last executing test programs: 7.37231997s ago: executing program 0 (id=4682): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) 7.065126826s ago: executing program 0 (id=4686): r0 = socket$inet(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x6, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) writev(r6, &(0x7f0000000940), 0x0) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r7, 0x4004ae99, &(0x7f00000001c0)=0x3) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r8, &(0x7f0000002400)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x10001, @loopback, 0x9}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000300)="756d1604a67f07537f7262ca20063008223b0c5690583dd5423fb3f579902284dbefa831ca9f649db51946b01cb6701176c2355e172c54298a83951fd8641139f82c5954175915eb7b95b4440694423e41cf0af3b1dac3873b36b7", 0x5b}], 0x1, &(0x7f00000024c0)=ANY=[@ANYBLOB="1400000000000000290000003e0000000100000000000000300000000000000029000000040000008702000000000000c9100000000000eeff00000000000000000105020008000014000000000000002900000043000000f8db000000000000280000000000000029000000390000000002020900000000000000000000001d682272c000000000203100000000"], 0x88}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000840)="2cb13cbc11b45ea6e1c6ea1d46eb11be52eff2af60cfd8839f7b6442eb13ebe402f92f36166d87f502c3949f12155b19d024e6ef2aff23526e3f84d8f50e6db73a808f7b43048ee4207171ca1c323900b1097589bd7c35b92374ddbcddc253cbd17f8bf58b3cc3af6725c071bc661675ff4c775697ec998ec757eeca3514ac217de69ccf13e332388ec5fd45b0f139b74e94253b0c984f7b06fb09b8906df3bb79ee18df990267f9a510f1", 0xab}, {&(0x7f0000000900)="31b9122c2eeaad4513b863ca3b80f82acf704c183c7b42117f5af737a27bf9d480fec7969d7ecf685bc3b4b2318671f16a51ae90eada49207329ecee47331fbdc4c84c408e86557234f854d63d90ff8a88175739062eedc6e09aab63ad86cb16383b6cb46f1ebac49f422991b58f98692450bde797b0b634845ade70980674c8e59acb3ca36a25d0b559d766561ff53aa6e39eb29739eb6d82", 0x99}, {&(0x7f00000009c0)="2195e73fe11ee2f83c1672a005e42940e23c5047cc907af118a7e83f6eb85b5844ab29082ede4f0cec0a267a7e46a2562e600e9657986a215909727a329aa364f6d597259235fe1f40164772f496900af597c024a61147333a76959e41e73ba33e4d693cbcd76c383c4c1027e246a885ab4042a6dbe7b107e6a7f4c1f6c12a5a696446a0822ae6b92e4022c119d2da6a9a6d9cff04882103a3f40f28a63006f36527ff0114ee2c9e391ca5e98411de0534f750d62ed63f0e76", 0xb9}, {&(0x7f0000000a80)="c65e82d86b5c68649cc21083935a4546dccc154018f28d6058767c3bbf63d09488277e604901fafab136df0dfdffbdf73ebf07542ef38256f2df77c475334fa2b3330cb1c7181650e216e5e4734bdee2064975a257cbc916ea0ed01eb54dcad047e6aa135d282861051e806ca07876c0c30e34bf9b2fbe14ec31d87e420377ad6f80", 0x82}, {&(0x7f0000000b40)="407669b028bc5110830896cca1d9283cece404ddcdb58d9a841bd656140702d512caf924581abcbdf7f3ca58655b19601b10bc078d57f72ec789d3d6496c69f768a7591cdb33295d7e938e50be1819249e79f2c200118389422455faa797d7b04a5fd5b6531c463eaf8c5fa3ad2b0fabf694f2bc8ddc457dd31e0de22921d03f0f91819041026df92431b13a2928bd58648738d5e9db4dffd56cc4a1d403b8bc11c60d5e200d1aba8ecb2b573cd9afe6baf2644c60c7cae7461f30202bad4e874eb1471e3f20064bcba5839b080a4941c6a39e683a4fec126011bf7cb2ad222823e1015257c3", 0xe6}, {&(0x7f0000000c40)="57adfb1ba17ecdc610f8a4afb76d7be968d42c0746e76156ea7b1c4d", 0x1c}], 0x6, &(0x7f0000000d00)}}, {{&(0x7f0000000d40)={0xa, 0x4e24, 0xd3, @local, 0x6}, 0x1c, &(0x7f0000002340)=[{&(0x7f0000000d80)="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", 0xf00}, {&(0x7f0000001d80)="d9d76fc5ed020d14daf16e666402dbb34f05b4293387ef500b7cb520f6793263dd5369b0f4cb8e6c7926cc9c87cc554a87eba5b7601a88ac1f573a5b982e5b45c7fe50ea5a", 0x45}, {&(0x7f0000001e40)="be73b1adabf81e11053abd04faa65d584eb03391f69032035298178735ce2cad57b5290067243fe92d944a6c97f600de029e94469d3172b9db1e9edf7da4cf09e7757b1146", 0x45}, {&(0x7f0000001ec0)}, {&(0x7f0000001fc0)="6831d9f619d45c9031160ad3d489f5516c785212fcad7436bed3d1db37d32372ff276339e825f3ad2ccf35c60d983d0250d5af37656cbf19b559289025646ab907f142275cb5c447187a5753e6884b45e778547b619cc5b96bd566a84af776a6d3029647518b9da5216d7a9c677be98c3e9eda7262ea5d78d6832221919d7975858dfbb18bada33f8226defd1e47e8044d22bbd9db615ee3af770db11eda97", 0x9f}, {&(0x7f0000002080)="bd125cd87d153cc9d7cf1dd23621d5b8b13ae183cf743c9ce235438e65c1e472", 0x20}, {&(0x7f0000002140)="5e524fd284594b99fa79db342eca2bb6a8aec42644e5d6ea95d0ebcc3ed56f831192e360a823606bf763504cb9acc0a8ac9939e5b548f7515c1de88601a7eb9d521f4145c57bf310a839f72c24b0854629741b76dde90bc363d259ed04a50e944057b2ed530491a7e4fadab338994c6025d0754ace849582530f0213c7f4534a5c6094c3f7c6afb3e62e75e6b37de94b8d8cbab5ad3592ca7d5052ed548eb29de5ada56a3206358290490a2c11d3b6a03dcb5f65dba61e06688c89535038f302b43ae1cff638b4ae06b7e9f1a48f132f4c", 0xd1}, {&(0x7f0000002240)="f1d5900257c36a8d791446172cc56975ba6f34e76d6ff7050bfeef1b75e318d481fe0097c029228f37de327916cd2015ca9af608aced8dd1aaa1625be3c36eab74cc117ff4dd7e17d5381026a26d9f3b894e6a68e406e2bfd498e0096019c623a88823d42dcac546ad684c026bbfac61ccadec4eff90d57b7593a48bb998d877a084dff7cafd00e858699b7342d916d230b610fe2922cab3a6d143a8879c8a69fd67feb033dcc9bfb0cbded8668cf6e04a479a287c6a1bdadb95a2480c1872284c79", 0xc2}], 0x8}}], 0x3, 0x24000809) madvise(&(0x7f000023f000/0x2000)=nil, 0x2000, 0x13) setsockopt(r8, 0x84, 0x7f, &(0x7f0000000040)="020000000d80ffff", 0x8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r7, 0xae80, 0x0) sched_setattr(0x0, 0x0, 0x0) listen(r0, 0x9) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x9}, &(0x7f0000000140)=0xc) accept4(r0, &(0x7f0000000280)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000200)=0x80, 0x800) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 5.826420033s ago: executing program 0 (id=4689): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, r0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(r3, 0xc0403d11, 0x0) recvmmsg$unix(r2, &(0x7f0000001e00), 0x0, 0x1, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) write$tun(r5, &(0x7f0000002ac0)=ANY=[@ANYBLOB="0000001801040700ff00c50010"], 0x24e2) r6 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, 0x0, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x4000050, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r7, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r7, 0x0) sendto$unix(r7, 0x0, 0x0, 0x40000, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000003c40)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000600)="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", 0xfa0}, {0x0}], 0x2, 0x0, 0x0, 0x1}], 0x1, 0x40800) 3.975216086s ago: executing program 0 (id=4695): socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket(0x2000000000000021, 0x2, 0x10000000000002) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, 0x0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000a00)={'syz1\x00', {0x6ec9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x2, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0x4, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x3, 0xba55, 0x1000, 0x2, 0x200, 0x2, 0x400008, 0xe, 0x4, 0x2, 0x0, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x5, 0x40, 0x9, 0x7, 0x5], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0x1c32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x800, 0xffff, 0x6, 0x96, 0xfffffffd, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x3], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0xffffffff, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x9, 0x2, 0x20000005, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x95a, 0xffffffff, 0x4, 0x3, 0x6, 0x100fffd, 0x2005, 0x7, 0x4, 0xea, 0x9, 0x5, 0x2, 0xd9, 0x0, 0x7ff, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x3, 0x88, 0x2, 0x6, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x800, 0x2, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e0, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x40, 0x7, 0x2, 0x4, 0x4, 0x10, 0x0, 0x0, 0x7fff, 0x1, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) readv(r3, &(0x7f0000001900)=[{0x0, 0xea}], 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x4) lchown(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) keyctl$set_reqkey_keyring(0x10, 0xfffffff8) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) utimes(&(0x7f0000000140)='./cgroup\x00', 0x0) r6 = inotify_init() inotify_add_watch(r6, &(0x7f0000000240)='.\x00', 0x5) 3.106214365s ago: executing program 1 (id=4703): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000002c0)={0x0, 0x7}, 0x8) (async) getdents(r0, &(0x7f0000000280)=""/71, 0x47) (async) syz_usb_connect$uac1(0x3, 0x71, &(0x7f0000000780)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x8, 0x20, 0x3b, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3ff, 0xb}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0xfc, 0x9, 0x3, {0x7, 0x25, 0x1, 0x2, 0x9, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x5, 0x2, 0xfd, {0x7, 0x25, 0x1, 0x0, 0x7f, 0xb61}}}}}}}]}}, &(0x7f0000000600)={0x0, 0x0, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="050f10020865070000001000"]}) 2.497997297s ago: executing program 4 (id=4704): r0 = socket$inet_udplite(0x2, 0x2, 0x88) (async) r1 = socket(0x10, 0x6, 0x9) (async, rerun: 32) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (rerun: 32) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') shutdown(r2, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="ef47306fcf4a2ac128c5151ccd180a00000004000200"/37], 0x18}}, 0x0) (async) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000840)=ANY=[@ANYBLOB="020000000000000002004e24ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004"], 0x90) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000100)=0x1) 2.327069063s ago: executing program 4 (id=4706): r0 = socket$pppoe(0x18, 0x1, 0x0) sendmsg$sock(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000100)="ba97794055badd20fa967600579fbb96778511f2c2b7ab9b353003761efd7ca696b992ec4dc5edfc3900866121305299c113025f650930c55a16c70884839c1588f33611ddf6bc7d751cf68b966b389287451fbcdb736224645d1a8c68342f03670e73e7fdfc59c6f15dab8e38", 0x6d}, {&(0x7f0000000180)="82112ed18cc92d0b70468d1268b86bb2753f25977b6cb8290796607fc9c0aa4113191dec37d5dbb2e2151ec9b7f28bf3a1f15c8c31671c76ca71ffd4982ab7b1f8b705fda009b2edc0b9ae365fb6d8eaae31f41724385ef5fb2792673e145cdff00cd2ee23df8a622cbf741e3bdb32aaac6e17c49dfde9fe0111c07f6152ef3d7dbe789612031f6f5656b1f7e7bf0667c882c04fe98ba58150097055a07e9e9449e3", 0xa2}, {&(0x7f0000000240)="c7863bf8deae376233b4ced7336b7ab8f92df905078f3e323f9fa75de0743e29816219cf48880fdd7731cce3fd3efbed105ad7306ab4ac89b28902842fb689e4f2b771289f2f312ff14d1301aed66340b1a9fe9e49c52eda923ebf9396e18422ffc58a9f7e389da326362b8378e695198ff7220c0e26780b5f4100de61c1922628c9d65b63cde9d37d2709e3f890f0", 0x8f}, {&(0x7f0000000300)="a7440f85d9574ef55d06d9f0d54449d30f11c765e4c51587adf09627a78a0c81ce38d7cd6c0d94e542a7890c9e29ffc430d72296aabf5fd873f85548f07d7bb34cc1dc65477aabbe25d155418829271e0c890829c65be3ae568345367229f720caa43f4e9463876f8e5d6079ea002c6ad0b08066b6a68ad25a1a43f6beb481f65454a90bc589e730adfb8feded8802e6d6a0426ffedd0ffcd52dfdefe78b343faae80953d898eaf74a6512cc251b4411f1954e508d620120449afd6f0c43c213b1079f9f86d0eb87c49912a1991bec4dde2fa1c0e42c5639d47825832f4910fcfe8b25e05acdf6", 0xe7}, {&(0x7f0000000000)="85d74b9e4a545239d317abfba775c9f314729f89e2a53ef352ee63550c10af4f03b46c64385f4b055f9bed0d87525c6b7ac0eed19e0fc46dbd559ee1e2b80a", 0x3f}, {&(0x7f0000000400)="b370b818f115c6ea352579465b82cd20880be228ccc637a25f6b6aa1ec8d16427fc6582d9561dfa51c39069e5f172de173ef459ee87e89dcc1f11394a60d8943d67cdce4e1835276ae4b3b721dbf51779e235e2166f843e7a4cb0369c367ed311a9e3fe32314c9c7", 0x68}, {&(0x7f0000000480)="91dd1b13548aeb7201e8e861c2d151cd4d7994a59302eaaaa3950099013a979f51bfcd2561b5b1c0c562fb05a4f00b0195692895deffd4cafd0b90b6d701ba85b95ff8048d5a9248e653e6bee0f223cbfe96b4ed64acb0ac2acb461334bdd2ffc2a4f57d81c55bf92184bced7fa15e85aafaf9aa9d57924053cedd22831e55a220125d2666f51e0d36fe95cb8d76804b46e5f34dfee3ed9728af43a55bf8c5180d3b83a5b4824368db24003b3ef595667925bd446047b0d4b9832f93", 0xbc}, {&(0x7f0000000540)="927485e41d0718bbae0072a4e7b8fc6b2e63a538070226bcc255afafe36ea1d778c0853d3530cde3fdaa1cb950bf8342317e19a7cbf0a19de88ff8898eeea704a3766219afdeaf95518ca4ff791042f25fe162335d9b7db2097f8af011271db4ff23d0bfca18bdf90b7547d54f2e64c2072dae20471061e11c9076e261bc4b7bde5bafad1e539380ca1e52b59c7c60e8eb32b5efe5f2155c791e879556bdbd0220a12b93a4d4efe0ef5612d59aeccda8c94928b6c1a39c096debb7d20d7be2a27ec944f868b6e11aa5f25b6d7ca95309dd67b925ffc081e26bec65a055", 0xdd}], 0x8, &(0x7f00000006c0)=[@mark={{0x14, 0x1, 0x24, 0x80}}, @mark={{0x14, 0x1, 0x24, 0xa0}}, @mark={{0x14, 0x1, 0x24, 0x1}}], 0x48}, 0x40000) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x24, @remote, 'bond0\x00'}}, 0x1e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r2, &(0x7f000000e6c0)=[{{&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000b40)=[{&(0x7f0000000800)="e6ee84a595494991bff89014d08ac350f1fd14cdd3183049a5315a02a19599deedf99a4bfd7aa03425ec0097e533c0038388b9c906874ee5a1c29ddf38f1d363ee321b7de31d1c7ac84ec84370dd885e6107e858280f8a4f9a36d127a6be9a848457acd6d5836cf989174d1877555dcecfe6bd77fe86e337e8f1d9d6688aab18b18312457d64d9c33c5fbeb25953c9c8bfd3248048d385cb4fd4ad6f232cf41eb5dcc708e1d228b12a05cb41204d4ded1c770277b844bf47052917d787762a7e25f0cf", 0xc3}, {&(0x7f0000000900)="18a1009feaee8ea77987198ed15fb65411caa27f1c1edde36bed7bcb68c8fd466791ca062559272c09611feffb21991b4a75ae4945470f04cf3d49e4e951a1cbec852a74218073ea5308368b", 0x4c}, {&(0x7f0000000980)="0177ad36f800933b8d4d1800a1e0826eaa91f1cee2668bd0849244faa64a59ce40ab1e4dccb8f038831c4ffb0d17a7710a2bc548ba727b8ece425f08eeac2cbfd57cfddcfcac64c122e707e952181075dc0ead205900eae59fca0fcb5aa6db3b978b99a8a95e5e7a5872ee44b24879c279643fe795102c69e855ca6b66208ea566500c782c45b1c8b6cce84f5529e23e4af327f7e378815f041b4b318b76b4d6899c", 0xa2}, {&(0x7f0000000a40)="c76ede29ba38a5ee847d595bc3898cfd92cdb9a11b1cda936c79ad462a7f5b259faa70701365edb9e48019830e318aadf69867d1ce01a14fee68f2eccc78df8b6116acf4c3c4761707e15b37267ae2e87929303a5ae2e91f03e0c822b92e49b30dabecc4054c0e08ccaa0325be037d56f1f667015ad5da6da662d2f23a147173884f2c56808103de4ad03dcbc9381f34940bebbb49d1a52b38050083b0bbc9c115a1209691294e8c94417508663cf66d117def8472d805fd1feb28a626b4df7a5ba27f7f7db70966a5a355dbcbb086a84144923a5bf577fe7b4e00105f06028474", 0xe1}], 0x4, &(0x7f0000000bc0)=[@rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [r2, r0, r0, 0xffffffffffffffff, r1]}}], 0x38, 0x1}}, {{&(0x7f0000000c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001040)=[{&(0x7f0000000cc0)="83af33b695f768f1161680362ed580e60130133f061c1a9b9b230a535994b1a9907565bcb657365e46f8ae85a9df4fcec9f2801875f55ff77f57c067a18a8e7be9a3962596c6fe7aaece688c2663197d82783beb014ed3589a32ae96bb0428bc4efa43d184de1eeff697cb47ede7bb16bbf2a6879a96045157", 0x79}, {&(0x7f0000000d40)="c6523e7f", 0x4}, {&(0x7f0000000d80)="42c1cef3c2e0", 0x6}, {&(0x7f0000000dc0)="7e308de0b45314c8d10d8a56cbd6ab40eb974317bfdc8de74811cae0bbee475d734668eb93eb5fda6689622e3ac7dc4bf350977af048414c348553d6ee0f5ebc066c8488bee40589afe4e0e038ceafcc7eb761d56341944f17106b5532b6ea9616824052568d9f0e7d78a50496945ffe73032700da27d9f3570f66f34dc59ca5b169a8b8ed5e4f43bef833737a466728b124331d62c7c586357275e7592901054cfa135041fa9c3a42cefa0f4f6639645dc59966c8f07f6860ee4646281947d32cacb233fcd1815c5c5eb5fc7542a7df4d33294d7f99e426cda25738", 0xdc}, {&(0x7f0000000ec0)="240dfec5929c70c366fadcf3691b01976aa8744fc7c368c8679b208a99c8ccafa60e788574f816fc1c709ff44b5ec34b8435639ca72d458c2660431e6580d6f97bdd3f3e2115769327b485dabe3150b9e4a9f041405047a587789b8e600b9ea8edc2ba512a98c0a9e2cec041d3a7a9fe21f39adcbe2082af30525107badea2a6df730a92a959f8eaec1a0d0769243a88d307cdc4545bc109ff5ea4ae1c5a4082b9b02dcc5b62a874dddffdecbc4359eeebde9b1e933b0a53699ab2021c924a4c265b8c8177509fdccdb6871a46e7eaf36250b74638bd1f51478c5b5a470efda73f793b5fbc6523c4662be9237f549339a4", 0xf1}, {&(0x7f0000000fc0)="35e22f881753c450cc12f679d6b5cd192a7e92d9eb42e83ef35c2cbe4bb8bea75607012c79", 0x25}, {&(0x7f0000001000)="3a62ca864049044319ba44818ce0cc4a543b4aa361ee3d5cfb1709f0893450309cf46e188f3c93e36e1aa219c65071e84ee01e2068318e75349c", 0x3a}], 0x7, &(0x7f0000005280)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r0, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0, 0x20048810}}, {{&(0x7f000000c280)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000006240), 0x0, &(0x7f000000c300)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80, 0x4}}, {{&(0x7f000000c380)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f000000d580)=[{&(0x7f000000c400)="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", 0x1000}, {&(0x7f000000d400)="7459c5b902a43c9ffe64151d1fc54e682b1819417d0651f2d08123614ddb6ad07b12872dbbe3448997491748454832b2eca8cc5e34ce7c4a0a2a5d407c0bc8a293656dd173df920270339852d99f1c8f3ab7aa5838e253", 0x57}, {&(0x7f000000d480)="2f6e30d29b2407c8f37f5d48a975728b60ea4532dfb9d6d004cfe93ccc6547872b299fb6718a4b86bca84d8cbaa241bedb6f2b8f4efda8fbc37968dcf441228c002dd5077c9479b59a62f623097a39207c256b07cc02ebe7d6c49caecd5ce6869bb04b5f8e6f3daaea39b8e91c7603fc2f2a100f98e017a405", 0x79}, {&(0x7f000000d500)="2b37ce2d050bab598e507211dbd2c626d4027608fed96cb71b83cef3024ae0ce9d95348ebfcb18663762f813350c3a3f4a9bc9a16a848a6b6ea8fee7f077b4d8ae94c68ec0cbb0b68f0a49b24d917b6b00c523d70b940cf2d532cb5c3b16c89aa66853a1f34ec05c4a", 0x69}], 0x4, &(0x7f000000d780)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x50, 0x4008041}}, {{0x0, 0x0, &(0x7f000000d940)=[{&(0x7f000000d800)="fe0c0830869e5b19c72ed022b10812a51176b8498229b1566164bfbede04d770d58160f67ba5a05af77b95570b418147dd3bd5257ae548dbe2290240f5f9e513fd29330f8bf7d59b64ef13f3f4d4e7", 0x4f}, {&(0x7f000000d880)="da80c40fcc2cb4779b43bb01a2ddac4ca82a6fb60aa415a946163b87eb0ebd3cb20e7a97b05544a2d74a301bdcc3d9a52909eab6a2598c1bc3b0135ff72fb9e5f207ffd7e78f439a41b96f7edd4e8e1053c55b0de4b254087d90f84dbe8b3e584d1dfb973f2d63b42c4c4867d1acc7c745224268e8573595ec74892ea9c0d1d70f5820834cebeeb95a3190e145cca5f9ef40b4708d14ed", 0x97}], 0x2, 0x0, 0x0, 0x40000}}, {{&(0x7f000000d980)=@file={0x0, './control/file0\x00'}, 0x6e, &(0x7f000000de80)=[{&(0x7f000000da00)="97e741cf6c87bdfbd0bddb8c1dba5aa71fb518b6f0c27b3d726baef91a120927606b2fb418464f02ac81bfe8f5c53fd51577fb28849ab1a7c216133370ccf067cd89445eaa85d94ddbaed5bb2389b75e17c5b07bad30b82f980874112016d2e839b2fab366ecfdf719656f0b4634dffd28071e2b084ea97f119c90d64d04603278596873c1e71a0670d085d02941fdf818f35912b41478b8c22ae37448395daff26058e5f11bd056e391bea0dbafe6180d69a77c7def24fdf7606d0d", 0xbc}, {&(0x7f000000dac0)="8e6edf74e1edd6d940f10f0e54687c7cfd01b3caf512324905b70b73cb24cdc8", 0x20}, {&(0x7f000000db00)="bfba70835e32b4c427fbacb53c1a1d8e4cd79af01e34d5f71fef4a830468d31a3baa899eecef17ed03c6c7e16008d0c1cc795bda599025ec98c4a944695afc0d75903ce61536be38d487953aaf5e223104194fd2f8bd2e71132558e7ff007a79b3971a750033b5990ac1429b04276dd0ab86af7b32360943acbd21d38e065d24cee0014c8bd2f6c7d997c32929", 0x8d}, {&(0x7f000000dbc0)="6b44368f9d54587d252ee94a0b4fd2aa6715a7aeee04768d32e7e28e86a70fb32e8deea630f5e89ad2c5c5222611f54126699eacea141cb23dd7691c21a2008a3ad8aa01e8fc0b5b2c025bdc51c3c45911d2eb33fac912a1a68448a3f42e4baa91825c85862f8493e7598584593fd6a7ddd4dfc9d4a291d2cf23df83c4f8483480c6b9486bed764f05e06b2b938ba82de21232a7d5d188dd75afe8984190a72b6758a620de1952cb19500e2fb20cd0", 0xaf}, {&(0x7f000000dc80)="bbc3c2b0c6bad90d4ed7ee292cd31ccdb0c033012577930517777f7b031b2144cebf5f0dab15151d0958328ba3943680bec4b46767cb75bda1db579b0faf9f170d6d7703f3e4cfca777c7badbc76dbbea27d8afe3ea5c1f3a9cc508ae32964838a86924ad617661bf3292021c7ced2ecaf5955b01b8ac0a2b3d2f654305311d912c7f30ca4be56f64f7c813ed7a6bcd49957dc821c91c45eee3b045a55fb3ea0c5a8f801627b6672363bda7acae2851a2095b20c65a278f489a9d56c87b41e526a768bf6ff0a64109a827c713230b992e9578297cd7547175d3c33b758a01971e1899f4f7e34efe18f5143a0f550", 0xee}, {&(0x7f000000dd80)='W', 0x1}, {&(0x7f000000ddc0)="f6eb90b90826af6f1b0d552e7f60cf29612082cc8b2cb4c09a8d192005c87abc3986fdda17663db7eb8e8d510ef2e7c54c73", 0x32}, {&(0x7f000000de00)="919c094ff2bb35edf33504ca0560a00ec105a6de3fbf1faab3cc546a923c9e01e4275ddb29faf167fd9cf08ca9790fe0d677bb310617a5b8b44837122c572d582b72bbe743b3568344c0bbe93dbe02f3299a9a7b", 0x54}], 0x8}}, {{&(0x7f000000df00)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f000000e240)=[{&(0x7f000000df80)="7b78cade83df63a586be202429d249f529888717b3ff0ac040753063fc507f87a950bc418bad2432f82cc90e9a299997895a820f50e41fb6410cf99a6b7391d2cf2a33c19472b25999583ed36c9f4a0a", 