urb+0x1be/0x2d0 [ 2444.070510][ T31] ? __pfx_usb_kill_urb+0x10/0x10 [ 2444.075551][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2444.081798][ T31] usb_start_wait_urb+0x18c/0x4c0 [ 2444.087147][ T31] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 2444.092694][ T31] ? usb_alloc_urb+0x46/0x150 [ 2444.097475][ T31] usb_control_msg+0x232/0x3e0 [ 2444.102765][ T31] hub_port_init+0xbf9/0x2800 [ 2444.107643][ T31] hub_event+0x2532/0x4a20 [ 2444.112087][ T31] ? __pfx_hub_event+0x10/0x10 [ 2444.116961][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2444.122693][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2444.128016][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2444.133738][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2444.139506][ T31] process_scheduled_works+0xae1/0x17b0 [ 2444.145071][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 2444.151515][ T31] worker_thread+0x8a0/0xda0 [ 2444.156128][ T31] kthread+0x711/0x8a0 [ 2444.160305][ T31] ? __pfx_worker_thread+0x10/0x10 [ 2444.165418][ T31] ? __pfx_kthread+0x10/0x10 [ 2444.170115][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2444.175317][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2444.180609][ T31] ? __pfx_kthread+0x10/0x10 [ 2444.185206][ T31] ret_from_fork+0x4bc/0x870 [ 2444.189835][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2444.194953][ T31] ? __switch_to_asm+0x39/0x70 [ 2444.200018][ T31] ? __switch_to_asm+0x33/0x70 [ 2444.205829][ T31] ? __pfx_kthread+0x10/0x10 [ 2444.210559][ T31] ret_from_fork_asm+0x1a/0x30 [ 2444.215341][ T31] [ 2444.218494][ T31] [ 2444.218494][ T31] Showing all locks held in the system: [ 2444.226203][ T31] 1 lock held by khungtaskd/31: [ 2444.231079][ T31] #0: ffffffff8df3d6a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2444.240999][ T31] 7 locks held by kworker/u8:2/36: [ 2444.246137][ T31] 2 locks held by getty/5591: [ 2444.250881][ T31] #0: ffff88802fc130a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2444.260850][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 2444.271127][ T31] 5 locks held by kworker/1:5/26261: [ 2444.276511][ T31] #0: ffff88801d6f2d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2444.287903][ T31] #1: ffffc9000ba87ba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2444.299825][ T31] #2: ffff8881463a9198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 2444.310445][ T31] #3: ffff8881463d7518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20 [ 2444.320450][ T31] #4: ffff888145fea868 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20 [ 2444.330173][ T31] [ 2444.332485][ T31] ============================================= [ 2444.332485][ T31] [ 2444.340941][ T31] NMI backtrace for cpu 0 [ 2444.340955][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 2444.340972][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2444.340981][ T31] Call Trace: [ 2444.340987][ T31] [ 2444.340994][ T31] dump_stack_lvl+0x189/0x250 [ 2444.341021][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2444.341042][ T31] ? __pfx__printk+0x10/0x10 [ 2444.341068][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 2444.341089][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2444.341107][ T31] ? __pfx__printk+0x10/0x10 [ 2444.341127][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2444.341150][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 2444.341171][ T31] watchdog+0xf60/0xfa0 [ 2444.341193][ T31] ? watchdog+0x1e2/0xfa0 [ 2444.341214][ T31] kthread+0x711/0x8a0 [ 2444.341238][ T31] ? __pfx_watchdog+0x10/0x10 [ 2444.341263][ T31] ? __pfx_kthread+0x10/0x10 [ 2444.341285][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2444.341308][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2444.341328][ T31] ? __pfx_kthread+0x10/0x10 [ 2444.341350][ T31] ret_from_fork+0x4bc/0x870 [ 2444.341371][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2444.341394][ T31] ? __switch_to_asm+0x39/0x70 [ 2444.341407][ T31] ? __switch_to_asm+0x33/0x70 [ 2444.341421][ T31] ? __pfx_kthread+0x10/0x10 [ 2444.341444][ T31] ret_from_fork_asm+0x1a/0x30 [ 2444.341477][ T31] [ 2444.341485][ T31] Sending NMI from CPU 0 to CPUs 1: [ 2444.487527][ C1] NMI backtrace for cpu 1 [ 2444.487544][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 2444.487561][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2444.487571][ C1] RIP: 0010:__lock_acquire+0xa4f/0xd20 [ 2444.487591][ C1] Code: e5 ff 90 0f 0b 90 90 90 31 c0 48 8b 3c 24 48 83 78 40 00 0f 84 8c 02 00 00 41 8b 46 20 25 ff 1f 00 00 48 0f a3 05 21 94 d8 11 <73> 10 48 69 c0 c8 00 00 00 48 8d 80 30 03 17 93 eb 40 83 3d a8 23 [ 2444.487604][ C1] RSP: 0018:ffffc90000a089f8 EFLAGS: 00000007 [ 2444.487618][ C1] RAX: 0000000000000041 RBX: 0000000000000000 RCX: 00000000eb5df1df [ 2444.487629][ C1] RDX: 000000000010d27d RSI: 00000000d2d1c166 RDI: ffff88801ca85ac0 [ 2444.487640][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffff818ffe7d [ 2444.487650][ C1] R10: dffffc0000000000 R11: fffffbfff1ef9c6f R12: 0000000000000042 [ 2444.487661][ C1] R13: ffff88801ca865f0 R14: ffff88801ca865f0 R15: a5a4f564eb5df1df [ 2444.487673][ C1] FS: 0000000000000000(0000) GS:ffff88812623b000(0000) knlGS:0000000000000000 [ 2444.487686][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2444.487696][ C1] CR2: 0000561fcf928660 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 2444.487710][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2444.487719][ C1] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2444.487729][ C1] Call Trace: [ 2444.487736][ C1] [ 2444.487747][ C1] ? raw_spin_rq_lock_nested+0xad/0x140 [ 2444.487762][ C1] lock_acquire+0x120/0x360 [ 2444.487775][ C1] ? raw_spin_rq_lock_nested+0xad/0x140 [ 2444.487792][ C1] ? __lock_acquire+0xab9/0xd20 [ 2444.487808][ C1] _raw_spin_lock_nested+0x32/0x50 [ 2444.487827][ C1] ? raw_spin_rq_lock_nested+0xad/0x140 [ 2444.487841][ C1] raw_spin_rq_lock_nested+0xad/0x140 [ 2444.487858][ C1] sched_balance_update_blocked_averages+0xfa/0x1580 [ 2444.487875][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 2444.487896][ C1] ? __lock_acquire+0xab9/0xd20 [ 2444.487910][ C1] ? __pfx_sched_balance_update_blocked_averages+0x10/0x10 [ 2444.487927][ C1] ? ktime_get+0x45/0x200 [ 2444.487946][ C1] _nohz_idle_balance+0x345/0x810 [ 2444.487962][ C1] ? sched_clock+0x3f/0x60 [ 2444.487985][ C1] ? __pfx__nohz_idle_balance+0x10/0x10 [ 2444.488005][ C1] ? sched_balance_softirq+0x13/0x1a0 [ 2444.488024][ C1] handle_softirqs+0x286/0x870 [ 2444.488041][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 2444.488058][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 2444.488073][ C1] ? sched_clock_cpu+0x74/0x430 [ 2444.488089][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 2444.488108][ C1] __irq_exit_rcu+0xca/0x1f0 [ 2444.488122][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 2444.488139][ C1] ? rcu_is_watching+0x15/0xb0 [ 2444.488156][ C1] irq_exit_rcu+0x9/0x30 [ 2444.488169][ C1] sysvec_call_function_single+0xa3/0xc0 [ 2444.488188][ C1] [ 2444.488194][ C1] [ 2444.488200][ C1] asm_sysvec_call_function_single+0x1a/0x20 [ 2444.488217][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 2444.488235][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 d1 21 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 2444.488263][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 2444.488276][ C1] RAX: 2d66a3817c1c2100 RBX: ffffffff81968b47 RCX: 2d66a3817c1c2100 [ 2444.488287][ C1] RDX: 0000000000000001 RSI: ffffffff8d70db74 RDI: ffffffff8bbf0760 [ 2444.488298][ C1] RBP: ffffc90000197f10 R08: ffff8880b8932fdb R09: 1ffff110171265fb [ 2444.488310][ C1] R10: dffffc0000000000 R11: ffffed10171265fc R12: ffffffff8f7ce370 [ 2444.488321][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003950b58 [ 2444.488333][ C1] ? do_idle+0x1e7/0x510 [ 2444.488351][ C1] default_idle+0x13/0x20 [ 2444.488365][ C1] default_idle_call+0x73/0xb0 [ 2444.488379][ C1] do_idle+0x1e7/0x510 [ 2444.488396][ C1] ? __pfx_do_idle+0x10/0x10 [ 2444.488416][ C1] cpu_startup_entry+0x44/0x60 [ 2444.488431][ C1] start_secondary+0x101/0x110 [ 2444.488451][ C1] common_startup_64+0x13e/0x147 [ 2444.488474][ C1]