last executing test programs: 11m55.537342988s ago: executing program 3 (id=812): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x8400, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}]}}}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xec}}, 0x0) 11m55.439475369s ago: executing program 3 (id=813): r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x8001fff7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) 11m55.02326656s ago: executing program 3 (id=816): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0xb, 0x5, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x1, 0x0, 0x4, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xf646d5f7286d7fdb}, 0x40) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="98000000100001002abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a009000000020000140003006e657464657673696d3000000000000008002800babc00005c0016805800018054000c"], 0x98}, 0x1, 0x0, 0x0, 0x24040854}, 0x40000) 11m54.850995864s ago: executing program 3 (id=817): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000416000/0xf000)=nil, 0xf000, 0x14) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x9840) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x20d036, 0x0, 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000340)='./file0\x00') r3 = socket$inet6(0xa, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x12, 0x0, 0x2, 0x0, 0x1, 0x900, 0x0, 0xffffff80}}) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x1c) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000500)={0x0, 0x82, 0x20}, 0xc) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x8020) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) 11m53.742178268s ago: executing program 3 (id=823): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x548, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x478, 0xffffffff, 0xffffffff, 0x478, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'batadv0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x2, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2c2e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xff, 0x70, 0x1, "", [{{0x9, 0x4, 0x0, 0xd, 0x1, 0x3, 0x1, 0x0, 0x7, {0x9, 0x21, 0xff7f, 0x77, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x1, 0x2}}}}}]}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io$hid(r1, &(0x7f0000004600)={0x24, 0x0, 0x0, &(0x7f00000000c0), 0x0}, 0x0) 11m52.79633956s ago: executing program 3 (id=829): r0 = dup(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsopen(&(0x7f00000000c0)='msdos\x00', 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000002400)={0x3, 0x0, [{0x40000001, 0xe63, 0x3, 0x2, 0x20002df3, 0x106, 0x5}, {0xb, 0x5, 0x1, 0xfffffff7, 0xfffffff9, 0xff, 0x9}, {0x80000007, 0xc28, 0x3, 0xfffffffc, 0x5, 0xae, 0xffff}]}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0xbe, 0x10, 0x0, {0x8, 0xb, 0x0, 0x1, 0x1, 0x21, 0x30, 0x81}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x2, 0xa, 0x81}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x0, 0xfe, 0x98, {0xa, 0x25, 0x25, 0xf4, 0x10, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x6, 0x80, 0xa, {0xa, 0x25, 0x25, 0x6, 0x1, 0x3}}}}}}}}]}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x8020, 0x11200}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x8}, @IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000041}, 0x0) 11m52.294121775s ago: executing program 32 (id=829): r0 = dup(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsopen(&(0x7f00000000c0)='msdos\x00', 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000002400)={0x3, 0x0, [{0x40000001, 0xe63, 0x3, 0x2, 0x20002df3, 0x106, 0x5}, {0xb, 0x5, 0x1, 0xfffffff7, 0xfffffff9, 0xff, 0x9}, {0x80000007, 0xc28, 0x3, 0xfffffffc, 0x5, 0xae, 0xffff}]}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0xbe, 0x10, 0x0, {0x8, 0xb, 0x0, 0x1, 0x1, 0x21, 0x30, 0x81}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x2, 0xa, 0x81}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x0, 0xfe, 0x98, {0xa, 0x25, 0x25, 0xf4, 0x10, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x6, 0x80, 0xa, {0xa, 0x25, 0x25, 0x6, 0x1, 0x3}}}}}}}}]}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x8020, 0x11200}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x8}, @IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000041}, 0x0) 10m15.264968958s ago: executing program 4 (id=1412): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x24, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x3}, @TCA_CAKE_ATM={0x8, 0x4, 0x2}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x4}, @TCA_CAKE_SPLIT_GSO={0x8}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004000}, 0x20040084) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$rds(0x15, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00002fb96dffff1144ee163cddcb00000080000082760000c041000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x4000}], 0x2}, 0x5) syz_usb_connect(0x0, 0x3b, 0x0, 0x0) 10m13.865390865s ago: executing program 4 (id=1418): r0 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0xfffffffffffffffc, 0x121400) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x40000000, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, 0x0) 10m13.40915252s ago: executing program 4 (id=1421): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x8, 0x2}]}, 0x10) syz_emit_ethernet(0x83, &(0x7f0000000100)=ANY=[@ANYBLOB="29e815482c6b0180c200000c86dd6a000000004d11fffe80ebffffff000000000000000040aaff02000000224e0000000000000000014e224e20004d90"], 0x0) 10m13.395349141s ago: executing program 4 (id=1422): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r3, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)="aa", 0x1}], 0x1, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {r4, r5, r6}}}, @rights={{0x14, 0x1, 0x1, [r3]}}], 0x38, 0x40044}}], 0x1, 0x4014) ptrace$ARCH_SHSTK_DISABLE(0x1e, r4, 0x0, 0x5002) r7 = syz_clone(0x10000900, &(0x7f0000000280)="2aaa7779800202aa302be96037be797689059abc9b3c648aaccb3833196729287bc27488e15c2b64d101039d9d6aac7263917b0c8c0e217646a0ed0394481fe9193b1ff00399e135261836aece055241213c2aa6d0bb356cb98d0946ea3c87161b3a8b0b4b4da80ca6b3b6d9875e0e308151d9d5e1af1bb009caf92a4e4a8ffb8e1b18ac9c4a2911f07d4599182e8e949cdd1e3a313155bc2f892a0c19ff63170205345136958341f4d1e5253959c570dda2bd6f95e5a93e7f123450cfd960a32b", 0xc1, &(0x7f00000000c0), &(0x7f0000000380), &(0x7f00000003c0)="f305a5aac4167ae46ceea5318924e65f72da1a40211907d9aa9a60f07b") ptrace$setsig(0x4203, r7, 0x5, &(0x7f0000000840)={0x19, 0x4, 0x40b9}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r11 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r11, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000000)={0x101ff, 0x2, 0xa000, 0x2000, &(0x7f0000001000/0x2000)=nil}) r12 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) unshare(0x22020400) r13 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOMMU_VFIO_SET_IOMMU(r13, 0x3b66, 0x1) ioctl$KVM_SET_VAPIC_ADDR(r12, 0x4008ae93, &(0x7f0000000040)=0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"/270], 0x38}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_RUN(r12, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r12, 0x4400ae8f, &(0x7f0000000440)={"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"}) 10m12.384563213s ago: executing program 4 (id=1427): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0xca, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) readv(r0, &(0x7f0000000a00)=[{&(0x7f00000001c0)=""/59, 0x3b}], 0x1) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x1ca03, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0x0, r3, {0x7, 0x1f, 0xffffc000, 0x8004}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1a5401, 0x0) dup3(r4, r2, 0x0) dup(r2) getsockopt$SO_J1939_SEND_PRIO(r4, 0x6b, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f00000000c0)={0x600, 0x32200}) 10m12.117693038s ago: executing program 4 (id=1429): syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004080)="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", 0x2000, &(0x7f0000000200)={&(0x7f0000000380)={0x50, 0xfffffffffffffffe, 0x500000001, {0x7, 0x28, 0x7a, 0x280800a6, 0x6, 0x9, 0x0, 0xfffffffc, 0x0, 0x0, 0x20, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket(0x1, 0x1, 0x1) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000680)="98dc"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)="ef"}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f00000034c0)={0x2020}, 0xcac) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r4) r5 = socket$inet6(0xa, 0x6, 0x13) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="00020201"], 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@ipv6_newrule={0x24, 0x21, 0x1, 0x0, 0x3, {}, [@FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) connect$inet6(r5, &(0x7f0000000140)={0xa, 0xdffd, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, 0x1c) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x18b040, 0x0) r7 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r7, 0x0) openat$binfmt_register(0xffffff9c, 0x0, 0x1, 0x0) r8 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x1) fchdir(r9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) 10m11.484848622s ago: executing program 33 (id=1429): syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004080)="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", 0x2000, &(0x7f0000000200)={&(0x7f0000000380)={0x50, 0xfffffffffffffffe, 0x500000001, {0x7, 0x28, 0x7a, 0x280800a6, 0x6, 0x9, 0x0, 0xfffffffc, 0x0, 0x0, 0x20, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket(0x1, 0x1, 0x1) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000680)="98dc"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000700)="ef"}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f00000034c0)={0x2020}, 0xcac) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r4) r5 = socket$inet6(0xa, 0x6, 0x13) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="00020201"], 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@ipv6_newrule={0x24, 0x21, 0x1, 0x0, 0x3, {}, [@FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) connect$inet6(r5, &(0x7f0000000140)={0xa, 0xdffd, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, 0x1c) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x18b040, 0x0) r7 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r7, 0x0) openat$binfmt_register(0xffffff9c, 0x0, 0x1, 0x0) r8 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x1) fchdir(r9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) 7m54.931027289s ago: executing program 0 (id=2209): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000012fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c000280180002"], 0xec}}, 0x0) 7m54.784257649s ago: executing program 0 (id=2213): r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000a40)=ANY=[@ANYBLOB='stack :'], 0xe4) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x81c0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYBLOB="9f84a600009942e10f92aa00000000c29493b0f6a403cfe22fc4", @ANYRES32=0x0, @ANYRES32, @ANYRES16=0x0], 0x48) openat$nullb(0xffffffffffffff9c, &(0x7f0000001080), 0x900, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0d00000008000000040000000100000000000000", @ANYRES32=r1], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r2, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000b00)={'sit0\x00', &(0x7f0000000a80)={'syztnl1\x00', 0x0, 0x8000, 0x8000, 0x40, 0x6, {{0x17, 0x4, 0x2, 0x2d, 0x5c, 0x68, 0x0, 0x9, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, {[@rr={0x7, 0x1b, 0x55, [@private=0xa010102, @empty, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x10}, @broadcast]}, @lsrr={0x83, 0x1b, 0xd2, [@empty, @local, @dev={0xac, 0x14, 0x14, 0x13}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @private=0xa010102]}, @generic={0x82, 0xa, "b75ec8e25be11b91"}, @timestamp={0x44, 0x8, 0xb3, 0x0, 0x6, [0x8001]}]}}}}}) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000b40), 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x20, 0x2, &(0x7f0000000c00)=@raw=[@cb_func={0x18, 0x1}], &(0x7f0000000c40)='syzkaller\x00', 0x394, 0xd4, &(0x7f0000000c80)=""/212, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, &(0x7f0000000d80)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000dc0)={0x3, 0xc, 0x6, 0x8000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000e00)=[r2], 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000fc0)=@bpf_tracing={0x1a, 0x6, &(0x7f0000000940)=@raw=[@alu={0x4, 0x0, 0x0, 0x9, 0xa, 0xffffffffffffffc0, 0x928ff1a5b1f3226e}, @exit, @map_fd={0x18, 0x0, 0x1, 0x0, r3}, @call={0x85, 0x0, 0x0, 0x72}, @alu={0x4, 0x1, 0xb, 0x5, 0x9, 0xfffffffffffffff0, 0x8}], &(0x7f0000000980)='syzkaller\x00', 0x4, 0x6c, &(0x7f00000009c0)=""/108, 0x40f00, 0x1, '\x00', r4, 0x18, r5, 0x8, &(0x7f0000000b80)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0xe, 0x6, 0x3}, 0x10, 0x205f0, r6, 0x8, &(0x7f0000000f00)=[r1, r2, r1, r1], &(0x7f0000000f40)=[{0x4, 0x3, 0xb, 0x4}, {0x4, 0x4, 0x7, 0x1}, {0x0, 0x1, 0x2, 0x6}, {0x0, 0x3, 0xf, 0x8}, {0x3, 0x3, 0x7, 0x4}, {0x2, 0x2, 0x0, 0x5}, {0x2, 0x4, 0x8, 0xc7b1e786fa33a808}, {0x4, 0x1, 0xd, 0xfc3b2bc14b35e7f9}], 0x10, 0x1}, 0x94) open(&(0x7f0000001340)='./file2\x00', 0x109000, 0x1) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001380)=@bpf_tracing={0x1a, 0x9, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x56d0, 0x0, 0x0, 0x0, 0x80000000}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2f15}, @jmp={0x5, 0x1, 0xd, 0x7, 0x1, 0x30, 0xffffffffffffffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @generic={0x40, 0x4, 0xe, 0x4, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f0000000140)='syzkaller\x00', 0x3, 0x42, &(0x7f00000001c0)=""/66, 0x40f00, 0x54, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x3, 0x6, 0x7, 0xfffffff8}, 0x10, 0x29f60, 0xffffffffffffffff, 0x3, &(0x7f00000002c0)=[r1, r3, r2, r1, r2], &(0x7f0000000300)=[{0x5, 0x5, 0x2, 0x8}, {0x3, 0x3, 0x0, 0xa}, {0x2, 0x1, 0xd, 0xb}], 0x10, 0x203}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000880)=r7}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r8, &(0x7f00000000c0), 0x0}, 0x20) execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x0, 0x0, 0x0) r9 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r9, 0xc0285700, &(0x7f0000000000)={0x0, "08000000000000000000000000000000000000b582000000010000000100", 0xffffffffffffffff}) r11 = dup(r10) syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r12, r13, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r11, 0x0, 0x0, 0x0, 0x80000}) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001100), 0xffffffffffffffff) r15 = socket$unix(0x1, 0x1, 0x0) r16 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r16, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r17, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000440)="27c3", 0x2}], 0x1}, 0x4) sendmsg$ETHTOOL_MSG_PAUSE_SET(r11, &(0x7f0000001300)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x3c, r14, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004005}, 0xc801) sendmsg$ETHTOOL_MSG_COALESCE_GET(r11, &(0x7f0000001240)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001200)={&(0x7f0000001140)={0xb4, r14, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x94, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x1}, 0x20004010) syz_usb_connect$uac1(0x2, 0xb9, &(0x7f0000000540)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa7, 0x3, 0x1, 0x0, 0x1b0, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x25}, [@selector_unit={0x6, 0x24, 0x5, 0x3, 0x2, 'v'}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x300, 0x1, 0x6, 0x2}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x206, 0x1, 0x40, 0x1, 0x7f, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0xb1, 0x3, 0x8, 0x10, "93", "eb1898"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x1, 0x8, 0x5, 0x6, 0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x1, 0xa3, 0x3, {0x7, 0x25, 0x1, 0xc, 0xf2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x3, 0x9, 0x5, 0x80, 0x6}, @as_header={0x7, 0x24, 0x1, 0x2, 0xf5, 0x5}, @as_header={0x7, 0x24, 0x1, 0xfc, 0x0, 0x1002}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x10, 0xf8, 0x8b, {0x7, 0x25, 0x1, 0x8, 0xce, 0x1}}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x751, 0x4, 0x4, 0x8, 0x40, 0x3}, 0x27, &(0x7f0000001440)=ANY=[@ANYBLOB="058dd49b2f72e10f27000314100403cf24af62180725ce585c7ca2dd056be40b10010c0800060904000703100b6be44aeba881530d3cf8deeb26c9b2cdb591939312aa0beeaf20735f96c169e0b3c2cc398d69446ccb4260b1231578005a379f1fa8ae01f04d3768641be37e2ca4e5a37701a561ea39c9945daf216c57bcd8841981992454400d0100000000000000db611acc91c1d71536ef7b2797f994c971069c075b4a4fdbcc3257576871bc549157691b00ddb2e3"], 0x3, [{0xf3, &(0x7f0000000700)=@string={0xf3, 0x3, "fb7d87536714a7c20b57a5ebc858584039effa7e5979b22dab31b6d894393a6e3fdcdf99454b8c96b3a0e6c9dea977ef1984a44c2369962d54408281a909dcb8aff271e6da419011083ba3f60dd0bd062d952df237fd96467b8fa1a97d7fdaf612ef02490e7802e44ef1a679e3c789638b05b6a16411e6878398ea0d3e1c4236ba295b2aa7d35a6016b01509383e986ec1e8c4016ffeb881e4a3e66b508801595ded81da65c5aaf5b39bda2e8ebba29d05bce057f424006162d598f1304a276009f9fb55c9f9c239a5580c71afca9fbda5e0a012d212232b088dbaee2765f758d82c5079248339af5e3c75c6ce05c8f40d"}}, {0x20, &(0x7f0000000600)=@string={0x20, 0x3, "75209dfceaae5b40737d1102a391c0256b9bb47103280f1571d8b2fd2734"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x455}}]}) 7m54.004652815s ago: executing program 0 (id=2218): r0 = syz_io_uring_setup(0x895, &(0x7f0000000140)={0x0, 0x8c36, 0x80, 0xfffffffe, 0xbfdffddc}, &(0x7f00000001c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SYMLINKAT={0x26, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3) 7m53.213344581s ago: executing program 0 (id=2225): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000004c0)="a6", 0x1, 0x20008044, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004340)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000240)="55419d", 0x3}], 0x1}, 0x241}], 0x1, 0x4000804) 7m52.333007083s ago: executing program 0 (id=2230): syz_mount_image$fuse(0x0, 0x0, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd'], 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x4004850) sendmsg$NFT_BATCH(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f0000002280)) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x1, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) getresuid(&(0x7f0000000100), 0x0, 0x0) fchownat(r0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x100) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2002, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f0000000240)={0x0, 0x107000}) ioctl$KVM_GET_DIRTY_LOG(r4, 0x4010ae42, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001000/0x1000)=nil}) r6 = socket$inet6(0xa, 0x805, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001000010400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="5010000000000000"], 0x20}}, 0x0) getsockopt$bt_hci(r6, 0x84, 0x85, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r7) 7m48.518842238s ago: executing program 0 (id=2247): sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20044814) socket(0x10, 0x3, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x0) syz_open_dev$video(0x0, 0x3, 0x2000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000080)=0x3ff) write$dsp(r6, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) sendmsg$nl_xfrm(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x22020400) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xe, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0x40000ffb, 0x7, 0xb69, 0xc1, 0x3, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x3, 0x2, 0x0, 0x2, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x3, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b92, 0x2, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x6, 0x8000100, 0x3, 0x0, 0x11000, 0x7, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x5, 0x8000c, 0x101, 0xd7, 0x1fa0860a, 0x7, 0x7, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x6, 0x9, 0x4, 0xcd, 0x4009, 0x80000000, 0x4, 0xa8, 0x8, 0x752, 0x0, 0x5, 0x0, 0x8fffd, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x6, 0x84, 0x100, 0x5, 0x255, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0x2, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x3, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0xb, 0x0, 0x4, 0x401, 0x66cd, 0x5, 0x8, 0x3, 0x7fff, 0xc5c, 0xffffffff]}}) syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bce, 0x10100, 0x0, 0x313}, 0x0, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) socket$key(0xf, 