0x50}, {&(0x7f000000e000)="7edf34429378c372c986aaabaa364bbde11408fa07229692fc20b76ed87a3433ad36715a019e69dab4afe56311baa50625ca02", 0x33}, {&(0x7f000000e040)="6de2f5a75a4d8b5d65809f0fae7137b148d6bdfb6836cb2cdf6b4fdf3acaec6124630abe7c127a7aedf8e29e68310e37e5dffdc406986ebba16b510eb4c064cae5beb417c457c99af851fd09024bd8ffb6d7d8b9d9c0ca1744ceadd42e8edc2c1172b690efd5d1074717357fcd2ed0", 0x6f}, {&(0x7f000000e0c0)="1617f4d7bfe3edde94530a13c3f3e82ecb49f0e11f1af2f4458c3f553e64293baa2367780be9d355d8a196286f43cafbc2add268e5a29c79dc63527bf71ea7851ebfb5b35a3a3d2d78638138318f54d3eca60f32e7c81fa7b4006b186f2d33af1a5588310f693ced38d9343080333e6b6acbe825111d6c86985cdfeb7f21432b4509865ae6cc03dd081abe26795408e065abaeefc82155288396fc33153058c5658c75d094a2bba2b357684e8ba893d175", 0xb1}, {&(0x7f000000e180)="26acbc30afefd58a744c637c08d7f073fd0a33f51e920e843f6365643fcdee68b8f0872c9805ce4f4d7deaea862ed4fedec77510b73bc0eed96651c5cac07f25330ad3995f4ade7e819861fe66eb95b9db31a855d83b25ac6d8f1acf64e26c5f6afb82eec3bcb0e63cbee44f2c68397d8b9929d3cbbc47705b5509e2f0f25a7aa462172b804b5d7e6c22994d3f8369bca5a4a590a377fdcee2e4815813", 0x9d}], 0x5, &(0x7f000000e300)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3, r2]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa8, 0x40000}}, {{&(0x7f000000e3c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f000000e580)=[{&(0x7f000000e440)="2a4342aaebfca80d8a", 0x9}, {&(0x7f000000e480)="a0120993bcf043135791f9eb634b392a9ece73f8f39b025207f6d3d537969073d7d9ba5ac13dc26f86af8a2df570", 0x2e}, {&(0x7f000000e4c0)="c1aa91bc1a3c3cf42df739b125e29d9a92fca80f6d6b8ea33856466cffee6c232c8cdc66ad99855e57ce3420068cb6c0caaf88620a2d7cb2f76342d9f57e69c5e44530a1d1e9d844758b736943157790760cef6a4777def5c95d520cbb838d09a33b209530fafbe30a0e7e01d480f2e765949994ef560ba32ab2e6c39a7428fcdccf6900acb02271fe4a6ef843850e06841db6b0a6", 0x95}], 0x3, &(0x7f000000e5c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe8, 0x14}}], 0x8, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000740), 0x2, 0xce040) ioctl$SCSI_IOCTL_DOORLOCK(r4, 0x5380) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0x100000008, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r8, 0x4068aea3, &(0x7f0000000080)={0xdf, 0x0, 0x4000}) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x1000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$tipc(r6, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSWINSZ(r9, 0x5414, &(0x7f0000000040)={0x9, 0x0, 0x9, 0x5}) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) 2.20882274s ago: executing program 3 (id=4707): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x38, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @empty}, {{0xfffd, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x9, 0x4, 0x2, 0x0, 0x0, {[@generic={0x13, 0x3, '7'}, @timestamp={0x8, 0xa, 0x6, 0x8}]}}}}}}}, 0x0) 2.09415691s ago: executing program 3 (id=4708): set_robust_list(&(0x7f0000000140)={0x0, 0x7}, 0x18) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) inotify_init() r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000340)=0x8000, 0x4) openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) eventfd(0x80000001) dup(r0) pselect6(0x40, &(0x7f0000000600)={0x26, 0x0, 0x1000000, 0x40, 0x2, 0x11, 0x0, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0x4, 0x0, 0x5, 0x7}, 0x0, 0x0) 2.043043417s ago: executing program 4 (id=4709): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1, 0x0, 0xd50}}], 0x400000000000181, 0x9200000000000000) recvmmsg(r2, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001640)=""/4089, 0xff9}], 0x1}, 0xbe58}], 0x1, 0x7ffeedc0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.928059894s ago: executing program 0 (id=4710): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(0xffffffffffffffff, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x8102}, {{0x0, 0x0, 0x0}, 0x10006}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000000)=""/180, 0xb4}, {&(0x7f0000000680)=""/228, 0xe4}, {&(0x7f00000000c0)=""/84, 0x54}, {&(0x7f0000001b40)=""/4109, 0x100d}, {&(0x7f0000000380)=""/238, 0xee}], 0x5}, 0x80000000}, {{0x0, 0x19, 0x0}, 0x5}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000940)=""/134, 0x86}, {&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000005080)=""/4096, 0x1000}, {&(0x7f0000006080)=""/4096, 0x1000}, {&(0x7f0000000600)=""/91, 0x5b}], 0x5}, 0xb0}, {{0x0, 0x0, 0x0}, 0x6}], 0x8, 0x20, 0x0) 1.766201481s ago: executing program 4 (id=4711): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd302c594bbf3805c, &(0x7f0000000400)=[{&(0x7f00000000c0)="d8000000180081024e81f783db4cb9040a1d080006007c09e8fc55a10a0015000400142603600e1209000f0000000601a8000960040008400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x2300}, 0x0) 1.765684211s ago: executing program 0 (id=4712): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240), 0x240001, 0x0) unshare(0x40400) bpf$ITER_CREATE(0x21, &(0x7f00000072c0)={r0}, 0x8) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYBLOB="9ab22152b47716c36c1202839027127179338ae310c00d8a2ccb1dc16aab2c97a3695dc499f7c7ba545b6fbe4288c0207525012d29cc6bb98b4b425f491f0a05786569085a6a465c10491a9dd79a833326884d6884aa9f710cd7d2f07d979192db3ea59a8f949822712e", @ANYRES8=0x0, @ANYBLOB="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", @ANYRESOCT, @ANYRESHEX=0x0], 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201100100000020c410b98140000102030109022400010107300209040008010301038109216a00d701223b0b09058103ff03030540128b9c721c37682d79aee0444ad206af1888ea042f68f7ee3fe0a80f62"], &(0x7f0000000a00)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x3e97ac475225bd33, 0x8, 0x9, 0x2, 0x10, 0x6}, 0x143, &(0x7f0000000ac0)={0x5, 0xf, 0x143, 0x6, [@ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x4, 0xf00, 0x80, [0x3f00, 0xff000f, 0xcf, 0x3f00]}, @generic={0xf1, 0x10, 0x0, "69ab1ab59c42f613321d446b432d7c56e08802007b70bfbb7519462d39d62d0e125a07afb1e5dcc993a422a447606d3a84d5f11c16bcadeef46f233d478c9d12c75fc8c0b186647e64bf965e2d6340e36dc6b7b162a4b2a955828823f0b74132c6b61fb03599bda096baba463cf1d2a76c7dee38cf33f0376aa79a02da9bdd5e2af0d7aac8b498efcf1e13122f7835d89756252a4bee05a86fa44a997db2c8f7e2e5c5543ae87ca87099419eaada8ce14c8f5d7c9423b92b689e6156dec4842a62fd28051cabe59b6e05c6f7b641bdb161aa9fac9ed7b52269366283271a3c0726572e51ce62ff5f7458915657e7"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "530c190dc5cbfb49f8915966fe050ea5"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x24, 0xfa, 0x2, 0x3, 0x7b}, @ext_cap={0x7, 0x10, 0x2, 0x1a, 0xd, 0x8, 0x6}, @wireless={0xb, 0x10, 0x1, 0x8, 0x42, 0x6, 0x7f, 0x8, 0x7}]}, 0xa, [{0xcd, &(0x7f0000000140)=@string={0xcd, 0x3, "c467e72e824312cda9fbf307464f94fc353f94779da73445a7bd3fa00c7fa6b2d2fece96db35b3d3c4d4a3773ed3b57124ac463338ee02089cf4ebf86f346b07c5a9c617b9c81bee52cfed026f2802d340f8037f55b2034858522c80e6829cdd62c7154a06d248331e8c2a75d4f9c503608bd97102e09ec04c46c0ce9b9ab1a0a54a1aeb2eae6c1b466625778ed0f71b23bf07faf7660e607619cfbfa0364f617120c1c20f901ab5c0a9a356b13ab24e2426665fcef1d4f7ea93169b9690e7dcad804006e1264d3e0f8991"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x425}}, {0xee, &(0x7f0000000280)=ANY=[@ANYBLOB="ee0344ab08c03d69ad641664e6a82cd1b013b353a4e1f3a854d671434ca934fc45667e6a9a96deeb3536340d80b1eb68508c9a3dfd02fe93c0efe6afbe51f786e3ab78173e5833e70eae3bce85f727deba83dee7965c6bac1915629613bca5fba1a35cdf677221874bfb2b90de8073aadff22978cd98534e4163372fe70c2e5b962a916d1a666dd1d4d290ae54e0cbab244e04c476b9c451d459f45f19a1fc7686bdff945ed51129e000d31c5f1c94700e078fbe75c8e0b3e06d446d75a8f2df4ee7b35878d2e3a31069323ceb231d9467dfcaa8f4edd03ee26164e78ee4d86f19813e7ff1156e609bf36368b780"]}, {0xd, &(0x7f00000006c0)=@string={0xd, 0x3, "f2d27e2ff70ef9c41d0d75"}}, {0xf0, &(0x7f0000000700)=@string={0xf0, 0x3, "5a581c4f5d39333df855b93e8bf6998f85159a45f16621706697e320b7cad88ea7926d89c525ddc82f50ef0e51ebdeecbe7a7860623c49a3995b931ef7160a6be1cbcf1f6e73565ffedd5941cf2676c7a26b320bc55f626028f20d3f123d09bdb35a43fdd994435b9d9f42279bc9c35cad0871ffd8f98ece14e1d5dff1009fa377d597948ba75334fc96cf3ab09ea9f83a680e6db42168cfc5eee95769535894ab81b659d0d07b0bc75ee838d8ab3a90c469024d50fc9571f7c9a64fcc5e11102cb361c14fe74c750a163bbfaca769d6052765d552cb133d7335efa372466b2823fb216eb7c07f3fc7afa42ede42"}}, {0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x446}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0xc07}}, {0x43, &(0x7f0000000880)=@string={0x43, 0x3, "45ad39924ccb91c09969682861c9318350c1c17e93de2e304e60b75cb436f204fa069fe55ae527b583e28658a62f48e58d4f5135c33a00d72bed55b64fdd43bfd6"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x424}}, {0x96, &(0x7f0000000940)=@string={0x96, 0x3, "99001e63487a6b5d0d09b3d952b23e634136a36a21cf62a89cb82a76c647d01fdff026f05d62954eec52af0687a747d43f6c01472df643e75d340e2e9b4fc6cd3d2f7d9adca079d32b547a8d03f24d8e551e5c17c036939cf67c635c3754bd15c812ed31402a08ec6272e61f111e8303e3da7b0719f8368a89984c272550783d512ebf888addc406af03b31f7b5c16459656d639"}}]}) syz_open_dev$evdev(&(0x7f0000000080), 0xe, 0x0) 1.70289987s ago: executing program 4 (id=4713): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000280)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @tcp={{0xb, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0xfe, 0x6, 0x0, @remote, @local, {[@lsrr={0x83, 0x17, 0x94, [@loopback, @loopback, @local, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x4}}}}}}, 0x0) 1.4608296s ago: executing program 1 (id=4717): setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000001a40)=[@in={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}], 0x20) sendto$inet(0xffffffffffffffff, &(0x7f0000000080)=')', 0x1, 0x40008c0, &(0x7f0000000040)={0x2, 0x4e24, @remote}, 0x10) 1.453470536s ago: executing program 2 (id=4718): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x5, 0x200) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r0, 0xc06c4124, &(0x7f0000000040)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0xb4, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) socket(0x400000000010, 0x3, 0x0) getresuid(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x300, 0xb400, 0x2, 0xfeffff7f00000000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSIG(r4, 0x40045436, 0x2) 1.342111833s ago: executing program 2 (id=4719): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x28981) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000002380)={{0x0, 0x1}, 0x1000000, 0xbf, 0x2, {0x4, 0x1}, 0x3, 0x800}) 1.341245371s ago: executing program 1 (id=4720): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) r1 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_CROPCAP(r1, 0xc02c563a, &(0x7f0000000100)={0x9, {0x4, 0x8001, 0xffff}, {0x2, 0x0, 0xda, 0x800}, {0x20000000, 0x7fff}}) connect$inet6(r0, &(0x7f0000000a40)={0xa, 0x4e24, 0xf4, @remote, 0x1}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x4}, 0x8) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44004) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) 1.304416781s ago: executing program 2 (id=4721): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x190, 0x1, 0x2, 0x3, 0x5, 0x9, 0x1, 0x2, 0x5, 0x722, 0x200ed, 0x7, 0x7f, 0x3f, 0xb763599953cb091d, {0x10000, 0x6fd8e84b}, 0x7, 0xed}}) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x4, 0x60d3, 0x5, 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x20240, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1e03, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r5, 0x40047457, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f00000007c0)={0x48, 0x2, r7}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r7, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e}) close_range(r3, 0xffffffffffffffff, 0x0) chown(0x0, 0x0, 0xee01) 1.30203867s ago: executing program 1 (id=4722): r0 = socket(0x80000000000000a, 0xa, 0xfffffffe) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2d, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast2, 0xc}}, {{0xa, 0x0, 0x0, @local, 0x3}}}, 0x108) socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = syz_io_uring_setup(0x2a6e, &(0x7f0000000380)={0x0, 0xfffffffd, 0x10100, 0x2, 0x2b5}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r5, r6, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r7, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1, 0x0, 0x26}, 0x0, 0x80002101}) io_uring_enter(r4, 0xd81, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r7) close_range(r3, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x8) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x9361, 0x5) inotify_init1(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) rmdir(&(0x7f0000000100)='./control\x00') r8 = socket$nl_generic(0x10, 0x3, 0x10) accept4$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs, &(0x7f0000000040)=0x6e, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000005f00)={'wlan1\x00'}) 1.201883565s ago: executing program 2 (id=4723): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x78, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x48, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0xfff}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x4}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x1, 0x1}}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x1c, 0x101}, @IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8, 0x1d, 0x401}, @IFLA_BR_MCAST_HASH_ELASTICITY={0x8, 0x1a, 0x17c3}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000540012800c0001006d6163766c616e0044000280060002000100000008000900010000000800030003000000080007000500000008000100100000000600020001000000100005800a000400aaaaaaaaaa2e000008000500", @ANYRES32=r1], 0x84}}, 0x20008040) 1.189164227s ago: executing program 3 (id=4724): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = syz_io_uring_setup(0xb, &(0x7f00000002c0)={0x0, 0x200002f, 0x800, 0x1, 0x100020b}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000280)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r4, 0x7a9, &(0x7f0000000b00)={{@any, 0xffffffff}, 0x7, 0xffffffffffffffff, 0x20000, 0x3ff, 0x8, 0xfffffdfd, 0xffffffffffffffff}) syz_emit_ethernet(0x32, &(0x7f00000002c0)=ANY=[@ANYBLOB="e904a20000190180c20000000800450000240000e000001190780000000000000000000000e0000000786204000000000000"], 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0xc000000, &(0x7f0000000000)=[{0x0}], 0x1, 0x12}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cpuinfo\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000380)=""/97, 0x61, 0x10000) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r6, &(0x7f0000000400)=ANY=[@ANYBLOB="22000000030000000000000000000000050000000000000001000000000000000000ecd6789cea022dde39a9b63512740a266fced3c335286b562c8e0df18fc36aa0c09c4433d6f3a4"], 0x22) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_FLUSH(r7, 0x0, 0x485, 0x0, 0x0) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1.058117279s ago: executing program 2 (id=4725): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x24060400) r2 = memfd_secret(0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r2, 0x2, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005"], 0x310) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 1.009229175s ago: executing program 3 (id=4726): openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r2 = io_uring_setup(0x334f, &(0x7f00000000c0)={0x0, 0xb9ba, 0x4000, 0x0, 0x80}) syz_io_uring_setup(0x3542, &(0x7f0000000280)={0x0, 0xb89f, 0x2000, 0x1, 0x200004, 0x0, r2}, 0x0, 0x0) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272) 982.338359ms ago: executing program 2 (id=4727): openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r1 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x183a00) socket$nl_generic(0x10, 0x3, 0x10) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) epoll_create(0x401) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x4) r6 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r6, 0xc0d05604, &(0x7f0000000100)={0x9}) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, 0x0) syz_usb_disconnect(r1) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000000080)=0x8, 0x4) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000400)=[{{0x1, 0x1, 0x1}, {0x0, 0x1, 0x1}}, {{0x2, 0x1, 0x1, 0x1}, {0x3, 0x1, 0x1}}, {{0x0, 0x0, 0x1}, {0x2, 0x1, 0x1, 0x1}}, {{0x2, 0x1, 0x1, 0x1}, {0x2}}, {{0x4, 0x1, 0x1}, {0x2, 0x0, 0x1, 0x1}}, {{0x1, 0x1}, {0x3, 0x1, 0x1, 0x1}}, {{0x3}, {0x4, 0x1, 0x1}}, {{0x1, 0x1, 0x1, 0x1}, {0x3, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x1}, {0x4, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x4, 0x1, 0x1}}], 0xffffffffffffff52) close(0xffffffffffffffff) fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1) syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x501000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe}, {0xfbfffffa}]}}) 854.106818ms ago: executing program 3 (id=4728): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) recvmsg(r0, 0x0, 0x40010041) sendmsg$inet(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x41) recvmsg$unix(r0, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7a}, 0x10141) 853.41126ms ago: executing program 3 (id=4729): lchown(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0xee01, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20002, 0x620a9}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x101}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x9}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x24008040) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x270bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400b5000000000400000000", @ANYRES32=0x0, @ANYBLOB="00000000001400001c00128009000100626f6e64000000"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FWMARK={0x8, 0x12, 0x2ab2}]}}]}, 0x3c}}, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f0000000040)={0x48, 0x1, r2, 0x0, 0xffffffff, 0x1000000000004}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f00000002c0)={0x48, 0x1, r2, 0x0, 0xfffffffffffffffd, 0x4}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000001340)={0x28, 0x2, r2, 0x0, &(0x7f00003bd000/0x3000)=nil, 0x3000, 0x80}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600007842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc50c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x10}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0xa, "45448c13"}, @global=@item_012={0x1, 0x1, 0x4, '`'}]}}, 0x0}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000340)=[{{&(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/45, 0x2d}, {&(0x7f0000000100)=""/123, 0x7b}, {&(0x7f0000000180)=""/3, 0x3}, {&(0x7f00000001c0)=""/250, 0xfa}], 0x4, &(0x7f0000000300)=""/41, 0x29}, 0x3ff}], 0x1, 0x2, 0x0) 823.466483ms ago: executing program 4 (id=4730): r0 = socket$inet6(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = open(&(0x7f0000000280)='.\x00', 0x80000, 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000e2793b10d1050120001001020301090212"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) write$binfmt_elf64(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="7f454c46"], 0x78) close(r2) execveat(r1, &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0xffea) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private=0xa010101, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x8}, {0x0, 0x0, 0xe0a}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x1, 0x0, 0x4}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) 306.179315ms ago: executing program 1 (id=4731): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r5, 0x4038ae7a, &(0x7f0000000100)={0x2, 0x40000105, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x5f) 0s ago: executing program 1 (id=4732): syz_emit_vhci(0x0, 0x2d) io_setup(0x7ff, &(0x7f0000000140)=0x0) socketpair(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_submit(r0, 0x1, &(0x7f00000014c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) close(r2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000080)='htcp\x00', 0x5) sendmsg$inet(r3, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r3, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) kernel console output (not intermixed with test programs): er 80 using dummy_hcd [ 1014.545227][ T5927] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1014.722415][ T5927] usb 4-1: Using ep0 maxpacket: 16 [ 1014.733457][ T24] usb 3-1: device descriptor read/8, error -71 [ 1014.745569][ T5927] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 1014.769151][ T5927] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 1014.897058][ T5927] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1014.909630][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.920640][ T5927] usb 4-1: Product: syz [ 1014.924974][ T24] usb usb3-port1: unable to enumerate USB device [ 1014.935367][ T5927] usb 4-1: Manufacturer: 阣갪놊憫蝻勏奍ᮋ◁섽ᄰ쭘殝揹攻嗸洑梱ᭂ媘䱆軕灗ꊤ紡䣞厭ﮤ૪ [ 1014.949546][ T5927] usb 4-1: SerialNumber: syz [ 1015.472859][T21974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1015.496355][T21974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1015.759075][ T5927] cdc_ncm 4-1:1.0: bind() failure [ 1015.841891][ T5927] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1016.204069][ T5927] cdc_ncm 4-1:1.1: bind() failure [ 1016.364424][ T5927] usb 4-1: USB disconnect, device number 87 [ 1017.089960][T21999] mmap: syz.4.4217 (21999): VmData 37466112 exceed data ulimit 131072. Update limits or use boot option ignore_rlimit_data. [ 1017.667101][T22023] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 40 [ 1017.760558][T22026] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4222'. [ 1017.772778][T22026] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4222'. [ 1017.802822][ T981] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1017.885222][T22029] B: renamed from veth0 (while UP) [ 1017.974990][ T981] usb 5-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 1017.985919][ T981] usb 5-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 1017.996297][ T981] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1018.012797][ T981] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 1018.027337][ T981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.037650][ T981] usb 5-1: Product: syz [ 1018.056811][ T981] usb 5-1: Manufacturer: syz [ 1018.069847][ T981] usb 5-1: SerialNumber: syz [ 1018.321615][T22018] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1018.461513][T22018] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1020.649649][ T981] rtl8150 5-1:1.0: couldn't reset the device [ 1020.667461][ T981] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 1020.728756][ T981] usb 5-1: USB disconnect, device number 77 [ 1020.742928][ T24] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1021.694035][T22079] netlink: 'syz.4.4236': attribute type 10 has an invalid length. [ 1021.713542][T22076] fuse: Unknown parameter '0x0000000000000008' [ 1021.746111][T22079] team0: Device hsr_slave_0 failed to register rx_handler [ 1023.382566][ T24] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1023.552646][ T981] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1023.578330][ T24] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1023.578349][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.578363][ T24] usb 4-1: Product: syz [ 1023.578372][ T24] usb 4-1: Manufacturer: syz [ 1023.578380][ T24] usb 4-1: SerialNumber: syz [ 1023.670566][ T59] batman_adv: batadv0: Interface deactivated: erspan0 [ 1023.726163][ T981] usb 5-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 1023.762192][ T981] usb 5-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 1023.897125][ T981] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1024.229418][ T981] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 1024.246758][ T981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.272547][ T981] usb 5-1: Product: syz [ 1024.306375][ T981] usb 5-1: Manufacturer: syz [ 1024.315066][ T981] usb 5-1: SerialNumber: syz [ 1024.324548][ T59] batman_adv: batadv0: Removing interface: erspan0 [ 1024.363094][T22099] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1024.412919][T22099] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1025.012756][ T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1025.910962][ T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 1025.935605][T22123] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4244'. [ 1025.944615][T22123] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4244'. [ 1026.096827][ T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1026.161330][ T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1026.198113][ T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1026.231186][ T24] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 1026.294986][ T24] usb 4-1: USB disconnect, device number 89 [ 1026.655004][T22128] binder: 22127:22128 ioctl c0306201 0 returned -14 [ 1026.706680][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1026.724897][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1026.730098][T22128] netlink: 'syz.1.4247': attribute type 10 has an invalid length. [ 1026.755068][ T59] bond0 (unregistering): (slave team0): Releasing backup interface [ 1026.773564][ T59] bond0 (unregistering): Released all slaves [ 1026.818247][ T59] bond1 (unregistering): Released all slaves [ 1026.873897][ T59] bond2 (unregistering): Released all slaves [ 1026.984455][ T59] bond3 (unregistering): Released all slaves [ 1027.011167][ T59] bond4 (unregistering): Released all slaves [ 1027.035109][ T59] bond5 (unregistering): Released all slaves [ 1027.051417][ T59] bond6 (unregistering): Released all slaves [ 1027.144460][ T981] rtl8150 5-1:1.0: couldn't reset the device [ 1027.183368][ T981] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 1027.243746][ T981] usb 5-1: USB disconnect, device number 78 [ 1027.451115][T22144] FAULT_INJECTION: forcing a failure. [ 1027.451115][T22144] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1027.476153][T22144] CPU: 0 UID: 0 PID: 22144 Comm: syz.1.4252 Not tainted syzkaller #0 PREEMPT(full) [ 1027.476176][T22144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1027.476186][T22144] Call Trace: [ 1027.476200][T22144] [ 1027.476208][T22144] dump_stack_lvl+0x189/0x250 [ 1027.476234][T22144] ? __pfx____ratelimit+0x10/0x10 [ 1027.476252][T22144] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1027.476271][T22144] ? __pfx__printk+0x10/0x10 [ 1027.476293][T22144] ? __might_fault+0xb0/0x130 [ 1027.476323][T22144] should_fail_ex+0x414/0x560 [ 1027.476351][T22144] _copy_from_iter+0x1de/0x1790 [ 1027.476367][T22144] ? __lock_acquire+0xab9/0xd20 [ 1027.476390][T22144] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1027.476413][T22144] ? policy_nodemask+0x27c/0x720 [ 1027.476434][T22144] ? __pfx__copy_from_iter+0x10/0x10 [ 1027.476455][T22144] ? set_page_refcounted+0xa0/0x1e0 [ 1027.476478][T22144] ? page_copy_sane+0x4e/0x280 [ 1027.476496][T22144] copy_page_from_iter+0xdd/0x170 [ 1027.476519][T22144] tun_get_user+0x1d7b/0x3e20 [ 1027.476544][T22144] ? tun_get_user+0x6f6/0x3e20 [ 1027.476570][T22144] ? aa_file_perm+0x44d/0x1550 [ 1027.476587][T22144] ? __pfx_tun_get_user+0x10/0x10 [ 1027.476604][T22144] ? _parse_integer_limit+0x1ae/0x1f0 [ 1027.476630][T22144] ? __lock_acquire+0xab9/0xd20 [ 1027.476655][T22144] ? ref_tracker_alloc+0x318/0x460 [ 1027.476669][T22144] ? __lock_acquire+0xab9/0xd20 [ 1027.476692][T22144] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1027.476713][T22144] ? tun_get+0x1c/0x2f0 [ 1027.476735][T22144] ? tun_get+0x1c/0x2f0 [ 1027.476752][T22144] ? tun_get+0x1c/0x2f0 [ 1027.476774][T22144] tun_chr_write_iter+0x113/0x200 [ 1027.476795][T22144] vfs_write+0x5c6/0xb30 [ 1027.476820][T22144] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1027.476839][T22144] ? __pfx_vfs_write+0x10/0x10 [ 1027.476869][T22144] ? __fget_files+0x2a/0x420 [ 1027.476894][T22144] ksys_write+0x145/0x250 [ 1027.476916][T22144] ? __pfx_ksys_write+0x10/0x10 [ 1027.476935][T22144] ? rcu_is_watching+0x15/0xb0 [ 1027.476955][T22144] ? do_syscall_64+0xbe/0x3b0 [ 1027.476977][T22144] do_syscall_64+0xfa/0x3b0 [ 1027.476993][T22144] ? lockdep_hardirqs_on+0x9c/0x150 [ 1027.477009][T22144] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1027.477026][T22144] ? clear_bhb_loop+0x60/0xb0 [ 1027.477046][T22144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1027.477062][T22144] RIP: 0033:0x7f1cdb38d69f [ 1027.477078][T22144] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1027.477092][T22144] RSP: 002b:00007f1cdc20c000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1027.477111][T22144] RAX: ffffffffffffffda RBX: 00007f1cdb5c5fa0 RCX: 00007f1cdb38d69f [ 1027.477124][T22144] RDX: 000000000000003a RSI: 00002000000014c0 RDI: 00000000000000c8 [ 1027.477135][T22144] RBP: 00007f1cdc20c090 R08: 0000000000000000 R09: 0000000000000000 [ 1027.477146][T22144] R10: 000000000000003a R11: 0000000000000293 R12: 0000000000000001 [ 1027.477156][T22144] R13: 00007f1cdb5c6038 R14: 00007f1cdb5c5fa0 R15: 00007f1cdb6efa28 [ 1027.477184][T22144] [ 1027.778057][ C0] vkms_vblank_simulate: vblank timer overrun [ 1029.048249][T22161] pim6reg: entered allmulticast mode [ 1029.420082][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1029.428620][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1029.444757][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1029.455159][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1029.506452][ T59] batman_adv: batadv0: Interface deactivated: dummy0 [ 1029.517503][ T59] batman_adv: batadv0: Removing interface: dummy0 [ 1029.665992][ T59] hsr0: left allmulticast mode [ 1029.676890][ T59] veth1_macvtap: left promiscuous mode [ 1029.692212][ T59] veth0_macvtap: left promiscuous mode [ 1029.708129][ T59] veth1_vlan: left promiscuous mode [ 1029.724830][ T59] veth0_vlan: left promiscuous mode [ 1030.342764][ T59] pim6reg (unregistering): left allmulticast mode [ 1030.369835][T22172] fuse: Bad value for 'fd' [ 1030.616230][ T5987] IPVS: starting estimator thread 0... [ 1030.762398][T22178] IPVS: using max 34 ests per chain, 81600 per kthread [ 1030.844270][ T43] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1031.015160][ T43] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 1031.245525][ T43] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 1031.337915][ T43] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1031.397397][ T43] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 1031.448531][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.540939][ T43] usb 2-1: Product: syz [ 1031.564048][ T43] usb 2-1: Manufacturer: syz [ 1031.630385][ T43] usb 2-1: SerialNumber: syz [ 1031.660358][T22177] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1031.668515][T22177] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1032.095853][ T59] team0 (unregistering): Port device team_slave_1 removed [ 1032.211816][ T59] team0 (unregistering): Port device team_slave_0 removed [ 1033.481037][ T3571] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.564677][ T3571] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.688610][ T3571] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.723677][T22188] binder: 22185:22188 ioctl c0306201 0 returned -14 [ 1033.734405][ T3571] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.746113][T22188] netlink: 'syz.0.4263': attribute type 10 has an invalid length. [ 1033.984395][ T59] IPVS: stop unused estimator thread 0... [ 1035.505309][ T43] rtl8150 2-1:1.0: couldn't reset the device [ 1035.520389][ T43] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 1035.535855][ T43] usb 2-1: USB disconnect, device number 90 [ 1036.153433][T22221] netlink: 'syz.2.4271': attribute type 21 has an invalid length. [ 1036.161397][T22221] netlink: 'syz.2.4271': attribute type 15 has an invalid length. [ 1036.173703][T22221] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4271'. [ 1036.185456][T22221] IPv6: NLM_F_CREATE should be specified when creating new route [ 1036.194909][T22221] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1036.194924][T22221] IPv6: NLM_F_CREATE should be set when creating new route [ 1036.194979][T22221] IPv6: NLM_F_CREATE should be set when creating new route [ 1036.195002][T22221] IPv6: NLM_F_CREATE should be set when creating new route [ 1036.302551][ T981] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1036.425107][ T24] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1036.464462][ T981] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1036.509959][ T981] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1036.561714][T13605] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1036.601785][ T981] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1036.617133][ T981] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1036.640158][ T981] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1036.660653][ T981] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1036.681604][ T981] usb 4-1: config 0 descriptor?? [ 1036.742869][T13605] usb 3-1: device descriptor read/64, error -71 [ 1036.983287][T13605] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1037.132575][T13605] usb 3-1: device descriptor read/64, error -71 [ 1037.266927][T13605] usb usb3-port1: attempt power cycle [ 1037.724340][T13605] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1037.752959][T13605] usb 3-1: device descriptor read/8, error -71 [ 1038.004468][T13605] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1038.036844][T13605] usb 3-1: device descriptor read/8, error -71 [ 1038.206088][T13605] usb usb3-port1: unable to enumerate USB device [ 1038.656228][ T43] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1039.035834][ T43] usb 5-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 1039.088793][ T43] usb 5-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 1039.543344][ T43] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1039.668429][T22268] kvm: user requested TSC rate below hardware speed [ 1039.836074][ T43] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 1039.846014][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.879750][ T43] usb 5-1: Product: syz [ 1039.887763][ T43] usb 5-1: Manufacturer: syz [ 1039.893176][ T43] usb 5-1: SerialNumber: syz [ 1039.901307][T22264] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1039.924215][T22255] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1039.944024][T22255] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1041.244052][ T9] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1041.275764][ T981] usbhid 4-1:0.0: can't add hid device: -71 [ 1041.301929][ T981] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1041.331623][ T981] usb 4-1: USB disconnect, device number 90 [ 1041.472355][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 1041.488384][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1041.564565][ T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1041.622670][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1041.631735][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1041.638862][ T43] rtl8150 5-1:1.0: couldn't reset the device [ 1041.881644][ T43] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 1041.885967][ T9] usb 3-1: Product: syz [ 1041.929745][ T43] usb 5-1: USB disconnect, device number 79 [ 1041.932314][ T9] usb 3-1: Manufacturer: syz [ 1041.953944][ T9] usb 3-1: SerialNumber: syz [ 1041.980558][ T9] usb 3-1: config 0 descriptor?? [ 1042.216357][T22270] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4285'. [ 1044.114548][ T981] usb 3-1: USB disconnect, device number 85 [ 1044.640767][T22315] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1045.022493][T13605] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1045.302610][T13605] usb 2-1: config 0 has no interfaces? [ 1045.309970][T13605] usb 2-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f [ 1045.343443][T13605] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1045.469574][T13605] usb 2-1: Product: syz [ 1045.491228][T13605] usb 2-1: Manufacturer: syz [ 1045.513926][T13605] usb 2-1: SerialNumber: syz [ 1045.653733][T13605] usb 2-1: config 0 descriptor?? [ 1047.190686][T13605] usb 2-1: USB disconnect, device number 92 [ 1047.976711][T22359] netlink: 'syz.2.4307': attribute type 10 has an invalid length. [ 1048.121431][T22359] team0: Port device netdevsim0 added [ 1048.140798][T22364] netlink: 'syz.4.4306': attribute type 11 has an invalid length. [ 1048.148771][T22364] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4306'. [ 1048.440277][T22371] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4308'. [ 1048.532785][T22371] FAULT_INJECTION: forcing a failure. [ 1048.532785][T22371] name failslab, interval 1, probability 0, space 0, times 0 [ 1048.579130][T22371] CPU: 0 UID: 0 PID: 22371 Comm: syz.2.4308 Not tainted syzkaller #0 PREEMPT(full) [ 1048.579146][T22371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1048.579153][T22371] Call Trace: [ 1048.579159][T22371] [ 1048.579164][T22371] dump_stack_lvl+0x189/0x250 [ 1048.579181][T22371] ? __pfx____ratelimit+0x10/0x10 [ 1048.579192][T22371] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1048.579204][T22371] ? __pfx__printk+0x10/0x10 [ 1048.579221][T22371] ? __pfx___might_resched+0x10/0x10 [ 1048.579230][T22371] ? fs_reclaim_acquire+0x7d/0x100 [ 1048.579248][T22371] should_fail_ex+0x414/0x560 [ 1048.579266][T22371] should_failslab+0xa8/0x100 [ 1048.579281][T22371] __kmalloc_cache_noprof+0x70/0x3d0 [ 1048.579301][T22371] ? nf_tables_newchain+0xfeb/0x2900 [ 1048.579316][T22371] nf_tables_newchain+0xfeb/0x2900 [ 1048.579337][T22371] ? __pfx_nf_tables_newchain+0x10/0x10 [ 1048.579366][T22371] ? nfnl_pernet+0x23/0x240 [ 1048.579385][T22371] ? __nla_parse+0x40/0x60 [ 1048.579397][T22371] nfnetlink_rcv+0x1132/0x2520 [ 1048.579428][T22371] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1048.579451][T22371] ? ref_tracker_free+0x63a/0x7d0 [ 1048.579474][T22371] ? __netlink_deliver_tap+0x807/0x850 [ 1048.579485][T22371] ? netlink_deliver_tap+0x2e/0x1b0 [ 1048.579503][T22371] netlink_unicast+0x82c/0x9e0 [ 1048.579522][T22371] ? __pfx_netlink_unicast+0x10/0x10 [ 1048.579538][T22371] ? netlink_sendmsg+0x642/0xb30 [ 1048.579547][T22371] ? skb_put+0x11b/0x210 [ 1048.579560][T22371] netlink_sendmsg+0x805/0xb30 [ 1048.579575][T22371] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1048.579587][T22371] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1048.579598][T22371] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1048.579609][T22371] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1048.579619][T22371] __sock_sendmsg+0x21c/0x270 [ 1048.579636][T22371] ____sys_sendmsg+0x505/0x830 [ 1048.579651][T22371] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1048.579668][T22371] ? import_iovec+0x74/0xa0 [ 1048.579693][T22371] ___sys_sendmsg+0x21f/0x2a0 [ 1048.579706][T22371] ? __pfx____sys_sendmsg+0x10/0x10 [ 1048.579737][T22371] ? __fget_files+0x2a/0x420 [ 1048.579745][T22371] ? __fget_files+0x3a0/0x420 [ 1048.579759][T22371] __x64_sys_sendmsg+0x19b/0x260 [ 1048.579772][T22371] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1048.579789][T22371] ? __pfx_ksys_write+0x10/0x10 [ 1048.579801][T22371] ? rcu_is_watching+0x15/0xb0 [ 1048.579815][T22371] ? do_syscall_64+0xbe/0x3b0 [ 1048.579829][T22371] do_syscall_64+0xfa/0x3b0 [ 1048.579838][T22371] ? lockdep_hardirqs_on+0x9c/0x150 [ 1048.579848][T22371] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1048.579857][T22371] ? clear_bhb_loop+0x60/0xb0 [ 1048.579869][T22371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1048.579878][T22371] RIP: 0033:0x7fe3e158ebe9 [ 1048.579888][T22371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1048.579897][T22371] RSP: 002b:00007fe3e24ad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1048.579908][T22371] RAX: ffffffffffffffda RBX: 00007fe3e17c5fa0 RCX: 00007fe3e158ebe9 [ 1048.579915][T22371] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1048.579921][T22371] RBP: 00007fe3e24ad090 R08: 0000000000000000 R09: 0000000000000000 [ 1048.579927][T22371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1048.579933][T22371] R13: 00007fe3e17c6038 R14: 00007fe3e17c5fa0 R15: 00007fe3e18efa28 [ 1048.579955][T22371] [ 1050.509249][T22409] netlink: 'syz.0.4318': attribute type 12 has an invalid length. [ 1050.545950][T22409] netlink: 'syz.0.4318': attribute