0x3, 0x2) 7m33.378041479s ago: executing program 34 (id=2247): sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20044814) socket(0x10, 0x3, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x1) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x0) syz_open_dev$video(0x0, 0x3, 0x2000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000080)=0x3ff) write$dsp(r6, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) sendmsg$nl_xfrm(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x22020400) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xe, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0x40000ffb, 0x7, 0xb69, 0xc1, 0x3, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x3, 0x2, 0x0, 0x2, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x3, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b92, 0x2, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x6, 0x8000100, 0x3, 0x0, 0x11000, 0x7, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x5, 0x8000c, 0x101, 0xd7, 0x1fa0860a, 0x7, 0x7, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x6, 0x9, 0x4, 0xcd, 0x4009, 0x80000000, 0x4, 0xa8, 0x8, 0x752, 0x0, 0x5, 0x0, 0x8fffd, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x6, 0x84, 0x100, 0x5, 0x255, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0x2, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x3, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0xb, 0x0, 0x4, 0x401, 0x66cd, 0x5, 0x8, 0x3, 0x7fff, 0xc5c, 0xffffffff]}}) syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bce, 0x10100, 0x0, 0x313}, 0x0, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) socket$key(0xf, 0x3, 0x2) 1m7.254629803s ago: executing program 2 (id=4775): socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, 0x0, &(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500004400000000002190337bf58400ffffffff050090780a0101026a0000000000000000000000ac1e0001ac14140107be00e0000002000000"], 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000000400)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000034a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r7, @ANYRES32=r3], 0x3c}}, 0x0) r8 = syz_usb_connect(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201410117512920570509201ec70102030109022400010200100009045807028ab53800090506020001000006090582020002"], 0x0) syz_usb_control_io$printer(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io$printer(r8, 0x0, 0x0) syz_usb_control_io$uac1(r8, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) 1m4.990695378s ago: executing program 1 (id=4789): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000000080)={&(0x7f0000000180)={0x1d, r2}, 0x10, &(0x7f0000000140)={&(0x7f0000000280)=@canfd={{0x2, 0x0, 0x1, 0x1}, 0x1b, 0x1, 0x0, 0x0, "429f3a94c651ef212da203c675a698c781a9d29a69968edf28930dbaf22df34df9bf3d982db6cedcbccad1cd1d2139fabef53d314cb33d05fe500ac02f7c6acc"}, 0x48}, 0x2, 0x0, 0x0, 0x40080}, 0x4000855) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000108117980800000000000109022400010000000009040000020308000009210000010122290a090581"], 0x0) r3 = syz_io_uring_setup(0x895, &(0x7f0000000000)={0x0, 0x40008c36, 0x40, 0xfffffffe, 0xbfdffddc}, &(0x7f00000001c0)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r5, 0x4018aee2, &(0x7f0000000140)=@attr_pmu_init) r6 = syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x0, 0x800, 0x3, 0x1}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) r11 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f0000000040)={0x90000005}) epoll_pwait(r11, &(0x7f0000000100)=[{}], 0x1, 0xfffeffff, 0x0, 0x443c000000000000) connect$unix(r9, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000300)=@IORING_OP_OPENAT2={0x1c, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x12345, {0x0, r12}}) syz_io_uring_submit(r4, r8, &(0x7f00000002c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x1, 0x0, @fd=r3, 0xfffffffffffffffb, 0x0, 0xb01, 0x1, 0x1, {0x0, r12}}) socket$inet6_tcp(0xa, 0x1, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r13 = memfd_create(&(0x7f00000004c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g&\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05N\xb9\x1dOr\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3) ftruncate(r13, 0xffff) close(0x3) fcntl$addseals(r13, 0x409, 0x0) io_setup(0x5, &(0x7f0000000140)) 1m3.30541583s ago: executing program 7 (id=4792): bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000045, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000200)=""/4082, 0xff2}, {&(0x7f00000013c0)=""/113, 0x71}], 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x48, 0x4007, @fd_index=0x3, 0x22, 0x0, 0x0, 0x6, 0x1}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m3.109535364s ago: executing program 2 (id=4793): bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x12000)=nil, 0x12000, 0x65) r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x20, @loopback, 0x23}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000100)=0x80000002, 0x4) sendto$inet(r0, &(0x7f0000000900)="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", 0x13e, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 1m3.012705152s ago: executing program 7 (id=4794): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000100001000000000000ffef000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800900034000000002"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1m2.789316433s ago: executing program 7 (id=4798): bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x20, @loopback, 0x23}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000100)=0x80000002, 0x4) sendto$inet(r0, &(0x7f0000000900), 0x0, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 1m2.771461873s ago: executing program 7 (id=4799): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x80) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0xdddd0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x3, 0x5, 0x80a0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 1m2.585622911s ago: executing program 7 (id=4802): syz_mount_image$fuse(0x0, 0x0, 0x0, &(0x7f0000002280)=ANY=[], 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[], 0x7c}}, 0x4004850) fchownat(r0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x100) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2002, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, 0x0) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001000/0x1000)=nil}) 1m1.874059345s ago: executing program 2 (id=4805): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f0000006340)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/168, 0xa8}, {&(0x7f0000000380)=""/191, 0xbf}, {&(0x7f0000000080)=""/37, 0x25}, {&(0x7f0000000540)=""/163, 0xa3}, {&(0x7f0000000600)=""/188, 0xbc}], 0x5}, 0x4}, {{&(0x7f00000006c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000740)=""/210, 0xd2}, {&(0x7f0000000840)=""/72, 0x48}, {&(0x7f00000008c0)=""/228, 0xe4}, {&(0x7f00000009c0)=""/227, 0xe3}, {&(0x7f0000000ac0)=""/62, 0x3e}], 0x5, &(0x7f0000000b80)=""/198, 0xc6}, 0x4}, {{&(0x7f0000000c80)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000d00)=""/158, 0x9e}, {&(0x7f0000000dc0)=""/167, 0xa7}], 0x2, &(0x7f0000000ec0)=""/150, 0x96}}, {{0x0, 0x0, &(0x7f0000002180)=[{&(0x7f0000000f80)=""/229, 0xe5}, {&(0x7f0000001080)=""/238, 0xee}, {&(0x7f0000001180)=""/4096, 0x1000}], 0x3, &(0x7f00000021c0)=""/128, 0x80}, 0x153e115f}, {{&(0x7f0000002240)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, 0x80, &(0x7f0000003540)=[{&(0x7f00000022c0)}, {&(0x7f0000002300)=""/238, 0xee}, {&(0x7f0000002400)=""/101, 0x65}, {&(0x7f0000002480)=""/136, 0x88}, {&(0x7f0000002540)=""/4096, 0x1000}], 0x5, &(0x7f00000035c0)=""/31, 0x1f}, 0x97}, {{&(0x7f0000003600)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000003840)=[{&(0x7f0000003680)=""/41, 0x29}, {&(0x7f00000036c0)=""/125, 0x7d}, {&(0x7f0000003740)=""/234, 0xea}], 0x3, &(0x7f0000003880)=""/4096, 0x1000}, 0x3}, {{&(0x7f0000004880)=@isdn, 0x80, &(0x7f0000004c40)=[{&(0x7f0000004900)=""/16, 0x10}, {&(0x7f0000004940)=""/129, 0x81}, {&(0x7f0000004a00)=""/65, 0x41}, {&(0x7f0000004a80)=""/10, 0xa}, {&(0x7f0000004ac0)=""/202, 0xca}, {&(0x7f0000006540)=""/97, 0x61}], 0x6, &(0x7f0000004cc0)=""/190, 0xbe}, 0x85eae472}, {{0x0, 0x0, &(0x7f0000006280)=[{&(0x7f0000004d80)=""/227, 0xe3}, {&(0x7f0000004e80)=""/50, 0x32}, {&(0x7f0000004ec0)=""/241, 0xf1}, {&(0x7f0000004fc0)=""/4096, 0x1000}, {&(0x7f0000005fc0)=""/175, 0xaf}, {&(0x7f0000006080)=""/148, 0x94}, {&(0x7f0000006140)=""/61, 0x3d}, {&(0x7f0000006180)=""/236, 0xec}], 0x8, &(0x7f0000006300)=""/43, 0x2b}, 0x7dc}], 0x8, 0x41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) r3 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0xf7fa, 0x3180, 0x8000, 0x176, 0x0, r2}, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) (async) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4000, @fd=r2, 0xffffffffffffffff, &(0x7f0000000440)=""/207, 0xcf, 0x2}) (async) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x30) (async) open(&(0x7f00000022c0)='./file0\x00', 0x400001, 0x12a) 1m1.693305124s ago: executing program 2 (id=4807): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000080)="dd0e", 0x2, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, 0x0, 0x0) 1m1.693028144s ago: executing program 6 (id=4808): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=@newtaction={0x18, 0x32, 0x871a15abc695fa3d, 0x0, 0x100, {}, [{0x4}]}, 0x18}}, 0x4040850) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r4 = socket(0x1e, 0x1, 0x0) connect$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r4, &(0x7f0000000340), 0x2000011a) (fail_nth: 8) setsockopt$packet_int(r4, 0x107, 0xb, &(0x7f0000000000)=0x1, 0x4) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r3, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [{0x2, 0x4}], {}, [], {}, {0x20, 0x7}}, 0x2c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r5, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r6}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20009000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$inet(0x2, 0x80001, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1703}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_BROADCAST={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r7, 0x0, 0x48a, &(0x7f0000000180)={0x9, 0x0, 0x8}, 0xc) r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r9, 0x4048aecb, &(0x7f00000006c0)={0x9, 0x0, [{0xc0000000, 0xffffffff, 0x0, 0x7fffffff, 0x40006, 0x6, 0x1}, {0xc0000001, 0x4, 0x0, 0x11, 0x27, 0x7, 0x5}, {0xb, 0x8, 0x0, 0xffff, 0x7fffffff, 0x2, 0x2}, {0x80000008, 0x10, 0x1, 0x0, 0xdf4, 0x6, 0x80000001}, {0xd, 0x2bb, 0x0, 0xa, 0x3, 0x80000001, 0x400}, {0x80000000, 0x100, 0x0, 0x2, 0x1, 0x1, 0x7}, {0x80000007, 0x9, 0x1, 0x7, 0x10000, 0x8, 0x4}, {0x80000001, 0x200, 0x6, 0x68be, 0x8, 0x2}, {0xc0000001, 0x0, 0x2, 0x10d0, 0x101, 0x8, 0x3}]}) 1m1.452198939s ago: executing program 1 (id=4809): bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x20, @loopback, 0x23}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000100)=0x80000002, 0x4) sendto$inet(r0, &(0x7f0000000900), 0x0, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 1m1.321477703s ago: executing program 1 (id=4810): r0 = socket$inet(0x2, 0xa, 0x9) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={0xfffe, {0x2, 0x4e23, @local}, {0x2, 0x4e24, @loopback}, {0x2, 0x4e23, @broadcast}, 0x280, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x9, 0x7}) 1m1.321262312s ago: executing program 6 (id=4811): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x7, 0x30}, 0xc) sendto$inet(r0, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, &(0x7f0000000100)='o', 0x1, 0x48850, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240), 0xc) sendto$inet(r0, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) (fail_nth: 8) 1m1.180292311s ago: executing program 6 (id=4812): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r0, &(0x7f0000005040)=[{{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000c00)="ff68ced756aedb8f6afad2c7af91f9324bd2f460d4e8245c0f30bf977fde1b2afd2880ded6475646e903f2d720f301c9930d68df5fb80c1810f1cab38ced6158478ef7a2e4504f2a6a38e62b834feb9b4f031c5ca22f8f2eb5d4f1ed41a2cc471b928f8650ac61263f1209c7b498b4434e814419a0ce47ebedb4211bee1be2096ffe150f459c9f2300fad527e46f46aa18f66cf7236d232ed30ee88a217e67cb3a288dbc046304f2dce40f113ca7b47f2e377f458d34a7f2cdbea860a2ce808006f331c6ed51bb1f4d0d6cf676617a2f46da", 0xd2}, {&(0x7f0000000d00)="9b5a247f15fdf2f208a9d50c28dbd5ce9945ec1251f8072bc2c0c6f671c92282ff24fe64d942f822b6445a29311a40d33d471c917db82f1779898abc2afb97f46e3c6d", 0x43}, {&(0x7f0000000d80)="8c9e316091dba45eb98c4d1e2c917a55e0f01443177c3aa2cd468eaed95262b3a3e4b2505c4e4845108d91fe588838904e70cc5b53bd4cf560431d1b486a587c72eb1d4177ca1198f5e4fc00364abe5248ec81ce186565c5503779091d427fb6248ca80a537b37086ec3f4d9e75b83372550e8781621e0", 0x77}, {&(0x7f0000000e00)="f4c7eb618941bed01f45d24983c11f13bb5c293ea315e1c6", 0x18}], 0x4}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000380)="d98ffc02b5c18be1d134134c2a52d82b3df2b9b6a8622d9fd90332c56ff8e52913ce1929858cca21249dfdcc56937eb78c3f115c542d63c0344532b8c796adf5065537352e0bc3f19797130631def9e27c2703a67951933a51b4755601289a06087fe8c065ec108adf17da7412a5a9d562c70bff84", 0x75}], 0x1, 0x0, 0x0, 0x77000000}}], 0x2, 0x4000045) 1m1.179216388s ago: executing program 5 (id=4813): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x1c, 0x2e, 0x9, 0x70bd27, 0xfffffffe, {0x4}, [@typed={0x4, 0xe, 0x0, 0x0, @binary}, @typed={0x4, 0x1d}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x300) 1m1.112726659s ago: executing program 1 (id=4814): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0xd8398000) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f00000002c0)) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r5, 0x7}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000500)=0x1, r3, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000200)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x5, @loopback, 0x5}, r3}}, 0x30) r6 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) readv(r6, &(0x7f0000000180)=[{&(0x7f0000000080)=""/110, 0x6e}], 0x1) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 1m0.997156736s ago: executing program 5 (id=4815): bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x12000)=nil, 0x12000, 0x65) r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x20, @loopback, 0x23}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000100)=0x80000002, 0x4) sendto$inet(r0, &(0x7f0000000900)="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", 0x13e, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 1m0.965350379s ago: executing program 5 (id=4816): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0x0, 0x0) getdents(r1, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}, 0x1, 0x0, 0xa00000000000000, 0x80}, 0x20000000) 1m0.903164608s ago: executing program 5 (id=4817): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000fff500000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) 1m0.836677137s ago: executing program 6 (id=4818): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x280, 0x1000, 0x0, 0x1, 0x0, {0x0, 0x9}, {0x350, 0x20002, 0xfffffffd}, {0xf4ef}, {0x4, 0x0, 0x7fe}, 0x1, 0x100, 0xfffe, 0xd614, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x1, 0x4}) 1m0.778872445s ago: executing program 2 (id=4819): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x7, 0x30}, 0xc) sendto$inet(r0, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, &(0x7f0000000100)='o', 0x1, 0x48850, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)="ab", 0x34000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) (fail_nth: 8) 1m0.726298033s ago: executing program 5 (id=4820): bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x20, @loopback, 0x23}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000100)=0x80000002, 0x4) sendto$inet(r0, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9025a01c95d4a068ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d4", 0xd4, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 1m0.661390291s ago: executing program 6 (id=4821): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0xefffffff, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1m0.639002521s ago: executing program 7 (id=4822): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0xfffffffffffffe3e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f00000001c0)={0x0, 0x0, 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) sendto$inet6(r4, &(0x7f0000000180)="59d7118239e81708ee8a9f8e17166525766ce5ca556d9d615f032fca05e676", 0x1f, 0x20004004, &(0x7f0000000440)={0xa, 0x4e22, 0x2, @mcast1, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r4, 0x5421, &(0x7f0000000140)=0x1) writev(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) close(r4) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mbind(&(0x7f00001ae000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000200)=0x2001000000000004, 0x9, 0x3) syz_emit_ethernet(0x2c, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000008902450c001e0064000004029078e0000001e0cb5a180fff1ffe"], 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000400), 0x800000000401, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r5, 0xc040564a, &(0x7f0000000000)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="58000000020601080000000000000000010000030c000300686173683a6970000500010007000000050005000a0000000900020073797a300000000005000400000000bf0d00078008000840000000d308000640000000005fa51f"], 0x58}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) 1m0.304990236s ago: executing program 6 (id=4823): pipe2(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000400)={[0x2, 0xffffffffffff8000, 0xb, 0x0, 0xd802, 0x5, 0xff, 0xfffffffffffffff8, 0xffffffffd3d32f95, 0xd, 0x7fffffff, 0x80000001, 0x5, 0x1, 0x5, 0x97], 0xc000, 0x82}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x3, 0x0, 0xfffffe0000000001, 0xfa0f, 0xffffffff}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@polexpire={0xd4, 0x1b, 0x103, 0x0, 0x0, {{{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000}}}, [@policy_type={0xa}, @XFRMA_IF_ID={0x8}]}, 0xd4}}, 0x0) 1m0.17948701s ago: executing program 1 (id=4824): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) connect$tipc(0xffffffffffffffff, &(0x7f0000000340)=@id={0x1e, 0x3, 0x1, {0x4e24, 0x203}}, 0x10) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000740)="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", 0x149}, {&(0x7f00000042c0)="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", 0xfff}, {&(0x7f00000008c0)="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", 0x103}, {&(0x7f00000018c0)="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", 0xfeb}, {&(0x7f00000029c0)="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", 0xda7}], 0x5, 0x0, 0x0, 0x40044}}], 0x1, 0x4) recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0xfffffffffffffee1, 0x0, 0x0, 0x0, 0xffffffffffffff35}, 0x9}], 0x49, 0x2382, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) mmap(&(0x7f00001ad000/0x1000)=nil, 0x1000, 0x2, 0x8010, 0xffffffffffffffff, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f0000000180)={0x2, 0xffffffffffffffff, 0x1}) r3 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d2", 0x1, 0xfffffffffffffffe) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)=@ethernet={0x6, @local}, 0x80, &(0x7f0000000680)=[{&(0x7f00000032c0)="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", 0x1000}], 0x1, &(0x7f00000006c0)=[@timestamping={{0x14, 0x1, 0x25, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x7d0}}], 0x30}, 0x0) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x2}, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r4, r3}, &(0x7f0000001600)=""/97, 0x61, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYRES64=r3, @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00d=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', r6, &(0x7f0000000180)='./file0\x00', 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x89900) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x202) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {0xffff, 0xfff3}, {0x6}}}, 0x24}}, 0x20000001) socket$kcm(0x11, 0x2, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@getqdisc={0x34, 0x26, 0x2, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb, 0xd}, {0x2, 0xc}, {0xb, 0x6}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40800}, 0x8000) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x1a50c0, 0x0) close(r0) 59.401095948s ago: executing program 