type 29 has an invalid length. [ 1050.597299][T22409] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4318'. [ 1050.651633][T22409] netlink: 'syz.0.4318': attribute type 1 has an invalid length. [ 1050.812728][T22409] netlink: 47 bytes leftover after parsing attributes in process `syz.0.4318'. [ 1052.132332][ T30] audit: type=1326 audit(1757327259.336:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22421 comm="syz.1.4323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cdb38ebe9 code=0x7ffc0000 [ 1052.259547][ T30] audit: type=1326 audit(1757327259.336:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22421 comm="syz.1.4323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cdb38ebe9 code=0x7ffc0000 [ 1052.347180][ T30] audit: type=1326 audit(1757327259.336:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22421 comm="syz.1.4323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f1cdb38ebe9 code=0x7ffc0000 [ 1052.664091][ T30] audit: type=1326 audit(1757327259.336:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22421 comm="syz.1.4323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cdb38ebe9 code=0x7ffc0000 [ 1052.901345][ T30] audit: type=1326 audit(1757327259.336:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22421 comm="syz.1.4323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f1cdb38ebe9 code=0x7ffc0000 [ 1052.923714][ C1] vkms_vblank_simulate: vblank timer overrun [ 1053.072384][ T30] audit: type=1326 audit(1757327259.336:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22421 comm="syz.1.4323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cdb38ebe9 code=0x7ffc0000 [ 1053.094741][ C1] vkms_vblank_simulate: vblank timer overrun [ 1053.215598][ T30] audit: type=1326 audit(1757327259.336:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22421 comm="syz.1.4323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f1cdb38ebe9 code=0x7ffc0000 [ 1053.336508][ T30] audit: type=1326 audit(1757327259.336:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22421 comm="syz.1.4323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cdb38ebe9 code=0x7ffc0000 [ 1053.358872][ C1] vkms_vblank_simulate: vblank timer overrun [ 1053.502137][ T30] audit: type=1326 audit(1757327259.336:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22421 comm="syz.1.4323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f1cdb38ebe9 code=0x7ffc0000 [ 1053.524510][ C1] vkms_vblank_simulate: vblank timer overrun [ 1053.628674][ T30] audit: type=1326 audit(1757327259.336:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22421 comm="syz.1.4323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cdb38ebe9 code=0x7ffc0000 [ 1054.345867][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.352182][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.255617][T22468] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1055.276066][T22468] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4337'. [ 1055.464401][T22468] syz.2.4337 (22468): drop_caches: 2 [ 1060.612421][ T43] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1060.771457][T22531] macvlan2: entered promiscuous mode [ 1060.772343][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 1060.797278][T22531] macvlan2: entered allmulticast mode [ 1064.449942][ T43] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1064.529534][T22570] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1064.549148][ T43] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1064.579254][ T43] usb 3-1: can't read configurations, error -71 [ 1065.652169][ T9] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1066.580763][ T9] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 1066.589206][ T9] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1066.614315][ T9] usb 2-1: config 220 has no interface number 2 [ 1066.659465][ T9] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1066.722448][ T9] usb 2-1: config 220 interface 0 has no altsetting 0 [ 1066.777059][ T9] usb 2-1: config 220 interface 76 has no altsetting 0 [ 1066.814720][ T9] usb 2-1: config 220 interface 1 has no altsetting 0 [ 1066.854192][ T9] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1066.863831][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.883689][ T9] usb 2-1: Product: syz [ 1066.902508][ T9] usb 2-1: Manufacturer: syz [ 1066.917575][ T9] usb 2-1: SerialNumber: syz [ 1067.152202][ T9] usb 2-1: selecting invalid altsetting 0 [ 1067.163571][ T9] usb 2-1: selecting invalid altsetting 0 [ 1067.200060][ T9] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 1067.216679][ T9] usb 2-1: No valid video chain found. [ 1067.261530][ T9] usb 2-1: selecting invalid altsetting 0 [ 1067.292722][ T9] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 1067.337997][ T9] usb 2-1: USB disconnect, device number 93 [ 1067.513164][ T43] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1067.577548][T22603] ptrace attach of "./syz-executor exec"[16375] was attempted by "./syz-executor exec"[22603] [ 1067.642492][ T5987] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1067.863026][ T43] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1067.893371][ T43] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1067.923852][ T43] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1067.940141][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1067.957920][T22599] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1068.004554][ T43] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1068.034460][ T5987] usb 3-1: Using ep0 maxpacket: 8 [ 1068.060397][ T5987] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1068.085673][ T5987] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1068.111140][ T5987] usb 3-1: Product: syz [ 1068.130120][ T5987] usb 3-1: Manufacturer: syz [ 1068.171242][ T5987] usb 3-1: SerialNumber: syz [ 1068.409707][ T5987] usb 3-1: config 0 descriptor?? [ 1068.637753][ T5987] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1068.807107][T22612] netlink: 'syz.0.4368': attribute type 10 has an invalid length. [ 1068.825575][T22612] sit0: left promiscuous mode [ 1069.238172][T22619] netlink: 'syz.0.4370': attribute type 1 has an invalid length. [ 1069.266610][T22619] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4370'. [ 1070.087679][T22601] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4366'. [ 1070.138844][ T9] usb 4-1: USB disconnect, device number 91 [ 1070.953021][ T5987] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 1071.154099][ T981] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1071.237373][ T9] usb 3-1: USB disconnect, device number 88 [ 1071.333714][T22651] input: syz1 as /devices/virtual/input/input133 [ 1071.432077][T22652] netlink: 'syz.2.4378': attribute type 1 has an invalid length. [ 1071.669015][T22655] gretap1: entered allmulticast mode [ 1071.688520][T22655] bond1: (slave gretap1): making interface the new active one [ 1071.743301][T22655] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1071.802490][ T981] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1071.871880][ T981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1071.918947][ T981] usb 5-1: Product: syz [ 1071.932602][ T981] usb 5-1: Manufacturer: syz [ 1071.947241][ T981] usb 5-1: SerialNumber: syz [ 1072.209108][ T981] usb 5-1: config 0 descriptor?? [ 1072.223875][ T981] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1072.856304][T22669] netlink: 'syz.1.4380': attribute type 27 has an invalid length. [ 1073.014351][T22669] sit0: left promiscuous mode [ 1073.391152][T22669] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1073.417218][T22669] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1073.930320][ T3571] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1073.943568][ T49] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1073.956707][ T49] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1073.976477][T17103] usb 5-1: USB disconnect, device number 80 [ 1073.987522][T22687] tipc: Started in network mode [ 1073.992580][T22687] tipc: Node identity 080211, cluster identity 4711 [ 1073.999353][T22687] tipc: Enabled bearer , priority 0 [ 1074.007182][ T49] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1074.026950][T22687] mac80211_hwsim hwsim31 syzkaller0: entered promiscuous mode [ 1074.036963][T22687] mac80211_hwsim hwsim31 syzkaller0: entered allmulticast mode [ 1074.114540][T22672] usb 2-1: new full-speed USB device number 94 using dummy_hcd [ 1074.319570][T22672] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1074.345823][T22672] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1074.382009][T22672] usb 2-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=b5.b1 [ 1074.401299][T22672] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1074.419644][T22672] usb 2-1: Product: syz [ 1074.428560][T22672] usb 2-1: Manufacturer: syz [ 1074.436646][T22672] usb 2-1: SerialNumber: syz [ 1074.451340][T22672] usb 2-1: config 0 descriptor?? [ 1074.469999][T22672] option 2-1:0.0: GSM modem (1-port) converter detected [ 1074.482995][ T5927] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1074.655734][ T5927] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1074.716281][ T5927] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1074.799520][T22702] netlink: 'syz.0.4385': attribute type 1 has an invalid length. [ 1074.819176][T22702] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4385'. [ 1074.828998][ T5927] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1074.852520][ T5927] usb 5-1: Manufacturer: syz [ 1074.872785][ T5927] usb 5-1: SerialNumber: syz [ 1075.114807][T22672] tipc: Node number set to 134353152 [ 1075.217077][ T5927] usbhid 5-1:36.0: couldn't find an input interrupt endpoint [ 1075.288121][ T5927] usb 5-1: USB disconnect, device number 81 [ 1075.753653][T22711] netlink: 'syz.2.4389': attribute type 1 has an invalid length. [ 1075.840904][T22711] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1076.192495][ T5927] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1076.207212][T22672] usb 2-1: USB disconnect, device number 94 [ 1076.214244][T22672] option 2-1:0.0: device disconnected [ 1076.552440][ T5927] usb 3-1: Using ep0 maxpacket: 32 [ 1076.561438][ T5927] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1076.584560][ T5927] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1076.735421][ T5927] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 1076.750670][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1076.765472][ T5927] usb 3-1: Product: syz [ 1076.770060][ T5927] usb 3-1: Manufacturer: syz [ 1076.860161][ T5927] usb 3-1: SerialNumber: syz [ 1077.134968][T22711] bond2: (slave gretap2): making interface the new active one [ 1077.205718][T22711] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 1077.468954][ T5927] usb 3-1: Cannot retrieve CPort count: -110 [ 1077.482707][ T5927] usb 3-1: Cannot retrieve CPort count: -110 [ 1077.492327][ T5927] es2_ap_driver 3-1:7.0: probe with driver es2_ap_driver failed with error -110 [ 1077.533733][ T9] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1077.544034][ T5927] usb 3-1: USB disconnect, device number 89 [ 1077.702434][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 1077.721630][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1077.751501][ T9] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1077.785877][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1077.810472][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1077.824296][ T9] usb 4-1: Product: syz [ 1077.828465][ T9] usb 4-1: Manufacturer: syz [ 1077.833207][ T9] usb 4-1: SerialNumber: syz [ 1077.873905][ T9] usb 4-1: config 0 descriptor?? [ 1077.930917][T22753] ptrace attach of "./syz-executor exec"[16375] was attempted by "./syz-executor exec"[22753] [ 1078.240788][T17103] usb 4-1: USB disconnect, device number 92 [ 1078.246982][T22758] tipc: Enabling of bearer rejected, already enabled [ 1078.301753][T22758] tipc: Resetting bearer [ 1078.377123][T22765] program syz.2.4402 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1078.386498][ T43] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1078.602416][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 1078.656556][ T43] usb 5-1: New USB device found, idVendor=0471, idProduct=0313, bcdDevice=81.d5 [ 1078.685754][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1078.701630][ T43] usb 5-1: Product: syz [ 1078.716679][ T43] usb 5-1: Manufacturer: syz [ 1078.741507][ T43] usb 5-1: SerialNumber: syz [ 1078.755394][ T43] usb 5-1: config 0 descriptor?? [ 1078.770424][ T43] pwc: Philips PCVC720K/40 (ToUCam XS) USB webcam detected. [ 1078.942986][T22771] netlink: 'syz.1.4404': attribute type 1 has an invalid length. [ 1078.963107][T22771] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4404'. [ 1079.264692][T22774] FAULT_INJECTION: forcing a failure. [ 1079.264692][T22774] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1079.295760][T22774] CPU: 0 UID: 0 PID: 22774 Comm: syz.3.4405 Not tainted syzkaller #0 PREEMPT(full) [ 1079.295781][T22774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1079.295791][T22774] Call Trace: [ 1079.295799][T22774] [ 1079.295806][T22774] dump_stack_lvl+0x189/0x250 [ 1079.295831][T22774] ? __pfx____ratelimit+0x10/0x10 [ 1079.295849][T22774] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1079.295869][T22774] ? __pfx__printk+0x10/0x10 [ 1079.295892][T22774] ? fs_reclaim_acquire+0x7d/0x100 [ 1079.295924][T22774] should_fail_ex+0x414/0x560 [ 1079.295953][T22774] prepare_alloc_pages+0x213/0x610 [ 1079.295985][T22774] __alloc_frozen_pages_noprof+0x123/0x370 [ 1079.296007][T22774] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1079.296033][T22774] ? policy_nodemask+0x27c/0x720 [ 1079.296053][T22774] ? __lock_acquire+0xab9/0xd20 [ 1079.296080][T22774] alloc_pages_mpol+0x232/0x4a0 [ 1079.296106][T22774] alloc_pages_noprof+0xa9/0x190 [ 1079.296128][T22774] get_free_pages_noprof+0xf/0x80 [ 1079.296145][T22774] kasan_populate_vmalloc+0x33/0x1a0 [ 1079.296163][T22774] ? do_raw_spin_unlock+0x122/0x240 [ 1079.296185][T22774] alloc_vmap_area+0xd51/0x1490 [ 1079.296223][T22774] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1079.296244][T22774] ? __kasan_kmalloc+0x93/0xb0 [ 1079.296265][T22774] ? __kmalloc_cache_node_noprof+0x234/0x3d0 [ 1079.296287][T22774] ? __get_vm_area_node+0x13f/0x300 [ 1079.296308][T22774] ? copy_process+0x54b/0x3c00 [ 1079.296327][T22774] __get_vm_area_node+0x1f8/0x300 [ 1079.296354][T22774] __vmalloc_node_range_noprof+0x301/0x12f0 [ 1079.296377][T22774] ? copy_process+0x54b/0x3c00 [ 1079.296404][T22774] ? percpu_ref_get_many+0x19/0x140 [ 1079.296426][T22774] ? percpu_ref_get_many+0x19/0x140 [ 1079.296463][T22774] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1079.296489][T22774] ? memcpy_and_pad+0x48/0x80 [ 1079.296517][T22774] __vmalloc_node_noprof+0xc2/0x110 [ 1079.296540][T22774] ? copy_process+0x54b/0x3c00 [ 1079.296555][T22774] ? copy_process+0x54b/0x3c00 [ 1079.296574][T22774] dup_task_struct+0x3e7/0x860 [ 1079.296612][T22774] copy_process+0x54b/0x3c00 [ 1079.296658][T22774] ? __pfx_copy_process+0x10/0x10 [ 1079.296687][T22774] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 1079.296709][T22774] vhost_task_create+0x1c4/0x290 [ 1079.296729][T22774] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 1079.296752][T22774] ? __pfx_vhost_task_create+0x10/0x10 [ 1079.296778][T22774] ? __pfx_vhost_task_fn+0x10/0x10 [ 1079.296817][T22774] kvm_mmu_post_init_vm+0x14c/0x300 [ 1079.296845][T22774] kvm_arch_vcpu_ioctl_run+0xdc/0x1940 [ 1079.296872][T22774] ? __mutex_trylock_common+0x153/0x260 [ 1079.296893][T22774] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1079.296911][T22774] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 1079.296933][T22774] ? rcu_is_watching+0x15/0xb0 [ 1079.296951][T22774] ? trace_contention_end+0x39/0x120 [ 1079.296982][T22774] ? look_up_lock_class+0x74/0x170 [ 1079.297001][T22774] ? register_lock_class+0x51/0x320 [ 1079.297029][T22774] ? __lock_acquire+0xab9/0xd20 [ 1079.297081][T22774] kvm_vcpu_ioctl+0x95c/0xe90 [ 1079.297108][T22774] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1079.297126][T22774] ? __lock_acquire+0xab9/0xd20 [ 1079.297168][T22774] ? __fget_files+0x2a/0x420 [ 1079.297187][T22774] ? __fget_files+0x2a/0x420 [ 1079.297200][T22774] ? __fget_files+0x3a0/0x420 [ 1079.297214][T22774] ? __fget_files+0x2a/0x420 [ 1079.297231][T22774] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1079.297251][T22774] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1079.297269][T22774] __se_sys_ioctl+0xfc/0x170 [ 1079.297292][T22774] do_syscall_64+0xfa/0x3b0 [ 1079.297309][T22774] ? lockdep_hardirqs_on+0x9c/0x150 [ 1079.297326][T22774] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1079.297343][T22774] ? clear_bhb_loop+0x60/0xb0 [ 1079.297362][T22774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1079.297377][T22774] RIP: 0033:0x7ff06278ebe9 [ 1079.297393][T22774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1079.297407][T22774] RSP: 002b:00007ff063691038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1079.297424][T22774] RAX: ffffffffffffffda RBX: 00007ff0629c5fa0 RCX: 00007ff06278ebe9 [ 1079.297437][T22774] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 1079.297447][T22774] RBP: 00007ff063691090 R08: 0000000000000000 R09: 0000000000000000 [ 1079.297457][T22774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1079.297466][T22774] R13: 00007ff0629c6038 R14: 00007ff0629c5fa0 R15: 00007ff062aefa28 [ 1079.297494][T22774] [ 1079.297617][T22774] syz.3.4405: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 1079.298890][T22777] tipc: Enabling of bearer rejected, already enabled [ 1079.307606][T22774] ,cpuset=/,mems_allowed=0-1 [ 1079.795556][T22774] CPU: 0 UID: 0 PID: 22774 Comm: syz.3.4405 Not tainted syzkaller #0 PREEMPT(full) [ 1079.795572][T22774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1079.795578][T22774] Call Trace: [ 1079.795583][T22774] [ 1079.795588][T22774] dump_stack_lvl+0x189/0x250 [ 1079.795615][T22774] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1079.795635][T22774] ? __pfx__printk+0x10/0x10 [ 1079.795658][T22774] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1079.795678][T22774] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1079.795695][T22774] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 1079.795708][T22774] warn_alloc+0x214/0x310 [ 1079.795723][T22774] ? kasan_quarantine_put+0xdd/0x220 [ 1079.795734][T22774] ? lockdep_hardirqs_on+0x9c/0x150 [ 1079.795746][T22774] ? __pfx_warn_alloc+0x10/0x10 [ 1079.795769][T22774] ? kfree+0x18e/0x440 [ 1079.795787][T22774] ? __get_vm_area_node+0x13f/0x300 [ 1079.795808][T22774] ? copy_process+0x54b/0x3c00 [ 1079.795827][T22774] ? __get_vm_area_node+0x211/0x300 [ 1079.795849][T22774] __vmalloc_node_range_noprof+0x326/0x12f0 [ 1079.795869][T22774] ? percpu_ref_get_many+0x19/0x140 [ 1079.795883][T22774] ? percpu_ref_get_many+0x19/0x140 [ 1079.795910][T22774] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1079.795944][T22774] ? memcpy_and_pad+0x48/0x80 [ 1079.795973][T22774] __vmalloc_node_noprof+0xc2/0x110 [ 1079.795994][T22774] ? copy_process+0x54b/0x3c00 [ 1079.796003][T22774] ? copy_process+0x54b/0x3c00 [ 1079.796014][T22774] dup_task_struct+0x3e7/0x860 [ 1079.796028][T22774] copy_process+0x54b/0x3c00 [ 1079.796058][T22774] ? __pfx_copy_process+0x10/0x10 [ 1079.796089][T22774] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 1079.796116][T22774] vhost_task_create+0x1c4/0x290 [ 1079.796136][T22774] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 1079.796151][T22774] ? __pfx_vhost_task_create+0x10/0x10 [ 1079.796169][T22774] ? __pfx_vhost_task_fn+0x10/0x10 [ 1079.796192][T22774] kvm_mmu_post_init_vm+0x14c/0x300 [ 1079.796217][T22774] kvm_arch_vcpu_ioctl_run+0xdc/0x1940 [ 1079.796245][T22774] ? __mutex_trylock_common+0x153/0x260 [ 1079.796267][T22774] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1079.796285][T22774] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 1079.796299][T22774] ? rcu_is_watching+0x15/0xb0 [ 1079.796309][T22774] ? trace_contention_end+0x39/0x120 [ 1079.796320][T22774] ? look_up_lock_class+0x74/0x170 [ 1079.796330][T22774] ? register_lock_class+0x51/0x320 [ 1079.796350][T22774] ? __lock_acquire+0xab9/0xd20 [ 1079.796404][T22774] kvm_vcpu_ioctl+0x95c/0xe90 [ 1079.796432][T22774] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1079.796443][T22774] ? __lock_acquire+0xab9/0xd20 [ 1079.796468][T22774] ? __fget_files+0x2a/0x420 [ 1079.796479][T22774] ? __fget_files+0x2a/0x420 [ 1079.796486][T22774] ? __fget_files+0x3a0/0x420 [ 1079.796494][T22774] ? __fget_files+0x2a/0x420 [ 1079.796512][T22774] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1079.796533][T22774] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1079.796567][T22774] __se_sys_ioctl+0xfc/0x170 [ 1079.796587][T22774] do_syscall_64+0xfa/0x3b0 [ 1079.796596][T22774] ? lockdep_hardirqs_on+0x9c/0x150 [ 1079.796605][T22774] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1079.796614][T22774] ? clear_bhb_loop+0x60/0xb0 [ 1079.796627][T22774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1079.796636][T22774] RIP: 0033:0x7ff06278ebe9 [ 1079.796649][T22774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1079.796664][T22774] RSP: 002b:00007ff063691038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1079.796682][T22774] RAX: ffffffffffffffda RBX: 00007ff0629c5fa0 RCX: 00007ff06278ebe9 [ 1079.796696][T22774] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 1079.796707][T22774] RBP: 00007ff063691090 R08: 0000000000000000 R09: 0000000000000000 [ 1079.796718][T22774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1079.796729][T22774] R13: 00007ff0629c6038 R14: 00007ff0629c5fa0 R15: 00007ff062aefa28 [ 1079.796748][T22774] [ 1079.796898][T22774] Mem-Info: [ 1080.218169][T22774] active_anon:9867 inactive_anon:0 isolated_anon:0 [ 1080.218169][T22774] active_file:18462 inactive_file:40322 isolated_file:0 [ 1080.218169][T22774] unevictable:768 dirty:242 writeback:0 [ 1080.218169][T22774] slab_reclaimable:7876 slab_unreclaimable:103034 [ 1080.218169][T22774] mapped:36302 shmem:4978 pagetables:1321 [ 1080.218169][T22774] sec_pagetables:0 bounce:0 [ 1080.218169][T22774] kernel_misc_reclaimable:0 [ 1080.218169][T22774] free:1297844 free_pcp:14427 free_cma:0 [ 1080.336802][T22774] Node 0 active_anon:39868kB inactive_anon:0kB active_file:73848kB inactive_file:161088kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:129708kB dirty:968kB writeback:0kB shmem:18376kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12952kB pagetables:5176kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1080.377371][T22774] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:108kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1080.427976][T22774] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1080.488559][T22774] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 1080.499026][ T43] pwc: send_video_command error -71 [ 1080.514404][ T43] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1080.538881][ T43] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 1080.556038][ T43] usb 5-1: USB disconnect, device number 82 [ 1080.567043][T22774] Node 0 DMA32 free:1281612kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:38324kB inactive_anon:0kB active_file:73848kB inactive_file:159520kB unevictable:1536kB writepending:968kB present:3129332kB managed:2557428kB mlocked:0kB bounce:0kB free_pcp:43892kB local_pcp:21824kB free_cma:0kB [ 1080.635955][T22774] lowmem_reserve[]: 0 0 1 1 1 [ 1080.640702][T22774] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 1080.792320][T22774] lowmem_reserve[]: 0 0 0 0 0 [ 1080.831505][T22774] Node 1 Normal free:3894964kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:15972kB local_pcp:10272kB free_cma:0kB [ 1080.900022][T22774] lowmem_reserve[]: 0 0 0 0 0 [ 1080.908327][T22774] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1080.925859][T22774] Node 0 DMA32: 2054*4kB (UME) 995*8kB (UME) 840*16kB (UME) 579*32kB (UME) 227*64kB (UME) 145*128kB (UME) 68*256kB (UME) 71*512kB (UME) 30*1024kB (UME) 8*2048kB (UM) 272*4096kB (UM) = 1296208kB [ 1080.952331][T22774] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 1080.997179][T22774] Node 1 Normal: 209*4kB (UME) 30*8kB (UME) 46*16kB (UME) 105*32kB (UME) 44*64kB (UME) 9*128kB (UME) 5*256kB (ME) 5*512kB (ME) 1*1024kB (M) 3*2048kB (UME) 946*4096kB (M) = 3894964kB [ 1081.091034][T22774] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1081.124917][T22774] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1081.158560][T22774] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1081.168927][T22774] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1081.187462][T22774] 60888 total pagecache pages [ 1081.216045][T22774] 0 pages in swap cache [ 1081.223290][T22787] netlink: 'syz.0.4409': attribute type 25 has an invalid length. [ 1081.231191][T22787] netlink: 'syz.0.4409': attribute type 7 has an invalid length. [ 1081.242328][T22774] Free swap = 124996kB [ 1081.246496][T22774] Total swap = 124996kB [ 1081.612991][T22774] 2097051 pages RAM [ 1081.616832][T22774] 0 pages HighMem/MovableOnly [ 1081.623872][T22774] 425668 pages reserved [ 1081.628010][T22774] 0 pages cma reserved [ 1081.770525][T22799] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4411'. [ 1082.093331][T19349] Bluetooth: hci0: command 0x0406 tx timeout [ 1082.219244][T22806] netlink: 'syz.2.4413': attribute type 1 has an invalid length. [ 1082.628807][T22823] i2c i2c-0: Invalid block read size 255 [ 1084.637735][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 1084.637753][ T30] audit: type=1400 audit(1757327291.866:422): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=22851 comm="syz.2.4423" [ 1085.144337][T22862] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1086.132413][ T5987] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1086.176280][T22881] FAULT_INJECTION: forcing a failure. [ 1086.176280][T22881] name failslab, interval 1, probability 0, space 0, times 0 [ 1086.222699][T22881] CPU: 1 UID: 0 PID: 22881 Comm: syz.2.4432 Not tainted syzkaller #0 PREEMPT(full) [ 1086.222724][T22881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1086.222734][T22881] Call Trace: [ 1086.222742][T22881] [ 1086.222751][T22881] dump_stack_lvl+0x189/0x250 [ 1086.222776][T22881] ? __pfx____ratelimit+0x10/0x10 [ 1086.222794][T22881] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1086.222813][T22881] ? __pfx__printk+0x10/0x10 [ 1086.222839][T22881] ? rcu_is_watching+0x15/0xb0 [ 1086.222861][T22881] should_fail_ex+0x414/0x560 [ 1086.222890][T22881] should_failslab+0xa8/0x100 [ 1086.222915][T22881] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1086.222936][T22881] ? _sctp_make_chunk+0x14e/0x430 [ 1086.222958][T22881] _sctp_make_chunk+0x14e/0x430 [ 1086.222978][T22881] sctp_make_init+0x58b/0xd30 [ 1086.223014][T22881] ? __pfx_sctp_make_init+0x10/0x10 [ 1086.223048][T22881] ? arch_stack_walk+0xfc/0x150 [ 1086.223080][T22881] ? stack_trace_save+0x9c/0xe0 [ 1086.223101][T22881] sctp_sf_do_prm_asoc+0xd2/0x3f0 [ 1086.223127][T22881] sctp_do_sm+0x1e4/0x5a20 [ 1086.223147][T22881] ? __pfx_sctp_pname+0x10/0x10 [ 1086.223170][T22881] ? kasan_save_track+0x3e/0x80 [ 1086.223189][T22881] ? sctp_stream_init_ext+0x57/0x180 [ 1086.223209][T22881] ? sctp_sendmsg_to_asoc+0x12fd/0x1810 [ 1086.223226][T22881] ? sctp_sendmsg+0x1941/0x2810 [ 1086.223242][T22881] ? __sock_sendmsg+0x19c/0x270 [ 1086.223264][T22881] ? __sys_sendto+0x3bd/0x520 [ 1086.223280][T22881] ? do_syscall_64+0xfa/0x3b0 [ 1086.223295][T22881] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1086.223316][T22881] ? __pfx_sctp_do_sm+0x10/0x10 [ 1086.223375][T22881] ? __sk_mem_raise_allocated+0xaa9/0x1240 [ 1086.223407][T22881] sctp_primitive_ASSOCIATE+0x95/0xc0 [ 1086.223433][T22881] sctp_sendmsg_to_asoc+0x102d/0x1810 [ 1086.223450][T22881] ? __asan_memcpy+0x40/0x70 [ 1086.223477][T22881] ? sctp_assoc_add_peer+0xcfa/0x13b0 [ 1086.223512][T22881] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 1086.223531][T22881] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1086.223550][T22881] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1086.223568][T22881] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1086.223585][T22881] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1086.223605][T22881] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1086.223624][T22881] ? security_sctp_bind_connect+0x7e/0x2e0 [ 1086.223650][T22881] sctp_sendmsg+0x1941/0x2810 [ 1086.223682][T22881] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1086.223704][T22881] ? aa_sk_perm+0x81e/0x950 [ 1086.223733][T22881] ? __pfx_aa_sk_perm+0x10/0x10 [ 1086.223760][T22881] ? sock_rps_record_flow+0x19/0x410 [ 1086.223787][T22881] ? inet_sendmsg+0x2f4/0x370 [ 1086.223808][T22881] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1086.223830][T22881] __sock_sendmsg+0x19c/0x270 [ 1086.223857][T22881] __sys_sendto+0x3bd/0x520 [ 1086.223878][T22881] ? __pfx___sys_sendto+0x10/0x10 [ 1086.223894][T22881] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1086.223927][T22881] ? __fget_files+0x3a0/0x420 [ 1086.223954][T22881] ? ksys_write+0x22a/0x250 [ 1086.223979][T22881] ? __pfx_ksys_write+0x10/0x10 [ 1086.223997][T22881] ? rcu_is_watching+0x15/0xb0 [ 1086.224020][T22881] __x64_sys_sendto+0xde/0x100 [ 1086.224051][T22881] do_syscall_64+0xfa/0x3b0 [ 1086.224068][T22881] ? lockdep_hardirqs_on+0x9c/0x150 [ 1086.224085][T22881] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1086.224102][T22881] ? clear_bhb_loop+0x60/0xb0 [ 1086.224123][T22881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1086.224139][T22881] RIP: 0033:0x7fe3e158ebe9 [ 1086.224155][T22881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1086.224171][T22881] RSP: 002b:00007fe3e24ad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1086.224189][T22881] RAX: ffffffffffffffda RBX: 00007fe3e17c5fa0 RCX: 00007fe3e158ebe9 [ 1086.224203][T22881] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000003 [ 1086.224214][T22881] RBP: 00007fe3e24ad090 R08: 0000200000000040 R09: 0000000000000010 [ 1086.224226][T22881] R10: 00000000040008c0 R11: 0000000000000246 R12: 0000000000000002 [ 1086.224238][T22881] R13: 00007fe3e17c6038 R14: 00007fe3e17c5fa0 R15: 00007fe3e18efa28 [ 1086.224267][T22881] [ 1086.687452][ T5987] usb 2-1: device descriptor read/64, error -71 [ 1086.942341][ T5987] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1087.082326][ T5987] usb 2-1: device descriptor read/64, error -71 [ 1087.192794][ T5987] usb usb2-port1: attempt power cycle [ 1087.439771][ T9] hid_parser_main: 4 callbacks suppressed [ 1087.439791][ T9] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 1087.465454][ T9] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1087.512976][ T5927] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1087.562810][ T5987] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1087.610783][ T5987] usb 2-1: device descriptor read/8, error -71 [ 1087.772576][ T5927] usb 5-1: Using ep0 maxpacket: 8 [ 1087.791746][ T5927] usb 5-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76 [ 1087.800891][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1087.812476][ T9] usb 4-1: new full-speed USB device number 93 using dummy_hcd [ 1087.820193][ T5927] usb 5-1: Product: syz [ 1087.832361][ T5927] usb 5-1: Manufacturer: syz [ 1087.837080][ T5927] usb 5-1: SerialNumber: syz [ 1087.851958][ T5927] usb 5-1: config 0 descriptor?? [ 1087.877398][ T5927] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 1087.922316][ T5987] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1087.942924][ T5987] usb 2-1: device descriptor read/8, error -71 [ 1087.992264][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1088.052343][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 1088.064066][ T5987] usb usb2-port1: unable to enumerate USB device [ 1088.068427][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1088.112430][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.392941][ T9] usb 4-1: config 0 descriptor?? [ 1088.409252][T22897] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 1088.451658][ T9] hub 4-1:0.0: USB hub found [ 1088.717944][ T5927] gspca_m5602: Failed to find a sensor [ 1088.725538][ T5927] ALi m5602 5-1:0.0: ALi m5602 webcam failed [ 1088.754599][ T5927] usb 5-1: USB disconnect, device number 83 [ 1090.246457][T22926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4442'. [ 1090.255821][T22926] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4442'. [ 1090.265926][T22926] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4442'. [ 1090.351680][T22926] tipc: Enabled bearer , priority 0 [ 1090.365122][T22926] syzkaller0: entered promiscuous mode [ 1090.371459][T22926] syzkaller0: entered allmulticast mode [ 1090.782677][ T5987] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1090.818371][ T9] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 1090.980861][ T5987] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1091.017761][ T5987] usb 5-1: config 0 has no interfaces? [ 1091.033969][ T5987] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1091.043344][ T5987] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1091.055743][T22919] tipc: Resetting bearer [ 1091.063120][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 1091.073170][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1091.074650][ T5987] usb 5-1: Product: syz [ 1091.089693][ T5987] usb 5-1: Manufacturer: syz [ 1091.189570][ T5987] usb 5-1: config 0 descriptor?? [ 1091.206535][ T9] usb 4-1: USB disconnect, device number 93 [ 1091.233803][T22919] tipc: Disabling bearer [ 1091.424958][T22944] netlink: 172 bytes leftover after parsing attributes in process `syz.3.4450'. [ 1091.474857][T22930] tc_dump_action: action bad kind [ 1092.157531][ T9] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1092.222205][T22957] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4454'. [ 1092.395631][ T9] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1092.406857][ T9] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1092.431366][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1092.459175][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1092.537099][T22946] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1092.664140][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1092.776350][T22967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1092.841117][T22967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1092.960256][ T9] usb 4-1: USB disconnect, device number 94 [ 1093.076255][T22628] udevd[22628]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1093.780301][ T9] usb 5-1: USB disconnect, device number 84 [ 1095.252662][T22678] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1095.532294][T22678] usb 4-1: Using ep0 maxpacket: 32 [ 1095.554815][T22678] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1095.565746][T22678] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1095.652728][T22678] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1095.769391][T22678] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.938038][T22678] usb 4-1: config 0 descriptor?? [ 1095.950280][T23021] veth1_to_bond: entered allmulticast mode [ 1095.993521][T23021] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4474'. [ 1096.051777][ T5927] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1096.154445][T23021] bond0: (slave bond_slave_1): Releasing backup interface [ 1096.192378][ T5927] usb 5-1: device descriptor read/64, error -71 [ 1096.279431][T23021] veth1_to_bond (unregistering): left allmulticast mode [ 1096.385942][T22678] ft260 0003:0403:6030.001E: unknown main item tag 0x7 [ 1096.433983][ T5927] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1096.592871][ T5927] usb 5-1: device descriptor read/64, error -71 [ 1096.723925][ T5927] usb usb5-port1: attempt power cycle [ 1097.102337][ T5927] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1097.133544][ T5927] usb 5-1: device descriptor read/8, error -71 [ 1097.392968][ T5927] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1097.452975][ T5927] usb 5-1: device descriptor read/8, error -71 [ 1097.562631][ T5927] usb usb5-port1: unable to enumerate USB device [ 1097.888998][T22678] ft260 0003:0403:6030.001E: failed to retrieve chip version [ 1097.909579][T22678] ft260 0003:0403:6030.001E: probe with driver ft260 failed with error -71 [ 1097.935676][T22678] usb 4-1: USB disconnect, device number 95 [ 1098.423968][ T30] audit: type=1326 audit(1757327305.656:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23057 comm="syz.2.4483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3e158ebe9 code=0x7ffc0000 [ 1098.505401][ T30] audit: type=1326 audit(1757327305.706:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23057 comm="syz.2.4483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3e158ebe9 code=0x7ffc0000 [ 1098.528005][ T30] audit: type=1326 audit(1757327305.716:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23057 comm="syz.2.4483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7fe3e158ebe9 code=0x7ffc0000 [ 1098.562570][ T30] audit: type=1326 audit(1757327305.716:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23057 comm="syz.2.4483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3e158ebe9 code=0x7ffc0000 [ 1098.592975][ T30] audit: type=1326 audit(1757327305.716:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23057 comm="syz.2.4483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3e158ebe9 code=0x7ffc0000 [ 1098.633109][ T30] audit: type=1326 audit(1757327305.716:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23057 comm="syz.2.4483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe3e158ebe9 code=0x7ffc0000 [ 1098.676856][ T30] audit: type=1326 audit(1757327305.716:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23057 comm="syz.2.4483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3e158ebe9 code=0x7ffc0000 [ 1098.676897][ T30] audit: type=1326 audit(1757327305.716:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23057 comm="syz.2.4483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3e158ebe9 code=0x7ffc0000 [ 1098.676933][ T30] audit: type=1326 audit(1757327305.716:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23057 comm="syz.2.4483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe3e158ebe9 code=0x7ffc0000 [ 1098.676971][ T30] audit: type=1326 audit(1757327305.786:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23057 comm="syz.2.4483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3e158ebe9 code=0x7ffc0000 [ 1098.683408][T22678] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1098.744026][ C1] vkms_vblank_simulate: vblank timer overrun [ 1098.844012][T22678] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1098.844048][T22678] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1098.844085][T22678] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1098.844106][T22678] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1098.847532][T23055] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1098.851018][T22678] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1098.955033][T23070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1098.955386][T23070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1099.065676][ T5987] usb 4-1: USB disconnect, device number 96 [ 1099.086489][T22628] udevd[22628]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1099.192346][T17103] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1099.414309][T17103] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1099.424547][T17103] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1099.458569][T17103] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1099.469574][T17103] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1099.496356][T17103] usb 3-1: SerialNumber: syz [ 1099.747648][T17103] usb 3-1: 0:2 : does not exist [ 1099.805946][T17103] usb 3-1: USB disconnect, device number 90 [ 1099.847464][T22628] udevd[22628]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1100.365848][T23104] netlink: 'syz.2.4497': attribute type 12 has an invalid length. [ 1100.443322][T23104] FAULT_INJECTION: forcing a failure. [ 