2 (id=4825): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0xf4}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e640000"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0xffffff1f, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34080}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x4000000}, 0x4000000) 59.180314027s ago: executing program 5 (id=4826): bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x12000)=nil, 0x12000, 0x65) r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x20, @loopback, 0x23}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000100)=0x80000002, 0x4) sendto$inet(r0, &(0x7f0000000900)="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", 0x13e, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 58.974145218s ago: executing program 1 (id=4827): socket$inet_sctp(0x2, 0x5, 0x84) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x1c, 0x0, r0, 0x0, &(0x7f0000000440)={0x0, 0xfffffffffffffebf, 0x0, 0x0, 0x0, 0xfe3f}, 0x0, 0x40051, 0x1}) (async) r1 = syz_io_uring_setup(0x81e, &(0x7f0000000480)={0x0, 0xfe15, 0x80, 0x0, 0x30f}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) (async) io_uring_enter(r1, 0x47bc, 0x0, 0x21, 0x0, 0x0) 0s ago: executing program 35 (id=4822): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0xfffffffffffffe3e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x800010, 0x0, 0x2, 0x89, 0x8, 0xb319, 0x3}, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f00000001c0)={0x0, 0x0, 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) sendto$inet6(r4, &(0x7f0000000180)="59d7118239e81708ee8a9f8e17166525766ce5ca556d9d615f032fca05e676", 0x1f, 0x20004004, &(0x7f0000000440)={0xa, 0x4e22, 0x2, @mcast1, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r4, 0x5421, &(0x7f0000000140)=0x1) writev(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) close(r4) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mbind(&(0x7f00001ae000/0x4000)=nil, 0x4000, 0x4002, &(0x7f0000000200)=0x2001000000000004, 0x9, 0x3) syz_emit_ethernet(0x2c, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000008902450c001e0064000004029078e0000001e0cb5a180fff1ffe"], 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000400), 0x800000000401, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r5, 0xc040564a, &(0x7f0000000000)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="58000000020601080000000000000000010000030c000300686173683a6970000500010007000000050005000a0000000900020073797a300000000005000400000000bf0d00078008000840000000d308000640000000005fa51f"], 0x58}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) kernel console output (not intermixed with test programs): 0x10/0x10 [ 776.445409][ T1138] ? __lock_acquire+0x6b5/0x2cf0 [ 776.445444][ T1138] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 776.445483][ T1138] ? __fget_files+0x2a/0x420 [ 776.445514][ T1138] ? __fget_files+0x2a/0x420 [ 776.445538][ T1138] ? __fget_files+0x3a0/0x420 [ 776.445564][ T1138] ? __fget_files+0x2a/0x420 [ 776.445592][ T1138] security_file_ioctl+0xc3/0x2a0 [ 776.445617][ T1138] __se_sys_ioctl+0x47/0x170 [ 776.445642][ T1138] do_syscall_64+0x14d/0xf80 [ 776.445662][ T1138] ? trace_irq_disable+0x3b/0x150 [ 776.445687][ T1138] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.445706][ T1138] ? clear_bhb_loop+0x40/0x90 [ 776.445729][ T1138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.445747][ T1138] RIP: 0033:0x7f582399c799 [ 776.445765][ T1138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 776.445781][ T1138] RSP: 002b:00007f582490e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 776.445801][ T1138] RAX: ffffffffffffffda RBX: 00007f5823c15fa0 RCX: 00007f582399c799 [ 776.445815][ T1138] RDX: 0000200000000180 RSI: 000000000000890b RDI: 0000000000000003 [ 776.445827][ T1138] RBP: 00007f582490e090 R08: 0000000000000000 R09: 0000000000000000 [ 776.445840][ T1138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 776.445851][ T1138] R13: 00007f5823c16038 R14: 00007f5823c15fa0 R15: 00007f5823d3fa48 [ 776.445879][ T1138] [ 776.445897][ T1138] ERROR: Out of memory at tomoyo_realpath_from_path. [ 776.753391][ T8534] usb 6-1: new full-speed USB device number 113 using dummy_hcd [ 776.783999][ T8534] usb 6-1: device descriptor read/8, error -71 [ 777.022357][ T1156] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4225'. [ 777.043399][ T8534] usb 6-1: new full-speed USB device number 114 using dummy_hcd [ 777.064081][ T8534] usb 6-1: device descriptor read/8, error -71 [ 777.183640][ T8534] usb usb6-port1: unable to enumerate USB device [ 777.283396][ T5885] usb 8-1: new high-speed USB device number 53 using dummy_hcd [ 777.558447][ T5885] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 777.576848][ T5885] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 777.719003][ T1186] tc_dump_action: action bad kind [ 777.776790][ T5885] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 777.787083][ T5885] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 777.820937][ T5885] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 777.830552][ T5885] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.830793][ T1186] FAULT_INJECTION: forcing a failure. [ 777.830793][ T1186] name failslab, interval 1, probability 0, space 0, times 0 [ 777.853068][ T5885] usb 8-1: config 0 descriptor?? [ 777.871533][ T1186] CPU: 1 UID: 0 PID: 1186 Comm: syz.2.4233 Tainted: G L syzkaller #0 PREEMPT(full) [ 777.871561][ T1186] Tainted: [L]=SOFTLOCKUP [ 777.871569][ T1186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 777.871580][ T1186] Call Trace: [ 777.871589][ T1186] [ 777.871597][ T1186] dump_stack_lvl+0xe8/0x150 [ 777.871627][ T1186] should_fail_ex+0x412/0x560 [ 777.871656][ T1186] should_failslab+0xa8/0x100 [ 777.871682][ T1186] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 777.871702][ T1186] ? __raw_spin_lock_init+0x45/0x100 [ 777.871722][ T1186] ? __alloc_skb+0x1d0/0x7d0 [ 777.871746][ T1186] __alloc_skb+0x1d0/0x7d0 [ 777.871770][ T1186] tipc_msg_build+0x160/0xd60 [ 777.871803][ T1186] ? aa_label_sk_perm+0x532/0x6e0 [ 777.871830][ T1186] ? __pfx_tipc_msg_build+0x10/0x10 [ 777.871858][ T1186] ? tipc_sk_filtering+0x13c/0x510 [ 777.871885][ T1186] __tipc_sendstream+0x8b9/0x12b0 [ 777.871931][ T1186] ? __pfx___tipc_sendstream+0x10/0x10 [ 777.871949][ T1186] ? __pfx_woken_wake_function+0x10/0x10 [ 777.871970][ T1186] ? tipc_sendstream+0x47/0x70 [ 777.871986][ T1186] ? __local_bh_enable_ip+0xd0/0x130 [ 777.872002][ T1186] tipc_sendstream+0x55/0x70 [ 777.872018][ T1186] ? __pfx_tipc_sendstream+0x10/0x10 [ 777.872032][ T1186] sock_write_iter+0x49b/0x4f0 [ 777.872051][ T1186] ? __pfx_sock_write_iter+0x10/0x10 [ 777.872082][ T1186] ? bpf_lsm_file_permission+0x9/0x20 [ 777.872103][ T1186] ? security_file_permission+0x75/0x260 [ 777.872133][ T1186] vfs_write+0x61d/0xb90 [ 777.872150][ T1186] ? __pfx_vfs_write+0x10/0x10 [ 777.872167][ T1186] ? __fget_files+0x2a/0x420 [ 777.872187][ T1186] ksys_write+0x150/0x270 [ 777.872200][ T1186] ? __pfx_ksys_write+0x10/0x10 [ 777.872216][ T1186] do_syscall_64+0x14d/0xf80 [ 777.872228][ T1186] ? trace_irq_disable+0x3b/0x150 [ 777.872252][ T1186] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.872271][ T1186] ? clear_bhb_loop+0x40/0x90 [ 777.872296][ T1186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.872307][ T1186] RIP: 0033:0x7fb08d59c799 [ 777.872318][ T1186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 777.872327][ T1186] RSP: 002b:00007fb08e3ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 777.872339][ T1186] RAX: ffffffffffffffda RBX: 00007fb08d815fa0 RCX: 00007fb08d59c799 [ 777.872347][ T1186] RDX: 000000002000011a RSI: 0000200000000340 RDI: 0000000000000007 [ 777.872354][ T1186] RBP: 00007fb08e3ca090 R08: 0000000000000000 R09: 0000000000000000 [ 777.872362][ T1186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 777.872368][ T1186] R13: 00007fb08d816038 R14: 00007fb08d815fa0 R15: 00007fb08d93fa48 [ 777.872384][ T1186] [ 778.311785][ T537] tipc: Subscription rejected, illegal request [ 778.474214][ T1204] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 778.484983][ T1204] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4234'. [ 778.504283][ T5885] plantronics 0003:047F:FFFF.0040: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 778.730813][ T5885] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 778.882520][ T1221] bridge0: entered promiscuous mode [ 778.895430][ T5885] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 778.905988][ T5885] usb 3-1: config 0 has no interfaces? [ 778.914284][ T5885] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 778.924255][ T5885] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.963740][ T5885] usb 3-1: Product: syz [ 778.983123][ T5885] usb 3-1: Manufacturer: syz [ 779.008620][ T5885] usb 3-1: SerialNumber: syz [ 779.036550][ T5885] usb 3-1: config 0 descriptor?? [ 779.242852][ T1243] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4241'. [ 779.255601][ T1243] netlink: 116 bytes leftover after parsing attributes in process `syz.1.4241'. [ 779.256548][ T1205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 779.265413][ T1243] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4241'. [ 779.274825][ T1205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 779.340833][ T1205] batadv0: entered promiscuous mode [ 779.361579][ T1205] vlan2: entered promiscuous mode [ 779.404059][ T5956] usb 7-1: new full-speed USB device number 74 using dummy_hcd [ 779.449565][ T5885] usb 3-1: USB disconnect, device number 34 [ 779.567564][ T5956] usb 7-1: config 0 has no interfaces? [ 779.575786][ T5956] usb 7-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 779.586274][ T5956] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.601542][ T5956] usb 7-1: Product: syz [ 779.612454][ T5956] usb 7-1: Manufacturer: syz [ 779.628274][ T5956] usb 7-1: SerialNumber: syz [ 779.646916][ T5956] usb 7-1: config 0 descriptor?? [ 779.879884][ T1238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 779.989902][ T1238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 780.023309][ T1238] vlan3: entered promiscuous mode [ 780.145241][ T8534] usb 8-1: USB disconnect, device number 53 [ 780.164796][ T5893] usb 7-1: USB disconnect, device number 74 [ 780.767007][ T1321] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4253'. [ 780.837583][ T1324] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4254'. [ 780.850875][ T1321] vlan4: entered promiscuous mode [ 781.063740][ T5885] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 781.210172][ T5823] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 781.229358][ T5885] usb 7-1: Using ep0 maxpacket: 8 [ 781.265416][ T5885] usb 7-1: config 0 has no interfaces? [ 781.270930][ T5885] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 781.293573][ T5885] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.313336][ T482] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 781.331245][ T5885] usb 7-1: config 0 descriptor?? [ 781.424037][ T1356] netlink: 'syz.2.4260': attribute type 2 has an invalid length. [ 781.431850][ T1356] netlink: 'syz.2.4260': attribute type 3 has an invalid length. [ 781.439934][ T1356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4260'. [ 781.519915][ T482] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 781.532024][ T482] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 781.543530][ T8534] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 781.554385][ T482] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 781.566309][ T482] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 781.583610][ T482] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 781.610820][ T482] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.627251][ T1359] xt_hashlimit: size too large, truncated to 1048576 [ 781.631649][ T1362] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4255'. [ 781.640290][ T482] usb 8-1: config 0 descriptor?? [ 781.652964][ T1362] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4255'. [ 781.669507][ T1362] netlink: 'syz.6.4255': attribute type 12 has an invalid length. [ 781.689716][ T1362] netlink: 'syz.6.4255': attribute type 11 has an invalid length. [ 781.714157][ T8534] usb 2-1: Using ep0 maxpacket: 32 [ 781.727671][ T8534] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 781.741322][ T8534] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 781.764536][ T8534] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 781.781970][ T5885] usb 7-1: USB disconnect, device number 75 [ 781.782095][ T8534] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 781.802326][ T8534] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.916231][ T8534] usb 2-1: config 0 descriptor?? [ 781.921903][ T1347] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 781.936901][ T8534] hub 2-1:0.0: USB hub found [ 782.227082][ T8534] hub 2-1:0.0: 2 ports detected [ 782.252042][ T482] plantronics 0003:047F:FFFF.0041: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 782.430974][ T8534] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 782.446202][ T8534] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 782.461589][ T8534] usbhid 2-1:0.0: can't add hid device: -71 [ 782.481617][ T8534] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 782.553100][ T1405] __nla_validate_parse: 1 callbacks suppressed [ 782.553119][ T1405] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4266'. [ 782.571321][ T8534] usb 2-1: USB disconnect, device number 19 [ 782.733882][ T1405] 8021q: adding VLAN 0 to HW filter on device bond1 [ 783.205738][ T8534] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 784.168778][ T8534] usb 6-1: Using ep0 maxpacket: 32 [ 784.226938][ T8534] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 784.245378][ T8534] usb 6-1: config 0 has no interface number 0 [ 784.251499][ T8534] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 784.271354][ T482] usb 8-1: USB disconnect, device number 54 [ 784.342049][ T8534] usb 6-1: config 0 interface 85 has no altsetting 0 [ 784.354411][ T1487] xt_CT: You must specify a L4 protocol and not use inversions on it [ 784.372578][ T8534] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 784.388680][ T8534] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.425106][ T8534] usb 6-1: Product: syz [ 784.462549][ T8534] usb 6-1: Manufacturer: syz [ 784.479096][ T8534] usb 6-1: SerialNumber: syz [ 784.515600][ T8534] usb 6-1: config 0 descriptor?? [ 784.623313][ T8538] usb 7-1: new high-speed USB device number 76 using dummy_hcd [ 784.749786][ T1517] mac80211_hwsim hwsim35 syzkaller0: entered promiscuous mode [ 784.764023][ T1517] mac80211_hwsim hwsim35 syzkaller0: entered allmulticast mode [ 784.793738][ T8538] usb 7-1: Using ep0 maxpacket: 32 [ 784.824571][ T8538] usb 7-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 784.843294][ T8538] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.903136][ T8538] usb 7-1: config 0 descriptor?? [ 784.936229][ T8538] gspca_main: sq930x-2.14.0 probing 041e:403c [ 785.173187][ T8534] appletouch 6-1:0.85: Failed to request geyser raw mode [ 785.180892][ T8534] appletouch 6-1:0.85: probe with driver appletouch failed with error -5 [ 785.226581][ T8534] usb 6-1: USB disconnect, device number 115 [ 785.605486][ T1548] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4288'. [ 785.633743][ T5956] usb 8-1: new high-speed USB device number 55 using dummy_hcd [ 785.766736][ T1553] netlink: 'syz.2.4290': attribute type 1 has an invalid length. [ 785.805453][ T5956] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 785.824783][ T5956] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 785.847283][ T5956] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 785.867865][ T1558] netlink: 'syz.1.4292': attribute type 1 has an invalid length. [ 785.885973][ T5956] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 785.906182][ T5956] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 785.917332][ T5956] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.932250][ T5956] usb 8-1: config 0 descriptor?? [ 785.946184][ T8538] gspca_sq930x: ucbus_write failed -71 [ 785.951745][ T8538] sq930x 7-1:0.0: probe with driver sq930x failed with error -71 [ 785.986349][ T1585] netlink: 'syz.5.4294': attribute type 1 has an invalid length. [ 786.017830][ T8538] usb 7-1: USB disconnect, device number 76 [ 786.035582][ T1558] 8021q: adding VLAN 0 to HW filter on device bond2 [ 786.096691][ T1568] bond2: (slave geneve2): making interface the new active one [ 786.109983][ T1568] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 786.182972][ T1585] 8021q: adding VLAN 0 to HW filter on device bond2 [ 786.315494][ T1657] FAULT_INJECTION: forcing a failure. [ 786.315494][ T1657] name failslab, interval 1, probability 0, space 0, times 0 [ 786.329018][ T1657] CPU: 1 UID: 0 PID: 1657 Comm: syz.2.4297 Tainted: G L syzkaller #0 PREEMPT(full) [ 786.329047][ T1657] Tainted: [L]=SOFTLOCKUP [ 786.329055][ T1657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 786.329066][ T1657] Call Trace: [ 786.329073][ T1657] [ 786.329078][ T1657] dump_stack_lvl+0xe8/0x150 [ 786.329098][ T1657] should_fail_ex+0x412/0x560 [ 786.329116][ T1657] should_failslab+0xa8/0x100 [ 786.329161][ T1657] ? __inet_hash_connect+0x1497/0x2440 [ 786.329190][ T1657] kmem_cache_alloc_noprof+0x87/0x650 [ 786.329209][ T1657] ? __inet_hash_connect+0xd48/0x2440 [ 786.329231][ T1657] __inet_hash_connect+0x1497/0x2440 [ 786.329253][ T1657] ? __inet_hash_connect+0x4cf/0x2440 [ 786.329271][ T1657] ? __pfx___inet_hash_connect+0x10/0x10 [ 786.329292][ T1657] ? lockdep_hardirqs_on+0x7a/0x110 [ 786.329320][ T1657] ? inet_hash_connect+0x12f/0x240 [ 786.329350][ T1657] tcp_v4_connect+0xd5f/0x19b0 [ 786.329371][ T1657] ? kasan_save_track+0x4f/0x80 [ 786.329382][ T1657] ? kasan_save_track+0x3e/0x80 [ 786.329404][ T1657] ? __pfx_tcp_v4_connect+0x10/0x10 [ 786.329422][ T1657] __inet_stream_connect+0x25a/0xdd0 [ 786.329453][ T1657] ? __pfx___inet_stream_connect+0x10/0x10 [ 786.329478][ T1657] ? __kasan_kmalloc+0x93/0xb0 [ 786.329501][ T1657] ? __kmalloc_cache_noprof+0x31c/0x660 [ 786.329519][ T1657] ? tcp_sendmsg_fastopen+0x1de/0x5e0 [ 786.329531][ T1657] ? __kmalloc_cache_noprof+0x15b/0x660 [ 786.329545][ T1657] tcp_sendmsg_fastopen+0x3a7/0x5e0 [ 786.329561][ T1657] tcp_sendmsg_locked+0x4bb2/0x5490 [ 786.329577][ T1657] ? aa_file_perm+0x192/0x15e0 [ 786.329595][ T1657] ? tcp_sendmsg_locked+0x2a1/0x5490 [ 786.329617][ T1657] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 786.329646][ T1657] ? __lock_acquire+0x6b5/0x2cf0 [ 786.329666][ T1657] ? look_up_lock_class+0x57/0x110 [ 786.329678][ T1657] ? register_lock_class+0x31/0x2e0 [ 786.329693][ T1657] ? __lock_acquire+0x6b5/0x2cf0 [ 786.329718][ T1657] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 786.329746][ T1657] ? tcp_sendmsg+0x21/0x50 [ 786.329771][ T1657] ? __local_bh_enable_ip+0xd0/0x130 [ 786.329796][ T1657] ? __pfx_inet_sendmsg+0x10/0x10 [ 786.329815][ T1657] tcp_sendmsg+0x2f/0x50 [ 786.329828][ T1657] __sys_sendto+0x5de/0x710 [ 786.329840][ T1657] ? __pfx___sys_sendto+0x10/0x10 [ 786.329849][ T1657] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 786.329868][ T1657] ? __fget_files+0x3a0/0x420 [ 786.329905][ T1657] ? ksys_write+0x242/0x270 [ 786.329929][ T1657] ? __pfx_ksys_write+0x10/0x10 [ 786.329954][ T1657] __x64_sys_sendto+0xde/0x100 [ 786.329968][ T1657] do_syscall_64+0x14d/0xf80 [ 786.329979][ T1657] ? trace_irq_disable+0x3b/0x150 [ 786.329995][ T1657] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 786.330005][ T1657] ? clear_bhb_loop+0x40/0x90 [ 786.330019][ T1657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 786.330038][ T1657] RIP: 0033:0x7fb08d59c799 [ 786.330056][ T1657] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 786.330073][ T1657] RSP: 002b:00007fb08e3ca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 786.330093][ T1657] RAX: ffffffffffffffda RBX: 00007fb08d815fa0 RCX: 00007fb08d59c799 [ 786.330105][ T1657] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 786.330112][ T1657] RBP: 00007fb08e3ca090 R08: 0000200000e68000 R09: 0000000000000010 [ 786.330119][ T1657] R10: 00000000200007fd R11: 0000000000000246 R12: 0000000000000001 [ 786.330126][ T1657] R13: 00007fb08d816038 R14: 00007fb08d815fa0 R15: 00007fb08d93fa48 [ 786.330142][ T1657] [ 786.687169][ T5956] plantronics 0003:047F:FFFF.0042: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 787.084972][ T5956] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 787.332345][ T5956] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 787.343892][ T5956] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 787.360714][ T5956] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 787.376908][ T5956] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.477572][ T1667] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 787.514469][ T1690] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4304'. [ 787.525285][ T5956] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 787.730599][ T5956] usb 6-1: USB disconnect, device number 116 [ 788.109156][ T1732] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4308'. [ 788.361418][ T1737] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 788.429734][ T5956] usb 8-1: USB disconnect, device number 55 [ 788.708241][ T1764] loop2: detected capacity change from 0 to 7 [ 788.760868][ T8538] usb 3-1: new low-speed USB device number 35 using dummy_hcd [ 789.012151][ T5828] Dev loop2: unable to read RDB block 7 [ 789.021176][ T5828] loop2: AHDI p1 p2 [ 789.031253][ T5828] loop2: partition table partially beyond EOD, truncated [ 789.039889][ T5828] loop2: p1 start 1818582900 is beyond EOD, truncated [ 789.049548][ T1764] Dev loop2: unable to read RDB block 7 [ 789.052306][ T8538] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 789.066150][ T8538] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 789.078346][ T8538] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 789.079366][ T1764] loop2: AHDI p1 p2 [ 789.092770][ T1764] loop2: partition table partially beyond EOD, truncated [ 789.092825][ T8538] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.102972][ T1764] loop2: p1 start 1818582900 is beyond EOD, [ 789.124041][ T5956] usb 8-1: new high-speed USB device number 56 using dummy_hcd [ 789.152473][ T1764] truncated [ 789.163020][ T8538] usb 3-1: config 0 descriptor?? [ 789.289709][ T5956] usb 8-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 789.332099][ T5956] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.351352][ T5956] usb 8-1: config 0 descriptor?? [ 789.896417][ T5956] usb 8-1: Cannot read MAC address [ 789.902835][ T5956] MOSCHIP usb-ethernet driver 8-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 789.933099][ T5956] usb 8-1: USB disconnect, device number 56 [ 790.355106][ T1802] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4320'. [ 790.796476][ T8535] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 791.031364][ T8535] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 791.043142][ T8535] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 791.072184][ T8535] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 791.090352][ T8535] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 791.122146][ T8535] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 791.140075][ T8535] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.168624][ T8535] usb 6-1: config 0 descriptor?? [ 791.622368][ T8535] plantronics 0003:047F:FFFF.0043: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 792.217212][ T5885] usb 3-1: USB disconnect, device number 35 [ 792.890078][ T1890] loop2: detected capacity change from 0 to 7 [ 792.908125][ T5828] Dev loop2: unable to read RDB block 7 [ 792.916345][ T5828] loop2: AHDI p1 p2 [ 792.925298][ T5828] loop2: partition table partially beyond EOD, truncated [ 792.948696][ T5828] loop2: p1 start 1818582900 is beyond EOD, truncated [ 792.967510][ T1890] Dev loop2: unable to read RDB block 7 [ 792.973170][ T1890] loop2: AHDI p1 p2 [ 792.979343][ T1890] loop2: partition table partially beyond EOD, truncated [ 792.991719][ T1890] loop2: p1 start 1818582900 is beyond EOD, truncated [ 793.073440][ T8535] usb 6-1: reset high-speed USB device number 117 using dummy_hcd [ 793.213458][ T8535] usb 6-1: device descriptor read/64, error -32 [ 793.418185][ T1931] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4332'. [ 793.463447][ T8535] usb 6-1: reset high-speed USB device number 117 using dummy_hcd [ 793.593351][ T8535] usb 6-1: device descriptor read/64, error -32 [ 793.853367][ T8535] usb 6-1: reset high-speed USB device number 117 using dummy_hcd [ 793.883856][ T8535] usb 6-1: device descriptor read/8, error -32 [ 794.781166][ T2006] loop2: detected capacity change from 0 to 7 [ 794.814869][ T8538] usb 6-1: USB disconnect, device number 117 [ 794.820070][ T5828] Dev loop2: unable to read RDB block 7 [ 794.827666][ T5828] loop2: AHDI p1 p2 [ 794.831830][ T5828] loop2: partition table partially beyond EOD, truncated [ 794.846078][ T5828] loop2: p1 start 1818582900 is beyond EOD, truncated [ 794.857392][ T2006] Dev loop2: unable to read RDB block 7 [ 794.862984][ T2006] loop2: AHDI p1 p2 [ 794.868384][ T2006] loop2: partition table partially beyond EOD, truncated [ 794.896014][ T2006] loop2: p1 start 1818582900 is beyond EOD, truncated [ 794.913387][T26749] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 795.125126][T26749] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 795.137188][T26749] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 795.156054][T26749] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 795.206061][T26749] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 795.273665][T26749] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 795.466621][T26749] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 795.475951][T26749] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.485716][T26749] usb 3-1: Product: syz [ 795.490681][T26749] usb 3-1: Manufacturer: syz [ 795.539790][ T5956] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 795.570718][T26749] usb 3-1: SerialNumber: syz [ 795.603503][T26749] usb 3-1: config 0 descriptor?? [ 795.617514][T26749] iguanair 3-1:0.0: probe with driver iguanair failed with error -12 [ 795.736480][ T5956] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 795.748506][ T5956] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 795.759635][ T5956] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 795.770549][ T5956] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 795.943643][ T5956] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 796.013599][ T5956] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.022881][ T5956] usb 7-1: config 0 descriptor?? [ 796.526605][ T5956] plantronics 0003:047F:FFFF.0044: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 796.883402][ T5956] usb 8-1: new high-speed USB device number 57 using dummy_hcd [ 797.047080][ T5956] usb 8-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.36 [ 797.063406][ T5956] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.077354][ T5956] usb 8-1: config 0 descriptor?? [ 797.182204][ T2116] FAULT_INJECTION: forcing a failure. [ 797.182204][ T2116] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 797.196144][ T2116] CPU: 0 UID: 0 PID: 2116 Comm: syz.1.4357 Tainted: G L syzkaller #0 PREEMPT(full) [ 797.196163][ T2116] Tainted: [L]=SOFTLOCKUP [ 797.196167][ T2116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 797.196174][ T2116] Call Trace: [ 797.196182][ T2116] [ 797.196190][ T2116] dump_stack_lvl+0xe8/0x150 [ 797.196224][ T2116] should_fail_ex+0x412/0x560 [ 797.196254][ T2116] _copy_from_iter+0x1d3/0x1670 [ 797.196285][ T2116] ? rcu_is_watching+0x15/0xb0 [ 797.196316][ T2116] ? __pfx__copy_from_iter+0x10/0x10 [ 797.196351][ T2116] ? netlink_sendmsg+0x650/0xb40 [ 797.196378][ T2116] ? skb_put+0x11b/0x210 [ 797.196392][ T2116] netlink_sendmsg+0x6c0/0xb40 [ 797.196411][ T2116] ? __pfx_netlink_sendmsg+0x10/0x10 [ 797.196429][ T2116] ? aa_sock_msg_perm+0xf1/0x1b0 [ 797.196445][ T2116] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 797.196459][ T2116] ____sys_sendmsg+0x972/0x9f0 [ 797.196475][ T2116] ? __pfx_____sys_sendmsg+0x10/0x10 [ 797.196491][ T2116] ? import_iovec+0x73/0xa0 [ 797.196504][ T2116] ___sys_sendmsg+0x2a5/0x360 [ 797.196518][ T2116] ? __pfx____sys_sendmsg+0x10/0x10 [ 797.196546][ T2116] ? __fget_files+0x2a/0x420 [ 797.196561][ T2116] ? __fget_files+0x3a0/0x420 [ 797.196587][ T2116] __x64_sys_sendmsg+0x1bd/0x2a0 [ 797.196601][ T2116] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 797.196617][ T2116] ? __pfx_ksys_write+0x10/0x10 [ 797.196634][ T2116] do_syscall_64+0x14d/0xf80 [ 797.196646][ T2116] ? trace_irq_disable+0x3b/0x150 [ 797.196661][ T2116] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.196672][ T2116] ? clear_bhb_loop+0x40/0x90 [ 797.196685][ T2116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.196695][ T2116] RIP: 0033:0x7f107419c799 [ 797.196706][ T2116] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 797.196715][ T2116] RSP: 002b:00007f1074fa5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 797.196728][ T2116] RAX: ffffffffffffffda RBX: 00007f1074415fa0 RCX: 00007f107419c799 [ 797.196736][ T2116] RDX: 0000000020000014 RSI: 00002000000001c0 RDI: 0000000000000003 [ 797.196743][ T2116] RBP: 00007f1074fa5090 R08: 0000000000000000 R09: 0000000000000000 [ 797.196750][ T2116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 797.196757][ T2116] R13: 00007f1074416038 R14: 00007f1074415fa0 R15: 00007f107453fa48 [ 797.196772][ T2116] [ 797.490043][ T5956] usb 8-1: Cannot read MAC address [ 797.501536][ T5956] MOSCHIP usb-ethernet driver 8-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 797.516256][ T5956] usb 8-1: USB disconnect, device number 57 [ 797.595963][ T2128] loop2: detected capacity change from 0 to 7 [ 797.608720][ T2132] CIFS: VFS: Malformed UNC in devname [ 797.627181][ T2132] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4359'. [ 797.637300][ T2128] Dev loop2: unable to read RDB block 7 [ 797.652682][ T2128] loop2: AHDI p1 p2 [ 797.659976][ T2128] loop2: partition table partially beyond EOD, truncated [ 797.689902][ T2128] loop2: p1 start 1818582900 is beyond EOD, truncated [ 797.827662][ T482] usb 3-1: USB disconnect, device number 36 [ 797.829695][ T2143] xt_hashlimit: size too large, truncated to 1048576 [ 797.898135][ T2154] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4362'. [ 797.914575][ T8538] usb 7-1: reset high-speed USB device number 77 using dummy_hcd [ 798.073432][ T8538] usb 7-1: device descriptor read/64, error -32 [ 798.343325][ T8538] usb 7-1: reset high-speed USB device number 77 using dummy_hcd [ 798.362663][ T128] erspan0: left allmulticast mode [ 798.376428][ T128] erspan0: left promiscuous mode [ 798.397179][ T128] bridge1: port 1(erspan0) entered disabled state [ 798.484088][ T8538] usb 7-1: device descriptor read/64, error -32 [ 798.672377][ T128] bond2 (unregistering): (slave gretap1): Releasing backup interface [ 798.721004][ T128] bond1 (unregistering): (slave geneve2): Releasing active interface [ 798.734051][ T8538] usb 7-1: reset high-speed USB device number 77 using dummy_hcd [ 798.765535][ T8538] usb 7-1: device descriptor read/8, error -32 [ 798.967845][ T128] bond0 (unregistering): left promiscuous mode [ 798.974344][ T128] bond_slave_0: left promiscuous mode [ 798.982169][ T128] bond_slave_1: left promiscuous mode [ 798.995312][ T128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 799.007826][ T128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 799.029209][ T128] bond0 (unregistering): Released all slaves [ 799.039479][ T128] bond1 (unregistering): Released all slaves [ 799.054719][ T128] bond2 (unregistering): Released all slaves [ 799.068375][ T128] bond3 (unregistering): Released all slaves [ 799.081556][ T128] bond4 (unregistering): Released all slaves [ 799.106806][ T128] bond5 (unregistering): Released all slaves [ 799.120816][ T128] bond6 (unregistering): Released all slaves [ 799.140473][ T128] bond7 (unregistering): Released all slaves [ 799.155864][ T128] bond8 (unregistering): Released all slaves [ 799.173018][ T128] bond9 (unregistering): Released all slaves [ 799.198166][ T128] bond10 (unregistering): Released all slaves [ 799.388769][ T128] tipc: Disabling bearer [ 799.417152][ T128] tipc: Left network mode [ 799.497224][ T2220] loop4: detected capacity change from 0 to 7 [ 799.535403][ T2220] Dev loop4: unable to read RDB block 7 [ 799.549624][ T2220] loop4: unable to read partition table [ 799.569987][ T2220] loop4: partition table beyond EOD, truncated [ 799.616405][ T2220] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 799.676820][ T8535] usb 7-1: USB disconnect, device number 77 [ 799.816062][ T2250] loop2: detected capacity change from 0 to 7 [ 799.827073][ T2250] Dev loop2: unable to read RDB block 7 [ 799.832661][ T2250] loop2: AHDI p1 p2 [ 799.858411][ T2250] loop2: partition table partially beyond EOD, truncated [ 799.870748][ T2250] loop2: p1 start 1818582900 is beyond EOD, truncated [ 800.102008][ T128] hsr_slave_0: left promiscuous mode [ 800.109307][ T128] hsr_slave_1: left promiscuous mode [ 800.117371][ T128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 800.127660][ T128] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 800.135717][ T128] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 800.150655][ T128] veth0_macvtap: left promiscuous mode [ 800.156807][ T128] veth1_vlan: left promiscuous mode [ 800.162354][ T128] veth0_vlan: left promiscuous mode [ 800.368365][ T128] batadv1 (unregistering): left promiscuous mode [ 800.381559][ T128] team0 (unregistering): Port device batadv1 removed [ 800.594139][ T8535] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 800.802069][ T8535] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 800.833464][ T8535] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 800.916732][ T5893] usb 8-1: new full-speed USB device number 58 using dummy_hcd [ 801.071821][ T128] team_slave_1 (unregistering): left promiscuous mode [ 801.079119][ T8535] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 801.079149][ T8535] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 801.164019][ T5893] usb 8-1: config 2 has an invalid interface number: 88 but max is 0 [ 801.174057][ T5893] usb 8-1: config 2 has no interface number 0 [ 801.180735][ T5893] usb 8-1: config 2 interface 88 altsetting 7 endpoint 0x6 has invalid maxpacket 256, setting to 64 [ 801.213916][ T8535] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 801.228892][ T128] team0 (unregistering): Port device team_slave_1 removed [ 801.236290][ T5893] usb 8-1: config 2 interface 88 altsetting 7 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 801.236321][ T5893] usb 8-1: config 2 interface 88 has no altsetting 0 [ 801.236462][ T8535] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.356367][ T128] team_slave_0 (unregistering): left promiscuous mode [ 801.382767][ T128] team0 (unregistering): Port device team_slave_0 removed [ 801.582424][ T5893] usb 8-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 801.634302][ T5893] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.661614][ T8535] usb 2-1: config 0 descriptor?? [ 801.675817][ T5893] usb 8-1: Product: syz [ 801.701933][ T5893] usb 8-1: Manufacturer: syz [ 801.738798][ T5893] usb 8-1: SerialNumber: syz [ 801.852405][ T2285] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 801.860402][ T2285] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 802.079876][ T2283] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 802.087507][ T2283] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 802.112202][ T8535] plantronics 0003:047F:FFFF.0045: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 802.414923][ T8535] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 802.604107][ T8535] usb 6-1: Using ep0 maxpacket: 8 [ 802.625878][ T8535] usb 6-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=4d.89 [ 802.642656][ T8535] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.694014][ T8535] usb 6-1: config 0 descriptor?? [ 802.738025][ T8535] gm12u320 6-1:0.0: [drm:gm12u320_set_ecomode] *ERROR* Misc. req. error -22 [ 802.757452][ T8535] gm12u320 6-1:0.0: probe with driver gm12u320 failed with error -5 [ 802.793574][ T8535] usb-storage 6-1:0.0: USB Mass Storage device detected [ 802.827990][ T8535] usb-storage 6-1:0.0: device ignored [ 802.928631][ T2386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 802.945696][ T2386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 802.957163][ T8535] usb 6-1: USB disconnect, device number 118 [ 803.525225][ T2409] loop2: detected capacity change from 0 to 7 [ 803.533102][ T5835] Dev loop2: unable to read RDB block 7 [ 803.539745][ T5835] loop2: AHDI p1 p2 p3 [ 803.545798][ T5835] loop2: partition table partially beyond EOD, truncated [ 803.553083][ T5835] loop2: p1 start 1818582900 is beyond EOD, truncated [ 803.560859][ T5835] loop2: p3 start 335544320 is beyond EOD, truncated [ 803.563333][ T8535] usb 2-1: reset high-speed USB device number 20 using dummy_hcd [ 803.578242][ T2409] Dev loop2: unable to read RDB block 7 [ 803.584501][ T2409] loop2: AHDI p1 p2 p3 [ 803.589181][ T2409] loop2: partition table partially beyond EOD, truncated [ 803.597386][ T2409] loop2: p1 start 1818582900 is beyond EOD, truncated [ 803.604971][ T2409] loop2: p3 start 335544320 is beyond EOD, truncated [ 803.727395][ T8535] usb 2-1: device descriptor read/64, error -32 [ 803.994863][ T8535] usb 2-1: reset high-speed USB device number 20 using dummy_hcd [ 804.154348][ T8535] usb 2-1: device descriptor read/64, error -32 [ 804.292199][ T5893] asix 8-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 804.314558][ T5893] asix 8-1:2.88: probe with driver asix failed with error -71 [ 804.329046][ T5893] usb 8-1: USB disconnect, device number 58 [ 804.533295][ T8535] usb 2-1: reset high-speed USB device number 20 using dummy_hcd [ 804.710903][ T2463] @: renamed from veth0_vlan (while UP) [ 805.022744][ T8535] usb 2-1: device not accepting address 20, error -71 [ 805.943365][ T5893] usb 8-1: new high-speed USB device number 59 using dummy_hcd [ 805.965466][ T8534] usb 2-1: USB disconnect, device number 20 [ 806.094081][ T5893] usb 8-1: Using ep0 maxpacket: 16 [ 806.122236][ T5893] usb 8-1: config 0 has no interfaces? [ 806.133387][ T5893] usb 8-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 806.162979][ T5893] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.185921][ T5893] usb 8-1: config 0 descriptor?? [ 806.463157][ T2507] macvlan2: entered promiscuous mode [ 806.759997][ T5893] usb 8-1: USB disconnect, device number 59 [ 807.054509][ T8534] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 807.293490][ T8534] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 807.343210][ T8534] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 807.363326][ T8534] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 807.373081][ T8534] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 807.386587][ T8534] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 807.395891][ T8534] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.417649][ T8534] usb 7-1: config 0 descriptor?? [ 807.650053][ T2641] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 807.686565][ T2641] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 807.847999][ C1] raw-gadget.0 gadget.6: ignoring, device is not running [ 807.875555][ T8534] usbhid 7-1:0.0: can't add hid device: -71 [ 807.882054][ T8534] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 807.900559][ T8534] usb 7-1: USB disconnect, device number 78 [ 808.674572][ T2687] netlink: 'syz.7.4418': attribute type 2 has an invalid length. [ 808.684121][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.694810][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.714186][ T2687] netlink: 'syz.7.4418': attribute type 3 has an invalid length. [ 808.726098][ T2687] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4418'. [ 809.221799][ T2721] netlink: 'syz.6.4420': attribute type 2 has an invalid length. [ 809.230232][ T2721] netlink: 'syz.6.4420': attribute type 3 has an invalid length. [ 809.253870][ T2721] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4420'. [ 810.236579][ T2730] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 810.746126][ T2751] netlink: 'syz.6.4426': attribute type 4 has an invalid length. [ 811.139311][ T5893] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 811.253541][ T1633] usb 8-1: new high-speed USB device number 60 using dummy_hcd [ 811.383387][ T5893] usb 6-1: device descriptor read/64, error -71 [ 811.483615][ T1633] usb 8-1: Using ep0 maxpacket: 16 [ 811.567890][ T1633] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 811.595076][ T1633] usb 8-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 811.613323][ T8535] usb 3-1: new low-speed USB device number 37 using dummy_hcd [ 811.667174][ T1633] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.739735][ T5893] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 811.797317][ T8535] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 811.806467][ T1633] usb 8-1: config 0 descriptor?? [ 811.844517][ T8535] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 811.854660][ T1633] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input188 [ 811.907121][ T5893] usb 6-1: device descriptor read/64, error -71 [ 811.919429][ T8535] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 811.933088][ T8535] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.987087][ T8535] usb 3-1: config 0 descriptor?? [ 812.025305][ T5893] usb usb6-port1: attempt power cycle [ 812.059736][ T5177] bcm5974 8-1:0.0: could not read from device [ 812.119831][ T5177] bcm5974 8-1:0.0: could not read from device [ 812.131826][ T5177] bcm5974 8-1:0.0: could not read from device [ 812.148332][ T1633] usb 8-1: USB disconnect, device number 60 [ 812.156250][ T5177] bcm5974 8-1:0.0: could not read from device [ 812.162852][ T5177] bcm5974 8-1:0.0: could not read from device [ 812.413303][ T5893] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 812.635621][ T5893] usb 6-1: device descriptor read/8, error -71 [ 812.782731][ T2840] netlink: 'syz.6.4431': attribute type 2 has an invalid length. [ 812.792710][ T2840] netlink: 'syz.6.4431': attribute type 3 has an invalid length. [ 812.802982][ T2840] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4431'. [ 812.915167][ T5893] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 812.966633][ T5893] usb 6-1: device descriptor read/8, error -71 [ 813.073866][ T5893] usb usb6-port1: unable to enumerate USB device [ 814.223310][ T8534] usb 6-1: new full-speed USB device number 123 using dummy_hcd [ 814.374751][ T8534] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 814.385180][ T8534] usb 6-1: config 0 has no interfaces? [ 814.392543][ T8534] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 814.402500][ T8534] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.410803][ T8534] usb 6-1: Product: syz [ 814.415314][ T8534] usb 6-1: Manufacturer: syz [ 814.419994][ T8534] usb 6-1: SerialNumber: syz [ 814.836086][ T8534] usb 6-1: config 0 descriptor?? [ 814.978597][ T5885] usb 3-1: USB disconnect, device number 37 [ 815.054449][ T2893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 815.078512][ T2893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 815.141790][ T2893] batadv0: entered promiscuous mode [ 815.166069][ T2893] vlan4: entered promiscuous mode [ 815.261124][ T2929] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4441'. [ 815.330201][ T2934] Invalid argument reading file caps for ./file0 [ 815.369589][ T8534] usb 6-1: USB disconnect, device number 123 [ 815.888336][ T2969] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.4445'. [ 815.903940][ T2969] IPVS: You probably need to specify IP address on multicast interface. [ 815.960216][ T2969] IPVS: Error connecting to the multicast addr [ 816.050698][ T2992] netlink: 'syz.6.4448': attribute type 2 has an invalid length. [ 816.063464][ T2992] netlink: 'syz.6.4448': attribute type 3 has an invalid length. [ 816.296388][ T2992] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4448'. [ 817.141706][ T3041] loop4: detected capacity change from 0 to 7 [ 817.234027][ T3041] Dev loop4: unable to read RDB block 7 [ 817.253681][ T3041] loop4: unable to read partition table [ 817.259560][ T3041] loop4: partition table beyond EOD, truncated [ 817.273392][ T3041] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 817.493689][ T5885] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 817.695755][ T5885] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 817.712727][ T5885] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 817.787935][ T5885] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 817.826006][ T5885] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 817.860691][ T5885] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 817.899738][ T5885] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.059541][ T5885] usb 6-1: config 0 descriptor?? [ 818.314796][T28897] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 818.333166][T28897] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 818.342836][T28897] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 818.359579][T28897] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 818.368117][T28897] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 818.512448][ T5885] usbhid 6-1:0.0: can't add hid device: -71 [ 818.519217][ T5885] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 818.585428][ T5885] usb 6-1: USB disconnect, device number 124 [ 819.135146][ T3150] loop2: detected capacity change from 0 to 7 [ 819.145093][ T5828] Dev loop2: unable to read RDB block 7 [ 819.151078][ T5828] loop2: AHDI p1 p2 p3 [ 819.155466][ T5828] loop2: partition table partially beyond EOD, truncated [ 819.163706][ T5828] loop2: p1 start 1818582900 is beyond EOD, truncated [ 819.170499][ T5828] loop2: p3 start 335544320 is beyond EOD, truncated [ 819.179527][ T3150] Dev loop2: unable to read RDB block 7 [ 819.226122][ T3150] loop2: AHDI p1 p2 p3 [ 819.238533][ T3150] loop2: partition table partially beyond EOD, truncated [ 819.251097][ T3085] chnl_net:caif_netlink_parms(): no params data found [ 819.275448][ T3150] loop2: p1 start 1818582900 is beyond EOD, truncated [ 819.275508][ T3150] loop2: p3 start 335544320 is beyond EOD, truncated [ 819.355404][T19749] tipc: Resetting bearer [ 819.387609][T19749] tipc: Disabling bearer [ 819.637524][ T537] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.682514][ T3215] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4467'. [ 819.715286][ T3085] bridge0: port 1(bridge_slave_0) entered blocking state [ 819.722748][ T3085] bridge0: port 1(bridge_slave_0) entered disabled state [ 819.732693][ T3085] bridge_slave_0: entered allmulticast mode [ 819.753949][ T3085] bridge_slave_0: entered promiscuous mode [ 819.829527][ T3236] binder: 3213:3236 ioctl ae80 0 returned -22 [ 819.837250][ T3236] binder: 3213:3236 ioctl 4018620d 0 returned -22 [ 820.076721][ T537] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.154305][ T3085] bridge0: port 2(bridge_slave_1) entered blocking state [ 820.205418][ T3085] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.292275][ T3085] bridge_slave_1: entered allmulticast mode [ 820.310625][ T3085] bridge_slave_1: entered promiscuous mode [ 820.320457][ T3251] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4472'. [ 820.451194][T28897] Bluetooth: hci4: command tx timeout [ 820.691342][ T537] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.717597][ T3252] bond0: (slave veth0_to_hsr): Error: Device can not be enslaved while up [ 820.801765][ T3251] vlan3: entered promiscuous mode [ 820.845538][ T3085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 820.889210][ T537] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.955449][ T3085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 821.085937][ T3085] team0: Port device team_slave_0 added [ 821.093128][ T3085] team0: Port device team_slave_1 added [ 821.259237][ T3085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 821.266692][ T3085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 821.333837][ T3085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 821.425482][ T3085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 821.447155][ T3085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 821.490642][ T3085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 821.962583][ T3085] hsr_slave_0: entered promiscuous mode [ 821.991056][ T3085] hsr_slave_1: entered promiscuous mode [ 822.072584][ T3085] debugfs: 'hsr0' already exists in 'hsr' [ 822.126081][ T3085] Cannot create hsr debugfs directory [ 822.526008][T28897] Bluetooth: hci4: command tx timeout [ 822.751624][ T537] bond1 (unregistering): (slave gretap1): Releasing active interface [ 822.908450][ T537] bond0 (unregistering): left promiscuous mode [ 822.920874][ T537] bond_slave_0: left promiscuous mode [ 822.934640][ T537] bond_slave_1: left promiscuous mode [ 822.953582][ T537] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 822.989400][ T537] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 823.005838][ T537] bond0 (unregistering): Released all slaves [ 823.023777][ T537] bond1 (unregistering): Released all slaves [ 823.075859][ T537] bond2 (unregistering): Released all slaves [ 823.248757][ T537] tipc: Left network mode [ 824.162085][ T537] hsr_slave_0: left promiscuous mode [ 824.171072][ T537] hsr_slave_1: left promiscuous mode [ 824.194008][ T537] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 824.201417][ T537] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 824.219921][ T537] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 824.233852][ T537] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 824.260310][ T537] veth1_macvtap: left promiscuous mode [ 824.273506][ T537] veth0_macvtap: left promiscuous mode [ 824.279115][ T537] veth1_vlan: left promiscuous mode [ 824.294515][ T537] veth0_vlan: left promiscuous mode [ 824.475690][ T537] batadv6 (unregistering): left promiscuous mode [ 824.501248][ T537] team0 (unregistering): Port device batadv6 removed [ 824.512838][ T537] batadv5 (unregistering): left promiscuous mode [ 824.544116][ T537] team0 (unregistering): Port device batadv5 removed [ 824.567567][ T537] batadv4 (unregistering): left promiscuous mode [ 824.575624][ T537] team0 (unregistering): Port device batadv4 removed [ 824.607689][T28897] Bluetooth: hci4: command tx timeout [ 824.616619][ T537] batadv3 (unregistering): left promiscuous mode [ 824.629731][ T537] team0 (unregistering): Port device batadv3 removed [ 824.641985][ T537] batadv2 (unregistering): left promiscuous mode [ 824.657168][ T537] team0 (unregistering): Port device batadv2 removed [ 824.681614][ T537] batadv1 (unregistering): left promiscuous mode [ 824.695834][ T537] team0 (unregistering): Port device batadv1 removed [ 824.870658][ T537] team_slave_1 (unregistering): left promiscuous mode [ 824.879301][ T537] team0 (unregistering): Port device team_slave_1 removed [ 824.892696][ T537] team_slave_0 (unregistering): left promiscuous mode [ 824.900575][ T537] team0 (unregistering): Port device team_slave_0 removed [ 825.629249][ T3085] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 825.663056][ T3085] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 825.687344][ T3085] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 825.750385][ T3085] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 825.767329][ T3607] netlink: 'syz.7.4504': attribute type 2 has an invalid length. [ 825.775543][ T3607] netlink: 'syz.7.4504': attribute type 3 has an invalid length. [ 825.783766][ T3607] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4504'. [ 826.100465][ T3085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 826.142596][ T3085] 8021q: adding VLAN 0 to HW filter on device team0 [ 826.181318][T15037] bridge0: port 1(bridge_slave_0) entered blocking state [ 826.188471][T15037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 826.233450][T15029] bridge0: port 2(bridge_slave_1) entered blocking state [ 826.240592][T15029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 826.491150][ T3085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 826.575183][ T3626] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4507'. [ 826.645287][ T3085] veth0_vlan: entered promiscuous mode [ 826.694748][T28897] Bluetooth: hci4: command tx timeout [ 826.731736][ T3633] vlan6: entered allmulticast mode [ 826.814295][ T3633] bridge3: entered allmulticast mode [ 826.841671][ T3085] veth1_vlan: entered promiscuous mode [ 826.878378][ T3626] erspan0: left allmulticast mode [ 826.977822][ T3626] erspan0: left promiscuous mode [ 827.018464][ T3626] bridge1: port 1(erspan0) entered disabled state [ 827.105956][ T3626] bridge3: port 1(erspan0) entered blocking state [ 827.142888][ T3626] bridge3: port 1(erspan0) entered disabled state [ 827.168348][ T3626] erspan0: entered allmulticast mode [ 827.192200][ T3626] erspan0: entered promiscuous mode [ 827.215952][ T3626] bridge3: port 1(erspan0) entered blocking state [ 827.222466][ T3626] bridge3: port 1(erspan0) entered forwarding state [ 827.350551][ T3085] veth0_macvtap: entered promiscuous mode [ 827.457757][ T3656] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4511'. [ 827.550217][ T3085] veth1_macvtap: entered promiscuous mode [ 827.692619][ T3085] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 827.818099][ T3085] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 827.916728][T15031] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.010588][ T537] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.088365][ T537] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.118883][ T537] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.456576][T15024] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 828.480121][T15024] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 828.700067][ T3729] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4521'. [ 828.721506][T15031] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 828.748231][T15031] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 829.393546][ T8534] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 829.563751][ T8534] usb 7-1: device descriptor read/64, error -71 [ 829.807083][ T8534] usb 7-1: new high-speed USB device number 80 using dummy_hcd [ 829.953339][ T8534] usb 7-1: device descriptor read/64, error -71 [ 830.094182][ T8534] usb usb7-port1: attempt power cycle [ 830.145872][T26749] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 830.303872][T26749] usb 2-1: Using ep0 maxpacket: 32 [ 830.325073][T26749] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 830.333170][T26749] usb 2-1: config 0 has no interface number 0 [ 830.361059][T26749] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 830.397432][T26749] usb 2-1: config 0 interface 85 has no altsetting 0 [ 830.406483][T26749] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 830.433366][T26749] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.444067][ T8534] usb 7-1: new high-speed USB device number 81 using dummy_hcd [ 830.451420][T26749] usb 2-1: Product: syz [ 830.456338][T26749] usb 2-1: Manufacturer: syz [ 830.461050][T26749] usb 2-1: SerialNumber: syz [ 830.469451][T26749] usb 2-1: config 0 descriptor?? [ 830.490062][ T8534] usb 7-1: device descriptor read/8, error -71 [ 830.694792][T26749] appletouch 2-1:0.85: Failed to read mode from device. [ 830.703759][T26749] appletouch 2-1:0.85: probe with driver appletouch failed with error -5 [ 830.724505][T26749] usb 2-1: USB disconnect, device number 21 [ 830.772315][ T8534] usb 7-1: new high-speed USB device number 82 using dummy_hcd [ 830.796217][ T8534] usb 7-1: device descriptor read/8, error -71 [ 830.903613][ T8534] usb usb7-port1: unable to enumerate USB device [ 832.688538][ T3915] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4541'. [ 832.703328][ T8535] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 832.757694][ T3915] libceph: resolve '0..' (ret=-3): failed [ 832.782014][ T3905] team0: entered allmulticast mode [ 832.798681][ T3905] team_slave_0: entered allmulticast mode [ 832.834653][ T3905] team_slave_1: entered allmulticast mode [ 832.881043][ T8535] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 832.909762][ T8535] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 832.930945][ T8535] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 832.974660][ T8535] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 102, changing to 10 [ 833.206709][ T8535] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 24624, setting to 1024 [ 833.227759][ T8535] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 833.359815][ T8535] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.529315][ T8535] usb 3-1: Product: syz [ 833.548540][ T8535] usb 3-1: Manufacturer: syz [ 833.564301][ T8535] usb 3-1: SerialNumber: syz [ 833.605685][ T8535] usb 3-1: config 0 descriptor?? [ 833.629715][ T8535] iguanair 3-1:0.0: probe with driver iguanair failed with error -12 [ 833.823385][ T3952] loop2: detected capacity change from 0 to 7 [ 833.831079][ T3952] Dev loop2: unable to read RDB block 7 [ 833.837311][ T3952] loop2: AHDI p1 p2 p3 [ 833.842695][ T3952] loop2: partition table partially beyond EOD, truncated [ 833.857734][ T3952] loop2: p1 start 1818582900 is beyond EOD, truncated [ 833.865165][ T3952] loop2: p3 start 335544320 is beyond EOD, truncated [ 833.945479][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 833.945496][ T30] audit: type=1326 audit(1774069134.279:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3887 comm="syz.2.4539" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb08d59c799 code=0x0 [ 834.397675][ T3978] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 834.912618][ T1633] usb 8-1: new high-speed USB device number 61 using dummy_hcd [ 835.209356][ T1633] usb 8-1: Using ep0 maxpacket: 8 [ 835.226786][ T1633] usb 8-1: config index 0 descriptor too short (expected 1307, got 27) [ 835.264841][ T1633] usb 8-1: config 0 has an invalid interface number: 0 but max is -1 [ 835.293366][ T1633] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 835.302284][ T1633] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 835.346920][ T1633] usb 8-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 835.370256][ T1633] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.416306][ T1633] usb 8-1: Product: syz [ 835.514670][ T1633] usb 8-1: Manufacturer: syz [ 835.523826][ T1633] usb 8-1: SerialNumber: syz [ 835.549900][ T1633] usb 8-1: config 0 descriptor?? [ 835.592032][ T1633] hub 8-1:0.0: bad descriptor, ignoring hub [ 835.607119][ T1633] hub 8-1:0.0: probe with driver hub failed with error -5 [ 835.767495][ T8535] usb 3-1: USB disconnect, device number 38 [ 835.841176][ T3987] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4556'. [ 836.033632][ T8534] usb 8-1: USB disconnect, device number 61 [ 836.303305][ T8535] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 836.303559][ T1633] usb 2-1: new low-speed USB device number 22 using dummy_hcd [ 836.336608][ T4065] binder: 4059:4065 ioctl ae80 0 returned -22 [ 836.433317][ T8535] usb 3-1: device descriptor read/64, error -71 [ 836.488093][ T4067] loop2: detected capacity change from 0 to 7 [ 836.498582][ T5828] Dev loop2: unable to read RDB block 7 [ 836.509156][ T1633] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 836.517624][ T5828] loop2: AHDI p1 p2 p3 [ 836.523361][ T1633] usb 2-1: config 0 has no interface number 0 [ 836.532272][ T5828] loop2: partition table partially beyond EOD, truncated [ 836.542798][ T1633] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 836.554715][ T5828] loop2: p1 start 1818582900 is beyond EOD, truncated [ 836.569085][ T5828] loop2: p3 start 335544320 is beyond EOD, truncated [ 836.576121][ T1633] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 836.598378][ T4067] Dev loop2: unable to read RDB block 7 [ 836.604589][ T4067] loop2: AHDI p1 p2 p3 [ 836.610545][ T4067] loop2: partition table partially beyond EOD, truncated [ 836.627627][ T4067] loop2: p1 start 1818582900 is beyond EOD, truncated [ 836.634592][ T1633] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 836.635598][ T4067] loop2: p3 start 335544320 is beyond EOD, truncated [ 836.644711][ T1633] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.686671][ T1633] usb 2-1: config 0 descriptor?? [ 836.693657][ T8535] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 836.721379][ T4050] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 836.738417][ T1633] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 836.836611][ T4080] loop2: detected capacity change from 0 to 7 [ 836.842902][ T8535] usb 3-1: device descriptor read/64, error -71 [ 836.846052][ T4080] Dev loop2: unable to read RDB block 7 [ 836.855030][ T4080] loop2: unable to read partition table [ 836.861056][ T4080] loop2: partition table beyond EOD, truncated [ 836.874959][ T4080] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 836.915206][ T5192] Dev loop2: unable to read RDB block 7 [ 836.947634][ T5192] loop2: unable to read partition table [ 836.954381][ T8535] usb usb3-port1: attempt power cycle [ 836.964018][ T4050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 836.974204][ T4050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 836.982915][ T5192] loop2: partition table beyond EOD, truncated [ 837.074426][ T1633] usb 2-1: USB disconnect, device number 22 [ 837.270750][ T4109] netlink: 'syz.7.4571': attribute type 16 has an invalid length. [ 837.281733][ T4109] netlink: 'syz.7.4571': attribute type 17 has an invalid length. [ 837.313324][ T8535] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 837.343843][ T8535] usb 3-1: device descriptor read/8, error -71 [ 837.498906][ T4128] netlink: 224 bytes leftover after parsing attributes in process `syz.6.4579'. [ 837.603375][ T8535] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 837.633934][ T8535] usb 3-1: device descriptor read/8, error -71 [ 837.716219][ T4144] tc_dump_action: action bad kind [ 837.739612][ T4144] FAULT_INJECTION: forcing a failure. [ 837.739612][ T4144] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 837.753057][ T8535] usb usb3-port1: unable to enumerate USB device [ 837.759870][ T4144] CPU: 1 UID: 0 PID: 4144 Comm: syz.5.4586 Tainted: G L syzkaller #0 PREEMPT(full) [ 837.759888][ T4144] Tainted: [L]=SOFTLOCKUP [ 837.759892][ T4144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 837.759899][ T4144] Call Trace: [ 837.759905][ T4144] [ 837.759910][ T4144] dump_stack_lvl+0xe8/0x150 [ 837.759930][ T4144] should_fail_ex+0x412/0x560 [ 837.759949][ T4144] _copy_from_iter+0x1d3/0x1670 [ 837.759966][ T4144] ? rcu_is_watching+0x15/0xb0 [ 837.759982][ T4144] ? rcu_is_watching+0x15/0xb0 [ 837.759999][ T4144] ? __pfx__copy_from_iter+0x10/0x10 [ 837.760014][ T4144] ? __kmalloc_node_track_caller_noprof+0x4f9/0x7b0 [ 837.760031][ T4144] ? tipc_msg_build+0x40d/0xd60 [ 837.760045][ T4144] tipc_msg_build+0x469/0xd60 [ 837.760058][ T4144] ? aa_label_sk_perm+0x532/0x6e0 [ 837.760074][ T4144] ? __pfx_tipc_msg_build+0x10/0x10 [ 837.760089][ T4144] ? tipc_sk_filtering+0x13c/0x510 [ 837.760106][ T4144] __tipc_sendstream+0x8b9/0x12b0 [ 837.760131][ T4144] ? __pfx___tipc_sendstream+0x10/0x10 [ 837.760144][ T4144] ? __pfx_woken_wake_function+0x10/0x10 [ 837.760157][ T4144] ? tipc_sendstream+0x47/0x70 [ 837.760173][ T4144] ? __local_bh_enable_ip+0xd0/0x130 [ 837.760190][ T4144] tipc_sendstream+0x55/0x70 [ 837.760205][ T4144] ? __pfx_tipc_sendstream+0x10/0x10 [ 837.760219][ T4144] sock_write_iter+0x49b/0x4f0 [ 837.760234][ T4144] ? __pfx_sock_write_iter+0x10/0x10 [ 837.760253][ T4144] ? bpf_lsm_file_permission+0x9/0x20 [ 837.760267][ T4144] ? security_file_permission+0x75/0x260 [ 837.760284][ T4144] vfs_write+0x61d/0xb90 [ 837.760300][ T4144] ? __pfx_vfs_write+0x10/0x10 [ 837.760317][ T4144] ? __fget_files+0x2a/0x420 [ 837.760340][ T4144] ksys_write+0x150/0x270 [ 837.760361][ T4144] ? __pfx_ksys_write+0x10/0x10 [ 837.760397][ T4144] do_syscall_64+0x14d/0xf80 [ 837.760415][ T4144] ? trace_irq_disable+0x3b/0x150 [ 837.760431][ T4144] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.760442][ T4144] ? clear_bhb_loop+0x40/0x90 [ 837.760455][ T4144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.760465][ T4144] RIP: 0033:0x7fba18f9c799 [ 837.760477][ T4144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 837.760486][ T4144] RSP: 002b:00007fba19d8c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 837.760498][ T4144] RAX: ffffffffffffffda RBX: 00007fba19215fa0 RCX: 00007fba18f9c799 [ 837.760506][ T4144] RDX: 000000002000011a RSI: 0000200000000340 RDI: 0000000000000007 [ 837.760513][ T4144] RBP: 00007fba19d8c090 R08: 0000000000000000 R09: 0000000000000000 [ 837.760520][ T4144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 837.760527][ T4144] R13: 00007fba19216038 R14: 00007fba19215fa0 R15: 00007fba1933fa48 [ 837.760542][ T4144] [ 837.762486][ T537] tipc: Subscription rejected, illegal request [ 838.207585][ T4156] FAULT_INJECTION: forcing a failure. [ 838.207585][ T4156] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 838.220830][ T4156] CPU: 1 UID: 0 PID: 4156 Comm: syz.5.4589 Tainted: G L syzkaller #0 PREEMPT(full) [ 838.220858][ T4156] Tainted: [L]=SOFTLOCKUP [ 838.220864][ T4156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 838.220876][ T4156] Call Trace: [ 838.220883][ T4156] [ 838.220891][ T4156] dump_stack_lvl+0xe8/0x150 [ 838.220922][ T4156] should_fail_ex+0x412/0x560 [ 838.220950][ T4156] _copy_from_iter+0x1d3/0x1670 [ 838.220977][ T4156] ? sctp_chunkify+0x5a/0x260 [ 838.221003][ T4156] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 838.221029][ T4156] ? __pfx__copy_from_iter+0x10/0x10 [ 838.221057][ T4156] ? __asan_memcpy+0x40/0x70 [ 838.221076][ T4156] ? sctp_make_datafrag_empty+0x184/0x240 [ 838.221104][ T4156] ? skb_put+0x11b/0x210 [ 838.221128][ T4156] sctp_user_addto_chunk+0x87/0x240 [ 838.221169][ T4156] sctp_datamsg_from_user+0x748/0xef0 [ 838.221213][ T4156] sctp_sendmsg_to_asoc+0x1416/0x1900 [ 838.221246][ T4156] ? sctp_transport_put+0xd2/0x150 [ 838.221268][ T4156] ? sctp_epaddr_lookup_transport+0x925/0x9d0 [ 838.221292][ T4156] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 838.221315][ T4156] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 838.221336][ T4156] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 838.221355][ T4156] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 838.221374][ T4156] ? sctp_sendmsg_check_sflags+0x18a/0x330 [ 838.221398][ T4156] sctp_sendmsg+0x1b3d/0x2c10 [ 838.221433][ T4156] ? __pfx_sctp_sendmsg+0x10/0x10 [ 838.221455][ T4156] ? aa_sk_perm+0x6d5/0x900 [ 838.221488][ T4156] ? __pfx_aa_sk_perm+0x10/0x10 [ 838.221516][ T4156] ? sock_rps_record_flow+0x19/0x400 [ 838.221537][ T4156] ? __pfx_inet_sendmsg+0x10/0x10 [ 838.221559][ T4156] ? inet_sendmsg+0x2f4/0x370 [ 838.221578][ T4156] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 838.221599][ T4156] ? __pfx_inet_sendmsg+0x10/0x10 [ 838.221621][ T4156] __sys_sendto+0x5de/0x710 [ 838.221643][ T4156] ? __pfx___sys_sendto+0x10/0x10 [ 838.221659][ T4156] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 838.221693][ T4156] ? __fget_files+0x3a0/0x420 [ 838.221730][ T4156] ? ksys_write+0x242/0x270 [ 838.221753][ T4156] ? __pfx_ksys_write+0x10/0x10 [ 838.221779][ T4156] __x64_sys_sendto+0xde/0x100 [ 838.221802][ T4156] do_syscall_64+0x14d/0xf80 [ 838.221822][ T4156] ? trace_irq_disable+0x3b/0x150 [ 838.221847][ T4156] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.221867][ T4156] ? clear_bhb_loop+0x40/0x90 [ 838.221890][ T4156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.221908][ T4156] RIP: 0033:0x7fba18f9c799 [ 838.221926][ T4156] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 838.221942][ T4156] RSP: 002b:00007fba19d8c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 838.221962][ T4156] RAX: ffffffffffffffda RBX: 00007fba19215fa0 RCX: 00007fba18f9c799 [ 838.221976][ T4156] RDX: 0000000000034000 RSI: 0000200000000300 RDI: 0000000000000003 [ 838.221989][ T4156] RBP: 00007fba19d8c090 R08: 0000200000000380 R09: 0000000000000010 [ 838.222002][ T4156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 838.222013][ T4156] R13: 00007fba19216038 R14: 00007fba19215fa0 R15: 00007fba1933fa48 [ 838.222043][ T4156] [ 838.979648][ T4179] binder: 4178:4179 ioctl c0306201 2000000003c0 returned -14 [ 838.991792][ T4179] binder: 4178:4179 ioctl c0306201 2000000001c0 returned -14 [ 839.168596][T28897] Bluetooth: hci3: unexpected event for opcode 0x1408 [ 839.178727][ T4203] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4605'. [ 839.268897][ T4205] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 839.898608][ T4221] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4611'. [ 840.006637][ T4221] vlan4: entered promiscuous mode [ 840.215347][ T4216] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4610'. [ 840.593343][ T5956] usb 6-1: new full-speed USB device number 125 using dummy_hcd [ 840.745244][ T5956] usb 6-1: config 0 has no interfaces? [ 840.754491][ T5956] usb 6-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 840.770908][ T5956] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.809658][ T5956] usb 6-1: Product: syz [ 840.823774][ T5956] usb 6-1: Manufacturer: syz [ 840.841690][ T5956] usb 6-1: SerialNumber: syz [ 840.859575][ T5956] usb 6-1: config 0 descriptor?? [ 841.141300][ T4243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 841.141545][ T4243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 841.147125][ T4243] vlan4: entered promiscuous mode [ 841.225708][ T5956] usb 6-1: USB disconnect, device number 125 [ 841.528460][ T4297] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4619'. [ 841.853394][ T5956] usb 7-1: new low-speed USB device number 83 using dummy_hcd [ 841.872870][ T4310] loop4: detected capacity change from 0 to 7 [ 841.893997][ T5828] Dev loop4: unable to read RDB block 7 [ 841.901350][ T5828] loop4: unable to read partition table [ 841.907464][ T5828] loop4: partition table beyond EOD, truncated [ 841.925813][ T4310] Dev loop4: unable to read RDB block 7 [ 841.931636][ T4310] loop4: unable to read partition table [ 841.938829][ T4310] loop4: partition table beyond EOD, truncated [ 841.945252][ T4310] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 841.994501][ T5956] usb 7-1: device descriptor read/64, error -71 [ 842.147385][ T30] audit: type=1326 audit(1774069142.489:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4321 comm="syz.1.4625" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f107419c799 code=0x0 [ 842.233691][ T5956] usb 7-1: new low-speed USB device number 84 using dummy_hcd [ 842.373436][ T5956] usb 7-1: device descriptor read/64, error -71 [ 842.404212][ T4338] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 842.483839][ T5956] usb usb7-port1: attempt power cycle [ 842.823898][ T5956] usb 7-1: new low-speed USB device number 85 using dummy_hcd [ 842.854934][ T5956] usb 7-1: device descriptor read/8, error -71 [ 843.103548][ T5956] usb 7-1: new low-speed USB device number 86 using dummy_hcd [ 843.115596][ T4353] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 843.173957][ T5956] usb 7-1: device descriptor read/8, error -71 [ 843.284187][ T5956] usb usb7-port1: unable to enumerate USB device [ 844.179120][ T4389] netlink: 'syz.1.4641': attribute type 2 has an invalid length. [ 844.188302][ T4389] netlink: 'syz.1.4641': attribute type 3 has an invalid length. [ 844.196160][ T4389] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4641'. [ 844.791972][ T4405] netlink: 'syz.6.4644': attribute type 2 has an invalid length. [ 844.799845][ T4405] netlink: 'syz.6.4644': attribute type 3 has an invalid length. [ 844.807723][ T4405] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4644'. [ 845.130499][ T4408] netlink: 'syz.2.4645': attribute type 1 has an invalid length. [ 845.281230][ T4408] 8021q: adding VLAN 0 to HW filter on device bond2 [ 845.433330][ T1633] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 845.635459][ T1633] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 845.651276][ T1633] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 128, changing to 11 [ 845.673409][ T1633] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 845.695260][ T1633] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 845.715954][ T1633] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.753878][ T1633] usb 6-1: Product: syz [ 845.764128][ T1633] usb 6-1: Manufacturer: syz [ 845.773636][ T1633] usb 6-1: SerialNumber: syz [ 845.857481][ T4463] openvswitch: netlink: Message has 16 unknown bytes. [ 845.921953][ T5956] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 846.113358][ T5956] usb 2-1: Using ep0 maxpacket: 16 [ 846.120368][ T5956] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 846.131640][ T5956] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 846.151400][ T5956] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 846.178719][ T5956] usb 2-1: config 0 descriptor?? [ 846.197534][ T5956] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input202 [ 846.209292][ T1633] cdc_ncm 6-1:1.0: failed GET_NTB_PARAMETERS [ 846.215380][ T1633] cdc_ncm 6-1:1.0: bind() failure [ 846.225171][ T1633] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 846.241660][ T1633] cdc_ncm 6-1:1.1: bind() failure [ 846.397754][ T4454] FAULT_INJECTION: forcing a failure. [ 846.397754][ T4454] name failslab, interval 1, probability 0, space 0, times 0 [ 846.443311][ T5823] Bluetooth: hci2: command 0x0406 tx timeout [ 846.473599][ T4482] netlink: 'syz.7.4652': attribute type 1 has an invalid length. [ 846.482080][ T4454] CPU: 1 UID: 0 PID: 4454 Comm: syz.1.4649 Tainted: G L syzkaller #0 PREEMPT(full) [ 846.482098][ T4454] Tainted: [L]=SOFTLOCKUP [ 846.482102][ T4454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 846.482109][ T4454] Call Trace: [ 846.482114][ T4454] [ 846.482119][ T4454] dump_stack_lvl+0xe8/0x150 [ 846.482139][ T4454] should_fail_ex+0x412/0x560 [ 846.482161][ T4454] should_failslab+0xa8/0x100 [ 846.482176][ T4454] __kmalloc_noprof+0xe8/0x760 [ 846.482188][ T4454] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 846.482208][ T4454] tomoyo_realpath_from_path+0xe3/0x5d0 [ 846.482229][ T4454] ? tomoyo_path_number_perm+0x219/0x630 [ 846.482243][ T4454] tomoyo_path_number_perm+0x246/0x630 [ 846.482258][ T4454] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 846.482273][ T4454] ? __lock_acquire+0x6b5/0x2cf0 [ 846.482292][ T4454] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 846.482315][ T4454] ? __fget_files+0x2a/0x420 [ 846.482332][ T4454] ? __fget_files+0x2a/0x420 [ 846.482347][ T4454] ? __fget_files+0x3a0/0x420 [ 846.482361][ T4454] ? __fget_files+0x2a/0x420 [ 846.482378][ T4454] security_file_ioctl+0xc3/0x2a0 [ 846.482393][ T4454] __se_sys_ioctl+0x47/0x170 [ 846.482407][ T4454] do_syscall_64+0x14d/0xf80 [ 846.482418][ T4454] ? trace_irq_disable+0x3b/0x150 [ 846.482433][ T4454] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 846.482444][ T4454] ? clear_bhb_loop+0x40/0x90 [ 846.482457][ T4454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 846.482470][ T4454] RIP: 0033:0x7f107419c799 [ 846.482481][ T4454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 846.482490][ T4454] RSP: 002b:00007f1074fa5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 846.482503][ T4454] RAX: ffffffffffffffda RBX: 00007f1074415fa0 RCX: 00007f107419c799 [ 846.482512][ T4454] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000004 [ 846.482518][ T4454] RBP: 00007f1074fa5090 R08: 0000000000000000 R09: 0000000000000000 [ 846.482525][ T4454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 846.482532][ T4454] R13: 00007f1074416038 R14: 00007f1074415fa0 R15: 00007f107453fa48 [ 846.482548][ T4454] [ 846.482566][ T4454] ERROR: Out of memory at tomoyo_realpath_from_path. [ 846.814515][ T4482] 8021q: adding VLAN 0 to HW filter on device bond7 [ 846.860102][ T4454] input: syz0 as /devices/virtual/input/input203 [ 846.881327][ T8535] usb 6-1: USB disconnect, device number 126 [ 846.958869][ T5177] bcm5974 2-1:0.0: could not read from device [ 847.004852][ T5956] usb 2-1: USB disconnect, device number 23 [ 847.015094][ T5177] bcm5974 2-1:0.0: could not read from device [ 847.023603][ T5177] bcm5974 2-1:0.0: could not read from device [ 847.192390][ T4550] FAULT_INJECTION: forcing a failure. [ 847.192390][ T4550] name failslab, interval 1, probability 0, space 0, times 0 [ 847.226440][ T4550] CPU: 1 UID: 0 PID: 4550 Comm: syz.7.4655 Tainted: G L syzkaller #0 PREEMPT(full) [ 847.226471][ T4550] Tainted: [L]=SOFTLOCKUP [ 847.226478][ T4550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 847.226489][ T4550] Call Trace: [ 847.226497][ T4550] [ 847.226505][ T4550] dump_stack_lvl+0xe8/0x150 [ 847.226535][ T4550] should_fail_ex+0x412/0x560 [ 847.226566][ T4550] should_failslab+0xa8/0x100 [ 847.226593][ T4550] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 847.226616][ T4550] ? __alloc_skb+0x1d0/0x7d0 [ 847.226634][ T4550] ? __local_bh_enable_ip+0xd0/0x130 [ 847.226663][ T4550] __alloc_skb+0x1d0/0x7d0 [ 847.226686][ T4550] _sctp_make_chunk+0x59/0x290 [ 847.226717][ T4550] sctp_make_datafrag_empty+0x12a/0x240 [ 847.226748][ T4550] ? __pfx_sctp_make_datafrag_empty+0x10/0x10 [ 847.226778][ T4550] ? sctp_user_addto_chunk+0xa8/0x240 [ 847.226811][ T4550] sctp_datamsg_from_user+0x729/0xef0 [ 847.226854][ T4550] sctp_sendmsg_to_asoc+0x1416/0x1900 [ 847.226891][ T4550] ? sctp_transport_put+0xd2/0x150 [ 847.226916][ T4550] ? sctp_epaddr_lookup_transport+0x925/0x9d0 [ 847.226942][ T4550] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 847.226966][ T4550] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 847.226987][ T4550] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 847.227006][ T4550] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 847.227025][ T4550] ? sctp_sendmsg_check_sflags+0x18a/0x330 [ 847.227050][ T4550] sctp_sendmsg+0x1b3d/0x2c10 [ 847.227083][ T4550] ? __pfx_sctp_sendmsg+0x10/0x10 [ 847.227107][ T4550] ? aa_sk_perm+0x6d5/0x900 [ 847.227140][ T4550] ? __pfx_aa_sk_perm+0x10/0x10 [ 847.227165][ T4550] ? sock_rps_record_flow+0x19/0x400 [ 847.227185][ T4550] ? __pfx_inet_sendmsg+0x10/0x10 [ 847.227205][ T4550] ? inet_sendmsg+0x2f4/0x370 [ 847.227226][ T4550] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 847.227247][ T4550] ? __pfx_inet_sendmsg+0x10/0x10 [ 847.227270][ T4550] __sys_sendto+0x5de/0x710 [ 847.227293][ T4550] ? __pfx___sys_sendto+0x10/0x10 [ 847.227310][ T4550] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 847.227344][ T4550] ? __fget_files+0x3a0/0x420 [ 847.227382][ T4550] ? ksys_write+0x242/0x270 [ 847.227405][ T4550] ? __pfx_ksys_write+0x10/0x10 [ 847.227440][ T4550] __x64_sys_sendto+0xde/0x100 [ 847.227463][ T4550] do_syscall_64+0x14d/0xf80 [ 847.227483][ T4550] ? trace_irq_disable+0x3b/0x150 [ 847.227510][ T4550] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 847.227529][ T4550] ? clear_bhb_loop+0x40/0x90 [ 847.227550][ T4550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 847.227567][ T4550] RIP: 0033:0x7f582399c799 [ 847.227584][ T4550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 847.227600][ T4550] RSP: 002b:00007f58248ed028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 847.227619][ T4550] RAX: ffffffffffffffda RBX: 00007f5823c16090 RCX: 00007f582399c799 [ 847.227633][ T4550] RDX: 0000000000034000 RSI: 0000200000000300 RDI: 0000000000000003 [ 847.227644][ T4550] RBP: 00007f58248ed090 R08: 0000200000000380 R09: 0000000000000010 [ 847.227657][ T4550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 847.227668][ T4550] R13: 00007f5823c16128 R14: 00007f5823c16090 R15: 00007f5823d3fa48 [ 847.227697][ T4550] [ 847.645940][ T4559] FAULT_INJECTION: forcing a failure. [ 847.645940][ T4559] name failslab, interval 1, probability 0, space 0, times 0 [ 847.658622][ T4559] CPU: 0 UID: 0 PID: 4559 Comm: syz.6.4659 Tainted: G L syzkaller #0 PREEMPT(full) [ 847.658643][ T4559] Tainted: [L]=SOFTLOCKUP [ 847.658648][ T4559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 847.658654][ T4559] Call Trace: [ 847.658660][ T4559] [ 847.658665][ T4559] dump_stack_lvl+0xe8/0x150 [ 847.658684][ T4559] should_fail_ex+0x412/0x560 [ 847.658702][ T4559] should_failslab+0xa8/0x100 [ 847.658717][ T4559] ? dst_alloc+0x105/0x170 [ 847.658731][ T4559] kmem_cache_alloc_noprof+0x87/0x650 [ 847.658745][ T4559] dst_alloc+0x105/0x170 [ 847.658760][ T4559] ip_route_input_rcu+0x1432/0x3130 [ 847.658775][ T4559] ? __lock_acquire+0x6b5/0x2cf0 [ 847.658791][ T4559] ? __pfx_ip_route_input_rcu+0x10/0x10 [ 847.658804][ T4559] ? __skb_flow_dissect+0x649c/0x6d20 [ 847.658818][ T4559] ? ipt_do_table+0x2b2/0x1630 [ 847.658835][ T4559] ? lock_acquire+0xf0/0x2e0 [ 847.658852][ T4559] ? ip_route_input_noref+0xad/0x270 [ 847.658864][ T4559] ip_route_input_noref+0x17c/0x270 [ 847.658876][ T4559] ? __pfx_ip_route_input_noref+0x10/0x10 [ 847.658890][ T4559] ? ipt_do_table+0x2b2/0x1630 [ 847.658904][ T4559] ? __pfx_ipt_do_table+0x10/0x10 [ 847.658919][ T4559] ip_rcv_finish_core+0x5af/0x1c00 [ 847.658939][ T4559] ip_rcv_finish+0x14c/0x2a0 [ 847.658955][ T4559] NF_HOOK+0x336/0x3c0 [ 847.658970][ T4559] ? __pfx_ip_rcv_finish+0x10/0x10 [ 847.658983][ T4559] ? NF_HOOK+0x9e/0x3c0 [ 847.658997][ T4559] ? __pfx_NF_HOOK+0x10/0x10 [ 847.659012][ T4559] ? __pfx_ip_rcv_finish+0x10/0x10 [ 847.659028][ T4559] ? netif_receive_skb+0x102/0xc50 [ 847.659043][ T4559] ? __pfx_ip_rcv+0x10/0x10 [ 847.659056][ T4559] netif_receive_skb+0x45b/0xc50 [ 847.659072][ T4559] ? __pfx_netif_receive_skb+0x10/0x10 [ 847.659085][ T4559] ? __lock_acquire+0x6b5/0x2cf0 [ 847.659101][ T4559] ? tun_rx_batched+0x185/0x790 [ 847.659113][ T4559] tun_rx_batched+0x1de/0x790 [ 847.659124][ T4559] ? __build_skb+0x62/0x440 [ 847.659137][ T4559] ? __pfx_tun_rx_batched+0x10/0x10 [ 847.659152][ T4559] ? tun_get_user+0x2354/0x3dd0 [ 847.659162][ T4559] ? __local_bh_enable_ip+0xd0/0x130 [ 847.659178][ T4559] ? tun_get_user+0x2669/0x3dd0 [ 847.659187][ T4559] tun_get_user+0x2a78/0x3dd0 [ 847.659206][ T4559] ? aa_file_perm+0x50e/0x15e0 [ 847.659216][ T4559] ? __pfx_tun_get_user+0x10/0x10 [ 847.659226][ T4559] ? aa_file_perm+0x192/0x15e0 [ 847.659244][ T4559] ? ref_tracker_alloc+0x35c/0x4c0 [ 847.659261][ T4559] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 847.659280][ T4559] ? tun_get+0x1c/0x2f0 [ 847.659292][ T4559] ? tun_get+0x1c/0x2f0 [ 847.659302][ T4559] ? tun_get+0x1c/0x2f0 [ 847.659314][ T4559] tun_chr_write_iter+0x113/0x200 [ 847.659326][ T4559] vfs_write+0x61d/0xb90 [ 847.659342][ T4559] ? __pfx_vfs_write+0x10/0x10 [ 847.659358][ T4559] ? __fget_files+0x2a/0x420 [ 847.659378][ T4559] ksys_write+0x150/0x270 [ 847.659390][ T4559] ? __pfx_ksys_write+0x10/0x10 [ 847.659407][ T4559] do_syscall_64+0x14d/0xf80 [ 847.659419][ T4559] ? trace_irq_disable+0x3b/0x150 [ 847.659434][ T4559] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 847.659445][ T4559] ? clear_bhb_loop+0x40/0x90 [ 847.659458][ T4559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 847.659468][ T4559] RIP: 0033:0x7f01c1b5cfce [ 847.659479][ T4559] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 847.659488][ T4559] RSP: 002b:00007f01c29f0fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 847.659500][ T4559] RAX: ffffffffffffffda RBX: 00007f01c29f16c0 RCX: 00007f01c1b5cfce [ 847.659508][ T4559] RDX: 0000000000000067 RSI: 0000200000000340 RDI: 00000000000000c8 [ 847.659515][ T4559] RBP: 00007f01c29f1090 R08: 0000000000000000 R09: 0000000000000000 [ 847.659521][ T4559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 847.659528][ T4559] R13: 00007f01c1e16038 R14: 00007f01c1e15fa0 R15: 00007f01c1f3fa48 [ 847.659543][ T4559] [ 847.723609][ T8535] usb 6-1: new low-speed USB device number 127 using dummy_hcd [ 848.377674][ T4572] loop2: detected capacity change from 0 to 7 [ 848.384064][ T8535] usb 6-1: device descriptor read/64, error -71 [ 848.451534][ T4572] Dev loop2: unable to read RDB block 7 [ 848.466116][ T4572] loop2: unable to read partition table [ 848.480989][ T4572] loop2: partition table beyond EOD, truncated [ 848.538272][ T4572] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 848.673360][ T8535] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 848.813363][ T8535] usb 6-1: device descriptor read/64, error -71 [ 848.944141][ T8535] usb usb6-port1: attempt power cycle [ 849.257739][ T4598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4671'. [ 849.276458][ T4601] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 849.293912][ T8535] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 849.347585][ T8535] usb 6-1: device descriptor read/8, error -71 [ 849.573200][ T4607] FAULT_INJECTION: forcing a failure. [ 849.573200][ T4607] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 849.593453][ T4607] CPU: 0 UID: 0 PID: 4607 Comm: syz.1.4674 Tainted: G L syzkaller #0 PREEMPT(full) [ 849.593483][ T4607] Tainted: [L]=SOFTLOCKUP [ 849.593491][ T4607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 849.593503][ T4607] Call Trace: [ 849.593510][ T4607] [ 849.593519][ T4607] dump_stack_lvl+0xe8/0x150 [ 849.593550][ T4607] should_fail_ex+0x412/0x560 [ 849.593582][ T4607] _copy_from_user+0x2d/0xb0 [ 849.593604][ T4607] sock_do_ioctl+0x195/0x320 [ 849.593631][ T4607] ? __pfx_sock_do_ioctl+0x10/0x10 [ 849.593652][ T4607] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 849.593688][ T4607] sock_ioctl+0x5c6/0x7f0 [ 849.593714][ T4607] ? __pfx_sock_ioctl+0x10/0x10 [ 849.593737][ T4607] ? __fget_files+0x2a/0x420 [ 849.593763][ T4607] ? __fget_files+0x3a0/0x420 [ 849.593788][ T4607] ? __fget_files+0x2a/0x420 [ 849.593816][ T4607] ? bpf_lsm_file_ioctl+0x9/0x20 [ 849.593841][ T4607] ? __pfx_sock_ioctl+0x10/0x10 [ 849.593865][ T4607] __se_sys_ioctl+0xfc/0x170 [ 849.593889][ T4607] do_syscall_64+0x14d/0xf80 [ 849.593909][ T4607] ? trace_irq_disable+0x3b/0x150 [ 849.593933][ T4607] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.593960][ T4607] ? clear_bhb_loop+0x40/0x90 [ 849.593983][ T4607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.594002][ T4607] RIP: 0033:0x7f107419c799 [ 849.594020][ T4607] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 849.594037][ T4607] RSP: 002b:00007f1074fa5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 849.594059][ T4607] RAX: ffffffffffffffda RBX: 00007f1074415fa0 RCX: 00007f107419c799 [ 849.594074][ T4607] RDX: 0000200000002280 RSI: 0000000000008914 RDI: 0000000000000005 [ 849.594087][ T4607] RBP: 00007f1074fa5090 R08: 0000000000000000 R09: 0000000000000000 [ 849.594099][ T4607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 849.594111][ T4607] R13: 00007f1074416038 R14: 00007f1074415fa0 R15: 00007f107453fa48 [ 849.594140][ T4607] [ 849.603339][ T8535] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 849.894704][ T8535] usb 6-1: device descriptor read/8, error -71 [ 850.005036][ T8535] usb usb6-port1: unable to enumerate USB device [ 850.247404][ T4625] loop2: detected capacity change from 0 to 7 [ 850.266650][ T5828] Dev loop2: unable to read RDB block 7 [ 850.276726][ T5828] loop2: unable to read partition table [ 850.291260][ T5828] loop2: partition table beyond EOD, truncated [ 850.306560][ T4625] Dev loop2: unable to read RDB block 7 [ 850.312389][ T4625] loop2: unable to read partition table [ 850.355500][ T4625] loop2: partition table beyond EOD, truncated [ 850.363583][ T4625] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 850.588649][ T4642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4683'. [ 850.663582][ T1633] usb 7-1: new high-speed USB device number 87 using dummy_hcd [ 850.815910][ T1633] usb 7-1: Using ep0 maxpacket: 32 [ 850.829246][ T1633] usb 7-1: config 3 has an invalid interface number: 3 but max is 1 [ 850.831489][ T4655] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 850.849658][ T1633] usb 7-1: config 3 has an invalid interface number: 50 but max is 1 [ 850.864065][ T1633] usb 7-1: config 3 has no interface number 0 [ 850.878733][ T1633] usb 7-1: config 3 has no interface number 1 [ 850.890167][ T1633] usb 7-1: config 3 interface 3 has no altsetting 0 [ 850.908249][ T1633] usb 7-1: config 3 interface 50 has no altsetting 0 [ 850.929633][ T1633] usb 7-1: New USB device found, idVendor=04da, idProduct=250d, bcdDevice=1d.43 [ 850.950364][ T1633] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.989649][ T1633] usb 7-1: Product: syz [ 851.004277][ T1633] usb 7-1: Manufacturer: syz [ 851.016063][ T1633] usb 7-1: SerialNumber: syz [ 851.260548][ T1633] usb 7-1: unknown number of interfaces: 2 [ 851.280670][ T1633] usb 7-1: USB disconnect, device number 87 [ 851.303409][ T5885] usb 3-1: new low-speed USB device number 43 using dummy_hcd [ 851.443640][ T5885] usb 3-1: device descriptor read/64, error -71 [ 851.693679][ T5885] usb 3-1: new low-speed USB device number 44 using dummy_hcd [ 851.789517][ T4694] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4696'. [ 851.833738][ T5885] usb 3-1: device descriptor read/64, error -71 [ 851.850412][ T4696] FAULT_INJECTION: forcing a failure. [ 851.850412][ T4696] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 851.873378][ T4696] CPU: 0 UID: 0 PID: 4696 Comm: syz.6.4697 Tainted: G L syzkaller #0 PREEMPT(full) [ 851.873408][ T4696] Tainted: [L]=SOFTLOCKUP [ 851.873415][ T4696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 851.873427][ T4696] Call Trace: [ 851.873434][ T4696] [ 851.873443][ T4696] dump_stack_lvl+0xe8/0x150 [ 851.873473][ T4696] should_fail_ex+0x412/0x560 [ 851.873504][ T4696] _copy_from_user+0x2d/0xb0 [ 851.873526][ T4696] ___sys_sendmsg+0x1c6/0x360 [ 851.873553][ T4696] ? __pfx____sys_sendmsg+0x10/0x10 [ 851.873606][ T4696] ? __fget_files+0x2a/0x420 [ 851.873633][ T4696] ? __fget_files+0x3a0/0x420 [ 851.873671][ T4696] __x64_sys_sendmsg+0x1bd/0x2a0 [ 851.873696][ T4696] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 851.873725][ T4696] ? __pfx_ksys_write+0x10/0x10 [ 851.873757][ T4696] do_syscall_64+0x14d/0xf80 [ 851.873777][ T4696] ? trace_irq_disable+0x3b/0x150 [ 851.873804][ T4696] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 851.873824][ T4696] ? clear_bhb_loop+0x40/0x90 [ 851.873847][ T4696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 851.873867][ T4696] RIP: 0033:0x7f01c1b9c799 [ 851.873884][ T4696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 851.873901][ T4696] RSP: 002b:00007f01c29f1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 851.873922][ T4696] RAX: ffffffffffffffda RBX: 00007f01c1e15fa0 RCX: 00007f01c1b9c799 [ 851.873937][ T4696] RDX: 0000000024008084 RSI: 0000200000000300 RDI: 0000000000000003 [ 851.873950][ T4696] RBP: 00007f01c29f1090 R08: 0000000000000000 R09: 0000000000000000 [ 851.873963][ T4696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 851.873975][ T4696] R13: 00007f01c1e16038 R14: 00007f01c1e15fa0 R15: 00007f01c1f3fa48 [ 851.874004][ T4696] [ 852.071145][ T5885] usb usb3-port1: attempt power cycle [ 852.121964][ T4698] loop2: detected capacity change from 0 to 7 [ 852.129752][ T4698] Dev loop2: unable to read RDB block 7 [ 852.136038][ T4698] loop2: unable to read partition table [ 852.141854][ T4698] loop2: partition table beyond EOD, truncated [ 852.162025][ T4698] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 852.414983][ T5885] usb 3-1: new low-speed USB device number 45 using dummy_hcd [ 852.431417][ T4708] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 852.444381][ T5885] usb 3-1: device descriptor read/8, error -71 [ 852.683753][ T5885] usb 3-1: new low-speed USB device number 46 using dummy_hcd [ 852.724823][ T5885] usb 3-1: device descriptor read/8, error -71 [ 852.873805][ T5885] usb usb3-port1: unable to enumerate USB device [ 852.949432][ T4720] sch_tbf: peakrate 8 is lower than or equals to rate 2048 ! [ 853.003400][ T4721] sch_tbf: peakrate 8 is lower than or equals to rate 2048 ! [ 853.405331][ T4737] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4708'. [ 853.441822][ T4738] fuse: Unknown parameter 'euid<00000000000000000000' [ 853.932689][ T4749] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 853.933156][ T4747] loop2: detected capacity change from 0 to 7 [ 853.950427][ T4749] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 853.953154][ T4747] Dev loop2: unable to read RDB block 7 [ 853.966150][ T4747] loop2: unable to read partition table [ 853.972079][ T4747] loop2: partition table beyond EOD, truncated [ 853.979387][ T4747] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 854.190072][ T4760] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4714'. [ 854.495756][ T4769] binder: 4764:4769 ioctl ae80 0 returned -22 [ 854.505207][ T4769] binder: 4764:4769 ioctl c0306201 0 returned -14 [ 854.944443][ T4782] tc_dump_action: action bad kind [ 854.984915][ T4782] FAULT_INJECTION: forcing a failure. [ 854.984915][ T4782] name failslab, interval 1, probability 0, space 0, times 0 [ 855.017890][ T4782] CPU: 1 UID: 0 PID: 4782 Comm: syz.7.4720 Tainted: G L syzkaller #0 PREEMPT(full) [ 855.017909][ T4782] Tainted: [L]=SOFTLOCKUP [ 855.017913][ T4782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 855.017920][ T4782] Call Trace: [ 855.017926][ T4782] [ 855.017931][ T4782] dump_stack_lvl+0xe8/0x150 [ 855.017951][ T4782] should_fail_ex+0x412/0x560 [ 855.017976][ T4782] should_failslab+0xa8/0x100 [ 855.018001][ T4782] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 855.018020][ T4782] ? __lock_acquire+0x6b5/0x2cf0 [ 855.018043][ T4782] ? __alloc_skb+0x1d0/0x7d0 [ 855.018067][ T4782] __alloc_skb+0x1d0/0x7d0 [ 855.018090][ T4782] tipc_msg_build+0x160/0xd60 [ 855.018117][ T4782] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 855.018128][ T4782] ? __pfx_tipc_msg_build+0x10/0x10 [ 855.018143][ T4782] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 855.018156][ T4782] __tipc_sendstream+0x8b9/0x12b0 [ 855.018182][ T4782] ? __pfx___tipc_sendstream+0x10/0x10 [ 855.018193][ T4782] ? __pfx_woken_wake_function+0x10/0x10 [ 855.018205][ T4782] ? tipc_sendstream+0x47/0x70 [ 855.018232][ T4782] ? __local_bh_enable_ip+0xd0/0x130 [ 855.018261][ T4782] tipc_sendstream+0x55/0x70 [ 855.018287][ T4782] ? __pfx_tipc_sendstream+0x10/0x10 [ 855.018312][ T4782] sock_write_iter+0x49b/0x4f0 [ 855.018340][ T4782] ? __pfx_sock_write_iter+0x10/0x10 [ 855.018370][ T4782] ? bpf_lsm_file_permission+0x9/0x20 [ 855.018384][ T4782] ? security_file_permission+0x75/0x260 [ 855.018401][ T4782] vfs_write+0x61d/0xb90 [ 855.018418][ T4782] ? __pfx_vfs_write+0x10/0x10 [ 855.018434][ T4782] ? __fget_files+0x2a/0x420 [ 855.018454][ T4782] ksys_write+0x150/0x270 [ 855.018466][ T4782] ? __pfx_ksys_write+0x10/0x10 [ 855.018483][ T4782] do_syscall_64+0x14d/0xf80 [ 855.018494][ T4782] ? trace_irq_disable+0x3b/0x150 [ 855.018509][ T4782] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.018520][ T4782] ? clear_bhb_loop+0x40/0x90 [ 855.018533][ T4782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.018543][ T4782] RIP: 0033:0x7f582399c799 [ 855.018554][ T4782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 855.018564][ T4782] RSP: 002b:00007f582490e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 855.018576][ T4782] RAX: ffffffffffffffda RBX: 00007f5823c15fa0 RCX: 00007f582399c799 [ 855.018584][ T4782] RDX: 000000002000011a RSI: 0000200000000340 RDI: 0000000000000007 [ 855.018591][ T4782] RBP: 00007f582490e090 R08: 0000000000000000 R09: 0000000000000000 [ 855.018598][ T4782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 855.018604][ T4782] R13: 00007f5823c16038 R14: 00007f5823c15fa0 R15: 00007f5823d3fa48 [ 855.018620][ T4782] [ 855.377588][T15035] tipc: Subscription rejected, illegal request [ 855.674956][T26749] usb 7-1: new high-speed USB device number 88 using dummy_hcd [ 855.703013][ T4795] vcan0: tx address claim with dlc 0 [ 855.795978][ T4805] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4724'. [ 855.833970][T26749] usb 7-1: Using ep0 maxpacket: 8 [ 855.859633][T26749] usb 7-1: config 15 has an invalid interface number: 218 but max is 1 [ 855.874828][T26749] usb 7-1: config 15 has an invalid interface number: 213 but max is 1 [ 855.901579][T26749] usb 7-1: config 15 has no interface number 0 [ 855.919358][T26749] usb 7-1: config 15 has no interface number 1 [ 855.937780][T26749] usb 7-1: config 15 interface 218 altsetting 205 has an endpoint descriptor with address 0x1B, changing to 0xB [ 855.964938][T26749] usb 7-1: config 15 interface 218 altsetting 205 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 855.979366][T26749] usb 7-1: config 15 interface 218 altsetting 205 bulk endpoint 0x6 has invalid maxpacket 64 [ 855.991500][T26749] usb 7-1: config 15 interface 218 altsetting 205 has an invalid descriptor for endpoint zero, skipping [ 856.011678][T26749] usb 7-1: config 15 interface 218 altsetting 205 has a duplicate endpoint with address 0x5, skipping [ 856.024736][T26749] usb 7-1: config 15 interface 218 altsetting 205 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 856.037266][ T4821] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4726'. [ 856.046522][T26749] usb 7-1: config 15 interface 218 altsetting 205 has a duplicate endpoint with address 0xC, skipping [ 856.058879][T26749] usb 7-1: config 15 interface 218 altsetting 205 has a duplicate endpoint with address 0xB, skipping [ 856.096369][T26749] usb 7-1: config 15 interface 218 altsetting 205 has a duplicate endpoint with address 0xD, skipping [ 856.110521][T26749] usb 7-1: config 15 interface 218 altsetting 205 endpoint 0xE has invalid wMaxPacketSize 0 [ 856.127162][T26749] usb 7-1: config 15 interface 218 altsetting 205 has 12 endpoint descriptors, different from the interface descriptor's value: 11 [ 856.148789][T26749] usb 7-1: config 15 interface 213 altsetting 9 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 856.161154][T26749] usb 7-1: config 15 interface 213 altsetting 9 has a duplicate endpoint with address 0x6, skipping [ 856.199281][T26749] usb 7-1: config 15 interface 213 altsetting 9 has a duplicate endpoint with address 0x5, skipping [ 856.214882][T26749] usb 7-1: config 15 interface 213 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 856.226870][T26749] usb 7-1: config 15 interface 213 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 856.239622][T26749] usb 7-1: config 15 interface 213 altsetting 9 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 856.251052][T26749] usb 7-1: config 15 interface 213 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 856.281929][T26749] usb 7-1: config 15 interface 213 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 856.298666][T26749] usb 7-1: config 15 interface 213 altsetting 9 has a duplicate endpoint with address 0x2, skipping [ 856.310144][T26749] usb 7-1: config 15 interface 218 has no altsetting 0 [ 856.317360][T26749] usb 7-1: config 15 interface 213 has no altsetting 0 [ 856.329074][T26749] usb 7-1: Dual-Role OTG device on HNP port [ 856.336510][T26749] usb 7-1: New USB device found, idVendor=0403, idProduct=ff1d, bcdDevice=9d.40 [ 856.347011][T26749] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.355557][T26749] usb 7-1: Product: 鞕ꏽཆ鋮莊䶭휷ᖂ녘뭈쌞ᡃ뚢׭驧⬢ὃ๊⏨Ꮊຌ빔敜쵢⿴塩̟䯁㸜愕곷皙顥柄ⓠ⍡‖ፒ썸싌腅⤤㕙ڱᡅꗠ聩뤟橚궼ႎ휦䐲옽Ꜥ뒄ང뾷ﴠ샲잯㛐餥蚗뙼ꈕꊀ吗㾱㣏ᵫ扔ꚇ藌ꆘ鱕疴淴룗麮㏾벇藕왬唡ᙱ츜辮왫䲄迺劜⸞៼~Ｈﯢ嶻麟櫌왩 [ 856.411235][T26749] usb 7-1: Manufacturer: Є [ 856.417350][T26749] usb 7-1: SerialNumber: Р [ 856.487577][ T4777] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 856.752911][T26749] ftdi_sio 7-1:15.218: FTDI USB Serial Device converter detected [ 856.764718][T26749] ftdi_sio ttyUSB0: unknown device type: 0x9d40 [ 856.828192][T26749] ftdi_sio 7-1:15.213: FTDI USB Serial Device converter detected [ 856.862092][T26749] ftdi_sio ttyUSB1: unknown device type: 0x9d40 [ 856.944084][T26749] usb 7-1: USB disconnect, device number 88 [ 857.059520][T26749] ftdi_sio 7-1:15.218: device disconnected [ 857.096197][T26749] ftdi_sio 7-1:15.213: device disconnected [ 857.505744][ T8535] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 857.653812][ T8535] usb 3-1: Using ep0 maxpacket: 16 [ 857.662713][ T8535] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 857.680533][ T8535] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 857.720316][ T8535] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 857.732357][ T8535] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.742551][ T8535] usb 3-1: Product: syz [ 857.753316][ T8535] usb 3-1: Manufacturer: syz [ 857.766487][ T8535] usb 3-1: SerialNumber: syz [ 857.782827][ T8535] usb 3-1: config 0 descriptor?? [ 857.797044][ T8535] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 857.816005][ T8535] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 857.856165][ T5893] usb 8-1: new full-speed USB device number 62 using dummy_hcd [ 858.029645][ T5893] usb 8-1: config 0 has no interfaces? [ 858.045594][ T5893] usb 8-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 858.063749][ T5893] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.090999][ T5893] usb 8-1: Product: syz [ 858.096029][ T5893] usb 8-1: Manufacturer: syz [ 858.100661][ T5893] usb 8-1: SerialNumber: syz [ 858.125648][ T5893] usb 8-1: config 0 descriptor?? [ 858.235762][ T4909] tc_dump_action: action bad kind [ 858.340084][ T4896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 858.349270][ T4896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 858.384915][ T5956] usb 8-1: USB disconnect, device number 62 [ 858.395753][T15035] tipc: Subscription rejected, illegal request [ 858.407519][ T8535] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 858.433081][ T8535] em28xx 3-1:0.0: Config register raw data: 0x56 [ 858.632988][ T8535] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 858.640115][ T8535] em28xx 3-1:0.0: No AC97 audio processor [ 858.861265][ T4941] netlink: 'syz.6.4747': attribute type 2 has an invalid length. [ 858.869154][ T4941] netlink: 'syz.6.4747': attribute type 3 has an invalid length. [ 858.877662][ T4941] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4747'. [ 859.279663][ T4949] FAULT_INJECTION: forcing a failure. [ 859.279663][ T4949] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 859.302006][ T4949] CPU: 0 UID: 0 PID: 4949 Comm: syz.7.4750 Tainted: G L syzkaller #0 PREEMPT(full) [ 859.302028][ T4949] Tainted: [L]=SOFTLOCKUP [ 859.302032][ T4949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 859.302039][ T4949] Call Trace: [ 859.302043][ T4949] [ 859.302049][ T4949] dump_stack_lvl+0xe8/0x150 [ 859.302068][ T4949] should_fail_ex+0x412/0x560 [ 859.302087][ T4949] _copy_from_user+0x2d/0xb0 [ 859.302100][ T4949] __sys_sendto+0x2b0/0x710 [ 859.302112][ T4949] ? __pfx___sys_sendto+0x10/0x10 [ 859.302121][ T4949] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 859.302139][ T4949] ? __fget_files+0x3a0/0x420 [ 859.302160][ T4949] ? ksys_write+0x242/0x270 [ 859.302173][ T4949] ? __pfx_ksys_write+0x10/0x10 [ 859.302186][ T4949] __x64_sys_sendto+0xde/0x100 [ 859.302199][ T4949] do_syscall_64+0x14d/0xf80 [ 859.302213][ T4949] ? trace_irq_disable+0x3b/0x150 [ 859.302228][ T4949] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.302239][ T4949] ? clear_bhb_loop+0x40/0x90 [ 859.302251][ T4949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.302262][ T4949] RIP: 0033:0x7f582399c799 [ 859.302273][ T4949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 859.302281][ T4949] RSP: 002b:00007f582490e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 859.302293][ T4949] RAX: ffffffffffffffda RBX: 00007f5823c15fa0 RCX: 00007f582399c799 [ 859.302301][ T4949] RDX: 0000000000000036 RSI: 0000200000000080 RDI: 0000000000000003 [ 859.302308][ T4949] RBP: 00007f582490e090 R08: 00002000000001c0 R09: 0000000000000014 [ 859.302315][ T4949] R10: 0000000020004084 R11: 0000000000000246 R12: 0000000000000001 [ 859.302321][ T4949] R13: 00007f5823c16038 R14: 00007f5823c15fa0 R15: 00007f5823d3fa48 [ 859.302337][ T4949] [ 860.142301][ T5956] usb 3-1: USB disconnect, device number 47 [ 860.149229][ T5956] em28xx 3-1:0.0: Disconnecting em28xx [ 860.194318][ T5956] em28xx 3-1:0.0: Freeing device [ 860.240471][ T4976] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4755'. [ 860.462906][ T4989] xt_CT: You must specify a L4 protocol and not use inversions on it [ 860.760384][ T5003] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4762'. [ 860.793869][ T5003] vlan2: entered allmulticast mode [ 860.799609][ T5003] bridge1: entered allmulticast mode [ 860.815740][ T5003] bridge1: port 1(erspan0) entered blocking state [ 860.826112][ T5003] bridge1: port 1(erspan0) entered disabled state [ 860.841055][ T5003] erspan0: entered allmulticast mode [ 860.851302][ T5003] erspan0: entered promiscuous mode [ 860.857759][ T5003] bridge1: port 1(erspan0) entered blocking state [ 860.864306][ T5003] bridge1: port 1(erspan0) entered forwarding state [ 860.974429][ T5015] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4765'. [ 861.291182][ T5033] fuse: Unknown parameter 'fd0x0000000000000003' [ 861.417999][ T8534] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 861.604742][ T8534] usb 2-1: Using ep0 maxpacket: 16 [ 861.637959][ T8534] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 861.662534][ T8534] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 861.729632][ T5058] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 861.730456][ T5058] batadv1: entered promiscuous mode [ 861.731791][ T5058] team0: Port device batadv1 added [ 861.770095][ T8534] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.784415][ T8534] usb 2-1: config 0 descriptor?? [ 861.811554][ T8534] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input204 [ 861.993612][ T5027] input: syz0 as /devices/virtual/input/input205 [ 861.995053][ T5074] mac80211_hwsim hwsim39 syzkaller0: entered promiscuous mode [ 862.008572][ T5956] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 862.053433][ T5074] mac80211_hwsim hwsim39 syzkaller0: entered allmulticast mode [ 862.068178][ T5177] bcm5974 2-1:0.0: could not read from device [ 862.114397][ T5177] bcm5974 2-1:0.0: could not read from device [ 862.124414][ T8534] usb 2-1: USB disconnect, device number 24 [ 862.199713][ T5956] usb 3-1: config 2 has an invalid interface number: 88 but max is 0 [ 862.215755][ T5956] usb 3-1: config 2 has no interface number 0 [ 862.258903][ T5956] usb 3-1: config 2 interface 88 altsetting 7 endpoint 0x6 has invalid maxpacket 256, setting to 64 [ 862.302953][ T5956] usb 3-1: config 2 interface 88 altsetting 7 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 862.333322][ T5956] usb 3-1: config 2 interface 88 has no altsetting 0 [ 862.350616][ T5956] usb 3-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 862.375128][ T5956] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.399709][ T5956] usb 3-1: Product: syz [ 862.416225][ T5956] usb 3-1: Manufacturer: syz [ 862.438076][ T5956] usb 3-1: SerialNumber: syz [ 862.470250][ T5058] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 862.491919][ T5058] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 862.730598][ T5058] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 862.738268][ T5058] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 863.029504][ T5116] netlink: 'syz.1.4786': attribute type 2 has an invalid length. [ 863.044989][ T5116] netlink: 'syz.1.4786': attribute type 2 has an invalid length. [ 863.574738][ T8538] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 863.702272][ T5125] FAULT_INJECTION: forcing a failure. [ 863.702272][ T5125] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 863.753332][ T8538] usb 6-1: device descriptor read/64, error -71 [ 863.778591][ T5125] CPU: 1 UID: 0 PID: 5125 Comm: syz.6.4787 Tainted: G L syzkaller #0 PREEMPT(full) [ 863.778620][ T5125] Tainted: [L]=SOFTLOCKUP [ 863.778626][ T5125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 863.778638][ T5125] Call Trace: [ 863.778645][ T5125] [ 863.778654][ T5125] dump_stack_lvl+0xe8/0x150 [ 863.778684][ T5125] should_fail_ex+0x412/0x560 [ 863.778714][ T5125] _copy_from_user+0x2d/0xb0 [ 863.778737][ T5125] ___sys_sendmsg+0x1c6/0x360 [ 863.778762][ T5125] ? __pfx____sys_sendmsg+0x10/0x10 [ 863.778811][ T5125] ? __fget_files+0x2a/0x420 [ 863.778838][ T5125] ? __fget_files+0x3a0/0x420 [ 863.778870][ T5125] __x64_sys_sendmsg+0x1bd/0x2a0 [ 863.778894][ T5125] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 863.778923][ T5125] ? __pfx_ksys_write+0x10/0x10 [ 863.778956][ T5125] do_syscall_64+0x14d/0xf80 [ 863.778976][ T5125] ? trace_irq_disable+0x3b/0x150 [ 863.779003][ T5125] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.779022][ T5125] ? clear_bhb_loop+0x40/0x90 [ 863.779045][ T5125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.779063][ T5125] RIP: 0033:0x7f01c1b9c799 [ 863.779082][ T5125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 863.779099][ T5125] RSP: 002b:00007f01c29f1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 863.779120][ T5125] RAX: ffffffffffffffda RBX: 00007f01c1e15fa0 RCX: 00007f01c1b9c799 [ 863.779143][ T5125] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 863.779156][ T5125] RBP: 00007f01c29f1090 R08: 0000000000000000 R09: 0000000000000000 [ 863.779168][ T5125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 863.779179][ T5125] R13: 00007f01c1e16038 R14: 00007f01c1e15fa0 R15: 00007f01c1f3fa48 [ 863.779208][ T5125] [ 864.293941][ T8538] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 864.371120][ T5136] fuse: Bad value for 'rootmode' [ 864.463334][ T1633] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 864.483303][ T8538] usb 6-1: device descriptor read/64, error -71 [ 864.603805][ T8538] usb usb6-port1: attempt power cycle [ 864.613445][ T1633] usb 2-1: Using ep0 maxpacket: 16 [ 864.630710][ T1633] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 864.641666][ T5144] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4791'. [ 864.650769][ T1633] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 864.673722][ T1633] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 864.715172][ T1633] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.768733][ T1633] usb 2-1: config 0 descriptor?? [ 864.832413][ T1633] pxrc 2-1:0.0: Could not find endpoint [ 864.852033][ T1633] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 864.983420][ T8538] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 865.040034][ T8538] usb 6-1: device descriptor read/8, error -71 [ 865.293798][ T8538] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 865.331439][ T8538] usb 6-1: device descriptor read/8, error -71 [ 865.453591][ T8538] usb usb6-port1: unable to enumerate USB device [ 865.560744][ T5956] asix 3-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 865.571851][ T5956] asix 3-1:2.88: probe with driver asix failed with error -71 [ 865.590188][ T5956] usb 3-1: USB disconnect, device number 48 [ 865.759559][ T5169] netlink: 'syz.7.4794': attribute type 3 has an invalid length. [ 865.778163][ T5169] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4794'. [ 865.818747][ T5169] netlink: 'syz.7.4794': attribute type 3 has an invalid length. [ 865.829846][ T5169] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4794'. [ 865.942093][ T5186] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 866.242903][ T5204] FAULT_INJECTION: forcing a failure. [ 866.242903][ T5204] name failslab, interval 1, probability 0, space 0, times 0 [ 866.257321][ T5204] CPU: 0 UID: 0 PID: 5204 Comm: syz.6.4804 Tainted: G L syzkaller #0 PREEMPT(full) [ 866.257351][ T5204] Tainted: [L]=SOFTLOCKUP [ 866.257359][ T5204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 866.257371][ T5204] Call Trace: [ 866.257379][ T5204] [ 866.257388][ T5204] dump_stack_lvl+0xe8/0x150 [ 866.257418][ T5204] should_fail_ex+0x412/0x560 [ 866.257451][ T5204] should_failslab+0xa8/0x100 [ 866.257475][ T5204] ? skb_clone+0x212/0x3a0 [ 866.257497][ T5204] kmem_cache_alloc_noprof+0x87/0x650 [ 866.257516][ T5204] ? __netlink_lookup+0xc6/0x8b0 [ 866.257541][ T5204] skb_clone+0x212/0x3a0 [ 866.257566][ T5204] __netlink_deliver_tap+0x404/0x850 [ 866.257605][ T5204] ? netlink_deliver_tap+0x2e/0x1b0 [ 866.257633][ T5204] netlink_deliver_tap+0x19c/0x1b0 [ 866.257662][ T5204] netlink_unicast+0x7e3/0x9b0 [ 866.257695][ T5204] ? __pfx_netlink_unicast+0x10/0x10 [ 866.257722][ T5204] ? netlink_sendmsg+0x650/0xb40 [ 866.257747][ T5204] ? skb_put+0x11b/0x210 [ 866.257770][ T5204] netlink_sendmsg+0x813/0xb40 [ 866.257806][ T5204] ? __pfx_netlink_sendmsg+0x10/0x10 [ 866.257838][ T5204] ? aa_sock_msg_perm+0xf1/0x1b0 [ 866.257867][ T5204] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 866.257892][ T5204] ____sys_sendmsg+0x972/0x9f0 [ 866.257921][ T5204] ? __pfx_____sys_sendmsg+0x10/0x10 [ 866.257952][ T5204] ? import_iovec+0x73/0xa0 [ 866.257982][ T5204] ___sys_sendmsg+0x2a5/0x360 [ 866.258009][ T5204] ? __pfx____sys_sendmsg+0x10/0x10 [ 866.258063][ T5204] ? __fget_files+0x2a/0x420 [ 866.258089][ T5204] ? __fget_files+0x3a0/0x420 [ 866.258125][ T5204] __x64_sys_sendmsg+0x1bd/0x2a0 [ 866.258150][ T5204] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 866.258180][ T5204] ? __pfx_ksys_write+0x10/0x10 [ 866.258213][ T5204] do_syscall_64+0x14d/0xf80 [ 866.258233][ T5204] ? trace_irq_disable+0x3b/0x150 [ 866.258259][ T5204] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.258278][ T5204] ? clear_bhb_loop+0x40/0x90 [ 866.258302][ T5204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.258324][ T5204] RIP: 0033:0x7f01c1b9c799 [ 866.258342][ T5204] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 866.258358][ T5204] RSP: 002b:00007f01c29f1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 866.258378][ T5204] RAX: ffffffffffffffda RBX: 00007f01c1e15fa0 RCX: 00007f01c1b9c799 [ 866.258392][ T5204] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 866.258404][ T5204] RBP: 00007f01c29f1090 R08: 0000000000000000 R09: 0000000000000000 [ 866.258416][ T5204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 866.258428][ T5204] R13: 00007f01c1e16038 R14: 00007f01c1e15fa0 R15: 00007f01c1f3fa48 [ 866.258458][ T5204] [ 866.681306][ T5205] binder: 5197:5205 ioctl ae80 0 returned -22 [ 867.123078][ T5224] tc_dump_action: action bad kind [ 867.208341][T15024] tipc: Subscription rejected, illegal request [ 867.228680][ T5956] usb 2-1: USB disconnect, device number 25 [ 868.085454][ T5267] FAULT_INJECTION: forcing a failure. [ 868.085454][ T5267] name failslab, interval 1, probability 0, space 0, times 0 [ 868.102715][ T5267] CPU: 0 UID: 0 PID: 5267 Comm: syz.2.4819 Tainted: G L syzkaller #0 PREEMPT(full) [ 868.102745][ T5267] Tainted: [L]=SOFTLOCKUP [ 868.102752][ T5267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 868.102765][ T5267] Call Trace: [ 868.102773][ T5267] [ 868.102795][ T5267] dump_stack_lvl+0xe8/0x150 [ 868.102827][ T5267] should_fail_ex+0x412/0x560 [ 868.102859][ T5267] should_failslab+0xa8/0x100 [ 868.102883][ T5267] ? sctp_chunkify+0x5a/0x260 [ 868.102911][ T5267] kmem_cache_alloc_noprof+0x87/0x650 [ 868.102940][ T5267] sctp_chunkify+0x5a/0x260 [ 868.102970][ T5267] _sctp_make_chunk+0x122/0x290 [ 868.103001][ T5267] sctp_make_datafrag_empty+0x12a/0x240 [ 868.103031][ T5267] ? __pfx_sctp_make_datafrag_empty+0x10/0x10 [ 868.103067][ T5267] ? sctp_user_addto_chunk+0xa8/0x240 [ 868.103100][ T5267] sctp_datamsg_from_user+0x729/0xef0 [ 868.103144][ T5267] sctp_sendmsg_to_asoc+0x1416/0x1900 [ 868.103181][ T5267] ? sctp_transport_put+0xd2/0x150 [ 868.103207][ T5267] ? sctp_epaddr_lookup_transport+0x925/0x9d0 [ 868.103232][ T5267] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 868.103254][ T5267] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 868.103273][ T5267] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 868.103292][ T5267] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 868.103309][ T5267] ? sctp_sendmsg_check_sflags+0x18a/0x330 [ 868.103333][ T5267] sctp_sendmsg+0x1b3d/0x2c10 [ 868.103364][ T5267] ? __pfx_sctp_sendmsg+0x10/0x10 [ 868.103385][ T5267] ? aa_sk_perm+0x6d5/0x900 [ 868.103417][ T5267] ? __pfx_aa_sk_perm+0x10/0x10 [ 868.103446][ T5267] ? sock_rps_record_flow+0x19/0x400 [ 868.103468][ T5267] ? __pfx_inet_sendmsg+0x10/0x10 [ 868.103491][ T5267] ? inet_sendmsg+0x2f4/0x370 [ 868.103512][ T5267] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 868.103534][ T5267] ? __pfx_inet_sendmsg+0x10/0x10 [ 868.103556][ T5267] __sys_sendto+0x5de/0x710 [ 868.103579][ T5267] ? __pfx___sys_sendto+0x10/0x10 [ 868.103597][ T5267] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 868.103632][ T5267] ? __fget_files+0x3a0/0x420 [ 868.103668][ T5267] ? ksys_write+0x242/0x270 [ 868.103690][ T5267] ? __pfx_ksys_write+0x10/0x10 [ 868.103717][ T5267] __x64_sys_sendto+0xde/0x100 [ 868.103741][ T5267] do_syscall_64+0x14d/0xf80 [ 868.103762][ T5267] ? trace_irq_disable+0x3b/0x150 [ 868.103788][ T5267] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.103809][ T5267] ? clear_bhb_loop+0x40/0x90 [ 868.103832][ T5267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.103852][ T5267] RIP: 0033:0x7fb08d59c799 [ 868.103871][ T5267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 868.103888][ T5267] RSP: 002b:00007fb08e3a9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 868.103909][ T5267] RAX: ffffffffffffffda RBX: 00007fb08d816090 RCX: 00007fb08d59c799 [ 868.103924][ T5267] RDX: 0000000000034000 RSI: 0000200000000300 RDI: 0000000000000003 [ 868.103937][ T5267] RBP: 00007fb08e3a9090 R08: 0000200000000380 R09: 0000000000000010 [ 868.103951][ T5267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 868.103964][ T5267] R13: 00007fb08d816128 R14: 00007fb08d816090 R15: 00007fb08d93fa48 [ 868.103995][ T5267] [ 869.239393][ T5279] fuse: Unknown parameter 'Ei1' [ 869.535884][ T5281] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4825'. [ 870.664499][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.677785][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 873.467127][ C1] sched: DL replenish lagged too much [ 931.525283][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.538421][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 945.917095][ T5823] Bluetooth: hci4: command 0x0406 tx timeout [ 1014.665730][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1014.678858][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1027.353148][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1027.360132][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5289/1:b..l [ 1027.368578][ C1] rcu: (detected by 1, t=10503 jiffies, g=145473, q=952 ncpus=2) [ 1027.376391][ C1] task:syz.5.4826 state:R running task stack:24960 pid:5289 tgid:5289 ppid:31142 task_flags:0x40044c flags:0x00080002 [ 1027.391009][ C1] Call Trace: [ 1027.394296][ C1] [ 1027.397228][ C1] __schedule+0x15dd/0x52d0 [ 1027.401764][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1027.406708][ C1] ? __pfx___schedule+0x10/0x10 [ 1027.411563][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1027.416521][ C1] preempt_schedule_irq+0x4d/0xa0 [ 1027.421548][ C1] irqentry_exit+0x599/0x620 [ 1027.426138][ C1] ? trace_irq_disable+0x3b/0x150 [ 1027.431175][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1027.437162][ C1] RIP: 0010:unwind_next_frame+0x530/0x23c0 [ 1027.442985][ C1] Code: b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 75 27 49 63 07 4c 01 f8 49 8d 4f 04 4c 39 e0 48 0f 46 e9 49 8d 47 fc 48 0f 47 d8 <4d> 0f 46 ef 48 39 dd 76 a2 e9 76 fd ff ff 44 89 f9 80 e1 07 80 c1 [ 1027.462591][ C1] RSP: 0018:ffffc90005c2f318 EFLAGS: 00000287 [ 1027.468664][ C1] RAX: ffffffff90321f38 RBX: ffffffff90321f3c RCX: ffffffff90321f40 [ 1027.476636][ C1] RDX: ffffffff90321f3c RSI: ffffffff90b24f4c RDI: ffffffff8c27c1a0 [ 1027.484609][ C1] RBP: ffffffff90321f40 R08: 0000000000000001 R09: ffffffff8e75e520 [ 1027.492580][ C1] R10: ffffc90005c2f438 R11: ffffffff81b0c260 R12: ffffffff82190dc5 [ 1027.500558][ C1] R13: ffffffff90321f3c R14: ffffc90005c2f3e8 R15: ffffffff90321f3c [ 1027.508540][ C1] ? exit_mmap+0x4b5/0xa10 [ 1027.512960][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1027.519123][ C1] ? unwind_next_frame+0xd4/0x23c0 [ 1027.524249][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 1027.529371][ C1] ? exit_mmap+0x4b6/0xa10 [ 1027.533788][ C1] ? exit_mmap+0x4b6/0xa10 [ 1027.538206][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1027.544361][ C1] arch_stack_walk+0x11b/0x150 [ 1027.549140][ C1] ? exit_mmap+0x4b6/0xa10 [ 1027.553561][ C1] stack_trace_save+0xa9/0x100 [ 1027.558329][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1027.563703][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 1027.568472][ C1] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1027.574018][ C1] ? kmem_cache_free+0x15b/0x630 [ 1027.578965][ C1] ? tear_down_vmas+0x312/0x520 [ 1027.583824][ C1] ? exit_mmap+0x4b6/0xa10 [ 1027.588241][ C1] ? __mmput+0x118/0x430 [ 1027.592492][ C1] ? exit_mm+0x168/0x220 [ 1027.596734][ C1] ? do_exit+0x6a2/0x23c0 [ 1027.601066][ C1] ? get_signal+0x1284/0x1330 [ 1027.605746][ C1] ? arch_do_signal_or_restart+0xbc/0x830 [ 1027.611473][ C1] kasan_save_stack+0x3e/0x60 [ 1027.616159][ C1] ? kasan_save_stack+0x3e/0x60 [ 1027.621018][ C1] ? kasan_record_aux_stack+0xbd/0xd0 [ 1027.626407][ C1] ? kmem_cache_free+0x426/0x630 [ 1027.631358][ C1] ? tear_down_vmas+0x312/0x520 [ 1027.636213][ C1] ? exit_mmap+0x4b6/0xa10 [ 1027.640673][ C1] kasan_record_aux_stack+0xbd/0xd0 [ 1027.645882][ C1] kmem_cache_free+0x426/0x630 [ 1027.650650][ C1] ? tear_down_vmas+0x312/0x520 [ 1027.655508][ C1] tear_down_vmas+0x312/0x520 [ 1027.660195][ C1] exit_mmap+0x4b6/0xa10 [ 1027.664441][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 1027.669228][ C1] ? __pfx_exit_aio+0x10/0x10 [ 1027.673926][ C1] ? uprobe_clear_state+0x27c/0x290 [ 1027.679133][ C1] __mmput+0x118/0x430 [ 1027.683215][ C1] exit_mm+0x168/0x220 [ 1027.687288][ C1] do_exit+0x6a2/0x23c0 [ 1027.691451][ C1] ? __pfx_do_exit+0x10/0x10 [ 1027.696038][ C1] ? cgroup1_freezing+0x20/0x350 [ 1027.700985][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1027.706021][ C1] do_group_exit+0x21b/0x2d0 [ 1027.710615][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1027.715814][ C1] get_signal+0x1284/0x1330 [ 1027.720339][ C1] arch_do_signal_or_restart+0xbc/0x830 [ 1027.725887][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1027.732069][ C1] exit_to_user_mode_loop+0x86/0x480 [ 1027.737359][ C1] ? rcu_is_watching+0x15/0xb0 [ 1027.742137][ C1] do_syscall_64+0x32d/0xf80 [ 1027.746788][ C1] ? trace_irq_disable+0x3b/0x150 [ 1027.751830][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1027.757905][ C1] ? clear_bhb_loop+0x40/0x90 [ 1027.762591][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1027.768488][ C1] RIP: 0033:0x7fba18f9d589 [ 1027.772903][ C1] RSP: 002b:00007fba1933f908 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 1027.781320][ C1] RAX: fffffffffffffffc RBX: 00007fba18f58b20 RCX: 00007fba18f9d589 [ 1027.789296][ C1] RDX: 00007fba18f58b20 RSI: 0000000000000058 RDI: 00007fba1933f960 [ 1027.797269][ C1] RBP: 00007fba171f66c0 R08: 00007fba171f66c0 R09: 00007fba1933fa47 [ 1027.805241][ C1] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffe8 [ 1027.813214][ C1] R13: 000000000000006e R14: 00007fba1933f960 R15: 00007fba1933fa48 [ 1027.821204][ C1]