1100.443322][T23104] name failslab, interval 1, probability 0, space 0, times 0 [ 1100.477562][T23104] CPU: 1 UID: 0 PID: 23104 Comm: syz.2.4497 Not tainted syzkaller #0 PREEMPT(full) [ 1100.477590][T23104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1100.477601][T23104] Call Trace: [ 1100.477609][T23104] [ 1100.477617][T23104] dump_stack_lvl+0x189/0x250 [ 1100.477642][T23104] ? __pfx____ratelimit+0x10/0x10 [ 1100.477661][T23104] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1100.477681][T23104] ? __pfx__printk+0x10/0x10 [ 1100.477701][T23104] ? genl_rcv+0x28/0x40 [ 1100.477722][T23104] ? ____sys_sendmsg+0x505/0x830 [ 1100.477743][T23104] ? __x64_sys_sendmsg+0x19b/0x260 [ 1100.477774][T23104] should_fail_ex+0x414/0x560 [ 1100.477804][T23104] should_failslab+0xa8/0x100 [ 1100.477829][T23104] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1100.477856][T23104] ? skb_clone+0x212/0x3a0 [ 1100.477881][T23104] skb_clone+0x212/0x3a0 [ 1100.477905][T23104] __netlink_deliver_tap+0x404/0x850 [ 1100.477936][T23104] ? netlink_deliver_tap+0x2e/0x1b0 [ 1100.477955][T23104] netlink_deliver_tap+0x19c/0x1b0 [ 1100.477975][T23104] netlink_sendskb+0x68/0x140 [ 1100.478002][T23104] netlink_unicast+0x397/0x9e0 [ 1100.478023][T23104] ? __asan_memcpy+0x40/0x70 [ 1100.478052][T23104] ? __pfx_netlink_unicast+0x10/0x10 [ 1100.478084][T23104] netlink_rcv_skb+0x28c/0x470 [ 1100.478101][T23104] ? __lock_acquire+0xab9/0xd20 [ 1100.478125][T23104] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1100.478149][T23104] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1100.478187][T23104] ? down_read+0x1ad/0x2e0 [ 1100.478210][T23104] genl_rcv+0x28/0x40 [ 1100.478230][T23104] netlink_unicast+0x82c/0x9e0 [ 1100.478264][T23104] ? __pfx_netlink_unicast+0x10/0x10 [ 1100.478290][T23104] ? netlink_sendmsg+0x642/0xb30 [ 1100.478306][T23104] ? skb_put+0x11b/0x210 [ 1100.478329][T23104] netlink_sendmsg+0x805/0xb30 [ 1100.478358][T23104] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1100.478380][T23104] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1100.478400][T23104] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1100.478419][T23104] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1100.478438][T23104] __sock_sendmsg+0x21c/0x270 [ 1100.478466][T23104] ____sys_sendmsg+0x505/0x830 [ 1100.478493][T23104] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1100.478523][T23104] ? import_iovec+0x74/0xa0 [ 1100.478550][T23104] ___sys_sendmsg+0x21f/0x2a0 [ 1100.478573][T23104] ? __pfx____sys_sendmsg+0x10/0x10 [ 1100.478628][T23104] ? __fget_files+0x2a/0x420 [ 1100.478643][T23104] ? __fget_files+0x3a0/0x420 [ 1100.478667][T23104] __x64_sys_sendmsg+0x19b/0x260 [ 1100.478690][T23104] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1100.478721][T23104] ? __pfx_ksys_write+0x10/0x10 [ 1100.478741][T23104] ? rcu_is_watching+0x15/0xb0 [ 1100.478764][T23104] ? do_syscall_64+0xbe/0x3b0 [ 1100.478785][T23104] do_syscall_64+0xfa/0x3b0 [ 1100.478799][T23104] ? lockdep_hardirqs_on+0x9c/0x150 [ 1100.478816][T23104] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1100.478832][T23104] ? clear_bhb_loop+0x60/0xb0 [ 1100.478860][T23104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1100.478877][T23104] RIP: 0033:0x7fe3e158ebe9 [ 1100.478893][T23104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1100.478909][T23104] RSP: 002b:00007fe3e24ad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1100.478928][T23104] RAX: ffffffffffffffda RBX: 00007fe3e17c5fa0 RCX: 00007fe3e158ebe9 [ 1100.478941][T23104] RDX: 0000000000000840 RSI: 0000200000004100 RDI: 0000000000000003 [ 1100.478952][T23104] RBP: 00007fe3e24ad090 R08: 0000000000000000 R09: 0000000000000000 [ 1100.478964][T23104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1100.478974][T23104] R13: 00007fe3e17c6038 R14: 00007fe3e17c5fa0 R15: 00007fe3e18efa28 [ 1100.479004][T23104] [ 1100.836539][ C1] vkms_vblank_simulate: vblank timer overrun [ 1101.172503][ T9] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1101.352306][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 1101.360040][ T9] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1101.663606][ T9] usb 2-1: config 179 has no interface number 0 [ 1101.765446][ T9] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1101.777912][ T9] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1101.818431][ T9] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1101.829964][ T9] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1101.851705][ T9] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1101.870245][ T9] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1101.894238][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1101.902542][T22678] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1101.926185][T23110] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1102.072467][T22678] usb 3-1: Using ep0 maxpacket: 16 [ 1102.083598][T22678] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1102.104808][T22678] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1102.120774][T22678] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1102.133553][T22678] usb 3-1: config 0 descriptor?? [ 1102.257874][ T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input134 [ 1102.452679][T23110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1102.462554][T23110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1102.490472][ T43] usb 2-1: USB disconnect, device number 99 [ 1102.490476][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1102.490518][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1102.610304][T22678] mcp2221 0003:04D8:00DD.001F: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 1103.102355][T17103] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1103.242379][T17103] usb 5-1: device descriptor read/64, error -71 [ 1103.492386][T17103] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1103.632353][T17103] usb 5-1: device descriptor read/64, error -71 [ 1103.669888][T23151] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1103.931023][T17103] usb usb5-port1: attempt power cycle [ 1104.468715][ T9] usb 3-1: USB disconnect, device number 91 [ 1104.502350][T17103] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1104.554266][T17103] usb 5-1: device descriptor read/8, error -71 [ 1104.611285][T23161] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4512'. [ 1104.644970][T23164] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4514'. [ 1104.654582][T23164] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4514'. [ 1104.786065][T23167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4513'. [ 1104.898063][T17103] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1105.047955][T17103] usb 5-1: device descriptor read/8, error -71 [ 1105.164082][T17103] usb usb5-port1: unable to enumerate USB device [ 1105.332306][ T5987] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1105.664560][T17103] hid-generic 00A0:0006:0003.0020: unknown main item tag 0x0 [ 1105.686824][T17103] hid-generic 00A0:0006:0003.0020: unknown main item tag 0x0 [ 1105.702286][T17103] hid-generic 00A0:0006:0003.0020: unknown main item tag 0x0 [ 1105.723875][T17103] hid-generic 00A0:0006:0003.0020: unknown main item tag 0x0 [ 1105.767309][T17103] hid-generic 00A0:0006:0003.0020: unknown main item tag 0x0 [ 1105.775147][T17103] hid-generic 00A0:0006:0003.0020: unknown main item tag 0x0 [ 1105.785759][T17103] hid-generic 00A0:0006:0003.0020: unknown main item tag 0x0 [ 1105.793283][T17103] hid-generic 00A0:0006:0003.0020: unknown main item tag 0x0 [ 1105.800884][T17103] hid-generic 00A0:0006:0003.0020: unknown main item tag 0x0 [ 1105.867465][ T5987] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1105.884090][ T5987] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 1105.893451][ T5987] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.901436][ T5987] usb 4-1: Product: syz [ 1105.909954][T17103] hid-generic 00A0:0006:0003.0020: unknown main item tag 0x0 [ 1105.920224][ T5987] usb 4-1: Manufacturer: syz [ 1105.927802][ T5987] usb 4-1: SerialNumber: syz [ 1105.932663][T22672] usb 2-1: new full-speed USB device number 100 using dummy_hcd [ 1105.944444][T17103] hid-generic 00A0:0006:0003.0020: hidraw0: HID v0.05 Device [syz1] on syz0 [ 1105.959386][ T5987] usb 4-1: config 0 descriptor?? [ 1106.067445][T22672] usb 2-1: device descriptor read/64, error -71 [ 1106.352359][T22672] usb 2-1: new full-speed USB device number 101 using dummy_hcd [ 1106.482317][T22672] usb 2-1: device descriptor read/64, error -71 [ 1106.593147][T22672] usb usb2-port1: attempt power cycle [ 1106.601194][ T9] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1106.770038][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1106.776849][ T9] usb 5-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 1106.788866][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1106.799481][ T9] usb 5-1: config 0 descriptor?? [ 1106.942359][T22672] usb 2-1: new full-speed USB device number 102 using dummy_hcd [ 1106.963174][T22672] usb 2-1: device descriptor read/8, error -71 [ 1107.202395][T22672] usb 2-1: new full-speed USB device number 103 using dummy_hcd [ 1107.222955][T22672] usb 2-1: device descriptor read/8, error -71 [ 1107.325637][T23196] netlink: 'syz.4.4520': attribute type 1 has an invalid length. [ 1107.334776][T22672] usb usb2-port1: unable to enumerate USB device [ 1107.428413][T23199] bond2: entered promiscuous mode [ 1107.433600][T23199] bond2: entered allmulticast mode [ 1107.439754][T23199] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1107.475995][T23196] bridge2: entered promiscuous mode [ 1107.481667][T23196] bridge2: entered allmulticast mode [ 1107.488095][T23196] bond2: (slave bridge2): Enslaving as a backup interface with an up link [ 1107.649212][ T3571] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1107.804569][ T49] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1108.323471][T22678] usb 4-1: USB disconnect, device number 97 [ 1108.629841][T23204] ptrace attach of "./syz-executor exec"[17353] was attempted by "./syz-executor exec"[23204] [ 1108.810813][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 1108.869817][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1108.881489][ T9] usb 5-1: USB disconnect, device number 93 [ 1109.233926][T23214] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1109.499356][T23217] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4526'. [ 1109.525870][T23217] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4526'. [ 1109.992337][ T9] usb 5-1: new full-speed USB device number 94 using dummy_hcd [ 1110.173337][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1110.200808][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1110.300308][ T9] usb 5-1: New USB device found, idVendor=0b05, idProduct=18c6, bcdDevice= 0.00 [ 1110.388089][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1110.850283][ T9] usb 5-1: config 0 descriptor?? [ 1110.862770][T23219] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1111.144426][T23235] binder: 23233:23235 ioctl c0306201 200000000080 returned -14 [ 1111.280102][ T9] hid (null): report_id 57294 is invalid [ 1111.290748][ T9] asus 0003:0B05:18C6.0021: collection stack underflow [ 1111.315147][ T9] asus 0003:0B05:18C6.0021: item 0 1 0 12 parsing failed [ 1111.356097][ T9] asus 0003:0B05:18C6.0021: Asus hid parse failed: -22 [ 1111.374015][ T9] asus 0003:0B05:18C6.0021: probe with driver asus failed with error -22 [ 1111.489966][T23219] batadv_slave_1: entered promiscuous mode [ 1111.509790][ T9] usb 5-1: USB disconnect, device number 94 [ 1111.541353][T23218] batadv_slave_1: left promiscuous mode [ 1111.596047][ T5927] usb 4-1: new full-speed USB device number 98 using dummy_hcd [ 1111.767519][ T5927] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1111.779098][ T5927] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1111.789396][ T5927] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1111.820451][ T5927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.884345][ T5927] usb 4-1: config 0 descriptor?? [ 1111.954039][ T5927] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1111.960653][ T5927] dvb-usb: bulk message failed: -22 (3/0) [ 1111.970739][ T5927] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1111.992327][ T5927] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1112.019708][ T5927] usb 4-1: media controller created [ 1112.081369][ T5927] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1112.117432][ T5927] dvb-usb: bulk message failed: -22 (6/0) [ 1112.123861][ T5927] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1112.157601][T23242] dvb-usb: bulk message failed: -22 (2/0) [ 1112.167017][T23242] netlink: 'syz.3.4532': attribute type 6 has an invalid length. [ 1112.180537][ T5927] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input135 [ 1112.267063][ T5927] dvb-usb: schedule remote query interval to 150 msecs. [ 1112.290165][T23251] netlink: 'syz.2.4537': attribute type 10 has an invalid length. [ 1112.310098][ T5927] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1112.462302][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1112.468689][ T9] dvb-usb: error while querying for an remote control event. [ 1112.652829][ T5927] dvb-usb: bulk message failed: -22 (1/0) [ 1112.678724][ T5927] dvb-usb: error while querying for an remote control event. [ 1112.794820][ T5184] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 1112.862329][ T5927] dvb-usb: bulk message failed: -22 (1/0) [ 1112.920471][ T5927] dvb-usb: error while querying for an remote control event. [ 1113.092309][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1113.098229][ T9] dvb-usb: error while querying for an remote control event. [ 1113.422380][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1113.428529][ T9] dvb-usb: error while querying for an remote control event. [ 1113.592797][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1113.602424][ T9] dvb-usb: error while querying for an remote control event. [ 1113.772679][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1113.782524][ T9] dvb-usb: error while querying for an remote control event. [ 1113.832655][ T5987] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1114.026607][ T5987] usb 5-1: Using ep0 maxpacket: 16 [ 1114.052195][T23279] binder: 23278:23279 unknown command 0 [ 1114.058397][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 1114.065712][ T9] dvb-usb: error while querying for an remote control event. [ 1114.079846][T23279] binder: 23278:23279 ioctl c0306201 200000000080 returned -22 [ 1114.089246][ T5987] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1114.156759][T23280] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1114.192788][ T5987] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1114.194083][T23279] binder: BINDER_SET_CONTEXT_MGR already set [ 1114.232324][ T5927] dvb-usb: bulk message failed: -22 (1/0) [ 1114.234906][ T5987] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1114.238069][ T5927] dvb-usb: error while querying for an remote control event. [ 1114.281525][T23282] binder: BINDER_SET_CONTEXT_MGR already set [ 1114.281596][T23279] binder: 23278:23279 ioctl 4018620d 200000000040 returned -16 [ 1114.298815][T23282] binder: 23281:23282 ioctl 4018620d 200000000040 returned -16 [ 1114.312990][ T5987] usb 5-1: config 0 descriptor?? [ 1114.344971][ T5987] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input136 [ 1114.360387][T23286] binder: 23281:23286 ioctl c0306201 0 returned -14 [ 1114.418871][T23282] netlink: 'syz.0.4547': attribute type 10 has an invalid length. [ 1114.454468][T23287] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4548'. [ 1114.479116][T22672] usb 4-1: USB disconnect, device number 98 [ 1114.570125][ T5219] bcm5974 5-1:0.0: could not read from device [ 1114.601270][ T5987] bcm5974 5-1:0.0: could not read from device [ 1114.627192][ T5219] bcm5974 5-1:0.0: could not read from device [ 1114.655529][ T5987] input: failed to attach handler mousedev to device input136, error: -5 [ 1114.695418][ T5219] bcm5974 5-1:0.0: could not read from device [ 1114.707829][ T5987] usb 5-1: USB disconnect, device number 95 [ 1114.815844][T22672] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1114.939016][T23302] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1115.032363][ T43] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1115.185372][ T43] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1115.200166][ T43] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1115.211990][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1115.220925][ T43] usb 3-1: Product: syz [ 1115.225375][ T43] usb 3-1: Manufacturer: syz [ 1115.229990][ T43] usb 3-1: SerialNumber: syz [ 1115.494439][T23300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1115.541042][T23300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1115.648930][T23300] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4552'. [ 1115.775750][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.782807][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.887385][ T43] cdc_ether 3-1:1.0: skipping garbage [ 1115.940966][ T43] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 1115.961698][ T43] usb 3-1: USB disconnect, device number 92 [ 1117.375179][T23331] binder: 23329:23331 ioctl c0306201 0 returned -14 [ 1117.383939][T23331] netlink: 'syz.1.4560': attribute type 10 has an invalid length. [ 1117.691573][T23346] input: syz1 as /devices/virtual/input/input137 [ 1117.882361][T23346] netlink: 'syz.3.4563': attribute type 1 has an invalid length. [ 1117.907325][T23354] netlink: 'syz.4.4564': attribute type 1 has an invalid length. [ 1117.922513][T23354] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4564'. [ 1118.080134][T23352] gretap1: entered allmulticast mode [ 1118.089051][T23352] bond1: (slave gretap1): making interface the new active one [ 1118.120367][T23352] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1118.566021][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1118.566038][ T30] audit: type=1326 audit(1757327325.786:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23356 comm="syz.0.4567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbde18ebe9 code=0x7ffc0000 [ 1118.802871][ T30] audit: type=1326 audit(1757327325.786:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23356 comm="syz.0.4567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbde18ebe9 code=0x7ffc0000 [ 1119.028562][ T30] audit: type=1326 audit(1757327325.786:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23356 comm="syz.0.4567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fcbde18ebe9 code=0x7ffc0000 [ 1119.082019][ T30] audit: type=1326 audit(1757327325.786:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23356 comm="syz.0.4567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbde18ebe9 code=0x7ffc0000 [ 1119.192573][ T30] audit: type=1326 audit(1757327325.786:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23356 comm="syz.0.4567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbde18ebe9 code=0x7ffc0000 [ 1119.465234][ T30] audit: type=1326 audit(1757327325.786:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23356 comm="syz.0.4567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fcbde18ebe9 code=0x7ffc0000 [ 1119.489326][ T30] audit: type=1326 audit(1757327325.786:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23356 comm="syz.0.4567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbde18ebe9 code=0x7ffc0000 [ 1119.511732][ C1] vkms_vblank_simulate: vblank timer overrun [ 1119.602345][ T30] audit: type=1326 audit(1757327325.786:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23356 comm="syz.0.4567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcbde18ebe9 code=0x7ffc0000 [ 1119.625349][ T30] audit: type=1326 audit(1757327325.796:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23356 comm="syz.0.4567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbde18ebe9 code=0x7ffc0000 [ 1119.647920][ T30] audit: type=1326 audit(1757327325.796:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23356 comm="syz.0.4567" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fcbde18ebe9 code=0x7ffc0000 [ 1120.157208][T23378] binder: 23377:23378 ioctl c0306201 0 returned -14 [ 1120.215643][T23378] netlink: 'syz.3.4573': attribute type 10 has an invalid length. [ 1120.233145][T23378] 8021q: adding VLAN 0 to HW filter on device team0 [ 1120.243867][T23378] bond0: (slave team0): Enslaving as an active interface with an up link [ 1120.322434][T17103] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1120.775623][T17103] usb 5-1: Using ep0 maxpacket: 16 [ 1120.785875][T17103] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1120.806217][T17103] usb 5-1: config 0 has no interfaces? [ 1120.903041][T23399] netlink: 'syz.0.4576': attribute type 1 has an invalid length. [ 1120.923779][T23399] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4576'. [ 1120.947781][T17103] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 1120.962279][T17103] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.970279][T17103] usb 5-1: Product: syz [ 1121.002897][T17103] usb 5-1: Manufacturer: syz [ 1121.020611][T17103] usb 5-1: SerialNumber: syz [ 1121.030535][T17103] usb 5-1: config 0 descriptor?? [ 1121.399900][T23408] pimreg: tun_chr_ioctl cmd 1074025677 [ 1121.507921][T23408] pimreg: linktype set to 769 [ 1122.025953][T23422] netlink: 'syz.0.4584': attribute type 10 has an invalid length. [ 1122.242381][ T5918] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1122.461590][ T5918] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1122.482108][ T5918] usb 4-1: config 7 has an invalid interface number: 21 but max is 0 [ 1122.523828][ T5918] usb 4-1: config 7 has an invalid interface number: 234 but max is 0 [ 1122.550447][ T5918] usb 4-1: config 7 has 2 interfaces, different from the descriptor's value: 1 [ 1122.565395][ T5918] usb 4-1: config 7 has no interface number 0 [ 1122.574336][ T5918] usb 4-1: config 7 has no interface number 1 [ 1122.652108][ T5918] usb 4-1: config 7 interface 21 altsetting 4 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 1122.678724][ T5918] usb 4-1: config 7 interface 21 altsetting 4 bulk endpoint 0xE has invalid maxpacket 32 [ 1122.701802][ T5918] usb 4-1: config 7 interface 21 altsetting 4 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 1122.727190][ T5918] usb 4-1: config 7 interface 21 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 1122.747496][ T5918] usb 4-1: config 7 interface 21 altsetting 4 bulk endpoint 0xC has invalid maxpacket 8 [ 1122.765683][ T5918] usb 4-1: config 7 interface 21 altsetting 4 has a duplicate endpoint with address 0xA, skipping [ 1122.910503][ T5918] usb 4-1: config 7 interface 21 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1122.925235][ T5918] usb 4-1: config 7 interface 21 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 1122.936261][ T5918] usb 4-1: config 7 interface 21 altsetting 4 has a duplicate endpoint with address 0xC, skipping [ 1122.947204][ T5918] usb 4-1: config 7 interface 21 altsetting 4 has 14 endpoint descriptors, different from the interface descriptor's value: 16 [ 1122.961046][ T5918] usb 4-1: too many endpoints for config 7 interface 234 altsetting 143: 239, using maximum allowed: 30 [ 1122.977331][ T5918] usb 4-1: config 7 interface 234 altsetting 143 has a duplicate endpoint with address 0x5, skipping [ 1123.047065][ T5918] usb 4-1: config 7 interface 234 altsetting 143 has 2 endpoint descriptors, different from the interface descriptor's value: 239 [ 1123.154099][ T5987] usb 5-1: USB disconnect, device number 96 [ 1123.194772][ T5918] usb 4-1: config 7 interface 21 has no altsetting 0 [ 1123.205481][ T5918] usb 4-1: config 7 interface 234 has no altsetting 0 [ 1123.246803][ T5918] usb 4-1: New USB device found, idVendor=0421, idProduct=042e, bcdDevice= 1.00 [ 1123.448335][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1123.459780][ T5918] usb 4-1: Product: syz [ 1123.497817][ T5918] usb 4-1: Manufacturer: syz [ 1123.578914][ T5918] usb 4-1: SerialNumber: syz [ 1123.619786][T23421] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1123.653529][T23421] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1124.123338][T23440] netlink: 'syz.1.4591': attribute type 10 has an invalid length. [ 1124.136766][T23440] macvlan1: entered allmulticast mode [ 1124.137843][ T5918] usb-storage 4-1:7.21: USB Mass Storage device detected [ 1124.142792][T23440] veth1_vlan: entered allmulticast mode [ 1124.159309][T23440] team0: Port device macvlan1 added [ 1124.170989][ T5918] usb-storage 4-1:7.21: Quirks match for vid 0421 pid 042e: 30 [ 1124.259408][ T5918] usb-storage 4-1:7.234: USB Mass Storage device detected [ 1124.271127][ T5918] usb-storage 4-1:7.234: Quirks match for vid 0421 pid 042e: 30 [ 1124.325714][ T5927] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1124.379540][ T5918] usb 4-1: USB disconnect, device number 99 [ 1124.632536][ T5927] usb 3-1: Using ep0 maxpacket: 8 [ 1124.642096][ T5927] usb 3-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 1124.651674][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1124.660351][ T5927] usb 3-1: Product: syz [ 1124.664889][ T5927] usb 3-1: Manufacturer: syz [ 1124.669602][ T5927] usb 3-1: SerialNumber: syz [ 1124.712671][ T5927] usb 3-1: config 0 descriptor?? [ 1124.727567][ T5927] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 1124.844576][T23454] fuse: Bad value for 'fd' [ 1125.472312][ T9] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1125.754253][ T9] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1125.768285][ T9] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1125.782355][T17103] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1125.809225][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1125.821272][T23469] FAULT_INJECTION: forcing a failure. [ 1125.821272][T23469] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1125.846265][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1125.846314][T23469] CPU: 1 UID: 0 PID: 23469 Comm: syz.0.4599 Not tainted syzkaller #0 PREEMPT(full) [ 1125.846334][T23469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1125.846345][T23469] Call Trace: [ 1125.846352][T23469] [ 1125.846360][T23469] dump_stack_lvl+0x189/0x250 [ 1125.846385][T23469] ? __pfx____ratelimit+0x10/0x10 [ 1125.846403][T23469] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1125.846422][T23469] ? __pfx__printk+0x10/0x10 [ 1125.846444][T23469] ? fs_reclaim_acquire+0x7d/0x100 [ 1125.846476][T23469] should_fail_ex+0x414/0x560 [ 1125.846504][T23469] prepare_alloc_pages+0x213/0x610 [ 1125.846527][T23469] __alloc_frozen_pages_noprof+0x123/0x370 [ 1125.846547][T23469] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1125.846572][T23469] ? policy_nodemask+0x27c/0x720 [ 1125.846593][T23469] ? try_to_migrate+0x3bc/0x670 [ 1125.846611][T23469] alloc_pages_mpol+0x232/0x4a0 [ 1125.846637][T23469] alloc_migration_target_by_mpol+0x2e6/0x590 [ 1125.846663][T23469] migrate_pages_batch+0x7df/0x35c0 [ 1125.846695][T23469] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 1125.846721][T23469] ? __pfx_migrate_pages_batch+0x10/0x10 [ 1125.846761][T23469] migrate_pages+0x1bcc/0x2930 [ 1125.846792][T23469] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 1125.846818][T23469] ? __pfx_migrate_pages+0x10/0x10 [ 1125.846833][T23469] ? __pfx_walk_page_range_mm+0x10/0x10 [ 1125.846862][T23469] ? mas_next_slot+0xc20/0xcf0 [ 1125.846904][T23469] ? up_write+0x1c4/0x420 [ 1125.846926][T23469] __se_sys_mbind+0xa3e/0xc30 [ 1125.846946][T23469] ? __pfx_vfs_write+0x10/0x10 [ 1125.846970][T23469] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1125.846988][T23469] ? __pfx___se_sys_mbind+0x10/0x10 [ 1125.847026][T23469] ? rcu_is_watching+0x15/0xb0 [ 1125.847055][T23469] ? __x64_sys_mbind+0x21/0xf0 [ 1125.847077][T23469] do_syscall_64+0xfa/0x3b0 [ 1125.847094][T23469] ? lockdep_hardirqs_on+0x9c/0x150 [ 1125.847109][T23469] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1125.847125][T23469] ? clear_bhb_loop+0x60/0xb0 [ 1125.847144][T23469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1125.847160][T23469] RIP: 0033:0x7fcbde18ebe9 [ 1125.847176][T23469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1125.847190][T23469] RSP: 002b:00007fcbdf049038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 1125.847208][T23469] RAX: ffffffffffffffda RBX: 00007fcbde3c5fa0 RCX: 00007fcbde18ebe9 [ 1125.847220][T23469] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000001000 [ 1125.847232][T23469] RBP: 00007fcbdf049090 R08: 0000000000000000 R09: 0000000000000002 [ 1125.847242][T23469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1125.847252][T23469] R13: 00007fcbde3c6038 R14: 00007fcbde3c5fa0 R15: 00007fcbde4efa28 [ 1125.847280][T23469] [ 1126.077002][T17103] usb 4-1: Using ep0 maxpacket: 32 [ 1126.194408][T17103] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1126.211064][T17103] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1126.230412][T17103] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 1126.255892][ T5987] hid_parser_main: 4 callbacks suppressed [ 1126.255905][ T5987] hid-generic 0000:0003:0001.0022: unknown main item tag 0x0 [ 1126.277436][T17103] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1126.291429][ T5987] hid-generic 0000:0003:0001.0022: unknown main item tag 0x0 [ 1126.367901][ T5987] hid-generic 0000:0003:0001.0022: hidraw0: HID v0.03 Device [syz0] on syz1 [ 1126.378836][T17103] usb 4-1: config 0 descriptor?? [ 1126.384081][T23476] lo: entered allmulticast mode [ 1126.390916][T23476] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4601'. [ 1126.425597][T23476] input: syz1 as /devices/virtual/input/input138 [ 1126.505375][T23462] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1126.509037][T23473] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4601'. [ 1126.588935][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1126.703812][T23475] fido_id[23475]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1126.773369][ T5927] lo: left allmulticast mode [ 1126.791202][T23462] fuse: Bad value for 'group_id' [ 1126.804951][T23462] fuse: Bad value for 'group_id' [ 1126.899201][ T5987] usb 5-1: USB disconnect, device number 97 [ 1127.067712][ T9] usb 3-1: USB disconnect, device number 93 [ 1127.607635][T23491] netlink: 'syz.4.4606': attribute type 3 has an invalid length. [ 1127.921058][T23493] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1128.869120][T17103] usbhid 4-1:0.0: can't add hid device: -71 [ 1128.908306][T17103] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1128.921348][T23504] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1129.024343][T17103] usb 4-1: USB disconnect, device number 100 [ 1131.690938][T22672] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1131.750833][T23526] FAULT_INJECTION: forcing a failure. [ 1131.750833][T23526] name failslab, interval 1, probability 0, space 0, times 0 [ 1131.789096][T23526] CPU: 1 UID: 0 PID: 23526 Comm: syz.3.4613 Not tainted syzkaller #0 PREEMPT(full) [ 1131.789112][T23526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1131.789118][T23526] Call Trace: [ 1131.789123][T23526] [ 1131.789127][T23526] dump_stack_lvl+0x189/0x250 [ 1131.789143][T23526] ? __pfx____ratelimit+0x10/0x10 [ 1131.789154][T23526] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1131.789165][T23526] ? __pfx__printk+0x10/0x10 [ 1131.789182][T23526] ? __pfx___might_resched+0x10/0x10 [ 1131.789191][T23526] ? fs_reclaim_acquire+0x7d/0x100 [ 1131.789209][T23526] should_fail_ex+0x414/0x560 [ 1131.789227][T23526] should_failslab+0xa8/0x100 [ 1131.789242][T23526] __kmalloc_noprof+0xcb/0x4f0 [ 1131.789255][T23526] ? security_inode_init_security+0x107/0x3f0 [ 1131.789268][T23526] security_inode_init_security+0x107/0x3f0 [ 1131.789279][T23526] ? __pfx_shmem_initxattrs+0x10/0x10 [ 1131.789291][T23526] ? __pfx_security_inode_init_security+0x10/0x10 [ 1131.789302][T23526] ? set_cached_acl+0xd2/0x180 [ 1131.789314][T23526] ? simple_acl_create+0x184/0x1b0 [ 1131.789328][T23526] shmem_mknod+0x1f6/0x3e0 [ 1131.789340][T23526] ? __pfx_shmem_create+0x10/0x10 [ 1131.789349][T23526] path_openat+0x14f4/0x3830 [ 1131.789360][T23526] ? arch_stack_walk+0xfc/0x150 [ 1131.789390][T23526] ? __pfx_path_openat+0x10/0x10 [ 1131.789400][T23526] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1131.789421][T23526] do_filp_open+0x1fa/0x410 [ 1131.789431][T23526] ? __lock_acquire+0xab9/0xd20 [ 1131.789454][T23526] ? __pfx_do_filp_open+0x10/0x10 [ 1131.789477][T23526] ? _raw_spin_unlock+0x28/0x50 [ 1131.789492][T23526] ? alloc_fd+0x64c/0x6c0 [ 1131.789512][T23526] do_sys_openat2+0x121/0x1c0 [ 1131.789525][T23526] ? __pfx_do_sys_openat2+0x10/0x10 [ 1131.789535][T23526] ? ksys_write+0x22a/0x250 [ 1131.789550][T23526] ? __pfx_ksys_write+0x10/0x10 [ 1131.789561][T23526] ? rcu_is_watching+0x15/0xb0 [ 1131.789574][T23526] __x64_sys_creat+0x8f/0xc0 [ 1131.789587][T23526] do_syscall_64+0xfa/0x3b0 [ 1131.789596][T23526] ? lockdep_hardirqs_on+0x9c/0x150 [ 1131.789606][T23526] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1131.789614][T23526] ? clear_bhb_loop+0x60/0xb0 [ 1131.789626][T23526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1131.789635][T23526] RIP: 0033:0x7ff06278ebe9 [ 1131.789645][T23526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1131.789652][T23526] RSP: 002b:00007ff063691038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 1131.789664][T23526] RAX: ffffffffffffffda RBX: 00007ff0629c5fa0 RCX: 00007ff06278ebe9 [ 1131.789671][T23526] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000001c0 [ 1131.789677][T23526] RBP: 00007ff063691090 R08: 0000000000000000 R09: 0000000000000000 [ 1131.789683][T23526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1131.789689][T23526] R13: 00007ff0629c6038 R14: 00007ff0629c5fa0 R15: 00007ff062aefa28 [ 1131.789707][T23526] [ 1132.153115][T22672] usb 3-1: Using ep0 maxpacket: 8 [ 1132.204172][T22672] usb 3-1: device descriptor read/all, error -71 [ 1132.342602][ T5987] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1132.478283][T23539] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4617'. [ 1132.513045][T23539] netlink: 'syz.2.4617': attribute type 11 has an invalid length. [ 1132.523395][T23539] netlink: 19 bytes leftover after parsing attributes in process `syz.2.4617'. [ 1132.544400][ T5987] usb 4-1: Using ep0 maxpacket: 8 [ 1132.554099][ T5987] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1132.565866][ T5987] usb 4-1: config 248 has an invalid interface number: 242 but max is 0 [ 1132.574395][ T5987] usb 4-1: config 248 has no interface number 0 [ 1132.580667][ T5987] usb 4-1: config 248 interface 242 has no altsetting 0 [ 1132.595395][ T5987] usb 4-1: New USB device found, idVendor=061d, idProduct=c1a0, bcdDevice=4c.13 [ 1132.611775][ T5987] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1132.628469][ T5987] usb 4-1: Product: syz [ 1132.640914][ T5987] usb 4-1: SerialNumber: syz [ 1132.933665][ T5987] quatech2 4-1:248.242: Quatech 2nd gen USB to Serial Driver converter detected [ 1132.960892][ T5987] usb 4-1: qt2_attach - failed to power on unit: -71 [ 1132.968837][ T5987] quatech2 4-1:248.242: probe with driver quatech2 failed with error -71 [ 1132.982621][ T5987] usb 4-1: USB disconnect, device number 101 [ 1133.772996][T22672] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1133.947262][T22672] usb 4-1: Using ep0 maxpacket: 32 [ 1133.965159][T22672] usb 4-1: config 1 has an invalid interface number: 70 but max is 0 [ 1133.974622][T22672] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1133.993961][T22672] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1134.013102][T22672] usb 4-1: config 1 has no interface number 0 [ 1134.021339][T22672] usb 4-1: config 1 interface 70 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1134.046931][T22672] usb 4-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice= 0.40 [ 1134.065690][T22672] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1134.129926][T22672] usb 4-1: Product: syz [ 1134.158781][T22672] usb 4-1: Manufacturer: syz [ 1134.166910][T22672] usb 4-1: SerialNumber: syz [ 1134.384095][T23573] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1134.467990][T22672] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1134.476011][T22672] usb 4-1: MIDIStreaming interface descriptor not found [ 1134.941808][T22672] usb 4-1: USB disconnect, device number 102 [ 1135.028038][T22574] udevd[22574]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.70/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1135.182326][ T5927] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1135.339707][ T5927] usb 5-1: Using ep0 maxpacket: 8 [ 1135.350489][T23597] fuse: Unknown parameter '0xffffffffffffffff017777777777777777777770000000000000006092800000000000000000000' [ 1135.649278][ T5927] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 1135.657965][ T5927] usb 5-1: config 0 has no interface number 0 [ 1135.664976][ T5927] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1135.676174][ T5927] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1135.688202][ T5927] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1135.700027][ T5927] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1135.718321][ T5927] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1135.731656][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1135.762798][ T5927] usb 5-1: config 0 descriptor?? [ 1135.794053][ T5927] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1136.282916][ C0] ldusb 5-1:0.55: usb_submit_urb failed (-19) [ 1136.289165][ T5927] usb 5-1: USB disconnect, device number 98 [ 1136.488285][ T5927] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 1136.495160][T23583] ldusb: No device or device unplugged -19 [ 1136.972508][T22672] usb 3-1: new full-speed USB device number 96 using dummy_hcd [ 1139.054870][T19349] Bluetooth: hci0: command 0x0406 tx timeout [ 1139.132346][T23612] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 1139.138597][T19349] Bluetooth: hci5: command 0x0405 tx timeout [ 1139.742722][T23612] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1139.765188][T23612] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1139.771283][T23612] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1139.782541][T23612] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1139.795533][T23612] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1139.945358][T22672] usb 3-1: device descriptor read/all, error -71 [ 1139.998274][T23654] tipc: Enabling of bearer rejected, already enabled [ 1140.053228][T17103] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1140.472666][T17103] usb 5-1: device not accepting address 99, error -71 [ 1141.221554][T19349] Bluetooth: hci1: command 0x0c1a tx timeout [ 1141.232512][T23672] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4652'. [ 1141.503340][T23675] syz_tun: entered allmulticast mode [ 1141.509686][T23675] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4653'. [ 1141.620198][ T9] IPVS: starting estimator thread 0... [ 1141.722346][T23683] IPVS: using max 35 ests per chain, 84000 per kthread [ 1141.772484][ T5184] Bluetooth: hci2: command 0x0c1a tx timeout [ 1141.778600][T19349] Bluetooth: hci4: command 0x0405 tx timeout [ 1141.852674][T19349] Bluetooth: hci0: command 0x0406 tx timeout [ 1142.068183][T23699] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1142.432422][T17103] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1142.709633][T17103] usb 2-1: Using ep0 maxpacket: 16 [ 1142.758184][T17103] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 1142.766494][T17103] usb 2-1: config 1 has no interface number 0 [ 1142.776167][T17103] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1142.812595][T17103] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1142.823922][T17103] usb 2-1: config 1 interface 105 has no altsetting 0 [ 1142.839028][T17103] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1142.851424][T17103] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1142.871652][T17103] usb 2-1: Product: syz [ 1142.881748][T17103] usb 2-1: Manufacturer: syz [ 1142.911502][T17103] usb 2-1: SerialNumber: syz [ 1142.939714][T23702] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1142.949642][T23702] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1143.364214][T23702] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1143.372574][T23702] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1143.593108][T17103] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 1143.609637][T17103] aqc111 2-1:1.105: probe with driver aqc111 failed with error -71 [ 1143.632858][T17103] usb 2-1: USB disconnect, device number 104 [ 1143.666481][T23715] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4661'. [ 1143.676508][T23715] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4661'. [ 1143.691326][T23715] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4661'. [ 1143.812317][ T5927] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1143.970638][T19349] Bluetooth: hci0: command 0x0406 tx timeout [ 1144.062302][ T5927] usb 5-1: Using ep0 maxpacket: 16 [ 1144.068936][ T5927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1144.080781][ T5927] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1144.089939][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1144.098132][ T5927] usb 5-1: Product: syz [ 1144.102408][ T5927] usb 5-1: Manufacturer: syz [ 1144.107007][ T5927] usb 5-1: SerialNumber: syz [ 1144.116372][ T5927] usb 5-1: config 0 descriptor?? [ 1144.143189][ T5927] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1144.322525][ T5927] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 1144.422140][T23708] netlink: 276 bytes leftover after parsing attributes in process `syz.4.4660'. [ 1144.436753][T23725] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4663'. [ 1144.785320][T23724] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1144.795412][T23733] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4665'. [ 1144.851397][T23733] bridge0: port 3(macvlan2) entered blocking state [ 1144.980521][ T5927] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1145.002477][T23733] bridge0: port 3(macvlan2) entered disabled state [ 1145.009543][T23733] macvlan2: entered allmulticast mode [ 1145.027022][T23733] bridge0: entered allmulticast mode [ 1145.087886][T23733] macvlan2: left allmulticast mode [ 1145.095664][T23733] bridge0: left allmulticast mode [ 1145.402412][ T5927] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1145.414667][ T5927] em28xx 5-1:0.0: board has no eeprom [ 1145.512652][ T5927] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1145.521147][ T5927] em28xx 5-1:0.0: dvb set to bulk mode. [ 1145.529471][T22678] em28xx 5-1:0.0: Binding DVB extension [ 1145.575571][ T5927] usb 5-1: USB disconnect, device number 101 [ 1145.620964][ T5927] em28xx 5-1:0.0: Disconnecting em28xx [ 1145.658175][T23747] fuse: Unknown parameter 'groUp_i[00000000000000000000' [ 1145.762514][T22678] em28xx 5-1:0.0: Registering input extension [ 1145.779332][ T5927] em28xx 5-1:0.0: Closing input extension [ 1145.838037][ T5927] em28xx 5-1:0.0: Freeing device [ 1145.930412][T23753] FAULT_INJECTION: forcing a failure. [ 1145.930412][T23753] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1145.946116][T23753] CPU: 0 UID: 0 PID: 23753 Comm: syz.2.4670 Not tainted syzkaller #0 PREEMPT(full) [ 1145.946140][T23753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1145.946151][T23753] Call Trace: [ 1145.946159][T23753] [ 1145.946167][T23753] dump_stack_lvl+0x189/0x250 [ 1145.946192][T23753] ? __pfx____ratelimit+0x10/0x10 [ 1145.946210][T23753] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1145.946230][T23753] ? __pfx__printk+0x10/0x10 [ 1145.946253][T23753] ? __might_fault+0xb0/0x130 [ 1145.946285][T23753] should_fail_ex+0x414/0x560 [ 1145.946314][T23753] _copy_from_user+0x2d/0xb0 [ 1145.946336][T23753] ___sys_recvmsg+0x12e/0x510 [ 1145.946363][T23753] ? __pfx____sys_recvmsg+0x10/0x10 [ 1145.946410][T23753] ? __might_fault+0xb0/0x130 [ 1145.946435][T23753] do_recvmmsg+0x307/0x770 [ 1145.946459][T23753] ? __pfx_do_recvmmsg+0x10/0x10 [ 1145.946498][T23753] __x64_sys_recvmmsg+0x190/0x240 [ 1145.946519][T23753] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1145.946542][T23753] ? do_syscall_64+0xbe/0x3b0 [ 1145.946558][T23753] do_syscall_64+0xfa/0x3b0 [ 1145.946570][T23753] ? lockdep_hardirqs_on+0x9c/0x150 [ 1145.946583][T23753] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1145.946603][T23753] ? clear_bhb_loop+0x60/0xb0 [ 1145.946619][T23753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1145.946632][T23753] RIP: 0033:0x7fe3e158ebe9 [ 1145.946645][T23753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1145.946657][T23753] RSP: 002b:00007fe3e246b038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1145.946671][T23753] RAX: ffffffffffffffda RBX: 00007fe3e17c6180 RCX: 00007fe3e158ebe9 [ 1145.946681][T23753] RDX: 0400000000000300 RSI: 00002000000031c0 RDI: 0000000000000003 [ 1145.946691][T23753] RBP: 00007fe3e246b090 R08: 0000000000000000 R09: 0000000000000000 [ 1145.946699][T23753] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000002 [ 1145.946707][T23753] R13: 00007fe3e17c6218 R14: 00007fe3e17c6180 R15: 00007fe3e18efa28 [ 1145.946729][T23753] [ 1146.721343][T23770] binder: 23764:23770 ioctl 6430 0 returned -22 [ 1146.841016][T23772] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1147.465338][T22672] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1147.515880][T23780] netlink: 14212 bytes leftover after parsing attributes in process `syz.1.4675'. [ 1147.926954][ T5927] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1147.986966][T23788] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4678'. [ 1148.094982][T23800] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4682'. [ 1148.108164][ T5927] usb 2-1: Using ep0 maxpacket: 16 [ 1148.116981][ T5927] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1148.129723][ T5927] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1148.143836][ T5927] usb 2-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 1148.164319][ T5927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1148.172959][T23800] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4682'. [ 1148.186073][ T5927] usb 2-1: config 0 descriptor?? [ 1148.253618][ T9] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1148.309163][T23800] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4682'. [ 1148.389044][T23814] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1148.413139][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1148.422116][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1148.431626][ T9] usb 3-1: config 3 has an invalid interface number: 199 but max is 0 [ 1148.439910][ T9] usb 3-1: config 3 has no interface number 0 [ 1148.447681][ T9] usb 3-1: config 3 interface 199 has no altsetting 0 [ 1148.462450][ T9] usb 3-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=bf.be [ 1148.482022][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1148.492732][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1148.500731][ T9] usb 3-1: Product: syz [ 1148.505285][ T9] usb 3-1: Manufacturer: syz [ 1148.512694][ T9] usb 3-1: SerialNumber: syz [ 1148.621667][T23821] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1148.670181][ T5927] zeroplus 0003:0C12:0030.0023: item fetching failed at offset 1/5 [ 1148.680760][ T5927] zeroplus 0003:0C12:0030.0023: parse failed [ 1148.686962][ T5927] zeroplus 0003:0C12:0030.0023: probe with driver zeroplus failed with error -22 [ 1148.774613][ T9] mdc800 3-1:3.199: probe fails -> wrong Interface [ 1148.909221][ T9] usb 3-1: USB disconnect, device number 98 [ 1148.944489][T22672] usb 2-1: USB disconnect, device number 105 [ 1149.532895][T22672] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1149.692825][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1150.046781][ T5927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1150.303158][ T43] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1150.502337][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 1150.666576][T22672] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1150.693818][ T43] usb 2-1: config 1 has an invalid descriptor of length 60, skipping remainder of the config [ 1150.705866][ T43] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1150.737289][ T43] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 1150.748287][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1150.784476][ T43] usb 2-1: SerialNumber: syz [ 1150.854654][ T43] usb 2-1: 0:2 : does not exist [ 1150.985914][ T3571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1151.304301][ T9] usb 2-1: USB disconnect, device number 106 [ 1151.533355][T23852] netlink: 'syz.2.4694': attribute type 1 has an invalid length. [ 1151.600847][T23852] bond3: (slave bridge1): making interface the new active one [ 1151.609088][T23852] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 1151.650497][T23860] input: syz1 as /devices/virtual/input/input141 [ 1151.693108][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1151.724226][ T5927] usb 5-1: new full-speed USB device number 102 using dummy_hcd [ 1152.000464][ T5927] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 1152.014874][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1152.025314][ T5927] usb 5-1: Product: syz [ 1152.029455][ T5927] usb 5-1: Manufacturer: syz [ 1152.034427][ T5927] usb 5-1: SerialNumber: syz [ 1152.166835][ T5927] usb 5-1: config 0 descriptor?? [ 1152.181894][ T5927] gspca_main: sq930x-2.14.0 probing 2770:930c [ 1152.217414][T23878] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1152.732572][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1152.864363][ T5927] gspca_sq930x: ucbus_write failed -71 [ 1152.870024][ T5927] sq930x 5-1:0.0: probe with driver sq930x failed with error -71 [ 1152.886366][ T5927] usb 5-1: USB disconnect, device number 102 [ 1153.052712][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1153.060984][T22678] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 1153.214117][T22678] usb 2-1: unable to get BOS descriptor set [ 1153.215059][T22678] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1153.215075][T22678] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1153.215085][T22678] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1153.216799][T22678] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1153.216816][T22678] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1153.216827][T22678] usb 2-1: Product: syz [ 1153.216835][T22678] usb 2-1: Manufacturer: syz [ 1153.216843][T22678] usb 2-1: SerialNumber: syz [ 1153.432619][T22678] usb 2-1: 0:2 : does not exist [ 1153.467485][T22678] usb 2-1: USB disconnect, device number 107 [ 1153.569229][T22628] udevd[22628]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1153.761979][T23910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1153.782855][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1153.819161][T23912] netlink: 268 bytes leftover after parsing attributes in process `syz.2.4714'. [ 1153.829531][T23912] unsupported nla_type 65024 [ 1153.836760][T23912] netlink: 268 bytes leftover after parsing attributes in process `syz.2.4714'. [ 1154.250198][T23932] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 1154.262918][T23932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4723'. [ 1154.280094][T23932] macvlan2: entered allmulticast mode [ 1154.286468][T23932] veth1_vlan: entered allmulticast mode [ 1154.712337][ T43] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1154.812540][T22678] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1154.812638][T17103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1154.852371][ T5927] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1154.894137][ T43] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1154.906091][ T43] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1154.915320][ T43] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1154.926489][ T43] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1154.934793][ T43] usb 3-1: Product: syz [ 1154.938951][ T43] usb 3-1: Manufacturer: syz [ 1154.943756][ T43] usb 3-1: SerialNumber: syz [ 1154.951825][ T43] usb 3-1: config 0 descriptor?? [ 1154.962544][ T43] usb 3-1: selecting invalid altsetting 0 [ 1154.975507][T22678] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1154.991222][T22678] usb 4-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 1155.006307][ T5927] usb 5-1: Using ep0 maxpacket: 16 [ 1155.023653][T22678] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1155.032176][ T5927] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1155.043462][ T5927] usb 5-1: config 0 has no interfaces? [ 1155.064637][ T5927] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 1155.076821][T22678] usb 4-1: config 0 descriptor?? [ 1155.085880][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1155.099792][ T5927] usb 5-1: Product: syz [ 1155.104654][ T5927] usb 5-1: Manufacturer: syz [ 1155.109301][ T5927] usb 5-1: SerialNumber: syz [ 1155.118189][ T5927] usb 5-1: config 0 descriptor?? [ 1155.353577][ T43] usb 3-1: USB disconnect, device number 99 [ 1155.452886][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1155.504095][T22678] logitech 0003:046D:C50C.0024: unbalanced collection at end of report description [ 1155.524914][T22678] logitech 0003:046D:C50C.0024: parse failed [ 1155.531170][T22678] logitech 0003:046D:C50C.0024: probe with driver logitech failed with error -22 [ 1155.619025][T23956] [ 1155.621375][T23956] ============================================ [ 1155.627509][T23956] WARNING: possible recursive locking detected [ 1155.633649][T23956] syzkaller #0 Not tainted [ 1155.638044][T23956] -------------------------------------------- [ 1155.644169][T23956] syz.2.4727/23956 is trying to acquire lock: [ 1155.650208][T23956] ffff8880558f8d30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: __netdev_update_features+0xcb1/0x1be0 [ 1155.661158][T23956] [ 1155.661158][T23956] but task is already holding lock: [ 1155.668497][T23956] ffff8880558f8d30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_ethtool+0x716/0x19b0 [ 1155.678312][T23956] and the lock comparison function returns 0: [ 1155.684354][T23956] [ 1155.684354][T23956] other info that might help us debug this: [ 1155.692389][T23956] Possible unsafe locking scenario: [ 1155.692389][T23956] [ 1155.699814][T23956] CPU0 [ 1155.703070][T23956] ---- [ 1155.706327][T23956] lock(&dev_instance_lock_key#20); [ 1155.711601][T23956] lock(&dev_instance_lock_key#20); [ 1155.716870][T23956] [ 1155.716870][T23956] *** DEADLOCK *** [ 1155.716870][T23956] [ 1155.724992][T23956] May be due to missing lock nesting notation [ 1155.724992][T23956] [ 1155.733294][T23956] 2 locks held by syz.2.4727/23956: [ 1155.738467][T23956] #0: ffffffff8f539ac8 (rtnl_mutex){+.+.}-{4:4}, at: dev_ethtool+0x1d0/0x19b0 [ 1155.747418][T23956] #1: ffff8880558f8d30 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_ethtool+0x716/0x19b0 [ 1155.757670][T23956] [ 1155.757670][T23956] stack backtrace: [ 1155.763537][T23956] CPU: 0 UID: 0 PID: 23956 Comm: syz.2.4727 Not tainted syzkaller #0 PREEMPT(full) [ 1155.763554][T23956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1155.763564][T23956] Call Trace: [ 1155.763571][T23956] [ 1155.763577][T23956] dump_stack_lvl+0x189/0x250 [ 1155.763597][T23956] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1155.763613][T23956] ? __pfx__printk+0x10/0x10 [ 1155.763632][T23956] ? print_lock_name+0xde/0x100 [ 1155.763650][T23956] print_deadlock_bug+0x28b/0x2a0 [ 1155.763665][T23956] validate_chain+0x1a3f/0x2140 [ 1155.763686][T23956] __lock_acquire+0xab9/0xd20 [ 1155.763706][T23956] ? __netdev_update_features+0xcb1/0x1be0 [ 1155.763723][T23956] lock_acquire+0x120/0x360 [ 1155.763740][T23956] ? __netdev_update_features+0xcb1/0x1be0 [ 1155.763761][T23956] __mutex_lock+0x187/0x1350 [ 1155.763775][T23956] ? __netdev_update_features+0xcb1/0x1be0 [ 1155.763794][T23956] ? __lock_acquire+0xab9/0xd20 [ 1155.763813][T23956] ? __netdev_update_features+0xcb1/0x1be0 [ 1155.763830][T23956] ? __pfx___mutex_lock+0x10/0x10 [ 1155.763850][T23956] __netdev_update_features+0xcb1/0x1be0 [ 1155.763873][T23956] ? __pfx___netdev_update_features+0x10/0x10 [ 1155.763889][T23956] ? rcu_is_watching+0x15/0xb0 [ 1155.763902][T23956] ? trace_irq_disable+0x37/0x110 [ 1155.763919][T23956] ? preempt_schedule_irq+0xde/0x150 [ 1155.763931][T23956] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1155.763945][T23956] ? __lock_acquire+0xab9/0xd20 [ 1155.763976][T23956] netdev_change_features+0x72/0xd0 [ 1155.763993][T23956] ? __pfx_netdev_change_features+0x10/0x10 [ 1155.764014][T23956] ? __team_compute_features+0x23/0x4c0 [ 1155.764034][T23956] ? __team_compute_features+0x456/0x4c0 [ 1155.764053][T23956] ? __team_compute_features+0x23/0x4c0 [ 1155.764071][T23956] team_device_event+0x400/0x600 [ 1155.764091][T23956] notifier_call_chain+0x1b3/0x3e0 [ 1155.764108][T23956] netdev_features_change+0x85/0xc0 [ 1155.764121][T23956] ? __pfx_netdev_features_change+0x10/0x10 [ 1155.764134][T23956] ? dev_ethtool+0x152c/0x19b0 [ 1155.764151][T23956] ? __pfx_netdev_features_change+0x10/0x10 [ 1155.764164][T23956] dev_ethtool+0x1536/0x19b0 [ 1155.764185][T23956] ? __pfx_dev_ethtool+0x10/0x10 [ 1155.764205][T23956] ? dev_load+0x21/0x1f0 [ 1155.764218][T23956] dev_ioctl+0x392/0x1150 [ 1155.764232][T23956] sock_do_ioctl+0x22c/0x300 [ 1155.764250][T23956] ? irqentry_exit+0x74/0x90 [ 1155.764263][T23956] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1155.764290][T23956] ? __pfx_sock_ioctl+0x10/0x10 [ 1155.764310][T23956] sock_ioctl+0x576/0x790 [ 1155.764329][T23956] ? __pfx_sock_ioctl+0x10/0x10 [ 1155.764349][T23956] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1155.764366][T23956] ? __pfx_sock_ioctl+0x10/0x10 [ 1155.764383][T23956] __se_sys_ioctl+0xfc/0x170 [ 1155.764399][T23956] do_syscall_64+0xfa/0x3b0 [ 1155.764414][T23956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1155.764428][T23956] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1155.764442][T23956] ? clear_bhb_loop+0x60/0xb0 [ 1155.764457][T23956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1155.764470][T23956] RIP: 0033:0x7fe3e158ebe9 [ 1155.764484][T23956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1155.764498][T23956] RSP: 002b:00007fe3e244a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1155.764512][T23956] RAX: ffffffffffffffda RBX: 00007fe3e17c6270 RCX: 00007fe3e158ebe9 [ 1155.764524][T23956] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000000e [ 1155.764533][T23956] RBP: 00007fe3e1611e19 R08: 0000000000000000 R09: 0000000000000000 [ 1155.764543][T23956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1155.764552][T23956] R13: 00007fe3e17c6308 R14: 00007fe3e17c6270 R15: 00007fe3e18efa28 [ 1155.764568][T23956] [ 1155.764590][ C0] vkms_vblank_simulate: vblank timer overrun [ 1156.130408][ C0] vkms_vblank_simulate: vblank timer overrun [ 1156.137373][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1156.145478][T21075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1156.151566][T17103] usb 4-1: USB disconnect, device number 103 [ 1156.158544][T23962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1156.531574][ T5927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1157.626569][T22678] usb 5-1: USB disconnect, device number 103 [ 1158.252882][ T43] net_ratelimit: 3 callbacks suppressed [ 1158.252900][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1159.292480][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1159.532409][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1160.332979][T22672] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1161.372657][T17103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1161.853776][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1162.412652][T22672] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1162.572401][T22678] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1163.462481][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1164.492472][T17103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1165.532467][T22672] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog